Merge pull request #315 from sbercloud-terraform/release-1.12.3

added vpn (and tests), fixed error for dds resource, updated docs (network ACL rule, ELB listener)

docs/data-sources/vpn_connection_health_checks.md

@@ -0,0 +1,67 @@
+---
+subcategory: "Virtual Private Network (VPN)"
+layout: "sbercloud"
+page_title: "SberCloud: sbercloud_vpn_connection_health_checks"
+description: ""
+---
+
+# sbercloud_vpn_connection_health_checks
+
+Manages a VPN connection health checks data source within SberCloud.
+
+## Example Usage
+
+```hcl
+variable "connection_id" {}
+variable "status" {}
+variable "source_ip" {}
+variable "destination_ip" {}
+
+data "sbercloud_vpn_connection_health_checks" "services" {
+  connection_id  = var.connection_id
+  status         = var.status
+  source_ip      = var.source_ip
+  destination_ip = var.destination_ip
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `region` - (Optional, String) Specifies the region in which to obtain the VPN connection health check.
+  If omitted, the provider-level region will be used.
+
+* `connection_id` - (Optional, String) Specifies the ID of the VPN connection.
+
+* `status` - (Optional, String) Specifies the status of the VPN connection health check.
+
+* `source_ip` - (Optional, String) Specifies the source IP of the VPN connection health check.
+
+* `destination_ip` - (Optional, String) Specifies the destination IP of the VPN connection health check.
+
+## Attribute Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+* `id` - The data source ID.
+
+* `connection_health_checks` - All resource connection health checks that match the filter parameters.
+  The [connection_health_checks](#connection_health_checks) structure is documented below.
+
+<a name="connection_health_checks"></a>
+The `connection_health_checks` block supports:
+
+* `id` - The ID of the connection health check.
+
+* `status` - The status of the connection health check.
+
+* `connection_id` - The connection ID of the connection health check.
+
+* `type` - The type of the connection health check.
+
+* `source_ip` - The source IP address of the VPN connection.
+
+* `destination_ip` - The destination IP address of the VPN connection.
+
+* `proto_type` - The proto type of the connection health check.

