Applying a Policy Group
Function
This API is used to apply a policy group.
Calling Method
For details, see Calling APIs.
URI
POST /v5/{project_id}/policy/deploy
Parameter |
Mandatory |
Type |
Description |
---|---|---|---|
project_id |
Yes |
String |
Definition Project ID, which is used to specify the project that an asset belongs to. After the project ID is configured, you can query assets in the project using the project ID. For details about how to obtain it, see Obtaining a Project ID. Constraints N/A Range The value can contain 1 to 256 characters. Default Value N/A |
Parameter |
Mandatory |
Type |
Description |
---|---|---|---|
enterprise_project_id |
No |
String |
Definition Enterprise project ID, which is used to filter assets in different enterprise projects. For details, see Obtaining an Enterprise Project ID. To query assets in all enterprise projects, set this parameter to all_granted_eps. Constraints You need to set this parameter only after the enterprise project function is enabled. Range The value can contain 1 to 256 characters. Default Value 0: default enterprise project. |
Request Parameters
Parameter |
Mandatory |
Type |
Description |
---|---|---|---|
X-Auth-Token |
Yes |
String |
Definition User token, which contains user identity and permissions. The token can be used for identity authentication when an API is called. For details about how to obtain the token, see Obtaining a User Token. Constraints N/A Range The value can contain 1 to 32,768 characters. Default Value N/A |
region |
No |
String |
Region ID |
Parameter |
Mandatory |
Type |
Description |
---|---|---|---|
target_policy_group_id |
Yes |
String |
Definition ID of the policy group to be deployed. Constraints You need to query the ListPolicyGroup API. In the returned data_list, only the group_id whose support_version is hss.version.premium or hss.version.container.enterprise can be transferred. Range The value can contain 36 to 64 characters. Only letters, numbers, and hyphens (-) are allowed. Default Value N/A |
operate_all |
No |
Boolean |
Definition Whether to deploy policies on all servers, pods, workloads, or clusters. If this parameter is set to true, the system automatically filters the servers, pods, workloads, or clusters that meet the edition and OS requirements of the policy group, and deploy policies on them. In this case, you do not need to configure host_id_list. If this parameter is set to false, you need to configure host_id_list. Constraints N/A Range
Default Value N/A |
deploy_type |
No |
String |
Policy deployment type:
|
host_id_list |
No |
Array of strings |
Definition ID list of servers, pods, workloads, or clusters where the policy group needs to be deployed. Constraints N/A Range 0 to 10,000 items are allowed. Default Value N/A |
Response Parameters
Status code: 200
Request succeeded.
None
Example Requests
Deploy a server protection policy. The target server ID is 15462c0e-32c6-4217-a869-bbd131a00ecf, and the target policy ID is f671f7-2677-4705-a320-de1a62bff306.
POST https://{endpoint}/v5/{project_id}/policy/deploy { "target_policy_group_id" : "1df671f7-2677-4705-a320-de1a62bff306", "host_id_list" : [ "15462c0e-32c6-4217-a869-bbd131a00ecf" ], "operate_all" : false }
Example Responses
None
SDK Sample Code
The SDK sample code is as follows.
