policy-suggest-ntp.yaml

APIVersion: 1
label: recipe:policy-suggest:ntp
data:
  recipes:
    - name: Create NTP Rule
      description: Creates a basic NTP rule for the current namespace.
      label: recipe:policy-suggest:ntp
      metadata:
        - "@aporeto:author=aporeto"
      associatedTags:
        - "aporeto:recipe:placement=policy-suggest"
        - "aporeto:recipe:placement=infrastructure"
        - "aporeto:recipe:placement=tenant-level"
        - "aporeto:recipe:placement=cloudaccount-level"
        - "aporeto:recipe:placement=group-level"
      deploymentMode: NamespaceUnique
      targetIdentities:
        - externalnetwork
        - networkrulesetpolicy
      propagate: true
      longDescription: |-
        ### Create a NTP rule

        This recipe will create an External Network and Network Ruleset Policy to
        enable outgoing access to NTP port UDP/123 on the current namespace.

      template: |-
        {{`
        APIVersion: 1
        data:
          externalnetworks:
          - name: ntp
            description: "External network automatically created by an Out of Box template."
            propagate: true
            entries:
            {{- range $_, $network := .Values.networks }}
            - {{ $network | quote }}
            {{- end }}
            associatedTags:
            - "externalnetwork:name=ntp"
          networkrulesetpolicies:
          - name: ntp
            description: "Ruleset automatically created by an Out of Box template."
            propagate: true
            subject:
            {{- range $index, $orgmeta := .Aporeto.OrganizationalMetadata }}
            {{- if eq $index 0 }}
            - - {{ $orgmeta | quote }}
            {{- else }}
              - {{ $orgmeta | quote }}
            {{- end }}
            {{- end }}
            outgoingRules:
            - action: Allow
              protocolPorts:
              - udp/123
              object:
              - - "externalnetwork:name=ntp"
          `}}

      steps:
        - name: General
          description: General configuration
          parameters:
            - key: networks
              name: Networks
              description: Describe the external network.
              longDescription: |-
                Provide at least one CIDR or FQDN. Example 52.17.12.0/16,google.com
              type: StringSlice
              defaultValue:
              - 0.0.0.0/0