Labels
This Public Stable API gets, creates, updates, and deletes labels.
Labels API Methods
Functionality | HTTP | URI |
---|---|---|
Get a collection of labels. |
|
|
Get an individual label. |
|
|
Create a label |
|
|
Update a label |
|
|
Delete a label |
|
|
Get Labels
This API returns all labels in an organization or a single label. When you get labels, they are returned in the form of an HREF path property, for example: "/orgs/2/labels/1662"
By default, the maximum number of labels returned in a GET collection is 500.
Note
GET returns any label that contains a match, rather than an exact match. For example, a GET request for labels with value=APP could return APP, WEB-APP, and WEBAPP.
URI to Get Collection of Labels
GET [api_version][org_href]/labels
URI to Get an Individual Label
GET [api_version][label_href]
Create a Label
This API creates a new label inside an organization for one of the following label types, for which you can provide your string value:
Application (“app”): The type of application the workload supports. Examples are HRM, SAP, Finance, and Storefront.
Role (“role”): The function of a workload. A simple two-tier application consisting of a web server and a database server has two roles: Web and Database.
Environment (“env”): The stage in the development of the application. For example, production, QA, development, and staging.
Location (“loc”): The location of the workload. For example, Germany, the US, Europe, and Asia; or Rack #3, Rack #4, Rack #5; or data center, AWS-east1, AWS-east2, and so on.
System Default “All” for Labels
The PCE provides a built-in environment, application, and location labels defined as "All" that create broad policies to cover all applications, all environments, and all locations.
For this reason, you cannot create labels of these types defined as "All Applications," "All Environments," or "All Locations" (exactly as written in quotes) to prevent confusion for policy writers.
If you attempt to create labels of these types with the exact name as the system defaults (for example, "All Applications"), you receive an HTTP "406 Not Acceptable" error.
Illumio recommends avoiding the creation of labels with names similar to these default system labels to prevent confusion.
URI to Create a Label
POST [api_version][org_href]/labels
Update a Label
This API allows you to update a label applied to a workload, given that you have the label HREF, which is returned when you get all labels in an organization. For example: "/orgs/2/labels/1662"
URI to Update a Label
PUT [api_version][label_href]
Delete a Label
This API deletes a label from an organization using the label HREF, which is returned when you get a collection of labels in an organization. For example: "/orgs/2/labels/1662"
URI to Delete a Label
DELETE [api_version][label_href]
Labels Reference
This topic provides properties, parameters, and examples for labels.
Query parameters for labels
Parameter | Description | Type | Required |
---|---|---|---|
| Organization ID | Integer | Yes |
| A unique identifier within the external data source | String | No |
| The data source from which a resource originates | String | No |
| Include deleted labels | Boolean | No |
| Key by which to filter | String | GET: No POST: Yes |
| Maximum number of labels to return. | Integer | No |
| Indicate label usage, including if the label is currently used in an RBAC scope for user permissions if the label is applied to a workload, virtual service, Pairing Profile, selective enforcement, virtual server, or ruleset, and if the label belongs to a label group. | Boolean | No |
| Value on which to filter. Supports partial matches. | String | GET, PUT: No POST: Yes |
| Label ID, for | Integer | Yes |
Properties for labels
Property | Description | Type |
---|---|---|
| Key in key-value pair | String |
| Value in key-value pair", | String |
| Label URI | |
| Timestamp when this label was last updated | String |
| Timestamp when this label was first created | String |
| A unique identifier within the external data source | String, Null |
| The data source from which a resource originates | String, Null |
Curl Command to Get Collection of Labels
curl -i -X GET https://pce.my-company.com:8443/api/v2/orgs/2/labels -H "Accept: application/json" -u $KEY:$TOKEN
Response Body
In the response body, each label returned is identified as an HREF, for example: "/orgs/2/labels/1662"
For example:
{ href: "/orgs/2/labels/1662" key: "env" value: "Prod" created_at: "2020-01-22T18:24:33Z" updated_at: "2020-01-22T18:24:40Z" created_by: { href: "/users/9" } updated_by: { href: "/users/9" } } { href: "/orgs/2/labels/1128" key: "role" value: "DB" created_at: "2020-01-22T18:24:53Z" updated_at: "2020-01-22T18:24:59Z" created_by: { href: "/users/9" } updated_by: { href: "/users/9" } }
Curl Command to Get a Label
curl -i -X GET https://pce.my-company.com:8443/api/v2/orgs/2/labels/8 -H "Accept: application/json" -u $KEY:$TOKEN
Response Body
{ href: "/orgs/2/labels/8" key: "env" value: "Prod" created_at: "2020-01-22T18:24:33Z" updated_at: "2020-01-22T18:24:40Z" created_by: { href: "/users/9" } updated_by: { href: "/users/9" } }
An example request body to create a label
{ "key":"role", "value":"web" }
Curl Command to Create a Label
curl -i -X POST https://pce.my-company.com:8443/api/v2/orgs/2/labels -H "Content-Type: application/json" -u $KEY:$TOKEN -d '{"key":"role","value":"web"}'
Response Body
The created label is in the form of an HREF path property. For example, in the response below, the label is identified as "/orgs/2/labels/1677"
.
{ href: "/orgs/2/labels/1677" key: "role" value: "my_web_app" created_at: "2014-04-18T19:39:27Z" updated_at: "2014-04-18T19:39:27Z" created_by: { href: "/users/76" } updated_by: { href: "/users/76" } }
An example request body to update a label
To update a label definition, the JSON request body can be constructed as follows:
{ "value":"db" }
Curl Command to Update a Label
curl -X PUT https://pce.my-company.com:8443/api/v2/orgs/2/labels/1662 -H "Accept: application/json" -u $KEY:$TOKEN -d '{"value":"db"}
Curl Command to Delete a Label
curl -i -X DELETE https://pce.my-company.com:8443/api/v2/orgs/2/labels/1662 -H "Accept: application/json" -u $KEY:$TOKEN