Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Vkcs Provider
  3. API Docs
  4. VpnaasIpsecPolicy
vkcs 0.9.3 published on Tuesday, Apr 15, 2025 by vk-cs
vk-cs/terraform-provider-vkcs

vkcs.VpnaasIpsecPolicy

Explore with Pulumi AI

vkcs logo
vkcs 0.9.3 published on Tuesday, Apr 15, 2025 by vk-cs
vk-cs/terraform-provider-vkcs

    Manages a IPSec policy resource within VKCS.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as vkcs from "@pulumi/vkcs";

const dataCenter = new vkcs.VpnaasIpsecPolicy("dataCenter", {
    description: "Policy that restricts remote working users to connect to our data ceneter over VPN",
    lifetimes: [{
        units: "seconds",
        value: 3600,
    }],
});

    import pulumi
import pulumi_vkcs as vkcs

data_center = vkcs.VpnaasIpsecPolicy("dataCenter",
    description="Policy that restricts remote working users to connect to our data ceneter over VPN",
    lifetimes=[{
        "units": "seconds",
        "value": 3600,
    }])

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/vkcs/vkcs"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := vkcs.NewVpnaasIpsecPolicy(ctx, "dataCenter", &vkcs.VpnaasIpsecPolicyArgs{
			Description: pulumi.String("Policy that restricts remote working users to connect to our data ceneter over VPN"),
			Lifetimes: vkcs.VpnaasIpsecPolicyLifetimeArray{
				&vkcs.VpnaasIpsecPolicyLifetimeArgs{
					Units: pulumi.String("seconds"),
					Value: pulumi.Float64(3600),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vkcs = Pulumi.Vkcs;

return await Deployment.RunAsync(() => 
{
    var dataCenter = new Vkcs.VpnaasIpsecPolicy("dataCenter", new()
    {
        Description = "Policy that restricts remote working users to connect to our data ceneter over VPN",
        Lifetimes = new[]
        {
            new Vkcs.Inputs.VpnaasIpsecPolicyLifetimeArgs
            {
                Units = "seconds",
                Value = 3600,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vkcs.VpnaasIpsecPolicy;
import com.pulumi.vkcs.VpnaasIpsecPolicyArgs;
import com.pulumi.vkcs.inputs.VpnaasIpsecPolicyLifetimeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var dataCenter = new VpnaasIpsecPolicy("dataCenter", VpnaasIpsecPolicyArgs.builder()
            .description("Policy that restricts remote working users to connect to our data ceneter over VPN")
            .lifetimes(VpnaasIpsecPolicyLifetimeArgs.builder()
                .units("seconds")
                .value(3600)
                .build())
            .build());

    }
}

    resources:
  dataCenter:
    type: vkcs:VpnaasIpsecPolicy
    properties:
      description: Policy that restricts remote working users to connect to our data ceneter over VPN
      lifetimes:
        - units: seconds
          value: 3600

    Create VpnaasIpsecPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new VpnaasIpsecPolicy(name: string, args?: VpnaasIpsecPolicyArgs, opts?: CustomResourceOptions);
    @overload
def VpnaasIpsecPolicy(resource_name: str,
                      args: Optional[VpnaasIpsecPolicyArgs] = None,
                      opts: Optional[ResourceOptions] = None)

@overload
def VpnaasIpsecPolicy(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      auth_algorithm: Optional[str] = None,
                      description: Optional[str] = None,
                      encapsulation_mode: Optional[str] = None,
                      encryption_algorithm: Optional[str] = None,
                      lifetimes: Optional[Sequence[VpnaasIpsecPolicyLifetimeArgs]] = None,
                      name: Optional[str] = None,
                      pfs: Optional[str] = None,
                      region: Optional[str] = None,
                      sdn: Optional[str] = None,
                      timeouts: Optional[VpnaasIpsecPolicyTimeoutsArgs] = None,
                      transform_protocol: Optional[str] = None,
                      vpnaas_ipsec_policy_id: Optional[str] = None)
    func NewVpnaasIpsecPolicy(ctx *Context, name string, args *VpnaasIpsecPolicyArgs, opts ...ResourceOption) (*VpnaasIpsecPolicy, error)
    public VpnaasIpsecPolicy(string name, VpnaasIpsecPolicyArgs? args = null, CustomResourceOptions? opts = null)
    public VpnaasIpsecPolicy(String name, VpnaasIpsecPolicyArgs args)
public VpnaasIpsecPolicy(String name, VpnaasIpsecPolicyArgs args, CustomResourceOptions options)

    type: vkcs:VpnaasIpsecPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args VpnaasIpsecPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args VpnaasIpsecPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args VpnaasIpsecPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args VpnaasIpsecPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args VpnaasIpsecPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var vpnaasIpsecPolicyResource = new Vkcs.VpnaasIpsecPolicy("vpnaasIpsecPolicyResource", new()
{
    AuthAlgorithm = "string",
    Description = "string",
    EncapsulationMode = "string",
    EncryptionAlgorithm = "string",
    Lifetimes = new[]
    {
        new Vkcs.Inputs.VpnaasIpsecPolicyLifetimeArgs
        {
            Units = "string",
            Value = 0,
        },
    },
    Name = "string",
    Pfs = "string",
    Region = "string",
    Sdn = "string",
    Timeouts = new Vkcs.Inputs.VpnaasIpsecPolicyTimeoutsArgs
    {
        Create = "string",
    },
    TransformProtocol = "string",
    VpnaasIpsecPolicyId = "string",
});

    example, err := vkcs.NewVpnaasIpsecPolicy(ctx, "vpnaasIpsecPolicyResource", &vkcs.VpnaasIpsecPolicyArgs{
AuthAlgorithm: pulumi.String("string"),
Description: pulumi.String("string"),
EncapsulationMode: pulumi.String("string"),
EncryptionAlgorithm: pulumi.String("string"),
Lifetimes: .VpnaasIpsecPolicyLifetimeArray{
&.VpnaasIpsecPolicyLifetimeArgs{
Units: pulumi.String("string"),
Value: pulumi.Float64(0),
},
},
Name: pulumi.String("string"),
Pfs: pulumi.String("string"),
Region: pulumi.String("string"),
Sdn: pulumi.String("string"),
Timeouts: &.VpnaasIpsecPolicyTimeoutsArgs{
Create: pulumi.String("string"),
},
TransformProtocol: pulumi.String("string"),
VpnaasIpsecPolicyId: pulumi.String("string"),
})

    var vpnaasIpsecPolicyResource = new VpnaasIpsecPolicy("vpnaasIpsecPolicyResource", VpnaasIpsecPolicyArgs.builder()
    .authAlgorithm("string")
    .description("string")
    .encapsulationMode("string")
    .encryptionAlgorithm("string")
    .lifetimes(VpnaasIpsecPolicyLifetimeArgs.builder()
        .units("string")
        .value(0)
        .build())
    .name("string")
    .pfs("string")
    .region("string")
    .sdn("string")
    .timeouts(VpnaasIpsecPolicyTimeoutsArgs.builder()
        .create("string")
        .build())
    .transformProtocol("string")
    .vpnaasIpsecPolicyId("string")
    .build());

    vpnaas_ipsec_policy_resource = vkcs.VpnaasIpsecPolicy("vpnaasIpsecPolicyResource",
    auth_algorithm="string",
    description="string",
    encapsulation_mode="string",
    encryption_algorithm="string",
    lifetimes=[{
        "units": "string",
        "value": 0,
    }],
    name="string",
    pfs="string",
    region="string",
    sdn="string",
    timeouts={
        "create": "string",
    },
    transform_protocol="string",
    vpnaas_ipsec_policy_id="string")

    const vpnaasIpsecPolicyResource = new vkcs.VpnaasIpsecPolicy("vpnaasIpsecPolicyResource", {
    authAlgorithm: "string",
    description: "string",
    encapsulationMode: "string",
    encryptionAlgorithm: "string",
    lifetimes: [{
        units: "string",
        value: 0,
    }],
    name: "string",
    pfs: "string",
    region: "string",
    sdn: "string",
    timeouts: {
        create: "string",
    },
    transformProtocol: "string",
    vpnaasIpsecPolicyId: "string",
});

    type: vkcs:VpnaasIpsecPolicy
properties:
    authAlgorithm: string
    description: string
    encapsulationMode: string
    encryptionAlgorithm: string
    lifetimes:
        - units: string
          value: 0
    name: string
    pfs: string
    region: string
    sdn: string
    timeouts:
        create: string
    transformProtocol: string
    vpnaasIpsecPolicyId: string

    VpnaasIpsecPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The VpnaasIpsecPolicy resource accepts the following input properties:

    AuthAlgorithm string
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    Description string
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    EncapsulationMode string
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    EncryptionAlgorithm string
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    Lifetimes List<VpnaasIpsecPolicyLifetime>
    optional → The lifetime of the security association. Consists of Unit and Value.
    Name string
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    Pfs string
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    Region string
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    Sdn string
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    Timeouts VpnaasIpsecPolicyTimeouts
    TransformProtocol string
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    VpnaasIpsecPolicyId string
    string → ID of the resource.
    AuthAlgorithm string
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    Description string
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    EncapsulationMode string
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    EncryptionAlgorithm string
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    Lifetimes []VpnaasIpsecPolicyLifetimeArgs
    optional → The lifetime of the security association. Consists of Unit and Value.
    Name string
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    Pfs string
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    Region string
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    Sdn string
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    Timeouts VpnaasIpsecPolicyTimeoutsArgs
    TransformProtocol string
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    VpnaasIpsecPolicyId string
    string → ID of the resource.
    authAlgorithm String
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description String
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulationMode String
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryptionAlgorithm String
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes List<VpnaasIpsecPolicyLifetime>
    optional → The lifetime of the security association. Consists of Unit and Value.
    name String
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs String
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region String
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn String
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts VpnaasIpsecPolicyTimeouts
    transformProtocol String
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaasIpsecPolicyId String
    string → ID of the resource.
    authAlgorithm string
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description string
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulationMode string
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryptionAlgorithm string
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes VpnaasIpsecPolicyLifetime[]
    optional → The lifetime of the security association. Consists of Unit and Value.
    name string
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs string
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region string
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn string
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts VpnaasIpsecPolicyTimeouts
    transformProtocol string
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaasIpsecPolicyId string
    string → ID of the resource.
    auth_algorithm str
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description str
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulation_mode str
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryption_algorithm str
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes Sequence[VpnaasIpsecPolicyLifetimeArgs]
    optional → The lifetime of the security association. Consists of Unit and Value.
    name str
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs str
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region str
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn str
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts VpnaasIpsecPolicyTimeoutsArgs
    transform_protocol str
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaas_ipsec_policy_id str
    string → ID of the resource.
    authAlgorithm String
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description String
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulationMode String
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryptionAlgorithm String
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes List<Property Map>
    optional → The lifetime of the security association. Consists of Unit and Value.
    name String
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs String
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region String
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn String
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts Property Map
    transformProtocol String
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaasIpsecPolicyId String
    string → ID of the resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the VpnaasIpsecPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing VpnaasIpsecPolicy Resource

    Get an existing VpnaasIpsecPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: VpnaasIpsecPolicyState, opts?: CustomResourceOptions): VpnaasIpsecPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        auth_algorithm: Optional[str] = None,
        description: Optional[str] = None,
        encapsulation_mode: Optional[str] = None,
        encryption_algorithm: Optional[str] = None,
        lifetimes: Optional[Sequence[VpnaasIpsecPolicyLifetimeArgs]] = None,
        name: Optional[str] = None,
        pfs: Optional[str] = None,
        region: Optional[str] = None,
        sdn: Optional[str] = None,
        timeouts: Optional[VpnaasIpsecPolicyTimeoutsArgs] = None,
        transform_protocol: Optional[str] = None,
        vpnaas_ipsec_policy_id: Optional[str] = None) -> VpnaasIpsecPolicy
    func GetVpnaasIpsecPolicy(ctx *Context, name string, id IDInput, state *VpnaasIpsecPolicyState, opts ...ResourceOption) (*VpnaasIpsecPolicy, error)
    public static VpnaasIpsecPolicy Get(string name, Input<string> id, VpnaasIpsecPolicyState? state, CustomResourceOptions? opts = null)
    public static VpnaasIpsecPolicy get(String name, Output<String> id, VpnaasIpsecPolicyState state, CustomResourceOptions options)
    resources:  _:    type: vkcs:VpnaasIpsecPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AuthAlgorithm string
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    Description string
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    EncapsulationMode string
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    EncryptionAlgorithm string
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    Lifetimes List<VpnaasIpsecPolicyLifetime>
    optional → The lifetime of the security association. Consists of Unit and Value.
    Name string
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    Pfs string
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    Region string
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    Sdn string
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    Timeouts VpnaasIpsecPolicyTimeouts
    TransformProtocol string
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    VpnaasIpsecPolicyId string
    string → ID of the resource.
    AuthAlgorithm string
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    Description string
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    EncapsulationMode string
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    EncryptionAlgorithm string
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    Lifetimes []VpnaasIpsecPolicyLifetimeArgs
    optional → The lifetime of the security association. Consists of Unit and Value.
    Name string
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    Pfs string
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    Region string
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    Sdn string
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    Timeouts VpnaasIpsecPolicyTimeoutsArgs
    TransformProtocol string
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    VpnaasIpsecPolicyId string
    string → ID of the resource.
    authAlgorithm String
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description String
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulationMode String
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryptionAlgorithm String
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes List<VpnaasIpsecPolicyLifetime>
    optional → The lifetime of the security association. Consists of Unit and Value.
    name String
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs String
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region String
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn String
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts VpnaasIpsecPolicyTimeouts
    transformProtocol String
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaasIpsecPolicyId String
    string → ID of the resource.
    authAlgorithm string
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description string
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulationMode string
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryptionAlgorithm string
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes VpnaasIpsecPolicyLifetime[]
    optional → The lifetime of the security association. Consists of Unit and Value.
    name string
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs string
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region string
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn string
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts VpnaasIpsecPolicyTimeouts
    transformProtocol string
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaasIpsecPolicyId string
    string → ID of the resource.
    auth_algorithm str
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description str
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulation_mode str
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryption_algorithm str
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes Sequence[VpnaasIpsecPolicyLifetimeArgs]
    optional → The lifetime of the security association. Consists of Unit and Value.
    name str
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs str
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region str
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn str
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts VpnaasIpsecPolicyTimeoutsArgs
    transform_protocol str
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaas_ipsec_policy_id str
    string → ID of the resource.
    authAlgorithm String
    optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
    description String
    optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
    encapsulationMode String
    optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
    encryptionAlgorithm String
    optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
    lifetimes List<Property Map>
    optional → The lifetime of the security association. Consists of Unit and Value.
    name String
    optional string → The name of the policy. Changing this updates the name of the existing policy.
    pfs String
    optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
    region String
    optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
    sdn String
    optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
    timeouts Property Map
    transformProtocol String
    optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
    vpnaasIpsecPolicyId String
    string → ID of the resource.

    Supporting Types

    VpnaasIpsecPolicyLifetime, VpnaasIpsecPolicyLifetimeArgs

    Units string
    optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    Value double
    optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
    Units string
    optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    Value float64
    optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
    units String
    optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    value Double
    optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
    units string
    optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    value number
    optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
    units str
    optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    value float
    optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
    units String
    optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    value Number
    optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.

    VpnaasIpsecPolicyTimeouts, VpnaasIpsecPolicyTimeoutsArgs

    Create string
    Create string
    create String
    create string
    create str
    create String

    Import

    Services can be imported using the id, e.g.

    $ pulumi import vkcs:index/vpnaasIpsecPolicy:VpnaasIpsecPolicy policy_1 832cb7f3-59fe-40cf-8f64-8350ffc03272

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    vkcs vk-cs/terraform-provider-vkcs
    License
    Notes
    This Pulumi package is based on the vkcs Terraform Provider.
    vkcs logo
    vkcs 0.9.3 published on Tuesday, Apr 15, 2025 by vk-cs
    vk-cs/terraform-provider-vkcs