docs/xacml/example.guard.filter.yaml

   1 tosca_definitions_version: tosca_simple_yaml_1_1_0
   2 topology_template:
   3    policies:
   4    -  filter.block.region.allow.one.vnf:
   5          description: Block this region from Control Loop actions, but allow a specific vnf.
   6          type: onap.policies.controlloop.guard.common.Filter
   7          type_version: 1.0.0
   8          version: 1.0.0
   9          properties:
  10             actor: SO
  11             operation: VF Module Create
  12             algorithm: whitelist-overrides
  13             filters:
  14             -  field: cloud-region.cloud-region-id
  15                filter: RegionOne
  16                function: string-equal
  17                blacklist: true
  18             -  field: generic-vnf.vnf-id
  19                filter: e6130d03-56f1-4b0a-9a1d-e1b2ebc30e0e
  20                function: string-equal
  21                blacklist: false
  22    -  filter.allow.region.block.one.vnf:
  23          description: allow this region to do Control Loop actions, but block a specific vnf.
  24          type: onap.policies.controlloop.guard.common.Filter
  25          type_version: 1.0.0
  26          version: 1.0.0
  27          properties:
  28             actor: SO
  29             operation: VF Module Create
  30             algorithm: blacklist-overrides
  31             filters:
  32             -  field: cloud-region.cloud-region-id
  33                filter: RegionTwo
  34                function: string-equal
  35                blacklist: false
  36             -  field: generic-vnf.vnf-id
  37                filter: f17face5-69cb-4c88-9e0b-7426db7edddd
  38                function: string-equal
  39                blacklist: true