Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The rule type of ip_set_reference_statement isn't extended to support additional arguements #66

Closed
wesleykirkland opened this issue Oct 28, 2022 · 0 comments

Comments

@wesleykirkland
Copy link
Contributor

wesleykirkland commented Oct 28, 2022

What is the current behavior?
ip_set_reference_statement doesn't have the ability to input ip_set_forwarded_ip_config as a statement inside of it.

If the current behavior is a bug, please provide the steps to reproduce and if possible a minimal demo of the problem.
The following is custom input to the module though validated.

The supported logic can be seen here - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/wafv2_rule_group#ip-set-reference-statement

global-rule1 = {
      envs_to_apply = ["dev", "stg"]
      rule = {
        name     = "global-rule1"
        priority = "11"

        action = "allow"

        visibility_config = {
          cloudwatch_metrics_enabled = false
          metric_name                = "global-rule1-metric"
          sampled_requests_enabled   = false
        }

        ip_set_reference_statement = {
          arn = aws_wafv2_ip_set.global_OfficeCidr.arn
          ip_set_forwarded_ip_config = {
            fallback_behavior = "NO_MATCH"
            header_name       = "X-Forwarded-For"
            position          = "ALL"
          }
        }
      }
    }

You can see here that the logic isn't supported.

What is the expected behavior?
ip_set_forwarded_ip_config should be supported.

Software versions?
3.8.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging a pull request may close this issue.

2 participants