Terraform部署FortiManager策略添加Webfilter后安装包报错求助
FortiManager部署含Webfilter的防火墙策略时配置包安装报错
我正在测试Terraform在FortiManager与FortiGate中部署配置的边界能力,目标是给防火墙策略配置Webfilter,再把相关策略和FortiManager配置包部署到指定FortiGate设备上。之前部署流程一切正常,但添加Webfilter配置文件后,Terraform执行无异常,FortiManager里安装配置包的任务却持续报错。
试过两种排查操作:
- 通过GUI手动推送Terraform创建的Webfilter配置文件,无报错
- 改用Ansible实现相同配置,遇到完全一致的问题
防火墙策略代码模块
resource "fortimanager_packages_firewall_policy" "tunnelInternet" { for_each = var.InternetPolicies scopetype = "adom" adom = local.get_adom_from_pkg_internet[each.key] pkg = each.value.pkg name = each.value.name policyid = each.value.policy_id srcintf = each.value.srcintf dstintf = each.value.dstintf srcaddr = each.value.srcaddr dstaddr = each.value.dstaddr service = each.value.service action = each.value.action status = each.value.status nat = each.value.nat webfilter_profile = "wb-categories-${local.pkg_to_scope_member[each.value.pkg]}" fixedport = "disable" permit_stun_host = "disable" auto_asic_offload = "disable" # ou "disable" schedule = "always" logtraffic = "all" comments = "Test policy via Terraform" ssl_ssh_profile = "certificate-inspection" lifecycle { create_before_destroy = true } depends_on = [fortimanager_dvmdb_adom.test, fortimanager_object_webfilter_profile.webfilter, time_sleep.wait_30_seconds] }
配置包安装代码模块
resource "fortimanager_securityconsole_install_package" "install_package" { for_each = var.packages fmgadom = var.fortigates_provider[each.value.scope_member_name].adom flags = ["none"] pkg = each.value.package_name force_recreate = uuid() depends_on = [ fortimanager_packages_firewall_policy.tunnelInternet, fortimanager_packages_firewall_policy.tunnelsPolicies, time_sleep.wait_30_seconds ] }
GUI报错截图显示配置包安装任务执行失败,无法完成部署。
恳请各位帮忙排查解决这个问题。
内容的提问来源于stack exchange,提问作者raku
相关产品推荐
相关产品推荐

