[{"label":"Latest (v1.0)","version":"latest"}]
nsx-vmc-policy
Constraint
Constraint object to constraint any attribute on a resource based on specified expression. Example- Restrict the allowed services in Edge Communication Entry to list of services, if the destinationGroups contain vCenter. { “target”:{ “target_resource_type”:“CommunicationEntry”, “attribute”:“services”, “path_prefix”:"/infra/domains/vmc-domain/edge-communication-maps/default/communication-entries" } “constraint_expression”:{ “related_attribute”:{ “attribute”:“destinationGroups” } “condition”:{ “operator”:“INCLUDES”, “rhs_value”:{“vCenter”} “value_constraint”:{ “operator”:“ALLOW”, “values”:{"/ref/services/HTTPS", “/ref/services/HTTOP”, …} } } } }
AllOf
This class requires all of the following:
JSON Example
{
"_create_time": 0,
"_create_user": "string",
"_last_modified_time": 0,
"_last_modified_user": "string",
"_links": [
{
"action": "string",
"href": "string",
"rel": "string"
}
],
"_protection": "string",
"_revision": 0,
"_schema": "string",
"_self": {
"action": "string",
"href": "string",
"rel": "string"
},
"_system_owned": false,
"children": [
{
"_create_time": 0,
"_create_user": "string",
"_last_modified_time": 0,
"_last_modified_user": "string",
"_links": [
{
"action": "string",
"href": "string",
"rel": "string"
}
],
"_protection": "string",
"_revision": 0,
"_schema": "string",
"_self": {
"action": "string",
"href": "string",
"rel": "string"
},
"_system_owned": false,
"description": "string",
"display_name": "string",
"id": "string",
"marked_for_delete": false,
"resource_type": "string",
"tags": [
{
"scope": "string",
"tag": "string"
}
]
}
],
"constraint_expression": {
"_create_time": 0,
"_create_user": "string",
"_last_modified_time": 0,
"_last_modified_user": "string",
"_links": [
{
"action": "string",
"href": "string",
"rel": "string"
}
],
"_protection": "string",
"_revision": 0,
"_schema": "string",
"_self": {
"action": "string",
"href": "string",
"rel": "string"
},
"_system_owned": false,
"description": "string",
"display_name": "string",
"id": "string",
"resource_type": "ValueConstraintExpression",
"tags": [
{
"scope": "string",
"tag": "string"
}
]
},
"description": "string",
"display_name": "string",
"id": "string",
"marked_for_delete": false,
"message": "string",
"parent_path": "string",
"path": "string",
"relative_path": "string",
"resource_type": "string",
"tags": [
{
"scope": "string",
"tag": "string"
}
],
"target": {
"attribute": "string",
"path_prefix": "string",
"target_resource_type": "string"
}
}
Vendor Extensions
This class contains the following vendor extensions defined in the spec:
x-vmw-nsx-module: PolicyConstraints