​

ves-io-schema-fast_acl-API-Create

Published April 5, 2023 | Last modified May 30, 2025

Examples of creating fast_acl

Usecase:

Create acmecorp-fast-acl to allow access to all VIPs in site from white list

Request using vesctl:

vesctl configuration create fast_acl -i fast_acl.yaml

where file fast_acl.yaml has following contents (fast_acl.CreateRequest):

RequestJSON:

{
    "metadata": {
        "name": "acmecorp-fast-acl",
        "namespace": "system"
    },
    "spec": {
        "legacy_acl": {
            "network_type": {
                "site_local": {}
            },
            "destination_type": {
                "vip_services": {}
            },
            "source_rules": [
                {
                    "tenant": "acmecorp",
                    "namespace": "system",
                    "name": "fast-acl-rule-white-list"
                }
            ]
        }
    }
}
Copied!

vesctl yaml response:

ResponseJSON:

{
    "metadata": {
        "name": "acmecorp-fast-acl",
        "namespace": "system",
        "labels": {},
        "annotations": {},
        "description": "",
        "disable": false
    },
    "system_metadata": {
        "uid": "0edb9294-b4fc-44f8-831c-ec9883997b7e",
        "creation_timestamp": "2025-05-30T01:20:12.757302Z",
        "deletion_timestamp": null,
        "modification_timestamp": null,
        "initializers": null,
        "finalizers": [],
        "tenant": "acmecorp",
        "creator_class": "examplesvc",
        "creator_id": "examplesvc",
        "object_index": 0,
        "owner_view": null,
        "labels": {}
    },
    "spec": {
        "protocol_policer": null
    }
}
Copied!

Request using curl:

curl -X 'POST' -d '{"metadata":{"name":"acmecorp-fast-acl","namespace":"system"},"spec":{"legacy_acl":{"network_type":{"site_local":{}},"destination_type":{"vip_services":{}},"source_rules":[{"tenant":"acmecorp","namespace":"system","name":"fast-acl-rule-white-list"}]}}}' -H 'Content-Type: application/json' -H 'X-Volterra-Useragent: v1/pgm=_var_folders_q2_3kp8z3zs0x5_m7pk1bgb0_ph0000gp_T_go-build1497866850_b001_apidocs.test/host=MTY6VVHQPH/svc=S:examplesvc/site=mytestce01' 'https://acmecorp.console.ves.volterra.io/api/config/namespaces/system/fast_acls'
Copied!

curl response:

HTTP/1.1 200 OK
Content-Length: 643
Content-Type: application/json
Date: Fri, 30 May 2025 01:20:12 GMT
Vary: Accept-Encoding

{
  "metadata": {
    "name": "acmecorp-fast-acl",
    "namespace": "system",
    "labels": {
    },
    "annotations": {
    },
    "description": "",
    "disable": false
  },
  "system_metadata": {
    "uid": "0edb9294-b4fc-44f8-831c-ec9883997b7e",
    "creation_timestamp": "2025-05-30T01:20:12.757302Z",
    "deletion_timestamp": null,
    "modification_timestamp": null,
    "initializers": null,
    "finalizers": [
    ],
    "tenant": "acmecorp",
    "creator_class": "examplesvc",
    "creator_id": "examplesvc",
    "object_index": 0,
    "owner_view": null,
    "labels": {
    }
  },
  "spec": {
    "protocol_policer": null
  }
}
Copied!

Usecase:

Create fast-acl-1234vip to protect single destination IP

Request using vesctl:

vesctl configuration create fast_acl -i fast_acl.yaml

where file fast_acl.yaml has following contents (fast_acl.CreateRequest):

RequestJSON:

{
    "metadata": {
        "name": "fast-acl-1234vip",
        "namespace": "system"
    },
    "spec": {
        "legacy_acl": {
            "network_type": {
                "site_local": {}
            },
            "destination_type": {
                "vip_services": {}
            },
            "source_rules": [
                {
                    "tenant": "acmecorp",
                    "namespace": "system",
                    "name": "fast-acl-1234vip-rule1"
                },
                {
                    "tenant": "acmecorp",
                    "namespace": "system",
                    "name": "fast-acl-1234vip-rule2"
                }
            ]
        }
    }
}
Copied!

vesctl yaml response:

ResponseJSON:

{
    "metadata": {
        "name": "fast-acl-1234vip",
        "namespace": "system",
        "labels": {},
        "annotations": {},
        "description": "",
        "disable": false
    },
    "system_metadata": {
        "uid": "cf1efe5d-94b1-4c91-80ae-84c2edcc33d8",
        "creation_timestamp": "2025-05-30T01:20:12.764498Z",
        "deletion_timestamp": null,
        "modification_timestamp": null,
        "initializers": null,
        "finalizers": [],
        "tenant": "acmecorp",
        "creator_class": "examplesvc",
        "creator_id": "examplesvc",
        "object_index": 0,
        "owner_view": null,
        "labels": {}
    },
    "spec": {
        "protocol_policer": null
    }
}
Copied!

Request using curl:

curl -X 'POST' -d '{"metadata":{"name":"fast-acl-1234vip","namespace":"system"},"spec":{"legacy_acl":{"network_type":{"site_local":{}},"destination_type":{"vip_services":{}},"source_rules":[{"tenant":"acmecorp","namespace":"system","name":"fast-acl-1234vip-rule1"},{"tenant":"acmecorp","namespace":"system","name":"fast-acl-1234vip-rule2"}]}}}' -H 'Content-Type: application/json' -H 'X-Volterra-Useragent: v1/pgm=_var_folders_q2_3kp8z3zs0x5_m7pk1bgb0_ph0000gp_T_go-build1497866850_b001_apidocs.test/host=MTY6VVHQPH/svc=S:examplesvc/site=mytestce01' 'https://acmecorp.console.ves.volterra.io/api/config/namespaces/system/fast_acls'
Copied!

curl response:

HTTP/1.1 200 OK
Content-Length: 642
Content-Type: application/json
Date: Fri, 30 May 2025 01:20:12 GMT
Vary: Accept-Encoding

{
  "metadata": {
    "name": "fast-acl-1234vip",
    "namespace": "system",
    "labels": {
    },
    "annotations": {
    },
    "description": "",
    "disable": false
  },
  "system_metadata": {
    "uid": "cf1efe5d-94b1-4c91-80ae-84c2edcc33d8",
    "creation_timestamp": "2025-05-30T01:20:12.764498Z",
    "deletion_timestamp": null,
    "modification_timestamp": null,
    "initializers": null,
    "finalizers": [
    ],
    "tenant": "acmecorp",
    "creator_class": "examplesvc",
    "creator_id": "examplesvc",
    "object_index": 0,
    "owner_view": null,
    "labels": {
    }
  },
  "spec": {
    "protocol_policer": null
  }
}
Copied!
On this page: