feat: addded new rule level settings ignore_cname_category_matches to…

… zt rules + added zt list item description

.changelog/2621.txt

@@ -0,0 +1,4 @@
+```release-note:enhancement
+teams: Added ZT rule settings ignore_cname_category_matches
+teams: Added description to ZT list item
+```

teams_list.go

@@ -26,8 +26,9 @@ type TeamsList struct {
 
 // TeamsListItem represents a single list item.
 type TeamsListItem struct {
-	Value     string     `json:"value"`
-	CreatedAt *time.Time `json:"created_at,omitempty"`
+	Value       string     `json:"value"`
+	Description string     `json:"description,omitempty"`
+	CreatedAt   *time.Time `json:"created_at,omitempty"`
 }
 
 // PatchTeamsList represents a patch request for appending/removing list items.

teams_rules.go

@@ -49,6 +49,9 @@ type TeamsRuleSettings struct {
 	// Turns on ip category based filter on dns if the rule contains dns category checks
 	IPCategories bool `json:"ip_categories"`
 
+	// Turns on for explicitly ignoring cname domain category matches
+	IgnoreCnameCategoryMatches `json:"ignore_cname_category_matches"`
+
 	// Allow parent MSP accounts to enable bypass their children's rules. Do not set them for non MSP accounts.
 	AllowChildBypass *bool `json:"allow_child_bypass,omitempty"`
 

teams_rules_test.go

@@ -54,6 +54,7 @@ func TestTeamsRules(t *testing.T) {
 					"untrusted_cert": {
 						"action": "error"
 					},
+					"ignore_cname_category_matches": true,
 					"dns_resolvers": {
 						"ipv4": [
 							{"ip": "10.0.0.2", "port": 5053},