Tips-Of-Mine/terraform-cloudflare-tunnel-zone-org
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Update access_groups.tf
All checks were successful
Terraform Apply / Terraform Apply (push) Successful in 55s
Details

Browse Source
This commit is contained in:
Hubert Cornet
2025-11-17 17:19:59 +01:00
parent 0431cdc387
commit 2ad9ddf9d9
1 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
access_groups.tf
View File

@@ -6,10 +6,10 @@ locals {
# SAML groups from Okta # SAML groups from Okta
saml_groups = { saml_groups = {
contractors = "Contractors" contractors = "Contractors"
infrastructure_admin = "GL_U_Infrastructure Admin" infrastructure_admin = "GL_Users_Infrastructure Admin"
sales_engineering = "GL_U_Sales Engineering" sales_engineering = "GL_Users_Sales Engineering"
sales = "GL_U_Sales" sales = "GL_Users_Sales"
it_admin = "GL_U_IT Admin" it_admin = "GL_Users_IT Admin"
} }
# Allowed countries # Allowed countries
@@ -42,7 +42,7 @@ resource "cloudflare_zero_trust_access_group" "saml_groups" {
# Geographic Rule Groups # Geographic Rule Groups
resource "cloudflare_zero_trust_access_group" "country_requirements_rule_group" { resource "cloudflare_zero_trust_access_group" "country_requirements_rule_group" {
account_id = local.cloudflare_account_id account_id = local.cloudflare_account_id
name = "GL_M_Country Requirements" name = "GL_Localisation_Country Requirements"
include = [ include = [
for country in local.allowed_countries : { for country in local.allowed_countries : {
@@ -63,7 +63,7 @@ resource "cloudflare_zero_trust_access_group" "country_requirements_rule_group"
# Device Posture Rule Groups # Device Posture Rule Groups
resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_rule_group" { resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_rule_group" {
account_id = local.cloudflare_account_id account_id = local.cloudflare_account_id
name = "GL_M_Latest OS Version Requirements" name = "GL_OS Version Requirements"
include = [ include = [
for posture_id in local.os_posture_checks : { for posture_id in local.os_posture_checks : {
@@ -77,7 +77,7 @@ resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_ru
# Composite Rule Groups # Composite Rule Groups
resource "cloudflare_zero_trust_access_group" "employees_rule_group" { resource "cloudflare_zero_trust_access_group" "employees_rule_group" {
account_id = local.cloudflare_account_id account_id = local.cloudflare_account_id
name = "GL_U_Employees" name = "GL_Users_Employees"
include = [ include = [
for group_key in ["it_admin", "sales", "sales_engineering", "infrastructure_admin"] : { for group_key in ["it_admin", "sales", "sales_engineering", "infrastructure_admin"] : {
@@ -90,7 +90,7 @@ resource "cloudflare_zero_trust_access_group" "employees_rule_group" {
resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" { resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" {
account_id = local.cloudflare_account_id account_id = local.cloudflare_account_id
name = "GL_U_Sales Team" name = "GL_Users_Sales Team"
include = [ include = [
for group_key in ["sales", "sales_engineering"] : { for group_key in ["sales", "sales_engineering"] : {
@@ -103,7 +103,7 @@ resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" {
resource "cloudflare_zero_trust_access_group" "admins_rule_group" { resource "cloudflare_zero_trust_access_group" "admins_rule_group" {
account_id = local.cloudflare_account_id account_id = local.cloudflare_account_id
name = "GL_U_Administrators" name = "GL_Users_Administrators"
include = [ include = [
for group_key in ["it_admin", "infrastructure_admin"] : { for group_key in ["it_admin", "infrastructure_admin"] : {
@@ -116,7 +116,7 @@ resource "cloudflare_zero_trust_access_group" "admins_rule_group" {
resource "cloudflare_zero_trust_access_group" "contractors_rule_group" { resource "cloudflare_zero_trust_access_group" "contractors_rule_group" {
account_id = local.cloudflare_account_id account_id = local.cloudflare_account_id
name = "GL_U_Contractors Extended" name = "GL_Users_Contractors Extended"
include = [ include = [
{ {