@pulumi/sdwan
Version:
A Pulumi package for managing resources on Cisco Catalyst SD-WAN.. Based on terraform-provider-sdwan: version v0.4.1
286 lines (285 loc) • 10 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
* This resource can manage a TLS SSL Decryption Policy Definition .
*
* ## Import
*
* The `pulumi import` command can be used, for example:
*
* ```sh
* $ pulumi import sdwan:index/tlsSslDecryptionPolicyDefinition:TlsSslDecryptionPolicyDefinition example "f6b2c44c-693c-4763-b010-895aa3d236bd"
* ```
*/
export declare class TlsSslDecryptionPolicyDefinition extends pulumi.CustomResource {
/**
* Get an existing TlsSslDecryptionPolicyDefinition resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: TlsSslDecryptionPolicyDefinitionState, opts?: pulumi.CustomResourceOptions): TlsSslDecryptionPolicyDefinition;
/**
* Returns true if the given object is an instance of TlsSslDecryptionPolicyDefinition. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is TlsSslDecryptionPolicyDefinition;
/**
* Certificate Lifetime(in Days)
*/
readonly certificateLifetimeInDays: pulumi.Output<number | undefined>;
/**
* Certificate revocation status - Choices: `ocsp`, `none`
*/
readonly certificateRevocationStatus: pulumi.Output<string | undefined>;
/**
* Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
*/
readonly defaultAction: pulumi.Output<string | undefined>;
/**
* The description of the policy definition.
*/
readonly description: pulumi.Output<string>;
/**
* EC Key Type - Choices: `P256`, `P384`, `P521`
*/
readonly ecKeyType: pulumi.Output<string | undefined>;
/**
* Expired certificate action - Choices: `drop`, `decrypt`
*/
readonly expiredCertificate: pulumi.Output<string | undefined>;
/**
* Failure mode - Choices: `open`, `close`
*/
readonly failureMode: pulumi.Output<string | undefined>;
/**
* Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
*/
readonly minimalTlsVersion: pulumi.Output<string | undefined>;
/**
* The policy mode - Choices: `security`, `unified`
*/
readonly mode: pulumi.Output<string | undefined>;
/**
* The name of the policy definition.
*/
readonly name: pulumi.Output<string>;
/**
* List of network rules (applies when `mode` set to `security`)
*/
readonly networkRules: pulumi.Output<outputs.TlsSslDecryptionPolicyDefinitionNetworkRule[] | undefined>;
/**
* RSA key pair modules - Choices: `1024`, `2048`, `4096`
*/
readonly rsaKeyPairModulus: pulumi.Output<string | undefined>;
/**
* SSL decryption enabled
*/
readonly sslDecryptionEnabled: pulumi.Output<string | undefined>;
/**
* Unknown revocation status action - Choices: `drop`, `decrypt`
*/
readonly unknownRevocationStatus: pulumi.Output<string | undefined>;
/**
* Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
*/
readonly unsupportedCipherSuites: pulumi.Output<string | undefined>;
/**
* Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
*/
readonly unsupportedProtocolVersions: pulumi.Output<string | undefined>;
/**
* Untrusted certificate action - Choices: `drop`, `decrypt`
*/
readonly untrustedCertificate: pulumi.Output<string | undefined>;
/**
* List of url rules (applies when `mode` set to `security`)
*/
readonly urlRules: pulumi.Output<outputs.TlsSslDecryptionPolicyDefinitionUrlRule[] | undefined>;
/**
* Use default CA certificate bundle
*/
readonly useDefaultCaCertBundle: pulumi.Output<boolean | undefined>;
/**
* The version of the object
*/
readonly version: pulumi.Output<number>;
/**
* Create a TlsSslDecryptionPolicyDefinition resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: TlsSslDecryptionPolicyDefinitionArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering TlsSslDecryptionPolicyDefinition resources.
*/
export interface TlsSslDecryptionPolicyDefinitionState {
/**
* Certificate Lifetime(in Days)
*/
certificateLifetimeInDays?: pulumi.Input<number>;
/**
* Certificate revocation status - Choices: `ocsp`, `none`
*/
certificateRevocationStatus?: pulumi.Input<string>;
/**
* Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
*/
defaultAction?: pulumi.Input<string>;
/**
* The description of the policy definition.
