Docs Packages
  1. Packages
  2. OpenStack
  3. API Docs
  4. firewall
  5. Rule
OpenStack v3.15.2 published on Friday, Mar 29, 2024 by Pulumi
pulumi/pulumi-openstack

openstack.firewall.Rule

Explore with Pulumi AI

openstack logo
OpenStack v3.15.2 published on Friday, Mar 29, 2024 by Pulumi
pulumi/pulumi-openstack

    Manages a v1 firewall rule resource within OpenStack.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as openstack from "@pulumi/openstack";

const rule1 = new openstack.firewall.Rule("rule1", {
    action: "deny",
    description: "drop TELNET traffic",
    destinationPort: "23",
    enabled: true,
    protocol: "tcp",
});

    import pulumi
import pulumi_openstack as openstack

rule1 = openstack.firewall.Rule("rule1",
    action="deny",
    description="drop TELNET traffic",
    destination_port="23",
    enabled=True,
    protocol="tcp")

    package main

import (
	"github.com/pulumi/pulumi-openstack/sdk/v3/go/openstack/firewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := firewall.NewRule(ctx, "rule1", &firewall.RuleArgs{
			Action:          pulumi.String("deny"),
			Description:     pulumi.String("drop TELNET traffic"),
			DestinationPort: pulumi.String("23"),
			Enabled:         pulumi.Bool(true),
			Protocol:        pulumi.String("tcp"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using OpenStack = Pulumi.OpenStack;

return await Deployment.RunAsync(() => 
{
    var rule1 = new OpenStack.Firewall.Rule("rule1", new()
    {
        Action = "deny",
        Description = "drop TELNET traffic",
        DestinationPort = "23",
        Enabled = true,
        Protocol = "tcp",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.openstack.firewall.Rule;
import com.pulumi.openstack.firewall.RuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var rule1 = new Rule("rule1", RuleArgs.builder()        
            .action("deny")
            .description("drop TELNET traffic")
            .destinationPort("23")
            .enabled("true")
            .protocol("tcp")
            .build());

    }
}

    resources:
  rule1:
    type: openstack:firewall:Rule
    properties:
      action: deny
      description: drop TELNET traffic
      destinationPort: '23'
      enabled: 'true'
      protocol: tcp

    Create Rule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Rule(name: string, args: RuleArgs, opts?: CustomResourceOptions);
    @overload
def Rule(resource_name: str,
         args: RuleArgs,
         opts: Optional[ResourceOptions] = None)

@overload
def Rule(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         action: Optional[str] = None,
         protocol: Optional[str] = None,
         name: Optional[str] = None,
         destination_port: Optional[str] = None,
         enabled: Optional[bool] = None,
         ip_version: Optional[int] = None,
         destination_ip_address: Optional[str] = None,
         description: Optional[str] = None,
         region: Optional[str] = None,
         source_ip_address: Optional[str] = None,
         source_port: Optional[str] = None,
         tenant_id: Optional[str] = None,
         value_specs: Optional[Mapping[str, Any]] = None)
    func NewRule(ctx *Context, name string, args RuleArgs, opts ...ResourceOption) (*Rule, error)
    public Rule(string name, RuleArgs args, CustomResourceOptions? opts = null)
    public Rule(String name, RuleArgs args)
public Rule(String name, RuleArgs args, CustomResourceOptions options)

    type: openstack:firewall:Rule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args RuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Example

    The following reference example uses placeholder values for all input properties.

    var ruleResource = new OpenStack.Firewall.Rule("ruleResource", new()
{
    Action = "string",
    Protocol = "string",
    Name = "string",
    DestinationPort = "string",
    Enabled = false,
    IpVersion = 0,
    DestinationIpAddress = "string",
    Description = "string",
    Region = "string",
    SourceIpAddress = "string",
    SourcePort = "string",
    TenantId = "string",
    ValueSpecs = 
    {
        { "string", "any" },
    },
});

