Proxmox VE GetFirewallRules

Proxmox VE GetFirewallRules

Certified

Get firewall rules on a Proxmox VE node

Retrieves firewall rules from /nodes/{node}/firewall/rules. Optionally scope to a specific VM or container by providing a vmId. When vmId is set, reads /nodes/{node}/qemu/{vmid}/firewall/rules (VM) or /nodes/{node}/lxc/{vmid}/firewall/rules (container) based on resourceType.

yaml
type: io.kestra.plugin.proxmox.network.GetFirewallRules

Get node-level firewall rules

yaml
id: get_firewall_rules
namespace: company.team

tasks:
  - id: rules
    type: io.kestra.plugin.proxmox.network.GetFirewallRules
    host: "{{ secret('PROXMOX_HOST') }}"
    username: "{{ secret('PROXMOX_USERNAME') }}"
    password: "{{ secret('PROXMOX_PASSWORD') }}"
    node: pve

Get VM-level firewall rules

yaml
id: get_vm_firewall_rules
namespace: company.team

tasks:
  - id: rules
    type: io.kestra.plugin.proxmox.network.GetFirewallRules
    host: "{{ secret('PROXMOX_HOST') }}"
    username: "{{ secret('PROXMOX_USERNAME') }}"
    password: "{{ secret('PROXMOX_PASSWORD') }}"
    node: pve
    vmId: "100"
    resourceType: vm
Properties

Proxmox host

Hostname or IP address of the Proxmox VE node (no scheme, no port).

Proxmox node name

Name of the cluster node that scopes all API calls (e.g. pve, node1).

Password

Password for ticket-based authentication.

Reference (ref) of the pluginDefaults to apply to this task.

Default8006

API port

Defaults to 8006.

Possible Values
VMCONTAINER

Resource type

Resource type: vm or container.

API token ID

Full token identifier in the form user@realm!tokenname (e.g. root@pam!mytoken). Use together with tokenSecret.

API token secret

The UUID secret associated with the token ID.

Username

PAM or PVE user in the form user@realm (e.g. root@pam). Required when using ticket-based auth.

Defaulttrue

Verify SSL

Validate the server TLS certificate. Defaults to true; set to false only for trusted networks with self-signed Proxmox certificates.

VM or container ID

When set, retrieves firewall rules scoped to this VM or container instead of the node.