@pulumi/juniper-mist
Version:
A Pulumi package for creating and managing Juniper Mist resources.
197 lines • 6.9 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
* This resource manages the NAC Rules (Auth Policies).
*
* A NAC Rule defines a list of criteria (NAC Tag) the network client must match to execute the Rule, an action (Allow/Deny)and a list of RADIUS Attributes (NAC Tags) to return
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as junipermist from "@pulumi/juniper-mist";
*
* const nacruleOne = new junipermist.org.Nacrule("nacrule_one", {
* name: "rule_one",
* action: "allow",
* orgId: terraformTest.id,
* matching: {
* portTypes: ["wired"],
* authType: "mab",
* nactags: ["c055c60b-351a-4311-8ee5-9b7be5e5f902"],
* },
* applyTags: [
* "61c11327-5e1b-40ed-bbbf-5e95642c4f59",
* "3f292454-ac5f-4a36-9aff-d0518d90b47a",
* ],
* enabled: true,
* order: 9,
* });
* ```
*
* ## Import
*
* Using `pulumi import`, import `junipermist.org.Nacrule` with:
* NAC Rule can be imported by specifying the orgId and the nacruleId
*
* ```sh
* $ pulumi import junipermist:org/nacrule:Nacrule nacrule_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
* ```
*/
export declare class Nacrule extends pulumi.CustomResource {
/**
* Get an existing Nacrule resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NacruleState, opts?: pulumi.CustomResourceOptions): Nacrule;
/**
* Returns true if the given object is an instance of Nacrule. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is Nacrule;
/**
* Allow or block decision applied when the NAC rule matches
*/
readonly action: pulumi.Output<string>;
/**
* NAC tag IDs to include in the Access-Accept when the rule allows access
*/
readonly applyTags: pulumi.Output<string[]>;
/**
* Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
*/
readonly dryRun: pulumi.Output<boolean | undefined>;
/**
* Whether the NAC rule is evaluated during policy matching
*/
readonly enabled: pulumi.Output<boolean>;
/**
* Guest portal authorization state condition for the rule
*/
readonly guestAuthState: pulumi.Output<string | undefined>;
/**
* Criteria that must match for the NAC rule to apply
*/
readonly matching: pulumi.Output<outputs.org.NacruleMatching | undefined>;
/**
* Human-readable name of the NAC rule
*/
readonly name: pulumi.Output<string>;
/**
* Criteria that must not match for the NAC rule to apply
*/
readonly notMatching: pulumi.Output<outputs.org.NacruleNotMatching | undefined>;
/**
* Rule priority; lower values are evaluated with higher priority
*/
readonly order: pulumi.Output<number>;
/**
* Org identifier that owns the NAC rule
*/
readonly orgId: pulumi.Output<string>;
/**
* Create a Nacrule resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: NacruleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering Nacrule resources.
*/
export interface NacruleState {
/**
* Allow or block decision applied when the NAC rule matches
*/
action?: pulumi.Input<string | undefined>;
/**
* NAC tag IDs to include in the Access-Accept when the rule allows access
*/
applyTags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
*/
dryRun?: pulumi.Input<boolean | undefined>;
/**
* Whether the NAC rule is evaluated during policy matching
*/
enabled?: pulumi.Input<boolean | undefined>;
/**
* Guest portal authorization state condition for the rule
*/
guestAuthState?: pulumi.Input<string | undefined>;
/**
* Criteria that must match for the NAC rule to apply
*/
matching?: pulumi.Input<inputs.org.NacruleMatching | undefined>;
/**
* Human-readable name of the NAC rule
*/
name?: pulumi.Input<string | undefined>;
/**
* Criteria that must not match for the NAC rule to apply
*/
notMatching?: pulumi.Input<inputs.org.NacruleNotMatching | undefined>;
/**
* Rule priority; lower values are evaluated with higher priority
*/
order?: pulumi.Input<number | undefined>;
/**
* Org identifier that owns the NAC rule
*/
orgId?: pulumi.Input<string | undefined>;
}
/**
* The set of arguments for constructing a Nacrule resource.
*/
export interface NacruleArgs {
/**
* Allow or block decision applied when the NAC rule matches
*/
action: pulumi.Input<string>;
/**
* NAC tag IDs to include in the Access-Accept when the rule allows access
*/
applyTags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
*/
dryRun?: pulumi.Input<boolean | undefined>;
/**
* Whether the NAC rule is evaluated during policy matching
*/
enabled?: pulumi.Input<boolean | undefined>;
/**
* Guest portal authorization state condition for the rule
*/
guestAuthState?: pulumi.Input<string | undefined>;
/**
* Criteria that must match for the NAC rule to apply
*/
matching?: pulumi.Input<inputs.org.NacruleMatching | undefined>;
/**
* Human-readable name of the NAC rule
*/
name?: pulumi.Input<string | undefined>;
/**
* Criteria that must not match for the NAC rule to apply
*/
notMatching?: pulumi.Input<inputs.org.NacruleNotMatching | undefined>;
/**
* Rule priority; lower values are evaluated with higher priority
*/
order: pulumi.Input<number>;
/**
* Org identifier that owns the NAC rule
*/
orgId: pulumi.Input<string>;
}
//# sourceMappingURL=nacrule.d.ts.map