Skip to content

Added missing string matcher fields in network_rules for AuthzPolicy;#18322

Draft
matheusaleixo-cit wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
matheusaleixo-cit:fix-network-rules-for-networksecurity-authz-policy
Draft

Added missing string matcher fields in network_rules for AuthzPolicy;#18322
matheusaleixo-cit wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
matheusaleixo-cit:fix-network-rules-for-networksecurity-authz-policy

Conversation

@matheusaleixo-cit

Copy link
Copy Markdown
Contributor

Adds stringMatch fields missing from current network_rules implementation in google_network_security_authz_policy resource.

Also adds missing fields when, to.noOperations, from.sources.resources, from.not_sources.resources from network_rules.

All fields added to AuthzPolicy:

networkRules.when

networkRules.to.operations.SNIs.ignore_case
networkRules.to.operations.SNIs.prefix
networkRules.to.operations.SNIs.suffix
networkRules.to.operations.SNIs.contains
networkRules.to.noOperations.SNIs[]
networkRules.to.noOperations.SNIs.ignore_case
networkRules.to.noOperations.SNIs.exact
networkRules.to.noOperations.SNIs.prefix
networkRules.to.noOperations.SNIs.suffix
networkRules.to.noOperations.SNIs.contains

networkRules.from.sources.principals.principal.ignore_case
networkRules.from.sources.principals.principal.prefix
networkRules.from.sources.principals.principal.suffix
networkRules.from.sources.principals.principal.contains
networkRules.from.notSources.principals.principal.ignore_case
networkRules.from.notSources.principals.principal.prefix
networkRules.from.notSources.principals.principal.suffix
networkRules.from.notSources.principals.principal.contains

networkRules.from.sources.resources[]
networkRules.from.sources.resources.tagValueIdSet​
networkRules.from.sources.resources.iamServiceAccount
networkRules.from.notSources.resources[]
networkRules.from.notSources.resources.tagValueIdSet​
networkRules.from.notSources.resources.iamServiceAccount

Release Note Template for Downstream PRs (will be copied)

See Write release notes for guidance.

networksecurity: added missing matchers `ignore_case`, `prefix`, `suffix` and `contains` on `network_rules` for `google_network_security_authz_policy` resource
networksecurity: added nested field `to.noOperations`, on `network_rules` for `google_network_security_authz_policy` resource
networksecurity: added nested field `from.sources/not_sources.resources`, on `network_rules` for `google_network_security_authz_policy` resource

@modular-magician modular-magician added the awaiting-approval Pull requests that need reviewer's approval to run presubmit tests label Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting-approval Pull requests that need reviewer's approval to run presubmit tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants