github.com/danp/terraform@v0.9.5-0.20170426144147-39d740081351/website/source/docs/providers/openstack/r/fw_policy_v1.html.markdown (about) 1 --- 2 layout: "openstack" 3 page_title: "OpenStack: openstack_fw_policy_v1" 4 sidebar_current: "docs-openstack-resource-fw-policy-v1" 5 description: |- 6 Manages a v1 firewall policy resource within OpenStack. 7 --- 8 9 # openstack\_fw\_policy_v1 10 11 Manages a v1 firewall policy resource within OpenStack. 12 13 ## Example Usage 14 15 ```hcl 16 resource "openstack_fw_rule_v1" "rule_1" { 17 name = "my-rule-1" 18 description = "drop TELNET traffic" 19 action = "deny" 20 protocol = "tcp" 21 destination_port = "23" 22 enabled = "true" 23 } 24 25 resource "openstack_fw_rule_v1" "rule_2" { 26 name = "my-rule-2" 27 description = "drop NTP traffic" 28 action = "deny" 29 protocol = "udp" 30 destination_port = "123" 31 enabled = "false" 32 } 33 34 resource "openstack_fw_policy_v1" "policy_1" { 35 name = "my-policy" 36 37 rules = ["${openstack_fw_rule_v1.rule_1.id}", 38 "${openstack_fw_rule_v1.rule_2.id}", 39 ] 40 } 41 ``` 42 43 ## Argument Reference 44 45 The following arguments are supported: 46 47 * `region` - (Required) The region in which to obtain the v1 networking client. 48 A networking client is needed to create a firewall policy. If omitted, the 49 `OS_REGION_NAME` environment variable is used. Changing this creates a new 50 firewall policy. 51 52 * `name` - (Optional) A name for the firewall policy. Changing this 53 updates the `name` of an existing firewall policy. 54 55 * `description` - (Optional) A description for the firewall policy. Changing 56 this updates the `description` of an existing firewall policy. 57 58 * `rules` - (Optional) An array of one or more firewall rules that comprise 59 the policy. Changing this results in adding/removing rules from the 60 existing firewall policy. 61 62 * `audited` - (Optional) Audit status of the firewall policy 63 (must be "true" or "false" if provided - defaults to "false"). 64 This status is set to "false" whenever the firewall policy or any of its 65 rules are changed. Changing this updates the `audited` status of an existing 66 firewall policy. 67 68 * `shared` - (Optional) Sharing status of the firewall policy (must be "true" 69 or "false" if provided). If this is "true" the policy is visible to, and 70 can be used in, firewalls in other tenants. Changing this updates the 71 `shared` status of an existing firewall policy. Only administrative users 72 can specify if the policy should be shared. 73 74 * `value_specs` - (Optional) Map of additional options. 75 76 ## Attributes Reference 77 78 The following attributes are exported: 79 80 * `region` - See Argument Reference above. 81 * `name` - See Argument Reference above. 82 * `description` - See Argument Reference above. 83 * `audited` - See Argument Reference above. 84 * `shared` - See Argument Reference above. 85 86 ## Import 87 88 Firewall Policies can be imported using the `id`, e.g. 89 90 ``` 91 $ terraform import openstack_fw_policy_v1.policy_1 07f422e6-c596-474b-8b94-fe2c12506ce0 92 ```