diff --git a/docs/data-sources/elb_certificate.md b/docs/data-sources/elb_certificate.md
index d3376f6e..a5f35d9b 100644
--- a/docs/data-sources/elb_certificate.md
+++ b/docs/data-sources/elb_certificate.md
@@ -27,7 +27,7 @@ The following arguments are supported:
-> **NOTE:** The certificate name is not unique. Only returns the last created one when matched multiple certificates.
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
diff --git a/docs/data-sources/identity_project_v3.md b/docs/data-sources/identity_project_v3.md
index 8c37964c..7dc2c778 100644
--- a/docs/data-sources/identity_project_v3.md
+++ b/docs/data-sources/identity_project_v3.md
@@ -18,13 +18,15 @@ data "flexibleengine_identity_project_v3" "project_1" {
The following arguments are supported:
-* `name` - (Optional) The name of the project.
+* `name` - (Optional, String) The name of the project.
-* `domain_id` - (Optional) The domain this project belongs to.
+* `domain_id` - (Optional, String) The domain this project belongs to.
-* `parent_id` - (Optional) The parent of this project.
+* `parent_id` - (Optional, String) The parent of this project.
-## Attributes Reference
+* `enabled` - (Optional, Bool) The enabling status of this project.
+
+## Attribute Reference
`id` is set to the ID of the found project. In addition, the following attributes
are exported:
diff --git a/docs/data-sources/lb_certificate_v2.md b/docs/data-sources/lb_certificate_v2.md
index e639da6d..d9feaa42 100644
--- a/docs/data-sources/lb_certificate_v2.md
+++ b/docs/data-sources/lb_certificate_v2.md
@@ -23,16 +23,16 @@ data "flexibleengine_lb_certificate_v2" "by_name" {
The arguments of this data source act as filters for querying the available Certificates in the current region.
The given filters must match exactly one Certificate whose data will be exported as attributes.
-* `id` - (Optional) The id of the specific Certificate to retrieve.
+* `id` - (Optional, String) The id of the specific Certificate to retrieve.
-* `name` - (Optional) Human-readable name for the Certificate. Does not have
+* `name` - (Optional, String) Human-readable name for the Certificate. Does not have
to be unique.
-* `description` - (Optional) Human-readable description for the Certificate.
+* `description` - (Optional, String) Human-readable description for the Certificate.
-* `domain` - (Optional) The domain of the Certificate.
+* `domain` - (Optional, String) The domain of the Certificate.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
diff --git a/docs/data-sources/lb_loadbalancer_v2.md b/docs/data-sources/lb_loadbalancer_v2.md
index 47c71253..d5ee3aad 100644
--- a/docs/data-sources/lb_loadbalancer_v2.md
+++ b/docs/data-sources/lb_loadbalancer_v2.md
@@ -18,6 +18,9 @@ data "flexibleengine_lb_loadbalancer_v2" "test" {
## Argument Reference
+* `region` - (Optional, String) The region in which to query the data source. If omitted, the provider-level region
+ will be used.
+
* `name` - (Optional, String) Specifies the name of the load balancer.
* `id` - (Optional, String) Specifies the data source ID of the load balancer in UUID format.
@@ -28,7 +31,7 @@ data "flexibleengine_lb_loadbalancer_v2" "test" {
* `vip_address` - (Optional, String) Specifies the private IP address of the load balancer.
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
diff --git a/docs/resources/elb_backend.md b/docs/resources/elb_backend.md
index 1e9de9f6..74d6c20d 100644
--- a/docs/resources/elb_backend.md
+++ b/docs/resources/elb_backend.md
@@ -24,27 +24,15 @@ resource "flexibleengine_elb_backend" "backend" {
The following arguments are supported:
-* `listener_id` - (Required) Specifies the listener ID.
-
-* `server_id` - (Required) Specifies the backend member ID.
-
-* `address` - (Required) Specifies the private IP address of the backend member.
-
-## Attributes Reference
-
-The following attributes are exported:
-
-* `id` - Specifies the backend member ID.
-* `listener_id` - See Argument Reference above.
-* `server_id` - See Argument Reference above.
-* `address` - See Argument Reference above.
-* `server_address` - Specifies the floating IP address assigned to the backend member.
-* `status` - Specifies the backend ECS status. The value is ACTIVE, PENDING,
- or ERROR.
-* `health_status` - Specifies the health check status. The value is NORMAL,
- ABNORMAL, or UNAVAILABLE.
-* `update_time` - Specifies the time when information about the backend member
- was updated.
-* `create_time` - Specifies the time when the backend member was created.
-* `server_name` - Specifies the backend member name.
-* `listeners` - Specifies the listener to which the backend member belongs.
+* `listener_id` - (Required, String, ForceNew) Specifies the listener ID.
+
+* `server_id` - (Required, String, ForceNew) Specifies the backend member ID.
+
+* `address` - (Required, String, ForceNew) Specifies the private IP address of the backend member.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/docs/resources/elb_certificate.md b/docs/resources/elb_certificate.md
index 632b9a2b..2295dae8 100644
--- a/docs/resources/elb_certificate.md
+++ b/docs/resources/elb_certificate.md
@@ -84,7 +84,7 @@ The following arguments are supported:
* `description` - (Optional, String) Specifies the description of the certificate.
* `type` - (Optional, String, ForceNew) Specifies the certificate type. The default value is "server".
- The value can be one of the following:
+ Changing this creates a new certificate. The value can be one of the following:
+ server: indicates the server certificate.
+ client: indicates the CA certificate.
@@ -96,22 +96,14 @@ The following arguments are supported:
* `domain` - (Optional, String) Specifies the domain of the certificate. The value contains a maximum of 100 characters.
This parameter is valid only when `type` is set to "server".
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
* `id` - Specifies a resource ID in UUID format.
* `update_time` - Indicates the update time.
* `create_time` - Indicates the creation time.
-* `expire_time` - Indicates the expire time.
-
-## Timeouts
-
-This resource provides the following timeouts configuration options:
-
-* `create` - Default is 10 minute.
-* `update` - Default is 10 minute.
-* `delete` - Default is 5 minute.
+* `expire_time` - Indicates the expired time.
## Import
diff --git a/docs/resources/elb_health.md b/docs/resources/elb_health.md
index a5328a8c..696af36e 100644
--- a/docs/resources/elb_health.md
+++ b/docs/resources/elb_health.md
@@ -27,41 +27,41 @@ resource "flexibleengine_elb_health" "healthcheck" {
The following arguments are supported:
-* `region` - (Optional) The region in which to create the elb health. If
+* `region` - (Optional, String, ForceNew) The region in which to create the elb health. If
omitted, the `region` argument of the provider is used. Changing this
creates a new elb health.
-* `listener_id` - (Required) Specifies the ID of the listener to which the health
+* `listener_id` - (Required, String, ForceNew) Specifies the ID of the listener to which the health
check belongs.
-* `healthcheck_protocol` - (Optional) Specifies the protocol used for the health
+* `healthcheck_protocol` - (Optional, String) Specifies the protocol used for the health
check. The value can be HTTP or TCP (case-insensitive).
-* `healthcheck_uri` - (Optional) Specifies the URI for health check. This parameter
+* `healthcheck_uri` - (Optional, String) Specifies the URI for health check. This parameter
is valid when healthcheck_ protocol is HTTP. The value is a string of 1 to 80
characters that must start with a slash (/) and can only contain letters, digits,
and special characters, such as -/.%?#&.
-* `healthcheck_connect_port` - (Optional) Specifies the port used for the health
+* `healthcheck_connect_port` - (Optional, Int) Specifies the port used for the health
check. The value ranges from 1 to 65535.
-* `healthy_threshold` - (Optional) Specifies the threshold at which the health
+* `healthy_threshold` - (Optional, Int) Specifies the threshold at which the health
check result is success, that is, the number of consecutive successful health
checks when the health check result of the backend server changes from fail
to success. The value ranges from 1 to 10.
-* `unhealthy_threshold` - (Optional) Specifies the threshold at which the health
+* `unhealthy_threshold` - (Optional, Int) Specifies the threshold at which the health
check result is fail, that is, the number of consecutive failed health checks
when the health check result of the backend server changes from success to fail.
The value ranges from 1 to 10.
-* `healthcheck_timeout` - (Optional) Specifies the maximum timeout duration
+* `healthcheck_timeout` - (Optional, Int) Specifies the maximum timeout duration
(s) for the health check. The value ranges from 1 to 50.
