feat(ufw): Add base ufw instance functionality into terraform

docs/index.md

@@ -225,6 +225,7 @@ See this [example](https://professional-service.git.onstackit.cloud/professional
 - `telemetrylink_custom_endpoint` (String) Custom endpoint for the Telemetry Link service
 - `telemetryrouter_custom_endpoint` (String) Custom endpoint for the Telemetry Router service
 - `token_custom_endpoint` (String) Custom endpoint for the token API, which is used to request access tokens when using the key flow
+- `ufw_custom_endpoint` (String) Custom endpoint for the UFW service
 - `use_oidc` (Boolean) Enables OIDC for Authentication. This can also be sourced from the `STACKIT_USE_OIDC` Environment Variable. Defaults to `false`.
 - `valkey_custom_endpoint` (String) Custom endpoint for the Key Value Store service
 - `vpn_custom_endpoint` (String) Custom endpoint for the VPN service

docs/resources/ufw_instance.md

@@ -0,0 +1,41 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "stackit_ufw_instance Resource - stackit"
+subcategory: ""
+description: |-
+  UFW Instance (Rule) resource schema.
+---
+
+# stackit_ufw_instance (Resource)
+
+UFW Instance (Rule) resource schema.
+
+## Example Usage
+
+```terraform
+resource "stackit_ufw_instance" "rule" {
+  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+  region      = "eu01"
+  instance_id = "yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy"
+  product     = "edge-cloud"
+  source_ip   = "1.2.3.4/32"
+  type        = "ACL"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `instance_id` (String) The target service instance ID.
+- `product` (String) The source service product (e.g. 'edge-cloud').
+- `project_id` (String) STACKIT Project ID associated with the rule.
+- `region` (String) The resource region.
+- `source_ip` (String) The source IP (CIDR) to which the rule applies.
+- `type` (String) The type of the rule (e.g., 'ACL').
+
+### Read-Only
+
+- `id` (String) Terraform internal resource identifier in format 'project_id,region,rule_id'.
+- `rule_id` (String) The rule UUID.

examples/resources/stackit_ufw_instance/resource.tf

@@ -0,0 +1,8 @@
+resource "stackit_ufw_instance" "rule" {
+  project_id  = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+  region      = "eu01"
+  instance_id = "yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy"
+  product     = "edge-cloud"
+  source_ip   = "1.2.3.4/32"
+  type        = "ACL"
+}

go.mod

@@ -50,6 +50,7 @@ require (
 	github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex v1.18.0
 	github.com/stackitcloud/stackit-sdk-go/services/telemetrylink v0.5.1
 	github.com/stackitcloud/stackit-sdk-go/services/telemetryrouter v0.5.1
+	github.com/stackitcloud/stackit-sdk-go/services/ufw v0.1.0
 	github.com/stackitcloud/stackit-sdk-go/services/valkey v0.3.0
 	github.com/stackitcloud/stackit-sdk-go/services/vpn v0.15.0
 	github.com/teambition/rrule-go v1.8.2

go.sum

@@ -233,6 +233,8 @@ github.com/stackitcloud/stackit-sdk-go/services/telemetrylink v0.5.1 h1:iIF9cRmW
 github.com/stackitcloud/stackit-sdk-go/services/telemetrylink v0.5.1/go.mod h1:hgw8janWmDfP2bnuZensxqcAePr49BX5ug8Rq85o+h8=
 github.com/stackitcloud/stackit-sdk-go/services/telemetryrouter v0.5.1 h1:WzpbI9wK3/xSplKOWpHg2FA8MYDwqO0jYGlDANe2cgY=
 github.com/stackitcloud/stackit-sdk-go/services/telemetryrouter v0.5.1/go.mod h1:WUmgKtwpe90Yq3YbgNxc2clTTULVxCu0ha6lMTjUnII=
+github.com/stackitcloud/stackit-sdk-go/services/ufw v0.1.0 h1:LnDUxI7v507T341Smff/fVzSSRP59uIOUmcHAbUf1hE=
+github.com/stackitcloud/stackit-sdk-go/services/ufw v0.1.0/go.mod h1:c/JxzGai01jCK/5OCi0TxCUiQ1Gl7SboGuErflWxLqQ=
 github.com/stackitcloud/stackit-sdk-go/services/valkey v0.3.0 h1:XC238ExUFeDHOlJzu4gcspsbcr5v70T/cuNuC/8tUZQ=
 github.com/stackitcloud/stackit-sdk-go/services/valkey v0.3.0/go.mod h1:etzt/a723p327dqha1V72cCoBWjUBS2DtHy3ZTac0SA=
 github.com/stackitcloud/stackit-sdk-go/services/vpn v0.15.0 h1:JpMJjWBa6fwNNcAHoq00v+8+DwMD0/fe4WPjvbHdY2o=

stackit/internal/core/core.go

@@ -76,6 +76,7 @@ type ProviderData struct {
 	ServiceAccountCustomEndpoint    string
 	TelemetryLinkCustomEndpoint     string
 	TelemetryRouterCustomEndpoint   string
+	UfwCustomEndpoint               string
 	ValkeyCustomEndpoint            string
 	VpnCustomEndpoint               string
 	EnableBetaResources             bool