Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Vkcs Provider
  3. API Docs
  4. VpnaasIpsecPolicy
vkcs 0.9.3 published on Tuesday, Apr 15, 2025 by vk-cs
vk-cs/terraform-provider-vkcs

vkcs.VpnaasIpsecPolicy

Explore with Pulumi AI

vkcs 0.9.3 published on Tuesday, Apr 15, 2025 by vk-cs
vk-cs/terraform-provider-vkcs

Manages a IPSec policy resource within VKCS.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as vkcs from "@pulumi/vkcs";

const dataCenter = new vkcs.VpnaasIpsecPolicy("dataCenter", {
    description: "Policy that restricts remote working users to connect to our data ceneter over VPN",
    lifetimes: [{
        units: "seconds",
        value: 3600,
    }],
});
Copy
import pulumi
import pulumi_vkcs as vkcs

data_center = vkcs.VpnaasIpsecPolicy("dataCenter",
    description="Policy that restricts remote working users to connect to our data ceneter over VPN",
    lifetimes=[{
        "units": "seconds",
        "value": 3600,
    }])
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/vkcs/vkcs"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := vkcs.NewVpnaasIpsecPolicy(ctx, "dataCenter", &vkcs.VpnaasIpsecPolicyArgs{
			Description: pulumi.String("Policy that restricts remote working users to connect to our data ceneter over VPN"),
			Lifetimes: vkcs.VpnaasIpsecPolicyLifetimeArray{
				&vkcs.VpnaasIpsecPolicyLifetimeArgs{
					Units: pulumi.String("seconds"),
					Value: pulumi.Float64(3600),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vkcs = Pulumi.Vkcs;

return await Deployment.RunAsync(() => 
{
    var dataCenter = new Vkcs.VpnaasIpsecPolicy("dataCenter", new()
    {
        Description = "Policy that restricts remote working users to connect to our data ceneter over VPN",
        Lifetimes = new[]
        {
            new Vkcs.Inputs.VpnaasIpsecPolicyLifetimeArgs
            {
                Units = "seconds",
                Value = 3600,
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vkcs.VpnaasIpsecPolicy;
import com.pulumi.vkcs.VpnaasIpsecPolicyArgs;
import com.pulumi.vkcs.inputs.VpnaasIpsecPolicyLifetimeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var dataCenter = new VpnaasIpsecPolicy("dataCenter", VpnaasIpsecPolicyArgs.builder()
            .description("Policy that restricts remote working users to connect to our data ceneter over VPN")
            .lifetimes(VpnaasIpsecPolicyLifetimeArgs.builder()
                .units("seconds")
                .value(3600)
                .build())
            .build());

    }
}
Copy
resources:
  dataCenter:
    type: vkcs:VpnaasIpsecPolicy
    properties:
      description: Policy that restricts remote working users to connect to our data ceneter over VPN
      lifetimes:
        - units: seconds
          value: 3600
Copy

Create VpnaasIpsecPolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new VpnaasIpsecPolicy(name: string, args?: VpnaasIpsecPolicyArgs, opts?: CustomResourceOptions);
@overload
def VpnaasIpsecPolicy(resource_name: str,
                      args: Optional[VpnaasIpsecPolicyArgs] = None,
                      opts: Optional[ResourceOptions] = None)

@overload
def VpnaasIpsecPolicy(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      auth_algorithm: Optional[str] = None,
                      description: Optional[str] = None,
                      encapsulation_mode: Optional[str] = None,
                      encryption_algorithm: Optional[str] = None,
                      lifetimes: Optional[Sequence[VpnaasIpsecPolicyLifetimeArgs]] = None,
                      name: Optional[str] = None,
                      pfs: Optional[str] = None,
                      region: Optional[str] = None,
                      sdn: Optional[str] = None,
                      timeouts: Optional[VpnaasIpsecPolicyTimeoutsArgs] = None,
                      transform_protocol: Optional[str] = None,
                      vpnaas_ipsec_policy_id: Optional[str] = None)
func NewVpnaasIpsecPolicy(ctx *Context, name string, args *VpnaasIpsecPolicyArgs, opts ...ResourceOption) (*VpnaasIpsecPolicy, error)
public VpnaasIpsecPolicy(string name, VpnaasIpsecPolicyArgs? args = null, CustomResourceOptions? opts = null)
public VpnaasIpsecPolicy(String name, VpnaasIpsecPolicyArgs args)
public VpnaasIpsecPolicy(String name, VpnaasIpsecPolicyArgs args, CustomResourceOptions options)

