@pulumi/juniper-mist 0.0.25 → 0.0.27
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/device/ap.d.ts +2 -1
- package/device/ap.js +2 -1
- package/device/ap.js.map +1 -1
- package/device/base.d.ts +6 -4
- package/device/base.js +6 -4
- package/device/base.js.map +1 -1
- package/device/gateway.d.ts +2 -1
- package/device/gateway.js +2 -1
- package/device/gateway.js.map +1 -1
- package/device/gatewayCluster.d.ts +2 -1
- package/device/gatewayCluster.js +2 -1
- package/device/gatewayCluster.js.map +1 -1
- package/device/image.d.ts +75 -0
- package/device/image.js +85 -0
- package/device/image.js.map +1 -0
- package/device/index.d.ts +3 -0
- package/device/index.js +6 -1
- package/device/index.js.map +1 -1
- package/device/switch.d.ts +2 -1
- package/device/switch.js +2 -1
- package/device/switch.js.map +1 -1
- package/getConstAlarms.d.ts +40 -0
- package/getConstAlarms.js +44 -0
- package/getConstAlarms.js.map +1 -0
- package/getConstAppCategories.d.ts +4 -2
- package/getConstAppCategories.js +4 -2
- package/getConstAppCategories.js.map +1 -1
- package/getConstAppSubCategories.d.ts +4 -2
- package/getConstAppSubCategories.js +4 -2
- package/getConstAppSubCategories.js.map +1 -1
- package/getConstApplications.d.ts +4 -2
- package/getConstApplications.js +4 -2
- package/getConstApplications.js.map +1 -1
- package/getConstCountries.d.ts +4 -2
- package/getConstCountries.js +4 -2
- package/getConstCountries.js.map +1 -1
- package/getConstTrafficTypes.d.ts +4 -2
- package/getConstTrafficTypes.js +4 -2
- package/getConstTrafficTypes.js.map +1 -1
- package/getSites.d.ts +4 -2
- package/getSites.js +4 -2
- package/getSites.js.map +1 -1
- package/index.d.ts +3 -0
- package/index.js +4 -1
- package/index.js.map +1 -1
- package/org/alarmtemplate.d.ts +103 -0
- package/org/alarmtemplate.js +84 -0
- package/org/alarmtemplate.js.map +1 -0
- package/org/apitoken.d.ts +93 -0
- package/org/apitoken.js +73 -0
- package/org/apitoken.js.map +1 -0
- package/org/base.d.ts +6 -2
- package/org/base.js +6 -2
- package/org/base.js.map +1 -1
- package/org/deviceprofileAp.d.ts +4 -1
- package/org/deviceprofileAp.js +4 -1
- package/org/deviceprofileAp.js.map +1 -1
- package/org/deviceprofileAssign.d.ts +2 -1
- package/org/deviceprofileAssign.js +2 -1
- package/org/deviceprofileAssign.js.map +1 -1
- package/org/deviceprofileGateway.d.ts +4 -1
- package/org/deviceprofileGateway.js +4 -1
- package/org/deviceprofileGateway.js.map +1 -1
- package/org/gatewaytemplate.d.ts +2 -1
- package/org/gatewaytemplate.js +2 -1
- package/org/gatewaytemplate.js.map +1 -1
- package/org/getDeviceprofilesAp.d.ts +4 -2
- package/org/getDeviceprofilesAp.js +4 -2
- package/org/getDeviceprofilesAp.js.map +1 -1
- package/org/getDeviceprofilesGateway.d.ts +4 -2
- package/org/getDeviceprofilesGateway.js +4 -2
- package/org/getDeviceprofilesGateway.js.map +1 -1
- package/org/getGatewaytemplates.d.ts +4 -2
- package/org/getGatewaytemplates.js +4 -2
- package/org/getGatewaytemplates.js.map +1 -1
- package/org/getIdpprofiles.d.ts +4 -2
- package/org/getIdpprofiles.js +4 -2
- package/org/getIdpprofiles.js.map +1 -1
- package/org/getNacidpMetadata.d.ts +64 -0
- package/org/getNacidpMetadata.js +56 -0
- package/org/getNacidpMetadata.js.map +1 -0
- package/org/getNacrules.d.ts +4 -2
- package/org/getNacrules.js +4 -2
- package/org/getNacrules.js.map +1 -1
- package/org/getNactags.d.ts +4 -2
- package/org/getNactags.js +4 -2
- package/org/getNactags.js.map +1 -1
- package/org/getNetworks.d.ts +4 -2
- package/org/getNetworks.js +4 -2
- package/org/getNetworks.js.map +1 -1
- package/org/getNetworktemplates.d.ts +4 -2
- package/org/getNetworktemplates.js +4 -2
- package/org/getNetworktemplates.js.map +1 -1
- package/org/getPsks.d.ts +4 -2
- package/org/getPsks.js +4 -2
- package/org/getPsks.js.map +1 -1
- package/org/getRftemplates.d.ts +4 -2
- package/org/getRftemplates.js +4 -2
- package/org/getRftemplates.js.map +1 -1
- package/org/getServicepolicies.d.ts +4 -2
- package/org/getServicepolicies.js +4 -2
- package/org/getServicepolicies.js.map +1 -1
- package/org/getServices.d.ts +4 -2
- package/org/getServices.js +4 -2
- package/org/getServices.js.map +1 -1
- package/org/getSitegroups.d.ts +4 -2
- package/org/getSitegroups.js +4 -2
- package/org/getSitegroups.js.map +1 -1
- package/org/getSsoMetadata.d.ts +64 -0
- package/org/getSsoMetadata.js +56 -0
- package/org/getSsoMetadata.js.map +1 -0
- package/org/getWlantemplates.d.ts +4 -2
