import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * Provides a DigitalOcean Cloud Firewall resource. This can be used to create, * modify, and delete Firewalls. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as digitalocean from "@pulumi/digitalocean"; * * const web = new digitalocean.Droplet("web", { * name: "web-1", * size: digitalocean.DropletSlug.DropletS1VCPU1GB, * image: "ubuntu-18-04-x64", * region: digitalocean.Region.NYC3, * }); * const webFirewall = new digitalocean.Firewall("web", { * name: "only-22-80-and-443", * dropletIds: [web.id], * inboundRules: [ * { * protocol: "tcp", * portRange: "22", * sourceAddresses: [ * "192.168.1.0/24", * "2002:1:2::/48", * ], * }, * { * protocol: "tcp", * portRange: "80", * sourceAddresses: [ * "0.0.0.0/0", * "::/0", * ], * }, * { * protocol: "tcp", * portRange: "443", * sourceAddresses: [ * "0.0.0.0/0", * "::/0", * ], * }, * { * protocol: "icmp", * sourceAddresses: [ * "0.0.0.0/0", * "::/0", * ], * }, * ], * outboundRules: [ * { * protocol: "tcp", * portRange: "53", * destinationAddresses: [ * "0.0.0.0/0", * "::/0", * ], * }, * { * protocol: "udp", * portRange: "53", * destinationAddresses: [ * "0.0.0.0/0", * "::/0", * ], * }, * { * protocol: "icmp", * destinationAddresses: [ * "0.0.0.0/0", * "::/0", * ], * }, * ], * }); * ``` * * ## Import * * Firewalls can be imported using the firewall `id`, e.g. * * ```sh * $ pulumi import digitalocean:index/firewall:Firewall myfirewall b8ecd2ab-2267-4a5e-8692-cbf1d32583e3 * ``` */ export declare class Firewall extends pulumi.CustomResource { /** * Get an existing Firewall resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: FirewallState, opts?: pulumi.CustomResourceOptions): Firewall; /** * Returns true if the given object is an instance of Firewall. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is Firewall; /** * A time value given in ISO8601 combined date and time format * that represents when the Firewall was created. */ readonly createdAt: pulumi.Output; /** * The list of the IDs of the Droplets assigned * to the Firewall (max. 10). If you want to assign more droplets to the * Firewall, add Tags to them and use the `tags` argument below. */ readonly dropletIds: pulumi.Output; /** * The inbound access rule block for the Firewall. * The `inboundRule` block is documented below. */ readonly inboundRules: pulumi.Output; /** * The Firewall name */ readonly name: pulumi.Output; /** * The outbound access rule block for the Firewall. * The `outboundRule` block is documented below. */ readonly outboundRules: pulumi.Output; /** * An list of object containing the fields, "dropletId", * "removing", and "status". It is provided to detail exactly which Droplets * are having their security policies updated. When empty, all changes * have been successfully applied. */ readonly pendingChanges: pulumi.Output; /** * A status string indicating the current state of the Firewall. * This can be "waiting", "succeeded", or "failed". */ readonly status: pulumi.Output; /** * The names of the Tags assigned to the Firewall (max. 5). */ readonly tags: pulumi.Output; /** * Create a Firewall resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args?: FirewallArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering Firewall resources. */ export interface FirewallState { /** * A time value given in ISO8601 combined date and time format * that represents when the Firewall was created. */ createdAt?: pulumi.Input; /** * The list of the IDs of the Droplets assigned * to the Firewall (max. 10). If you want to assign more droplets to the * Firewall, add Tags to them and use the `tags` argument below. */ dropletIds?: pulumi.Input[]>; /** * The inbound access rule block for the Firewall. * The `inboundRule` block is documented below. */ inboundRules?: pulumi.Input[]>; /** * The Firewall name */ name?: pulumi.Input; /** * The outbound access rule block for the Firewall. * The `outboundRule` block is documented below. */ outboundRules?: pulumi.Input[]>; /** * An list of object containing the fields, "dropletId", * "removing", and "status". It is provided to detail exactly which Droplets * are having their security policies updated. When empty, all changes * have been successfully applied. */ pendingChanges?: pulumi.Input[]>; /** * A status string indicating the current state of the Firewall. * This can be "waiting", "succeeded", or "failed". */ status?: pulumi.Input; /** * The names of the Tags assigned to the Firewall (max. 5). */ tags?: pulumi.Input[]>; } /** * The set of arguments for constructing a Firewall resource. */ export interface FirewallArgs { /** * The list of the IDs of the Droplets assigned * to the Firewall (max. 10). If you want to assign more droplets to the * Firewall, add Tags to them and use the `tags` argument below. */ dropletIds?: pulumi.Input[]>; /** * The inbound access rule block for the Firewall. * The `inboundRule` block is documented below. */ inboundRules?: pulumi.Input[]>; /** * The Firewall name */ name?: pulumi.Input; /** * The outbound access rule block for the Firewall. * The `outboundRule` block is documented below. */ outboundRules?: pulumi.Input[]>; /** * The names of the Tags assigned to the Firewall (max. 5). */ tags?: pulumi.Input[]>; }