Juniper Networks Network Policies API

openapi: 3.2.0
info:
  title: Juniper Networks Juniper Contrail Networking Network Policies API
  description: Juniper Contrail (now Cloud-Native Contrail Networking) provides an SDN controller with a RESTful API for managing virtual networks, network policies, security groups, and service chaining. The API server runs on port 8082 and provides CRUD operations on networking objects. It supports multi-tenancy through project-based resource isolation and integrates with OpenStack, Kubernetes, and VMware orchestrators.
  version: 5.1.0
  contact:
    name: Juniper Support
    url: https://www.juniper.net/documentation/product/us/en/contrail-networking/
    email: support@juniper.net
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
servers:
- url: https://{contrail_controller}:8082
  description: Contrail API Server
  variables:
    contrail_controller:
      default: contrail.example.com
      description: Hostname or IP of the Contrail controller
security:
- keystoneAuth: []
tags:
- name: Network Policies
  description: Network policy management
paths:
  /network-policys:
    get:
      operationId: listNetworkPolicies
      summary: Juniper Networks List network policies
      description: Returns all network policies.
      tags:
      - Network Policies
      parameters:
      - $ref: '#/components/parameters/ParentId'
      - $ref: '#/components/parameters/DetailParam'
      responses:
        '200':
          description: List of network policies
          content:
            application/json:
              schema:
                type: object
                properties:
                  network-policys:
                    type: array
                    items:
                      $ref: '#/components/schemas/ResourceRef'
    post:
      operationId: createNetworkPolicy
      summary: Juniper Networks Create network policy
      description: Creates a new network policy for controlling traffic between virtual networks.
      tags:
      - Network Policies
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                network-policy:
                  $ref: '#/components/schemas/NetworkPolicy'
      responses:
        '200':
          description: Network policy created
components:
  parameters:
    ParentId:
      name: parent_id
      in: query
      description: Filter by parent resource UUID
      schema:
        type: string
        format: uuid
    DetailParam:
      name: detail
      in: query
      description: Return full object details instead of references
      schema:
        type: boolean
        default: false
  schemas:
    ResourceRef:
      type: object
      properties:
        uuid:
          type: string
          format: uuid
        fq_name:
          type: array
          items:
            type: string
        href:
          type: string
          format: uri
    NetworkPolicy:
      type: object
      properties:
        uuid:
          type: string
          format: uuid
        fq_name:
          type: array
          items:
            type: string
        display_name:
          type: string
        network_policy_entries:
          type: object
          properties:
            policy_rule:
              type: array
              items:
                type: object
                properties:
                  direction:
                    type: string
                    enum:
                    - '>'
                    - <>
                  protocol:
                    type: string
                  action_list:
                    type: object
                    properties:
                      simple_action:
                        type: string
                        enum:
                        - pass
                        - deny
                  src_addresses:
                    type: array
                    items:
                      type: object
                      properties:
                        virtual_network:
                          type: string
                  dst_addresses:
                    type: array
                    items:
                      type: object
                      properties:
                        virtual_network:
                          type: string
                  src_ports:
                    type: array
                    items:
                      type: object
                      properties:
                        start_port:
                          type: integer
                        end_port:
                          type: integer
                  dst_ports:
                    type: array
                    items:
                      type: object
                      properties:
                        start_port:
                          type: integer
                        end_port:
                          type: integer
  securitySchemes:
    keystoneAuth:
      type: http
      scheme: bearer
      description: Keystone token authentication. Obtain a token from the Keystone identity service and pass it as X-Auth-Token header.
externalDocs:
  description: Contrail API Documentation
  url: https://www.juniper.net/documentation/us/en/software/contrail/