- package/org/getWlantemplates.js +4 -2
- package/org/getWlantemplates.js.map +1 -1
- package/org/getWxtags.d.ts +4 -2
- package/org/getWxtags.js +4 -2
- package/org/getWxtags.js.map +1 -1
- package/org/idpprofile.d.ts +2 -1
- package/org/idpprofile.js +2 -1
- package/org/idpprofile.js.map +1 -1
- package/org/index.d.ts +21 -0
- package/org/index.js +33 -2
- package/org/index.js.map +1 -1
- package/org/inventory.d.ts +2 -1
- package/org/inventory.js +2 -1
- package/org/inventory.js.map +1 -1
- package/org/nacidp.d.ts +385 -0
- package/org/nacidp.js +171 -0
- package/org/nacidp.js.map +1 -0
- package/org/nacrule.d.ts +2 -1
- package/org/nacrule.js +2 -1
- package/org/nacrule.js.map +1 -1
- package/org/nactag.d.ts +2 -1
- package/org/nactag.js +2 -1
- package/org/nactag.js.map +1 -1
- package/org/network.d.ts +2 -1
- package/org/network.js +2 -1
- package/org/network.js.map +1 -1
- package/org/networktemplate.d.ts +2 -1
- package/org/networktemplate.js +2 -1
- package/org/networktemplate.js.map +1 -1
- package/org/rftemplate.d.ts +2 -1
- package/org/rftemplate.js +2 -1
- package/org/rftemplate.js.map +1 -1
- package/org/service.d.ts +2 -1
- package/org/service.js +2 -1
- package/org/service.js.map +1 -1
- package/org/servicepolicy.d.ts +2 -1
- package/org/servicepolicy.js +2 -1
- package/org/servicepolicy.js.map +1 -1
- package/org/setting.d.ts +11 -19
- package/org/setting.js +8 -19
- package/org/setting.js.map +1 -1
- package/org/sitegroup.d.ts +2 -1
- package/org/sitegroup.js +2 -1
- package/org/sitegroup.js.map +1 -1
- package/org/sso.d.ts +264 -0
- package/org/sso.js +128 -0
- package/org/sso.js.map +1 -0
- package/org/ssoRole.d.ts +63 -0
- package/org/ssoRole.js +75 -0
- package/org/ssoRole.js.map +1 -0
- package/org/wlan.d.ts +2 -1
- package/org/wlan.js +2 -1
- package/org/wlan.js.map +1 -1
- package/org/wlanPortalImage.d.ts +2 -1
- package/org/wlanPortalImage.js +2 -1
- package/org/wlanPortalImage.js.map +1 -1
- package/org/wlanPortalTemplate.d.ts +2 -1
- package/org/wlanPortalTemplate.js +2 -1
- package/org/wlanPortalTemplate.js.map +1 -1
- package/org/wlantemplate.d.ts +2 -1
- package/org/wlantemplate.js +2 -1
- package/org/wlantemplate.js.map +1 -1
- package/org/wxrule.d.ts +11 -10
- package/org/wxrule.js +2 -1
- package/org/wxrule.js.map +1 -1
- package/org/wxtag.d.ts +2 -1
- package/org/wxtag.js +2 -1
- package/org/wxtag.js.map +1 -1
- package/package.json +2 -2
- package/site/base.d.ts +6 -4
- package/site/base.js +6 -4
- package/site/base.js.map +1 -1
- package/site/getPsks.d.ts +4 -2
- package/site/getPsks.js +4 -2
- package/site/getPsks.js.map +1 -1
- package/site/networktemplate.d.ts +2 -1
- package/site/networktemplate.js +2 -1
- package/site/networktemplate.js.map +1 -1
- package/site/setting.d.ts +2 -1
- package/site/setting.js +2 -1
- package/site/setting.js.map +1 -1
- package/site/wlan.d.ts +2 -1
- package/site/wlan.js +2 -1
- package/site/wlan.js.map +1 -1
- package/site/wlanPortalImage.d.ts +2 -1
- package/site/wlanPortalImage.js +2 -1
- package/site/wlanPortalImage.js.map +1 -1
- package/site/wlanPortalTemplate.d.ts +2 -1
- package/site/wlanPortalTemplate.js +2 -1
- package/site/wlanPortalTemplate.js.map +1 -1
- package/site/wxrule.d.ts +11 -22
- package/site/wxrule.js +2 -3
- package/site/wxrule.js.map +1 -1
- package/site/wxtag.d.ts +2 -1
- package/site/wxtag.js +2 -1
- package/site/wxtag.js.map +1 -1
- package/types/input.d.ts +94 -3
- package/types/output.d.ts +111 -2
package/org/nacidp.d.ts
ADDED
|
@@ -0,0 +1,385 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
/**
|
|
3
|
+
* This resource manages NAC IDPs (Identity Providers).
|
|
4
|
+
* The NAC IDPs to validate NAC client accounts against an IDP with OAuth2.0, LDAP/LDAPS, or a local Mist Edge.
|
|
5
|
+
* Mist Access Assurance can also retrieve group membership from the IDP, and use this information in the NAC Rules (`junipermist.org.Nacrule` resource)
|
|
6
|
+
*
|
|
7
|
+
* IMPORTANT:
|
|
8
|
+
* * Once created, the NAC IDP must be registered in the `junipermist.org.Setting` resource (full path: `mist_org_setting.mist_nac.idps`).
|
|
9
|
+
* * The associated REALMS are configured under `mist_org_setting.mist_nac.idps`
|
|
10
|
+
* * To make the IDP the Default IDP, set the IDP ID under `mist_org_setting.mist_nac.default_idp_id`
|
|
11
|
+
*
|
|
12
|
+
* For SAML IDP, the NAC IDP Metadata can be retrieved with the `junipermist.org.getNacidpMetadata` data source.
