Docs Packages
  1. Packages
  2. OpenStack
  3. API Docs
  4. firewall
  5. PolicyV2
OpenStack v3.15.2 published on Friday, Mar 29, 2024 by Pulumi
pulumi/pulumi-openstack

openstack.firewall.PolicyV2

Explore with Pulumi AI

openstack logo
OpenStack v3.15.2 published on Friday, Mar 29, 2024 by Pulumi
pulumi/pulumi-openstack

    Manages a v2 firewall policy resource within OpenStack.

    Note: Firewall v2 has no support for OVN currently.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as openstack from "@pulumi/openstack";

const rule1 = new openstack.firewall.RuleV2("rule1", {
    description: "drop TELNET traffic",
    action: "deny",
    protocol: "tcp",
    destinationPort: "23",
    enabled: true,
});
const rule2 = new openstack.firewall.RuleV2("rule2", {
    description: "drop NTP traffic",
    action: "deny",
    protocol: "udp",
    destinationPort: "123",
    enabled: false,
});
const policy1 = new openstack.firewall.PolicyV2("policy1", {rules: [
    rule1.id,
    rule2.id,
]});

    import pulumi
import pulumi_openstack as openstack

rule1 = openstack.firewall.RuleV2("rule1",
    description="drop TELNET traffic",
    action="deny",
    protocol="tcp",
    destination_port="23",
    enabled=True)
rule2 = openstack.firewall.RuleV2("rule2",
    description="drop NTP traffic",
    action="deny",
    protocol="udp",
    destination_port="123",
    enabled=False)
policy1 = openstack.firewall.PolicyV2("policy1", rules=[
    rule1.id,
    rule2.id,
])

    package main

import (
	"github.com/pulumi/pulumi-openstack/sdk/v3/go/openstack/firewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		rule1, err := firewall.NewRuleV2(ctx, "rule1", &firewall.RuleV2Args{
			Description:     pulumi.String("drop TELNET traffic"),
			Action:          pulumi.String("deny"),
			Protocol:        pulumi.String("tcp"),
			DestinationPort: pulumi.String("23"),
			Enabled:         pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		rule2, err := firewall.NewRuleV2(ctx, "rule2", &firewall.RuleV2Args{
			Description:     pulumi.String("drop NTP traffic"),
			Action:          pulumi.String("deny"),
			Protocol:        pulumi.String("udp"),
			DestinationPort: pulumi.String("123"),
			Enabled:         pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		_, err = firewall.NewPolicyV2(ctx, "policy1", &firewall.PolicyV2Args{
			Rules: pulumi.StringArray{
				rule1.ID(),
				rule2.ID(),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using OpenStack = Pulumi.OpenStack;

return await Deployment.RunAsync(() => 
{
    var rule1 = new OpenStack.Firewall.RuleV2("rule1", new()
    {
        Description = "drop TELNET traffic",
        Action = "deny",
        Protocol = "tcp",
        DestinationPort = "23",
        Enabled = true,
    });

    var rule2 = new OpenStack.Firewall.RuleV2("rule2", new()
    {
        Description = "drop NTP traffic",
        Action = "deny",
        Protocol = "udp",
        DestinationPort = "123",
        Enabled = false,
    });

    var policy1 = new OpenStack.Firewall.PolicyV2("policy1", new()
    {
        Rules = new[]
        {
            rule1.Id,
            rule2.Id,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.openstack.firewall.RuleV2;
import com.pulumi.openstack.firewall.RuleV2Args;
import com.pulumi.openstack.firewall.PolicyV2;
import com.pulumi.openstack.firewall.PolicyV2Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var rule1 = new RuleV2("rule1", RuleV2Args.builder()        
            .description("drop TELNET traffic")
            .action("deny")
            .protocol("tcp")
            .destinationPort("23")
            .enabled("true")
            .build());

        var rule2 = new RuleV2("rule2", RuleV2Args.builder()        
            .description("drop NTP traffic")
            .action("deny")
            .protocol("udp")
            .destinationPort("123")
            .enabled("false")
            .build());

        var policy1 = new PolicyV2("policy1", PolicyV2Args.builder()        
            .rules(            
                rule1.id(),
                rule2.id())
            .build());

    }
}

    resources:
  rule1:
    type: openstack:firewall:RuleV2
    properties:
      description: drop TELNET traffic
      action: deny
      protocol: tcp
      destinationPort: '23'
      enabled: 'true'
  rule2:
    type: openstack:firewall:RuleV2
    properties:
      description: drop NTP traffic
      action: deny
      protocol: udp
      destinationPort: '123'
      enabled: 'false'
  policy1:
    type: openstack:firewall:PolicyV2
    properties:
      rules:
        - ${rule1.id}
        - ${rule2.id}

    Create PolicyV2 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PolicyV2(name: string, args?: PolicyV2Args, opts?: CustomResourceOptions);
    @overload
def PolicyV2(resource_name: str,
             args: Optional[PolicyV2Args] = None,
             opts: Optional[ResourceOptions] = None)

@overload
def PolicyV2(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             audited: Optional[bool] = None,
             description: Optional[str] = None,
             name: Optional[str] = None,
             project_id: Optional[str] = None,
             region: Optional[str] = None,
             rules: Optional[Sequence[str]] = None,
             shared: Optional[bool] = None,
             tenant_id: Optional[str] = None)
    func NewPolicyV2(ctx *Context, name string, args *PolicyV2Args, opts ...ResourceOption) (*PolicyV2, error)
    public PolicyV2(string name, PolicyV2Args? args = null, CustomResourceOptions? opts = null)
    public PolicyV2(String name, PolicyV2Args args)
public PolicyV2(String name, PolicyV2Args args, CustomResourceOptions options)

    type: openstack:firewall:PolicyV2
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PolicyV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyV2Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyV2Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyV2Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Example

