Repository navigation
Allow users to import ACL from a CSV File #8858
Description
ISSUE TYPE
- Improvement Request
COMPONENT NAME
Improvement Request (UI, Functionality)
CLOUDSTACK VERSION
4.19
CONFIGURATION
N/A
OS / ENVIRONMENT
N/A
SUMMARY
Note: This ticket is broken down as requested from the origianl post, #8841
Allow users to import ACL from a CSV File
- As an admin, id like the ability to plan my ACL lists offline first in an excel.
- Once ive finalised my list, i would like to be able to import it to cloudstack via CSV
- This would greatly help my workflow (i can also keep the excel as a backup)
STEPS TO REPRODUCE
N/A
N/A
EXPECTED RESULTS
To be able to manage ACL Rules more easily for large scale projects
ACTUAL RESULTS
Challenging to use ACL rules for large scale projects.
Activity
DaanHoogland commentedon Apr 11, 2024
valid request @btzq ,
I think this can be partly implemented in the UI. There is an example for roles already (for whomever plans to implement this), ImportRole. In the AclList case we need to add an API ImportAclList and that can than be called by a processor that could for instance read an csv file. The UI could be such a processor but a CLI tool would do as well.
btzq commentedon Apr 12, 2024
I just thought of something. If the 'Import CSV' is going to be supported, it may also be necessary to support 'Override Existing ACL Rules'. Just so that it doesnt create duplicate rules.
DaanHoogland commentedon Apr 12, 2024
I think it is not needed as we could import rules in a new list and apply that one to the network. I can think of more use-cases to complicate this; add replace flags per rule, but what would be the match (source-cidr+port, source+des-cidr, in/egress, a user defined combination ?) . Let's keep this as simple as possible. Just add to a list and let the operator be responsible of clearing the list first if needed.
btzq commentedon Apr 12, 2024
Sure, we can go with that.
We can create a new ACL List and upload the rules via XLSX, then swap the ACL List (and delete the old list).
Still works for us.
10 remaining items
DaanHoogland commentedon Jan 29, 2026
implemented in #12013