From 7c2db5215fad68a30fb72791a45228c759db5921 Mon Sep 17 00:00:00 2001 From: Hubert Cornet Date: Tue, 18 Nov 2025 18:30:37 +0100 Subject: [PATCH] Delete access_rule_groups.tf --- access_rule_groups.tf | 164 ------------------------------------------ 1 file changed, 164 deletions(-) delete mode 100644 access_rule_groups.tf diff --git a/access_rule_groups.tf b/access_rule_groups.tf deleted file mode 100644 index f05a851..0000000 --- a/access_rule_groups.tf +++ /dev/null @@ -1,164 +0,0 @@ -#========================================================== -# Local Variables -#========================================================== -#locals { - # SAML groups from Okta -# saml_groups = { -# contractors = "Contractors" -# infrastructure_admin = "InfrastructureAdmin" -# sales_engineering = "SalesEngineering" -# sales = "Sales" -# it_admin = "ITAdmin" -# } - - # Azure AD groups -# azure_groups = { -# azure_engineering = var.azure_engineering_group_id -# azure_sales = var.azure_sales_group_id -# azure_administrators = var.cloudflare_azure_admin_rule_group_id -# } - - # Allowed countries -# allowed_countries = ["FR", "DE", "US", "GB"] -# blocked_countries = ["CN", "RU", "AF", "BY", "CD", "CU", "IR", "IQ", "KP", "MM", "SD", "SY", "UA", "ZW"] - -# OS posture checks -# os_posture_checks = [ -# var.cloudflare_linux_posture_id, -# var.cloudflare_macos_posture_id, -# var.cloudflare_windows_posture_id -# ] -#} - -#================================================== -# Default Rule Groups -#=================================================== -resource "cloudflare_zero_trust_access_group" "default_groups" { - account_id = local.cloudflare_account_id - name = "default group" - zone_id = local.cloudflare_zone_id - is_default = true - - include = [ - { - email = { - email = "thedjinhn@gmail.com" - } - } - ] -} - -#================================================== -# Geographic Rule Groups -#=================================================== -#resource "cloudflare_zero_trust_access_group" "country_requirements_rule_group" { -# account_id = local.cloudflare_account_id -# name = "Country Requirements" -# -# include = [ -# for country in local.allowed_countries : { -# geo = { -# country_code = country -# } -# } -# ] -# exclude = [ -# for country in local.blocked_countries : { -# geo = { -# country_code = country -# } -# } -# ] -#} - -#================================================== -# Device Posture Rule Groups -#=================================================== -#resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_rule_group" { -# account_id = local.cloudflare_account_id -# name = "Latest OS Version Requirements" -# -# include = [ -# for posture_id in local.os_posture_checks : { -# device_posture = { -# integration_uid = posture_id -# } -# } -# ] -#} - -#================================================== -# Composite Rule Groups -#=================================================== -#resource "cloudflare_zero_trust_access_group" "employees_rule_group" { -# account_id = local.cloudflare_account_id -# name = "Employees" -# -# include = [ -# for group_key in ["it_admin", "sales", "sales_engineering", "infrastructure_admin"] : { -# group = { -# id = cloudflare_zero_trust_access_group.saml_groups[group_key].id -# } -# } -# ] -#} - -#resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" { -# account_id = local.cloudflare_account_id -# name = "Sales Team" -# -# include = [ -# for group_key in ["sales", "sales_engineering"] : { -# group = { -# id = cloudflare_zero_trust_access_group.saml_groups[group_key].id -# } -# } -# ] -#} - -#resource "cloudflare_zero_trust_access_group" "admins_rule_group" { -# account_id = local.cloudflare_account_id -# name = "Administrators" -# -# include = [ -# for group_key in ["it_admin", "infrastructure_admin"] : { -# group = { -# id = cloudflare_zero_trust_access_group.saml_groups[group_key].id -# } -# } -# ] -#} - -#resource "cloudflare_zero_trust_access_group" "contractors_rule_group" { -# account_id = local.cloudflare_account_id -# name = "Contractors Extended" -# -# include = [ -# { -# group = { -# id = cloudflare_zero_trust_access_group.saml_groups["contractors"].id -# } -# }, -# { -# email_domain = { -# domain = var.cloudflare_email_domain -# } -# } -# ] -#} - -#================================================== -# Azure AD Rule Groups -#=================================================== -#resource "cloudflare_zero_trust_access_group" "azure_groups" { -# for_each = local.azure_groups -# account_id = local.cloudflare_account_id -# name = replace(title(replace(each.key, "_", " ")), "Azure", "Azure") -# -# include = [{ -# azure_ad = { -# identity_provider_id = var.cloudflare_azure_identity_provider_id -# id = each.value -# } -# }] -#}