Extended ipallowlists

docs/data-sources/web_service.md

@@ -32,6 +32,7 @@ Provides information about a Render Web Service.
 - `env_vars` (Attributes Map) Map of environment variable names to their values. (see [below for nested schema](#nestedatt--env_vars))
 - `environment_id` (String) Unique identifier for the environment that the resource belongs to
 - `health_check_path` (String) If you're running a server, enter the path where your server will always return a 200 OK response. We use it to monitor your app and for [zero downtime deploys](https://render.com/docs/deploys#zero-downtime-deploys).
+- `ip_allow_list` (Attributes Set) List of IP addresses that are allowed to connect to the Redis instance. If no IP addresses are provided, only connections via the private network will be allowed. (see [below for nested schema](#nestedatt--ip_allow_list))
 - `maintenance_mode` (Attributes) Maintenance mode settings (see [below for nested schema](#nestedatt--maintenance_mode))
 - `max_shutdown_delay_seconds` (Number) The maximum amount of time (in seconds) that Render waits for your application process to exit gracefully after sending it a SIGTERM signal before sending a SIGKILL signal.
 - `name` (String) Name of the service
@@ -150,6 +151,15 @@ Read-Only:
 - `value` (String, Sensitive)
 
 
+<a id="nestedatt--ip_allow_list"></a>
+### Nested Schema for `ip_allow_list`
+
+Read-Only:
+
+- `cidr_block` (String) CIDR block that is allowed to connect to the Redis instance. (0.0.0.0/0 to allow traffic from all IPs)
+- `description` (String) Description of the IP address or range. This is used to help identify the IP address or range in the list.
+
+
 <a id="nestedatt--maintenance_mode"></a>
 ### Nested Schema for `maintenance_mode`
 

docs/resources/project.md

@@ -55,8 +55,17 @@ Required:
 Optional:
 
 - `id` (String) Unique identifier of the environment
+- `ip_allow_list` (Attributes Set) List of IP addresses that are allowed to connect to the web service. If omitted, the API default (0.0.0.0/0 - allow all) is used. If set to an empty list, all traffic is blocked. If removed after being set, it reverts to the default (0.0.0.0/0). This is an enterprise-only feature. (see [below for nested schema](#nestedatt--environments--ip_allow_list))
 - `network_isolated` (Boolean) Whether services within this environment are isolated from network requests from other environments
 
+<a id="nestedatt--environments--ip_allow_list"></a>
+### Nested Schema for `environments.ip_allow_list`
+
+Required:
+
+- `cidr_block` (String) CIDR block that is allowed to connect to the Redis instance. (0.0.0.0/0 to allow traffic from all IPs)
+- `description` (String) Description of the IP address or range. This is used to help identify the IP address or range in the list.
+
 ## Import
 
 Import is supported using the following syntax:

docs/resources/static_site.md

@@ -113,6 +113,7 @@ resource "render_static_site" "example" {
 - `env_vars` (Attributes Map) Map of environment variable names to their values. (see [below for nested schema](#nestedatt--env_vars))
 - `environment_id` (String) ID of the [project environment](https://render.com/docs/projects) that the resource belongs to
 - `headers` (Attributes Set) List of [headers](https://render.com/docs/static-site-headers) to apply to requests for static sites (see [below for nested schema](#nestedatt--headers))
+- `ip_allow_list` (Attributes Set) List of IP addresses that are allowed to connect to the web service. If omitted, the API default (0.0.0.0/0 - allow all) is used. If set to an empty list, all traffic is blocked. If removed after being set, it reverts to the default (0.0.0.0/0). This is an enterprise-only feature. (see [below for nested schema](#nestedatt--ip_allow_list))
 - `notification_override` (Attributes) Configure the [notification settings](https://render.com/docs/notifications) for this service. These will override the global notification settings of the user or team. (see [below for nested schema](#nestedatt--notification_override))
 - `previews` (Attributes) [Pull request previews](https://render.com/docs/pull-request-previews#pull-request-previews-git-backed) settings (see [below for nested schema](#nestedatt--previews))
 - `publish_path` (String) Path to the directory that contains the build artifacts to publish for a static site. Defaults to public/.
@@ -170,6 +171,15 @@ Required:
 - `value` (String) Value of the header
 
 
+<a id="nestedatt--ip_allow_list"></a>
+### Nested Schema for `ip_allow_list`
+
+Required:
+
+- `cidr_block` (String) CIDR block that is allowed to connect to the Redis instance. (0.0.0.0/0 to allow traffic from all IPs)
+- `description` (String) Description of the IP address or range. This is used to help identify the IP address or range in the list.
+
+
 <a id="nestedatt--notification_override"></a>
 ### Nested Schema for `notification_override`
 

docs/resources/web_service.md

@@ -82,6 +82,7 @@ resource "render_web_service" "web" {
 - `env_vars` (Attributes Map) Map of environment variable names to their values. (see [below for nested schema](#nestedatt--env_vars))
 - `environment_id` (String) ID of the [project environment](https://render.com/docs/projects) that the resource belongs to
 - `health_check_path` (String) If you're running a server, enter the path where your server will always return a 200 OK response. We use it to monitor your app and for [zero downtime deploys](https://render.com/docs/deploys#zero-downtime-deploys).
+- `ip_allow_list` (Attributes Set) List of IP addresses that are allowed to connect to the web service. If omitted, the API default (0.0.0.0/0 - allow all) is used. If set to an empty list, all traffic is blocked. If removed after being set, it reverts to the default (0.0.0.0/0). This is an enterprise-only feature. (see [below for nested schema](#nestedatt--ip_allow_list))
 - `log_stream_override` (Attributes) Configure the [log stream override settings](https://render.com/docs/log-streams#overriding-defaults) for this service. These will override the global log stream settings of the user or team. (see [below for nested schema](#nestedatt--log_stream_override))
 - `maintenance_mode` (Attributes) Maintenance mode settings for the service. (see [below for nested schema](#nestedatt--maintenance_mode))
 - `max_shutdown_delay_seconds` (Number) The maximum amount of time (in seconds) that Render waits for your application process to exit gracefully after sending it a SIGTERM signal before sending a SIGKILL signal.
@@ -254,6 +255,15 @@ Optional:
 - `value` (String, Sensitive)
 
 
+<a id="nestedatt--ip_allow_list"></a>
+### Nested Schema for `ip_allow_list`
+
+Required:
+
+- `cidr_block` (String) CIDR block that is allowed to connect to the Redis instance. (0.0.0.0/0 to allow traffic from all IPs)
+- `description` (String) Description of the IP address or range. This is used to help identify the IP address or range in the list.
+
+
 <a id="nestedatt--log_stream_override"></a>
 ### Nested Schema for `log_stream_override`