Skip to content

Commit dd3eaa1

Browse files
danischmdanischm
committed
Add network access authorization global exception rule resource
1 parent 87f0271 commit dd3eaa1

15 files changed

+1918
-0
lines changed

‎CHANGELOG.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@
1212
- Add `ise_device_admin_authorization_global_exception_rule` resource and data source
1313
- BREAKING CHANGE: Rename `profile` attribute to `profiles` of `ise_network_access_authorization_rule` resource and data source
1414
- Add `ise_network_access_authorization_exception_rule` resource and data source
15+
- Add `ise_network_access_authorization_global_exception_rule` resource and data source
1516

1617
## 0.1.5
1718

‎docs/data-sources/network_access_authorization_global_exception_rule.md‎

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "ise_network_access_authorization_global_exception_rule Data Source - terraform-provider-ise"
4+
subcategory: "Policy"
5+
description: |-
6+
This data source can read the Network Access Authorization Global Exception Rule.
7+
---
8+
9+
# ise_network_access_authorization_global_exception_rule (Data Source)
10+
11+
This data source can read the Network Access Authorization Global Exception Rule.
12+
13+
## Example Usage
14+
15+
```terraform
16+
data "ise_network_access_authorization_global_exception_rule" "example" {
17+
id = "76d24097-41c4-4558-a4d0-a8c07ac08470"
18+
}
19+
```
20+
21+
<!-- schema generated by tfplugindocs -->
22+
## Schema
23+
24+
### Optional
25+
26+
- `id` (String) The id of the object
27+
- `name` (String) Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
28+
29+
### Read-Only
30+
31+
- `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children))
32+
- `condition_attribute_name` (String) Dictionary attribute name
33+
- `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
34+
- `condition_dictionary_name` (String) Dictionary name
35+
- `condition_dictionary_value` (String) Dictionary value
36+
- `condition_id` (String) UUID for condition
37+
- `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode
38+
- `condition_operator` (String) Equality operator
39+
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
40+
- `default` (Boolean) Indicates if this rule is the default one
41+
- `profiles` (List of String) The authorization profile(s)
42+
- `rank` (Number) The rank (priority) in relation to other rules. Lower rank is higher priority.
43+
- `security_group` (String) Security group used in authorization policies
44+
- `state` (String) The state that the rule is in. A disabled rule cannot be matched.
45+
46+
<a id="nestedatt--children"></a>
47+
### Nested Schema for `children`
48+
49+
Read-Only:
50+
51+
- `attribute_name` (String) Dictionary attribute name
52+
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
53+
- `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children--children))
54+
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
55+
- `dictionary_name` (String) Dictionary name
56+
- `dictionary_value` (String) Dictionary value
57+
- `id` (String) UUID for condition
58+
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
59+
- `operator` (String) Equality operator
60+
61+
<a id="nestedatt--children--children"></a>
62+
### Nested Schema for `children.children`
63+
64+
Read-Only:
65+
66+
- `attribute_name` (String) Dictionary attribute name
67+
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
68+
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
69+
- `dictionary_name` (String) Dictionary name
70+
- `dictionary_value` (String) Dictionary value
71+
- `id` (String) UUID for condition
72+
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
73+
- `operator` (String) Equality operator

‎docs/guides/changelog.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ description: |-
2121
- Add `ise_device_admin_authorization_global_exception_rule` resource and data source
2222
- BREAKING CHANGE: Rename `profile` attribute to `profiles` of `ise_network_access_authorization_rule` resource and data source
2323
- Add `ise_network_access_authorization_exception_rule` resource and data source
24+
- Add `ise_network_access_authorization_global_exception_rule` resource and data source
2425