    example, err := firewall.NewRule(ctx, "ruleResource", &firewall.RuleArgs{
	Action:               pulumi.String("string"),
	Protocol:             pulumi.String("string"),
	Name:                 pulumi.String("string"),
	DestinationPort:      pulumi.String("string"),
	Enabled:              pulumi.Bool(false),
	IpVersion:            pulumi.Int(0),
	DestinationIpAddress: pulumi.String("string"),
	Description:          pulumi.String("string"),
	Region:               pulumi.String("string"),
	SourceIpAddress:      pulumi.String("string"),
	SourcePort:           pulumi.String("string"),
	TenantId:             pulumi.String("string"),
	ValueSpecs: pulumi.Map{
		"string": pulumi.Any("any"),
	},
})

    var ruleResource = new Rule("ruleResource", RuleArgs.builder()        
    .action("string")
    .protocol("string")
    .name("string")
    .destinationPort("string")
    .enabled(false)
    .ipVersion(0)
    .destinationIpAddress("string")
    .description("string")
    .region("string")
    .sourceIpAddress("string")
    .sourcePort("string")
    .tenantId("string")
    .valueSpecs(Map.of("string", "any"))
    .build());

    rule_resource = openstack.firewall.Rule("ruleResource",
    action="string",
    protocol="string",
    name="string",
    destination_port="string",
    enabled=False,
    ip_version=0,
    destination_ip_address="string",
    description="string",
    region="string",
    source_ip_address="string",
    source_port="string",
    tenant_id="string",
    value_specs={
        "string": "any",
    })

    const ruleResource = new openstack.firewall.Rule("ruleResource", {
    action: "string",
    protocol: "string",
    name: "string",
    destinationPort: "string",
    enabled: false,
    ipVersion: 0,
    destinationIpAddress: "string",
    description: "string",
    region: "string",
    sourceIpAddress: "string",
    sourcePort: "string",
    tenantId: "string",
    valueSpecs: {
        string: "any",
    },
});

    type: openstack:firewall:Rule
properties:
    action: string
    description: string
    destinationIpAddress: string
    destinationPort: string
    enabled: false
    ipVersion: 0
    name: string
    protocol: string
    region: string
    sourceIpAddress: string
    sourcePort: string
    tenantId: string
    valueSpecs:
        string: any

    Rule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Rule resource accepts the following input properties:

    Action string
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    Protocol string
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    Description string
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    DestinationIpAddress string
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    DestinationPort string
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    Enabled bool
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    IpVersion int
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    Name string
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    Region string
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    SourceIpAddress string
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    SourcePort string
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    TenantId string
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    ValueSpecs Dictionary<string, object>
    Map of additional options.
    Action string
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    Protocol string
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    Description string
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    DestinationIpAddress string
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    DestinationPort string
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    Enabled bool
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    IpVersion int
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    Name string
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    Region string
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    SourceIpAddress string
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    SourcePort string
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    TenantId string
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    ValueSpecs map[string]interface{}
    Map of additional options.
    action String
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    protocol String
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    description String
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destinationIpAddress String
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destinationPort String
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled Boolean
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ipVersion Integer
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name String
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    region String
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    sourceIpAddress String
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    sourcePort String
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenantId String
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    valueSpecs Map<String,Object>
    Map of additional options.
    action string
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    protocol string
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    description string
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destinationIpAddress string
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destinationPort string
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled boolean
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ipVersion number
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name string
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    region string
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    sourceIpAddress string
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    sourcePort string
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenantId string
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    valueSpecs {[key: string]: any}
    Map of additional options.
    action str
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    protocol str
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    description str
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destination_ip_address str
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destination_port str
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled bool
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ip_version int
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name str
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    region str
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    source_ip_address str
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    source_port str
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenant_id str
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    value_specs Mapping[str, Any]
    Map of additional options.
    action String
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    protocol String
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    description String
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destinationIpAddress String
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destinationPort String
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled Boolean
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ipVersion Number
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name String
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    region String
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    sourceIpAddress String
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    sourcePort String
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenantId String
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    valueSpecs Map<Any>
    Map of additional options.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Rule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Rule Resource