|
|
13
|
+
*
|
|
14
|
+
* ## Example Usage
|
|
15
|
+
*
|
|
16
|
+
* ```typescript
|
|
17
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
18
|
+
* import * as junipermist from "@pulumi/juniper-mist";
|
|
19
|
+
*
|
|
20
|
+
* // OAuth with Azure Example
|
|
21
|
+
* const idpAzure = new junipermist.org.Nacidp("idp_azure", {
|
|
22
|
+
* orgId: terraformTest.id,
|
|
23
|
+
* name: "idp_azure",
|
|
24
|
+
* idpType: "oauth",
|
|
25
|
+
* oauthCcClientId: "client_id",
|
|
26
|
+
* oauthCcClientSecret: "-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----",
|
|
27
|
+
* oauthRopcClientId: "ropc_client_id",
|
|
28
|
+
* oauthRopcClientSecret: "ropc_client_secret",
|
|
29
|
+
* oauthTenantId: "tenant_id",
|
|
30
|
+
* oauthType: "azure",
|
|
31
|
+
* });
|
|
32
|
+
* // Custom LDAP Example
|
|
33
|
+
* const idpLdap = new junipermist.org.Nacidp("idp_ldap", {
|
|
34
|
+
* orgId: terraformTest.id,
|
|
35
|
+
* name: "idp_ldap",
|
|
36
|
+
* idpType: "ldap",
|
|
37
|
+
* ldapType: "custom",
|
|
38
|
+
* groupFilter: "memberOf",
|
|
39
|
+
* memberFilter: "memberOf",
|
|
40
|
+
* ldapUserFilter: "(mail=%s)",
|
|
41
|
+
* ldapServerHosts: [
|
|
42
|
+
* "ldap.mycorp.com",
|
|
43
|
+
* "1.2.3.4",
|
|
44
|
+
* ],
|
|
45
|
+
* ldapBaseDn: "DC=abc,DC=com",
|
|
46
|
+
* ldapBindDn: "CN=admin,CN=users,DC=abc,DC=com",
|
|
47
|
+
* ldapBindPassword: "secret!password",
|
|
48
|
+
* ldapCacerts: [
|
|
49
|
+
* `-----BEGIN CERTIFICATE-----
|
|
50
|
+
* MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
|
|
51
|
+
* -----END CERTIFICATE-----`,
|
|
52
|
+
* `-----BEGIN CERTIFICATE-----
|
|
53
|
+
* BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----`,
|
|
54
|
+
* ],
|
|
55
|
+
* ldapClientCert: `-----BEGIN CERTIFICATE-----
|
|
56
|
+
* MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
|
|
57
|
+
* -----END CERTIFICATE-----`,
|
|
58
|
+
* ldapClientKey: "-----BEGIN PRI...",
|
|
59
|
+
* });
|
|
60
|
+
* ```
|
|
61
|
+
*
|
|
62
|
+
* ## Import
|
|
63
|
+
*
|
|
64
|
+
* Using `pulumi import`, import `mist_org_nacidp` with:
|
|
65
|
+
*
|
|
66
|
+
* Org PSK can be imported by specifying the org_id and the nacidp_id
|
|
67
|
+
*
|
|
68
|
+
* ```sh
|
|
69
|
+
* $ pulumi import junipermist:org/nacidp:Nacidp idp_azure 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
|
|
70
|
+
* ```
|
|
71
|
+
*/
|
|
72
|
+
export declare class Nacidp extends pulumi.CustomResource {
|
|
73
|
+
/**
|
|
74
|
+
* Get an existing Nacidp resource's state with the given name, ID, and optional extra
|
|
75
|
+
* properties used to qualify the lookup.
|
|
76
|
+
*
|
|
77
|
+
* @param name The _unique_ name of the resulting resource.
|
|
78
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
79
|
+
* @param state Any extra arguments used during the lookup.
|
|
80
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
81
|
+
*/
|
|
82
|
+
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NacidpState, opts?: pulumi.CustomResourceOptions): Nacidp;
|
|
83
|
+
/**
|
|
84
|
+
* Returns true if the given object is an instance of Nacidp. This is designed to work even
|
|
85
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
86
|
+
*/
|
|
87
|
+
static isInstance(obj: any): obj is Nacidp;
|
|
88
|
+
/**
|
|
89
|
+
* Required if `ldapType`==`custom`, LDAP filter that will identify the type of group
|
|
90
|
+
*/
|
|
91
|
+
readonly groupFilter: pulumi.Output<string | undefined>;
|
|
92
|
+
/**
|
|
93
|
+
* enum: `ldap`, `mxedgeProxy`, `oauth`
|
|
94
|
+
*/
|
|
95
|
+
readonly idpType: pulumi.Output<string>;
|
|
96
|
+
/**
|
|
97
|
+
* Required if `idpType`==`ldap`, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
|
|
98
|
+
*/
|
|
99
|
+
readonly ldapBaseDn: pulumi.Output<string | undefined>;
|
|
100
|
+
/**
|
|
101
|
+
* Required if `idpType`==`ldap`, the account used to authenticate against the LDAP
|
|
102
|
+
*/
|
|
103
|
+
readonly ldapBindDn: pulumi.Output<string | undefined>;
|
|
104
|
+
/**
|
|
105
|
+
* Required if `idpType`==`ldap`, the password used to authenticate against the LDAP
|
|
106
|
+
*/
|
|
107
|
+
readonly ldapBindPassword: pulumi.Output<string | undefined>;
|
|
108
|
+
/**
|
|
109
|
+
* Required if `idpType`==`ldap`, list of CA certificates to validate the LDAP certificate
|
|
110
|
+
*/
|
|
111
|
+
readonly ldapCacerts: pulumi.Output<string[] | undefined>;
|
|
112
|
+
/**
|
|
113
|
+
* if `idpType`==`ldap`, LDAPS Client certificate
|
|
114
|
+
*/
|
|
115
|
+
readonly ldapClientCert: pulumi.Output<string | undefined>;
|
|
116
|
+
/**
|
|
117
|
+
* if `idpType`==`ldap`, Key for the `ldapClientCert`
|
|
118
|
+
*/
|
|
119
|
+
readonly ldapClientKey: pulumi.Output<string | undefined>;
|
|
120
|
+
/**
|
|
121
|
+
* if `ldapType`==`custom`
|
|
122
|
+
*/
|
|
123
|
+
readonly ldapGroupAttr: pulumi.Output<string | undefined>;
|
|
124
|
+
/**
|
|
125
|
+
* if `ldapType`==`custom`
|
|
126
|
+
*/
|
|
127
|