-* `healthcheck_interval` - (Optional) Specifies the maximum interval (s) for
+* `healthcheck_interval` - (Optional, Int) Specifies the maximum interval (s) for
health check. The value ranges from 1 to 5.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -75,3 +75,11 @@ The following attributes are exported:
* `unhealthy_threshold` - See Argument Reference above.
* `healthcheck_timeout` - See Argument Reference above.
* `healthcheck_interval` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/docs/resources/elb_ipgroup.md b/docs/resources/elb_ipgroup.md
index 8c84e065..9243d067 100644
--- a/docs/resources/elb_ipgroup.md
+++ b/docs/resources/elb_ipgroup.md
@@ -33,28 +33,23 @@ The following arguments are supported:
* `description` - (Optional, String) Specifies the description of the ip group.
-* `ip_list` - (Required, List) Specifies an array of one or more ip addresses. The ip_list object structure is
- documented below.
+* `ip_list` - (Required, List) Specifies an array of one or more ip addresses. The [ip_list](#elb_ip_list) object
+ structure is documented below.
+
The `ip_list` block supports:
* `ip` - (Required, String) IP address or CIDR block.
* `description` - (Optional, String) Human-readable description for the ip.
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
* `id` - The uuid of the ip group.
-## Timeouts
-
-This resource provides the following timeouts configuration options:
-
-* `create` - Default is 10 minute.
-* `update` - Default is 10 minute.
-* `delete` - Default is 5 minute.
+## Import
ELB IP group can be imported using the IP group ID, e.g.
diff --git a/docs/resources/elb_listener.md b/docs/resources/elb_listener.md
index fa6ae69f..254f4075 100644
--- a/docs/resources/elb_listener.md
+++ b/docs/resources/elb_listener.md
@@ -37,85 +37,85 @@ resource "flexibleengine_elb_listener" "listener" {
The following arguments are supported:
-* `region` - (Optional) The region in which to create the elb listener. If
+* `region` - (Optional, String, ForceNew) The region in which to create the elb listener. If
omitted, the `region` argument of the provider is used. Changing this
creates a new elb listener.
-* `loadbalancer_id` - (Required) Specifies the ID of the load balancer to which
- the listener belongs.
+* `loadbalancer_id` - (Required, String, ForceNew) Specifies the ID of the load balancer to which
+ the listener belongs. Changing this creates a new elb listener.
-* `name` - (Required) Specifies the load balancer name. The name is a string
+* `name` - (Optional, String) Specifies the load balancer name. The name is a string
of 1 to 64 characters that consist of letters, digits, underscores (_), and
hyphens (-).
-* `protocol` - (Required) Specifies the listening protocol used for layer 4
- or 7. The value can be HTTP, TCP, HTTPS, or UDP.
+* `protocol` - (Required, String, ForceNew) Specifies the listening protocol used for layer 4
+ or 7. The value can be HTTP, TCP, HTTPS, or UDP. Changing this creates a new elb listener.
-* `protocol_port` - (Required) Specifies the listening port. The value ranges from 1
+* `protocol_port` - (Required, Int) Specifies the listening port. The value ranges from 1
to 65535.
-* `backend_protocol` - (Required) Specifies the backend protocol. If the value
+* `backend_protocol` - (Required, String, ForceNew) Specifies the backend protocol. If the value
of protocol is UDP, the value of this parameter can only be UDP. The value can
- be HTTP, TCP, or UDP.
+ be HTTP, TCP, or UDP. Changing this creates a new elb listener.
-* `backend_port` - (Required) Specifies the backend port. The value ranges from
+* `backend_port` - (Required, Int) Specifies the backend port. The value ranges from
1 to 65535.
-* `lb_algorithm` - (Required) Specifies the load balancing algorithm for the
+* `lb_algorithm` - (Required, String) Specifies the load balancing algorithm for the
listener. The value can be roundrobin, leastconn, or source.
-* `description` - (Optional) Provides supplementary information about the listener.
+* `description` - (Optional, String) Provides supplementary information about the listener.
The value is a string of 0 to 128 characters and cannot be <>.
-* `session_sticky` - (Optional) Specifies whether to enable sticky session.
+* `session_sticky` - (Optional, Bool, ForceNew) Specifies whether to enable sticky session.
The value can be true or false. The Sticky session is enabled when the value
is true, and is disabled when the value is false. If the value of protocol is
- HTTP, HTTPS, or TCP, and the value of lb_algorithm is not roundrobin, the value
- of this parameter can only be false.
+ HTTP, HTTPS, or TCP, and the value of lb_algorithm is not round-robin, the value
+ of this parameter can only be false. Changing this creates a new elb listener.
-* `session_sticky_type` - (Optional) Specifies the cookie processing method.
+* `session_sticky_type` - (Optional, String, ForceNew) Specifies the cookie processing method.
The value is insert. insert indicates that the cookie is inserted by the load
balancer. This parameter is valid when protocol is set to HTTP, and session_sticky
to true. The default value is insert. This parameter is invalid when protocol
- is set to TCP or UDP, which means the parameter is empty.
+ is set to TCP or UDP, which means the parameter is empty. Changing this creates a new elb listener.
-* `cookie_timeout` - (Optional) Specifies the cookie timeout period (minutes).
+* `cookie_timeout` - (Optional, Int, ForceNew) Specifies the cookie timeout period (minutes).
This parameter is valid when protocol is set to HTTP, session_sticky to true,
and session_sticky_type to insert. This parameter is invalid when protocol is
- set to TCP or UDP. The value ranges from 1 to 1440.
+ set to TCP or UDP. The value ranges from 1 to 1440. Changing this creates a new elb listener.
-* `tcp_timeout` - (Optional) Specifies the TCP timeout period (minutes). This
+* `tcp_timeout` - (Optional, Int) Specifies the TCP timeout period (minutes). This
parameter is valid when protocol is set to TCP. The value ranges from 1 to 5.
-* `tcp_draining` - (Optional) Specifies whether to maintain the TCP connection
+* `tcp_draining` - (Optional, Bool) Specifies whether to maintain the TCP connection
to the backend ECS after the ECS is deleted. This parameter is valid when protocol
is set to TCP. The value can be true or false.
-* `tcp_draining_timeout` - (Optional) Specifies the timeout duration (minutes)
+* `tcp_draining_timeout` - (Optional, Int) Specifies the timeout duration (minutes)
for the TCP connection to the backend ECS after the ECS is deleted. This parameter
is valid when protocol is set to TCP, and tcp_draining to true. The value ranges
from 0 to 60.
-* `certificate_id` - (Optional) Specifies the ID of the SSL certificate used
+* `certificate_id` - (Optional, String, ForceNew) Specifies the ID of the SSL certificate used
for security authentication when HTTPS is used to make API calls. This parameter
is mandatory if the value of protocol is HTTPS. The value can be obtained by
- viewing the details of the SSL certificate.
+ viewing the details of the SSL certificate. Changing this creates a new elb listener.
-* `udp_timeout` - (Optional) Specifies the UDP timeout duration (minutes). This
+* `udp_timeout` - (Optional, Int) Specifies the UDP timeout duration (minutes). This
parameter is valid when protocol is set to UDP. The value ranges from 1 to 1440.
-* `ssl_protocols` - (Optional) Specifies the SSL protocol standard supported
+* `ssl_protocols` - (Optional, String, ForceNew) Specifies the SSL protocol standard supported
by a tracker, which is used for enabling specified encryption protocols. This
parameter is valid only when the value of protocol is set to HTTPS. The value
- is TLSv1.2 or TLSv1.2 TLSv1.1 TLSv1. The default value is TLSv1.2.
+ is TLSv1.2 or TLSv1.2 TLSv1.1 TLSv1. The default value is TLSv1.2. Changing this creates a new elb listener.
-* `ssl_ciphers` - (Optional) Specifies the cipher suite of an encryption protocol.
+* `ssl_ciphers` - (Optional, String) Specifies the cipher suite of an encryption protocol.
This parameter is valid only when the value of protocol is set to HTTPS. The
value is Default, Extended, or Strict. The default value is Default. The value
can only be set to Extended if the value of ssl_protocols is set to TLSv1.2
TLSv1.1 TLSv1.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -139,5 +139,11 @@ The following attributes are exported:
* `udp_timeout` - See Argument Reference above.
