Sign in

v1

latestOpenAPI 3.0.0Creative Commons Attribution 3.02026-07-1346116213.0 KB
projects

Creates a new EndpointPolicy in a given project and location.

post/v1/{+parent}/endpointPolicies

Path parameters

parentstring required

Required. The parent resource of the EndpointPolicy. Must be in the format projects/*/locations/*.

Query parameters

endpointPolicyIdstring

Required. Short name of the EndpointPolicy resource to be created. E.g. "CustomECS".

Request body

namestring

Identifier. Name of the EndpointPolicy resource. It matches pattern projects/{project}/locations/*/endpointPolicies/{endpoint_policy}.

createTimestring google-datetime

Output only. The timestamp when the resource was created.

updateTimestring google-datetime

Output only. The timestamp when the resource was updated.

labelsobject

Optional. Set of label tags associated with the EndpointPolicy resource.

type'ENDPOINT_POLICY_TYPE_UNSPECIFIED' | 'SIDECAR_PROXY' | 'GRPC_SERVER'

Required. The type of endpoint policy. This is primarily used to validate the configuration.

authorizationPolicystring

Optional. This field specifies the URL of AuthorizationPolicy resource that applies authorization policies to the inbound traffic at the matched endpoints. Refer to Authorization. If this field is not specified, authorization is disabled(no authz checks) for this endpoint.

descriptionstring

Optional. A free-text description of the resource. Max length 1024 characters.

serverTlsPolicystring

Optional. A URL referring to ServerTlsPolicy resource. ServerTlsPolicy is used to determine the authentication policy to be applied to terminate the inbound traffic at the identified backends. If this field is not set, authentication is disabled(open) for this endpoint.

clientTlsPolicystring

Optional. A URL referring to a ClientTlsPolicy resource. ClientTlsPolicy can be set to specify the authentication for traffic from the proxy to the actual endpoints. More specifically, it is applied to the outgoing traffic from the proxy to the endpoint. This is typically used for sidecar model where the proxy identifies itself as endpoint to the control plane, with the connection between sidecar and endpoint requiring authentication. If this field is not set, authentication is disabled(open). Applicable only when EndpointPolicyType is SIDECAR_PROXY.

Response

Successful response