docs/data-sources/vpn_connections.md

@@ -0,0 +1,165 @@
+---
+subcategory: "Virtual Private Network (VPN)"
+layout: "sbercloud"
+page_title: "SberCloud: sbercloud_vpn_connections"
+description: ""
+---
+
+# sbercloud_vpn_connections
+
+Use this data source to get a list of VPN connections.
+
+## Example Usage
+
+```hcl
+variable "status" {}
+variable "name" {}
+variable "vpn_type" {}
+variable "gateway_id" {}
+variable "gateway_ip" {}
+
+data "sbercloud_vpn_connections" "services" {
+  status     = var.status
+  name       = var.name
+  vpn_type   = var.vpn_type
+  gateway_id = var.gateway_id
+  gateway_ip = var.gateway_ip
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `region` - (Optional, String) Specifies the region in which to obtain the VPN customer gateways.
+  If omitted, the provider-level region will be used.
+
+* `connection_id` - (Optional, String) Specifies the ID of the VPN connection.
+
+* `name` - (Optional, String) Specifies the name of the VPN connection.
+
+* `gateway_id` - (Optional, String) Specifies the gateway ID of the VPN connection.
+
+* `gateway_ip` - (Optional, String) Specifies the gateway IP of the VPN connection.
+
+* `status` - (Optional, String) Specifies the status of the VPN connection.
+
+* `vpn_type` - (Optional, String) Specifies the VPN type of the VPN connection.
+
+## Attribute Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+* `id` - The data source ID.
+
+* `connections` - All resource connection that match the filter parameters.
+  The [connections](#connections) structure is documented below.
+
+<a name="connections"></a>
+The `connections` block supports:
+
+* `id` - Indicates the ID of the connection.
+
+* `name` - Indicates the name of the connection.
+
+* `status` - Indicates the status of the connection.
+
+* `vpn_type` - Indicates the VPN type of the connection.
+
+* `gateway_id` - Indicates the gateway ID of the connection.
+
+* `gateway_ip` - Indicates the gateway IP of the connection.
+
+* `customer_gateway_id` - Indicates the customer gateway ID of the connection.
+
+* `peer_subnets` - Indicates the peer subnets of the connection.
+
+* `tunnel_local_address` - Indicates the tunnel local address of the connection.
+
+* `tunnel_peer_address` - Indicates the tunnel peer address of the connection.
+
+* `enable_nqa` - Indicates the enable nqa of the connection.
+
+* `enterprise_project_id` - Indicates the enterprise project ID of the connection.
+
+* `connection_monitor_id` - Indicates the connection monitor ID of the connection.
+
+* `ha_role` - Indicates the ha role of the connection.
+
+* `created_at` - The created time.
+
+* `updated_at` - The last updated time.
+
+* `policy_rules` - Indicates the policy rules information of the connection.
+
+* `ipsecpolicy` - Indicates the ipsecpolicy information of the connection.
+
+* `ikepolicy` - Indicates the ikepolicy information of the connection.
+
+  The [policy_rules](#policy_Rules) structure is documented below.
+
+<a name="policy_Rules"></a>
+The `policy_rules` block supports:
+
+* `rule_index` - Indicates the rule index of the policy rules.
+
+* `source` - Indicates the source of the policy rules certificate.
+
+* `destination` - Indicates the destination of the policy rules certificate.
+
+  The [ipsecpolicy](#ipsecpolicy) structure is documented below.
+
+<a name="ipsecpolicy"></a>
+The `ipsecpolicy` block supports:
+
+* `authentication_algorithm` - Indicates the authentication algorithm of the ipsecpolicy certificate.
+
+* `encryption_algorithm` - Indicates the encryption algorithm of the ipsecpolicy certificate.
+
+* `pfs` - Indicates the pfs of the ipsecpolicy certificate.
+
+* `transform_protocol` - Indicates the transform protocol of the ipsecpolicy certificate.
+
+* `lifetime_seconds` - Indicates the lifetime seconds of the ipsecpolicy certificate.
+
+* `encapsulation_mode` - Indicates the encapsulation mode of the ipsecpolicy certificate.
+
+  The [ikepolicy](#ikepolicy) structure is documented below.
+
+<a name="ikepolicy"></a>
+The `ikepolicy` block supports:
+
+* `ike_version` - Indicates the ike version of the ikepolicy certificate.
+
+* `phase1_negotiation_mode` - Indicates the phase1 negotiation mode of the ikepolicy certificate.
+
+* `authentication_algorithm` - Indicates the authentication algorithm of the ikepolicy certificate.
+
+* `encryption_algorithm` - Indicates the encryption algorithm of the ikepolicy certificate.
+
+* `dh_group` - Indicates the dh group of the ikepolicy certificate.
+
+* `authentication_method` - Indicates the souauthentication methodrce of the ikepolicy certificate.
+
+* `lifetime_method` - Indicates the lifetime method of the ikepolicy certificate.
+
+* `local_id_type` - Indicates the local ID type of the ikepolicy certificate.
+
+* `local_id` - Indicates the local ID of the ikepolicy certificate.
+
+* `peer_id_type` - Indicates the peer ID type of the ikepolicy certificate.
+
+* `peer_id` - Indicates the peer ID of the ikepolicy certificate.
+
+* `dpd` - Indicates the dpd information of the ikepolicy certificate.
+
+ The [dpd](#dpd) structure is documented below.
+
+<a name="dpd"></a>
+The `ikedpdpolicy` block supports:
+
+* `timeout` - Indicates the timeout of the dpd certificate.
+
+* `interval` - Indicates the interval of the dpd certificate.
+
+* `msg` - Indicates the msg of the dpd certificate.

