diff --git a/modules/postgresql/postgresql.tf b/modules/postgresql/postgresql.tf index 8ca12c4..09cdea3 100644 --- a/modules/postgresql/postgresql.tf +++ b/modules/postgresql/postgresql.tf @@ -90,6 +90,32 @@ resource "openstack_networking_secgroup_rule_v2" "postgresql_ingress_bootpc" { port_range_max = 68 } +# +# Monitoring: the Prometheus postgres_exporter, installed on the server by the +# postgresql role (see infrastructure-playbooks, postgresql-cloud.yml). +# +# It is a group of its own, on the MAIN network port, because that is where the +# exporter is scraped from: the two groups above live on the service port, in +# the dedicated database network, which Prometheus has no reason to join. Only +# the server gets it, so nothing else in the project has 9187 opened. +# +resource "openstack_networking_secgroup_v2" "postgresql_monitoring" { + name = "prometheus_access_to_the_postgresql_exporter" + delete_default_rules = "true" + description = "Prometheus access to the postgres_exporter of the PostgreSQL server" +} + +resource "openstack_networking_secgroup_rule_v2" "postgresql_exporter_ingress" { + security_group_id = openstack_networking_secgroup_v2.postgresql_monitoring.id + description = "Connections to the postgres_exporter port ${var.postgresql_data.exporter_port} from Prometheus" + direction = "ingress" + ethertype = "IPv4" + protocol = "tcp" + port_range_min = var.postgresql_data.exporter_port + port_range_max = var.postgresql_data.exporter_port + remote_ip_prefix = var.prometheus_cidr +} + # # Security group of the clients: it goes on the port that every client of the # database has on the dedicated network @@ -164,11 +190,16 @@ resource "openstack_blockstorage_volume_v3" "postgresql_wal_vol" { # security groups do not depend on the life cycle of the VM # resource "openstack_networking_port_v2" "postgresql_main_port" { - name = "${var.postgresql_data.name}-main-port" - description = "Administration port of the PostgreSQL server on the main private network" - admin_state_up = true - network_id = var.main_private_network_id - security_group_ids = [var.default_security_group_id] + name = "${var.postgresql_data.name}-main-port" + description = "Administration port of the PostgreSQL server on the main private network" + admin_state_up = true + network_id = var.main_private_network_id + # The default group carries SSH from the jump proxy, ICMP, the node exporter + # and the egress rule; the monitoring one adds the postgres_exporter port + security_group_ids = [ + var.default_security_group_id, + openstack_networking_secgroup_v2.postgresql_monitoring.id, + ] fixed_ip { subnet_id = var.main_private_subnet_id ip_address = var.postgresql_main_ip diff --git a/modules/postgresql/variables-postgresql.tf b/modules/postgresql/variables-postgresql.tf index 7dab962..fe3117c 100644 --- a/modules/postgresql/variables-postgresql.tf +++ b/modules/postgresql/variables-postgresql.tf @@ -31,6 +31,10 @@ variable "postgresql_data" { allocation_pool_end = optional(string, "192.168.3.254") # Port the service listens on port = optional(number, 5432) + # Port of the Prometheus postgres_exporter, on the MAIN network: the + # exporter is monitoring, not database traffic, and it is scraped over the + # administration interface + exporter_port = optional(number, 9187) # Data and WAL volumes. m1.large is RAM 8 - VCPUs 4 vol_data_name = optional(string, "postgresql-data") vol_data_size = optional(number, 100) @@ -49,6 +53,14 @@ variable "postgresql_main_ip" { description = "Address of the server on the main private network, used for the administration (ansible, monitoring, backups)" } +# Also part of the address plan of the project, same rationale: it is the +# address of a shared service, so it is declared once in s2i2s/variables and +# passed in, instead of being duplicated as a module default +variable "prometheus_cidr" { + type = string + description = "CIDR of the Prometheus server, the only source allowed to reach the postgres_exporter" +} + # Data that comes from the network/DNS and project setup workspaces variable "main_private_network_id" { type = string diff --git a/s2i2s/postgresql/main.tf b/s2i2s/postgresql/main.tf index 5a4ebb9..480e608 100644 --- a/s2i2s/postgresql/main.tf +++ b/s2i2s/postgresql/main.tf @@ -66,6 +66,7 @@ module "postgresql" { # Address plan of the project. The sizing and the dedicated network come from # the module defaults postgresql_main_ip = local.basic_services_ip.postgresql + prometheus_cidr = local.basic_services_ip.prometheus_cidr main_private_network_id = local.main_private_network_id main_private_subnet_id = local.main_private_subnet_id diff --git a/s2i2s/postgresql/terraform.tfstate b/s2i2s/postgresql/terraform.tfstate index c817e76..d0c023d 100644 --- a/s2i2s/postgresql/terraform.tfstate +++ b/s2i2s/postgresql/terraform.tfstate @@ -1 +1 @@ -{"version":4,"terraform_version":"1.11.6","serial":3,"lineage":"de1b1d3d-9399-3658-7800-997367c90ac6","outputs":{"dns_zone":{"value":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"postgresql_access_security_group_id":{"value":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","type":"string"},"postgresql_client_access_security_group_id":{"value":"09df1cb3-0654-47a0-be50-55bb79b011c9","type":"string"},"postgresql_client_access_security_group_name":{"value":"vm_access_to_the_postgresql_service","type":"string"},"postgresql_main_ip":{"value":"10.10.0.162","type":"string"},"postgresql_network":{"value":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"Network used to communicate with the postgresql service","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"2b4f3653-5016-427f-9ae2-31144f691a93","mtu":8942,"name":"postgresql-srv-net","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[],"shared":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"type":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}]},"postgresql_network_id":{"value":"2b4f3653-5016-427f-9ae2-31144f691a93","type":"string"},"postgresql_port":{"value":5432,"type":"number"},"postgresql_server_data":{"value":{"allocation_pool_end":"192.168.3.254","allocation_pool_start":"192.168.0.100","boot_vol_size":20,"description":"PostgreSQL server","flavor":"m1.large","name":"postgresql","network_cidr":"192.168.0.0/22","network_description":"Network used to communicate with the postgresql service","network_name":"postgresql-srv-net","port":5432,"server_cidr":"192.168.0.5/32","server_ip":"192.168.0.5","subnet_description":"Subnet used to connect to the postgresql service","subnet_name":"postgresql-srv-subnet","vol_data_device":"/dev/vdb","vol_data_name":"postgresql-data","vol_data_size":100,"vol_wal_device":"/dev/vdc","vol_wal_name":"postgresql-wal","vol_wal_size":100,"volume_type":"CephSSD"},"type":["object",{"allocation_pool_end":"string","allocation_pool_start":"string","boot_vol_size":"number","description":"string","flavor":"string","name":"string","network_cidr":"string","network_description":"string","network_name":"string","port":"number","server_cidr":"string","server_ip":"string","subnet_description":"string","subnet_name":"string","vol_data_device":"string","vol_data_name":"string","vol_data_size":"number","vol_wal_device":"string","vol_wal_name":"string","vol_wal_size":"number","volume_type":"string"}]},"postgresql_server_id":{"value":"1078fcff-0eee-48a7-b061-a2ceaedc844c","type":"string"},"postgresql_server_ip":{"value":"192.168.0.5","type":"string"},"postgresql_server_name":{"value":"postgresql","type":"string"},"postgresql_subnet":{"value":{"all_tags":[],"allocation_pool":[{"end":"192.168.3.254","start":"192.168.0.100"}],"cidr":"192.168.0.0/22","description":"Subnet used to connect to the postgresql service","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"","id":"228da08f-2b49-4d76-bec4-abab0510f275","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"postgresql-srv-subnet","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_gateway":true,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"type":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}]},"postgresql_subnet_id":{"value":"228da08f-2b49-4d76-bec4-abab0510f275","type":"string"}},"resources":[{"mode":"data","type":"terraform_remote_state","name":"privnet_dns_router","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../main_net_dns_router/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"almalinux_9":{"name":"AlmaLinux-9.8 20260526","user_data_file":"../../s2i2s_openstack_vm_data_scripts/almalinux9.sh","uuid":"172f1c52-fa06-4d7d-9db7-0735ab6ef403"},"availability_zone_no_gpu_name":"cnr-isti-nova-a","availability_zone_with_gpu_name":"cnr-isti-nova-gpu-a","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"centos_7":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","el7_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","external_gateway_ip":[{"ip_address":"146.48.30.6","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","flavor_list":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"floating_ip_pools":{"main_public_ip_pool":"external-network"},"main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","main_region":"isti_area_pi_1","main_subnet_network":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"policy_list":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"}},"type":["object",{"almalinux_9":["map","string"],"availability_zone_no_gpu_name":"string","availability_zone_with_gpu_name":"string","availability_zones_names":["map","string"],"centos_7":["map","string"],"default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","el7_data_file":"string","external_gateway_ip":["list",["object",{"ip_address":"string","subnet_id":"string"}]],"external_network":["map","string"],"external_network_id":"string","flavor_list":["map","string"],"floating_ip_pools":["map","string"],"main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_network_id":"string","main_region":"string","main_subnet_network":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"policy_list":["map","string"],"resolvers_ip":["list","string"],"ssh_sources":["map","string"],"ubuntu2204_data_file":"string","ubuntu_2204":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"data","type":"terraform_remote_state","name":"project_setup","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../project-setup/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"access_to_the_jump_proxy":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"acme_challenge_hostname":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"basic_services_ip":{"ca":"10.10.0.4","ca_cidr":"10.10.0.4/32","forgejo":"10.10.0.165","forgejo_cidr":"10.10.0.165/32","haproxy_l7_1":"10.10.0.11","haproxy_l7_1_cidr":"10.10.0.11/32","haproxy_l7_2":"10.10.0.12","haproxy_l7_2_cidr":"10.10.0.12/32","keycloak_1":"10.10.0.163","keycloak_1_cidr":"10.10.0.163/32","keycloak_2":"10.10.0.164","keycloak_2_cidr":"10.10.0.164/32","octavia_main":"10.10.0.20","octavia_main_cidr":"10.10.0.20/32","postgresql":"10.10.0.162","postgresql_cidr":"10.10.0.162/32","prometheus":"10.10.0.10","prometheus_cidr":"10.10.0.10/32","ssh_jump":"10.10.0.5","ssh_jump_cidr":"10.10.0.5/32"},"debugging":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"default_security_group":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"default_security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","floating_ip_pools":{"main_public_ip_pool":"external-network"},"haproxy_l7_data":{"flavor":"m1.medium","name":"main-haproxy-l7","vm_count":"2"},"internal_ca_data":{"flavor":"m1.small","name":"ca"},"internal_ca_id":"286b7a4d-33c6-451f-9019-d9fd79265181","main_haproxy_l7_ids":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"main_haproxy_l7_ip":["10.10.0.11","10.10.0.12"],"main_lb_to_haproxy_l7_security_group":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"main_loadbalancer_hostname":"main-lb.s2i2s.cloud.isti.cnr.it.","main_loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","main_loadbalancer_ip":"10.10.0.20","main_loadbalancer_public_ip":"146.48.30.30","main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_subnet":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_region":"isti_area_pi_1","main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"prometheus_access_from_grafana":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"prometheus_hostname":"prometheus.s2i2s.cloud.isti.cnr.it.","prometheus_public_ip":"146.48.31.67","prometheus_server_data":{"flavor":"m1.medium","name":"prometheus","public_grafana_server_cidr":"146.48.28.103/32","vol_data_device":"/dev/vdb","vol_data_name":"prometheus-data","vol_data_size":"100"},"prometheus_server_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","public_web":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"restricted_web":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"ssh_jump_proxy":{"flavor":"m2.small","name":"ssh-jump-proxy"},"ssh_jump_proxy_hostname":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","ssh_jump_proxy_id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","ssh_jump_proxy_public_ip":"146.48.31.105","ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"traffic_from_main_haproxy":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu2404_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"ubuntu_2404":{"name":"Ubuntu-Noble-24.04.img","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075"}},"type":["object",{"access_to_the_jump_proxy":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"acme_challenge_hostname":"string","availability_zones_names":["map","string"],"basic_services_ip":["map","string"],"debugging":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"default_security_group":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"default_security_group_id":"string","default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","floating_ip_pools":["map","string"],"haproxy_l7_data":["map","string"],"internal_ca_data":["map","string"],"internal_ca_id":"string","main_haproxy_l7_ids":["tuple",["string","string"]],"main_haproxy_l7_ip":["list","string"],"main_lb_to_haproxy_l7_security_group":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"main_loadbalancer_hostname":"string","main_loadbalancer_id":"string","main_loadbalancer_ip":"string","main_loadbalancer_public_ip":"string","main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_subnet":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_region":"string","main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"prometheus_access_from_grafana":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"prometheus_hostname":"string","prometheus_public_ip":"string","prometheus_server_data":["map","string"],"prometheus_server_id":"string","public_web":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"resolvers_ip":["list","string"],"restricted_web":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"ssh_jump_proxy":["map","string"],"ssh_jump_proxy_hostname":"string","ssh_jump_proxy_id":"string","ssh_jump_proxy_public_ip":"string","ssh_sources":["map","string"],"traffic_from_main_haproxy":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"ubuntu2204_data_file":"string","ubuntu2404_data_file":"string","ubuntu_2204":["map","string"],"ubuntu_2404":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_blockstorage_volume_v3","name":"postgresql_data_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"PostgreSQL