junipermist.org.getNactags
Explore with Pulumi AI
This data source provides the list of NAC Tags (Auth Policy Labels).
The NAC Tags can be used in the NAC Rules to define the matching criterias or the returned RADIUS Attributes
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/junipermist";
const nactags = junipermist.org.getNactags({
orgId: "15fca2ac-b1a6-47cc-9953-cc6906281550",
type: "match",
match: "cert_issuer",
});
import pulumi
import pulumi_junipermist as junipermist
nactags = junipermist.org.get_nactags(org_id="15fca2ac-b1a6-47cc-9953-cc6906281550",
type="match",
match="cert_issuer")
package main
import (
"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := org.GetNactags(ctx, &org.GetNactagsArgs{
OrgId: "15fca2ac-b1a6-47cc-9953-cc6906281550",
Type: pulumi.StringRef("match"),
Match: pulumi.StringRef("cert_issuer"),
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;
return await Deployment.RunAsync(() =>
{
var nactags = JuniperMist.Org.GetNactags.Invoke(new()
{
OrgId = "15fca2ac-b1a6-47cc-9953-cc6906281550",
Type = "match",
Match = "cert_issuer",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.OrgFunctions;
import com.pulumi.junipermist.org.inputs.GetNactagsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var nactags = OrgFunctions.getNactags(GetNactagsArgs.builder()
.orgId("15fca2ac-b1a6-47cc-9953-cc6906281550")
.type("match")
.match("cert_issuer")
.build());
}
}
variables:
nactags:
fn::invoke:
function: junipermist:org:getNactags
arguments:
orgId: 15fca2ac-b1a6-47cc-9953-cc6906281550
type: match
match: cert_issuer
Using getNactags
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getNactags(args: GetNactagsArgs, opts?: InvokeOptions): Promise<GetNactagsResult>
function getNactagsOutput(args: GetNactagsOutputArgs, opts?: InvokeOptions): Output<GetNactagsResult>
def get_nactags(match: Optional[str] = None,
name: Optional[str] = None,
org_id: Optional[str] = None,
type: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetNactagsResult
def get_nactags_output(match: Optional[pulumi.Input[str]] = None,
name: Optional[pulumi.Input[str]] = None,
org_id: Optional[pulumi.Input[str]] = None,
type: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetNactagsResult]
func GetNactags(ctx *Context, args *GetNactagsArgs, opts ...InvokeOption) (*GetNactagsResult, error)
func GetNactagsOutput(ctx *Context, args *GetNactagsOutputArgs, opts ...InvokeOption) GetNactagsResultOutput
> Note: This function is named GetNactags
in the Go SDK.
public static class GetNactags
{
public static Task<GetNactagsResult> InvokeAsync(GetNactagsArgs args, InvokeOptions? opts = null)
public static Output<GetNactagsResult> Invoke(GetNactagsInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetNactagsResult> getNactags(GetNactagsArgs args, InvokeOptions options)
public static Output<GetNactagsResult> getNactags(GetNactagsArgs args, InvokeOptions options)
fn::invoke:
function: junipermist:org/getNactags:getNactags
arguments:
# arguments dictionary
The following arguments are supported:
getNactags Result
The following output properties are available:
Supporting Types
GetNactagsOrgNactag
- Allow
Usermac boolOverride - Can be set to true to allow the override by usermac result
- Created
Time double - When the object has been created, in epoch
- Egress
Vlan List<string>Names - If
type
==egress_vlan_names
, list of egress vlans to return - Gbp
Tag int - If
type
==gbp_tag
- Id string
- Unique ID of the object instance in the Mist Organnization
- Match string
- if
type
==match
. enum:cert_cn
,cert_issuer
,cert_san
,cert_serial
,cert_sub
,cert_template
,client_mac
,idp_role
,ingress_vlan
,mdm_status
,nas_ip
,radius_group
,realm
,ssid
,user_name
,usermac_label
- Match
All bool This field is applicable only when
type
==match
false
: means it is sufficient to match any of the values (i.e., match-any behavior)true
: means all values should be matched (i.e., match-all behavior)
Currently it makes sense to set this field to
true
only if thematch
==idp_role
ormatch
==usermac_label
- Modified
Time double - When the object has been modified for the last time, in epoch
- Name string
- Org
Id string - Radius
Attrs List<string> - If
type
==radius_attrs
, user can specify a list of one or more standard attributes in the field "radius_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_attrs in the result of a given rule. - Radius
Group string - If
type
==radius_group
- Radius
Vendor List<string>Attrs - If
type
==radius_vendor_attrs
, user can specify a list of one or more vendor-specific attributes in the field "radius_vendor_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_vendor_attrs in the result of a given rule. - Session
Timeout int - If
type
==`session_timeout, in seconds - Type string
- enum:
egress_vlan_names
,gbp_tag
,match
,radius_attrs
,radius_group
,radius_vendor_attrs
,session_timeout
,username_attr
,vlan
- Username
Attr string - enum:
automatic
,cn
,dns
,email
,upn
- Values List<string>
- If
type
==match
- Vlan string
- If
type
==vlan
- Allow
Usermac boolOverride - Can be set to true to allow the override by usermac result
- Created
Time float64 - When the object has been created, in epoch
- Egress
Vlan []stringNames - If
type
==egress_vlan_names
, list of egress vlans to return - Gbp
Tag int - If
type
==gbp_tag
- Id string
- Unique ID of the object instance in the Mist Organnization
- Match string
- if
type
==match
. enum:cert_cn
,cert_issuer
,cert_san
,cert_serial
,cert_sub
,cert_template
,client_mac
,idp_role
,ingress_vlan
,mdm_status
,nas_ip
,radius_group
,realm
,ssid
,user_name
,usermac_label
- Match
All bool This field is applicable only when
type
==match
false
: means it is sufficient to match any of the values (i.e., match-any behavior)true
: means all values should be matched (i.e., match-all behavior)
Currently it makes sense to set this field to
true
only if thematch
==idp_role
ormatch
==usermac_label
- Modified
Time float64 - When the object has been modified for the last time, in epoch
- Name string
- Org
Id string - Radius
Attrs []string - If
type
==radius_attrs
, user can specify a list of one or more standard attributes in the field "radius_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_attrs in the result of a given rule. - Radius
Group string - If
type
==radius_group
- Radius
Vendor []stringAttrs - If
type
==radius_vendor_attrs
, user can specify a list of one or more vendor-specific attributes in the field "radius_vendor_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_vendor_attrs in the result of a given rule. - Session
Timeout int - If
type
==`session_timeout, in seconds - Type string
- enum:
egress_vlan_names
,gbp_tag
,match
,radius_attrs
,radius_group
,radius_vendor_attrs
,session_timeout
,username_attr
,vlan
- Username
Attr string - enum:
automatic
,cn
,dns
,email
,upn
- Values []string
- If
type
==match
- Vlan string
- If
type
==vlan
- allow
Usermac BooleanOverride - Can be set to true to allow the override by usermac result
- created
Time Double - When the object has been created, in epoch
- egress
Vlan List<String>Names - If
type
==egress_vlan_names
, list of egress vlans to return - gbp
Tag Integer - If
type
==gbp_tag
- id String
- Unique ID of the object instance in the Mist Organnization
- match String
- if
type
==match
. enum:cert_cn
,cert_issuer
,cert_san
,cert_serial
,cert_sub
,cert_template
,client_mac
,idp_role
,ingress_vlan
,mdm_status
,nas_ip
,radius_group
,realm
,ssid
,user_name
,usermac_label
- match
All Boolean This field is applicable only when
type
==match
false
: means it is sufficient to match any of the values (i.e., match-any behavior)true
: means all values should be matched (i.e., match-all behavior)
Currently it makes sense to set this field to
true
only if thematch
==idp_role
ormatch
==usermac_label
- modified
Time Double - When the object has been modified for the last time, in epoch
- name String
- org
Id String - radius
Attrs List<String> - If
type
==radius_attrs
, user can specify a list of one or more standard attributes in the field "radius_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_attrs in the result of a given rule. - radius
Group String - If
type
==radius_group
- radius
Vendor List<String>Attrs - If
type
==radius_vendor_attrs
, user can specify a list of one or more vendor-specific attributes in the field "radius_vendor_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_vendor_attrs in the result of a given rule. - session
Timeout Integer - If
type
==`session_timeout, in seconds - type String
- enum:
egress_vlan_names
,gbp_tag
,match
,radius_attrs
,radius_group
,radius_vendor_attrs
,session_timeout
,username_attr
,vlan
- username
Attr String - enum:
automatic
,cn
,dns
,email
,upn
- values List<String>
- If
type
==match
- vlan String
- If
type
==vlan
- allow
Usermac booleanOverride - Can be set to true to allow the override by usermac result
- created
Time number - When the object has been created, in epoch
- egress
Vlan string[]Names - If
type
==egress_vlan_names
, list of egress vlans to return - gbp
Tag number - If
type
==gbp_tag
- id string
- Unique ID of the object instance in the Mist Organnization
- match string
- if
type
==match
. enum:cert_cn
,cert_issuer
,cert_san
,cert_serial
,cert_sub
,cert_template
,client_mac
,idp_role
,ingress_vlan
,mdm_status
,nas_ip
,radius_group
,realm
,ssid
,user_name
,usermac_label
- match
All boolean This field is applicable only when
type
==match
false
: means it is sufficient to match any of the values (i.e., match-any behavior)true
: means all values should be matched (i.e., match-all behavior)
Currently it makes sense to set this field to
true
only if thematch
==idp_role
ormatch
==usermac_label
- modified
Time number - When the object has been modified for the last time, in epoch