    Get an existing Rule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: RuleState, opts?: CustomResourceOptions): Rule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        description: Optional[str] = None,
        destination_ip_address: Optional[str] = None,
        destination_port: Optional[str] = None,
        enabled: Optional[bool] = None,
        ip_version: Optional[int] = None,
        name: Optional[str] = None,
        protocol: Optional[str] = None,
        region: Optional[str] = None,
        source_ip_address: Optional[str] = None,
        source_port: Optional[str] = None,
        tenant_id: Optional[str] = None,
        value_specs: Optional[Mapping[str, Any]] = None) -> Rule
    func GetRule(ctx *Context, name string, id IDInput, state *RuleState, opts ...ResourceOption) (*Rule, error)
    public static Rule Get(string name, Input<string> id, RuleState? state, CustomResourceOptions? opts = null)
    public static Rule get(String name, Output<String> id, RuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    Description string
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    DestinationIpAddress string
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    DestinationPort string
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    Enabled bool
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    IpVersion int
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    Name string
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    Protocol string
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    Region string
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    SourceIpAddress string
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    SourcePort string
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    TenantId string
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    ValueSpecs Dictionary<string, object>
    Map of additional options.
    Action string
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    Description string
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    DestinationIpAddress string
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    DestinationPort string
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    Enabled bool
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    IpVersion int
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    Name string
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    Protocol string
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    Region string
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    SourceIpAddress string
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    SourcePort string
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    TenantId string
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    ValueSpecs map[string]interface{}
    Map of additional options.
    action String
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    description String
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destinationIpAddress String
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destinationPort String
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled Boolean
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ipVersion Integer
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name String
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    protocol String
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    region String
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    sourceIpAddress String
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    sourcePort String
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenantId String
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    valueSpecs Map<String,Object>
    Map of additional options.
    action string
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    description string
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destinationIpAddress string
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destinationPort string
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled boolean
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ipVersion number
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name string
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    protocol string
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    region string
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    sourceIpAddress string
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    sourcePort string
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenantId string
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    valueSpecs {[key: string]: any}
    Map of additional options.
    action str
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    description str
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destination_ip_address str
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destination_port str
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled bool
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ip_version int
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name str
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    protocol str
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    region str
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    source_ip_address str
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    source_port str
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenant_id str
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    value_specs Mapping[str, Any]
    Map of additional options.
    action String
    Action to be taken ( must be "allow" or "deny") when the firewall rule matches. Changing this updates the action of an existing firewall rule.
    description String
    A description for the firewall rule. Changing this updates the description of an existing firewall rule.
    destinationIpAddress String
    The destination IP address on which the firewall rule operates. Changing this updates the destination_ip_address of an existing firewall rule.
    destinationPort String
    The destination port on which the firewall rule operates. Changing this updates the destination_port of an existing firewall rule.
    enabled Boolean
    Enabled status for the firewall rule (must be "true" or "false" if provided - defaults to "true"). Changing this updates the enabled status of an existing firewall rule.
    ipVersion Number
    IP version, either 4 (default) or 6. Changing this updates the ip_version of an existing firewall rule.
    name String
    A unique name for the firewall rule. Changing this updates the name of an existing firewall rule.
    protocol String
    The protocol type on which the firewall rule operates. Valid values are: tcp, udp, icmp, and any. Changing this updates the protocol of an existing firewall rule.
    region String
    The region in which to obtain the v1 Compute client. A Compute client is needed to create a firewall rule. If omitted, the region argument of the provider is used. Changing this creates a new firewall rule.
    sourceIpAddress String
    The source IP address on which the firewall rule operates. Changing this updates the source_ip_address of an existing firewall rule.
    sourcePort String
    The source port on which the firewall rule operates. Changing this updates the source_port of an existing firewall rule.
    tenantId String
    The owner of the firewall rule. Required if admin wants to create a firewall rule for another tenant. Changing this creates a new firewall rule.
    valueSpecs Map<Any>
    Map of additional options.

    Import

    Firewall Rules can be imported using the id, e.g.

    $ pulumi import openstack:firewall/rule:Rule rule_1 8dbc0c28-e49c-463f-b712-5c5d1bbac327

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    OpenStack pulumi/pulumi-openstack
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the openstack Terraform Provider.
    openstack logo
    OpenStack v3.15.2 published on Friday, Mar 29, 2024 by Pulumi
    pulumi/pulumi-openstack