-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add network access authorization exception rule resource
- Loading branch information
Showing
24 changed files
with
1,999 additions
and
19 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
78 changes: 78 additions & 0 deletions
78
docs/data-sources/network_access_authorization_exception_rule.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,78 @@ | ||
| --- | ||
| # generated by https://github.com/hashicorp/terraform-plugin-docs | ||
| page_title: "ise_network_access_authorization_exception_rule Data Source - terraform-provider-ise" | ||
| subcategory: "Policy" | ||
| description: |- | ||
| This data source can read the Network Access Authorization Exception Rule. | ||
| --- | ||
|
|
||
| # ise_network_access_authorization_exception_rule (Data Source) | ||
|
|
||
| This data source can read the Network Access Authorization Exception Rule. | ||
|
|
||
| ## Example Usage | ||
|
|
||
| ```terraform | ||
| data "ise_network_access_authorization_exception_rule" "example" { | ||
| id = "76d24097-41c4-4558-a4d0-a8c07ac08470" | ||
| policy_set_id = "d82952cb-b901-4b09-b363-5ebf39bdbaf9" | ||
| } | ||
| ``` | ||
|
|
||
| <!-- schema generated by tfplugindocs --> | ||
| ## Schema | ||
|
|
||
| ### Required | ||
|
|
||
| - `policy_set_id` (String) Policy set ID | ||
|
|
||
| ### Optional | ||
|
|
||
| - `id` (String) The id of the object | ||
| - `name` (String) Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses] | ||
|
|
||
| ### Read-Only | ||
|
|
||
| - `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children)) | ||
| - `condition_attribute_name` (String) Dictionary attribute name | ||
| - `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object. | ||
| - `condition_dictionary_name` (String) Dictionary name | ||
| - `condition_dictionary_value` (String) Dictionary value | ||
| - `condition_id` (String) UUID for condition | ||
| - `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode | ||
| - `condition_operator` (String) Equality operator | ||
| - `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. | ||
| - `default` (Boolean) Indicates if this rule is the default one | ||
| - `profiles` (List of String) The authorization profile(s) | ||
| - `rank` (Number) The rank (priority) in relation to other rules. Lower rank is higher priority. | ||
| - `security_group` (String) Security group used in authorization policies | ||
| - `state` (String) The state that the rule is in. A disabled rule cannot be matched. | ||
|
|
||
| <a id="nestedatt--children"></a> | ||
| ### Nested Schema for `children` | ||
|
|
||
| Read-Only: | ||
|
|
||
| - `attribute_name` (String) Dictionary attribute name | ||
| - `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object. | ||
| - `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children--children)) | ||
| - `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. | ||
| - `dictionary_name` (String) Dictionary name | ||
| - `dictionary_value` (String) Dictionary value | ||
| - `id` (String) UUID for condition | ||
| - `is_negate` (Boolean) Indicates whereas this condition is in negate mode | ||
| - `operator` (String) Equality operator | ||
|
|
||
| <a id="nestedatt--children--children"></a> | ||
| ### Nested Schema for `children.children` | ||
|
|
||
| Read-Only: | ||
|
|
||
| - `attribute_name` (String) Dictionary attribute name | ||
| - `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object. | ||
| - `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. | ||
| - `dictionary_name` (String) Dictionary name | ||
| - `dictionary_value` (String) Dictionary value | ||
| - `id` (String) UUID for condition | ||
| - `is_negate` (Boolean) Indicates whereas this condition is in negate mode | ||
| - `operator` (String) Equality operator |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
110 changes: 110 additions & 0 deletions
110
docs/resources/network_access_authorization_exception_rule.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,110 @@ | ||
| --- | ||
| # generated by https://github.com/hashicorp/terraform-plugin-docs | ||
| page_title: "ise_network_access_authorization_exception_rule Resource - terraform-provider-ise" | ||
| subcategory: "Policy" | ||
| description: |- | ||
| This resource can manage a Network Access Authorization Exception Rule. | ||
| --- | ||
|
|
||
| # ise_network_access_authorization_exception_rule (Resource) | ||
|
|
||
| This resource can manage a Network Access Authorization Exception Rule. | ||
|
|
||
| ## Example Usage | ||
|
|
||
| ```terraform | ||
| resource "ise_network_access_authorization_exception_rule" "example" { | ||
| policy_set_id = "d82952cb-b901-4b09-b363-5ebf39bdbaf9" | ||
| name = "Rule1" | ||
| default = false | ||
| rank = 0 | ||
| state = "enabled" | ||
| condition_type = "ConditionAttributes" | ||
| condition_is_negate = false | ||
| condition_attribute_name = "Location" | ||
| condition_attribute_value = "All Locations" | ||
| condition_dictionary_name = "DEVICE" | ||
| condition_operator = "equals" | ||