data directory","enable_online_resize":true,"id":"4791f6e7-ba22-460a-a1ee-9a1aa48373da","image_id":null,"metadata":{},"name":"postgresql-data","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_blockstorage_volume_v3","name":"postgresql_wal_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"PostgreSQL write ahead log","enable_online_resize":true,"id":"71f2b8cc-7a1b-4983-ae62-84dd562f0e6c","image_id":null,"metadata":{},"name":"postgresql-wal","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_compute_instance_v2","name":"postgresql_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.162","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":20,"volume_type":""}],"config_drive":null,"created":"2026-08-11 15:43:42 +0000 UTC","flavor_id":"9","flavor_name":"m1.large","force_delete":false,"hypervisor_hostname":"","id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"postgresql","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.162","fixed_ip_v6":"","mac":"fa:16:3e:55:cb:a3","name":"s2i2s-proj-main","port":"59e7f753-f4b5-453a-ab6e-6c318fdfb005","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"},{"access_network":false,"fixed_ip_v4":"192.168.0.5","fixed_ip_v6":"","mac":"fa:16:3e:91:f5:79","name":"postgresql-srv-net","port":"c84112f1-6c1b-4ff8-869a-aaf802d7e73e","uuid":"2b4f3653-5016-427f-9ae2-31144f691a93"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["access_to_the_postgresql_service","default_for_all"],"stop_before_destroy":false,"tags":null,"timeouts":null,"updated":"2026-08-11 15:44:25 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_port_v2.postgresql_main_port","module.postgresql.openstack_networking_port_v2.postgresql_service_port","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_compute_volume_attach_v2","name":"postgresql_data_attach","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdb","id":"1078fcff-0eee-48a7-b061-a2ceaedc844c/4791f6e7-ba22-460a-a1ee-9a1aa48373da","instance_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"4791f6e7-ba22-460a-a1ee-9a1aa48373da"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_blockstorage_volume_v3.postgresql_data_vol","module.postgresql.openstack_compute_instance_v2.postgresql_server","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_port_v2.postgresql_main_port","module.postgresql.openstack_networking_port_v2.postgresql_service_port","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_compute_volume_attach_v2","name":"postgresql_wal_attach","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdc","id":"1078fcff-0eee-48a7-b061-a2ceaedc844c/71f2b8cc-7a1b-4983-ae62-84dd562f0e6c","instance_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"71f2b8cc-7a1b-4983-ae62-84dd562f0e6c"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_blockstorage_volume_v3.postgresql_data_vol","module.postgresql.openstack_blockstorage_volume_v3.postgresql_wal_vol","module.postgresql.openstack_compute_instance_v2.postgresql_server","module.postgresql.openstack_compute_volume_attach_v2.postgresql_data_attach","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_port_v2.postgresql_main_port","module.postgresql.openstack_networking_port_v2.postgresql_service_port","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_dns_recordset_v2","name":"postgresql_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"description":"Address of the PostgreSQL server on the main private network","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/f182c646-bc17-4c62-85b1-30dac79d3f72","name":"postgresql.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["10.10.0.162"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_network_v2","name":"postgresql_net","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"Network used to communicate with the postgresql service","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"2b4f3653-5016-427f-9ae2-31144f691a93","mtu":8942,"name":"postgresql-srv-net","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[],"shared":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_port_v2","name":"postgresql_main_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.162"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Administration port of the PostgreSQL server on the main private network","device_id":"","device_owner":"","dns_assignment":[{"fqdn":"host-10-10-0-162.internal-cloud.isti.cnr.it.","hostname":"host-10-10-0-162","ip_address":"10.10.0.162"}],"dns_name":"","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.162","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"59e7f753-f4b5-453a-ab6e-6c318fdfb005","mac_address":"fa:16:3e:55:cb:a3","name":"postgresql-main-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_port_v2","name":"postgresql_service_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["192.168.0.5"],"all_security_group_ids":["d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Service port of the PostgreSQL server on the dedicated network","device_id":"","device_owner":"","dns_assignment":[{"fqdn":"host-192-168-0-5.internal-cloud.isti.cnr.it.","hostname":"host-192-168-0-5","ip_address":"192.168.0.5"}],"dns_name":"","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"192.168.0.5","subnet_id":"228da08f-2b49-4d76-bec4-abab0510f275"}],"id":"c84112f1-6c1b-4ff8-869a-aaf802d7e73e","mac_address":"fa:16:3e:91:f5:79","name":"postgresql-service-port","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8"],"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_egress_bootps","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP requests on the dedicated network","direction":"egress","ethertype":"IPv4","id":"ef82cbd7-690a-424b-b334-7b88aea7fd54","port_range_max":67,"port_range_min":67,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_egress_icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"ICMP to the PostgreSQL server","direction":"egress","ethertype":"IPv4","id":"1ff0ace1-0c92-43e3-a006-5e47ef006f9a","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.5/32","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_egress_postgresql","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Connections to port 5432 of the PostgreSQL server","direction":"egress","ethertype":"IPv4","id":"fbd06def-5750-4d1d-a054-1c3e33623d5a","port_range_max":5432,"port_range_min":5432,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.5/32","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_ingress_bootpc","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP answers on the dedicated network","direction":"ingress","ethertype":"IPv4","id":"c65cf276-2522-451c-a11d-16e3f7619bd4","port_range_max":68,"port_range_min":68,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_egress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Egress traffic on the dedicated network","direction":"egress","ethertype":"IPv4","id":"4728b03a-21c4-4484-86e7-d77e34b1795e","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.0/22","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_egress_bootps","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP requests on the dedicated network","direction":"egress","ethertype":"IPv4","id":"9375992b-795c-42a0-93bb-a57caf45f501","port_range_max":67,"port_range_min":67,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_ingress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Connections to port 5432 from the 192.168.0.0/22 network","direction":"ingress","ethertype":"IPv4","id":"cfb5b2c4-c3b7-46a3-ac4d-3e1390708954","port_range_max":5432,"port_range_min":5432,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.0/22","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_ingress_bootpc","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP answers on the dedicated network","direction":"ingress","ethertype":"IPv4","id":"cf3020b2-92c7-4e11-9d64-0eaf5f44d020","port_range_max":68,"port_range_min":68,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_ingress_icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"ICMP from the dedicated network","direction":"ingress","ethertype":"IPv4","id":"e5c53b33-4a37-474b-9fba-278b71adef38","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.0/22","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_v2","name":"postgresql_access","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Access to the PostgreSQL service through the dedicated network","id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","name":"access_to_the_postgresql_service","region":"isti_area_pi_1","stateful":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_v2","name":"postgresql_client_access","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Access to the PostgreSQL service from the port of a VM in the dedicated network","id":"09df1cb3-0654-47a0-be50-55bb79b011c9","name":"vm_access_to_the_postgresql_service","region":"isti_area_pi_1","stateful":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_subnet_v2","name":"postgresql_subnet","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"allocation_pool":[{"end":"192.168.3.254","start":"192.168.0.100"}],"cidr":"192.168.0.0/22","description":"Subnet used to connect to the postgresql service","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"","id":"228da08f-2b49-4d76-bec4-abab0510f275","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"postgresql-srv-subnet","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_gateway":true,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","module.postgresql.openstack_networking_network_v2.postgresql_net"]}]}],"check_results":null} +{"version":4,"terraform_version":"1.11.6","serial":4,"lineage":"de1b1d3d-9399-3658-7800-997367c90ac6","outputs":{"dns_zone":{"value":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"postgresql_access_security_group_id":{"value":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","type":"string"},"postgresql_client_access_security_group_id":{"value":"09df1cb3-0654-47a0-be50-55bb79b011c9","type":"string"},"postgresql_client_access_security_group_name":{"value":"vm_access_to_the_postgresql_service","type":"string"},"postgresql_main_ip":{"value":"10.10.0.162","type":"string"},"postgresql_network":{"value":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"Network used to communicate with the postgresql service","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"2b4f3653-5016-427f-9ae2-31144f691a93","mtu":8942,"name":"postgresql-srv-net","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"type":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}]},"postgresql_network_id":{"value":"2b4f3653-5016-427f-9ae2-31144f691a93","type":"string"},"postgresql_port":{"value":5432,"type":"number"},"postgresql_server_data":{"value":{"allocation_pool_end":"192.168.3.254","allocation_pool_start":"192.168.0.100","boot_vol_size":20,"description":"PostgreSQL server","exporter_port":9187,"flavor":"m1.large","name":"postgresql","network_cidr":"192.168.0.0/22","network_description":"Network used to communicate with the postgresql service","network_name":"postgresql-srv-net","port":5432,"server_cidr":"192.168.0.5/32","server_ip":"192.168.0.5","subnet_description":"Subnet used to connect to the postgresql service","subnet_name":"postgresql-srv-subnet","vol_data_device":"/dev/vdb","vol_data_name":"postgresql-data","vol_data_size":100,"vol_wal_device":"/dev/vdc","vol_wal_name":"postgresql-wal","vol_wal_size":100,"volume_type":"CephSSD"},"type":["object",{"allocation_pool_end":"string","allocation_pool_start":"string","boot_vol_size":"number","description":"string","exporter_port":"number","flavor":"string","name":"string","network_cidr":"string","network_description":"string","network_name":"string","port":"number","server_cidr":"string","server_ip":"string","subnet_description":"string","subnet_name":"string","vol_data_device":"string","vol_data_name":"string","vol_data_size":"number","vol_wal_device":"string","vol_wal_name":"string","vol_wal_size":"number","volume_type":"string"}]},"postgresql_server_id":{"value":"1078fcff-0eee-48a7-b061-a2ceaedc844c","type":"string"},"postgresql_server_ip":{"value":"192.168.0.5","type":"string"},"postgresql_server_name":{"value":"postgresql","type":"string"},"postgresql_subnet":{"value":{"all_tags":[],"allocation_pool":[{"end":"192.168.3.254","start":"192.168.0.100"}],"cidr":"192.168.0.0/22","description":"Subnet used to connect to the postgresql service","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"","id":"228da08f-2b49-4d76-bec4-abab0510f275","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"postgresql-srv-subnet","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_gateway":true,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"type":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}]},"postgresql_subnet_id":{"value":"228da08f-2b49-4d76-bec4-abab0510f275","type":"string"}},"resources":[{"mode":"data","type":"terraform_remote_state","name":"privnet_dns_router","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../main_net_dns_router/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"almalinux_9":{"name":"AlmaLinux-9.8 