* `ssl_protocols` - See Argument Reference above.
* `ssl_ciphers` - See Argument Reference above.
-* `admin_state_up` - Specifies the status of the load balancer. Value range:
- false: The load balancer is disabled. true: The load balancer runs properly.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/docs/resources/elb_loadbalancer.md b/docs/resources/elb_loadbalancer.md
index 3d4f320f..e997f04f 100644
--- a/docs/resources/elb_loadbalancer.md
+++ b/docs/resources/elb_loadbalancer.md
@@ -52,54 +52,54 @@ resource "flexibleengine_elb_loadbalancer" "elb" {
The following arguments are supported:
-* `region` - (Optional) The region in which to create the loadbalancer. If
+* `region` - (Optional, String, ForceNew) The region in which to create the loadbalancer. If
omitted, the `region` argument of the provider is used. Changing this
creates a new loadbalancer.
-* `name` - (Required) Specifies the load balancer name. The name is a string
+* `name` - (Optional, String) Specifies the load balancer name. The name is a string
of 1 to 64 characters that consist of letters, digits, underscores (_),
and hyphens (-).
-* `type` - (Required) Specifies the load balancer type. The value can be
+* `type` - (Required, String, ForceNew) Specifies the load balancer type. The value can be
Internal or External.
-* `vpc_id` - (Required) Specifies the VPC ID.
+* `vpc_id` - (Required, String, ForceNew) Specifies the VPC ID.
-* `description` - (Optional) Provides supplementary information about the
+* `description` - (Optional, String) Provides supplementary information about the
listener. The value is a string of 0 to 128 characters and cannot be <>.
-* `vip_address` - (Optional) Specifies the IP address provided by ELB.
+* `vip_address` - (Optional, String, ForceNew) Specifies the IP address provided by ELB.
When type is set to External, the value of this parameter is the elastic
IP address. When type is set to Internal, the value of this parameter is
the private network IP address. You can select an existing elastic IP address
and create a public network load balancer. When this parameter is configured,
parameter `bandwidth` is invalid.
-* `bandwidth` - (Optional) Specifies the bandwidth (Mbit/s). This parameter
+* `bandwidth` - (Optional, Int) Specifies the bandwidth (Mbit/s). This parameter
is valid when type is set to External, and it is invalid when type
is set to Internal. The value ranges from 1 to 300.
-* `vip_subnet_id` - (Optional) Specifies the ID of the private network
+* `vip_subnet_id` - (Optional, String, ForceNew) Specifies the ID of the private network
to be added. This parameter is mandatory when type is set to Internal,
and it is invalid when type is set to External.
-* `security_group_id` - (Optional) Specifies the security group ID. The
+* `security_group_id` - (Optional, String, ForceNew) Specifies the security group ID. The
value is a string of 1 to 200 characters that consists of uppercase and
lowercase letters, digits, and hyphens (-). This parameter is mandatory
when type is set to Internal, and it is invalid when type is set to External.
-* `az` - (Optional) Specifies the ID of the availability zone (AZ). This
+* `az` - (Optional, String, ForceNew) Specifies the ID of the availability zone (AZ). This
parameter is mandatory when type is set to Internal, and it is invalid
when type is set to External.
-* `admin_state_up` - (Optional) Specifies the status of the load balancer. Defaults to true.
+* `admin_state_up` - (Optional, Bool) Specifies the status of the load balancer. Defaults to true.
+ true: indicates that the load balancer is running.
+ false: indicates that the load balancer is stopped.
-* `tenantid` - (Optional) Specifies the tenant ID. This parameter is mandatory
+* `tenantid` - (Optional, String, ForceNew) Specifies the tenant ID. This parameter is mandatory
only when type is set to Internal.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -116,3 +116,11 @@ The following attributes are exported:
* `security_group_id` - See Argument Reference above.
* `vip_address` - See Argument Reference above.
* `tenantid` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 5 minutes.
diff --git a/docs/resources/identity_agency_v3.md b/docs/resources/identity_agency_v3.md
index b9aa24d6..970df5a7 100644
--- a/docs/resources/identity_agency_v3.md
+++ b/docs/resources/identity_agency_v3.md
@@ -54,32 +54,33 @@ resource "flexibleengine_identity_agency_v3" "agency" {
The following arguments are supported:
-* `name` - (Required) Specifies the name of agency. The name is a string of 1 to 64 characters.
+* `name` - (Required, String) Specifies the name of agency. The name is a string of 1 to 64 characters.
Changing this will create a new agency.
-* `description` - (Optional) Specifies the supplementary information about the agency.
+* `description` - (Optional, String) Specifies the supplementary information about the agency.
The value is a string of 0 to 255 characters.
-* `delegated_domain_name` - (Optional) Specifies the name of delegated user domain.
+* `delegated_domain_name` - (Optional, String) Specifies the name of delegated user domain.
This parameter and `delegated_service_name` are alternative.
-* `delegated_service_name` - (Optional) Specifies the name of delegated cloud service.
+* `delegated_service_name` - (Optional, String) Specifies the name of delegated cloud service.
This parameter and `delegated_domain_name` are alternative.
-* `duration` - (Optional) Specifies the validity period of an agency.
+* `duration` - (Optional, String) Specifies the validity period of an agency.
The valid value are *ONEDAY* and *FOREVER*, defaults to *FOREVER*.
-* `project_role` - (Optional) Specifies an array of one or more roles and projects which are used to grant
- permissions to agency on project. The structure is documented below.
+* `project_role` - (Optional, List) Specifies an array of one or more roles and projects which are used to grant
+ permissions to agency on project. The [project_role](#identity_project_role) object structure is documented below.
-* `domain_roles` - (optional) Specifies an array of one or more role names which stand for the permissionis to
+* `domain_roles` - (Optional, List) Specifies an array of one or more role names which stand for the permissionis to
be granted to agency on domain.
+
The `project_role` block supports:
-* `project` - (Required) Specifies the name of project.
+* `project` - (Required, String) Specifies the name of project.
-* `roles` - (Required) Specifies an array of role names.
+* `roles` - (Required, List) Specifies an array of role names.
-> **NOTE**
- At least one of `project_role` and `domain_roles` must be specified when creating an agency.
@@ -87,7 +88,7 @@ The `project_role` block supports:
[FlexibleEngine](https://docs.prod-cloud-ocb.orange-business.com/permissions/index.html) or
[data.flexibleengine_identity_role_v3](https://registry.terraform.io/providers/FlexibleEngineCloud/flexibleengine/latest/docs/data-sources/identity_role_v3).
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
@@ -95,6 +96,14 @@ In addition to all arguments above, the following attributes are exported:
* `expire_time` - The expiration time of agency.
* `create_time` - The time when the agency was created.
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 5 minutes.
+
## Import
Agencies can be imported using the `id`, e.g.
diff --git a/docs/resources/identity_group_membership_v3.md b/docs/resources/identity_group_membership_v3.md
index 20482c3f..1a57f7cd 100644
--- a/docs/resources/identity_group_membership_v3.md
+++ b/docs/resources/identity_group_membership_v3.md
@@ -43,14 +43,22 @@ resource "flexibleengine_identity_group_membership_v3" "membership_1" {
The following arguments are supported:
-* `group` - (Required) The group ID of this membership.
+* `group` - (Required, String, ForceNew) The group ID of this membership. Changing this will create a new resource.
-* `users` - (Required) A List of user IDs to associate to the group.
+* `users` - (Required, List) A List of user IDs to associate to the group.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
* `group` - See Argument Reference above.
* `users` - See Argument Reference above.
+
+## Import
+
+IAM group membership can be imported using the group membership ID, e.g.
+
+```shell
+terraform import flexibleengine_identity_group_membership_v3.membership_1 89c60255-9bd6-460c-822a-e2b959ede9d2
+```
diff --git a/docs/resources/identity_group_v3.md b/docs/resources/identity_group_v3.md
index c960a84e..04304c27 100644
--- a/docs/resources/identity_group_v3.md
+++ b/docs/resources/identity_group_v3.md
@@ -23,13 +23,13 @@ resource "flexibleengine_identity_group_v3" "group_1" {
The following arguments are supported:
-* `name` - (Required) The name of the group. The length is less than or equal to 64 bytes.
+* `name` - (Required, String) The name of the group. The length is less than or equal to 64 bytes.
-* `description` - (Optional) A description of the group.
+* `description` - (Optional, String) A description of the group.
-* `domain_id` - (Optional) The domain this group belongs to.
+* `domain_id` - (Optional, String) The domain this group belongs to.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
diff --git a/docs/resources/identity_project_v3.md b/docs/resources/identity_project_v3.md
index 1e9fe0dd..5a1a0cab 100644
--- a/docs/resources/identity_project_v3.md
+++ b/docs/resources/identity_project_v3.md
@@ -25,12 +25,12 @@ resource "flexibleengine_identity_project_v3" "project_1" {
The following arguments are supported:
-* `name` - (Required) The name of the project. The length is less than or equal
+* `name` - (Required, String) The name of the project. The length is less than or equal
to 64 bytes. Name mut be prefixed with a valid region name (eg. eu-west-0_project_1).
-* `description` - (Optional) A description of the project.
+* `description` - (Optional, String) A description of the project.
-## Atribute Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
@@ -40,6 +40,14 @@ In addition to all arguments above, the following attributes are exported:
* `enabled` - Enabling status of this project.
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
+
## Import
Projects can be imported using the `id`, e.g.
diff --git a/docs/resources/identity_provider.md b/docs/resources/identity_provider.md
index 8a2f8bd8..b82a3d96 100644
--- a/docs/resources/identity_provider.md
+++ b/docs/resources/identity_provider.md
@@ -66,7 +66,7 @@ The following arguments are supported:
Valid values are *saml* and *oidc*.
Changing this creates a new resource.
-* `enabled` - (Optional, Bool) Specifies the status for the identity provider. Defaults to true.
+* `enabled` - (Optional, Bool) Specifies the status for the identity provider. Defaults to **true**.
* `description` - (Optional, String) Specifies the description of the identity provider.
@@ -84,7 +84,9 @@ The following arguments are supported:
* `openid_connect_config` - (Optional, List) Specifies the description of the identity provider.
This field is required only if the protocol is set to *oidc*.
+ The [openid_connect_config](#IAM_openid_connect_config) object structure is documented below.
+
The `openid_connect_config` block supports:
* `access_type` - (Required, String) Specifies the access type of the identity provider.
@@ -114,7 +116,7 @@ The `openid_connect_config` block supports:
Valid values is *form_post* and *fragment*, default value is *form_post*.
This field is required only if the access type is set to `program_console`.
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
@@ -125,21 +127,24 @@ In addition to all arguments above, the following attributes are exported:
* `sso_type` - The single sign-on type of the identity provider.
* `conversion_rules` - The identity conversion rules of the identity provider.
- The [object](#conversion_rules) structure is documented below
+ The [conversion_rules](#IAM_conversion_rules) object structure is documented below.
-
+
The `conversion_rules` block supports:
-* `local` - The federated user information on the cloud platform.
+* `local` - The federated user information on the cloud platform. The [local](#IAM_local) object structure is
+ documented below.
-* `remote` - The description of the identity provider.
+* `remote` - The description of the identity provider. The [remote](#IAM_remote) object structure is documented below.
+
The `local` block supports:
* `username` - The name of a federated user on the cloud platform.
* `group` - The user group to which the federated user belongs on the cloud platform.
+
The `remote` block supports:
* `attribute` - The attribute in the IDP assertion.
diff --git a/docs/resources/identity_provider_conversion.md b/docs/resources/identity_provider_conversion.md
index 76f920d6..6db6dd6d 100644
--- a/docs/resources/identity_provider_conversion.md
+++ b/docs/resources/identity_provider_conversion.md
@@ -47,26 +47,30 @@ The following arguments are supported:
* `conversion_rules` - (Required, List) Specifies the identity conversion rules of the identity provider.
You can use identity conversion rules to map the identities of existing users to FlexibleEngine and manage their access
to cloud resources.
- The [object](#conversion_rules) structure is documented below.
+ The [conversion_rules](#IAM_conversion_rules) object structure is documented below.
-
+
The `conversion_rules` block supports:
-* `local` - (Required, List) Specifies the federated user information on the cloud platform.
+* `local` - (Required, List) Specifies the federated user information on the cloud platform. The [local](#IAM_local)
+ object structure is documented below.
-* `remote` - (Required, List) Specifies Federated user information in the IDP system.
+* `remote` - (Required, List) Specifies Federated user information in the IDP system. The [remote](#IAM_remote) object
+ structure is documented below.
-> **NOTE:**
If the protocol of identity provider is SAML, this field is an expression consisting of assertion
attributes and operators.
If the protocol of identity provider is OIDC, the value of this field is determined by the ID token.
+
The `local` block supports:
* `username` - (Required, String) Specifies the name of a federated user on the cloud platform.
* `group` - (Optional, String) Specifies the user group to which the federated user belongs on the cloud platform.
+
The `remote` block supports:
* `attribute` - (Required, String) Specifies the attribute in the IDP assertion.
@@ -78,7 +82,7 @@ The `remote` block supports:
* `value` - (Optional, List) Specifies the rule is matched only if the specified strings appear in the attribute type.
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
diff --git a/docs/resources/identity_role_assignment_v3.md b/docs/resources/identity_role_assignment_v3.md
index 515a7125..0d0f2b47 100644
--- a/docs/resources/identity_role_assignment_v3.md
+++ b/docs/resources/identity_role_assignment_v3.md
@@ -61,15 +61,17 @@ resource "flexibleengine_identity_role_assignment_v3" "role_assignment_1" {
The following arguments are supported:
-* `role_id` - (Required) The role to assign.
+* `role_id` - (Required, String, ForceNew) The role to assign. Changing this will create a new resource.
-* `group_id` - (Required) The group to assign the role in.
+* `group_id` - (Required, String, ForceNew) The group to assign the role in. Changing this will create a new resource.
-* `domain_id` - (Optional; Required if `project_id` is empty) The domain to assign the role in.
+* `domain_id` - (Optional, String, ForceNew) The domain to assign the role in.
+ It is **Required** if `project_id` is empty. Changing this will create a new resource.
-* `project_id` - (Optional; Required if `domain_id` is empty) The project to assign the role in.
+* `project_id` - (Optional, String, ForceNew) The project to assign the role in.
+ It is **Required** if `domain_id` is empty. Changing this will create a new resource.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -77,3 +79,11 @@ The following attributes are exported:
* `role_id` - See Argument Reference above.
* `domain_id` - See Argument Reference above.
* `project_id` - See Argument Reference above.
+
+## Import
+
+IAM role assignment can be imported using the role assignment ID, e.g.
+
+```shell
+terraform import flexibleengine_identity_role_assignment_v3.assignment_1 89c60255-9bd6-460c-822a-e2b959ede9d2
+```
diff --git a/docs/resources/lb_certificate_v2.md b/docs/resources/lb_certificate_v2.md
index 2f06603c..403f1d56 100644
--- a/docs/resources/lb_certificate_v2.md
+++ b/docs/resources/lb_certificate_v2.md
@@ -79,23 +79,23 @@ EOT
The following arguments are supported:
-* `region` - (Optional) The region in which to obtain the V2 Networking client.
+* `region` - (Optional, String, ForceNew) The region in which to obtain the V2 Networking client.
A Networking client is needed to create an LB certificate. If omitted, the
`region` argument of the provider is used. Changing this creates a new
LB certificate.
-* `name` - (Optional) Human-readable name for the Certificate. Does not have
+* `name` - (Optional, String) Human-readable name for the Certificate. Does not have
to be unique.
-* `private_key` - (Required) The private encrypted key of the Certificate, PEM format.
+* `private_key` - (Required, String) The private encrypted key of the Certificate, PEM format.
-* `certificate` - (Required) The public encrypted key of the Certificate, PEM format.
+* `certificate` - (Required, String) The public encrypted key of the Certificate, PEM format.
-* `description` - (Optional) Human-readable description for the Certificate.
+* `description` - (Optional, String) Human-readable description for the Certificate.
-* `domain` - (Optional) The domain of the Certificate.
+* `domain` - (Optional, String) The domain of the Certificate.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -107,3 +107,11 @@ The following attributes are exported:
* `certificate` - See Argument Reference above.
* `update_time` - Indicates the update time.
* `create_time` - Indicates the creation time.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 5 minutes.
diff --git a/docs/resources/lb_l7policy_v2.md b/docs/resources/lb_l7policy_v2.md
index a090d7ee..97190df4 100644
--- a/docs/resources/lb_l7policy_v2.md
+++ b/docs/resources/lb_l7policy_v2.md
@@ -44,43 +44,41 @@ resource "flexibleengine_lb_l7policy_v2" "l7policy_1" {
The following arguments are supported:
-* `region` - (Optional) The region in which to obtain the V2 Networking client.
+* `region` - (Optional, String, ForceNew) The region in which to obtain the V2 Networking client.
A Networking client is needed to create an . If omitted, the
- `region` argument of the provider is used. Changing this creates a new
- L7 Policy.
+ `region` argument of the provider is used. Changing this creates a new L7 Policy.
-* `name` - (Optional) Human-readable name for the L7 Policy. Does not have
- to be unique.
+* `name` - (Optional, String) Human-readable name for the L7 Policy. Does not have to be unique.
-* `description` - (Optional) Human-readable description for the L7 Policy.
+* `description` - (Optional, String) Human-readable description for the L7 Policy.
-* `action` - (Required) The L7 Policy action - can either be REDIRECT_TO_POOL,
+* `action` - (Required, String, ForceNew) The L7 Policy action - can either be REDIRECT_TO_POOL,
or REDIRECT_TO_LISTENER. Changing this creates a new L7 Policy.
-* `listener_id` - (Required) The Listener on which the L7 Policy will be associated with.
+* `listener_id` - (Required, String, ForceNew) The Listener on which the L7 Policy will be associated with.
Changing this creates a new L7 Policy.
-* `position` - (Optional) The position of this policy on the listener. Positions start at 1.
+* `position` - (Optional, Int, ForceNew) The position of this policy on the listener. Positions start at 1.
Changing this creates a new L7 Policy.
-* `redirect_pool_id` - (Optional) Requests matching this policy will be redirected to
+* `redirect_pool_id` - (Optional, String) Requests matching this policy will be redirected to
the pool with this ID. Only valid if action is REDIRECT_TO_POOL.
-* `redirect_listener_id` - (Optional) Requests matching this policy will be redirected to
+* `redirect_listener_id` - (Optional, String) Requests matching this policy will be redirected to
the listener with this ID. Only valid if action is REDIRECT_TO_LISTENER.
-* `admin_state_up` - (Optional) The administrative state of the L7 Policy.
+* `admin_state_up` - (Optional, Bool) The administrative state of the L7 Policy.
This value can only be true (UP).
-* `tenant_id` - (Optional) The UUID of the tenant who owns the L7 Policy.
+* `tenant_id` - (Optional, String, ForceNew) The UUID of the tenant who owns the L7 Policy.
Only administrative users can specify a tenant UUID other than their own.
Changing this creates a new L7 Policy.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
-* `id` - The unique ID for the L7 {olicy.
+* `id` - The unique ID for the L7 policy.
* `region` - See Argument Reference above.
* `tenant_id` - See Argument Reference above.
* `name` - See Argument Reference above.
@@ -92,6 +90,14 @@ The following attributes are exported:
* `redirect_listener_id` - See Argument Reference above.
* `admin_state_up` - See Argument Reference above.
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
+
## Import
Load Balancer L7 Policy can be imported using the L7 Policy ID, e.g.:
diff --git a/docs/resources/lb_l7rule_v2.md b/docs/resources/lb_l7rule_v2.md
index d25b5dbb..ccc51283 100644
--- a/docs/resources/lb_l7rule_v2.md
+++ b/docs/resources/lb_l7rule_v2.md
@@ -51,36 +51,34 @@ resource "flexibleengine_lb_l7rule_v2" "l7rule_1" {
The following arguments are supported:
-* `region` - (Optional) The region in which to obtain the V2 Networking client.
+* `region` - (Optional, String, ForceNew) The region in which to obtain the V2 Networking client.
A Networking client is needed to create an . If omitted, the
`region` argument of the provider is used. Changing this creates a new
L7 Rule.
-* `description` - (Optional) Human-readable description for the L7 Rule.
-
-* `type` - (Required) The L7 Rule type - can either be HOST_NAME or PATH.
+* `type` - (Required, String, ForceNew) The L7 Rule type - can either be HOST_NAME or PATH.
Changing this creates a new L7 Rule.
-* `compare_type` - (Required) The comparison type for the L7 rule - can either be
+* `compare_type` - (Required, String) The comparison type for the L7 rule - can either be
STARTS_WITH, EQUAL_TO or REGEX
-* `l7policy_id` - (Required) The ID of the L7 Policy to query. Changing this creates a new
+* `l7policy_id` - (Required, String, ForceNew) The ID of the L7 Policy to query. Changing this creates a new
L7 Rule.
-* `value` - (Required) The value to use for the comparison. For example, the file type to
+* `value` - (Required, String) The value to use for the comparison. For example, the file type to
compare.
-* `key` - (Optional) The key to use for the comparison. For example, the name of the cookie to
+* `key` - (Optional, String, ForceNew) The key to use for the comparison. For example, the name of the cookie to
evaluate. Valid when `type` is set to COOKIE or HEADER. Changing this creates a new L7 Rule.
-* `admin_state_up` - (Optional) The administrative state of the L7 Rule.
+* `admin_state_up` - (Optional, Bool) The administrative state of the L7 Rule.
The value can only be true (UP).
-* `tenant_id` - (Optional) The UUID of the tenant who owns the L7 Rule.
+* `tenant_id` - (Optional, String, ForceNew) The UUID of the tenant who owns the L7 Rule.
Only administrative users can specify a tenant UUID other than their own.
Changing this creates a new L7 Rule.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -96,6 +94,14 @@ The following attributes are exported:
* `admin_state_up` - See Argument Reference above.
* `listener_id` - The ID of the Listener owning this resource.
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
+
## Import
Load Balancer L7 Rule can be imported using the L7 Policy ID and L7 Rule ID
diff --git a/docs/resources/lb_listener_v2.md b/docs/resources/lb_listener_v2.md
index 39d785f1..05e77f7d 100644
--- a/docs/resources/lb_listener_v2.md
+++ b/docs/resources/lb_listener_v2.md
@@ -111,28 +111,28 @@ resource "flexibleengine_lb_listener_v2" "listener_1" {
The following arguments are supported:
-* `region` - (Optional) The region in which to create the listener resource.
+* `region` - (Optional, String, ForceNew) The region in which to create the listener resource.
If omitted, the `region` argument of the provider is used.
Changing this creates a new listener.
-* `loadbalancer_id` - (Required) The load balancer on which to provision this
+* `loadbalancer_id` - (Required, String, ForceNew) The load balancer on which to provision this
listener. Changing this creates a new listener.
-* `protocol` - (Required) The protocol - can either be TCP, UDP, HTTP or TERMINATED_HTTPS.
+* `protocol` - (Required, String, ForceNew) The protocol - can either be TCP, UDP, HTTP or TERMINATED_HTTPS.
Changing this creates a new listener.
-* `protocol_port` - (Required) The port on which to listen for client traffic.
+* `protocol_port` - (Required, Int, ForceNew) The port on which to listen for client traffic.
Changing this creates a new listener.
-* `default_pool_id` - (Optional) The ID of the default pool with which the
+* `default_pool_id` - (Optional, String, ForceNew) The ID of the default pool with which the
listener is associated. Changing this creates a new listener.
-* `name` - (Optional) Human-readable name for the listener. Does not have
+* `name` - (Optional, String) Human-readable name for the listener. Does not have
to be unique.
-* `description` - (Optional) Human-readable description for the listener.
+* `description` - (Optional, String) Human-readable description for the listener.
-* `tags` - (Optional) The key/value pairs to associate with the listener.
+* `tags` - (Optional, Map) The key/value pairs to associate with the listener.
* `http2_enable` - (Optional, Bool) Specifies whether to use HTTP/2. The default value is false.
This parameter is valid only when the protocol is set to *TERMINATED_HTTPS*.
@@ -155,18 +155,18 @@ The following arguments are supported:
server, in seconds. This parameter is available only for HTTP and HTTPS listeners. The value ranges from 1 to 300,
and the default value is 60.
-* `default_tls_container_ref` - (Optional) A reference to a Barbican Secrets
+* `default_tls_container_ref` - (Optional, String) A reference to a Barbican Secrets
container which stores TLS information. This is required if the protocol
is `TERMINATED_HTTPS`. See
[here](https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer)
for more information.
