1 files changed, 45 insertions, 0 deletions
diff --git a/python/knot_resolver_manager/manager/datamodel/view_schema.py b/python/knot_resolver_manager/manager/datamodel/view_schema.py
new file mode 100644
index 00000000..166306df
--- /dev/null
+++ b/python/knot_resolver_manager/manager/datamodel/view_schema.py
@@ -0,0 +1,45 @@
+from typing import List, Optional
+
+from typing_extensions import Literal
+
+from knot_resolver_manager.manager.datamodel.types import IDPattern, IPNetwork
+from knot_resolver_manager.utils.modeling import ConfigSchema
+
+
+class ViewOptionsSchema(ConfigSchema):
+    """
+    Configuration options for clients identified by the view.
+
+    ---
+    minimize: Send minimum amount of information in recursive queries to enhance privacy.
+    dns64: Enable/disable DNS64.
+    """
+
+    minimize: bool = True
+    dns64: bool = True
+
+
+class ViewSchema(ConfigSchema):
+    """
+    Configuration parameters that allow you to create personalized policy rules and other.
+
+    ---
+    subnets: Identifies the client based on his subnet.  Rule with more precise subnet takes priority.
+    dst_subnet: Destination subnet, as an additional condition.
+    protocols: Transport protocol, as an additional condition.
+    tags: Tags to link with other policy rules.
+    answer: Direct approach how to handle request from clients identified by the view.
+    options: Configuration options for clients identified by the view.
+    """
+
+    subnets: List[IPNetwork]
+    dst_subnet: Optional[IPNetwork] = None  # could be a list as well, iterated in template
+    protocols: Optional[List[Literal["udp53", "tcp53", "dot", "doh", "doq"]]] = None
+
+    tags: Optional[List[IDPattern]] = None
+    answer: Optional[Literal["allow", "refused", "noanswer"]] = None
+    options: ViewOptionsSchema = ViewOptionsSchema()
+
+    def _validate(self) -> None:
+        if bool(self.tags) == bool(self.answer):
+            raise ValueError("exactly one of 'tags' and 'answer' must be configured")