Docs Packages
  1. Pulumi Registry
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. ServiceMesh
  5. AccessPolicy
oci logo
Oracle Cloud Infrastructure v0.20.0, May 31 23

oci.ServiceMesh.AccessPolicy

Explore with Pulumi AI

This resource provides the Access Policy resource in Oracle Cloud Infrastructure Service Mesh service.

Creates a new AccessPolicy.

Example Usage

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testAccessPolicy = new Oci.ServiceMesh.AccessPolicy("testAccessPolicy", new()
    {
        CompartmentId = @var.Compartment_id,
        MeshId = oci_service_mesh_mesh.Test_mesh.Id,
        Rules = new[]
        {
            new Oci.ServiceMesh.Inputs.AccessPolicyRuleArgs
            {
                Action = @var.Access_policy_rules_action,
                Destination = new Oci.ServiceMesh.Inputs.AccessPolicyRuleDestinationArgs
                {
                    Type = @var.Access_policy_rules_destination_type,
                    Hostnames = @var.Access_policy_rules_destination_hostnames,
                    IngressGatewayId = oci_service_mesh_ingress_gateway.Test_ingress_gateway.Id,
                    IpAddresses = @var.Access_policy_rules_destination_ip_addresses,
                    Ports = @var.Access_policy_rules_destination_ports,
                    Protocol = @var.Access_policy_rules_destination_protocol,
                    VirtualServiceId = oci_service_mesh_virtual_service.Test_virtual_service.Id,
                },
                Source = new Oci.ServiceMesh.Inputs.AccessPolicyRuleSourceArgs
                {
                    Type = @var.Access_policy_rules_source_type,
                    Hostnames = @var.Access_policy_rules_source_hostnames,
                    IngressGatewayId = oci_service_mesh_ingress_gateway.Test_ingress_gateway.Id,
                    IpAddresses = @var.Access_policy_rules_source_ip_addresses,
                    Ports = @var.Access_policy_rules_source_ports,
                    Protocol = @var.Access_policy_rules_source_protocol,
                    VirtualServiceId = oci_service_mesh_virtual_service.Test_virtual_service.Id,
                },
            },
        },
        DefinedTags = 
        {
            { "foo-namespace.bar-key", "value" },
        },
        Description = @var.Access_policy_description,
        FreeformTags = 
        {
            { "bar-key", "value" },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-oci/sdk/go/oci/ServiceMesh"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ServiceMesh.NewAccessPolicy(ctx, "testAccessPolicy", &ServiceMesh.AccessPolicyArgs{
			CompartmentId: pulumi.Any(_var.Compartment_id),
			MeshId:        pulumi.Any(oci_service_mesh_mesh.Test_mesh.Id),
			Rules: servicemesh.AccessPolicyRuleArray{
				&servicemesh.AccessPolicyRuleArgs{
					Action: pulumi.Any(_var.Access_policy_rules_action),
					Destination: &servicemesh.AccessPolicyRuleDestinationArgs{
						Type:             pulumi.Any(_var.Access_policy_rules_destination_type),
						Hostnames:        pulumi.Any(_var.Access_policy_rules_destination_hostnames),
						IngressGatewayId: pulumi.Any(oci_service_mesh_ingress_gateway.Test_ingress_gateway.Id),
						IpAddresses:      pulumi.Any(_var.Access_policy_rules_destination_ip_addresses),
						Ports:            pulumi.Any(_var.Access_policy_rules_destination_ports),
						Protocol:         pulumi.Any(_var.Access_policy_rules_destination_protocol),
						VirtualServiceId: pulumi.Any(oci_service_mesh_virtual_service.Test_virtual_service.Id),
					},
					Source: &servicemesh.AccessPolicyRuleSourceArgs{
						Type:             pulumi.Any(_var.Access_policy_rules_source_type),
						Hostnames:        pulumi.Any(_var.Access_policy_rules_source_hostnames),
						IngressGatewayId: pulumi.Any(oci_service_mesh_ingress_gateway.Test_ingress_gateway.Id),
						IpAddresses:      pulumi.Any(_var.Access_policy_rules_source_ip_addresses),
						Ports:            pulumi.Any(_var.Access_policy_rules_source_ports),
						Protocol:         pulumi.Any(_var.Access_policy_rules_source_protocol),
						VirtualServiceId: pulumi.Any(oci_service_mesh_virtual_service.Test_virtual_service.Id),
					},
				},
			},
			DefinedTags: pulumi.AnyMap{
				"foo-namespace.bar-key": pulumi.Any("value"),
			},
			Description: pulumi.Any(_var.Access_policy_description),
			FreeformTags: pulumi.AnyMap{
				"bar-key": pulumi.Any("value"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.ServiceMesh.AccessPolicy;
import com.pulumi.oci.ServiceMesh.AccessPolicyArgs;
import com.pulumi.oci.ServiceMesh.inputs.AccessPolicyRuleArgs;
import com.pulumi.oci.ServiceMesh.inputs.AccessPolicyRuleDestinationArgs;
import com.pulumi.oci.ServiceMesh.inputs.AccessPolicyRuleSourceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testAccessPolicy = new AccessPolicy("testAccessPolicy", AccessPolicyArgs.builder()        
            .compartmentId(var_.compartment_id())
            .meshId(oci_service_mesh_mesh.test_mesh().id())
            .rules(AccessPolicyRuleArgs.builder()
                .action(var_.access_policy_rules_action())
                .destination(AccessPolicyRuleDestinationArgs.builder()
                    .type(var_.access_policy_rules_destination_type())
                    .hostnames(var_.access_policy_rules_destination_hostnames())
                    .ingressGatewayId(oci_service_mesh_ingress_gateway.test_ingress_gateway().id())
                    .ipAddresses(var_.access_policy_rules_destination_ip_addresses())
                    .ports(var_.access_policy_rules_destination_ports())
                    .protocol(var_.access_policy_rules_destination_protocol())
                    .virtualServiceId(oci_service_mesh_virtual_service.test_virtual_service().id())
                    .build())
                .source(AccessPolicyRuleSourceArgs.builder()
                    .type(var_.access_policy_rules_source_type())
                    .hostnames(var_.access_policy_rules_source_hostnames())
                    .ingressGatewayId(oci_service_mesh_ingress_gateway.test_ingress_gateway().id())
                    .ipAddresses(var_.access_policy_rules_source_ip_addresses())
                    .ports(var_.access_policy_rules_source_ports())
                    .protocol(var_.access_policy_rules_source_protocol())
                    .virtualServiceId(oci_service_mesh_virtual_service.test_virtual_service().id())
                    .build())
                .build())
            .definedTags(Map.of("foo-namespace.bar-key", "value"))
            .description(var_.access_policy_description())
            .freeformTags(Map.of("bar-key", "value"))
            .build());