-* `sni_container_refs` - (Optional) A list of references to Barbican Secrets
+* `sni_container_refs` - (Optional, List) A list of references to Barbican Secrets
containers which store SNI information. See
[here](https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer)
for more information.
-* `tls_ciphers_policy` - (Optional) Specifies the security policy used by the listener.
+* `tls_ciphers_policy` - (Optional, String) Specifies the security policy used by the listener.
This parameter is valid only when the load balancer protocol is set to TERMINATED_HTTPS.
The value can be tls-1-0, tls-1-1, tls-1-2, or tls-1-2-strict, and the default value is tls-1-0.
For details of cipher suites for each security policy, see the table below.
@@ -197,7 +197,7 @@ The following arguments are supported:
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -212,3 +212,11 @@ The following attributes are exported:
* `sni_container_refs` - See Argument Reference above.
* `tls_ciphers_policy` - See Argument Reference above.
* `tags` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/docs/resources/lb_loadbalancer_v2.md b/docs/resources/lb_loadbalancer_v2.md
index c3f64cfd..ea827391 100644
--- a/docs/resources/lb_loadbalancer_v2.md
+++ b/docs/resources/lb_loadbalancer_v2.md
@@ -24,41 +24,41 @@ resource "flexibleengine_lb_loadbalancer_v2" "lb_1" {
The following arguments are supported:
-* `region` - (Optional) The region in which to create the loadbalancer resource.
+* `region` - (Optional, String, ForceNew) The region in which to create the loadbalancer resource.
If omitted, the `region` argument of the provider is used.
Changing this creates a new loadbalancer.
-* `vip_subnet_id` - (Required) The `ipv4_subnet_id` or `ipv6_subnet_id` of the
+* `vip_subnet_id` - (Required, String, ForceNew) The `ipv4_subnet_id` or `ipv6_subnet_id` of the
VPC Subnet on which to allocate the loadbalancer's address.
A tenant can only create Loadbalancers on networks authorized
by policy (e.g. networks that belong to them or networks that
are shared). Changing this creates a new loadbalancer.
-* `name` - (Optional) Human-readable name for the loadbalancer. Does not have
+* `name` - (Optional, String) Human-readable name for the loadbalancer. Does not have
to be unique.
-* `description` - (Optional) Human-readable description for the loadbalancer.
+* `description` - (Optional, String) Human-readable description for the loadbalancer.
-* `vip_address` - (Optional) The ip address of the load balancer.
+* `vip_address` - (Optional, String, ForceNew) The ip address of the load balancer.
Changing this creates a new loadbalancer.
-* `tags` - (Optional) The key/value pairs to associate with the loadbalancer.
+* `tags` - (Optional, Map) The key/value pairs to associate with the loadbalancer.
-* `loadbalancer_provider` - (Optional) The name of the provider. Currently, only
+* `loadbalancer_provider` - (Optional, String, ForceNew) The name of the provider. Currently, only
vlb is supported. Changing this creates a new loadbalancer.
-* `security_group_ids` - (Optional) A list of security group IDs to apply to the
+* `security_group_ids` - (Optional, List) A list of security group IDs to apply to the
loadbalancer. The security groups must be specified by ID and not name (as
opposed to how they are configured with the Compute Instance).
-* `admin_state_up` - (Optional) The administrative state of the loadbalancer.
+* `admin_state_up` - (Optional, Bool) The administrative state of the loadbalancer.
A valid value is true (UP) or false (DOWN).
-* `tenant_id` - (Optional) The UUID of the tenant who owns the loadbalancer.
+* `tenant_id` - (Optional, String, ForceNew) The UUID of the tenant who owns the loadbalancer.
Only administrative users can specify a tenant UUID other than their own.
Changing this creates a new loadbalancer.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -74,6 +74,14 @@ The following attributes are exported:
* `security_group_ids` - See Argument Reference above.
* `vip_port_id` - The Port ID of the Load Balancer IP.
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 5 minutes.
+
## Import
Loadbalancers can be imported using the `id`, e.g.
diff --git a/docs/resources/lb_loadbalancer_v3.md b/docs/resources/lb_loadbalancer_v3.md
index 8af1a615..26307cd5 100644
--- a/docs/resources/lb_loadbalancer_v3.md
+++ b/docs/resources/lb_loadbalancer_v3.md
@@ -193,7 +193,10 @@ The following arguments are supported:
* `tags` - (Optional, Map) The key/value pairs to associate with the loadbalancer.
-## Attributes Reference
+* `enterprise_project_id` - (Optional, String, ForceNew) Specifies the enterprise project id of the resource.
+ Changing this will create a new resource.
+
+## Attribute Reference
In addition to all arguments above, the following attributes are exported:
@@ -223,7 +226,7 @@ API response, security or some other reason. The missing attributes include: `ip
`bandwidth_charge_mode`, `sharetype` and `bandwidth_size`.
It is generally recommended running `terraform plan` after importing a loadbalancer.
You can then decide if changes should be applied to the loadbalancer, or the resource
-definition should be updated to align with the loadbalancer. Also you can ignore changes as below.
+definition should be updated to align with the loadbalancer. Also, you can ignore changes as below.
```hcl
resource "flexibleengine_lb_loadbalancer_v3" "loadbalancer_1" {
diff --git a/docs/resources/lb_member_v2.md b/docs/resources/lb_member_v2.md
index 1f1168b5..eabac019 100644
--- a/docs/resources/lb_member_v2.md
+++ b/docs/resources/lb_member_v2.md
@@ -23,38 +23,37 @@ resource "flexibleengine_lb_member_v2" "example_member" {
The following arguments are supported:
-* `region` - (Optional) The region in which to obtain the V2 Networking client.
- A Networking client is needed to create an . If omitted, the
- `region` argument of the provider is used. Changing this creates a new
- member.
+* `region` - (Optional, String, ForceNew) The region in which to obtain the V2 Networking client.
+ A Networking client is needed to be created. If omitted, the
+ `region` argument of the provider is used. Changing this creates a new member.
-* `pool_id` - (Required) The id of the pool that this member will be
- assigned to.
+* `pool_id` - (Required, String, ForceNew) The id of the pool that this member will be
+ assigned to. Changing this creates a new member.
-* `subnet_id` - (Required) The `ipv4_subnet_id` or `ipv6_subnet_id` of the
- VPC Subnet in which to access the member
+* `subnet_id` - (Required, String, ForceNew) The `ipv4_subnet_id` or `ipv6_subnet_id` of the
+ VPC Subnet in which to access the member. Changing this creates a new member.
-* `name` - (Optional) Human-readable name for the member.
-
-* `address` - (Required) The IP address of the member to receive traffic from
+* `address` - (Required, String, ForceNew) The IP address of the member to receive traffic from
the load balancer. Changing this creates a new member.
-* `protocol_port` - (Required) The port on which to listen for client traffic.
+* `protocol_port` - (Required, Int, ForceNew) The port on which to listen for client traffic.
Changing this creates a new member.
-* `weight` - (Optional) A positive integer value that indicates the relative
+* `name` - (Optional, String) Human-readable name for the member.
+
+* `weight` - (Optional, Int) A positive integer value that indicates the relative
portion of traffic that this member should receive from the pool. For
example, a member with a weight of 10 receives five times as much traffic
as a member with a weight of 2.
-* `admin_state_up` - (Optional) The administrative state of the member.
+* `admin_state_up` - (Optional, Bool) The administrative state of the member.
A valid value is true (UP) or false (DOWN).
-* `tenant_id` - (Optional) The UUID of the tenant who owns the member.
+* `tenant_id` - (Optional, String, ForceNew) The UUID of the tenant who owns the member.
Only administrative users can specify a tenant UUID other than their own.
Changing this creates a new member.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -67,3 +66,11 @@ The following attributes are exported:
* `pool_id` - See Argument Reference above.
* `address` - See Argument Reference above.
* `protocol_port` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/docs/resources/lb_monitor_v2.md b/docs/resources/lb_monitor_v2.md
index 7e309bd6..6c6e05bb 100644
--- a/docs/resources/lb_monitor_v2.md
+++ b/docs/resources/lb_monitor_v2.md
@@ -24,50 +24,49 @@ resource "flexibleengine_lb_monitor_v2" "monitor_1" {
The following arguments are supported:
-* `region` - (Optional) The region in which to obtain the V2 Networking client.