20260526","user_data_file":"../../s2i2s_openstack_vm_data_scripts/almalinux9.sh","uuid":"172f1c52-fa06-4d7d-9db7-0735ab6ef403"},"availability_zone_no_gpu_name":"cnr-isti-nova-a","availability_zone_with_gpu_name":"cnr-isti-nova-gpu-a","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"centos_7":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","el7_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","external_gateway_ip":[{"ip_address":"146.48.30.6","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","flavor_list":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"floating_ip_pools":{"main_public_ip_pool":"external-network"},"main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","main_region":"isti_area_pi_1","main_subnet_network":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"policy_list":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"}},"type":["object",{"almalinux_9":["map","string"],"availability_zone_no_gpu_name":"string","availability_zone_with_gpu_name":"string","availability_zones_names":["map","string"],"centos_7":["map","string"],"default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","el7_data_file":"string","external_gateway_ip":["list",["object",{"ip_address":"string","subnet_id":"string"}]],"external_network":["map","string"],"external_network_id":"string","flavor_list":["map","string"],"floating_ip_pools":["map","string"],"main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_network_id":"string","main_region":"string","main_subnet_network":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"policy_list":["map","string"],"resolvers_ip":["list","string"],"ssh_sources":["map","string"],"ubuntu2204_data_file":"string","ubuntu_2204":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"data","type":"terraform_remote_state","name":"project_setup","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../project-setup/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"access_to_the_jump_proxy":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"acme_challenge_hostname":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"basic_services_ip":{"ca":"10.10.0.4","ca_cidr":"10.10.0.4/32","forgejo":"10.10.0.165","forgejo_cidr":"10.10.0.165/32","haproxy_l7_1":"10.10.0.11","haproxy_l7_1_cidr":"10.10.0.11/32","haproxy_l7_2":"10.10.0.12","haproxy_l7_2_cidr":"10.10.0.12/32","keycloak_1":"10.10.0.163","keycloak_1_cidr":"10.10.0.163/32","keycloak_2":"10.10.0.164","keycloak_2_cidr":"10.10.0.164/32","octavia_main":"10.10.0.20","octavia_main_cidr":"10.10.0.20/32","postgresql":"10.10.0.162","postgresql_cidr":"10.10.0.162/32","prometheus":"10.10.0.10","prometheus_cidr":"10.10.0.10/32","ssh_jump":"10.10.0.5","ssh_jump_cidr":"10.10.0.5/32"},"debugging":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"default_security_group":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"default_security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","floating_ip_pools":{"main_public_ip_pool":"external-network"},"haproxy_l7_data":{"flavor":"m1.medium","name":"main-haproxy-l7","vm_count":"2"},"internal_ca_data":{"flavor":"m1.small","name":"ca"},"internal_ca_id":"286b7a4d-33c6-451f-9019-d9fd79265181","main_haproxy_l7_ids":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"main_haproxy_l7_ip":["10.10.0.11","10.10.0.12"],"main_lb_to_haproxy_l7_security_group":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"main_loadbalancer_hostname":"main-lb.s2i2s.cloud.isti.cnr.it.","main_loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","main_loadbalancer_ip":"10.10.0.20","main_loadbalancer_public_ip":"146.48.30.30","main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_subnet":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_region":"isti_area_pi_1","main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"prometheus_access_from_grafana":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"prometheus_hostname":"prometheus.s2i2s.cloud.isti.cnr.it.","prometheus_public_ip":"146.48.31.67","prometheus_server_data":{"flavor":"m1.medium","name":"prometheus","public_grafana_server_cidr":"146.48.28.103/32","vol_data_device":"/dev/vdb","vol_data_name":"prometheus-data","vol_data_size":"100"},"prometheus_server_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","public_web":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"restricted_web":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"ssh_jump_proxy":{"flavor":"m2.small","name":"ssh-jump-proxy"},"ssh_jump_proxy_hostname":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","ssh_jump_proxy_id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","ssh_jump_proxy_public_ip":"146.48.31.105","ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"traffic_from_main_haproxy":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu2404_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"ubuntu_2404":{"name":"Ubuntu-Noble-24.04.img","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075"}},"type":["object",{"access_to_the_jump_proxy":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"acme_challenge_hostname":"string","availability_zones_names":["map","string"],"basic_services_ip":["map","string"],"debugging":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"default_security_group":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"default_security_group_id":"string","default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","floating_ip_pools":["map","string"],"haproxy_l7_data":["map","string"],"internal_ca_data":["map","string"],"internal_ca_id":"string","main_haproxy_l7_ids":["tuple",["string","string"]],"main_haproxy_l7_ip":["list","string"],"main_lb_to_haproxy_l7_security_group":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"main_loadbalancer_hostname":"string","main_loadbalancer_id":"string","main_loadbalancer_ip":"string","main_loadbalancer_public_ip":"string","main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_subnet":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_region":"string","main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"prometheus_access_from_grafana":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"prometheus_hostname":"string","prometheus_public_ip":"string","prometheus_server_data":["map","string"],"prometheus_server_id":"string","public_web":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"resolvers_ip":["list","string"],"restricted_web":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"ssh_jump_proxy":["map","string"],"ssh_jump_proxy_hostname":"string","ssh_jump_proxy_id":"string","ssh_jump_proxy_public_ip":"string","ssh_sources":["map","string"],"traffic_from_main_haproxy":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"ubuntu2204_data_file":"string","ubuntu2404_data_file":"string","ubuntu_2204":["map","string"],"ubuntu_2404":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_blockstorage_volume_v3","name":"postgresql_data_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[{"device":"/dev/vdb","id":"4791f6e7-ba22-460a-a1ee-9a1aa48373da","instance_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c"}],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"PostgreSQL data directory","enable_online_resize":true,"id":"4791f6e7-ba22-460a-a1ee-9a1aa48373da","image_id":null,"metadata":{},"name":"postgresql-data","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_blockstorage_volume_v3","name":"postgresql_wal_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[{"device":"/dev/vdc","id":"71f2b8cc-7a1b-4983-ae62-84dd562f0e6c","instance_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c"}],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"PostgreSQL write ahead log","enable_online_resize":true,"id":"71f2b8cc-7a1b-4983-ae62-84dd562f0e6c","image_id":null,"metadata":{},"name":"postgresql-wal","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_compute_instance_v2","name":"postgresql_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.162","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":20,"volume_type":""}],"config_drive":null,"created":"2026-08-11 15:43:42 +0000 UTC","flavor_id":"9","flavor_name":"m1.large","force_delete":false,"hypervisor_hostname":"","id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"postgresql","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.162","fixed_ip_v6":"","mac":"fa:16:3e:55:cb:a3","name":"s2i2s-proj-main","port":"59e7f753-f4b5-453a-ab6e-6c318fdfb005","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"},{"access_network":false,"fixed_ip_v4":"192.168.0.5","fixed_ip_v6":"","mac":"fa:16:3e:91:f5:79","name":"postgresql-srv-net","port":"c84112f1-6c1b-4ff8-869a-aaf802d7e73e","uuid":"2b4f3653-5016-427f-9ae2-31144f691a93"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["access_to_the_postgresql_service","default_for_all"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-08-11 15:44:25 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_port_v2.postgresql_main_port","module.postgresql.openstack_networking_port_v2.postgresql_service_port","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_secgroup_v2.postgresql_monitoring","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_compute_volume_attach_v2","name":"postgresql_data_attach","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdb","id":"1078fcff-0eee-48a7-b061-a2ceaedc844c/4791f6e7-ba22-460a-a1ee-9a1aa48373da","instance_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"4791f6e7-ba22-460a-a1ee-9a1aa48373da"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_blockstorage_volume_v3.postgresql_data_vol","module.postgresql.openstack_compute_instance_v2.postgresql_server","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_port_v2.postgresql_main_port","module.postgresql.openstack_networking_port_v2.postgresql_service_port","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_secgroup_v2.postgresql_monitoring","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_compute_volume_attach_v2","name":"postgresql_wal_attach","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdc","id":"1078fcff-0eee-48a7-b061-a2ceaedc844c/71f2b8cc-7a1b-4983-ae62-84dd562f0e6c","instance_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"71f2b8cc-7a1b-4983-ae62-84dd562f0e6c"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_blockstorage_volume_v3.postgresql_data_vol","module.postgresql.openstack_blockstorage_volume_v3.postgresql_wal_vol","module.postgresql.openstack_compute_instance_v2.postgresql_server","module.postgresql.openstack_compute_volume_attach_v2.postgresql_data_attach","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_port_v2.postgresql_main_port","module.postgresql.openstack_networking_port_v2.postgresql_service_port","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_secgroup_v2.postgresql_monitoring","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_dns_recordset_v2","name":"postgresql_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"description":"Address of the PostgreSQL server on the main private network","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/f182c646-bc17-4c62-85b1-30dac79d3f72","name":"postgresql.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["10.10.0.162"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_network_v2","name":"postgresql_net","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"Network used to communicate with the postgresql service","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"2b4f3653-5016-427f-9ae2-31144f691a93","mtu":8942,"name":"postgresql-srv-net","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_port_v2","name":"postgresql_main_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.162"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Administration port of the PostgreSQL server on the main private network","device_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"postgresql.internal-cloud.isti.cnr.it.","hostname":"postgresql","ip_address":"10.10.0.162"}],"dns_name":"postgresql","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.162","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"59e7f753-f4b5-453a-ab6e-6c318fdfb005","mac_address":"fa:16:3e:55:cb:a3","name":"postgresql-main-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["0aafc818-c457-4cbe-a77b-d012306cb77f","1ec8a419-f9cf-473f-a022-6499d67d57b8"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.postgresql.openstack_networking_secgroup_v2.postgresql_monitoring"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_port_v2","name":"postgresql_service_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["192.168.0.5"],"all_security_group_ids":["d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Service port of the PostgreSQL server on the dedicated network","device_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"postgresql.internal-cloud.isti.cnr.it.","hostname":"postgresql","ip_address":"192.168.0.5"}],"dns_name":"postgresql","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"192.168.0.5","subnet_id":"228da08f-2b49-4d76-bec4-abab0510f275"}],"id":"c84112f1-6c1b-4ff8-869a-aaf802d7e73e","mac_address":"fa:16:3e:91:f5:79","name":"postgresql-service-port","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","module.postgresql.openstack_networking_network_v2.postgresql_net","module.postgresql.openstack_networking_secgroup_v2.postgresql_access","module.postgresql.openstack_networking_subnet_v2.postgresql_subnet"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_egress_bootps","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP requests on the dedicated network","direction":"egress","ethertype":"IPv4","id":"ef82cbd7-690a-424b-b334-7b88aea7fd54","port_range_max":67,"port_range_min":67,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_egress_icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"ICMP to the PostgreSQL server","direction":"egress","ethertype":"IPv4","id":"1ff0ace1-0c92-43e3-a006-5e47ef006f9a","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.5/32","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_egress_postgresql","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Connections to port 5432 of the PostgreSQL server","direction":"egress","ethertype":"IPv4","id":"fbd06def-5750-4d1d-a054-1c3e33623d5a","port_range_max":5432,"port_range_min":5432,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.5/32","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"client_ingress_bootpc","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP answers on the dedicated network","direction":"ingress","ethertype":"IPv4","id":"c65cf276-2522-451c-a11d-16e3f7619bd4","port_range_max":68,"port_range_min":68,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_client_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_egress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Egress traffic on the dedicated network","direction":"egress","ethertype":"IPv4","id":"4728b03a-21c4-4484-86e7-d77e34b1795e","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.0/22","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_egress_bootps","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP requests on the dedicated network","direction":"egress","ethertype":"IPv4","id":"9375992b-795c-42a0-93bb-a57caf45f501","port_range_max":67,"port_range_min":67,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_exporter_ingress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Connections to the postgres_exporter port 9187 from Prometheus","direction":"ingress","ethertype":"IPv4","id":"021ff4a0-66e5-4276-9fee-de9de848262b","port_range_max":9187,"port_range_min":9187,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"0aafc818-c457-4cbe-a77b-d012306cb77f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_monitoring"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_ingress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Connections to port 5432 from the 192.168.0.0/22 network","direction":"ingress","ethertype":"IPv4","id":"cfb5b2c4-c3b7-46a3-ac4d-3e1390708954","port_range_max":5432,"port_range_min":5432,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.0/22","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_ingress_bootpc","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"DHCP answers on the dedicated network","direction":"ingress","ethertype":"IPv4","id":"cf3020b2-92c7-4e11-9d64-0eaf5f44d020","port_range_max":68,"port_range_min":68,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"postgresql_ingress_icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"ICMP from the dedicated network","direction":"ingress","ethertype":"IPv4","id":"e5c53b33-4a37-474b-9fba-278b71adef38","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"192.168.0.0/22","security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.postgresql.openstack_networking_secgroup_v2.postgresql_access"]}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_v2","name":"postgresql_access","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Access