» openstack_vpnaas_ipsec_policy_v2

Manages a V2 Neutron IPSec policy resource within OpenStack.

» Example Usage

resource "openstack_vpnaas_ipsec_policy_v2" "policy_1" {
  name = "my_policy"
}

» Argument Reference

The following arguments are supported:

  • region - (Optional) The region in which to obtain the V2 Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.

  • name - (Optional) The name of the policy. Changing this updates the name of the existing policy.

  • tenant_id - (Optional) The owner of the policy. Required if admin wants to create a policy for another project. Changing this creates a new policy.

  • description - (Optional) The human-readable description for the policy. Changing this updates the description of the existing policy.

  • auth_algorithm - (Optional) The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.

  • encapsulation_mode - (Optional) The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.

  • encryption_algorithm - (Optional) The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.

  • pfs - (Optional) The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.

  • transform_protocol - (Optional) The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.

  • lifetime - (Optional) The lifetime of the security association. Consists of Unit and Value.

    • unit - (Optional) The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    • value - (Optional) The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
  • value_specs - (Optional) Map of additional options.

» Attributes Reference

The following attributes are exported:

» Import

Policies can be imported using the id, e.g.

$ terraform import openstack_vpnaas_ipsec_policy_v2.policy_1 832cb7f3-59fe-40cf-8f64-8350ffc03272