type: vkcs:VpnaasIpsecPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args VpnaasIpsecPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args VpnaasIpsecPolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args VpnaasIpsecPolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args VpnaasIpsecPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. VpnaasIpsecPolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var vpnaasIpsecPolicyResource = new Vkcs.VpnaasIpsecPolicy("vpnaasIpsecPolicyResource", new()
{
    AuthAlgorithm = "string",
    Description = "string",
    EncapsulationMode = "string",
    EncryptionAlgorithm = "string",
    Lifetimes = new[]
    {
        new Vkcs.Inputs.VpnaasIpsecPolicyLifetimeArgs
        {
            Units = "string",
            Value = 0,
        },
    },
    Name = "string",
    Pfs = "string",
    Region = "string",
    Sdn = "string",
    Timeouts = new Vkcs.Inputs.VpnaasIpsecPolicyTimeoutsArgs
    {
        Create = "string",
    },
    TransformProtocol = "string",
    VpnaasIpsecPolicyId = "string",
});
Copy
example, err := vkcs.NewVpnaasIpsecPolicy(ctx, "vpnaasIpsecPolicyResource", &vkcs.VpnaasIpsecPolicyArgs{
	AuthAlgorithm:       pulumi.String("string"),
	Description:         pulumi.String("string"),
	EncapsulationMode:   pulumi.String("string"),
	EncryptionAlgorithm: pulumi.String("string"),
	Lifetimes: vkcs.VpnaasIpsecPolicyLifetimeArray{
		&vkcs.VpnaasIpsecPolicyLifetimeArgs{
			Units: pulumi.String("string"),
			Value: pulumi.Float64(0),
		},
	},
	Name:   pulumi.String("string"),
	Pfs:    pulumi.String("string"),
	Region: pulumi.String("string"),
	Sdn:    pulumi.String("string"),
	Timeouts: &vkcs.VpnaasIpsecPolicyTimeoutsArgs{
		Create: pulumi.String("string"),
	},
	TransformProtocol:   pulumi.String("string"),
	VpnaasIpsecPolicyId: pulumi.String("string"),
})
Copy
var vpnaasIpsecPolicyResource = new VpnaasIpsecPolicy("vpnaasIpsecPolicyResource", VpnaasIpsecPolicyArgs.builder()
    .authAlgorithm("string")
    .description("string")
    .encapsulationMode("string")
    .encryptionAlgorithm("string")
    .lifetimes(VpnaasIpsecPolicyLifetimeArgs.builder()
        .units("string")
        .value(0)
        .build())
    .name("string")
    .pfs("string")
    .region("string")
    .sdn("string")
    .timeouts(VpnaasIpsecPolicyTimeoutsArgs.builder()
        .create("string")
        .build())
    .transformProtocol("string")
    .vpnaasIpsecPolicyId("string")
    .build());
Copy
vpnaas_ipsec_policy_resource = vkcs.VpnaasIpsecPolicy("vpnaasIpsecPolicyResource",
    auth_algorithm="string",
    description="string",
    encapsulation_mode="string",
    encryption_algorithm="string",
    lifetimes=[{
        "units": "string",
        "value": 0,
    }],
    name="string",
    pfs="string",
    region="string",
    sdn="string",
    timeouts={
        "create": "string",
    },
    transform_protocol="string",
    vpnaas_ipsec_policy_id="string")
Copy
const vpnaasIpsecPolicyResource = new vkcs.VpnaasIpsecPolicy("vpnaasIpsecPolicyResource", {
    authAlgorithm: "string",
    description: "string",
    encapsulationMode: "string",
    encryptionAlgorithm: "string",
    lifetimes: [{
        units: "string",
        value: 0,
    }],
    name: "string",
    pfs: "string",
    region: "string",
    sdn: "string",
    timeouts: {
        create: "string",
    },
    transformProtocol: "string",
    vpnaasIpsecPolicyId: "string",
});
Copy
type: vkcs:VpnaasIpsecPolicy
properties:
    authAlgorithm: string
    description: string
    encapsulationMode: string
    encryptionAlgorithm: string
    lifetimes:
        - units: string
          value: 0
    name: string
    pfs: string
    region: string
    sdn: string
    timeouts:
        create: string
    transformProtocol: string
    vpnaasIpsecPolicyId: string
Copy

VpnaasIpsecPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The VpnaasIpsecPolicy resource accepts the following input properties:

AuthAlgorithm string
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
Description string
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
EncapsulationMode string
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
EncryptionAlgorithm string
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
Lifetimes List<VpnaasIpsecPolicyLifetime>
optional → The lifetime of the security association. Consists of Unit and Value.
Name string
optional string → The name of the policy. Changing this updates the name of the existing policy.
Pfs string
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
Region string
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
Sdn string
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
Timeouts VpnaasIpsecPolicyTimeouts
TransformProtocol string
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
VpnaasIpsecPolicyId string
string → ID of the resource.
AuthAlgorithm string
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
Description string
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
EncapsulationMode string
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
EncryptionAlgorithm string
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
Lifetimes []VpnaasIpsecPolicyLifetimeArgs
optional → The lifetime of the security association. Consists of Unit and Value.
Name string
optional string → The name of the policy. Changing this updates the name of the existing policy.
Pfs string
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
Region string
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
Sdn string
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
Timeouts VpnaasIpsecPolicyTimeoutsArgs
TransformProtocol string
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
VpnaasIpsecPolicyId string
string → ID of the resource.
authAlgorithm String
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description String
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulationMode String
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryptionAlgorithm String
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes List<VpnaasIpsecPolicyLifetime>
optional → The lifetime of the security association. Consists of Unit and Value.
name String
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs String
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region String
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn String
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts VpnaasIpsecPolicyTimeouts
transformProtocol String
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaasIpsecPolicyId String
string → ID of the resource.
authAlgorithm string
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description string
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulationMode string
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryptionAlgorithm string
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes VpnaasIpsecPolicyLifetime[]
optional → The lifetime of the security association. Consists of Unit and Value.
name string
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs string
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region string
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn string
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts VpnaasIpsecPolicyTimeouts
transformProtocol string
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaasIpsecPolicyId string
string → ID of the resource.
auth_algorithm str
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description str
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulation_mode str
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryption_algorithm str
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes Sequence[VpnaasIpsecPolicyLifetimeArgs]
optional → The lifetime of the security association. Consists of Unit and Value.
name str
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs str
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region str
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn str
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts VpnaasIpsecPolicyTimeoutsArgs
transform_protocol str
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaas_ipsec_policy_id str
string → ID of the resource.
authAlgorithm String
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description String
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulationMode String
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryptionAlgorithm String
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes List<Property Map>
optional → The lifetime of the security association. Consists of Unit and Value.
name String
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs String
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region String
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn String
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts Property Map
transformProtocol String
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaasIpsecPolicyId String
string → ID of the resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the VpnaasIpsecPolicy resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing VpnaasIpsecPolicy Resource