| profiles = ["PermitAccess"] | ||
| security_group = "BYOD" | ||
| } | ||
| ``` | ||
|
|
||
| <!-- schema generated by tfplugindocs --> | ||
| ## Schema | ||
|
|
||
| ### Required | ||
|
|
||
| - `name` (String) Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses] | ||
| - `policy_set_id` (String) Policy set ID | ||
|
|
||
| ### Optional | ||
|
|
||
| - `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children)) | ||
| - `condition_attribute_name` (String) Dictionary attribute name | ||
| - `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object. | ||
| - `condition_dictionary_name` (String) Dictionary name | ||
| - `condition_dictionary_value` (String) Dictionary value | ||
| - `condition_id` (String) UUID for condition | ||
| - `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode | ||
| - `condition_operator` (String) Equality operator | ||
| - Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith` | ||
| - `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. | ||
| - Choices: `ConditionAndBlock`, `ConditionAttributes`, `ConditionOrBlock`, `ConditionReference` | ||
| - `default` (Boolean) Indicates if this rule is the default one | ||
| - `profiles` (List of String) The authorization profile(s) | ||
| - `rank` (Number) The rank (priority) in relation to other rules. Lower rank is higher priority. | ||
| - `security_group` (String) Security group used in authorization policies | ||
| - `state` (String) The state that the rule is in. A disabled rule cannot be matched. | ||
| - Choices: `disabled`, `enabled`, `monitor` | ||
|
|
||
| ### Read-Only | ||
|
|
||
| - `id` (String) The id of the object | ||
|
|
||
| <a id="nestedatt--children"></a> | ||
| ### Nested Schema for `children` | ||
|
|
||
| Required: | ||
|
|
||
| - `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. | ||
| - Choices: `ConditionAndBlock`, `ConditionAttributes`, `ConditionOrBlock`, `ConditionReference` | ||
|
|
||
| Optional: | ||
|
|
||
| - `attribute_name` (String) Dictionary attribute name | ||
| - `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object. | ||
| - `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children--children)) | ||
| - `dictionary_name` (String) Dictionary name | ||
| - `dictionary_value` (String) Dictionary value | ||
| - `id` (String) UUID for condition | ||
| - `is_negate` (Boolean) Indicates whereas this condition is in negate mode | ||
| - `operator` (String) Equality operator | ||
| - Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith` | ||
|
|
||
| <a id="nestedatt--children--children"></a> | ||
| ### Nested Schema for `children.children` | ||
|
|
||
| Required: | ||
|
|
||
| - `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. | ||
| - Choices: `ConditionAndBlock`, `ConditionAttributes`, `ConditionOrBlock`, `ConditionReference` | ||
|
|
||
| Optional: | ||
|
|
||
| - `attribute_name` (String) Dictionary attribute name | ||
| - `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object. | ||
| - `dictionary_name` (String) Dictionary name | ||
| - `dictionary_value` (String) Dictionary value | ||
| - `id` (String) UUID for condition | ||
| - `is_negate` (Boolean) Indicates whereas this condition is in negate mode | ||
| - `operator` (String) Equality operator | ||
| - Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith` | ||
|
|
||
| ## Import | ||
|
|
||
| Import is supported using the following syntax: | ||
|
|
||
| ```shell | ||
| terraform import ise_network_access_authorization_exception_rule.example "76d24097-41c4-4558-a4d0-a8c07ac08470" | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
4 changes: 4 additions & 0 deletions
4
examples/data-sources/ise_network_access_authorization_exception_rule/data-source.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| data "ise_network_access_authorization_exception_rule" "example" { | ||
| id = "76d24097-41c4-4558-a4d0-a8c07ac08470" | ||
| policy_set_id = "d82952cb-b901-4b09-b363-5ebf39bdbaf9" | ||
| } |
1 change: 1 addition & 0 deletions
1
examples/resources/ise_network_access_authorization_exception_rule/import.sh
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| terraform import ise_network_access_authorization_exception_rule.example "76d24097-41c4-4558-a4d0-a8c07ac08470" |
15 changes: 15 additions & 0 deletions
15
examples/resources/ise_network_access_authorization_exception_rule/resource.tf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| resource "ise_network_access_authorization_exception_rule" "example" { | ||
| policy_set_id = "d82952cb-b901-4b09-b363-5ebf39bdbaf9" | ||
| name = "Rule1" | ||
| default = false | ||
| rank = 0 | ||
| state = "enabled" | ||
| condition_type = "ConditionAttributes" | ||
| condition_is_negate = false | ||
| condition_attribute_name = "Location" | ||
| condition_attribute_value = "All Locations" | ||
| condition_dictionary_name = "DEVICE" | ||
| condition_operator = "equals" | ||
| profiles = ["PermitAccess"] | ||
| security_group = "BYOD" | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.