cts-agu
fortinetdev/cts-agu/fortios
Fortinet FortiOS Address, Address Group Update (AGU) module for Consul Terraform Sync (CTS) This Terraform module connects to FortiOS and creates Firewall addresses for each Consul service and updates address groups based on service names. Each address group will include all firewall addresses with the service names in variable addrgrp_name_map. Using the module in automation with Consul Terraform Sync will dynamically add or remove service instances from the address group based on Consul service discovery. This way FortiOS/FortiGate will be configured with the dynamically learned services IP addresses, thus allowing it to implement Firewall policies based on dynamically learned service information. Using this Terraform module in conjunction with consul-terraform-sync enables teams to redu
| Name | Type | Description | Default |
|---|---|---|---|
| addrgrp_name_map | map(list(string)) | Map of Firewall Address Group name to services | required |
| services | map( object({ id | Consul services monitored by Consul-Terraform-Sync | required |
| addrname_prefix | string | (Optional)Prefix added to each address name | "" |
| addrname_sufix | string | (Optional)Sufix added to each address name | "" |
| net_mask | string | (Optional)Net mask for firewall address | "255.255.255.255" |