$schema: "http://json-schema.org/draft-06/schema#"

title: networksecurity v1beta1 GatewaySecurityPolicyRule export schema
description: A gcloud export/import command YAML validation schema.
type: object
required:
- basicProfile
- enabled
- name
- priority
- sessionMatcher
additionalProperties: false
properties:
  COMMENT:
    type: object
    description: User specified info ignored by gcloud import.
    additionalProperties: false
    properties:
      template-id:
        type: string
      region:
        type: string
      description:
        type: string
      date:
        type: string
      version:
        type: string
  UNKNOWN:
    type: array
    description: Unknown API fields that cannot be imported.
    items:
      type: string
  applicationMatcher:
    description: CEL expression for matching on L7/application level criteria.
    type: string
  basicProfile:
    description: Profile which tells what the primitive action should be.
    type: string
    enum:
    - ALLOW
    - BASIC_PROFILE_UNSPECIFIED
    - DENY
  description:
    description: Free-text description of the resource.
    type: string
  enabled:
    description: Whether the rule is enforced.
    type: boolean
  name:
    description: |-
      Immutable. Name of the resource. ame is the full resource name so
      projects/{project}/locations/{location}/gatewaySecurityPolicies/
      {gateway_security_policy}/rules/{rule} rule should match the pattern:
      (^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
    type: string
  priority:
    description: |-
      Priority of the rule. Lower number corresponds to higher precedence.
    type: integer
  sessionMatcher:
    description: CEL expression for matching on session criteria.
    type: string
  tlsInspectionEnabled:
    description: |-
      Flag to enable TLS inspection of traffic matching on , can only be true if
      the parent GatewaySecurityPolicy references a TLSInspectionConfig.
    type: boolean
