GATE-2273: Adds support for device posture gateway rules

cloudflare · Dec 21, 2021 · 186e972 · 186e972
1 parent 59bb5dc
commit 186e972
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 19 deletions.
diff --git a/cloudflare/resource_cloudflare_teams_rules.go b/cloudflare/resource_cloudflare_teams_rules.go
@@ -60,6 +60,9 @@ func resourceCloudflareTeamsRuleRead(d *schema.ResourceData, meta interface{}) e
 	if err := d.Set("identity", rule.Identity); err != nil {
 		return fmt.Errorf("error parsing rule identity")
 	}
+	if err := d.Set("device_posture", rule.DevicePosture); err != nil {
+		return fmt.Errorf("error parsing rule device_posture")
+	}
 	if err := d.Set("version", int64(rule.Version)); err != nil {
 		return fmt.Errorf("error parsing rule version")
 	}
@@ -81,15 +84,16 @@ func resourceCloudflareTeamsRuleCreate(d *schema.ResourceData, meta interface{})
 	}
 
 	newTeamsRule := cloudflare.TeamsRule{
-		Name:        d.Get("name").(string),
-		Description: d.Get("description").(string),
-		Precedence:  uint64(d.Get("precedence").(int)),
-		Enabled:     d.Get("enabled").(bool),
-		Action:      cloudflare.TeamsGatewayAction(d.Get("action").(string)),
-		Filters:     filters,
-		Traffic:     d.Get("traffic").(string),
-		Identity:    d.Get("identity").(string),
-		Version:     uint64(d.Get("version").(int)),
+		Name:          d.Get("name").(string),
+		Description:   d.Get("description").(string),
+		Precedence:    uint64(d.Get("precedence").(int)),
+		Enabled:       d.Get("enabled").(bool),
+		Action:        cloudflare.TeamsGatewayAction(d.Get("action").(string)),
+		Filters:       filters,
+		Traffic:       d.Get("traffic").(string),
+		Identity:      d.Get("identity").(string),
+		DevicePosture: d.Get("device_posture").(string),
+		Version:       uint64(d.Get("version").(int)),
 	}
 
 	if settings != nil {
@@ -118,16 +122,17 @@ func resourceCloudflareTeamsRuleUpdate(d *schema.ResourceData, meta interface{})
 	}
 
 	teamsRule := cloudflare.TeamsRule{
-		ID:          d.Id(),
-		Name:        d.Get("name").(string),
-		Description: d.Get("description").(string),
-		Precedence:  uint64(d.Get("precedence").(int)),
-		Enabled:     d.Get("enabled").(bool),
-		Action:      cloudflare.TeamsGatewayAction(d.Get("action").(string)),
-		Filters:     filters,
-		Traffic:     d.Get("traffic").(string),
-		Identity:    d.Get("identity").(string),
-		Version:     uint64(d.Get("version").(int)),
+		ID:            d.Id(),
+		Name:          d.Get("name").(string),
+		Description:   d.Get("description").(string),
+		Precedence:    uint64(d.Get("precedence").(int)),
+		Enabled:       d.Get("enabled").(bool),
+		Action:        cloudflare.TeamsGatewayAction(d.Get("action").(string)),
+		Filters:       filters,
+		Traffic:       d.Get("traffic").(string),
+		Identity:      d.Get("identity").(string),
+		DevicePosture: d.Get("device_posture").(string),
+		Version:       uint64(d.Get("version").(int)),
 	}
 
 	if settings != nil {

diff --git a/cloudflare/schema_cloudflare_teams_rules.go b/cloudflare/schema_cloudflare_teams_rules.go
@@ -46,6 +46,10 @@ func resourceCloudflareTeamsRuleSchema() map[string]*schema.Schema {
 			Type:     schema.TypeString,
 			Optional: true,
 		},
+		"device_posture": {
+			Type:     schema.TypeString,
+			Optional: true,
+		},
 		"version": {
 			Type:     schema.TypeInt,
 			Computed: true,

diff --git a/website/docs/r/teams_rule.html.markdown b/website/docs/r/teams_rule.html.markdown
@@ -45,6 +45,7 @@ The following arguments are supported:
 * `filters` - (Optional) The protocol or layer to evaluate the traffic and identity expressions.
 * `traffic` - (Optional) The wirefilter expression to be used for traffic matching.
 * `identity` - (Optional) The wirefilter expression to be used for identity matching.
+* `device_posture` - (Optional) The wirefilter expression to be used for device_posture check matching.
 * `rule_settings` - (Optional) Additional rule settings.
 
 The **rule_settings** block supports: