VimEnforcement

VimEnforcement
VimEnforcement
JSON Example
{
    "name": "string",
    "vimId": "string",
    "vimSelector": {
        "matchExpressions": [
            {
                "key": "string",
                "operator": "string",
                "values": [
                    "string"
                ]
            }
        ],
        "matchLabels": {
            "matchLabels": "string"
        }
    },
    "enforcementActionOverrides": "string",
    "matchSpecOverrides": {
        "data": "string",
        "type": "string"
    },
    "parametersOverrides": {
        "data": "string",
        "type": "string"
    },
    "deployOpaOverrides": false
}
string
name
Optional

The name of the enforcement in the specified Vim. defaults to some random string appended to the constraintTemplateName length <63

string
vimId
Required

The subject VIM identifier.

object
vimSelector
Optional

VimSelector is the combination of two optional fields: matchLabels and matchExpressions. These two fieldsprovide different methods of selecting or excluding tca vim objects based on the tag/label keys and values included in vim object. All selection expressions from both sections are ANDed to determine if an object meets the cumulative requirements of the selector.

string
enforcementActionOverrides
Optional

overrides of the enforcementActions specified in default. The supported enforcementActions are [deny, dryrun, warn]. Strategic merge patch.

TypedDataObject
matchSpecOverrides
Optional

Overrides (Strategic Merge Patch) of the Match selects which objects are in scope.

TypedDataObject
parametersOverrides
Optional

Overrides (Strategic Merge Patch) of the parameters which will be passed to the constraint template cr.

boolean
deployOpaOverrides
Optional

overrides of the deployOpa flag in default configuration

Used By