    The following reference example uses placeholder values for all input properties.

    var policyV2Resource = new OpenStack.Firewall.PolicyV2("policyV2Resource", new()
{
    Audited = false,
    Description = "string",
    Name = "string",
    ProjectId = "string",
    Region = "string",
    Rules = new[]
    {
        "string",
    },
    Shared = false,
    TenantId = "string",
});

    example, err := firewall.NewPolicyV2(ctx, "policyV2Resource", &firewall.PolicyV2Args{
	Audited:     pulumi.Bool(false),
	Description: pulumi.String("string"),
	Name:        pulumi.String("string"),
	ProjectId:   pulumi.String("string"),
	Region:      pulumi.String("string"),
	Rules: pulumi.StringArray{
		pulumi.String("string"),
	},
	Shared:   pulumi.Bool(false),
	TenantId: pulumi.String("string"),
})

    var policyV2Resource = new PolicyV2("policyV2Resource", PolicyV2Args.builder()        
    .audited(false)
    .description("string")
    .name("string")
    .projectId("string")
    .region("string")
    .rules("string")
    .shared(false)
    .tenantId("string")
    .build());

    policy_v2_resource = openstack.firewall.PolicyV2("policyV2Resource",
    audited=False,
    description="string",
    name="string",
    project_id="string",
    region="string",
    rules=["string"],
    shared=False,
    tenant_id="string")

    const policyV2Resource = new openstack.firewall.PolicyV2("policyV2Resource", {
    audited: false,
    description: "string",
    name: "string",
    projectId: "string",
    region: "string",
    rules: ["string"],
    shared: false,
    tenantId: "string",
});

    type: openstack:firewall:PolicyV2
properties:
    audited: false
    description: string
    name: string
    projectId: string
    region: string
    rules:
        - string
    shared: false
    tenantId: string

    PolicyV2 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The PolicyV2 resource accepts the following input properties:

    Audited bool
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    Description string
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    Name string
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    ProjectId string
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    Region string
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    Rules List<string>
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    Shared bool
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    TenantId string
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    Audited bool
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    Description string
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    Name string
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    ProjectId string
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    Region string
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    Rules []string
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    Shared bool
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    TenantId string
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited Boolean
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description String
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name String
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    projectId String
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region String
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules List<String>
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared Boolean
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenantId String
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited boolean
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description string
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name string
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    projectId string
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region string
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules string[]
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared boolean
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenantId string
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited bool
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description str
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name str
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    project_id str
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region str
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules Sequence[str]
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared bool
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenant_id str
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited Boolean
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description String
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name String
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    projectId String
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region String
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules List<String>
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared Boolean
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenantId String
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PolicyV2 resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing PolicyV2 Resource

    Get an existing PolicyV2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PolicyV2State, opts?: CustomResourceOptions): PolicyV2
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        audited: Optional[bool] = None,
        description: Optional[str] = None,
        name: Optional[str] = None,
        project_id: Optional[str] = None,
        region: Optional[str] = None,
        rules: Optional[Sequence[str]] = None,
        shared: Optional[bool] = None,
        tenant_id: Optional[str] = None) -> PolicyV2
    func GetPolicyV2(ctx *Context, name string, id IDInput, state *PolicyV2State, opts ...ResourceOption) (*PolicyV2, error)
    public static PolicyV2 Get(string name, Input<string> id, PolicyV2State? state, CustomResourceOptions? opts = null)
    public static PolicyV2 get(String name, Output<String> id, PolicyV2State state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Audited bool
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    Description string
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    Name string
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    ProjectId string
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    Region string
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    Rules List<string>
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    Shared bool
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    TenantId string
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    Audited bool
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    Description string
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    Name string
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    ProjectId string
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    Region string
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    Rules []string
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    Shared bool
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    TenantId string
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited Boolean
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description String
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name String
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    projectId String
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region String
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules List<String>
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared Boolean
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenantId String
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited boolean
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description string
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name string
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    projectId string
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region string
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules string[]
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared boolean
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenantId string
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited bool
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description str
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name str
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    project_id str
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region str
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules Sequence[str]
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared bool
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenant_id str
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.
    audited Boolean
    Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates the audited status of an existing firewall policy.
    description String
    A description for the firewall policy. Changing this updates the description of an existing firewall policy.
    name String
    A name for the firewall policy. Changing this updates the name of an existing firewall policy.
    projectId String
    This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy.
    region String
    The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a new firewall policy.
    rules List<String>
    An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy.
    shared Boolean
    Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
    tenantId String
    This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy.

    Import

    Firewall Policies can be imported using the id, e.g.

    $ pulumi import openstack:firewall/policyV2:PolicyV2 policy_1 07f422e6-c596-474b-8b94-fe2c12506ce0

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    OpenStack pulumi/pulumi-openstack
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the openstack Terraform Provider.
    openstack logo
    OpenStack v3.15.2 published on Friday, Mar 29, 2024 by Pulumi
    pulumi/pulumi-openstack