+
readonly ldapGroupDn: pulumi.Output<string | undefined>;
|
|
128
|
+
/**
|
|
129
|
+
* if `idpType`==`ldap`, whether to recursively resolve LDAP groups
|
|
130
|
+
*/
|
|
131
|
+
readonly ldapResolveGroups: pulumi.Output<boolean>;
|
|
132
|
+
/**
|
|
133
|
+
* if `idpType`==`ldap`, list of LDAP/LDAPS server IP Addresses or Hostnames
|
|
134
|
+
*/
|
|
135
|
+
readonly ldapServerHosts: pulumi.Output<string[] | undefined>;
|
|
136
|
+
/**
|
|
137
|
+
* if `idpType`==`ldap`. enum: `azure`, `custom`, `google`, `okta`, `pingIdentity`
|
|
138
|
+
*/
|
|
139
|
+
readonly ldapType: pulumi.Output<string | undefined>;
|
|
140
|
+
/**
|
|
141
|
+
* Required if `ldapType`==`custom`, LDAP filter that will identify the type of user
|
|
142
|
+
*/
|
|
143
|
+
readonly ldapUserFilter: pulumi.Output<string | undefined>;
|
|
144
|
+
/**
|
|
145
|
+
* Required if `ldapType`==`custom`,LDAP filter that will identify the type of member
|
|
146
|
+
*/
|
|
147
|
+
readonly memberFilter: pulumi.Output<string | undefined>;
|
|
148
|
+
/**
|
|
149
|
+
* name
|
|
150
|
+
*/
|
|
151
|
+
readonly name: pulumi.Output<string>;
|
|
152
|
+
/**
|
|
153
|
+
* Required if `idpType`==`oauth`, Client Credentials
|
|
154
|
+
*/
|
|
155
|
+
readonly oauthCcClientId: pulumi.Output<string | undefined>;
|
|
156
|
+
/**
|
|
157
|
+
* Required if `idpType`==`oauth`, oauth*cc*client_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
|
|
158
|
+
*/
|
|
159
|
+
readonly oauthCcClientSecret: pulumi.Output<string | undefined>;
|
|
160
|
+
/**
|
|
161
|
+
* if `idpType`==`oauth`
|
|
162
|
+
*/
|
|
163
|
+
readonly oauthDiscoveryUrl: pulumi.Output<string | undefined>;
|
|
164
|
+
/**
|
|
165
|
+
* if `idpType`==`oauth`, ropc = Resource Owner Password Credentials
|
|
166
|
+
*/
|
|
167
|
+
readonly oauthRopcClientId: pulumi.Output<string | undefined>;
|
|
168
|
+
/**
|
|
169
|
+
* if `oauthType`==`azure` or `oauthType`==`azure-gov`. oauth*ropc*client_secret can be empty
|
|
170
|
+
*/
|
|
171
|
+
readonly oauthRopcClientSecret: pulumi.Output<string | undefined>;
|
|
172
|
+
/**
|
|
173
|
+
* Required if `idpType`==`oauth`, oauth*tenant*id
|
|
174
|
+
*/
|
|
175
|
+
readonly oauthTenantId: pulumi.Output<string | undefined>;
|
|
176
|
+
/**
|
|
177
|
+
* if `idpType`==`oauth`. enum: `azure`, `azure-gov`, `okta`, `pingIdentity`
|
|
178
|
+
*/
|
|
179
|
+
readonly oauthType: pulumi.Output<string>;
|
|
180
|
+
readonly orgId: pulumi.Output<string>;
|
|
181
|
+
/**
|
|
182
|
+
* Create a Nacidp resource with the given unique name, arguments, and options.
|
|
183
|
+
*
|
|
184
|
+
* @param name The _unique_ name of the resource.
|
|
185
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
186
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
187
|
+
*/
|
|
188
|
+
constructor(name: string, args: NacidpArgs, opts?: pulumi.CustomResourceOptions);
|
|
189
|
+
}
|
|
190
|
+
/**
|
|
191
|
+
* Input properties used for looking up and filtering Nacidp resources.
|
|
192
|
+
*/
|
|
193
|
+
export interface NacidpState {
|
|
194
|
+
/**
|
|
195
|
+
* Required if `ldapType`==`custom`, LDAP filter that will identify the type of group
|
|
196
|
+
*/
|
|
197
|
+
groupFilter?: pulumi.Input<string>;
|
|
198
|
+
/**
|
|
199
|
+
* enum: `ldap`, `mxedgeProxy`, `oauth`
|
|
200
|
+
*/
|
|
201
|
+
idpType?: pulumi.Input<string>;
|
|
202
|
+
/**
|
|
203
|
+
* Required if `idpType`==`ldap`, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
|
|
204
|
+
*/
|
|
205
|
+
ldapBaseDn?: pulumi.Input<string>;
|
|
206
|
+
/**
|
|
207
|
+
* Required if `idpType`==`ldap`, the account used to authenticate against the LDAP
|
|
208
|
+
*/
|
|
209
|
+
ldapBindDn?: pulumi.Input<string>;
|
|
210
|
+
/**
|
|
211
|
+
* Required if `idpType`==`ldap`, the password used to authenticate against the LDAP
|
|
212
|
+
*/
|
|
213
|
+
ldapBindPassword?: pulumi.Input<string>;
|
|
214
|
+
/**
|
|
215
|
+
* Required if `idpType`==`ldap`, list of CA certificates to validate the LDAP certificate
|
|
216
|
+
*/
|
|
217
|
+
ldapCacerts?: pulumi.Input<pulumi.Input<string>[]>;
|
|
218
|
+
/**
|
|
219
|
+
* if `idpType`==`ldap`, LDAPS Client certificate
|
|
220
|
+
*/
|
|
221
|
+
ldapClientCert?: pulumi.Input<string>;
|
|
222
|
+
/**
|
|
223
|
+
* if `idpType`==`ldap`, Key for the `ldapClientCert`
|
|
224
|
+
*/
|
|
225
|
+
ldapClientKey?: pulumi.Input<string>;
|
|
226
|
+
/**
|
|
227
|
+
* if `ldapType`==`custom`
|
|
228
|
+
*/
|
|
229
|
+
ldapGroupAttr?: pulumi.Input<string>;
|
|
230
|
+
/**
|
|
231
|
+
* if `ldapType`==`custom`
|
|
232
|
+
*/
|
|
233
|
+
ldapGroupDn?: pulumi.Input<string>;
|
|
234
|
+
/**
|
|
235
|
+
* if `idpType`==`ldap`, whether to recursively resolve LDAP groups
|
|
236
|
+
*/
|
|
237
|
+
ldapResolveGroups?: pulumi.Input<boolean>;
|
|
238
|
+
/**
|
|
239
|
+
* if `idpType`==`ldap`, list of LDAP/LDAPS server IP Addresses or Hostnames
|
|
240
|
+
*/
|
|
241
|
+
