$schema: "http://json-schema.org/draft-06/schema#"

title: compute v1 SslPolicy export schema
description: A gcloud export/import command YAML validation schema.
type: object
additionalProperties: false
properties:
  COMMENT:
    type: object
    description: User specified info ignored by gcloud import.
    additionalProperties: false
    properties:
      template-id:
        type: string
      region:
        type: string
      description:
        type: string
      date:
        type: string
      version:
        type: string
  UNKNOWN:
    type: array
    description: Unknown API fields that cannot be imported.
    items:
      type: string
  customFeatures:
    description: |-
      A list of features enabled when the selected profile is CUSTOM. The
      method returns the set of features that can be specified in this list.
      This field must be empty if the profile is notCUSTOM.
    type: array
    items:
      type: string
  description:
    description: |-
      An optional description of this resource. Provide this property when
      you create the resource.
    type: string
  fingerprint:
    description: |-
      Fingerprint of this resource. A hash of the contents stored in
      this object. This field is used in optimistic locking. This field
      will be ignored when inserting a SslPolicy. An up-to-date
      fingerprint must be provided in order to update the SslPolicy,
      otherwise the request will fail with error 412 conditionNotMet.
      To see the latest fingerprint, make a get() request to retrieve an
      SslPolicy.
    type: string
  minTlsVersion:
    description: |-
      The minimum version of SSL protocol that can be used by the
      clients to establish a connection with the load balancer. This can
      be one ofTLS_1_0, TLS_1_1, TLS_1_2,TLS_1_3. When set to TLS_1_3,
      the profile field must be set to RESTRICTED.
    type: string
    enum:
    - TLS_1_0
    - TLS_1_1
    - TLS_1_2
    - TLS_1_3
  name:
    description: |-
      Name of the resource. The name must be 1-63 characters long, and
      comply with RFC1035. Specifically, the name must be 1-63
      characters long and match the regular expression
      `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must
      be a lowercase letter, and all following characters must be a
      dash, lowercase letter, or digit, except the last character, which
      cannot be a dash.
    type: string
  profile:
    description: |-
      Profile specifies the set of SSL features that can be used by the
      load balancer when negotiating SSL with clients. This can be one
      ofCOMPATIBLE, MODERN, RESTRICTED, orCUSTOM. If using CUSTOM, the
      set of SSL features to enable must be specified in the
      customFeatures field.
    type: string
    enum:
    - COMPATIBLE
    - CUSTOM
    - FIPS_202205
    - MODERN
    - RESTRICTED