- A Networking client is needed to create an . If omitted, the
- `region` argument of the provider is used. Changing this creates a new
- monitor.
+* `region` - (Optional, String, ForceNew) The region in which to obtain the V2 Networking client.
+ A Networking client is needed to be created. If omitted, the
+ `region` argument of the provider is used. Changing this creates a new monitor.
-* `pool_id` - (Required) The id of the pool that this monitor will be assigned to.
-
-* `name` - (Optional) The Name of the Monitor.
+* `pool_id` - (Required, String, ForceNew) The id of the pool that this monitor will be assigned to.
+ Changing this creates a new monitor.
-* `type` - (Required) The type of probe, which is PING, TCP, HTTP, or HTTPS,
- that is sent by the load balancer to verify the member state. Changing this
- creates a new monitor.
+* `type` - (Required, String, ForceNew) The type of probe, which is PING, TCP, HTTP, or HTTPS,
+ that is sent by the load balancer to verify the member state. Changing this creates a new monitor.
-* `delay` - (Required) The time, in seconds, between sending probes to members.
+* `delay` - (Required, Int) The time, in seconds, between sending probes to members.
-* `timeout` - (Required) Maximum number of seconds for a monitor to wait for a
+* `timeout` - (Required, Int) Maximum number of seconds for a monitor to wait for a
ping reply before it times out. The value must be less than the delay
value.
-* `max_retries` - (Required) Number of permissible ping failures before
+* `max_retries` - (Required, Int) Number of permissible ping failures before
changing the member's status to INACTIVE. Must be a number between 1
- and 10..
+ and 10.
+
+* `name` - (Optional, String) The Name of the Monitor.
-* `url_path` - (Optional) Required for HTTP(S) types. URI path that will be
+* `url_path` - (Optional, String) Required for HTTP(S) types. URI path that will be
accessed if monitor type is HTTP or HTTPS.
-* `http_method` - (Optional) Required for HTTP(S) types. The HTTP method used
+* `http_method` - (Optional, String) Required for HTTP(S) types. The HTTP method used
for requests by the monitor. If this attribute is not specified, it
defaults to "GET".
-* `expected_codes` - (Optional) Required for HTTP(S) types. Expected HTTP codes
+* `expected_codes` - (Optional, String) Required for HTTP(S) types. Expected HTTP codes
for a passing HTTP(S) monitor. You can either specify a single status like
"200", or a range like "200-202".
-* `port` - (Optional) Specifies the health check port. The value ranges from 1 to 65536.
+* `port` - (Optional, Int) Specifies the health check port. The value ranges from 1 to 65536.
-* `admin_state_up` - (Optional) The administrative state of the monitor.
+* `admin_state_up` - (Optional, Bool) The administrative state of the monitor.
A valid value is true (UP) or false (DOWN).
-* `tenant_id` - (Optional) The UUID of the tenant who owns the monitor.
+* `tenant_id` - (Optional, String, ForceNew) The UUID of the tenant who owns the monitor.
Only administrative users can specify a tenant UUID other than their own.
Changing this creates a new monitor.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -82,3 +81,11 @@ The following attributes are exported:
* `expected_codes` - See Argument Reference above.
* `admin_state_up` - See Argument Reference above.
* `port` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/docs/resources/lb_pool_v2.md b/docs/resources/lb_pool_v2.md
index 3c54a2d7..1547d1ac 100644
--- a/docs/resources/lb_pool_v2.md
+++ b/docs/resources/lb_pool_v2.md
@@ -28,15 +28,10 @@ resource "flexibleengine_lb_pool_v2" "pool_1" {
The following arguments are supported:
* `region` - (Optional, String, ForceNew) The region in which to obtain the V2 Networking client.
- A Networking client is needed to create an . If omitted, the
- `region` argument of the provider is used. Changing this creates a new
- pool.
+ A Networking client is needed to be created. If omitted, the
+ `region` argument of the provider is used. Changing this creates a new pool.
-* `name` - (Optional, String) Human-readable name for the pool.
-
-* `description` - (Optional, String) Human-readable description for the pool.
-
-* `protocol` = (Required) The protocol - can either be TCP, UDP or HTTP.
+* `protocol` - (Required, String, ForceNew) The protocol - can either be TCP, UDP or HTTP.
+ When the protocol used by the listener is UDP, the protocol of the backend pool must be UDP.
+ When the protocol used by the listener is TCP, the protocol of the backend pool must be TCP.
@@ -44,6 +39,14 @@ The following arguments are supported:
Changing this creates a new pool.
+* `lb_method` - (Required, String) The load balancing algorithm to
+ distribute traffic to the pool's members. Must be one of
+ ROUND_ROBIN, LEAST_CONNECTIONS, or SOURCE_IP.
+
+* `name` - (Optional, String) Human-readable name for the pool.
+
+* `description` - (Optional, String) Human-readable description for the pool.
+
* `loadbalancer_id` - (Optional, String, ForceNew) The load balancer on which to provision this
pool. Changing this creates a new pool.
Note: One of LoadbalancerID or ListenerID must be provided.
@@ -52,24 +55,22 @@ The following arguments are supported:
will be associated with. Changing this creates a new pool.
Note: One of LoadbalancerID or ListenerID must be provided.
-* `lb_method` - (Required, String) The load balancing algorithm to
- distribute traffic to the pool's members. Must be one of
- ROUND_ROBIN, LEAST_CONNECTIONS, or SOURCE_IP.
-
-* `persistence` - (Optional, List, ForceNew) Omit this field to prevent session persistence. Indicates
- whether connections in the same session will be processed by the same Pool
- member or not. Changing this creates a new pool.
+* `persistence` - (Optional, List, ForceNew) Omit this field to prevent session persistence. Indicates
+ whether connections in the same session will be processed by the same Pool member or not.
+ The [persistence](#lb_persistence) object structure is documented below.
+ Changing this creates a new pool.
* `admin_state_up` - (Optional, Bool) The administrative state of the pool.
A valid value is true (UP) or false (DOWN).
-The `persistence` argument supports:
+
+The `persistence` block supports:
* `type` - (Required, String, ForceNew) The type of persistence mode. The current specification
supports SOURCE_IP, HTTP_COOKIE, and APP_COOKIE.
* `cookie_name` - (Optional, String, ForceNew) The name of the cookie if persistence mode is set
- appropriately. Required if `type = APP_COOKIE`.
+ appropriately. It is Required if `type = APP_COOKIE`.
* `timeout` - (Optional, Int, ForceNew) Specifies the sticky session timeout duration in minutes. This parameter is
invalid when type is set to APP_COOKIE. The value range varies depending on the protocol of the backend server group:
@@ -77,7 +78,7 @@ The `persistence` argument supports:
+ When the protocol of the backend server group is TCP or UDP, the value ranges from 1 to 60.
+ When the protocol of the backend server group is HTTP or HTTPS, the value ranges from 1 to 1440.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -88,3 +89,19 @@ The following attributes are exported:
* `lb_method` - See Argument Reference above.
* `persistence` - See Argument Reference above.
* `admin_state_up` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
+
+## Import
+
+ELB pool can be imported using the ELB pool ID, e.g.
+
+```shell
+terraform import flexibleengine_lb_pool_v2.pool_1 3e3632db-36c6-4b28-a92e-e72e6562daa6
+```
diff --git a/docs/resources/lb_pool_v3.md b/docs/resources/lb_pool_v3.md
index 5f0b8631..55a2844b 100644
--- a/docs/resources/lb_pool_v3.md
+++ b/docs/resources/lb_pool_v3.md
@@ -31,10 +31,6 @@ The following arguments are supported:
* `region` - (Optional, String, ForceNew) Specifies the region in which to create the ELB pool resource.
Changing this creates a new pool.
-* `name` - (Optional, String) Specifies the name for the pool.
-
-* `description` - (Optional, String) Specifies the description for the pool.
-
* `protocol` - (Required, String, ForceNew) Specifies the protocol used by the pool. The value can be TCP, UDP,
HTTP, HTTPS or QUIC.
+ When the protocol used by the listener is UDP, the protocol of the backend pool must be UDP or QUIC.
@@ -44,6 +40,13 @@ The following arguments are supported:
+ When the protocol used by the listener is TERMINATED_HTTPS, the protocol of the backend pool must be HTTP.
Changing this creates a new pool.
+* `lb_method` - (Required, String) Specifies the load balancing algorithm to distribute traffic to the pool's members.