Get an existing VpnaasIpsecPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: VpnaasIpsecPolicyState, opts?: CustomResourceOptions): VpnaasIpsecPolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        auth_algorithm: Optional[str] = None,
        description: Optional[str] = None,
        encapsulation_mode: Optional[str] = None,
        encryption_algorithm: Optional[str] = None,
        lifetimes: Optional[Sequence[VpnaasIpsecPolicyLifetimeArgs]] = None,
        name: Optional[str] = None,
        pfs: Optional[str] = None,
        region: Optional[str] = None,
        sdn: Optional[str] = None,
        timeouts: Optional[VpnaasIpsecPolicyTimeoutsArgs] = None,
        transform_protocol: Optional[str] = None,
        vpnaas_ipsec_policy_id: Optional[str] = None) -> VpnaasIpsecPolicy
func GetVpnaasIpsecPolicy(ctx *Context, name string, id IDInput, state *VpnaasIpsecPolicyState, opts ...ResourceOption) (*VpnaasIpsecPolicy, error)
public static VpnaasIpsecPolicy Get(string name, Input<string> id, VpnaasIpsecPolicyState? state, CustomResourceOptions? opts = null)
public static VpnaasIpsecPolicy get(String name, Output<String> id, VpnaasIpsecPolicyState state, CustomResourceOptions options)
resources:  _:    type: vkcs:VpnaasIpsecPolicy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AuthAlgorithm string
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
Description string
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
EncapsulationMode string
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
EncryptionAlgorithm string
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
Lifetimes List<VpnaasIpsecPolicyLifetime>
optional → The lifetime of the security association. Consists of Unit and Value.
Name string
optional string → The name of the policy. Changing this updates the name of the existing policy.
Pfs string
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
Region string
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
Sdn string
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
Timeouts VpnaasIpsecPolicyTimeouts
TransformProtocol string
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
VpnaasIpsecPolicyId string
string → ID of the resource.
AuthAlgorithm string
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
Description string
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
EncapsulationMode string
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
EncryptionAlgorithm string
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
Lifetimes []VpnaasIpsecPolicyLifetimeArgs
optional → The lifetime of the security association. Consists of Unit and Value.
Name string
optional string → The name of the policy. Changing this updates the name of the existing policy.
Pfs string
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
Region string
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
Sdn string
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
Timeouts VpnaasIpsecPolicyTimeoutsArgs
TransformProtocol string
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
VpnaasIpsecPolicyId string
string → ID of the resource.
authAlgorithm String
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description String
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulationMode String
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryptionAlgorithm String
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes List<VpnaasIpsecPolicyLifetime>
optional → The lifetime of the security association. Consists of Unit and Value.
name String
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs String
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region String
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn String
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts VpnaasIpsecPolicyTimeouts
transformProtocol String
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaasIpsecPolicyId String
string → ID of the resource.
authAlgorithm string
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description string
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulationMode string
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryptionAlgorithm string
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes VpnaasIpsecPolicyLifetime[]
optional → The lifetime of the security association. Consists of Unit and Value.
name string
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs string
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region string
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn string
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts VpnaasIpsecPolicyTimeouts
transformProtocol string
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaasIpsecPolicyId string
string → ID of the resource.
auth_algorithm str
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description str
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulation_mode str
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryption_algorithm str
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes Sequence[VpnaasIpsecPolicyLifetimeArgs]
optional → The lifetime of the security association. Consists of Unit and Value.
name str
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs str
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region str
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn str
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts VpnaasIpsecPolicyTimeoutsArgs
transform_protocol str
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaas_ipsec_policy_id str
string → ID of the resource.
authAlgorithm String
optional string → The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.
description String
optional string → The human-readable description for the policy. Changing this updates the description of the existing policy.
encapsulationMode String
optional string → The encapsulation mode. Valid values are tunnel and transport. Default is tunnel. Changing this updates the existing policy.
encryptionAlgorithm String
optional string → The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.
lifetimes List<Property Map>
optional → The lifetime of the security association. Consists of Unit and Value.
name String
optional string → The name of the policy. Changing this updates the name of the existing policy.
pfs String
optional string → The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.
region String
optional string → The region in which to obtain the Networking client. A Networking client is needed to create an IPSec policy. If omitted, the region argument of the provider is used. Changing this creates a new policy.
sdn String
optional string → SDN to use for this resource. Must be one of following: "neutron", "sprut". Default value is project's default SDN.New since v0.5.3.
timeouts Property Map
transformProtocol String
optional string → The transform protocol. Valid values are ESP, AH and AH-ESP. Changing this updates the existing policy. Default is ESP.
vpnaasIpsecPolicyId String
string → ID of the resource.

Supporting Types

VpnaasIpsecPolicyLifetime
, VpnaasIpsecPolicyLifetimeArgs

Units string
optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
Value double
optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
Units string
optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
Value float64
optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
units String
optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
value Double
optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
units string
optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
value number
optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
units str
optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
value float
optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
units String
optional string → The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
value Number
optional number → The value for the lifetime of the security association. Must be a positive integer. Default is 3600.

VpnaasIpsecPolicyTimeouts
, VpnaasIpsecPolicyTimeoutsArgs

Create string
Create string
create String
create string
create str
create String

Import

Services can be imported using the id, e.g.

$ pulumi import vkcs:index/vpnaasIpsecPolicy:VpnaasIpsecPolicy policy_1 832cb7f3-59fe-40cf-8f64-8350ffc03272
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
vkcs vk-cs/terraform-provider-vkcs
License
Notes
This Pulumi package is based on the vkcs Terraform Provider.
vkcs 0.9.3 published on Tuesday, Apr 15, 2025 by vk-cs
vk-cs/terraform-provider-vkcs