Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Sysdig Provider
  3. API Docs
  4. SecureVulnerabilityRuleBundle
sysdig 1.59.0 published on Tuesday, Jul 29, 2025 by sysdiglabs
sysdiglabs/terraform-provider-sysdig

sysdig.SecureVulnerabilityRuleBundle

Explore with Pulumi AI

sysdig logo
sysdig 1.59.0 published on Tuesday, Jul 29, 2025 by sysdiglabs
sysdiglabs/terraform-provider-sysdig

    Example Usage

    Example coming soon!

    Example coming soon!

    Example coming soon!

    Example coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sysdig.SecureVulnerabilityRuleBundle;
import com.pulumi.sysdig.SecureVulnerabilityRuleBundleArgs;
import com.pulumi.sysdig.inputs.SecureVulnerabilityRuleBundleRuleArgs;
import com.pulumi.sysdig.inputs.SecureVulnerabilityRuleBundleRuleImageLabelArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new SecureVulnerabilityRuleBundle("example", SecureVulnerabilityRuleBundleArgs.builder()
            .rules(            
                SecureVulnerabilityRuleBundleRuleArgs.builder()
                    .imageLabel(SecureVulnerabilityRuleBundleRuleImageLabelArgs.builder()
                        .labelMustExist("required-label")
                        .build())
                    .build(),
                SecureVulnerabilityRuleBundleRuleArgs.builder()
                    .imageLabel(SecureVulnerabilityRuleBundleRuleImageLabelArgs.builder()
                        .labelMustNotExist("forbidden-label")
                        .build())
                    .build(),
                SecureVulnerabilityRuleBundleRuleArgs.builder()
                    .imageLabel(SecureVulnerabilityRuleBundleRuleImageLabelArgs.builder()
                        .labelMustExistAndContainValue(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                        .build())
                    .build())
            .build());

    }
}

    resources:
  example:
    type: sysdig:SecureVulnerabilityRuleBundle
    properties:
      rules:
        - imageLabel:
            labelMustExist: required-label
        - imageLabel:
            labelMustNotExist: forbidden-label
        - imageLabel:
            labelMustExistAndContainValue:
              - requiredLabel: required-label
                requiredValue: required-value

    Create SecureVulnerabilityRuleBundle Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecureVulnerabilityRuleBundle(name: string, args: SecureVulnerabilityRuleBundleArgs, opts?: CustomResourceOptions);
    @overload
def SecureVulnerabilityRuleBundle(resource_name: str,
                                  args: SecureVulnerabilityRuleBundleArgs,
                                  opts: Optional[ResourceOptions] = None)

@overload
def SecureVulnerabilityRuleBundle(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  rules: Optional[Sequence[SecureVulnerabilityRuleBundleRuleArgs]] = None,
                                  description: Optional[str] = None,
                                  name: Optional[str] = None,
                                  secure_vulnerability_rule_bundle_id: Optional[str] = None,
                                  timeouts: Optional[SecureVulnerabilityRuleBundleTimeoutsArgs] = None)
    func NewSecureVulnerabilityRuleBundle(ctx *Context, name string, args SecureVulnerabilityRuleBundleArgs, opts ...ResourceOption) (*SecureVulnerabilityRuleBundle, error)
    public SecureVulnerabilityRuleBundle(string name, SecureVulnerabilityRuleBundleArgs args, CustomResourceOptions? opts = null)
    public SecureVulnerabilityRuleBundle(String name, SecureVulnerabilityRuleBundleArgs args)
public SecureVulnerabilityRuleBundle(String name, SecureVulnerabilityRuleBundleArgs args, CustomResourceOptions options)

    type: sysdig:SecureVulnerabilityRuleBundle
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args SecureVulnerabilityRuleBundleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecureVulnerabilityRuleBundleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecureVulnerabilityRuleBundleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecureVulnerabilityRuleBundleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecureVulnerabilityRuleBundleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var secureVulnerabilityRuleBundleResource = new Sysdig.SecureVulnerabilityRuleBundle("secureVulnerabilityRuleBundleResource", new()
{
    Rules = new[]
    {
        new Sysdig.Inputs.SecureVulnerabilityRuleBundleRuleArgs
        {
            ImageLabel = new Sysdig.Inputs.SecureVulnerabilityRuleBundleRuleImageLabelArgs
            {
                Id = "string",
                LabelMustExist = "string",
                LabelMustExistAndContainValues = new[]
                {
                    new Sysdig.Inputs.SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValueArgs
                    {
                        RequiredLabel = "string",
                        RequiredValue = "string",
                    },
                },
                LabelMustNotExist = "string",
            },
        },
    },
    Description = "string",
    Name = "string",
    SecureVulnerabilityRuleBundleId = "string",
    Timeouts = new Sysdig.Inputs.SecureVulnerabilityRuleBundleTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Read = "string",
        Update = "string",
    },
});

    example, err := sysdig.NewSecureVulnerabilityRuleBundle(ctx, "secureVulnerabilityRuleBundleResource", &sysdig.SecureVulnerabilityRuleBundleArgs{
	Rules: sysdig.SecureVulnerabilityRuleBundleRuleArray{
		&sysdig.SecureVulnerabilityRuleBundleRuleArgs{
			ImageLabel: &sysdig.SecureVulnerabilityRuleBundleRuleImageLabelArgs{
				Id:             pulumi.String("string"),
				LabelMustExist: pulumi.String("string"),
				LabelMustExistAndContainValues: sysdig.SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValueArray{
					&sysdig.SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValueArgs{
						RequiredLabel: pulumi.String("string"),
						RequiredValue: pulumi.String("string"),
					},
				},
				LabelMustNotExist: pulumi.String("string"),
			},
		},
	},
	Description:                     pulumi.String("string"),
	Name:                            pulumi.String("string"),
	SecureVulnerabilityRuleBundleId: pulumi.String("string"),
	Timeouts: &sysdig.SecureVulnerabilityRuleBundleTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Read:   pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

    var secureVulnerabilityRuleBundleResource = new SecureVulnerabilityRuleBundle("secureVulnerabilityRuleBundleResource", SecureVulnerabilityRuleBundleArgs.builder()
    .rules(SecureVulnerabilityRuleBundleRuleArgs.builder()
        .imageLabel(SecureVulnerabilityRuleBundleRuleImageLabelArgs.builder()
            .id("string")
            .labelMustExist("string")
            .labelMustExistAndContainValues(SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValueArgs.builder()
                .requiredLabel("string")
                .requiredValue("string")
                .build())
            .labelMustNotExist("string")
            .build())
        .build())
    .description("string")
    .name("string")
    .secureVulnerabilityRuleBundleId("string")
    .timeouts(SecureVulnerabilityRuleBundleTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .read("string")
        .update("string")
        .build())
    .build());

    secure_vulnerability_rule_bundle_resource = sysdig.SecureVulnerabilityRuleBundle("secureVulnerabilityRuleBundleResource",
    rules=[{
        "image_label": {
            "id": "string",
            "label_must_exist": "string",
            "label_must_exist_and_contain_values": [{
                "required_label": "string",
                "required_value": "string",
            }],
            "label_must_not_exist": "string",
        },
    }],
    description="string",
    name="string",
    secure_vulnerability_rule_bundle_id="string",
    timeouts={
        "create": "string",
        "delete": "string",
        "read": "string",
        "update": "string",
    })

    const secureVulnerabilityRuleBundleResource = new sysdig.SecureVulnerabilityRuleBundle("secureVulnerabilityRuleBundleResource", {
    rules: [{
        imageLabel: {
            id: "string",
            labelMustExist: "string",
            labelMustExistAndContainValues: [{
                requiredLabel: "string",
                requiredValue: "string",
            }],
            labelMustNotExist: "string",
        },
    }],
    description: "string",
    name: "string",
    secureVulnerabilityRuleBundleId: "string",
    timeouts: {
        create: "string",
        "delete": "string",
        read: "string",
        update: "string",
    },
});

    type: sysdig:SecureVulnerabilityRuleBundle
properties:
    description: string
    name: string
    rules:
        - imageLabel:
            id: string
            labelMustExist: string
            labelMustExistAndContainValues:
                - requiredLabel: string
                  requiredValue: string
            labelMustNotExist: string
    secureVulnerabilityRuleBundleId: string
    timeouts:
        create: string
        delete: string
        read: string
        update: string

    SecureVulnerabilityRuleBundle Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecureVulnerabilityRuleBundle resource accepts the following input properties:

    Rules List<SecureVulnerabilityRuleBundleRule>
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    Description string
    A description for the rule bundle.
    Name string
    The name of the vulnerability rule bundle.
    SecureVulnerabilityRuleBundleId string
    Timeouts SecureVulnerabilityRuleBundleTimeouts
    Rules []SecureVulnerabilityRuleBundleRuleArgs
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    Description string
    A description for the rule bundle.
    Name string
    The name of the vulnerability rule bundle.
    SecureVulnerabilityRuleBundleId string
    Timeouts SecureVulnerabilityRuleBundleTimeoutsArgs
    rules List<SecureVulnerabilityRuleBundleRule>
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    description String
    A description for the rule bundle.
    name String
    The name of the vulnerability rule bundle.
    secureVulnerabilityRuleBundleId String
    timeouts SecureVulnerabilityRuleBundleTimeouts
    rules SecureVulnerabilityRuleBundleRule[]
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    description string
    A description for the rule bundle.
    name string
    The name of the vulnerability rule bundle.
    secureVulnerabilityRuleBundleId string
    timeouts SecureVulnerabilityRuleBundleTimeouts
    rules Sequence[SecureVulnerabilityRuleBundleRuleArgs]
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    description str
    A description for the rule bundle.
    name str
    The name of the vulnerability rule bundle.
    secure_vulnerability_rule_bundle_id str
    timeouts SecureVulnerabilityRuleBundleTimeoutsArgs
    rules List<Property Map>
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    description String
    A description for the rule bundle.
    name String
    The name of the vulnerability rule bundle.
    secureVulnerabilityRuleBundleId String
    timeouts Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecureVulnerabilityRuleBundle resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Identifier string
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    Id string
    The provider-assigned unique ID for this managed resource.
    Identifier string
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    id String
    The provider-assigned unique ID for this managed resource.
    identifier String
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    id string
    The provider-assigned unique ID for this managed resource.
    identifier string
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    id str
    The provider-assigned unique ID for this managed resource.
    identifier str
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    id String
    The provider-assigned unique ID for this managed resource.
    identifier String
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.

    Look up Existing SecureVulnerabilityRuleBundle Resource

    Get an existing SecureVulnerabilityRuleBundle resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SecureVulnerabilityRuleBundleState, opts?: CustomResourceOptions): SecureVulnerabilityRuleBundle
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        description: Optional[str] = None,
        identifier: Optional[str] = None,
        name: Optional[str] = None,
        rules: Optional[Sequence[SecureVulnerabilityRuleBundleRuleArgs]] = None,
        secure_vulnerability_rule_bundle_id: Optional[str] = None,
        timeouts: Optional[SecureVulnerabilityRuleBundleTimeoutsArgs] = None) -> SecureVulnerabilityRuleBundle
    func GetSecureVulnerabilityRuleBundle(ctx *Context, name string, id IDInput, state *SecureVulnerabilityRuleBundleState, opts ...ResourceOption) (*SecureVulnerabilityRuleBundle, error)
    public static SecureVulnerabilityRuleBundle Get(string name, Input<string> id, SecureVulnerabilityRuleBundleState? state, CustomResourceOptions? opts = null)
    public static SecureVulnerabilityRuleBundle get(String name, Output<String> id, SecureVulnerabilityRuleBundleState state, CustomResourceOptions options)
    resources:  _:    type: sysdig:SecureVulnerabilityRuleBundle    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Description string
    A description for the rule bundle.
    Identifier string
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    Name string
    The name of the vulnerability rule bundle.
    Rules List<SecureVulnerabilityRuleBundleRule>
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    SecureVulnerabilityRuleBundleId string
    Timeouts SecureVulnerabilityRuleBundleTimeouts
    Description string
    A description for the rule bundle.
    Identifier string
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    Name string
    The name of the vulnerability rule bundle.
    Rules []SecureVulnerabilityRuleBundleRuleArgs
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    SecureVulnerabilityRuleBundleId string
    Timeouts SecureVulnerabilityRuleBundleTimeoutsArgs
    description String
    A description for the rule bundle.
    identifier String
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    name String
    The name of the vulnerability rule bundle.
    rules List<SecureVulnerabilityRuleBundleRule>
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    secureVulnerabilityRuleBundleId String
    timeouts SecureVulnerabilityRuleBundleTimeouts
    description string
    A description for the rule bundle.
    identifier string
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    name string
    The name of the vulnerability rule bundle.
    rules SecureVulnerabilityRuleBundleRule[]
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    secureVulnerabilityRuleBundleId string
    timeouts SecureVulnerabilityRuleBundleTimeouts
    description str
    A description for the rule bundle.
    identifier str
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    name str
    The name of the vulnerability rule bundle.
    rules Sequence[SecureVulnerabilityRuleBundleRuleArgs]
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    secure_vulnerability_rule_bundle_id str
    timeouts SecureVulnerabilityRuleBundleTimeoutsArgs
    description String
    A description for the rule bundle.
    identifier String
    External identifier computed after creation. Not to be used with the secure_vulnerability_policy.bundles field, use id for that.
    name String
    The name of the vulnerability rule bundle.
    rules List<Property Map>
    List of rule definitions. Each rule supports multiple types (e.g., image_label). Each type may have different required attributes:
    secureVulnerabilityRuleBundleId String
    timeouts Property Map

    Supporting Types

    SecureVulnerabilityRuleBundleRule, SecureVulnerabilityRuleBundleRuleArgs

    ImageLabel SecureVulnerabilityRuleBundleRuleImageLabel
    Defines label-based matching rules for image configuration.
    ImageLabel SecureVulnerabilityRuleBundleRuleImageLabel
    Defines label-based matching rules for image configuration.
    imageLabel SecureVulnerabilityRuleBundleRuleImageLabel
    Defines label-based matching rules for image configuration.
    imageLabel SecureVulnerabilityRuleBundleRuleImageLabel
    Defines label-based matching rules for image configuration.
    image_label SecureVulnerabilityRuleBundleRuleImageLabel
    Defines label-based matching rules for image configuration.
    imageLabel Property Map
    Defines label-based matching rules for image configuration.

    SecureVulnerabilityRuleBundleRuleImageLabel, SecureVulnerabilityRuleBundleRuleImageLabelArgs

    Id string
    Internal identifier for the label rule block.
    LabelMustExist string
    Label key that must exist in the image configuration.
    LabelMustExistAndContainValues List<SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValue>
    List of required label-value pairs, each containing:
    LabelMustNotExist string
    Label key that must not exist in the image configuration.
    Id string
    Internal identifier for the label rule block.
    LabelMustExist string
    Label key that must exist in the image configuration.
    LabelMustExistAndContainValues []SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValue
    List of required label-value pairs, each containing:
    LabelMustNotExist string
    Label key that must not exist in the image configuration.
    id String
    Internal identifier for the label rule block.
    labelMustExist String
    Label key that must exist in the image configuration.
    labelMustExistAndContainValues List<SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValue>
    List of required label-value pairs, each containing:
    labelMustNotExist String
    Label key that must not exist in the image configuration.
    id string
    Internal identifier for the label rule block.
    labelMustExist string
    Label key that must exist in the image configuration.
    labelMustExistAndContainValues SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValue[]
    List of required label-value pairs, each containing:
    labelMustNotExist string
    Label key that must not exist in the image configuration.
    id str
    Internal identifier for the label rule block.
    label_must_exist str
    Label key that must exist in the image configuration.
    label_must_exist_and_contain_values Sequence[SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValue]
    List of required label-value pairs, each containing:
    label_must_not_exist str
    Label key that must not exist in the image configuration.
    id String
    Internal identifier for the label rule block.
    labelMustExist String
    Label key that must exist in the image configuration.
    labelMustExistAndContainValues List<Property Map>
    List of required label-value pairs, each containing:
    labelMustNotExist String
    Label key that must not exist in the image configuration.

    SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValue, SecureVulnerabilityRuleBundleRuleImageLabelLabelMustExistAndContainValueArgs

    RequiredLabel string
    Label key required in the image configuration.
    RequiredValue string
    Value that the label must contain.
    RequiredLabel string
    Label key required in the image configuration.
    RequiredValue string
    Value that the label must contain.
    requiredLabel String
    Label key required in the image configuration.
    requiredValue String
    Value that the label must contain.
    requiredLabel string
    Label key required in the image configuration.
    requiredValue string
    Value that the label must contain.
    required_label str
    Label key required in the image configuration.
    required_value str
    Value that the label must contain.
    requiredLabel String
    Label key required in the image configuration.
    requiredValue String
    Value that the label must contain.

    SecureVulnerabilityRuleBundleTimeouts, SecureVulnerabilityRuleBundleTimeoutsArgs

    Create string
    Delete string
    Read string
    Update string
    Create string
    Delete string
    Read string
    Update string
    create String
    delete String
    read String
    update String
    create string
    delete string
    read string
    update string
    create str
    delete str
    read str
    update str
    create String
    delete String
    read String
    update String

    Import

    Vulnerability rule bundles can be imported using their bundle ID, for example:

    $ pulumi import sysdig:index/secureVulnerabilityRuleBundle:SecureVulnerabilityRuleBundle example bundle_123456

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    sysdig sysdiglabs/terraform-provider-sysdig
    License
    Notes
    This Pulumi package is based on the sysdig Terraform Provider.
    sysdig logo
    sysdig 1.59.0 published on Tuesday, Jul 29, 2025 by sysdiglabs
    sysdiglabs/terraform-provider-sysdig