to the PostgreSQL service through the dedicated network","id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","name":"access_to_the_postgresql_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_v2","name":"postgresql_client_access","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Access to the PostgreSQL service from the port of a VM in the dedicated network","id":"09df1cb3-0654-47a0-be50-55bb79b011c9","name":"vm_access_to_the_postgresql_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_secgroup_v2","name":"postgresql_monitoring","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Prometheus access to the postgres_exporter of the PostgreSQL server","id":"0aafc818-c457-4cbe-a77b-d012306cb77f","name":"prometheus_access_to_the_postgresql_exporter","region":"isti_area_pi_1","stateful":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.postgresql","mode":"managed","type":"openstack_networking_subnet_v2","name":"postgresql_subnet","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"allocation_pool":[{"end":"192.168.3.254","start":"192.168.0.100"}],"cidr":"192.168.0.0/22","description":"Subnet used to connect to the postgresql service","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"","id":"228da08f-2b49-4d76-bec4-abab0510f275","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"postgresql-srv-subnet","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_gateway":true,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","module.postgresql.openstack_networking_network_v2.postgresql_net"]}]}],"check_results":null} diff --git a/s2i2s/project-setup/security-groups.tf b/s2i2s/project-setup/security-groups.tf index 0691609..25b48c4 100644 --- a/s2i2s/project-setup/security-groups.tf +++ b/s2i2s/project-setup/security-groups.tf @@ -43,26 +43,6 @@ resource "openstack_networking_secgroup_rule_v2" "prometheus-node" { remote_ip_prefix = local.basic_services_ip.prometheus_cidr } -# postgres_exporter, installed by the postgresql role on the database server -# (see infrastructure-playbooks, postgresql-cloud.yml). -# -# In the DEFAULT security group and not in modules/postgresql on purpose: the -# address Prometheus scrapes is the one on the main private network, and that -# port carries the default security group only - the groups of the module are -# attached to the service port, on the dedicated database network. Same reason, -# and same shape, as the node exporter rule above: the source is a single host, -# and a VM that does not run the exporter has nothing listening on 9187. -resource "openstack_networking_secgroup_rule_v2" "prometheus-postgres-exporter" { - security_group_id = openstack_networking_secgroup_v2.default.id - description = "Prometheus access to the postgres exporter" - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 9187 - port_range_max = 9187 - remote_ip_prefix = local.basic_services_ip.prometheus_cidr -} - # # SSH access to the jump proxy. Used by the jump proxy VM only resource "openstack_networking_secgroup_v2" "access_to_the_jump_proxy" { diff --git a/s2i2s/project-setup/terraform.tfstate b/s2i2s/project-setup/terraform.tfstate index d624798..514a9eb 100644 --- a/s2i2s/project-setup/terraform.tfstate +++ b/s2i2s/project-setup/terraform.tfstate @@ -1 +1 @@ -{"version":4,"terraform_version":"1.11.6","serial":172,"lineage":"63543f0d-4b49-2066-95b6-653706374703","outputs":{"access_to_the_jump_proxy":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"acme_challenge_hostname":{"value":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","type":"string"},"availability_zones_names":{"value":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"type":["map","string"]},"basic_services_ip":{"value":{"ca":"10.10.0.4","ca_cidr":"10.10.0.4/32","forgejo":"10.10.0.165","forgejo_cidr":"10.10.0.165/32","haproxy_l7_1":"10.10.0.11","haproxy_l7_1_cidr":"10.10.0.11/32","haproxy_l7_2":"10.10.0.12","haproxy_l7_2_cidr":"10.10.0.12/32","keycloak_1":"10.10.0.163","keycloak_1_cidr":"10.10.0.163/32","keycloak_2":"10.10.0.164","keycloak_2_cidr":"10.10.0.164/32","octavia_main":"10.10.0.20","octavia_main_cidr":"10.10.0.20/32","postgresql":"10.10.0.162","postgresql_cidr":"10.10.0.162/32","prometheus":"10.10.0.10","prometheus_cidr":"10.10.0.10/32","ssh_jump":"10.10.0.5","ssh_jump_cidr":"10.10.0.5/32"},"type":["map","string"]},"debugging":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"default_security_group":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"default_security_group_id":{"value":"1ec8a419-f9cf-473f-a022-6499d67d57b8","type":"string"},"default_security_group_name":{"value":"default_for_all","type":"string"},"dns_zone":{"value":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"dns_zone_id":{"value":"e826e777-0196-4f63-b2a9-df07f70e618f","type":"string"},"floating_ip_pools":{"value":{"main_public_ip_pool":"external-network"},"type":["map","string"]},"haproxy_l7_data":{"value":{"flavor":"m1.medium","name":"main-haproxy-l7","vm_count":"2"},"type":["map","string"]},"internal_ca_data":{"value":{"flavor":"m1.small","name":"ca"},"type":["map","string"]},"internal_ca_id":{"value":"286b7a4d-33c6-451f-9019-d9fd79265181","type":"string"},"main_haproxy_l7_ids":{"value":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"type":["tuple",["string","string"]]},"main_haproxy_l7_ip":{"value":["10.10.0.11","10.10.0.12"],"type":["list","string"]},"main_lb_to_haproxy_l7_security_group":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"main_loadbalancer_hostname":{"value":"main-lb.s2i2s.cloud.isti.cnr.it.","type":"string"},"main_loadbalancer_id":{"value":"44dbe548-a436-4816-927a-2912f443b50f","type":"string"},"main_loadbalancer_ip":{"value":"10.10.0.20","type":"string"},"main_loadbalancer_public_ip":{"value":"146.48.30.30","type":"string"},"main_private_network":{"value":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"type":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}]},"main_private_subnet":{"value":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"type":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}]},"main_region":{"value":"isti_area_pi_1","type":"string"},"main_subnet_network_id":{"value":"19c649ee-96ea-438b-ac0c-512afdf5046d","type":"string"},"mtu_size":{"value":8942,"type":"number"},"os_project_data":{"value":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"type":["map","string"]},"prometheus_access_from_grafana":{"value":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"prometheus_hostname":{"value":"prometheus.s2i2s.cloud.isti.cnr.it.","type":"string"},"prometheus_public_ip":{"value":"146.48.31.67","type":"string"},"prometheus_server_data":{"value":{"flavor":"m1.medium","name":"prometheus","public_grafana_server_cidr":"146.48.28.103/32","vol_data_device":"/dev/vdb","vol_data_name":"prometheus-data","vol_data_size":"100"},"type":["map","string"]},"prometheus_server_id":{"value":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","type":"string"},"public_web":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"resolvers_ip":{"value":["146.48.29.97","146.48.29.98","146.48.29.99"],"type":["list","string"]},"restricted_web":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"ssh_jump_proxy":{"value":{"flavor":"m2.small","name":"ssh-jump-proxy"},"type":["map","string"]},"ssh_jump_proxy_hostname":{"value":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","type":"string"},"ssh_jump_proxy_id":{"value":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","type":"string"},"ssh_jump_proxy_public_ip":{"value":"146.48.31.105","type":"string"},"ssh_sources":{"value":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"type":["map","string"]},"traffic_from_main_haproxy":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"ubuntu2204_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","type":"string"},"ubuntu2404_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","type":"string"},"ubuntu_2204":{"value":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"type":["map","string"]},"ubuntu_2404":{"value":{"name":"Ubuntu-Noble-24.04.img","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075"},"type":["map","string"]}},"resources":[{"mode":"data","type":"terraform_remote_state","name":"privnet_dns_router","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../main_net_dns_router/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"almalinux_9":{"name":"AlmaLinux-9.8 20260526","user_data_file":"../../s2i2s_openstack_vm_data_scripts/almalinux9.sh","uuid":"172f1c52-fa06-4d7d-9db7-0735ab6ef403"},"availability_zone_no_gpu_name":"cnr-isti-nova-a","availability_zone_with_gpu_name":"cnr-isti-nova-gpu-a","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"centos_7":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","el7_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","external_gateway_ip":[{"ip_address":"146.48.30.6","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","flavor_list":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"floating_ip_pools":{"main_public_ip_pool":"external-network"},"main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","main_region":"isti_area_pi_1","main_subnet_network":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"policy_list":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"}},"type":["object",{"almalinux_9":["map","string"],"availability_zone_no_gpu_name":"string","availability_zone_with_gpu_name":"string","availability_zones_names":["map","string"],"centos_7":["map","string"],"default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","el7_data_file":"string","external_gateway_ip":["list",["object",{"ip_address":"string","subnet_id":"string"}]],"external_network":["map","string"],"external_network_id":"string","flavor_list":["map","string"],"floating_ip_pools":["map","string"],"main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_network_id":"string","main_region":"string","main_subnet_network":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"policy_list":["map","string"],"resolvers_ip":["list","string"],"ssh_sources":["map","string"],"ubuntu2204_data_file":"string","ubuntu_2204":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"managed","type":"openstack_blockstorage_volume_v3","name":"prometheus_data_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[{"device":"/dev/vdb","id":"59c354bc-bc05-4dbb-ad58-236da1186974","instance_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc"}],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"","enable_online_resize":true,"id":"59c354bc-bc05-4dbb-ad58-236da1186974","image_id":null,"metadata":{},"name":"prometheus-data","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"internal_ca","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.4","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:24 +0000 UTC","flavor_id":"2","flavor_name":"m1.small","force_delete":false,"hypervisor_hostname":"","id":"286b7a4d-33c6-451f-9019-d9fd79265181","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"ca","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.4","fixed_ip_v6":"","mac":"fa:16:3e:21:d8:29","name":"s2i2s-proj-main","port":"22a51c59-75c8-4031-a283-212751553d12","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-08-06 17:25:13 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.internal_ca_port","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"main_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.11","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"b42a0e99-6172-4a5d-886c-c0fb016da60e","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"main-haproxy-l7-01","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.11","fixed_ip_v6":"","mac":"fa:16:3e:b1:42:7f","name":"s2i2s-proj-main","port":"bd7d2fb6-db15-42d5-9779-1411c914a65e","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":{},"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all","traffic_from_main_lb_to_haproxy_l7"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-02-03 14:58:26 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_compute_servergroup_v2.main_haproxy_l7","openstack_networking_port_v2.main_haproxy_l7_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":1,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.12","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"b770644a-5c39-4db2-8811-fb62751bd789","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"main-haproxy-l7-02","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.12","fixed_ip_v6":"","mac":"fa:16:3e:a9:49:bb","name":"s2i2s-proj-main","port":"3018d5db-3d39-472f-b623-07c85e792ed5","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":{},"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all","traffic_from_main_lb_to_haproxy_l7"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-07-07 11:20:09 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_compute_servergroup_v2.main_haproxy_l7","openstack_networking_port_v2.main_haproxy_l7_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"prometheus_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.10","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:28 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"prometheus","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.10","fixed_ip_v6":"","mac":"fa:16:3e:bc:2d:03","name":"s2i2s-proj-main","port":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all","prometheus_access_from_grafana","restricted_web_service"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-02-03 14:59:22 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"ssh_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.5","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":30,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"10","flavor_name":"m2.small","force_delete":false,"hypervisor_hostname":"","id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"ssh-jump-proxy","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.5","fixed_ip_v6":"","mac":"fa:16:3e:75:76:4e","name":"s2i2s-proj-main","port":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all","ssh_access_to_the_jump_node"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-04-10 13:14:32 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.ssh_jump_proxy_port","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_compute_servergroup_v2","name":"main_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","members":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"name":"main_haproxy_l7","policies":["anti-affinity"],"region":"isti_area_pi_1","rules":[{"max_server_per_host":0}],"value_specs":null},"sensitive_attributes":[],"private":"bnVsbA=="}]},{"mode":"managed","type":"openstack_compute_volume_attach_v2","name":"prometheus_data_attach_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdb","id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc/59c354bc-bc05-4dbb-ad58-236da1186974","instance_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"59c354bc-bc05-4dbb-ad58-236da1186974"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_blockstorage_volume_v3.prometheus_data_vol","openstack_compute_instance_v2.prometheus_server","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"acme_challenge_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Delegation of the DNS-01 Let's Encrypt challenge to the isti.cnr.it zone","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/f755d13f-b2ce-4f36-986e-8be1c0c3fb18","name":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["_acme-challenge.isti.cnr.it."],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"CNAME","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"alertmanager_server_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus alertmanager","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/b8256293-8c32-4fa9-a43c-fa115339504f","name":"alertmanager.