    }
}

import pulumi
import pulumi_oci as oci

test_access_policy = oci.service_mesh.AccessPolicy("testAccessPolicy",
    compartment_id=var["compartment_id"],
    mesh_id=oci_service_mesh_mesh["test_mesh"]["id"],
    rules=[oci.service_mesh.AccessPolicyRuleArgs(
        action=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
        destination=oci.service_mesh.AccessPolicyRuleDestinationArgs(
            type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            hostnames=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            ingress_gateway_id=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            ip_addresses=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            ports=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            protocol=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            virtual_service_id=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
        ),
        source=oci.service_mesh.AccessPolicyRuleSourceArgs(
            type=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            hostnames=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            ingress_gateway_id=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            ip_addresses=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            ports=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            protocol=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
            virtual_service_id=%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference),
        ),
    )],
    defined_tags={
        "foo-namespace.bar-key": "value",
    },
    description=var["access_policy_description"],
    freeform_tags={
        "bar-key": "value",
    })

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testAccessPolicy = new oci.servicemesh.AccessPolicy("testAccessPolicy", {
    compartmentId: _var.compartment_id,
    meshId: oci_service_mesh_mesh.test_mesh.id,
    rules: [{
        action: _var.access_policy_rules_action,
        destination: {
            type: _var.access_policy_rules_destination_type,
            hostnames: _var.access_policy_rules_destination_hostnames,
            ingressGatewayId: oci_service_mesh_ingress_gateway.test_ingress_gateway.id,
            ipAddresses: _var.access_policy_rules_destination_ip_addresses,
            ports: _var.access_policy_rules_destination_ports,
            protocol: _var.access_policy_rules_destination_protocol,
            virtualServiceId: oci_service_mesh_virtual_service.test_virtual_service.id,
        },
        source: {
            type: _var.access_policy_rules_source_type,
            hostnames: _var.access_policy_rules_source_hostnames,
            ingressGatewayId: oci_service_mesh_ingress_gateway.test_ingress_gateway.id,
            ipAddresses: _var.access_policy_rules_source_ip_addresses,
            ports: _var.access_policy_rules_source_ports,
            protocol: _var.access_policy_rules_source_protocol,
            virtualServiceId: oci_service_mesh_virtual_service.test_virtual_service.id,
        },
    }],
    definedTags: {
        "foo-namespace.bar-key": "value",
    },
    description: _var.access_policy_description,
    freeformTags: {
        "bar-key": "value",
    },
});