+ Must be one of ROUND_ROBIN, LEAST_CONNECTIONS, or SOURCE_IP.
+
+* `name` - (Optional, String) Specifies the name for the pool.
+
+* `description` - (Optional, String) Specifies the description for the pool.
+
* `loadbalancer_id` - (Optional, String, ForceNew) Specifies the load balancer on which to provision this pool.
Changing this creates a new pool. Note: Exactly one of LoadbalancerID or ListenerID must be provided.
@@ -51,13 +54,11 @@ The following arguments are supported:
associated with.
Changing this creates a new pool. Note: Exactly one of LoadbalancerID or ListenerID must be provided.
-* `lb_method` - (Required, String) Specifies the load balancing algorithm to distribute traffic to the pool's members.
- Must be one of ROUND_ROBIN, LEAST_CONNECTIONS, or SOURCE_IP.
-
* `persistence` - (Optional, List, ForceNew) Specifies the omit this field to prevent session persistence.
Indicates whether connections in the same session will be processed by the same Pool member or not.
- Changing this creates a new pool.
+ The [persistence](#lb_persistence) object structure is documented below. Changing this creates a new pool.
+
The `persistence` argument supports:
* `type` - (Required, String, ForceNew) Specifies the type of persistence mode. The current specification supports
@@ -71,7 +72,7 @@ The `persistence` argument supports:
+ When the protocol of the backend server group is TCP or UDP, the value ranges from 1 to 60.
+ When the protocol of the backend server group is HTTP or HTTPS, the value ranges from 1 to 1440.
-## Attributes Reference
+## Attribute Reference
In addition to all arguments above, the following attributes is exported:
diff --git a/docs/resources/lb_whitelist_v2.md b/docs/resources/lb_whitelist_v2.md
index 6e559555..faeb4030 100644
--- a/docs/resources/lb_whitelist_v2.md
+++ b/docs/resources/lb_whitelist_v2.md
@@ -22,19 +22,19 @@ resource "flexibleengine_lb_whitelist_v2" "whitelist_1" {
The following arguments are supported:
-* `listener_id` - (Required) The Listener ID that the whitelist will be associated with.
+* `listener_id` - (Required, String, ForceNew) The Listener ID that the whitelist will be associated with.
Changing this creates a new whitelist.
-* `enable_whitelist` - (Optional) Specify whether to enable access control.
+* `enable_whitelist` - (Optional, Bool) Specify whether to enable access control.
-* `whitelist` - (Optional) Specifies the IP addresses in the whitelist. Use commas(,) to separate
+* `whitelist` - (Optional, String) Specifies the IP addresses in the whitelist. Use commas(,) to separate
the multiple IP addresses.
-* `tenant_id` - (Optional) The UUID of the tenant who owns the whitelist.
+* `tenant_id` - (Optional, String, ForceNew) The UUID of the tenant who owns the whitelist.
Only administrative users can specify a tenant UUID other than their own.
Changing this creates a new whitelist.
-## Attributes Reference
+## Attribute Reference
The following attributes are exported:
@@ -43,3 +43,11 @@ The following attributes are exported:
* `listener_id` - See Argument Reference above.
* `enable_whitelist` - See Argument Reference above.
* `whitelist` - See Argument Reference above.
+
+## Timeouts
+
+This resource provides the following timeouts configuration options:
+
+* `create` - Default is 10 minutes.
+* `update` - Default is 10 minutes.
+* `delete` - Default is 10 minutes.
diff --git a/flexibleengine/acceptance/resource_flexibleengine_elb_certificate_test.go b/flexibleengine/acceptance/resource_flexibleengine_elb_certificate_test.go
index b0774b69..d998ab86 100644
--- a/flexibleengine/acceptance/resource_flexibleengine_elb_certificate_test.go
+++ b/flexibleengine/acceptance/resource_flexibleengine_elb_certificate_test.go
@@ -64,6 +64,11 @@ func TestAccElbV3Certificate_client(t *testing.T) {
resource.TestCheckResourceAttr(resourceName, "type", "client"),
),
},
+ {
+ ResourceName: resourceName,
+ ImportState: true,
+ ImportStateVerify: true,
+ },
},
})
}
@@ -182,12 +187,6 @@ i34R7EQDtFeiSvBdeKRsPp8c0KT8H1B4lXNkkCQs2WX5p4lm99+ZtLD4glw8x6Ic
i1YhgnQbn5E0hz55OLu5jvOkKQjPCW+8Kg==
-----END CERTIFICATE-----
EOT
-
- timeouts {
- create = "5m"
- update = "5m"
- delete = "5m"
- }
}
`, name)
}
@@ -252,12 +251,6 @@ i34R7EQDtFeiSvBdeKRsPp8c0KT8H1B4lXNkkCQs2WX5p4lm99+ZtLD4glw8x6Ic
i1YhgnQbn5E0hz55OLu5jvOkKQjPCW+9Aa==
-----END CERTIFICATE-----
EOT
-
- timeouts {
- create = "5m"
- update = "5m"
- delete = "5m"
- }
}
`, name)
}
diff --git a/flexibleengine/acceptance/resource_flexibleengine_lb_loadbalancer_v3_test.go b/flexibleengine/acceptance/resource_flexibleengine_lb_loadbalancer_v3_test.go
index 1358ce37..914e34d4 100644
--- a/flexibleengine/acceptance/resource_flexibleengine_lb_loadbalancer_v3_test.go
+++ b/flexibleengine/acceptance/resource_flexibleengine_lb_loadbalancer_v3_test.go
@@ -133,9 +133,10 @@ func testAccElbV3LoadBalancerConfig_basic(rName string) string {
%s
resource "flexibleengine_lb_loadbalancer_v3" "test" {
- name = "%s"
- ipv4_subnet_id = flexibleengine_vpc_subnet_v1.test.subnet_id
- ipv6_network_id = flexibleengine_vpc_subnet_v1.test.id
+ name = "%s"
+ ipv4_subnet_id = flexibleengine_vpc_subnet_v1.test.subnet_id
+ ipv6_network_id = flexibleengine_vpc_subnet_v1.test.id
+ enterprise_project_id = 0
availability_zone = [
data.flexibleengine_availability_zones.test.names[0]
@@ -154,10 +155,11 @@ func testAccElbV3LoadBalancerConfig_update(rName, rNameUpdate string) string {
%s
resource "flexibleengine_lb_loadbalancer_v3" "test" {
- name = "%s"
- cross_vpc_backend = true
- ipv4_subnet_id = flexibleengine_vpc_subnet_v1.test.subnet_id
- ipv6_network_id = flexibleengine_vpc_subnet_v1.test.id
+ name = "%s"
+ cross_vpc_backend = true
+ ipv4_subnet_id = flexibleengine_vpc_subnet_v1.test.subnet_id
+ ipv6_network_id = flexibleengine_vpc_subnet_v1.test.id
+ enterprise_project_id = 0
availability_zone = [
data.flexibleengine_availability_zones.test.names[0]
diff --git a/flexibleengine/resource_flexibleengine_identity_provider_conversion.go b/flexibleengine/resource_flexibleengine_identity_provider_conversion.go
index c38701a0..074428ac 100644
--- a/flexibleengine/resource_flexibleengine_identity_provider_conversion.go
+++ b/flexibleengine/resource_flexibleengine_identity_provider_conversion.go
@@ -32,7 +32,6 @@ func resourceIAMProviderConversion() *schema.Resource {
"provider_id": {
Type: schema.TypeString,
Required: true,
- ForceNew: true,
},
"conversion_rules": {
Type: schema.TypeList,
diff --git a/flexibleengine/resource_flexibleengine_lb_loadbalancer_v2.go b/flexibleengine/resource_flexibleengine_lb_loadbalancer_v2.go
index 31fc02c4..ea70ad25 100644
--- a/flexibleengine/resource_flexibleengine_lb_loadbalancer_v2.go
+++ b/flexibleengine/resource_flexibleengine_lb_loadbalancer_v2.go
@@ -78,9 +78,10 @@ func resourceLoadBalancerV2() *schema.Resource {
},
"flavor": {
- Type: schema.TypeString,
- Optional: true,
- ForceNew: true,
+ Type: schema.TypeString,
+ Optional: true,
+ ForceNew: true,
+ Deprecated: "flavor is deprecated",
},
"admin_state_up": {