openstack_aggregateopenstack_application_credentialopenstack_availability_zoneopenstack_compute_imageopenstack_domainopenstack_fipopenstack_groupopenstack_hypervisoropenstack_keypairopenstack_networkopenstack_portopenstack_projectopenstack_roleopenstack_role_assignmentopenstack_routeropenstack_security_groupopenstack_security_group_ruleopenstack_serveropenstack_server_groupopenstack_snapshotopenstack_subnetopenstack_useropenstack_volumeopenstack_volume_type
Table: openstack_security_group_rule
A security group rule allows ingress or egress traffic to and from certain instances to a specified IP address or IP range.
Examples
Basic security group rule info
select id, description, ether_type, port_range_min, port_range_max, protocol, remote_ip_prefixfrom openstack_security_group_rule;
Security group rule by ID
select id, description, ether_type, port_range_min, port_range_max, protocol, remote_ip_prefixfrom openstack_security_group_rulewhere id = 'ef7884e6-9ee7-4547-932f-a65b4d1d5e8e';
All security group rules with TCP protocol
select id, description, ether_type, port_range_min, port_range_max, protocol, remote_ip_prefixfrom openstack_security_group_rulewhere protocol = 'tcp';
All IPv4 security group rules
select id, description, ether_type, port_range_min, port_range_max, protocol, remote_ip_prefixfrom openstack_security_group_rulewhere ether_type = 'IPv4';
All security group rules with specified port range
select id, description, ether_type, port_range_min, port_range_max, protocol, remote_ip_prefixfrom openstack_security_group_rulewhere port_range_min is not null;
Schema for openstack_security_group_rule
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form, e.g. connection_name. | |
description | text | Description of the rule. | |
direction | text | The direction in which the security group rule is applied. The only values allowed are 'ingress' or 'egress'. | |
ether_type | text | Must be IPv4 or IPv6, and addresses represented in CIDR must match the ingress or egress rules. | |
id | text | = | The UUID for the security group. |
port_range_max | bigint | The maximum port number in the range that is matched by the security group rule. | |
port_range_min | bigint | The minimum port number in the range that is matched by the security group rule. | |
project_id | text | ProjectID is the project owner of this security group rule. | |
protocol | text | The protocol that is matched by the security group rule. Valid values are 'tcp', 'udp', 'icmp' or an empty string. | |
remote_group_id | text | The remote group ID to be associated with this security group rule. You can specify either RemoteGroupID or RemoteIPPrefix. | |
remote_ip_prefix | text | The remote IP prefix to be associated with this security group rule. You can specify either RemoteGroupID or RemoteIPPrefix. This attribute matches the specified IP prefix as the source IP address of the IP packet. | |
sec_group_id | text | The security group ID to associate with this security group rule. | |
tenant_id | text | TenantID is the project owner of this security group rule. |