migrate

2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
@@ -0,0 +1,192 @@
+{
+  "slug": "netbird-policy",
+  "kind": "terraform",
+  "metadata": {
+    "name": "NetBird Policy",
+    "description": "Creates a NetBird access policy with a single rule and optional posture checks.",
+    "tags": [
+      "netbird",
+      "terraform"
+    ],
+    "icon": {
+      "provider": "selfhst",
+      "id": "netbird"
+    },
+    "draft": false,
+    "version": {
+      "name": "0.0.12",
+      "source_dep_name": "manual/netbird-policy"
+    }
+  },
+  "variables": [
+    {
+      "title": "General",
+      "name": "general",
+      "items": [
+        {
+          "name": "policy_name",
+          "type": "str",
+          "title": "Policy Name",
+          "required": true,
+          "config": {
+            "placeholder": "Allow Internal HTTPS"
+          }
+        },
+        {
+          "name": "policy_description",
+          "type": "str",
+          "title": "Description",
+          "required": false,
+          "description": "Optional description for the policy.",
+          "config": {
+            "placeholder": "Allow app traffic from users to services",
+            "textarea": true
+          }
+        },
+        {
+          "name": "policy_enabled",
+          "type": "bool",
+          "title": "Enabled",
+          "required": false,
+          "default": true
+        }
+      ]
+    },
+    {
+      "title": "Rule",
+      "name": "rule",
+      "items": [
+        {
+          "name": "rule_name",
+          "type": "str",
+          "title": "Rule Name",
+          "required": true,
+          "config": {
+            "placeholder": "HTTPS"
+          }
+        },
+        {
+          "name": "rule_description",
+          "type": "str",
+          "title": "Rule Description",
+          "required": false,
+          "description": "Optional description for the rule.",
+          "config": {
+            "placeholder": "Allow HTTPS from users to the app group",
+            "textarea": true
+          }
+        },
+        {
+          "name": "rule_action",
+          "type": "enum",
+          "title": "Action",
+          "required": false,
+          "default": "accept",
+          "description": "Policy action to take.",
+          "config": {
+            "options": [
+              "accept",
+              "drop"
+            ]
+          }
+        },
+        {
+          "name": "rule_protocol",
+          "type": "enum",
+          "title": "Protocol",
+          "required": false,
+          "default": "tcp",
+          "description": "Protocol enforced by the policy rule.",
+          "config": {
+            "options": [
+              "tcp",
+              "udp",
+              "icmp",
+              "all",
+              "netbird-ssh"
+            ]
+          }
+        },
+        {
+          "name": "rule_bidirectional",
+          "type": "bool",
+          "title": "Bidirectional",
+          "required": false,
+          "default": true,
+          "description": "Allow traffic in both directions between the selected groups."
+        },
+        {
+          "name": "rule_enabled",
+          "type": "bool",
+          "title": "Rule Enabled",
+          "required": false,
+          "default": true
+        },
+        {
+          "name": "source_group_names",
+          "type": "str",
+          "title": "Source Group Names",
+          "required": true,
+          "description": "Comma-separated existing NetBird source group names.",
+          "config": {
+            "placeholder": "Users,Developers",
+            "textarea": true
+          }
+        },
+        {
+          "name": "destination_group_names",
+          "type": "str",
+          "title": "Destination Group Names",
+          "required": true,
+          "description": "Comma-separated existing NetBird destination group names.",
+          "config": {
+            "placeholder": "Services,Internal Apps",
+            "textarea": true
+          }
+        },
+        {
+          "name": "ports",
+          "type": "str",
+          "title": "Ports",
+          "required": false,
+          "description": "Raw HCL list entries for ports, for example `\"443\", \"8443\"`.",
+          "config": {
+            "placeholder": "\"443\"",
+            "textarea": true
+          }
+        },
+        {
+          "name": "authorized_group_entries",
+          "type": "str",
+          "title": "Authorized Group Entries",
+          "required": false,
+          "description": "Semicolon-separated `group_name|user1,user2` entries for NetBird SSH local-user authorization.",
+          "needs": [
+            "rule_protocol=netbird-ssh"
+          ],
+          "config": {
+            "placeholder": "Admins|ubuntu;SRE|root,ec2-user",
+            "textarea": true
+          }
+        }
+      ]
+    },
+    {
+      "title": "Posture Checks",
+      "name": "posture-checks",
+      "items": [
+        {
+          "name": "source_posture_check_names",
+          "type": "str",
+          "title": "Posture Check Names",
+          "required": false,
+          "description": "Comma-separated existing NetBird posture check names.",
+          "config": {
+            "placeholder": "Managed Devices,Minimum Version",
+            "textarea": true
+          }
+        }
+      ]
+    }
+  ]
+}