docs/data-sources/vpn_customer_gateways.md

@@ -0,0 +1,92 @@
+---
+subcategory: "Virtual Private Network (VPN)"
+layout: "sbercloud"
+page_title: "SberCloud: sbercloud_vpn_customer_gateways"
+description: ""
+---
+
+# sbercloud_vpn_customer_gateways
+
+Use this data source to get a list of VPN customer gateways.
+
+## Example Usage
+
+```hcl
+variable "route_mode" {}
+variable "name" {}
+variable "asn" {}
+variable "ip" {}
+
+data "sbercloud_vpn_customer_gateways" "services" {
+  route_mode = var.route_mode
+  name       = var.name
+  asn        = var.asn
+  ip         = var.ip
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `region` - (Optional, String) Specifies the region in which to obtain the VPN customer gateways.
+  If omitted, the provider-level region will be used.
+
+* `name` - (Optional, String) Specifies the customer gateway name.
+
+* `ip` - (Optional, String) Specifies the IP address of the customer gateway.
+
+* `route_mode` - (Optional, String) Specifies the route mode of the customer gateway. The value can be **static** and **bgp**.
+
+* `asn` - (Optional, Int) Specifies the BGP ASN number of the customer gateway, only works when the route_mode is
+  **bgp**. The value ranges from **1** to **4294967295**.
+
+* `customer_gateway_id` - (Optional, String) Specifies the customer gateway ID used as the query filter.
+
+## Attribute Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+* `id` - The data resource ID.
+
+* `customer_gateways` - All resource customer gateways that match the filter parameters.
+  The [customer_gateways](#customer_Gateways) structure is documented below.
+
+<a name="customer_Gateways"></a>
+The `customer_gateways` block supports:
+
+* `id` - Indicates the ID of the customer gateway.
+
+* `name` - Indicates the name of the customer gateway.
+
+* `ip` - Indicates the IP of the customer gateway.
+
+* `route_mode` - Indicates the route mode of the customer gateway.
+
+* `asn` - Indicates the asn of the customer gateway.
+
+* `id_type` - Indicates the id_type of the customer gateway.
+
+* `id_value` - Indicates the id_value of the customer gateway.
+
+* `created_at` - The created time.
+
+* `updated_at` - The last updated time.
+
+* `ca_certificate` - Indicates the ca certificate information of the customer gateway.
+  The [ca_certificate](#ca_Certificate) structure is documented below.
+
+<a name="ca_Certificate"></a>
+The `ca_certificate` block supports:
+
+* `serial_number` - Indicates the serial number of the customer gateway certificate.
+
+* `signature_algorithm` - Indicates the signature algorithm of the customer gateway certificate.
+
+* `issuer` - Indicates the issuer of the customer gateway certificate.
+
+* `subject` - Indicates the subject of the customer gateway certificate.
+
+* `expire_time` - Indicates the expire time of the customer gateway certificate.
+
+* `is_updatable` - Indicates whether the customer gateway certificate is updatable.

docs/data-sources/vpn_gateway_availability_zones.md

@@ -0,0 +1,41 @@
+---
+subcategory: "Virtual Private Network (VPN)"
+layout: "sbercloud"
+page_title: "SberCloud: sbercloud_vpn_gateway_availability_zones"
+description: ""
+---
+
+# sbercloud_vpn_gateway_availability_zones
+
+Use this data source to get the list of VPN gateway availability zones.
+
+## Example Usage
+
+```hcl
+variable "flavor" {}
+
+data "sbercloud_vpn_gateway_availability_zones" "test"{
+  flavor = var.flavor
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `region` - (Optional, String) Specifies the region in which to query the data source.
+  If omitted, the provider-level region will be used.
+
+* `flavor` - (Required, String) Specifies the flavor name.
+  The value can be **Basic**, **Professional1**, **Professional2** and **GM**.
+
+* `attachment_type` - (Optional, String) Specifies the attachment type.
+  The value can be **vpc** and **er**. Defaults to **vpc**.
+
+## Attribute Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+* `id` - The data source ID.
+
+* `names` - The names of the availability zones.