Skip to content

feat: add configurable security group rule creation with CIDR support #145

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
uibm merged 2 commits into from
May 15, 2026
+300 −218
Merged

feat: add configurable security group rule creation with CIDR support #145

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
eebf9e2
feat: add configurable security group rule creation with remote support
uibm May 15, 2026
3157377
updated skip_create_default_security_group_rule docs
uibm May 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -206,6 +206,14 @@ vsi_boot_snapshot_id | string | Required | The ID of an existing boot snapshot.
| |
security_group_id | string | Optional | The security group identifier to use. If not specified, IBM packer plugin creates a new temporary security group to allow SSH and WinRM access.
| |
skip_create_default_security_group_rule | boolean | Optional | By default, the IBM Packer plugin creates security group rules to allow SSH and WinRM access. Set this to `true` if the security group already has the required access rules configured and you want to skip automatic rule creation.
| OR |
security_group_rule_remote_cidr | array of string | Optional | The remote CIDR block from which this rule will allow traffic.
| OR |
security_group_rule_remote_address | array of string | Optional | The remote ip address from which this rule will allow traffic.
| OR |
security_group_rule_remote_id | array of string | Optional | The remote security group id from which this rule will allow traffic.
| |
vsi_profile | string | Required | The profile this VSI uses.
vsi_interface | string | Optional | Set it as "public" to create a Floating IP to connect to the temp VSI. Set it as "private" to use private interface to connect to the temp VSI. Later seeks the private IP under the VPC.
| |
Expand Down
6 changes: 6 additions & 0 deletions builder/ibmcloud/vpc/config.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,12 @@ type Config struct {
ImageName string `mapstructure:"image_name"`
ImageTags []string `mapstructure:"tags"`

// Security Group Rule Configuration
SkipCreateDefaultSecurityGroupRule bool `mapstructure:"skip_create_default_security_group_rule"`
SecurityGroupRuleRemoteCIDR []string `mapstructure:"security_group_rule_remote_cidr"`
SecurityGroupRuleRemoteAddress []string `mapstructure:"security_group_rule_remote_address"`
SecurityGroupRuleRemoteID []string `mapstructure:"security_group_rule_remote_id"`

VSIName string `mapstructure-to-hcl2:",skip"`
VpcSshKeyName string `mapstructure-to-hcl2:",skip"`
SecurityGroupName string `mapstructure-to-hcl2:",skip"`
Expand Down
Loading
Loading