Skip to content

Commit

Permalink
Cleanup network access rule attributes
Browse files Browse the repository at this point in the history
  • Loading branch information
danischm committed Oct 10, 2023
1 parent c41805a commit 5ec24d1
Show file tree
Hide file tree
Showing 12 changed files with 299 additions and 203 deletions.
14 changes: 7 additions & 7 deletions docs/data-sources/network_access_authentication_rule.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,11 +52,11 @@ data "ise_network_access_authentication_rule" "example" {

Read-Only:

- `condition_attribute_name` (String) Dictionary attribute name
- `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `condition_dictionary_name` (String) Dictionary name
- `condition_dictionary_value` (String) Dictionary value
- `condition_id` (String) UUID for condition
- `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `condition_operator` (String) Equality operator
- `attribute_name` (String) Dictionary attribute name
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- `dictionary_name` (String) Dictionary name
- `dictionary_value` (String) Dictionary value
- `id` (String) UUID for condition
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `operator` (String) Equality operator
14 changes: 7 additions & 7 deletions docs/data-sources/network_access_authorization_rule.md
Original file line number Diff line number Diff line change
Expand Up @@ -50,11 +50,11 @@ data "ise_network_access_authorization_rule" "example" {

Read-Only:

- `condition_attribute_name` (String) Dictionary attribute name
- `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `condition_dictionary_name` (String) Dictionary name
- `condition_dictionary_value` (String) Dictionary value
- `condition_id` (String) UUID for condition
- `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `condition_operator` (String) Equality operator
- `attribute_name` (String) Dictionary attribute name
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
- `dictionary_name` (String) Dictionary name
- `dictionary_value` (String) Dictionary value
- `id` (String) UUID for condition
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `operator` (String) Equality operator
14 changes: 7 additions & 7 deletions docs/resources/network_access_authentication_rule.md
Original file line number Diff line number Diff line change
Expand Up @@ -79,13 +79,13 @@ Required:

Optional:

- `condition_attribute_name` (String) Dictionary attribute name
- `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `condition_dictionary_name` (String) Dictionary name
- `condition_dictionary_value` (String) Dictionary value
- `condition_id` (String) UUID for condition
- `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `condition_operator` (String) Equality operator
- `attribute_name` (String) Dictionary attribute name
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `dictionary_name` (String) Dictionary name
- `dictionary_value` (String) Dictionary value
- `id` (String) UUID for condition
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `operator` (String) Equality operator
- Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith`

## Import
Expand Down
14 changes: 7 additions & 7 deletions docs/resources/network_access_authorization_rule.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,13 +72,13 @@ Required:

Optional:

- `condition_attribute_name` (String) Dictionary attribute name
- `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `condition_dictionary_name` (String) Dictionary name
- `condition_dictionary_value` (String) Dictionary value
- `condition_id` (String) UUID for condition
- `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `condition_operator` (String) Equality operator
- `attribute_name` (String) Dictionary attribute name
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
- `dictionary_name` (String) Dictionary name
- `dictionary_value` (String) Dictionary value
- `id` (String) UUID for condition
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
- `operator` (String) Equality operator
- Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith`

## Import
Expand Down
82 changes: 65 additions & 17 deletions gen/definitions/network_access_authentication_rule.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,13 @@ attributes:
- model_name: conditionType
data_path: [rule, condition]
type: String
enum_values: [ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference]
enum_values:
[
ConditionAndBlock,
ConditionAttributes,
ConditionOrBlock,
ConditionReference,
]
description: Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
example: ConditionAttributes
minimum_test_value: '"ConditionReference"'
Expand Down Expand Up @@ -63,7 +69,7 @@ attributes:
data_path: [rule, condition]
tf_name: condition_attribute_value
type: String
description: Attribute value for condition. Value type is specified in dictionary object.
description: Attribute value for condition. Value type is specified in dictionary object.
example: All Locations
- model_name: dictionaryName
data_path: [rule, condition]
Expand All @@ -82,55 +88,96 @@ attributes:
data_path: [rule, condition]
tf_name: condition_operator
type: String
enum_values: [contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith]
enum_values:
[
contains,
endsWith,
equals,
greaterOrEquals,
greaterThan,
in,
ipEquals,
ipGreaterThan,
ipLessThan,
ipNotEquals,
lessOrEquals,
lessThan,
matches,
notContains,
notEndsWith,
notEquals,
notIn,
notStartsWith,
startsWith,
]
description: Equality operator
example: equals
- model_name: children
type: List
description: List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`.
exclude_test: true
data_path: [rule, condition]
data_path: [rule, condition]
attributes:
- model_name: conditionType
mandatory: true
type: String
enum_values: [ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference]
enum_values:
[
ConditionAndBlock,
ConditionAttributes,
ConditionOrBlock,
ConditionReference,
]
description: Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
example: ConditionAttributes
- model_name: id
tf_name: condition_id
type: String
description: UUID for condition
example: 12345678-f0e7-456b-a2d1-876543320123
- model_name: isNegate
tf_name: condition_is_negate
type: Bool
description: Indicates whereas this condition is in negate mode
example: false
- model_name: attributeName
tf_name: condition_attribute_name
type: String
description: Dictionary attribute name
example: Location
- model_name: attributeValue
tf_name: condition_attribute_value
type: String
description: Attribute value for condition. Value type is specified in dictionary object.
description: Attribute value for condition. Value type is specified in dictionary object.
example: All Locations
- model_name: dictionaryName
tf_name: condition_dictionary_name
type: String
description: Dictionary name
example: DEVICE
- model_name: dictionaryValue
tf_name: condition_dictionary_value
type: String
description: Dictionary value
example: abc
- model_name: operator
tf_name: condition_operator
type: String
enum_values: [contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith]
enum_values:
[
contains,
endsWith,
equals,
greaterOrEquals,
greaterThan,
in,
ipEquals,
ipGreaterThan,
ipLessThan,
ipNotEquals,
lessOrEquals,
lessThan,
matches,
notContains,
notEndsWith,
notEquals,
notIn,
notStartsWith,
startsWith,
]
description: Equality operator
example: equals
- model_name: identitySourceName
Expand All @@ -139,22 +186,23 @@ attributes:
example: Internal Endpoints
- model_name: ifAuthFail
type: String
enum_values: [REJECT, DROP , CONTINUE]
enum_values: [REJECT, DROP, CONTINUE]
mandatory: true
description: Action to perform when authentication fails such as Bad credentials, disabled user and so on
example: REJECT
- model_name: ifProcessFail
type: String
enum_values: [REJECT, DROP , CONTINUE]
enum_values: [REJECT, DROP, CONTINUE]
mandatory: true
description: Action to perform when ISE is uanble to access the identity database
example: DROP
- model_name: ifUserNotFound
type: String
enum_values: [REJECT, DROP , CONTINUE]
enum_values: [REJECT, DROP, CONTINUE]
mandatory: true
description: Action to perform when user is not found in any of identity stores
example: REJECT

test_prerequisites: |
resource "ise_network_access_policy_set" "test" {
name = "PolicySet1"
Expand Down
76 changes: 62 additions & 14 deletions gen/definitions/network_access_authorization_rule.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,13 @@ attributes:
- model_name: conditionType
data_path: [rule, condition]
type: String
enum_values: [ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference]
enum_values:
[
ConditionAndBlock,
ConditionAttributes,
ConditionOrBlock,
ConditionReference,
]
description: Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
example: ConditionAttributes
minimum_test_value: '"ConditionReference"'
Expand Down Expand Up @@ -63,7 +69,7 @@ attributes:
data_path: [rule, condition]
tf_name: condition_attribute_value
type: String
description: Attribute value for condition. Value type is specified in dictionary object.
description: Attribute value for condition. Value type is specified in dictionary object.
example: All Locations
- model_name: dictionaryName
data_path: [rule, condition]
Expand All @@ -82,55 +88,96 @@ attributes:
data_path: [rule, condition]
tf_name: condition_operator
type: String
enum_values: [contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith]
enum_values:
[
contains,
endsWith,
equals,
greaterOrEquals,
greaterThan,
in,
ipEquals,
ipGreaterThan,
ipLessThan,
ipNotEquals,
lessOrEquals,
lessThan,
matches,
notContains,
notEndsWith,
notEquals,
notIn,
notStartsWith,
startsWith,
]
description: Equality operator
example: equals
- model_name: children
type: List
description: List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`.
exclude_test: true
data_path: [rule, condition]
data_path: [rule, condition]
attributes:
- model_name: conditionType
mandatory: true
type: String
enum_values: [ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference]
enum_values:
[
ConditionAndBlock,
ConditionAttributes,
ConditionOrBlock,
ConditionReference,
]
description: Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
example: ConditionAttributes
- model_name: id
tf_name: condition_id
type: String
description: UUID for condition
example: 12345678-f0e7-456b-a2d1-876543320123
- model_name: isNegate
tf_name: condition_is_negate
type: Bool
description: Indicates whereas this condition is in negate mode
example: false
- model_name: attributeName
tf_name: condition_attribute_name
type: String
description: Dictionary attribute name
example: Location
- model_name: attributeValue
tf_name: condition_attribute_value
type: String
description: Attribute value for condition. Value type is specified in dictionary object.
description: Attribute value for condition. Value type is specified in dictionary object.
example: All Locations
- model_name: dictionaryName
tf_name: condition_dictionary_name
type: String
description: Dictionary name
example: DEVICE
- model_name: dictionaryValue
tf_name: condition_dictionary_value
type: String
description: Dictionary value
example: abc
- model_name: operator
tf_name: condition_operator
type: String
enum_values: [contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith]
enum_values:
[
contains,
endsWith,
equals,
greaterOrEquals,
greaterThan,
in,
ipEquals,
ipGreaterThan,
ipLessThan,
ipNotEquals,
lessOrEquals,
lessThan,
matches,
notContains,
notEndsWith,
notEquals,
notIn,
notStartsWith,
startsWith,
]
description: Equality operator
example: equals
- model_name: profile
Expand All @@ -142,6 +189,7 @@ attributes:
type: String
description: Security group used in authorization policies
example: BYOD

test_prerequisites: |
resource "ise_network_access_policy_set" "test" {
name = "PolicySet1"
Expand Down
Loading

0 comments on commit 5ec24d1

Please sign in to comment.