Support Security Groups IDs #36

GennadySpb · Mar 10, 2022 · d5ea4d3 · d5ea4d3
1 parent 13e9d1d
commit d5ea4d3
Show file tree

Hide file tree

Showing 6 changed files with 10 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,7 @@
 ## 1.1.0 (Unreleased)
 
 * Provider image family data [GH-9]
+* Support set of Security Group IDs on the instance [GH-36]
 
 ## 1.0.0 (June 14, 2021)
 

diff --git a/builder/yandex/common_config.go b/builder/yandex/common_config.go
@@ -109,6 +109,8 @@ type NetworkConfig struct {
 	SubnetID string `mapstructure:"subnet_id" required:"false"`
 	// The name of the zone to launch the instance.  This defaults to `ru-central1-a`.
 	Zone string `mapstructure:"zone" required:"false"`
+	// Security group ids for network interface of the instance.
+	SecurityGroupIds []string `mapstructure:"security_group_ids" required:"false"`
 
 	// If set to true, then launched instance will have external internet
 	// access.

diff --git a/builder/yandex/config.hcl2spec.go b/builder/yandex/config.hcl2spec.go
diff --git a/builder/yandex/step_create_instance.go b/builder/yandex/step_create_instance.go
@@ -252,6 +252,7 @@ func (s *StepCreateInstance) Run(ctx context.Context, state multistep.StateBag)
 			{
 				SubnetId:             instanceSubnetID,
 				PrimaryV4AddressSpec: &compute.PrimaryAddressSpec{},
+				SecurityGroupIds:     config.SecurityGroupIds,
 			},
 		},
 	}

diff --git a/docs-partials/builder/yandex/NetworkConfig-not-required.mdx b/docs-partials/builder/yandex/NetworkConfig-not-required.mdx
@@ -6,6 +6,8 @@
 
 - `zone` (string) - The name of the zone to launch the instance.  This defaults to `ru-central1-a`.
 
+- `security_group_ids` ([]string) - Security group ids for network interface of the instance.
+
 - `use_ipv4_nat` (bool) - If set to true, then launched instance will have external internet
   access.
 

diff --git a/post-processor/yandex-export/post-processor.hcl2spec.go b/post-processor/yandex-export/post-processor.hcl2spec.go
-Original file line number
+Diff line change
@@ Expand Up @@
     			{
     				SubnetId:             instanceSubnetID,
     				PrimaryV4AddressSpec: &compute.PrimaryAddressSpec{},
+    				SecurityGroupIds:     config.SecurityGroupIds,
     			},
     		},
     	}
@@ Expand Down @@