NvGroupDefinition

Scope: Namespaced
Version: v1

  • spec
    object
    • spec.selector
      object

      Required value

      • spec.selector.comment
        string
      • spec.selector.criteria
        array of objects
        • spec.selector.criteria.key
          string
        • spec.selector.criteria.op
          string
        • spec.selector.criteria.value
          string
      • spec.selector.name
        string

        Required value

NvAdmissionControlSecurityRule

Scope: Cluster
Version: v1

  • spec
    object
    • spec.config
      object
      • spec.config.client_mode
        string

        Required value

        Allowed values: service, url

      • spec.config.enable
        boolean

        Required value

      • spec.config.mode
        string

        Required value

        Allowed values: monitor, protect

    • spec.rules
      array of objects
      • spec.rules.action
        string

        Allowed values: allow, deny

      • spec.rules.comment
        string
      • spec.rules.containers
        array of strings
        • spec.rules.containers.Element of the array
          string

          Allowed values: containers, init_containers, ephemeral_containers

      • spec.rules.criteria
        array of objects
        • spec.rules.criteria.name
          string
        • spec.rules.criteria.op
          string
        • spec.rules.criteria.path
          string
        • spec.rules.criteria.sub_criteria
          array of objects
          • spec.rules.criteria.sub_criteria.name
            string
          • spec.rules.criteria.sub_criteria.op
            string
          • spec.rules.criteria.sub_criteria.value
            string
        • spec.rules.criteria.template_kind
          string
        • spec.rules.criteria.type
          string
        • spec.rules.criteria.value
          string
        • spec.rules.criteria.value_type
          string
      • spec.rules.disabled
        boolean
      • spec.rules.id
        integer
      • spec.rules.rule_mode
        string

        Allowed values: , monitor, protect

NvComplianceProfile

Scope: Cluster
Version: v1

  • spec
    object
    • spec.templates
      object
      • spec.templates.disable_system
        boolean
      • spec.templates.entries
        array of objects

        Required value

        • spec.templates.entries.tags
          array of strings
        • spec.templates.entries.test_number
          string

NvSecurityRule

Scope: Namespaced
Version: v1

  • spec
    object
    • spec.dlp
      object
      • spec.dlp.settings
        array of objects
        • spec.dlp.settings.action
          string

          Allowed values: allow, deny

        • spec.dlp.settings.name
          string
      • spec.dlp.status
        boolean
    • spec.egress
      array of objects
      • spec.egress.action
        string

        Allowed values: allow, deny

      • spec.egress.applications
        array of strings
      • spec.egress.name
        string
      • spec.egress.ports
        string
      • spec.egress.priority
        integer
      • spec.egress.selector
        object
        • spec.egress.selector.comment
          string
        • spec.egress.selector.criteria
          array of objects
          • spec.egress.selector.criteria.key
            string
          • spec.egress.selector.criteria.op
            string
          • spec.egress.selector.criteria.value
            string
        • spec.egress.selector.name
          string

          Required value

        • spec.egress.selector.name_referral
          boolean
        • spec.egress.selector.original_name
          string
    • spec.file
      array of objects
      • spec.file.app
        array of strings
      • spec.file.behavior
        string

        Allowed values: monitor_change, block_access

      • spec.file.filter
        string
      • spec.file.recursive
        boolean
    • spec.ingress
      array of objects
      • spec.ingress.action
        string

        Allowed values: allow, deny

      • spec.ingress.applications
        array of strings
      • spec.ingress.name
        string
      • spec.ingress.ports
        string
      • spec.ingress.priority
        integer
      • spec.ingress.selector
        object
        • spec.ingress.selector.comment
          string
        • spec.ingress.selector.criteria
          array of objects
          • spec.ingress.selector.criteria.key
            string
          • spec.ingress.selector.criteria.op
            string
          • spec.ingress.selector.criteria.value
            string
        • spec.ingress.selector.name
          string

          Required value

        • spec.ingress.selector.name_referral
          boolean
        • spec.ingress.selector.original_name
          string
    • spec.process
      array of objects
      • spec.process.action
        string

        Allowed values: allow, deny

      • spec.process.allow_update
        boolean
      • spec.process.name
        string
      • spec.process.path
        string
    • spec.process_profile
      object
      • spec.process_profile.baseline
        string

        Allowed values: default, shield, basic, zero-drift

      • spec.process_profile.mode
        string

        Allowed values: Discover, Monitor, Protect

    • spec.target
      object

      Required value

      • spec.target.policymode
        string

        Allowed values: Discover, Monitor, Protect, N/A

      • spec.target.selector
        object

        Required value

        • spec.target.selector.comment
          string
        • spec.target.selector.criteria
          array of objects
          • spec.target.selector.criteria.key
            string
          • spec.target.selector.criteria.op
            string
          • spec.target.selector.criteria.value
            string
        • spec.target.selector.grp_band_width
          integer
        • spec.target.selector.grp_sess_cur
          integer
        • spec.target.selector.grp_sess_rate
          integer
        • spec.target.selector.mon_metric
          boolean
        • spec.target.selector.name
          string

          Required value

        • spec.target.selector.name_referral
          boolean
        • spec.target.selector.original_name
          string
    • spec.waf
      object
      • spec.waf.settings
        array of objects
        • spec.waf.settings.action
          string

          Allowed values: allow, deny

        • spec.waf.settings.name
          string
      • spec.waf.status
        boolean

CspAdapterUsageRecord

Scope: Cluster
Version: v1

  • base_product
    string
  • managed_node_count
    integer
  • reporting_time
    string

NvDlpSecurityRule

Scope: Cluster
Version: v1

  • spec
    object
    • spec.sensor
      object

      Required value

      • spec.sensor.comment
        string
      • spec.sensor.name
        string

        Required value

      • spec.sensor.rules
        array of objects
        • spec.sensor.rules.name
          string
        • spec.sensor.rules.patterns
          array of objects
          • spec.sensor.rules.patterns.context
            string

            Allowed values: url, header, body, packet

          • spec.sensor.rules.patterns.key
            string

            Allowed values: pattern

          • spec.sensor.rules.patterns.op
            string

            Allowed values: regex, !regex

          • spec.sensor.rules.patterns.value
            string

NvVulnerabilityProfile

Scope: Cluster
Version: v1

  • spec
    object
    • spec.profile
      object

      Required value

      • spec.profile.entries
        array of objects

        Required value

        • spec.profile.entries.comment
          string
        • spec.profile.entries.days
          integer
        • spec.profile.entries.domains
          array of strings
        • spec.profile.entries.images
          array of strings
        • spec.profile.entries.name
          string

NvWafSecurityRule

Scope: Cluster
Version: v1

  • spec
    object
    • spec.sensor
      object

      Required value

      • spec.sensor.comment
        string
      • spec.sensor.name
        string

        Required value

      • spec.sensor.rules
        array of objects
        • spec.sensor.rules.name
          string
        • spec.sensor.rules.patterns
          array of objects
          • spec.sensor.rules.patterns.context
            string

            Allowed values: url, header, body, packet

          • spec.sensor.rules.patterns.key
            string

            Allowed values: pattern

          • spec.sensor.rules.patterns.op
            string

            Allowed values: regex, !regex

          • spec.sensor.rules.patterns.value
            string