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["prometheus.s2i2s.cloud.isti.cnr.it."],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"CNAME","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"main_lb_dns_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the main Octavia load balancer","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/c8c97ddb-8edb-4e53-8c27-f5db9925c39e","name":"main-lb.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.30.30"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.main_lb_ip"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"prometheus_server_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the Prometheus server","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/ba7b0d61-3364-4451-9c9e-45e957c400ca","name":"prometheus.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.31.67"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.prometheus_server_ip"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"ssh_jump_proxy_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the SSH Proxy Jump server","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/72909fe7-c0a5-4060-bad6-be3c25680078","name":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.31.105"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.ssh_jump_proxy_ip"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_git_ssh_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"e45577a7-296c-409c-a7d9-4e0af600de7f","default_tls_container_ref":"","description":"SSH listener of the git service, forwarded to the HAPROXY L7 instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"405fa377-0104-4766-81d8-487048e7be90","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_git_ssh_listener","protocol":"TCP","protocol_port":22,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_http_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","default_tls_container_ref":"","description":"HTTP listener of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"ef26b673-26ff-4466-9c51-9114d85eeb64","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_http_listener","protocol":"TCP","protocol_port":80,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_https_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","default_tls_container_ref":"","description":"HTTPS listener of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"eb03441a-3aa4-4221-a698-81062c2cb9c1","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_https_listener","protocol":"TCP","protocol_port":443,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":3600000,"timeout_member_connect":10000,"timeout_member_data":7200000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_stats_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","default_tls_container_ref":"","description":"Listener for the stats of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"d410acca-25e5-45a2-9d22-90f33f2730d4","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_stats_listener","protocol":"TCP","protocol_port":8880,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_loadbalancer_v2","name":"main_lb","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"availability_zone":"","description":"Main L4 load balancer for the S2I2S services","flavor_id":"","id":"44dbe548-a436-4816-927a-2912f443b50f","loadbalancer_provider":"ovn","name":"s2i2s-cloud-l4-load-balancer","region":"isti_area_pi_1","security_group_ids":["0b382ff1-38ac-44bd-9f63-27df73af0476"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"vip_address":"10.10.0.20","vip_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","vip_port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","vip_qos_policy_id":"","vip_subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6MzAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_git_ssh_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"e45577a7-296c-409c-a7d9-4e0af600de7f","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"fe06a630-8c06-4155-aacd-83dd30c06122","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":2222,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"af293d57-19aa-4746-9692-3a98122e7342","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":2222,"subnet_id":"","weight":1}],"pool_id":"e45577a7-296c-409c-a7d9-4e0af600de7f","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_git_ssh_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_git_ssh_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_http_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"8ed17fa2-9259-4511-a91f-24820d80983a","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"2a0877ca-2fe6-4fbe-8de8-bae08ad47cbf","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":80,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"61c22a78-dd8c-4928-b301-733baac59389","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":80,"subnet_id":"","weight":1}],"pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_http_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_https_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"c631cfb1-327b-4e28-8d3c-8532f566a527","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"0f143500-1d20-44c3-8624-70eb5aa600ea","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":443,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"47925117-1d2c-4bef-adac-652ada82506e","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":443,"subnet_id":"","weight":1}],"pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_https_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_stats_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"f8d622ee-162d-44bf-aec1-1bcba2201cf1","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":8880,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"d6c2a4cf-bc49-4564-b3b5-f348939d9dd9","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":8880,"subnet_id":"","weight":1}],"pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_stats_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_git_ssh_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"7a18804a-8c3d-454b-be4a-0e6693385f85","max_retries":3,"max_retries_down":3,"name":"main_haproxy_git_ssh_monitor","pool_id":"e45577a7-296c-409c-a7d9-4e0af600de7f","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_git_ssh_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_git_ssh_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_http_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"837af662-7c87-4fd4-b25d-29aaac58f348","max_retries":3,"max_retries_down":3,"name":"main_haproxy_http_monitor","pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_http_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_https_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"03e086f3-6fb6-4109-a6cc-1475ac25b694","max_retries":3,"max_retries_down":3,"name":"main_haproxy_https_monitor","pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_https_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_stats_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"2c0dfc3e-de80-40d9-9594-158062522f33","max_retries":3,"max_retries_down":3,"name":"main_haproxy_stats_monitor","pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_stats_pool"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_git_ssh_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the SSH listener of the git service","id":"e45577a7-296c-409c-a7d9-4e0af600de7f","lb_method":"SOURCE_IP_PORT","listener_id":"405fa377-0104-4766-81d8-487048e7be90","loadbalancer_id":null,"name":"main-haproxy-lb-git-ssh","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_git_ssh_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_http_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the HTTP listener of the main HAPROXY instances","id":"8ed17fa2-9259-4511-a91f-24820d80983a","lb_method":"SOURCE_IP_PORT","listener_id":"ef26b673-26ff-4466-9c51-9114d85eeb64","loadbalancer_id":null,"name":"main-haproxy-lb-http","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_https_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the HTTPS listener of the main HAPROXY instances","id":"c631cfb1-327b-4e28-8d3c-8532f566a527","lb_method":"SOURCE_IP_PORT","listener_id":"eb03441a-3aa4-4221-a698-81062c2cb9c1","loadbalancer_id":null,"name":"main-haproxy-lb-https","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_stats_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the stats of the main HAPROXY instances","id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","lb_method":"SOURCE_IP_PORT","listener_id":"d410acca-25e5-45a2-9d22-90f33f2730d4","loadbalancer_id":null,"name":"main-haproxy-lb-stats","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"main_lb","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.20","floating_ip":"146.48.30.30","id":"973de1d6-75e9-4b67-90fa-b24221975e6f","port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb","openstack_networking_floatingip_v2.main_lb_ip"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"prometheus_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.10","floating_ip":"146.48.31.67","id":"35526990-3174-4822-aac3-b20a5c8a34bf","port_id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"ssh_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.5","floating_ip":"146.48.31.105","id":"a22d4285-4314-4dd9-9f8b-b52fb3f6dd60","port_id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.ssh_jump_proxy_ip","openstack_networking_port_v2.ssh_jump_proxy_port","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"main_lb_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.30.30","all_tags":[],"description":"Main L4 load balancer for the S2I2S services","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.20","id":"973de1d6-75e9-4b67-90fa-b24221975e6f","pool":"external-network","port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"prometheus_server_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.31.67","all_tags":[],"description":"Prometheus server","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.10","id":"35526990-3174-4822-aac3-b20a5c8a34bf","pool":"external-network","port_id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"ssh_jump_proxy_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.31.105","all_tags":[],"description":"SSH Proxy Jump Server","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.5","id":"a22d4285-4314-4dd9-9f8b-b52fb3f6dd60","pool":"external-network","port_id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"internal_ca_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.4"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"286b7a4d-33c6-451f-9019-d9fd79265181","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"ca.internal-cloud.isti.cnr.it.","hostname":"ca","ip_address":"10.10.0.4"}],"dns_name":"ca","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.4","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"22a51c59-75c8-4031-a283-212751553d12","mac_address":"fa:16:3e:21:d8:29","name":"ca-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"main_haproxy_l7_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.11"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"b42a0e99-6172-4a5d-886c-c0fb016da60e","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"main-haproxy-l7-01.internal-cloud.isti.cnr.it.","hostname":"main-haproxy-l7-01","ip_address":"10.10.0.11"}],"dns_name":"main-haproxy-l7-01","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.11","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"bd7d2fb6-db15-42d5-9779-1411c914a65e","mac_address":"fa:16:3e:b1:42:7f","name":"main-haproxy-l7-01-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":1,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.12"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"b770644a-5c39-4db2-8811-fb62751bd789","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"main-haproxy-l7-02.internal-cloud.isti.cnr.it.","hostname":"main-haproxy-l7-02","ip_address":"10.10.0.12"}],"dns_name":"main-haproxy-l7-02","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.12","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"3018d5db-3d39-472f-b623-07c85e792ed5","mac_address":"fa:16:3e:a9:49:bb","name":"main-haproxy-l7-02-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"prometheus_server_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.10"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","359d7ae7-cdff-47c2-bf69-7d423860d2d2","48e9366f-23a8-47df-abcd-66f84d4af395"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"prometheus.internal-cloud.isti.cnr.it.","hostname":"prometheus","ip_address":"10.10.0.10"}],"dns_name":"prometheus","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.10","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","mac_address":"fa:16:3e:bc:2d:03","name":"prometheus-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","359d7ae7-cdff-47c2-bf69-7d423860d2d2","48e9366f-23a8-47df-abcd-66f84d4af395"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"ssh_jump_proxy_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.5"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","4c6b6683-77fa-4d1a-8ba2-41acf10a12ba"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"ssh-jump-proxy.internal-cloud.isti.cnr.it.","hostname":"ssh-jump-proxy","ip_address":"10.10.0.5"}],"dns_name":"ssh-jump-proxy","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.5","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","mac_address":"fa:16:3e:75:76:4e","name":"ssh-jump-proxy-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","4c6b6683-77fa-4d1a-8ba2-41acf10a12ba"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"egress-ipv4","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"","direction":"egress","ethertype":"IPv4","id":"b231bb15-1585-4c96-9b48-b6907d89cf1d","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"grafana_d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from