ldapServerHosts?: pulumi.Input<pulumi.Input<string>[]>;
|
|
242
|
+
/**
|
|
243
|
+
* if `idpType`==`ldap`. enum: `azure`, `custom`, `google`, `okta`, `pingIdentity`
|
|
244
|
+
*/
|
|
245
|
+
ldapType?: pulumi.Input<string>;
|
|
246
|
+
/**
|
|
247
|
+
* Required if `ldapType`==`custom`, LDAP filter that will identify the type of user
|
|
248
|
+
*/
|
|
249
|
+
ldapUserFilter?: pulumi.Input<string>;
|
|
250
|
+
/**
|
|
251
|
+
* Required if `ldapType`==`custom`,LDAP filter that will identify the type of member
|
|
252
|
+
*/
|
|
253
|
+
memberFilter?: pulumi.Input<string>;
|
|
254
|
+
/**
|
|
255
|
+
* name
|
|
256
|
+
*/
|
|
257
|
+
name?: pulumi.Input<string>;
|
|
258
|
+
/**
|
|
259
|
+
* Required if `idpType`==`oauth`, Client Credentials
|
|
260
|
+
*/
|
|
261
|
+
oauthCcClientId?: pulumi.Input<string>;
|
|
262
|
+
/**
|
|
263
|
+
* Required if `idpType`==`oauth`, oauth*cc*client_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
|
|
264
|
+
*/
|
|
265
|
+
oauthCcClientSecret?: pulumi.Input<string>;
|
|
266
|
+
/**
|
|
267
|
+
* if `idpType`==`oauth`
|
|
268
|
+
*/
|
|
269
|
+
oauthDiscoveryUrl?: pulumi.Input<string>;
|
|
270
|
+
/**
|
|
271
|
+
* if `idpType`==`oauth`, ropc = Resource Owner Password Credentials
|
|
272
|
+
*/
|
|
273
|
+
oauthRopcClientId?: pulumi.Input<string>;
|
|
274
|
+
/**
|
|
275
|
+
* if `oauthType`==`azure` or `oauthType`==`azure-gov`. oauth*ropc*client_secret can be empty
|
|
276
|
+
*/
|
|
277
|
+
oauthRopcClientSecret?: pulumi.Input<string>;
|
|
278
|
+
/**
|
|
279
|
+
* Required if `idpType`==`oauth`, oauth*tenant*id
|
|
280
|
+
*/
|
|
281
|
+
oauthTenantId?: pulumi.Input<string>;
|
|
282
|
+
/**
|
|
283
|
+
* if `idpType`==`oauth`. enum: `azure`, `azure-gov`, `okta`, `pingIdentity`
|
|
284
|
+
*/
|
|
285
|
+
oauthType?: pulumi.Input<string>;
|
|
286
|
+
orgId?: pulumi.Input<string>;
|
|
287
|
+
}
|
|
288
|
+
/**
|
|
289
|
+
* The set of arguments for constructing a Nacidp resource.
|
|
290
|
+
*/
|
|
291
|
+
export interface NacidpArgs {
|
|
292
|
+
/**
|
|
293
|
+
* Required if `ldapType`==`custom`, LDAP filter that will identify the type of group
|
|
294
|
+
*/
|
|
295
|
+
groupFilter?: pulumi.Input<string>;
|
|
296
|
+
/**
|
|
297
|
+
* enum: `ldap`, `mxedgeProxy`, `oauth`
|
|
298
|
+
*/
|
|
299
|
+
idpType: pulumi.Input<string>;
|
|
300
|
+
/**
|
|
301
|
+
* Required if `idpType`==`ldap`, whole domain or a specific organization unit (container) in Search base to specify where users and groups are found in the LDAP tree
|
|
302
|
+
*/
|
|
303
|
+
ldapBaseDn?: pulumi.Input<string>;
|
|
304
|
+
/**
|
|
305
|
+
* Required if `idpType`==`ldap`, the account used to authenticate against the LDAP
|
|
306
|
+
*/
|
|
307
|
+
ldapBindDn?: pulumi.Input<string>;
|
|
308
|
+
/**
|
|
309
|
+
* Required if `idpType`==`ldap`, the password used to authenticate against the LDAP
|
|
310
|
+
*/
|
|
311
|
+
ldapBindPassword?: pulumi.Input<string>;
|
|
312
|
+
/**
|
|
313
|
+
* Required if `idpType`==`ldap`, list of CA certificates to validate the LDAP certificate
|
|
314
|
+
*/
|
|
315
|
+
ldapCacerts?: pulumi.Input<pulumi.Input<string>[]>;
|
|
316
|
+
/**
|
|
317
|
+
* if `idpType`==`ldap`, LDAPS Client certificate
|
|
318
|
+
*/
|
|
319
|
+
ldapClientCert?: pulumi.Input<string>;
|
|
320
|
+
/**
|
|
321
|
+
* if `idpType`==`ldap`, Key for the `ldapClientCert`
|
|
322
|
+
*/
|
|
323
|
+
ldapClientKey?: pulumi.Input<string>;
|
|
324
|
+
/**
|
|
325
|
+
* if `ldapType`==`custom`
|
|
326
|
+
*/
|
|
327
|
+
ldapGroupAttr?: pulumi.Input<string>;
|
|
328
|
+
/**
|
|
329
|
+
* if `ldapType`==`custom`
|
|
330
|
+
*/
|
|
331
|
+
ldapGroupDn?: pulumi.Input<string>;
|
|
332
|
+
/**
|
|
333
|
+
* if `idpType`==`ldap`, whether to recursively resolve LDAP groups
|
|
334
|
+
*/
|
|
335
|
+
ldapResolveGroups?: pulumi.Input<boolean>;
|
|
336
|
+
/**
|
|
337
|
+
* if `idpType`==`ldap`, list of LDAP/LDAPS server IP Addresses or Hostnames
|
|
338
|
+
*/
|
|
339
|
+
ldapServerHosts?: pulumi.Input<pulumi.Input<string>[]>;
|
|
340
|
+
/**
|
|
341
|
+
* if `idpType`==`ldap`. enum: `azure`, `custom`, `google`, `okta`, `pingIdentity`
|
|
342
|
+
*/
|
|
343
|
+
ldapType?: pulumi.Input<string>;
|
|
344
|
+
/**
|
|
345
|
+
* Required if `ldapType`==`custom`, LDAP filter that will identify the type of user
|
|
346
|
+
*/
|
|
347
|
+
ldapUserFilter?: pulumi.Input<string>;
|
|
348
|
+
/**
|
|
349
|
+
* Required if `ldapType`==`custom`,LDAP filter that will identify the type of member
|
|
350
|
+
*/
|
|
351
|
+
memberFilter?: pulumi.Input<string>;
|
|
352
|
+
/**
|
|
353
|
+
* name
|
|
354
|
+
*/
|
|
355
|
+
name?: pulumi.Input<string>;
|
|
356
|
+
/**
|
|
357
|
+
* Required if `idpType`==`oauth`, Client Credentials
|
|
358
|
+
*/
|
|
359
|
+
oauthCcClientId?: pulumi.Input<string>;
|
|
360
|
+
/**
|
|
361
|
+
* Required if `idpType`==`oauth`, oauth*cc*client_secret is RSA private key, of the form "-----BEGIN RSA PRIVATE KEY--...."