resources:
  testAccessPolicy:
    type: oci:ServiceMesh:AccessPolicy
    properties:
      #Required
      compartmentId: ${var.compartment_id}
      meshId: ${oci_service_mesh_mesh.test_mesh.id}
      rules:
        - action: ${var.access_policy_rules_action}
          destination:
            type: ${var.access_policy_rules_destination_type}
            hostnames: ${var.access_policy_rules_destination_hostnames}
            ingressGatewayId: ${oci_service_mesh_ingress_gateway.test_ingress_gateway.id}
            ipAddresses: ${var.access_policy_rules_destination_ip_addresses}
            ports: ${var.access_policy_rules_destination_ports}
            protocol: ${var.access_policy_rules_destination_protocol}
            virtualServiceId: ${oci_service_mesh_virtual_service.test_virtual_service.id}
          source:
            type: ${var.access_policy_rules_source_type}
            hostnames: ${var.access_policy_rules_source_hostnames}
            ingressGatewayId: ${oci_service_mesh_ingress_gateway.test_ingress_gateway.id}
            ipAddresses: ${var.access_policy_rules_source_ip_addresses}
            ports: ${var.access_policy_rules_source_ports}
            protocol: ${var.access_policy_rules_source_protocol}
            virtualServiceId: ${oci_service_mesh_virtual_service.test_virtual_service.id}
      #Optional
      definedTags:
        foo-namespace.bar-key: value
      description: ${var.access_policy_description}
      freeformTags:
        bar-key: value

Create AccessPolicy Resource

new AccessPolicy(name: string, args: AccessPolicyArgs, opts?: CustomResourceOptions);
@overload
def AccessPolicy(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 compartment_id: Optional[str] = None,
                 defined_tags: Optional[Mapping[str, Any]] = None,
                 description: Optional[str] = None,
                 freeform_tags: Optional[Mapping[str, Any]] = None,
                 mesh_id: Optional[str] = None,
                 name: Optional[str] = None,
                 rules: Optional[Sequence[_servicemesh.AccessPolicyRuleArgs]] = None)
@overload
def AccessPolicy(resource_name: str,
                 args: AccessPolicyArgs,
                 opts: Optional[ResourceOptions] = None)
func NewAccessPolicy(ctx *Context, name string, args AccessPolicyArgs, opts ...ResourceOption) (*AccessPolicy, error)
public AccessPolicy(string name, AccessPolicyArgs args, CustomResourceOptions? opts = null)
public AccessPolicy(String name, AccessPolicyArgs args)
public AccessPolicy(String name, AccessPolicyArgs args, CustomResourceOptions options)

type: oci:ServiceMesh:AccessPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args AccessPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args AccessPolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args AccessPolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args AccessPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args AccessPolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

AccessPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The AccessPolicy resource accepts the following input properties:

CompartmentId string

(Updatable) The OCID of the compartment.

MeshId string

The OCID of the service mesh in which this access policy is created.

Rules List<AccessPolicyRuleArgs>

(Updatable) List of applicable rules

DefinedTags Dictionary<string, object>

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

Description string

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

FreeformTags Dictionary<string, object>

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

Name string

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

CompartmentId string

(Updatable) The OCID of the compartment.

MeshId string

The OCID of the service mesh in which this access policy is created.

Rules []AccessPolicyRuleArgs

(Updatable) List of applicable rules

DefinedTags map[string]interface{}

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

Description string

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

FreeformTags map[string]interface{}

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

Name string

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

compartmentId String

(Updatable) The OCID of the compartment.

meshId String

The OCID of the service mesh in which this access policy is created.

rules List<AccessPolicyRuleArgs>

(Updatable) List of applicable rules

definedTags Map<String,Object>

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description String

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeformTags Map<String,Object>

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

name String

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

compartmentId string

(Updatable) The OCID of the compartment.

meshId string

The OCID of the service mesh in which this access policy is created.

rules AccessPolicyRuleArgs[]

(Updatable) List of applicable rules

definedTags {[key: string]: any}

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description string

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeformTags {[key: string]: any}

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

name string

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

compartment_id str

(Updatable) The OCID of the compartment.

mesh_id str

The OCID of the service mesh in which this access policy is created.

rules AccessPolicyRuleArgs]

(Updatable) List of applicable rules

defined_tags Mapping[str, Any]

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description str

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeform_tags Mapping[str, Any]

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

name str

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

compartmentId String

(Updatable) The OCID of the compartment.

meshId String

The OCID of the service mesh in which this access policy is created.

rules List<Property Map>

(Updatable) List of applicable rules

definedTags Map<Any>

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description String

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeformTags Map<Any>

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

name String

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

Outputs

All input properties are implicitly available as output properties. Additionally, the AccessPolicy resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

LifecycleDetails string

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

State string

The current state of the Resource.

SystemTags Dictionary<string, object>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

TimeCreated string

The time when this resource was created in an RFC3339 formatted datetime string.

TimeUpdated string

The time when this resource was updated in an RFC3339 formatted datetime string.

Id string

The provider-assigned unique ID for this managed resource.

LifecycleDetails string

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

State string

The current state of the Resource.

SystemTags map[string]interface{}

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

TimeCreated string

The time when this resource was created in an RFC3339 formatted datetime string.

TimeUpdated string

The time when this resource was updated in an RFC3339 formatted datetime string.

id String

The provider-assigned unique ID for this managed resource.

lifecycleDetails String

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

state String

The current state of the Resource.

systemTags Map<String,Object>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated String

The time when this resource was created in an RFC3339 formatted datetime string.

timeUpdated String

The time when this resource was updated in an RFC3339 formatted datetime string.

id string

The provider-assigned unique ID for this managed resource.

lifecycleDetails string

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

state string

The current state of the Resource.

systemTags {[key: string]: any}

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated string

The time when this resource was created in an RFC3339 formatted datetime string.

timeUpdated string

The time when this resource was updated in an RFC3339 formatted datetime string.

id str

The provider-assigned unique ID for this managed resource.

lifecycle_details str

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

state str

The current state of the Resource.

system_tags Mapping[str, Any]

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

time_created str

The time when this resource was created in an RFC3339 formatted datetime string.

time_updated str

The time when this resource was updated in an RFC3339 formatted datetime string.

id String

The provider-assigned unique ID for this managed resource.

lifecycleDetails String

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

state String

The current state of the Resource.

systemTags Map<Any>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated String

The time when this resource was created in an RFC3339 formatted datetime string.

timeUpdated String

The time when this resource was updated in an RFC3339 formatted datetime string.

Look up Existing AccessPolicy Resource

Get an existing AccessPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AccessPolicyState, opts?: CustomResourceOptions): AccessPolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        compartment_id: Optional[str] = None,
        defined_tags: Optional[Mapping[str, Any]] = None,
        description: Optional[str] = None,
        freeform_tags: Optional[Mapping[str, Any]] = None,
        lifecycle_details: Optional[str] = None,
        mesh_id: Optional[str] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[_servicemesh.AccessPolicyRuleArgs]] = None,
        state: Optional[str] = None,
        system_tags: Optional[Mapping[str, Any]] = None,
        time_created: Optional[str] = None,
        time_updated: Optional[str] = None) -> AccessPolicy
func GetAccessPolicy(ctx *Context, name string, id IDInput, state *AccessPolicyState, opts ...ResourceOption) (*AccessPolicy, error)
public static AccessPolicy Get(string name, Input<string> id, AccessPolicyState? state, CustomResourceOptions? opts = null)
public static AccessPolicy get(String name, Output<String> id, AccessPolicyState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
CompartmentId string

(Updatable) The OCID of the compartment.

DefinedTags Dictionary<string, object>

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

Description string

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

FreeformTags Dictionary<string, object>

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

LifecycleDetails string

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

MeshId string

The OCID of the service mesh in which this access policy is created.

Name string

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

Rules List<AccessPolicyRuleArgs>

(Updatable) List of applicable rules

State string

The current state of the Resource.

SystemTags Dictionary<string, object>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

TimeCreated string

The time when this resource was created in an RFC3339 formatted datetime string.