grafana.d4science.org","direction":"ingress","ethertype":"IPv4","id":"2f887282-b19c-4223-9db7-cb1c47e50e4d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.103/32","security_group_id":"48e9366f-23a8-47df-abcd-66f84d4af395","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.prometheus_access_from_grafana"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"8f5353f9-98a9-4dc2-aa32-cb0a007bd182","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"9cb7007d-1d03-44e7-9e99-816afc7ba905","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-8080","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"b02fab4f-49b2-475b-8c37-0104210ae4af","port_range_max":8080,"port_range_min":8080,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-8888","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"e4721ff4-95ba-4c3f-a4c4-f09f578ee377","port_range_max":8888,"port_range_min":8888,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"0de5b769-eb27-4636-b453-47105706cc40","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"480b75d2-2c6e-4e2b-8f2f-7a30c27c767c","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-8080","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"12bd97f1-9a9b-46b8-96dd-2adda86f3475","port_range_max":8080,"port_range_min":8080,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-8888","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"cc6792c1-b5aa-4835-a293-7284fc144e30","port_range_max":8888,"port_range_min":8888,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_1_peer","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Peer traffic from haproxy l7 1 to l7 2","direction":"ingress","ethertype":"IPv4","id":"f916f790-e372-4393-b0e2-d4f56a47db63","port_range_max":10000,"port_range_min":10000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_2_peer","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Peer traffic from haproxy l7 2 to l7 1","direction":"ingress","ethertype":"IPv4","id":"7dfd1cd5-e533-4d80-a4ba-9fabba824634","port_range_max":10000,"port_range_min":10000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_8880_stats_sources","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"d4s_vpn_1","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from d4s_vpn_1","direction":"ingress","ethertype":"IPv4","id":"62bea42a-c54b-4038-b0c1-8747480edd93","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"d4s_vpn_2","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from d4s_vpn_2","direction":"ingress","ethertype":"IPv4","id":"18e7fe2a-b726-4391-93cc-ca57941da91a","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"infrascience_net","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from infrascience_net","direction":"ingress","ethertype":"IPv4","id":"5e4d2492-b96b-4c4d-8a29-aec50b77ff1c","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.0/23","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"prometheus_private","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from prometheus_private","direction":"ingress","ethertype":"IPv4","id":"f73459b9-31fc-41b1-83d3-b1f2c71599ce","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"prometheus_public","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from prometheus_public","direction":"ingress","ethertype":"IPv4","id":"22464816-de38-458d-9ba5-765deb2cf41e","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.31.67/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"s2i2s_vpn_1","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from s2i2s_vpn_1","direction":"ingress","ethertype":"IPv4","id":"d7d394d9-8779-4f17-934d-8a490cdf72d9","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"s2i2s_vpn_2","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from s2i2s_vpn_2","direction":"ingress","ethertype":"IPv4","id":"4642bd23-0156-4760-a4c6-aaa7806f2c2e","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"http_from_everywhere","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"8e2d9198-7b9e-45a3-ada2-f62924d86e2f","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_d4s_vpn_1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from D4Science VPN 1","direction":"ingress","ethertype":"IPv4","id":"cf5e6a80-2ef1-4261-85b4-fc53f10fc932","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_d4s_vpn_2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from D4Science VPN 2","direction":"ingress","ethertype":"IPv4","id":"84bb5373-36e6-49a6-8605-c689e476833d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_s2i2s_vpn_1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"6822707c-ca3a-4230-ab91-075310c4277a","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_s2i2s_vpn_2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"b981a99f-0a99-4d76-8da4-316542afba4d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_shell_d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from shell.d4science.org","direction":"ingress","ethertype":"IPv4","id":"b8a463f6-5587-4495-ac71-f0f34abf78e7","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.95/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ingress-icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow ICMP from remote","direction":"ingress","ethertype":"IPv4","id":"a2344bc4-79ca-4458-9185-b63791b50f0f","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic to HAPROXY l7 port 443, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"bf80c3c6-c4e1-4f17-9578-435147a234dc","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic to HAPROXY l7 port 80, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"7c67970c-6bbc-4f8b-a4e9-256a4a1981f4","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_8880_healthcheck","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Health monitor probes to the HAPROXY l7 stats port 8880","direction":"ingress","ethertype":"IPv4","id":"aa58e85a-49b5-4360-9536-26f8138d939b","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.0/21","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_git_ssh","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Git over SSH, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"28dbc843-2fd5-41de-82b5-3e0d3019e835","port_range_max":2222,"port_range_min":2222,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"prometheus-node","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus access to the node exporter","direction":"ingress","ethertype":"IPv4","id":"df3d2e24-2457-4140-af24-6d59d536c421","port_range_max":9100,"port_range_min":9100,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"prometheus-postgres-exporter","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus access to the postgres exporter","direction":"ingress","ethertype":"IPv4","id":"bc041a70-8b1d-4f3a-9d8c-5ac6aa8bcf9a","port_range_max":9187,"port_range_min":9187,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"public_http","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"58149f48-3a84-4e0e-aa70-734f479c020f","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"31140e64-667a-4044-b388-79afcc6bcb69","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.public_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"public_https","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from everywhere","direction":"ingress","ethertype":"IPv4","id":"9a3826c7-105e-4761-8a7b-fb2d9f63c27c","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"31140e64-667a-4044-b388-79afcc6bcb69","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.public_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"https debug port 443 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"0e2a05db-a7c9-489f-9b8a-6445022e9420","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"http debug port 80 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"0456811c-4ebb-489d-8387-aedd09eb349a","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_8100","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Tomcat debug on port 8100 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"c479d69a-8000-4d6b-985d-c8b9b58f7a7f","port_range_max":8100,"port_range_min":8100,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-d4s-vpn-1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from D4Science VPN 1","direction":"ingress","ethertype":"IPv4","id":"30eebdd6-f912-44ba-ba2a-f54c0e89449d","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-d4s-vpn-2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from D4Science VPN 2","direction":"ingress","ethertype":"IPv4","id":"ffa7c61d-9963-4da0-a713-00fda18d7e38","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-jump-proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from the jump proxy","direction":"ingress","ethertype":"IPv4","id":"43f8a26d-29f6-4790-ab01-f4b12c9c52a8","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-s2i2s-vpn-1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"b2165477-3d0b-489f-945c-d2ca9e6abd22","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-s2i2s-vpn-2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"9410e2a2-9109-4f09-8248-a6a1c7962260","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"access_to_the_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"debugging","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"default","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"main_lb_to_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"prometheus_access_from_grafana","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"public_web","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"restricted_web","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"traffic_from_main_haproxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]}],"check_results":null} +{"version":4,"terraform_version":"1.11.6","serial":173,"lineage":"63543f0d-4b49-2066-95b6-653706374703","outputs":{"access_to_the_jump_proxy":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"acme_challenge_hostname":{"value":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","type":"string"},"availability_zones_names":{"value":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"type":["map","string"]},"basic_services_ip":{"value":{"ca":"10.10.0.4","ca_cidr":"10.10.0.4/32","forgejo":"10.10.0.165","forgejo_cidr":"10.10.0.165/32","haproxy_l7_1":"10.10.0.11","haproxy_l7_1_cidr":"10.10.0.11/32","haproxy_l7_2":"10.10.0.12","haproxy_l7_2_cidr":"10.10.0.12/32","keycloak_1":"10.10.0.163","keycloak_1_cidr":"10.10.0.163/32","keycloak_2":"10.10.0.164","keycloak_2_cidr":"10.10.0.164/32","octavia_main":"10.10.0.20","octavia_main_cidr":"10.10.0.20/32","postgresql":"10.10.0.162","postgresql_cidr":"10.10.0.162/32","prometheus":"10.10.0.10","prometheus_cidr":"10.10.0.10/32","ssh_jump":"10.10.0.5","ssh_jump_cidr":"10.10.0.5/32"},"type":["map","string"]},"debugging":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"default_security_group":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"default_security_group_id":{"value":"1ec8a419-f9cf-473f-a022-6499d67d57b8","type":"string"},"default_security_group_name":{"value":"default_for_all","type":"string"},"dns_zone":{"value":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"dns_zone_id":{"value":"e826e777-0196-4f63-b2a9-df07f70e618f","type":"string"},"floating_ip_pools":{"value":{"main_public_ip_pool":"external-network"},"type":["map","string"]},"haproxy_l7_data":{"value":{"flavor":"m1.medium","name":"main-haproxy-l7","vm_count":"2"},"type":["map","string"]},"internal_ca_data":{"value":{"flavor":"m1.small","name":"ca"},"type":["map","string"]},"internal_ca_id":{"value":"286b7a4d-33c6-451f-9019-d9fd79265181","type":"string"},"main_haproxy_l7_ids":{"value":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"type":["tuple",["string","string"]]},"main_haproxy_l7_ip":{"value":["10.10.0.11","10.10.0.12"],"type":["list","string"]},"main_lb_to_haproxy_l7_security_group":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"main_loadbalancer_hostname":{"value":"main-lb.s2i2s.cloud.isti.cnr.it.","type":"string"},"main_loadbalancer_id":{"value":"44dbe548-a436-4816-927a-2912f443b50f","type":"string"},"main_loadbalancer_ip":{"value":"10.10.0.20","type":"string"},"main_loadbalancer_public_ip":{"value":"146.48.30.30","type":"string"},"main_private_network":{"value":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"type":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}]},"main_private_subnet":{"value":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"type":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}]},"main_region":{"value":"isti_area_pi_1","type":"string"},"main_subnet_network_id":{"value":"19c649ee-96ea-438b-ac0c-512afdf5046d","type":"string"},"mtu_size":{"value":8942,"type":"number"},"os_project_data":{"value":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"type":["map","string"]},"prometheus_access_from_grafana":{"value":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"prometheus_hostname":{"value":"prometheus.s2i2s.cloud.isti.cnr.it.","type":"string"},"prometheus_public_ip":{"value":"146.48.31.67","type":"string"},"prometheus_server_data":{"value":{"flavor":"m1.medium","name":"prometheus","public_grafana_server_cidr":"146.48.28.103/32","vol_data_device":"/dev/vdb","vol_data_name":"prometheus-data","vol_data_size":"100"},"type":["map","string"]},"prometheus_server_id":{"value":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","type":"string"},"public_web":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"resolvers_ip":{"value":["146.48.29.97","146.48.29.98","146.48.29.99"],"type":["list","string"]},"restricted_web":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"ssh_jump_proxy":{"value":{"flavor":"m2.small","name":"ssh-jump-proxy"},"type":["map","string"]},"ssh_jump_proxy_hostname":{"value":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","type":"string"},"ssh_jump_proxy_id":{"value":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","type":"string"},"ssh_jump_proxy_public_ip":{"value":"146.48.31.105","type":"string"},"ssh_sources":{"value":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"type":["map","string"]},"traffic_from_main_haproxy":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"ubuntu2204_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","type":"string"},"ubuntu2404_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","type":"string"},"ubuntu_2204":{"value":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"type":["map","string"]},"ubuntu_2404":{"value":{"name":"Ubuntu-Noble-24.04.img","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075"},"type":["map","string"]}},"resources":[{"mode":"data","type":"terraform_remote_state","name":"privnet_dns_router","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../main_net_dns_router/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"almalinux_9":{"name":"AlmaLinux-9.8 