|
|
362
|
+
*/
|
|
363
|
+
oauthCcClientSecret?: pulumi.Input<string>;
|
|
364
|
+
/**
|
|
365
|
+
* if `idpType`==`oauth`
|
|
366
|
+
*/
|
|
367
|
+
oauthDiscoveryUrl?: pulumi.Input<string>;
|
|
368
|
+
/**
|
|
369
|
+
* if `idpType`==`oauth`, ropc = Resource Owner Password Credentials
|
|
370
|
+
*/
|
|
371
|
+
oauthRopcClientId?: pulumi.Input<string>;
|
|
372
|
+
/**
|
|
373
|
+
* if `oauthType`==`azure` or `oauthType`==`azure-gov`. oauth*ropc*client_secret can be empty
|
|
374
|
+
*/
|
|
375
|
+
oauthRopcClientSecret?: pulumi.Input<string>;
|
|
376
|
+
/**
|
|
377
|
+
* Required if `idpType`==`oauth`, oauth*tenant*id
|
|
378
|
+
*/
|
|
379
|
+
oauthTenantId?: pulumi.Input<string>;
|
|
380
|
+
/**
|
|
381
|
+
* if `idpType`==`oauth`. enum: `azure`, `azure-gov`, `okta`, `pingIdentity`
|
|
382
|
+
*/
|
|
383
|
+
oauthType?: pulumi.Input<string>;
|
|
384
|
+
orgId: pulumi.Input<string>;
|
|
385
|
+
}
|
package/org/nacidp.js
ADDED
|
@@ -0,0 +1,171 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.Nacidp = void 0;
|
|
6
|
+
const pulumi = require("@pulumi/pulumi");
|
|
7
|
+
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* This resource manages NAC IDPs (Identity Providers).
|
|
10
|
+
* The NAC IDPs to validate NAC client accounts against an IDP with OAuth2.0, LDAP/LDAPS, or a local Mist Edge.
|
|
11
|
+
* Mist Access Assurance can also retrieve group membership from the IDP, and use this information in the NAC Rules (`junipermist.org.Nacrule` resource)
|
|
12
|
+
*
|
|
13
|
+
* IMPORTANT:
|
|
14
|
+
* * Once created, the NAC IDP must be registered in the `junipermist.org.Setting` resource (full path: `mist_org_setting.mist_nac.idps`).
|
|
15
|
+
* * The associated REALMS are configured under `mist_org_setting.mist_nac.idps`
|
|
16
|
+
* * To make the IDP the Default IDP, set the IDP ID under `mist_org_setting.mist_nac.default_idp_id`
|
|
17
|
+
*
|
|
18
|
+
* For SAML IDP, the NAC IDP Metadata can be retrieved with the `junipermist.org.getNacidpMetadata` data source.
|
|
19
|
+
*
|
|
20
|
+
* ## Example Usage
|
|
21
|
+
*
|
|
22
|
+
* ```typescript
|
|
23
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
24
|
+
* import * as junipermist from "@pulumi/juniper-mist";
|
|
25
|
+
*
|
|
26
|
+
* // OAuth with Azure Example
|
|
27
|
+
* const idpAzure = new junipermist.org.Nacidp("idp_azure", {
|
|
28
|
+
* orgId: terraformTest.id,
|
|
29
|
+
* name: "idp_azure",
|
|
30
|
+
* idpType: "oauth",
|
|
31
|
+
* oauthCcClientId: "client_id",
|
|
32
|
+
* oauthCcClientSecret: "-----BEGIN CERTIFICATE-----MIIF0jC .../fSCGx7-----END CERTIFICATE-----",
|
|
33
|
+
* oauthRopcClientId: "ropc_client_id",
|
|
34
|
+
* oauthRopcClientSecret: "ropc_client_secret",
|
|
35
|
+
* oauthTenantId: "tenant_id",
|
|
36
|
+
* oauthType: "azure",
|
|
37
|
+
* });
|
|
38
|
+
* // Custom LDAP Example
|
|
39
|
+
* const idpLdap = new junipermist.org.Nacidp("idp_ldap", {
|
|
40
|
+
* orgId: terraformTest.id,
|
|
41
|
+
* name: "idp_ldap",
|
|
42
|
+
* idpType: "ldap",
|
|
43
|
+
* ldapType: "custom",
|
|
44
|
+
* groupFilter: "memberOf",
|
|
45
|
+
* memberFilter: "memberOf",
|
|
46
|
+
* ldapUserFilter: "(mail=%s)",
|
|
47
|
+
* ldapServerHosts: [
|
|
48
|
+
* "ldap.mycorp.com",
|
|
49
|
+
* "1.2.3.4",
|
|
50
|
+
* ],
|
|
51
|
+
* ldapBaseDn: "DC=abc,DC=com",
|
|
52
|
+
* ldapBindDn: "CN=admin,CN=users,DC=abc,DC=com",
|
|
53
|
+
* ldapBindPassword: "secret!password",
|
|
54
|
+
* ldapCacerts: [
|
|
55
|
+
* `-----BEGIN CERTIFICATE-----
|
|
56
|
+
* MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
|
|
57
|
+
* -----END CERTIFICATE-----`,
|
|
58
|
+
* `-----BEGIN CERTIFICATE-----
|
|
59
|
+
* BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSwwKgYDVn-----END CERTIFICATE-----`,
|
|
60
|
+
* ],
|
|
61
|
+
* ldapClientCert: `-----BEGIN CERTIFICATE-----
|
|
62
|
+
* MIIFZjCCA06gAwIBAgIIP61/1qm/uDowDQYJKoZIhvcNAQELBQE
|
|
63
|
+
* -----END CERTIFICATE-----`,
|
|
64
|
+
* ldapClientKey: "-----BEGIN PRI...",
|
|
65
|
+
* });
|
|
66
|
+
* ```
|
|
67
|
+
*
|
|
68
|
+
* ## Import
|
|
69
|
+
*
|
|
70
|
+
* Using `pulumi import`, import `mist_org_nacidp` with:
|
|
71
|
+
*
|
|
72
|
+
* Org PSK can be imported by specifying the org_id and the nacidp_id
|
|
73
|
+
*
|
|
74
|
+
* ```sh
|
|
75
|
+
* $ pulumi import junipermist:org/nacidp:Nacidp idp_azure 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
|
|
76
|
+
* ```
|
|
77
|
+
*/
|
|
78
|
+
class Nacidp extends pulumi.CustomResource {
|
|
79
|
+
/**
|
|
80
|
+
* Get an existing Nacidp resource's state with the given name, ID, and optional extra
|
|
81
|
+
* properties used to qualify the lookup.
|
|
82
|
+
*
|
|
83
|
+
* @param name The _unique_ name of the resulting resource.
|
|
84
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
85
|
+
* @param state Any extra arguments used during the lookup.
|
|
86
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
87
|
+
*/
|
|
88
|
+
static get(name, id, state, opts) {
|
|
89
|
+
return new Nacidp(name, state, Object.assign(Object.assign({}, opts), { id: id }));
|
|
90
|
+
}
|
|
91
|
+
/**
|
|
92
|
+
* Returns true if the given object is an instance of Nacidp. This is designed to work even
|
|
93
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
94
|
+
*/
|
|
95
|
+
static isInstance(obj) {
|
|
96
|
+
if (obj === undefined || obj === null) {
|
|
97
|
+
return false;
|
|
98
|
+
}
|
|
99
|
+
return obj['__pulumiType'] === Nacidp.__pulumiType;
|
|
100
|
+
}
|
|
101
|
+
constructor(name, argsOrState, opts) {
|
|
102
|
+
let resourceInputs = {};
|
|
103
|
+
opts = opts || {};
|
|
104
|
+
if (opts.id) {
|
|
105
|
+
const state = argsOrState;
|
|
106
|
+
resourceInputs["groupFilter"] = state ? state.groupFilter : undefined;
|
|
107
|
+
resourceInputs["idpType"] = state ? state.idpType : undefined;
|
|
108
|
+
resourceInputs["ldapBaseDn"] = state ? state.ldapBaseDn : undefined;
|
|
109
|
+
resourceInputs["ldapBindDn"] = state ? state.ldapBindDn : undefined;
|
|
110
|
+
resourceInputs["ldapBindPassword"] = state ? state.ldapBindPassword : undefined;
|
|
111
|
+
resourceInputs["ldapCacerts"] = state ? state.ldapCacerts : undefined;
|
|
112
|
+
resourceInputs["ldapClientCert"] = state ? state.ldapClientCert : undefined;
|
|
113
|
+
resourceInputs["ldapClientKey"] = state ? state.ldapClientKey : undefined;
|
|
114
|
+
resourceInputs["ldapGroupAttr"] = state ? state.ldapGroupAttr : undefined;
|
|
115
|
+
resourceInputs["ldapGroupDn"] = state ? state.ldapGroupDn : undefined;
|
|
116
|
+
resourceInputs["ldapResolveGroups"] = state ? state.ldapResolveGroups : undefined;
|
|
117
|
+
resourceInputs["ldapServerHosts"] = state ? state.ldapServerHosts : undefined;
|
|
118
|
+
resourceInputs["ldapType"] = state ? state.ldapType : undefined;
|
|
119
|
+
resourceInputs["ldapUserFilter"] = state ? state.ldapUserFilter : undefined;
|
|
120
|
+
resourceInputs["memberFilter"] = state ? state.memberFilter : undefined;
|
|
121
|
+
resourceInputs["name"] = state ? state.name : undefined;
|
|
122
|
+
resourceInputs["oauthCcClientId"] = state ? state.oauthCcClientId : undefined;
|
|
123
|
+
resourceInputs["oauthCcClientSecret"] = state ? state.oauthCcClientSecret : undefined;
|
|
124
|
+
resourceInputs["oauthDiscoveryUrl"] = state ? state.oauthDiscoveryUrl : undefined;
|
|
125
|
+
resourceInputs["oauthRopcClientId"] = state ? state.oauthRopcClientId : undefined;
|
|
126
|
+
resourceInputs["oauthRopcClientSecret"] = state ? state.oauthRopcClientSecret : undefined;
|
|
127
|
+
resourceInputs["oauthTenantId"] = state ? state.oauthTenantId : undefined;
|
|
128
|
+
resourceInputs["oauthType"] = state ? state.oauthType : undefined;
|
|
129
|
+
resourceInputs["orgId"] = state ? state.orgId : undefined;
|
|
130
|
+
}
|
|
131
|
+
else {
|
|
132
|
+
const args = argsOrState;
|
|
133
|
+
if ((!args || args.idpType === undefined) && !opts.urn) {
|
|
134
|
+
throw new Error("Missing required property 'idpType'");
|
|
135
|
+
}
|
|
136
|
+
if ((!args || args.orgId === undefined) && !opts.urn) {
|
|
137
|
+
throw new Error("Missing required property 'orgId'");
|
|
138
|
+
}
|
|
139
|
+
resourceInputs["groupFilter"] = args ? args.groupFilter : undefined;
|
|
140
|
+
resourceInputs["idpType"] = args ? args.idpType : undefined;
|
|
141
|
+
resourceInputs["ldapBaseDn"] = args ? args.ldapBaseDn : undefined;
|
|
142
|
+
resourceInputs["ldapBindDn"] = args ? args.ldapBindDn : undefined;
|
|
143
|
+
resourceInputs["ldapBindPassword"] = args ? args.ldapBindPassword : undefined;
|
|
144
|
+
resourceInputs["ldapCacerts"] = args ? args.ldapCacerts : undefined;
|
|
145
|
+
resourceInputs["ldapClientCert"] = args ? args.ldapClientCert : undefined;
|
|
146
|
+
resourceInputs["ldapClientKey"] = args ? args.ldapClientKey : undefined;
|
|
147
|
+
resourceInputs["ldapGroupAttr"] = args ? args.ldapGroupAttr : undefined;
|
|
148
|
+
resourceInputs["ldapGroupDn"] = args ? args.ldapGroupDn : undefined;
|
|
149
|
+
resourceInputs["ldapResolveGroups"] = args ? args.ldapResolveGroups : undefined;
|
|
150
|
+
resourceInputs["ldapServerHosts"] = args ? args.ldapServerHosts : undefined;
|
|
151
|
+
resourceInputs["ldapType"] = args ? args.ldapType : undefined;
|
|
152
|
+
resourceInputs["ldapUserFilter"] = args ? args.ldapUserFilter : undefined;
|
|
153
|
