openstack_fw_policy_v2
Эта инструкция — копия официальной документации OpenStack Terraform-провайдера в Terraform Registry.
Manages a v2 firewall policy resource within OpenStack.
Firewall v2 has no support for OVN currently.
Example Usage
resource "openstack_fw_rule_v2" "rule_1" {
name = "firewall_rule_1"
description = "drop TELNET traffic"
action = "deny"
protocol = "tcp"
destination_port = "23"
enabled = "true"
}
resource "openstack_fw_rule_v2" "rule_2" {
name = "firewall_rule_2"
description = "drop NTP traffic"
action = "deny"
protocol = "udp"
destination_port = "123"
enabled = "false"
}
resource "openstack_fw_policy_v2" "policy_1" {
name = "firewall_policy"
rules = [
openstack_fw_rule_v2.rule_1.id,
openstack_fw_rule_v2.rule_2.id,
]
}
Argument Reference
The following arguments are supported:
-
region
- (Optional) The region in which to obtain the v2 networking client. A networking client is needed to create a firewall policy. If omitted, theregion
argument of the provider is used. Changing this creates a new firewall policy. -
name
- (Optional) A name for the firewall policy. Changing this updates thename
of an existing firewall policy. -
description
- (Optional) A description for the firewall policy. Changing this updates thedescription
of an existing firewall policy. -
tenant_id
- (Optional) - This argument conflicts and is interchangeable withproject_id
. The owner of the firewall policy. Required if admin wants to create a firewall policy for another tenant. Changing this creates a new firewall policy. -
project_id
- (Optional) - This argument conflicts and is interchangeable withtenant_id
. The owner of the firewall policy. Required if admin wants to create a firewall policy for another project. Changing this creates a new firewall policy. -
rules
- (Optional) An array of one or more firewall rules that comprise the policy. Changing this results in adding/removing rules from the existing firewall policy. -
audited
- (Optional) Audit status of the firewall policy (must be "true" or "false" if provided - defaults to "false"). This status is set to "false" whenever the firewall policy or any of its rules are changed. Changing this updates theaudited
status of an existing firewall policy. -
shared
- (Optional) Sharing status of the firewall policy (must be "true" or "false" if provided). If this is "true" the policy is visible to, and can be used in, firewalls in other tenants. Changing this updates theshared
status of an existing firewall policy. Only administrative users can specify if the policy should be shared.
Attributes Reference
The following attributes are exported:
region
- See Argument Reference above.name
- See Argument Reference above.tenant_id
- See Argument Reference above.project_id
- See Argument Reference above.description
- See Argument Reference above.rules
- See Argument Reference above.audited
- See Argument Reference above.shared
- See Argument Reference above.