58 lines
2.1 KiB
YAML
58 lines
2.1 KiB
YAML
$schema: "http://json-schema.org/draft-06/schema#"
|
|
|
|
title: networksecurity v1 AuthzPolicyAuthzRuleFromRequestSource export schema
|
|
description: A gcloud export/import command YAML validation schema.
|
|
type: object
|
|
additionalProperties: false
|
|
properties:
|
|
COMMENT:
|
|
type: object
|
|
description: User specified info ignored by gcloud import.
|
|
additionalProperties: false
|
|
properties:
|
|
template-id:
|
|
type: string
|
|
region:
|
|
type: string
|
|
description:
|
|
type: string
|
|
date:
|
|
type: string
|
|
version:
|
|
type: string
|
|
UNKNOWN:
|
|
type: array
|
|
description: Unknown API fields that cannot be imported.
|
|
items:
|
|
type: string
|
|
ipBlocks:
|
|
description: |-
|
|
A list of IP addresses or IP address ranges to match against the source IP
|
|
address of the request. Limited to 10 ip_blocks per Authorization Policy
|
|
type: array
|
|
items:
|
|
$ref: AuthzPolicyAuthzRuleIpBlock.yaml
|
|
principals:
|
|
description: |-
|
|
A list of identities derived from the client's certificate. This field
|
|
will not match on a request unless frontend mutual TLS is enabled for
|
|
the forwarding rule or Gateway and the client certificate has been
|
|
successfully validated by mTLS. Each identity is a string whose value
|
|
is matched against a list of URI SANs, DNS Name SANs, or the common
|
|
name in the client's certificate. A match happens when any principal
|
|
matches with the rule. Limited to 50 principals per Authorization
|
|
Policy for regional internal Application Load Balancers, regional
|
|
external Application Load Balancers, cross-region internal Application
|
|
Load Balancers, and Cloud Service Mesh. This field is not supported
|
|
for global external Application Load Balancers.
|
|
type: array
|
|
items:
|
|
$ref: AuthzPolicyAuthzRulePrincipal.yaml
|
|
resources:
|
|
description: |-
|
|
A list of resources to match against the resource of the source VM
|
|
of a request. Limited to 10 resources per Authorization Policy.
|
|
type: array
|
|
items:
|
|
$ref: AuthzPolicyAuthzRuleRequestResource.yaml
|