20260526","user_data_file":"../../s2i2s_openstack_vm_data_scripts/almalinux9.sh","uuid":"172f1c52-fa06-4d7d-9db7-0735ab6ef403"},"availability_zone_no_gpu_name":"cnr-isti-nova-a","availability_zone_with_gpu_name":"cnr-isti-nova-gpu-a","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"centos_7":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","el7_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","external_gateway_ip":[{"ip_address":"146.48.30.6","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","flavor_list":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"floating_ip_pools":{"main_public_ip_pool":"external-network"},"main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","main_region":"isti_area_pi_1","main_subnet_network":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"policy_list":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"}},"type":["object",{"almalinux_9":["map","string"],"availability_zone_no_gpu_name":"string","availability_zone_with_gpu_name":"string","availability_zones_names":["map","string"],"centos_7":["map","string"],"default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","el7_data_file":"string","external_gateway_ip":["list",["object",{"ip_address":"string","subnet_id":"string"}]],"external_network":["map","string"],"external_network_id":"string","flavor_list":["map","string"],"floating_ip_pools":["map","string"],"main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_network_id":"string","main_region":"string","main_subnet_network":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"policy_list":["map","string"],"resolvers_ip":["list","string"],"ssh_sources":["map","string"],"ubuntu2204_data_file":"string","ubuntu_2204":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"managed","type":"openstack_blockstorage_volume_v3","name":"prometheus_data_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[{"device":"/dev/vdb","id":"59c354bc-bc05-4dbb-ad58-236da1186974","instance_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc"}],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"","enable_online_resize":true,"id":"59c354bc-bc05-4dbb-ad58-236da1186974","image_id":null,"metadata":{},"name":"prometheus-data","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"internal_ca","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.4","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:24 +0000 UTC","flavor_id":"2","flavor_name":"m1.small","force_delete":false,"hypervisor_hostname":"","id":"286b7a4d-33c6-451f-9019-d9fd79265181","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"ca","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.4","fixed_ip_v6":"","mac":"fa:16:3e:21:d8:29","name":"s2i2s-proj-main","port":"22a51c59-75c8-4031-a283-212751553d12","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-08-06 17:25:13 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.internal_ca_port","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"main_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.11","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"b42a0e99-6172-4a5d-886c-c0fb016da60e","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"main-haproxy-l7-01","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.11","fixed_ip_v6":"","mac":"fa:16:3e:b1:42:7f","name":"s2i2s-proj-main","port":"bd7d2fb6-db15-42d5-9779-1411c914a65e","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":{},"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all","traffic_from_main_lb_to_haproxy_l7"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-02-03 14:58:26 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_compute_servergroup_v2.main_haproxy_l7","openstack_networking_port_v2.main_haproxy_l7_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":1,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.12","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"b770644a-5c39-4db2-8811-fb62751bd789","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"main-haproxy-l7-02","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.12","fixed_ip_v6":"","mac":"fa:16:3e:a9:49:bb","name":"s2i2s-proj-main","port":"3018d5db-3d39-472f-b623-07c85e792ed5","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":{},"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all","traffic_from_main_lb_to_haproxy_l7"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-07-07 11:20:09 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_compute_servergroup_v2.main_haproxy_l7","openstack_networking_port_v2.main_haproxy_l7_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"prometheus_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.10","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:28 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"prometheus","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.10","fixed_ip_v6":"","mac":"fa:16:3e:bc:2d:03","name":"s2i2s-proj-main","port":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all","prometheus_access_from_grafana","restricted_web_service"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-02-03 14:59:22 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"ssh_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.5","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":30,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"10","flavor_name":"m2.small","force_delete":false,"hypervisor_hostname":"","id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"ssh-jump-proxy","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.5","fixed_ip_v6":"","mac":"fa:16:3e:75:76:4e","name":"s2i2s-proj-main","port":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all","ssh_access_to_the_jump_node"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-04-10 13:14:32 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.ssh_jump_proxy_port","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_compute_servergroup_v2","name":"main_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","members":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"name":"main_haproxy_l7","policies":["anti-affinity"],"region":"isti_area_pi_1","rules":[{"max_server_per_host":0}],"value_specs":null},"sensitive_attributes":[],"private":"bnVsbA=="}]},{"mode":"managed","type":"openstack_compute_volume_attach_v2","name":"prometheus_data_attach_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdb","id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc/59c354bc-bc05-4dbb-ad58-236da1186974","instance_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"59c354bc-bc05-4dbb-ad58-236da1186974"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_blockstorage_volume_v3.prometheus_data_vol","openstack_compute_instance_v2.prometheus_server","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"acme_challenge_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Delegation of the DNS-01 Let's Encrypt challenge to the isti.cnr.it zone","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/f755d13f-b2ce-4f36-986e-8be1c0c3fb18","name":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["_acme-challenge.isti.cnr.it."],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"CNAME","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"alertmanager_server_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus alertmanager","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/b8256293-8c32-4fa9-a43c-fa115339504f","name":"alertmanager.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["prometheus.s2i2s.cloud.isti.cnr.it."],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"CNAME","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"main_lb_dns_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the main Octavia load balancer","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/c8c97ddb-8edb-4e53-8c27-f5db9925c39e","name":"main-lb.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.30.30"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.main_lb_ip"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"prometheus_server_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the Prometheus server","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/ba7b0d61-3364-4451-9c9e-45e957c400ca","name":"prometheus.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.31.67"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.prometheus_server_ip"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"ssh_jump_proxy_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the SSH Proxy Jump server","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/72909fe7-c0a5-4060-bad6-be3c25680078","name":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.31.105"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.ssh_jump_proxy_ip"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_git_ssh_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"e45577a7-296c-409c-a7d9-4e0af600de7f","default_tls_container_ref":"","description":"SSH listener of the git service, forwarded to the HAPROXY L7 instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"405fa377-0104-4766-81d8-487048e7be90","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_git_ssh_listener","protocol":"TCP","protocol_port":22,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_http_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","default_tls_container_ref":"","description":"HTTP listener of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"ef26b673-26ff-4466-9c51-9114d85eeb64","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_http_listener","protocol":"TCP","protocol_port":80,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_https_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","default_tls_container_ref":"","description":"HTTPS listener of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"eb03441a-3aa4-4221-a698-81062c2cb9c1","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_https_listener","protocol":"TCP","protocol_port":443,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":3600000,"timeout_member_connect":10000,"timeout_member_data":7200000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_stats_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","default_tls_container_ref":"","description":"Listener for the stats of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"d410acca-25e5-45a2-9d22-90f33f2730d4","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_stats_listener","protocol":"TCP","protocol_port":8880,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_loadbalancer_v2","name":"main_lb","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"availability_zone":"","description":"Main L4 load balancer for the S2I2S services","flavor_id":"","id":"44dbe548-a436-4816-927a-2912f443b50f","loadbalancer_provider":"ovn","name":"s2i2s-cloud-l4-load-balancer","region":"isti_area_pi_1","security_group_ids":["0b382ff1-38ac-44bd-9f63-27df73af0476"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"vip_address":"10.10.0.20","vip_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","vip_port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","vip_qos_policy_id":"","vip_subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6MzAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_git_ssh_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"e45577a7-296c-409c-a7d9-4e0af600de7f","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"fe06a630-8c06-4155-aacd-83dd30c06122","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":2222,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"af293d57-19aa-4746-9692-3a98122e7342","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":2222,"subnet_id":"","weight":1}],"pool_id":"e45577a7-296c-409c-a7d9-4e0af600de7f","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_git_ssh_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_git_ssh_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_http_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"8ed17fa2-9259-4511-a91f-24820d80983a","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"2a0877ca-2fe6-4fbe-8de8-bae08ad47cbf","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":80,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"61c22a78-dd8c-4928-b301-733baac59389","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":80,"subnet_id":"","weight":1}],"pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_http_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_https_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"c631cfb1-327b-4e28-8d3c-8532f566a527","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"0f143500-1d20-44c3-8624-70eb5aa600ea","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":443,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"47925117-1d2c-4bef-adac-652ada82506e","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":443,"subnet_id":"","weight":1}],"pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_https_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_stats_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"f8d622ee-162d-44bf-aec1-1bcba2201cf1","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":8880,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"d6c2a4cf-bc49-4564-b3b5-f348939d9dd9","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":8880,"subnet_id":"","weight":1}],"pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_stats_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_git_ssh_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"7a18804a-8c3d-454b-be4a-0e6693385f85","max_retries":3,"max_retries_down":3,"name":"main_haproxy_git_ssh_monitor","pool_id":"e45577a7-296c-409c-a7d9-4e0af600de7f","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_git_ssh_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_git_ssh_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_http_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"837af662-7c87-4fd4-b25d-29aaac58f348","max_retries":3,"max_retries_down":3,"name":"main_haproxy_http_monitor","pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_http_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_https_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"03e086f3-6fb6-4109-a6cc-1475ac25b694","max_retries":3,"max_retries_down":3,"name":"main_haproxy_https_monitor","pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_https_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_stats_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"2c0dfc3e-de80-40d9-9594-158062522f33","max_retries":3,"max_retries_down":3,"name":"main_haproxy_stats_monitor","pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_stats_pool"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_git_ssh_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the SSH listener of the git service","id":"e45577a7-296c-409c-a7d9-4e0af600de7f","lb_method":"SOURCE_IP_PORT","listener_id":"405fa377-0104-4766-81d8-487048e7be90","loadbalancer_id":null,"name":"main-haproxy-lb-git-ssh","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_git_ssh_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_http_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the HTTP listener of the main HAPROXY instances","id":"8ed17fa2-9259-4511-a91f-24820d80983a","lb_method":"SOURCE_IP_PORT","listener_id":"ef26b673-26ff-4466-9c51-9114d85eeb64","loadbalancer_id":null,"name":"main-haproxy-lb-http","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_https_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the HTTPS listener of the main HAPROXY