unkin/terraform-provider-tomswallapi
4
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity

tomswallapi_device_config data source + rule fanout preview #11

New Issue
Open
opened 2026-07-26 17:15:54 +10:00 by benvin · 0 comments
benvin commented 2026-07-26 17:15:54 +10:00
Owner
Copy Link
Copy Source

Problem. DESIGN.md §10 lists a rendered-config preview data source and a
"which devices does this intent touch" fanout preview surfaced in plan;
neither exists in the provider. For a firewall control plane, seeing the
concrete per-device delta before apply is the single most important safety
feature — the equivalent of reading shorewall's generated script before
restart. I'd rank this above adding further resource types.

Proposal.

  • data "tomswallapi_device_config" "fw_a" returning the rendered
    tomswall.yaml for a device at the current model state, so plan output
    diffs it.
  • Fanout: computed attribute on tomswallapi_rule listing enforcing devices,
    so plan shows blast radius.
**Problem.** DESIGN.md §10 lists a rendered-config preview data source and a "which devices does this intent touch" fanout preview surfaced in plan; neither exists in the provider. For a firewall control plane, seeing the concrete per-device delta *before* apply is the single most important safety feature — the equivalent of reading shorewall's generated script before `restart`. I'd rank this above adding further resource types. **Proposal.** - `data "tomswallapi_device_config" "fw_a"` returning the rendered `tomswall.yaml` for a device at the current model state, so plan output diffs it. - Fanout: computed attribute on `tomswallapi_rule` listing enforcing devices, so plan shows blast radius.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-provider-tomswallapi#11
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?