Deploy a server protection policy. The target server ID is 15462c0e-32c6-4217-a869-bbd131a00ecf, and the target policy ID is f671f7-2677-4705-a320-de1a62bff306.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 |
package com.huaweicloud.sdk.test; import com.huaweicloud.sdk.core.auth.ICredential; import com.huaweicloud.sdk.core.auth.BasicCredentials; import com.huaweicloud.sdk.core.exception.ConnectionException; import com.huaweicloud.sdk.core.exception.RequestTimeoutException; import com.huaweicloud.sdk.core.exception.ServiceResponseException; import com.huaweicloud.sdk.hss.v5.region.HssRegion; import com.huaweicloud.sdk.hss.v5.*; import com.huaweicloud.sdk.hss.v5.model.*; import java.util.List; import java.util.ArrayList; public class AssociatePolicyGroupSolution { public static void main(String[] args) { // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment String ak = System.getenv("CLOUD_SDK_AK"); String sk = System.getenv("CLOUD_SDK_SK"); String projectId = "{project_id}"; ICredential auth = new BasicCredentials() .withProjectId(projectId) .withAk(ak) .withSk(sk); HssClient client = HssClient.newBuilder() .withCredential(auth) .withRegion(HssRegion.valueOf("<YOUR REGION>")) .build(); AssociatePolicyGroupRequest request = new AssociatePolicyGroupRequest(); AssociatePolicyGroupRequestInfo body = new AssociatePolicyGroupRequestInfo(); List<String> listbodyHostIdList = new ArrayList<>(); listbodyHostIdList.add("15462c0e-32c6-4217-a869-bbd131a00ecf"); body.withHostIdList(listbodyHostIdList); body.withOperateAll(false); body.withTargetPolicyGroupId("1df671f7-2677-4705-a320-de1a62bff306"); request.withBody(body); try { AssociatePolicyGroupResponse response = client.associatePolicyGroup(request); System.out.println(response.toString()); } catch (ConnectionException e) { e.printStackTrace(); } catch (RequestTimeoutException e) { e.printStackTrace(); } catch (ServiceResponseException e) { e.printStackTrace(); System.out.println(e.getHttpStatusCode()); System.out.println(e.getRequestId()); System.out.println(e.getErrorCode()); System.out.println(e.getErrorMsg()); } } } |
Deploy a server protection policy. The target server ID is 15462c0e-32c6-4217-a869-bbd131a00ecf, and the target policy ID is f671f7-2677-4705-a320-de1a62bff306.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 |
# coding: utf-8 import os from huaweicloudsdkcore.auth.credentials import BasicCredentials from huaweicloudsdkhss.v5.region.hss_region import HssRegion from huaweicloudsdkcore.exceptions import exceptions from huaweicloudsdkhss.v5 import * if __name__ == "__main__": # The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. # In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment ak = os.environ["CLOUD_SDK_AK"] sk = os.environ["CLOUD_SDK_SK"] projectId = "{project_id}" credentials = BasicCredentials(ak, sk, projectId) client = HssClient.new_builder() \ .with_credentials(credentials) \ .with_region(HssRegion.value_of("<YOUR REGION>")) \ .build() try: request = AssociatePolicyGroupRequest() listHostIdListbody = [ "15462c0e-32c6-4217-a869-bbd131a00ecf" ] request.body = AssociatePolicyGroupRequestInfo( host_id_list=listHostIdListbody, operate_all=False, target_policy_group_id="1df671f7-2677-4705-a320-de1a62bff306" ) response = client.associate_policy_group(request) print(response) except exceptions.ClientRequestException as e: print(e.status_code) print(e.request_id) print(e.error_code) print(e.error_msg) |
Deploy a server protection policy. The target server ID is 15462c0e-32c6-4217-a869-bbd131a00ecf, and the target policy ID is f671f7-2677-4705-a320-de1a62bff306.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 |
package main import ( "fmt" "github.com/huaweicloud/huaweicloud-sdk-go-v3/core/auth/basic" hss "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5" "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5/model" region "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/hss/v5/region" ) func main() { // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security. // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment ak := os.Getenv("CLOUD_SDK_AK") sk := os.Getenv("CLOUD_SDK_SK") projectId := "{project_id}" auth := basic.NewCredentialsBuilder(). WithAk(ak). WithSk(sk). WithProjectId(projectId). Build() client := hss.NewHssClient( hss.HssClientBuilder(). WithRegion(region.ValueOf("<YOUR REGION>")). WithCredential(auth). Build()) request := &model.AssociatePolicyGroupRequest{} var listHostIdListbody = []string{ "15462c0e-32c6-4217-a869-bbd131a00ecf", } operateAllAssociatePolicyGroupRequestInfo:= false request.Body = &model.AssociatePolicyGroupRequestInfo{ HostIdList: &listHostIdListbody, OperateAll: &operateAllAssociatePolicyGroupRequestInfo, TargetPolicyGroupId: "1df671f7-2677-4705-a320-de1a62bff306", } response, err := client.AssociatePolicyGroup(request) if err == nil { fmt.Printf("%+v\n", response) } else { fmt.Println(err) } } |
For SDK sample code of more programming languages, see the Sample Code tab in API Explorer. SDK sample code can be automatically generated.
Status Codes
Status Code |
Description |
---|---|
200 |
Request succeeded. |
Error Codes
See Error Codes.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot