Skip to main content

openstack_fw_policy_v2

Last update:
For your information

These instructions are a copy of the official OpenStack Terraform provider documentation in the Terraform Registry.

Manages a v2 firewall policy resource within OpenStack.

Firewall v2 has no support for OVN currently.

Example Usage⁠

resource "openstack_fw_rule_v2" "rule_1" {
  name             = "firewall_rule_1"
  description      = "drop TELNET traffic"
  action           = "deny"
  protocol         = "tcp"
  destination_port = "23"
  enabled          = "true"
}

resource "openstack_fw_rule_v2" "rule_2" {
  name             = "firewall_rule_2"
  description      = "drop NTP traffic"
  action           = "deny"
  protocol         = "udp"
  destination_port = "123"
  enabled          = "false"
}

resource "openstack_fw_policy_v2" "policy_1" {
  name = "firewall_policy"

  rules = [
    openstack_fw_rule_v2.rule_1.id,
    openstack_fw_rule_v2.rule_2.id,
  ]
}

Argument Reference⁠

The following arguments are supported:

  • region — (Optional) The region in which to obtain the v2 networking client.A networking client is needed to create a firewall policy. If omitted, the region argument of the provider is used. Changing this creates a newfirewall policy.

  • name — (Optional) A name for the firewall policy. Changing thisupdates the name of an existing firewall policy.

  • description — (Optional) A description for the firewall policy. Changingthis updates the description of an existing firewall policy.

  • tenant_id — (Optional) — This argument conflicts and is interchangeable with project_id. The owner of the firewall policy. Required if admin wantsto create a firewall policy for another tenant. Changing this creates a newfirewall policy.

  • project_id — (Optional) — This argument conflicts and is interchangeable with tenant_id. The owner of the firewall policy. Required if admin wantsto create a firewall policy for another project. Changing this creates a newfirewall policy.

  • rules — (Optional) An array of one or more firewall rules that comprisethe policy. Changing this results in adding/removing rules from theexisting firewall policy.

  • audited — (Optional) Audit status of the firewall policy(must be "true" or "false" if provided — defaults to "false").This status is set to "false" whenever the firewall policy or any of itsrules are changed. Changing these updates the audited status of an existingfirewall policy.

  • shared — (Optional) Sharing status of the firewall policy (must be "true "or "false" if provided). If this is "true" the policy is visible to, andcan be used in, firewalls in other tenants. Changing this updates the shared status of an existing firewall policy. Only administrative userscan specify if the policy should be shared.

Attributes Reference⁠

The following attributes are exported:

  • region — See Argument Reference above.
  • name — See Argument Reference above.
  • tenant_id — See Argument Reference above.
  • project_id — See Argument Reference above.
  • description — See Argument Reference above.
  • rules — See Argument Reference above.
  • Argument — See Argument Reference above.
  • shared — See Argument Reference above.

Import⁠

Firewall Policies can be imported using the id, e.g.

$ terraform import openstack_fw_policy_v2.policy_1 07f422e6-c596-474b-8b94-fe2c12506ce0