Skip to content

Commit 3a5a85d

Browse files
Add guidance to heroku_space_inbound_ruleset to use moved blocks (#403)
* Add guidance to heroku_space_inbound_ruleset to use moved blocks The heroku_space_inbound_ruleset is modeled as a single list resource in the Heroku API. When renaming the resource terraform understands this as a delete and then a create of the new resource rather than patching it in place. A deletion of the heroku_space_inbound_ruleset has the effect of changing the ruleset to "ALLOW 0.0.0.0/0." While this behavior is correct, it does put the space in a temporary state of allowing all traffic, which users may find undesierable and non-obvious. We want to advise users that this is behavior exists and provide guidance for how to avoid it so that they man ensure consistent application of their desired ruleset. * Update our heroku_inbound_space_ruleset to a red warning Marking it "danger" as it has implications for a spaces' critical security controls.
1 parent 1ca79d0 commit 3a5a85d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

docs/resources/space_inbound_ruleset.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,8 @@ description: |-
1010

1111
Provides a resource for managing [inbound rulesets](https://devcenter.heroku.com/articles/platform-api-reference#inbound-ruleset) for Heroku Private Spaces.
1212

13+
!> **Warning:** When renaming or relocating this resource, use a [`moved` block](https://developer.hashicorp.com/terraform/language/block/moved) to prevent the resource from being destroyed and recreated. During destroy/create operations, the space's inbound ruleset is temporarily set to allow all traffic, which can create a security risk.
14+
1315
## Example Usage
1416

1517
```hcl-terraform

0 commit comments

Comments
 (0)