csit/variables/gbp/master/tenants.json

   1 {
   2     "policy:tenants": {
   3         "policy:tenant": [
   4             {
   5                 "contract": [
   6                     {
   7                         "clause": [
   8                             {
   9                                 "name": "allow-http-clause",
  10                                 "subject-refs": [
  11                                     "allow-http-subject",
  12                                     "allow-icmp-subject"
  13                                 ]
  14                             }
  15                         ],
  16                         "id": "icmp-http-contract",
  17                         "subject": [
  18                             {
  19                                 "name": "allow-http-subject",
  20                                 "rule": [
  21                                     {
  22                                         "classifier-ref": [
  23                                             {
  24                                                 "direction": "in",
  25                                                 "name": "http-dest",
  26                                                 "instance-name": "http-dest"
  27                                             },
  28                                             {
  29                                                 "direction": "out",
  30                                                 "name": "http-src",
  31                                                 "instance-name": "http-src"
  32                                             }
  33                                         ],
  34                                         "action-ref": [
  35                                             {
  36                                                 "name": "allow1",
  37                                                 "order": 0
  38                                             }
  39                                         ],
  40                                         "name": "allow-http-rule"
  41                                     }
  42                                 ]
  43                             },
  44                             {
  45                                 "name": "allow-icmp-subject",
  46                                 "rule": [
  47                                     {
  48                                         "classifier-ref": [
  49                                             {
  50                                                 "name": "icmp",
  51                                                 "instance-name": "icmp"
  52                                             }
  53                                         ],
  54                                         "action-ref": [
  55                                             {
  56                                                 "name": "allow1",
  57                                                 "order": 0
  58                                             }
  59                                         ],
  60                                         "name": "allow-icmp-rule"
  61                                     }
  62                                 ]
  63                             }
  64                         ]
  65                     }
  66                 ],
  67                 "endpoint-group": [
  68                     {
  69                         "consumer-named-selector": [
  70                             {
  71                                 "contract": [
  72                                     "icmp-http-contract"
  73                                 ],
  74                                 "name": "webservers-clients-icmp-http-contract"
  75                             }
  76                         ],
  77                         "id": "clients",
  78                         "provider-named-selector": []
  79                     },
  80                     {
  81                         "consumer-named-selector": [],
  82                         "id": "webservers",
  83                         "provider-named-selector": [
  84                             {
  85                                 "contract": [
  86                                     "icmp-http-contract"
  87                                 ],
  88                                 "name": "webservers-clients-icmp-http-contract"
  89                             }
  90                         ]
  91                     }
  92                 ],
  93                 "id": "tenant-red",
  94                 "l2-bridge-domain": [
  95                     {
  96                         "id": "bridge-domain1",
  97                         "parent": "l3-context-vrf-red"
  98                     }
  99                 ],
 100                 "l2-flood-domain": [
 101                     {
 102                         "id": "flood-domain-1",
 103                         "parent": "bridge-domain1"
 104                     },
 105                     {
 106                         "id": "flood-domain1",
 107                         "parent": "bridge-domain1"
 108                     }
 109                 ],
 110                 "l3-context": [
 111                     {
 112                         "id": "l3-context-vrf-red"
 113                     }
 114                 ],
 115                 "name": "GBPPOC",
 116                 "subject-feature-instances": {
 117                     "classifier-instance": [
 118                         {
 119                             "classifier-definition-id": "Classifier-L4",
 120                             "name": "http-dest",
 121                             "parameter-value": [
 122                                 {
 123                                     "int-value": "6",
 124                                     "name": "proto"
 125                                 },
 126                                 {
 127                                     "int-value": "80",
 128                                     "name": "destport"
 129                                 }
 130                             ]
 131                         },
 132                         {
 133                             "classifier-definition-id": "Classifier-L4",
 134                             "name": "http-src",
 135                             "parameter-value": [
 136                                 {
 137                                     "int-value": "6",
 138                                     "name": "proto"
 139                                 },
 140                                 {
 141                                     "int-value": "80",
 142                                     "name": "sourceport"
 143                                 }
 144                             ]
 145                         },
 146                         {
 147                             "classifier-definition-id": "Classifier-IP-Protocol",
 148                             "name": "icmp",
 149                             "parameter-value": [
 150                                 {
 151                                     "int-value": "1",
 152                                     "name": "proto"
 153                                 }
 154                             ]
 155                         }
 156                     ],
 157                     "action-instance": [
 158                         {
 159                             "name": "allow1",
 160                             "action-definition-id": "Action-Allow"
 161                         }
 162                     ]
 163                 },
 164                 "subnet": [
 165                     {
 166                         "id": "subnet-10.0.35.0/24",
 167                         "ip-prefix": "10.0.35.1/24",
 168                         "parent": "flood-domain-1",
 169                         "virtual-router-ip": "10.0.35.1"
 170                     },
 171                     {
 172                         "id": "subnet-10.0.36.0/24",
 173                         "ip-prefix": "10.0.36.1/24",
 174                         "parent": "flood-domain1",
 175                         "virtual-router-ip": "10.0.36.1"
 176                     }
 177                 ]
 178             }
 179         ]
 180     }
 181 }
 182
 183