openstack_fw_firewall_v1

Manages a v1 firewall resource within OpenStack.

Example Usage

resource "openstack_fw_rule_v1" "rule_1" {
  name = "my-rule-1"
  description = "drop TELNET traffic"
  action = "deny"
  protocol = "tcp"
  destination_port = "23"
  enabled = "true"
}

resource "openstack_fw_rule_v1" "rule_2" {
  name = "my-rule-2"
  description = "drop NTP traffic"
  action = "deny"
  protocol = "udp"
  destination_port = "123"
  enabled = "false"
}

resource "openstack_fw_policy_v1" "policy_1" {
  name = "my-policy"
  rules = ["${openstack_fw_rule_v1.rule_1.id}",
           "${openstack_fw_rule_v1.rule_2.id}"]
}

resource "openstack_fw_firewall_v1" "firewall_1" {
  name = "my-firewall"
  policy_id = "${openstack_fw_policy_v1.policy_1.id}"
}

Argument Reference

The following arguments are supported:

• region - (Required) The region in which to obtain the v1 networking client. A networking client is needed to create a firewall. If omitted, the OS_REGION_NAME environment variable is used. Changing this creates a new firewall.

• policy_id - (Required) The policy resource id for the firewall. Changing this updates the policy_id of an existing firewall.

• name - (Optional) A name for the firewall. Changing this updates the name of an existing firewall.

• description - (Required) A description for the firewall. Changing this updates the description of an existing firewall.

• admin_state_up - (Optional) Administrative up/down status for the firewall (must be “true” or “false” if provided - defaults to “true”). Changing this updates the admin_state_up of an existing firewall.

• tenant_id - (Optional) The owner of the floating IP. Required if admin wants to create a firewall for another tenant. Changing this creates a new firewall.

Attributes Reference

The following attributes are exported:

• region - See Argument Reference above.
• policy_id - See Argument Reference above.
• name - See Argument Reference above.
• description - See Argument Reference above.
• admin_state_up - See Argument Reference above.
• tenant_id - See Argument Reference above.

Import

Firewalls can be imported using the id, e.g.

$ terraform import openstack_fw_firewall_v1.firewall_1 c9e39fb2-ce20-46c8-a964-25f3898c7a97

See the source of this document at Terraform.io