UNPKG

@pulumi/sdwan

Version:

A Pulumi package for managing resources on Cisco Catalyst SD-WAN.. Based on terraform-provider-sdwan: version v0.4.1

340 lines (339 loc) 11.2 kB
import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * This resource can manage a Cisco Security feature template. * - Minimum SD-WAN Manager version: `15.0.0` * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as sdwan from "@pulumi/sdwan"; * * const example = new sdwan.CiscoSecurityFeatureTemplate("example", { * name: "Example", * description: "My Example", * deviceTypes: ["vedge-C8000V"], * rekeyInterval: 86400, * replayWindow: "64", * extendedArWindow: 256, * authenticationTypes: ["none"], * integrityTypes: ["none"], * pairwiseKeying: true, * keychains: [{ * name: "CHAIN1", * keyId: 1, * }], * keys: [{ * id: "1", * chainName: "CHAIN1", * sendId: 0, * receiveId: 0, * cryptoAlgorithm: "hmac-sha-256", * keyString: "abc123", * sendLifetimeLocal: true, * sendLifetimeStartTime: "2022-12-31T23:59", * sendLifetimeEndTimeFormat: "infinite", * sendLifetimeDuration: 1000, * sendLifetimeEndTime: "2032-12-31T23:59", * sendLifetimeInfinite: true, * acceptLifetimeLocal: true, * acceptLifetimeStartTime: "2022-12-31T23:59", * acceptLifetimeEndTimeFormat: "infinite", * acceptLifetimeDuration: 1000, * acceptLifetimeEndTime: "2032-12-31T23:59", * acceptLifetimeInfinite: true, * includeTcpOptions: false, * acceptAoMismatch: true, * }], * }); * ``` * * ## Import * * The `pulumi import` command can be used, for example: * * ```sh * $ pulumi import sdwan:index/ciscoSecurityFeatureTemplate:CiscoSecurityFeatureTemplate example "f6b2c44c-693c-4763-b010-895aa3d236bd" * ``` */ export declare class CiscoSecurityFeatureTemplate extends pulumi.CustomResource { /** * Get an existing CiscoSecurityFeatureTemplate resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CiscoSecurityFeatureTemplateState, opts?: pulumi.CustomResourceOptions): CiscoSecurityFeatureTemplate; /** * Returns true if the given object is an instance of CiscoSecurityFeatureTemplate. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is CiscoSecurityFeatureTemplate; /** * Variable name */ readonly authenticationTypeVariable: pulumi.Output<string | undefined>; /** * Set the authentication type for DTLS connections */ readonly authenticationTypes: pulumi.Output<string[] | undefined>; /** * The description of the feature template */ readonly description: pulumi.Output<string>; /** * List of supported device types * - Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T` */ readonly deviceTypes: pulumi.Output<string[]>; /** * Extended Anti-Replay Window * - Range: `10`-`2048` * - Default value: `256` */ readonly extendedArWindow: pulumi.Output<number | undefined>; /** * Variable name */ readonly extendedArWindowVariable: pulumi.Output<string | undefined>; /** * Variable name */ readonly integrityTypeVariable: pulumi.Output<string | undefined>; /** * Set the authentication type for DTLS connections */ readonly integrityTypes: pulumi.Output<string[] | undefined>; /** * Configure a Keychain */ readonly keychains: pulumi.Output<outputs.CiscoSecurityFeatureTemplateKeychain[] | undefined>; /** * Configure a Key */ readonly keys: pulumi.Output<outputs.CiscoSecurityFeatureTemplateKey[] | undefined>; /** * The name of the feature template */ readonly name: pulumi.Output<string>; /** * Enable or disable IPsec pairwise-keying * - Default value: `false` */ readonly pairwiseKeying: pulumi.Output<boolean | undefined>; /** * Variable name */ readonly pairwiseKeyingVariable: pulumi.Output<string | undefined>; /** * Set how often to change the AES key for DTLS connections * - Range: `10`-`1209600` * - Default value: `86400` */ readonly rekeyInterval: pulumi.Output<number | undefined>; /** * Variable name */ readonly rekeyIntervalVariable: pulumi.Output<string | undefined>; /** * Set the sliding replay window size * - Choices: `64`, `128`, `256`, `512`, `1024`, `2048`, `4096`, `8192` * - Default value: `512` */ readonly replayWindow: pulumi.Output<string | undefined>; /** * Variable name */ readonly replayWindowVariable: pulumi.Output<string | undefined>; /** * The template type */ readonly templateType: pulumi.Output<string>; /** * The version of the feature template */ readonly version: pulumi.Output<number>; /** * Create a CiscoSecurityFeatureTemplate resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: CiscoSecurityFeatureTemplateArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering CiscoSecurityFeatureTemplate resources. */ export interface CiscoSecurityFeatureTemplateState { /** * Variable name */ authenticationTypeVariable?: pulumi.Input<string>; /** * Set the authentication type for DTLS connections */ authenticationTypes?: pulumi.Input<pulumi.Input<string>[]>; /** * The description of the feature template */ description?: pulumi.Input<string>; /** * List of supported device types * - Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T` */ deviceTypes?: pulumi.Input<pulumi.Input<string>[]>; /** * Extended Anti-Replay Window * - Range: `10`-`2048` * - Default value: `256` */ extendedArWindow?: pulumi.Input<number>; /** * Variable name */ extendedArWindowVariable?: pulumi.Input<string>; /** * Variable name */ integrityTypeVariable?: pulumi.Input<string>; /** * Set the authentication type for DTLS connections */ integrityTypes?: pulumi.Input<pulumi.Input<string>[]>; /** * Configure a Keychain */ keychains?: pulumi.Input<pulumi.Input<inputs.CiscoSecurityFeatureTemplateKeychain>[]>; /** * Configure a Key */ keys?: pulumi.Input<pulumi.Input<inputs.CiscoSecurityFeatureTemplateKey>[]>; /** * The name of the feature template */ name?: pulumi.Input<string>; /** * Enable or disable IPsec pairwise-keying * - Default value: `false` */ pairwiseKeying?: pulumi.Input<boolean>; /** * Variable name */ pairwiseKeyingVariable?: pulumi.Input<string>; /** * Set how often to change the AES key for DTLS connections * - Range: `10`-`1209600` * - Default value: `86400` */ rekeyInterval?: pulumi.Input<number>; /** * Variable name */ rekeyIntervalVariable?: pulumi.Input<string>; /** * Set the sliding replay window size * - Choices: `64`, `128`, `256`, `512`, `1024`, `2048`, `4096`, `8192` * - Default value: `512` */ replayWindow?: pulumi.Input<string>; /** * Variable name */ replayWindowVariable?: pulumi.Input<string>; /** * The template type */ templateType?: pulumi.Input<string>; /** * The version of the feature template */ version?: pulumi.Input<number>; } /** * The set of arguments for constructing a CiscoSecurityFeatureTemplate resource. */ export interface CiscoSecurityFeatureTemplateArgs { /** * Variable name */ authenticationTypeVariable?: pulumi.Input<string>; /** * Set the authentication type for DTLS connections */ authenticationTypes?: pulumi.Input<pulumi.Input<string>[]>; /** * The description of the feature template */ description: pulumi.Input<string>; /** * List of supported device types * - Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T` */ deviceTypes: pulumi.Input<pulumi.Input<string>[]>; /** * Extended Anti-Replay Window * - Range: `10`-`2048` * - Default value: `256` */ extendedArWindow?: pulumi.Input<number>; /** * Variable name */ extendedArWindowVariable?: pulumi.Input<string>; /** * Variable name */ integrityTypeVariable?: pulumi.Input<string>; /** * Set the authentication type for DTLS connections */ integrityTypes?: pulumi.Input<pulumi.Input<string>[]>; /** * Configure a Keychain */ keychains?: pulumi.Input<pulumi.Input<inputs.CiscoSecurityFeatureTemplateKeychain>[]>; /** * Configure a Key */ keys?: pulumi.Input<pulumi.Input<inputs.CiscoSecurityFeatureTemplateKey>[]>; /** * The name of the feature template */ name?: pulumi.Input<string>; /** * Enable or disable IPsec pairwise-keying * - Default value: `false` */ pairwiseKeying?: pulumi.Input<boolean>; /** * Variable name */ pairwiseKeyingVariable?: pulumi.Input<string>; /** * Set how often to change the AES key for DTLS connections * - Range: `10`-`1209600` * - Default value: `86400` */ rekeyInterval?: pulumi.Input<number>; /** * Variable name */ rekeyIntervalVariable?: pulumi.Input<string>; /** * Set the sliding replay window size * - Choices: `64`, `128`, `256`, `512`, `1024`, `2048`, `4096`, `8192` * - Default value: `512` */ replayWindow?: pulumi.Input<string>; /** * Variable name */ replayWindowVariable?: pulumi.Input<string>; }