TimeUpdated string

The time when this resource was updated in an RFC3339 formatted datetime string.

CompartmentId string

(Updatable) The OCID of the compartment.

DefinedTags map[string]interface{}

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

Description string

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

FreeformTags map[string]interface{}

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

LifecycleDetails string

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

MeshId string

The OCID of the service mesh in which this access policy is created.

Name string

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

Rules []AccessPolicyRuleArgs

(Updatable) List of applicable rules

State string

The current state of the Resource.

SystemTags map[string]interface{}

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

TimeCreated string

The time when this resource was created in an RFC3339 formatted datetime string.

TimeUpdated string

The time when this resource was updated in an RFC3339 formatted datetime string.

compartmentId String

(Updatable) The OCID of the compartment.

definedTags Map<String,Object>

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description String

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeformTags Map<String,Object>

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

lifecycleDetails String

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

meshId String

The OCID of the service mesh in which this access policy is created.

name String

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

rules List<AccessPolicyRuleArgs>

(Updatable) List of applicable rules

state String

The current state of the Resource.

systemTags Map<String,Object>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated String

The time when this resource was created in an RFC3339 formatted datetime string.

timeUpdated String

The time when this resource was updated in an RFC3339 formatted datetime string.

compartmentId string

(Updatable) The OCID of the compartment.

definedTags {[key: string]: any}

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description string

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeformTags {[key: string]: any}

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

lifecycleDetails string

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

meshId string

The OCID of the service mesh in which this access policy is created.

name string

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

rules AccessPolicyRuleArgs[]

(Updatable) List of applicable rules

state string

The current state of the Resource.

systemTags {[key: string]: any}

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated string

The time when this resource was created in an RFC3339 formatted datetime string.

timeUpdated string

The time when this resource was updated in an RFC3339 formatted datetime string.

compartment_id str

(Updatable) The OCID of the compartment.

defined_tags Mapping[str, Any]

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description str

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeform_tags Mapping[str, Any]

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

lifecycle_details str

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

mesh_id str

The OCID of the service mesh in which this access policy is created.

name str

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

rules AccessPolicyRuleArgs]

(Updatable) List of applicable rules

state str

The current state of the Resource.

system_tags Mapping[str, Any]

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

time_created str

The time when this resource was created in an RFC3339 formatted datetime string.

time_updated str

The time when this resource was updated in an RFC3339 formatted datetime string.

compartmentId String

(Updatable) The OCID of the compartment.

definedTags Map<Any>

(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. Example: {"foo-namespace.bar-key": "value"}

description String

(Updatable) Description of the resource. It can be changed after creation. Avoid entering confidential information. Example: This is my new resource

freeformTags Map<Any>

(Updatable) Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only. Example: {"bar-key": "value"}

lifecycleDetails String

A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in a Failed state.

meshId String

The OCID of the service mesh in which this access policy is created.

name String

A user-friendly name. The name has to be unique within the same service mesh and cannot be changed after creation. Avoid entering confidential information. Example: My unique resource name

rules List<Property Map>

(Updatable) List of applicable rules

state String

The current state of the Resource.

systemTags Map<Any>

Usage of system tag keys. These predefined keys are scoped to namespaces. Example: {"orcl-cloud.free-tier-retained": "true"}

timeCreated String

The time when this resource was created in an RFC3339 formatted datetime string.

timeUpdated String

The time when this resource was updated in an RFC3339 formatted datetime string.

Supporting Types

AccessPolicyRule

Action string

(Updatable) Action for the traffic between the source and the destination.

Destination AccessPolicyRuleDestination

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

Source AccessPolicyRuleSource

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

Action string

(Updatable) Action for the traffic between the source and the destination.

Destination AccessPolicyRuleDestination

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

Source AccessPolicyRuleSource

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

action String

(Updatable) Action for the traffic between the source and the destination.

destination AccessPolicyRuleDestination

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

source AccessPolicyRuleSource

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

action string

(Updatable) Action for the traffic between the source and the destination.

destination AccessPolicyRuleDestination

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

source AccessPolicyRuleSource

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

action str

(Updatable) Action for the traffic between the source and the destination.

destination AccessPolicyRuleDestination

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

source AccessPolicyRuleSource

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

action String

(Updatable) Action for the traffic between the source and the destination.

destination Property Map

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

source Property Map

(Updatable) Target of the access policy. This can either be the source or the destination of the traffic.

