Illumio MCP Server

create-ruleset

Create a ruleset in the PCE with support for ring-fencing patterns

Input Schema

NameRequiredDescriptionDefault
descriptionNoDescription of the ruleset (optional)
nameYesName of the ruleset (e.g., 'RS-ELK'). Must be unique in the PCE.
rulesNo
scopesYesList of label combinations that define scopes. Each scope is an array of label values. This need to be label references like /orgs/1/labels/57 or similar. Get the label href from the get-labels tool.

Input Schema (JSON Schema)

{ "properties": { "description": { "description": "Description of the ruleset (optional)", "type": "string" }, "name": { "description": "Name of the ruleset (e.g., 'RS-ELK'). Must be unique in the PCE.", "type": "string" }, "rules": { "items": { "properties": { "consumers": { "description": "Array of consumer labels, 'ams' for all workloads, or IP list references (e.g., 'iplist:Any (0.0.0.0/0)')", "items": { "type": "string" }, "type": "array" }, "ingress_services": { "items": { "properties": { "port": { "type": "integer" }, "proto": { "type": "string" } }, "required": [ "port", "proto" ], "type": "object" }, "type": "array" }, "providers": { "description": "Array of provider labels, 'ams' for all workloads, or IP list references (e.g., 'iplist:Any (0.0.0.0/0)')", "items": { "type": "string" }, "type": "array" }, "unscoped_consumers": { "default": false, "description": "Whether to allow unscoped consumers (extra-scope rule)", "type": "boolean" } }, "required": [ "providers", "consumers", "ingress_services" ], "type": "object" }, "type": "array" }, "scopes": { "description": "List of label combinations that define scopes. Each scope is an array of label values. This need to be label references like /orgs/1/labels/57 or similar. Get the label href from the get-labels tool.", "items": { "items": { "type": "string" }, "type": "array" }, "type": "array" } }, "required": [ "name", "scopes" ], "type": "object" }