2526
## 0.1.5
2627

‎docs/resources/network_access_authorization_global_exception_rule.md‎

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
---
2+
# generated by https://github.com/hashicorp/terraform-plugin-docs
3+
page_title: "ise_network_access_authorization_global_exception_rule Resource - terraform-provider-ise"
4+
subcategory: "Policy"
5+
description: |-
6+
This resource can manage a Network Access Authorization Global Exception Rule.
7+
---
8+
9+
# ise_network_access_authorization_global_exception_rule (Resource)
10+
11+
This resource can manage a Network Access Authorization Global Exception Rule.
12+
13+
## Example Usage
14+
15+
```terraform
16+
resource "ise_network_access_authorization_global_exception_rule" "example" {
17+
name = "Rule1"
18+
default = false
19+
rank = 0
20+
state = "enabled"
21+
condition_type = "ConditionAttributes"
22+
condition_is_negate = false
23+
condition_attribute_name = "Location"
24+
condition_attribute_value = "All Locations"
25+
condition_dictionary_name = "DEVICE"
26+
condition_operator = "equals"
27+
profiles = ["PermitAccess"]
28+
security_group = "BYOD"
29+
}
30+
```
31+
32+
<!-- schema generated by tfplugindocs -->
33+
## Schema
34+
35+
### Required
36+
37+
- `name` (String) Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
38+
39+
### Optional
40+
41+
- `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children))
42+
- `condition_attribute_name` (String) Dictionary attribute name
43+
- `condition_attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
44+
- `condition_dictionary_name` (String) Dictionary name
45+
- `condition_dictionary_value` (String) Dictionary value
46+
- `condition_id` (String) UUID for condition
47+
- `condition_is_negate` (Boolean) Indicates whereas this condition is in negate mode
48+
- `condition_operator` (String) Equality operator
49+
- Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith`
50+
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
51+
- Choices: `ConditionAndBlock`, `ConditionAttributes`, `ConditionOrBlock`, `ConditionReference`
52+
- `default` (Boolean) Indicates if this rule is the default one
53+
- `profiles` (List of String) The authorization profile(s)
54+
- `rank` (Number) The rank (priority) in relation to other rules. Lower rank is higher priority.
55+
- `security_group` (String) Security group used in authorization policies
56+
- `state` (String) The state that the rule is in. A disabled rule cannot be matched.
57+
- Choices: `disabled`, `enabled`, `monitor`
58+
59+
### Read-Only
60+
61+
- `id` (String) The id of the object
62+
63+
<a id="nestedatt--children"></a>
64+
### Nested Schema for `children`
65+
66+
Required:
67+
68+
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
69+
- Choices: `ConditionAndBlock`, `ConditionAttributes`, `ConditionOrBlock`, `ConditionReference`
70+
71+
Optional:
72+
73+
- `attribute_name` (String) Dictionary attribute name
74+
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
75+
- `children` (Attributes List) List of child conditions. `condition_type` must be one of `ConditionAndBlock`, `ConditionOrBlock`, `ConditionAttributes` or `ConditionReference`. (see [below for nested schema](#nestedatt--children--children))
76+
- `dictionary_name` (String) Dictionary name
77+
- `dictionary_value` (String) Dictionary value
78+
- `id` (String) UUID for condition
79+
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
80+
- `operator` (String) Equality operator
81+
- Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith`
82+
83+
<a id="nestedatt--children--children"></a>
84+
### Nested Schema for `children.children`
85+
86+
Required:
87+
88+
- `condition_type` (String) Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.
89+
- Choices: `ConditionAndBlock`, `ConditionAttributes`, `ConditionOrBlock`, `ConditionReference`
90+
91+
Optional:
92+
93+
- `attribute_name` (String) Dictionary attribute name
94+
- `attribute_value` (String) Attribute value for condition. Value type is specified in dictionary object.
95+
- `dictionary_name` (String) Dictionary name
96+
- `dictionary_value` (String) Dictionary value
97+
- `id` (String) UUID for condition
98+
- `is_negate` (Boolean) Indicates whereas this condition is in negate mode
99+
- `operator` (String) Equality operator
100+
- Choices: `contains`, `endsWith`, `equals`, `greaterOrEquals`, `greaterThan`, `in`, `ipEquals`, `ipGreaterThan`, `ipLessThan`, `ipNotEquals`, `lessOrEquals`, `lessThan`, `matches`, `notContains`, `notEndsWith`, `notEquals`, `notIn`, `notStartsWith`, `startsWith`
101+
102+
## Import
103+
104+
Import is supported using the following syntax:
105+
106+
```shell
107+
terraform import ise_network_access_authorization_global_exception_rule.example "76d24097-41c4-4558-a4d0-a8c07ac08470"
108+
```

‎examples/data-sources/ise_network_access_authorization_global_exception_rule/data-source.tf‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
data "ise_network_access_authorization_global_exception_rule" "example" {
2+
id = "76d24097-41c4-4558-a4d0-a8c07ac08470"
3+
}

‎examples/resources/ise_network_access_authorization_global_exception_rule/import.sh‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
terraform import ise_network_access_authorization_global_exception_rule.example "76d24097-41c4-4558-a4d0-a8c07ac08470"

‎examples/resources/ise_network_access_authorization_global_exception_rule/resource.tf‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
resource "ise_network_access_authorization_global_exception_rule" "example" {
2+
name = "Rule1"
3+
default = false
4+
rank = 0
5+
state = "enabled"
6+
condition_type = "ConditionAttributes"
7+
condition_is_negate = false
8+
condition_attribute_name = "Location"
9+
condition_attribute_value = "All Locations"
10+
condition_dictionary_name = "DEVICE"
11+
condition_operator = "equals"
12+
profiles = ["PermitAccess"]
13+
security_group = "BYOD"
14+
}

0 commit comments

Comments
 (0)