Note: this Terraform provider is now publically available on the Terraform Registry.
Terraform Provider for managing Cisco Secure Workload (Tetration) resources.
Create a main.tf
file with the following content, save, and run terraform init
from a terminal window in the same directory as main.tf
:
terraform {
required_providers {
tetration = {
source = "CiscoDevNet/tetration"
version = "0.1.0"
}
}
}
provider "tetration" {
api_key = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
api_secret = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
api_url = "https://tenant.tetrationpreview.com"
disable_tls_verification = false
}
resource "tetration_filter" "filter" {
name = "Terraform created filter"
query = <<EOF
{
"type": "eq",
"field": "ip",
"value": "10.0.0.1"
}
EOF
app_scope_id = "5ed6890c497d4f55eb5c585c"
primary = true
public = false
}
make build
mkdir ~/.terraform.d/plugins/darwin_amd64
cp terraform-provider-tetration ~/.terraform.d/plugins/darwin_amd64
3.Add plugin to terraform for the current module you are working on
cd /path/to/terraform/module
terraform init -plugin-dir ~/.terraform.d/plugins/darwin_amd64
4.Write terraform code using this provider.
provider "tetration" {
api_key = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
api_secret = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
api_url = "https://tenant.tetrationpreview.com"
disable_tls_verification = false
}
resource "tetration_filter" "filter" {
name = "Terraform created filter"
query = <<EOF
{
"type": "eq",
"field": "ip",
"value": "10.0.0.1"
}
EOF
app_scope_id = "5ed6890c497d4f55eb5c585c"
primary = true
public = false
}
More example terraform modules for managing tetration resources with this provider.
Tests can be executed via
make test
When the test process is running any variable set in a top level .env
file in this project will be available to the tests as an environment variable.
Example .env
file
VARIABLE=value
This file is gitignored to prevent any sensitive material such as api keys from being published.
To build binaries for mac, linux(amd64), windows(x86), run
make cross-compile
The built binaries will be placed in the bin directory.