*/
description?: pulumi.Input<string>;
/**
* EC Key Type - Choices: `P256`, `P384`, `P521`
*/
ecKeyType?: pulumi.Input<string>;
/**
* Expired certificate action - Choices: `drop`, `decrypt`
*/
expiredCertificate?: pulumi.Input<string>;
/**
* Failure mode - Choices: `open`, `close`
*/
failureMode?: pulumi.Input<string>;
/**
* Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
*/
minimalTlsVersion?: pulumi.Input<string>;
/**
* The policy mode - Choices: `security`, `unified`
*/
mode?: pulumi.Input<string>;
/**
* The name of the policy definition.
*/
name?: pulumi.Input<string>;
/**
* List of network rules (applies when `mode` set to `security`)
*/
networkRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionNetworkRule>[]>;
/**
* RSA key pair modules - Choices: `1024`, `2048`, `4096`
*/
rsaKeyPairModulus?: pulumi.Input<string>;
/**
* SSL decryption enabled
*/
sslDecryptionEnabled?: pulumi.Input<string>;
/**
* Unknown revocation status action - Choices: `drop`, `decrypt`
*/
unknownRevocationStatus?: pulumi.Input<string>;
/**
* Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
*/
unsupportedCipherSuites?: pulumi.Input<string>;
/**
* Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
*/
unsupportedProtocolVersions?: pulumi.Input<string>;
/**
* Untrusted certificate action - Choices: `drop`, `decrypt`
*/
untrustedCertificate?: pulumi.Input<string>;
/**
* List of url rules (applies when `mode` set to `security`)
*/
urlRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionUrlRule>[]>;
/**
* Use default CA certificate bundle
*/
useDefaultCaCertBundle?: pulumi.Input<boolean>;
/**
* The version of the object
*/
version?: pulumi.Input<number>;
}
/**
* The set of arguments for constructing a TlsSslDecryptionPolicyDefinition resource.
*/
export interface TlsSslDecryptionPolicyDefinitionArgs {
/**
* Certificate Lifetime(in Days)
*/
certificateLifetimeInDays?: pulumi.Input<number>;
/**
* Certificate revocation status - Choices: `ocsp`, `none`
*/
certificateRevocationStatus?: pulumi.Input<string>;
/**
* Default action (applies when `mode` set to `security`) - Choices: `noIntent`, `doNotDecrypt`, `decrypt`
*/
defaultAction?: pulumi.Input<string>;
/**
* The description of the policy definition.
*/
description: pulumi.Input<string>;
/**
* EC Key Type - Choices: `P256`, `P384`, `P521`
*/
ecKeyType?: pulumi.Input<string>;
/**
* Expired certificate action - Choices: `drop`, `decrypt`
*/
expiredCertificate?: pulumi.Input<string>;
/**
* Failure mode - Choices: `open`, `close`
*/
failureMode?: pulumi.Input<string>;
/**
* Minimal TLS Version - Choices: `TLSv1.0`, `TLSv1.1`, `TLSv1.2`
*/
minimalTlsVersion?: pulumi.Input<string>;
/**
* The policy mode - Choices: `security`, `unified`
*/
mode?: pulumi.Input<string>;
/**
* The name of the policy definition.
*/
name?: pulumi.Input<string>;
/**
* List of network rules (applies when `mode` set to `security`)
*/
networkRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionNetworkRule>[]>;
/**
* RSA key pair modules - Choices: `1024`, `2048`, `4096`
*/
rsaKeyPairModulus?: pulumi.Input<string>;
/**
* SSL decryption enabled
*/
sslDecryptionEnabled?: pulumi.Input<string>;
/**
* Unknown revocation status action - Choices: `drop`, `decrypt`
*/
unknownRevocationStatus?: pulumi.Input<string>;
/**
* Unsupported cipher suites action - Choices: `drop`, `no-decrypt`
*/
unsupportedCipherSuites?: pulumi.Input<string>;
/**
* Unsupported protocol versions action - Choices: `drop`, `no-decrypt`
*/
unsupportedProtocolVersions?: pulumi.Input<string>;
/**
* Untrusted certificate action - Choices: `drop`, `decrypt`
*/
untrustedCertificate?: pulumi.Input<string>;
/**
* List of url rules (applies when `mode` set to `security`)
*/
urlRules?: pulumi.Input<pulumi.Input<inputs.TlsSslDecryptionPolicyDefinitionUrlRule>[]>;
/**
* Use default CA certificate bundle
*/
useDefaultCaCertBundle?: pulumi.Input<boolean>;
}