AccessPolicyRuleDestination

Type string

(Updatable) Traffic type of the target.

Hostnames List<string>

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

IngressGatewayId string

(Updatable) The OCID of the ingress gateway resource.

IpAddresses List<string>

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

Ports List<int>

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

Protocol string

(Updatable) Protocol of the external service

VirtualServiceId string

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Type string

(Updatable) Traffic type of the target.

Hostnames []string

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

IngressGatewayId string

(Updatable) The OCID of the ingress gateway resource.

IpAddresses []string

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

Ports []int

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

Protocol string

(Updatable) Protocol of the external service

VirtualServiceId string

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type String

(Updatable) Traffic type of the target.

hostnames List<String>

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingressGatewayId String

(Updatable) The OCID of the ingress gateway resource.

ipAddresses List<String>

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports List<Integer>

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol String

(Updatable) Protocol of the external service

virtualServiceId String

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type string

(Updatable) Traffic type of the target.

hostnames string[]

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingressGatewayId string

(Updatable) The OCID of the ingress gateway resource.

ipAddresses string[]

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports number[]

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol string

(Updatable) Protocol of the external service

virtualServiceId string

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type str

(Updatable) Traffic type of the target.

hostnames Sequence[str]

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingress_gateway_id str

(Updatable) The OCID of the ingress gateway resource.

ip_addresses Sequence[str]

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports Sequence[int]

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol str

(Updatable) Protocol of the external service

virtual_service_id str

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type String

(Updatable) Traffic type of the target.

hostnames List<String>

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingressGatewayId String

(Updatable) The OCID of the ingress gateway resource.

ipAddresses List<String>

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports List<Number>

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol String

(Updatable) Protocol of the external service

virtualServiceId String

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

AccessPolicyRuleSource

Type string

(Updatable) Traffic type of the target.

Hostnames List<string>

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

IngressGatewayId string

(Updatable) The OCID of the ingress gateway resource.

IpAddresses List<string>

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

Ports List<int>

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

Protocol string

(Updatable) Protocol of the external service

VirtualServiceId string

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Type string

(Updatable) Traffic type of the target.

Hostnames []string

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

IngressGatewayId string

(Updatable) The OCID of the ingress gateway resource.

IpAddresses []string

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

Ports []int

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

Protocol string

(Updatable) Protocol of the external service

VirtualServiceId string

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type String

(Updatable) Traffic type of the target.

hostnames List<String>

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingressGatewayId String

(Updatable) The OCID of the ingress gateway resource.

ipAddresses List<String>

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports List<Integer>

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol String

(Updatable) Protocol of the external service

virtualServiceId String

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type string

(Updatable) Traffic type of the target.

hostnames string[]

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingressGatewayId string

(Updatable) The OCID of the ingress gateway resource.

ipAddresses string[]

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports number[]

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol string

(Updatable) Protocol of the external service

virtualServiceId string

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type str

(Updatable) Traffic type of the target.

hostnames Sequence[str]

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingress_gateway_id str

(Updatable) The OCID of the ingress gateway resource.

ip_addresses Sequence[str]

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports Sequence[int]

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol str

(Updatable) Protocol of the external service

virtual_service_id str

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

type String

(Updatable) Traffic type of the target.

hostnames List<String>

(Updatable) The hostnames of the external service. Only applicable for HTTP and HTTPS protocols. Wildcard hostnames are supported in the prefix form. Examples of valid hostnames are "www.example.com", ".example.com", ".com", "". Hostname "" can be used to allow all hosts.

ingressGatewayId String

(Updatable) The OCID of the ingress gateway resource.

ipAddresses List<String>

(Updatable) The ipAddresses of the external service in CIDR notation. Only applicable for TCP protocol. All requests matching the given CIDR notation will pass through. In case a wildcard CIDR "0.0.0.0/0" is provided, the same port cannot be used for a virtual service communication.

ports List<Number>

(Updatable) Ports exposed by an external service. If left empty all ports will be allowed.

protocol String

(Updatable) Protocol of the external service

virtualServiceId String

(Updatable) The OCID of the virtual service resource.

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Import

AccessPolicies can be imported using the id, e.g.

 $ pulumi import oci:ServiceMesh/accessPolicy:AccessPolicy test_access_policy "id"

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes

This Pulumi package is based on the oci Terraform Provider.