+
resourceInputs["memberFilter"] = args ? args.memberFilter : undefined;
|
|
154
|
+
resourceInputs["name"] = args ? args.name : undefined;
|
|
155
|
+
resourceInputs["oauthCcClientId"] = args ? args.oauthCcClientId : undefined;
|
|
156
|
+
resourceInputs["oauthCcClientSecret"] = args ? args.oauthCcClientSecret : undefined;
|
|
157
|
+
resourceInputs["oauthDiscoveryUrl"] = args ? args.oauthDiscoveryUrl : undefined;
|
|
158
|
+
resourceInputs["oauthRopcClientId"] = args ? args.oauthRopcClientId : undefined;
|
|
159
|
+
resourceInputs["oauthRopcClientSecret"] = args ? args.oauthRopcClientSecret : undefined;
|
|
160
|
+
resourceInputs["oauthTenantId"] = args ? args.oauthTenantId : undefined;
|
|
161
|
+
resourceInputs["oauthType"] = args ? args.oauthType : undefined;
|
|
162
|
+
resourceInputs["orgId"] = args ? args.orgId : undefined;
|
|
163
|
+
}
|
|
164
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
165
|
+
super(Nacidp.__pulumiType, name, resourceInputs, opts);
|
|
166
|
+
}
|
|
167
|
+
}
|
|
168
|
+
exports.Nacidp = Nacidp;
|
|
169
|
+
/** @internal */
|
|
170
|
+
Nacidp.__pulumiType = 'junipermist:org/nacidp:Nacidp';
|
|
171
|
+
//# sourceMappingURL=nacidp.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"nacidp.js","sourceRoot":"","sources":["../../org/nacidp.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAwGD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAlML,wBAmMC;AArLG,gBAAgB;AACO,mBAAY,GAAG,+BAA+B,CAAC"}
|
package/org/nacrule.d.ts
CHANGED
|
@@ -2,7 +2,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
import * as inputs from "../types/input";
|
|
3
3
|
import * as outputs from "../types/output";
|
|
4
4
|
/**
|
|
5
|
-
* This resource manages the NAC Rules (Auth Policies).
|
|
5
|
+
* This resource manages the NAC Rules (Auth Policies).
|
|
6
|
+
* A NAC Rule defines a list of critera (NAC Tag) the network client must match to execute the Rule, an action (Allow/Deny)and a list of RADIUS Attributes (NAC Tags) to return
|
|
6
7
|
*
|
|
7
8
|
* ## Import
|
|
8
9
|
*
|
package/org/nacrule.js
CHANGED
|
@@ -6,7 +6,8 @@ exports.Nacrule = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
* This resource manages the NAC Rules (Auth Policies).
|
|
9
|
+
* This resource manages the NAC Rules (Auth Policies).
|
|
10
|
+
* A NAC Rule defines a list of critera (NAC Tag) the network client must match to execute the Rule, an action (Allow/Deny)and a list of RADIUS Attributes (NAC Tags) to return
|
|
10
11
|
*
|
|
11
12
|
* ## Import
|
|
12
13
|
*
|
package/org/nacrule.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"nacrule.js","sourceRoot":"","sources":["../../org/nacrule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"nacrule.js","sourceRoot":"","sources":["../../org/nacrule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;GAaG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AA5FL,0BA6FC;AA/EG,gBAAgB;AACO,oBAAY,GAAG,iCAAiC,CAAC"}
|
package/org/nactag.d.ts
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
* This resource manages NAC Tags (Auth Policy Labels).
|
|
3
|
+
* This resource manages NAC Tags (Auth Policy Labels).
|
|
4
|
+
* The NAC Tags can be used in the NAC Rules to define the matching criterias or the returned RADIUS Attributes
|
|
4
5
|
*
|
|
5
6
|
* ## Example Usage
|
|
6
7
|
*
|
package/org/nactag.js
CHANGED
|
@@ -6,7 +6,8 @@ exports.Nactag = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
* This resource manages NAC Tags (Auth Policy Labels).
|
|
9
|
+
* This resource manages NAC Tags (Auth Policy Labels).
|
|
10
|
+
* The NAC Tags can be used in the NAC Rules to define the matching criterias or the returned RADIUS Attributes
|
|
10
11
|
*
|
|
11
12
|
* ## Example Usage
|
|
12
13
|
*
|
package/org/nactag.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"nactag.js","sourceRoot":"","sources":["../../org/nactag.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"nactag.js","sourceRoot":"","sources":["../../org/nactag.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAoED,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA1IL,wBA2IC;AA7HG,gBAAgB;AACO,mBAAY,GAAG,+BAA+B,CAAC"}
|
package/org/network.d.ts
CHANGED
|
@@ -2,7 +2,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
import * as inputs from "../types/input";
|
|
3
3
|
import * as outputs from "../types/output";
|
|
4
4
|
/**
|
|
5
|
-
* This resource manages the WAN Assurance Networks.
|
|
5
|
+
* This resource manages the WAN Assurance Networks.
|
|
6
|
+
* The Networks are used in the `servicePolicies` from the Gateway configuration and Gateway templates
|
|
6
7
|
*
|
|
7
8
|
* ## Example Usage
|
|
8
9
|
*
|