Device Settings Policy
Provides a Cloudflare Device Settings Policy resource. Device policies configure settings applied to WARP devices.
Example Usage
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.DeviceSettingsPolicy;
import com.pulumi.cloudflare.DeviceSettingsPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var developerWarpPolicy = new DeviceSettingsPolicy("developerWarpPolicy", DeviceSettingsPolicyArgs.builder()
.accountId("f037e56e89293a057740de681ac9abbe")
.allowModeSwitch(true)
.allowUpdates(true)
.allowedToLeave(true)
.autoConnect(0)
.captivePortal(5)
.default_(false)
.disableAutoFallback(true)
.enabled(true)
.excludeOfficeIps(false)
.match("any(identity.groups.name[*] in {\"Developers\"})")
.name("Developers WARP settings policy")
.precedence(10)
.serviceModeV2Mode("warp")
.serviceModeV2Port(3000)
.supportUrl("https://cloudflare.com")
.switchLocked(true)
.build());
}
}
Import
For default device settings policies you must use "default" as the policy ID.
$ pulumi import cloudflare:index/deviceSettingsPolicy:DeviceSettingsPolicy example <account_id>/<device_policy_id>
Properties
Whether to allow devices to leave the organization. Defaults to true
.
Whether to allow mode switch for this policy.
Whether to allow updates under this policy.
The amount of time in minutes to reconnect after having been disabled.
The captive portal value for this policy. Defaults to 180
.
Whether to disable auto fallback for this policy.
Whether to add Microsoft IPs to split tunnel exclusions.
The precedence of the policy. Lower values indicate higher precedence.
The service mode. Defaults to warp
.
The port to use for the proxy service mode. Required when using service_mode_v2_mode
.
The support URL that will be opened when sending feedback.
Enablement of the ZT client switch lock.