{"token_count": 392}

# Reference for the teleport\_client\_ip\_restriction Terraform data-source

This page describes the supported values of the `teleport_client_ip_restriction` data source of the Teleport Terraform provider.

## Schema

### Optional

- `metadata` (Attributes) Metadata about the client IP restrictions. (see [below for nested schema](#nested-schema-for-metadata))
- `spec` (Attributes) User-configurable parts of the resource settings. (see [below for nested schema](#nested-schema-for-spec))
- `status` (Attributes) User-immutable status of the ClientIPRestriction and its supporting resources. (see [below for nested schema](#nested-schema-for-status))
- `sub_kind` (String) The sub\_kind of the resource. Always "".
- `version` (String) The version of the resource. Always "v1".

### Nested Schema for `metadata`

Optional:

- `description` (String) description is object description.
- `expires` (String) expires is a global expiry time header can be set on any resource in the system.
- `labels` (Map of String) labels is a set of labels.
- `name` (String) name is an object name.

### Nested Schema for `spec`

Optional:

- `allowed_cidrs` (List of String) allowed\_cidrs is the list of CIDR blocks permitted to connect to the cluster. An empty list disables restrictions and allows all traffic.

### Nested Schema for `status`

Optional:

- `state` (String) state is the current enforcement state of the restrictions at the ingress layer. Possible values: "pending", "active".