instances","id":"c631cfb1-327b-4e28-8d3c-8532f566a527","lb_method":"SOURCE_IP_PORT","listener_id":"eb03441a-3aa4-4221-a698-81062c2cb9c1","loadbalancer_id":null,"name":"main-haproxy-lb-https","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_stats_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the stats of the main HAPROXY instances","id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","lb_method":"SOURCE_IP_PORT","listener_id":"d410acca-25e5-45a2-9d22-90f33f2730d4","loadbalancer_id":null,"name":"main-haproxy-lb-stats","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"main_lb","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.20","floating_ip":"146.48.30.30","id":"973de1d6-75e9-4b67-90fa-b24221975e6f","port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb","openstack_networking_floatingip_v2.main_lb_ip"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"prometheus_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.10","floating_ip":"146.48.31.67","id":"35526990-3174-4822-aac3-b20a5c8a34bf","port_id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"ssh_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.5","floating_ip":"146.48.31.105","id":"a22d4285-4314-4dd9-9f8b-b52fb3f6dd60","port_id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.ssh_jump_proxy_ip","openstack_networking_port_v2.ssh_jump_proxy_port","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"main_lb_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.30.30","all_tags":[],"description":"Main L4 load balancer for the S2I2S services","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.20","id":"973de1d6-75e9-4b67-90fa-b24221975e6f","pool":"external-network","port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"prometheus_server_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.31.67","all_tags":[],"description":"Prometheus server","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.10","id":"35526990-3174-4822-aac3-b20a5c8a34bf","pool":"external-network","port_id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"ssh_jump_proxy_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.31.105","all_tags":[],"description":"SSH Proxy Jump Server","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.5","id":"a22d4285-4314-4dd9-9f8b-b52fb3f6dd60","pool":"external-network","port_id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"internal_ca_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.4"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"286b7a4d-33c6-451f-9019-d9fd79265181","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"ca.internal-cloud.isti.cnr.it.","hostname":"ca","ip_address":"10.10.0.4"}],"dns_name":"ca","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.4","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"22a51c59-75c8-4031-a283-212751553d12","mac_address":"fa:16:3e:21:d8:29","name":"ca-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"main_haproxy_l7_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.11"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"b42a0e99-6172-4a5d-886c-c0fb016da60e","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"main-haproxy-l7-01.internal-cloud.isti.cnr.it.","hostname":"main-haproxy-l7-01","ip_address":"10.10.0.11"}],"dns_name":"main-haproxy-l7-01","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.11","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"bd7d2fb6-db15-42d5-9779-1411c914a65e","mac_address":"fa:16:3e:b1:42:7f","name":"main-haproxy-l7-01-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":1,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.12"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"b770644a-5c39-4db2-8811-fb62751bd789","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"main-haproxy-l7-02.internal-cloud.isti.cnr.it.","hostname":"main-haproxy-l7-02","ip_address":"10.10.0.12"}],"dns_name":"main-haproxy-l7-02","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.12","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"3018d5db-3d39-472f-b623-07c85e792ed5","mac_address":"fa:16:3e:a9:49:bb","name":"main-haproxy-l7-02-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"prometheus_server_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.10"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","359d7ae7-cdff-47c2-bf69-7d423860d2d2","48e9366f-23a8-47df-abcd-66f84d4af395"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"prometheus.internal-cloud.isti.cnr.it.","hostname":"prometheus","ip_address":"10.10.0.10"}],"dns_name":"prometheus","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.10","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","mac_address":"fa:16:3e:bc:2d:03","name":"prometheus-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","359d7ae7-cdff-47c2-bf69-7d423860d2d2","48e9366f-23a8-47df-abcd-66f84d4af395"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"ssh_jump_proxy_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.5"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","4c6b6683-77fa-4d1a-8ba2-41acf10a12ba"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"ssh-jump-proxy.internal-cloud.isti.cnr.it.","hostname":"ssh-jump-proxy","ip_address":"10.10.0.5"}],"dns_name":"ssh-jump-proxy","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.5","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","mac_address":"fa:16:3e:75:76:4e","name":"ssh-jump-proxy-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","4c6b6683-77fa-4d1a-8ba2-41acf10a12ba"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"egress-ipv4","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"","direction":"egress","ethertype":"IPv4","id":"b231bb15-1585-4c96-9b48-b6907d89cf1d","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"grafana_d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from grafana.d4science.org","direction":"ingress","ethertype":"IPv4","id":"2f887282-b19c-4223-9db7-cb1c47e50e4d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.103/32","security_group_id":"48e9366f-23a8-47df-abcd-66f84d4af395","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.prometheus_access_from_grafana"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"8f5353f9-98a9-4dc2-aa32-cb0a007bd182","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"9cb7007d-1d03-44e7-9e99-816afc7ba905","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-8080","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"b02fab4f-49b2-475b-8c37-0104210ae4af","port_range_max":8080,"port_range_min":8080,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-8888","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"e4721ff4-95ba-4c3f-a4c4-f09f578ee377","port_range_max":8888,"port_range_min":8888,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"0de5b769-eb27-4636-b453-47105706cc40","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"480b75d2-2c6e-4e2b-8f2f-7a30c27c767c","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-8080","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"12bd97f1-9a9b-46b8-96dd-2adda86f3475","port_range_max":8080,"port_range_min":8080,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-8888","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"cc6792c1-b5aa-4835-a293-7284fc144e30","port_range_max":8888,"port_range_min":8888,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_1_peer","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Peer traffic from haproxy l7 1 to l7 2","direction":"ingress","ethertype":"IPv4","id":"f916f790-e372-4393-b0e2-d4f56a47db63","port_range_max":10000,"port_range_min":10000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_2_peer","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Peer traffic from haproxy l7 2 to l7 1","direction":"ingress","ethertype":"IPv4","id":"7dfd1cd5-e533-4d80-a4ba-9fabba824634","port_range_max":10000,"port_range_min":10000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_8880_stats_sources","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"d4s_vpn_1","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from d4s_vpn_1","direction":"ingress","ethertype":"IPv4","id":"62bea42a-c54b-4038-b0c1-8747480edd93","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"d4s_vpn_2","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from d4s_vpn_2","direction":"ingress","ethertype":"IPv4","id":"18e7fe2a-b726-4391-93cc-ca57941da91a","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"infrascience_net","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from infrascience_net","direction":"ingress","ethertype":"IPv4","id":"5e4d2492-b96b-4c4d-8a29-aec50b77ff1c","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.0/23","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"prometheus_private","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from prometheus_private","direction":"ingress","ethertype":"IPv4","id":"f73459b9-31fc-41b1-83d3-b1f2c71599ce","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"prometheus_public","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from prometheus_public","direction":"ingress","ethertype":"IPv4","id":"22464816-de38-458d-9ba5-765deb2cf41e","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.31.67/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"s2i2s_vpn_1","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from s2i2s_vpn_1","direction":"ingress","ethertype":"IPv4","id":"d7d394d9-8779-4f17-934d-8a490cdf72d9","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"s2i2s_vpn_2","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from s2i2s_vpn_2","direction":"ingress","ethertype":"IPv4","id":"4642bd23-0156-4760-a4c6-aaa7806f2c2e","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"http_from_everywhere","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"8e2d9198-7b9e-45a3-ada2-f62924d86e2f","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_d4s_vpn_1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from D4Science VPN 1","direction":"ingress","ethertype":"IPv4","id":"cf5e6a80-2ef1-4261-85b4-fc53f10fc932","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_d4s_vpn_2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from D4Science VPN 2","direction":"ingress","ethertype":"IPv4","id":"84bb5373-36e6-49a6-8605-c689e476833d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_s2i2s_vpn_1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"6822707c-ca3a-4230-ab91-075310c4277a","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_s2i2s_vpn_2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"b981a99f-0a99-4d76-8da4-316542afba4d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_shell_d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from shell.d4science.org","direction":"ingress","ethertype":"IPv4","id":"b8a463f6-5587-4495-ac71-f0f34abf78e7","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.95/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ingress-icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow ICMP from remote","direction":"ingress","ethertype":"IPv4","id":"a2344bc4-79ca-4458-9185-b63791b50f0f","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic to HAPROXY l7 port 443, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"bf80c3c6-c4e1-4f17-9578-435147a234dc","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic to HAPROXY l7 port 80, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"7c67970c-6bbc-4f8b-a4e9-256a4a1981f4","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_8880_healthcheck","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Health monitor probes to the HAPROXY l7 stats port 8880","direction":"ingress","ethertype":"IPv4","id":"aa58e85a-49b5-4360-9536-26f8138d939b","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.0/21","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_git_ssh","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Git over SSH, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"28dbc843-2fd5-41de-82b5-3e0d3019e835","port_range_max":2222,"port_range_min":2222,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"prometheus-node","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus access to the node exporter","direction":"ingress","ethertype":"IPv4","id":"df3d2e24-2457-4140-af24-6d59d536c421","port_range_max":9100,"port_range_min":9100,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"public_http","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"58149f48-3a84-4e0e-aa70-734f479c020f","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"31140e64-667a-4044-b388-79afcc6bcb69","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.public_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"public_https","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from everywhere","direction":"ingress","ethertype":"IPv4","id":"9a3826c7-105e-4761-8a7b-fb2d9f63c27c","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"31140e64-667a-4044-b388-79afcc6bcb69","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.public_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"https debug port 443 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"0e2a05db-a7c9-489f-9b8a-6445022e9420","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"http debug port 80 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"0456811c-4ebb-489d-8387-aedd09eb349a","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_8100","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Tomcat debug on port 8100 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"c479d69a-8000-4d6b-985d-c8b9b58f7a7f","port_range_max":8100,"port_range_min":8100,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-d4s-vpn-1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from D4Science VPN 1","direction":"ingress","ethertype":"IPv4","id":"30eebdd6-f912-44ba-ba2a-f54c0e89449d","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-d4s-vpn-2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from D4Science VPN 2","direction":"ingress","ethertype":"IPv4","id":"ffa7c61d-9963-4da0-a713-00fda18d7e38","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-jump-proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from the jump proxy","direction":"ingress","ethertype":"IPv4","id":"43f8a26d-29f6-4790-ab01-f4b12c9c52a8","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-s2i2s-vpn-1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"b2165477-3d0b-489f-945c-d2ca9e6abd22","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-s2i2s-vpn-2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"9410e2a2-9109-4f09-8248-a6a1c7962260","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"access_to_the_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"debugging","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"default","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"main_lb_to_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"prometheus_access_from_grafana","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"public_web","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"restricted_web","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"traffic_from_main_haproxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]}],"check_results":null}