- name string
- org
Id string - radius
Attrs string[] - If
type
==radius_attrs
, user can specify a list of one or more standard attributes in the field "radius_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_attrs in the result of a given rule. - radius
Group string - If
type
==radius_group
- radius
Vendor string[]Attrs - If
type
==radius_vendor_attrs
, user can specify a list of one or more vendor-specific attributes in the field "radius_vendor_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_vendor_attrs in the result of a given rule. - session
Timeout number - If
type
==`session_timeout, in seconds - type string
- enum:
egress_vlan_names
,gbp_tag
,match
,radius_attrs
,radius_group
,radius_vendor_attrs
,session_timeout
,username_attr
,vlan
- username
Attr string - enum:
automatic
,cn
,dns
,email
,upn
- values string[]
- If
type
==match
- vlan string
- If
type
==vlan
- allow_
usermac_ booloverride - Can be set to true to allow the override by usermac result
- created_
time float - When the object has been created, in epoch
- egress_
vlan_ Sequence[str]names - If
type
==egress_vlan_names
, list of egress vlans to return - gbp_
tag int - If
type
==gbp_tag
- id str
- Unique ID of the object instance in the Mist Organnization
- match str
- if
type
==match
. enum:cert_cn
,cert_issuer
,cert_san
,cert_serial
,cert_sub
,cert_template
,client_mac
,idp_role
,ingress_vlan
,mdm_status
,nas_ip
,radius_group
,realm
,ssid
,user_name
,usermac_label
- match_
all bool This field is applicable only when
type
==match
false
: means it is sufficient to match any of the values (i.e., match-any behavior)true
: means all values should be matched (i.e., match-all behavior)
Currently it makes sense to set this field to
true
only if thematch
==idp_role
ormatch
==usermac_label
- modified_
time float - When the object has been modified for the last time, in epoch
- name str
- org_
id str - radius_
attrs Sequence[str] - If
type
==radius_attrs
, user can specify a list of one or more standard attributes in the field "radius_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_attrs in the result of a given rule. - radius_
group str - If
type
==radius_group
- radius_
vendor_ Sequence[str]attrs - If
type
==radius_vendor_attrs
, user can specify a list of one or more vendor-specific attributes in the field "radius_vendor_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_vendor_attrs in the result of a given rule. - session_
timeout int - If
type
==`session_timeout, in seconds - type str
- enum:
egress_vlan_names
,gbp_tag
,match
,radius_attrs
,radius_group
,radius_vendor_attrs
,session_timeout
,username_attr
,vlan
- username_
attr str - enum:
automatic
,cn
,dns
,email
,upn
- values Sequence[str]
- If
type
==match
- vlan str
- If
type
==vlan
- allow
Usermac BooleanOverride - Can be set to true to allow the override by usermac result
- created
Time Number - When the object has been created, in epoch
- egress
Vlan List<String>Names - If
type
==egress_vlan_names
, list of egress vlans to return - gbp
Tag Number - If
type
==gbp_tag
- id String
- Unique ID of the object instance in the Mist Organnization
- match String
- if
type
==match
. enum:cert_cn
,cert_issuer
,cert_san
,cert_serial
,cert_sub
,cert_template
,client_mac
,idp_role
,ingress_vlan
,mdm_status
,nas_ip
,radius_group
,realm
,ssid
,user_name
,usermac_label
- match
All Boolean This field is applicable only when
type
==match
false
: means it is sufficient to match any of the values (i.e., match-any behavior)true
: means all values should be matched (i.e., match-all behavior)
Currently it makes sense to set this field to
true
only if thematch
==idp_role
ormatch
==usermac_label
- modified
Time Number - When the object has been modified for the last time, in epoch
- name String
- org
Id String - radius
Attrs List<String> - If
type
==radius_attrs
, user can specify a list of one or more standard attributes in the field "radius_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_attrs in the result of a given rule. - radius
Group String - If
type
==radius_group
- radius
Vendor List<String>Attrs - If
type
==radius_vendor_attrs
, user can specify a list of one or more vendor-specific attributes in the field "radius_vendor_attrs". It is the responsibility of the user to provide a syntactically correct string, otherwise it may not work as expected. Note that it is allowed to have more than one radius_vendor_attrs in the result of a given rule. - session
Timeout Number - If
type
==`session_timeout, in seconds - type String
- enum:
egress_vlan_names
,gbp_tag
,match
,radius_attrs
,radius_group
,radius_vendor_attrs
,session_timeout
,username_attr
,vlan
- username
Attr String - enum:
automatic
,cn
,dns
,email
,upn
- values List<String>
- If
type
==match
- vlan String
- If
type
==vlan
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mist
Terraform Provider.