community.general.clc_firewall_policy (8.5.0) — module

Install collection

Install with ansible-galaxy collection install community.general:==8.5.0

Add to requirements.yml

  collections:
    - name: community.general
      version: 8.5.0

Description

Create or delete or update firewall policies on Centurylink Cloud

Requirements

• python = 2.7
• requests >= 2.5.0
• clc-sdk

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

---
- name: Create Firewall Policy
  hosts: localhost
  gather_facts: false
  connection: local
  tasks:
    - name: Create / Verify an Firewall Policy at CenturyLink Cloud
      clc_firewall:
        source_account_alias: WFAD
        location: VA1
        state: present
        source: 10.128.216.0/24
        destination: 10.128.216.0/24
        ports: Any
        destination_account_alias: WFAD

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Delete Firewall Policy
  hosts: localhost
  gather_facts: false
  connection: local
  tasks:
    - name: Delete an Firewall Policy at CenturyLink Cloud
      clc_firewall:
        source_account_alias: WFAD
        location: VA1
        state: absent
        firewall_policy_id: c62105233d7a4231bd2e91b9c791e43e1

Inputs

    
wait:
    default: 'True'
    description:
    - Whether to wait for the provisioning tasks to finish before returning.
    type: str

ports:
    description:
    - The list of ports associated with the policy. TCP and UDP can take in single ports
      or port ranges.
    - 'Example: V([''any'', ''icmp'', ''TCP/123'', ''UDP/123'', ''TCP/123-456'', ''UDP/123-456'']).'
    elements: str
    type: list

state:
    choices:
    - present
    - absent
    default: present
    description:
    - Whether to create or delete the firewall policy
    type: str

source:
    description:
    - The list  of source addresses for traffic on the originating firewall. This is required
      when state is 'present'
    elements: str
    type: list

enabled:
    choices:
    - 'True'
    - 'False'
    default: 'True'
    description:
    - Whether the firewall policy is enabled or disabled
    type: str

location:
    description:
    - Target datacenter for the firewall policy
    required: true
    type: str

destination:
    description:
    - The list of destination addresses for traffic on the terminating firewall. This
      is required when state is 'present'
    elements: str
    type: list

firewall_policy_id:
    description:
    - Id of the firewall policy. This is required to update or delete an existing firewall
      policy
    type: str

source_account_alias:
    description:
    - CLC alias for the source account
    required: true
    type: str

destination_account_alias:
    description:
    - CLC alias for the destination account
    type: str

Outputs

firewall_policy:
  description: The fire wall policy information
  returned: success
  sample:
    destination:
    - 10.1.1.0/24
    - 10.2.2.0/24
    destinationAccount: wfad
    enabled: true
    id: fc36f1bfd47242e488a9c44346438c05
    links:
    - href: http://api.ctl.io/v2-experimental/firewallPolicies/wfad/uc1/fc36f1bfd47242e488a9c44346438c05
      rel: self
      verbs:
      - GET
      - PUT
      - DELETE
    ports:
    - any
    source:
    - 10.1.1.0/24
    - 10.2.2.0/24
    status: active
  type: dict
firewall_policy_id:
  description: The fire wall policy id
  returned: success
  sample: fc36f1bfd47242e488a9c44346438c05
  type: str