@robinmordasiewicz/f5xc-terraform-mcp 2.10.0 → 2.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +85 -0
- package/dist/docs/data-sources/dns_zone.md +2 -2
- package/dist/docs/functions/blindfold_file.md +3 -3
- package/dist/docs/guides/advanced-http-loadbalancer.md +20 -20
- package/dist/docs/guides/authentication.md +30 -30
- package/dist/docs/guides/blindfold.md +27 -17
- package/dist/docs/guides/http-loadbalancer.md +12 -12
- package/dist/docs/resources/api_credential.md +2 -2
- package/dist/docs/resources/child_tenant.md +2 -2
- package/dist/docs/resources/cloud_connect.md +2 -2
- package/dist/docs/resources/dns_zone.md +602 -30
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -12,12 +12,70 @@ A Model Context Protocol (MCP) server that provides AI assistants with comprehen
|
|
|
12
12
|
|
|
13
13
|
## Installation
|
|
14
14
|
|
|
15
|
+
Choose the installation method that best fits your environment:
|
|
16
|
+
|
|
17
|
+
| Method | Best For | Requirements |
|
|
18
|
+
|--------|----------|--------------|
|
|
19
|
+
| [VSCode MCP Gallery](#vscode-mcp-gallery) | VSCode users (easiest) | VSCode 1.99+ |
|
|
20
|
+
| [npx (Recommended)](#from-npm) | Developers with Node.js | Node.js 18+ |
|
|
21
|
+
| [MCPB Bundle](#mcpb-bundle-no-nodejs-required) | Corporate laptops (no Node.js) | None |
|
|
22
|
+
| [From Source](#from-source) | Contributors | Node.js 18+, npm |
|
|
23
|
+
|
|
24
|
+
### VSCode MCP Gallery
|
|
25
|
+
|
|
26
|
+
The easiest way to install for VSCode users. Choose from multiple options:
|
|
27
|
+
|
|
28
|
+
**Option A: MCP Gallery Search (Recommended for VSCode 1.105+)**
|
|
29
|
+
|
|
30
|
+
1. Open VSCode
|
|
31
|
+
2. Open the Extensions view (`Ctrl+Shift+X` / `Cmd+Shift+X`)
|
|
32
|
+
3. Type `@MCP` in the search box to filter MCP servers
|
|
33
|
+
4. Search for `f5xc` or `F5 Distributed Cloud`
|
|
34
|
+
5. Click **Install**
|
|
35
|
+
|
|
36
|
+
**Option B: Command Palette**
|
|
37
|
+
|
|
38
|
+
1. Open VSCode
|
|
39
|
+
2. Press `Ctrl+Shift+P` / `Cmd+Shift+P` to open Command Palette
|
|
40
|
+
3. Run `MCP: Add Server`
|
|
41
|
+
4. Select `npm package`
|
|
42
|
+
5. Enter: `@robinmordasiewicz/f5xc-terraform-mcp`
|
|
43
|
+
6. Choose scope: **Global** (all workspaces) or **Workspace** (this project only)
|
|
44
|
+
|
|
15
45
|
### From npm
|
|
16
46
|
|
|
17
47
|
```bash
|
|
18
48
|
npm install -g @robinmordasiewicz/f5xc-terraform-mcp
|
|
19
49
|
```
|
|
20
50
|
|
|
51
|
+
Or run directly with npx (no installation required):
|
|
52
|
+
|
|
53
|
+
```bash
|
|
54
|
+
npx @robinmordasiewicz/f5xc-terraform-mcp
|
|
55
|
+
```
|
|
56
|
+
|
|
57
|
+
### MCPB Bundle (No Node.js Required)
|
|
58
|
+
|
|
59
|
+
For corporate environments where Node.js cannot be installed. The MCPB bundle is fully self-contained with all dependencies included.
|
|
60
|
+
|
|
61
|
+
**For VSCode:**
|
|
62
|
+
|
|
63
|
+
1. Download the latest `.mcpb` file from [GitHub Releases](https://github.com/robinmordasiewicz/terraform-provider-f5xc/releases)
|
|
64
|
+
2. In VSCode, press `Ctrl+Shift+P` / `Cmd+Shift+P`
|
|
65
|
+
3. Run `MCP: Add Server`
|
|
66
|
+
4. Drag and drop the `.mcpb` file, or select it when prompted
|
|
67
|
+
5. Run `MCP: List Servers` to verify installation
|
|
68
|
+
|
|
69
|
+
**For Claude Desktop:**
|
|
70
|
+
|
|
71
|
+
1. Download the latest `.mcpb` file from [GitHub Releases](https://github.com/robinmordasiewicz/terraform-provider-f5xc/releases)
|
|
72
|
+
2. Double-click the file to install, or drag it into Claude Desktop
|
|
73
|
+
3. Restart Claude Desktop to activate
|
|
74
|
+
|
|
75
|
+
**File**: `f5xc-terraform-mcp-X.Y.Z.mcpb`
|
|
76
|
+
|
|
77
|
+
-> **Note:** MCPB bundles are automatically built and attached to each GitHub Release. No npm or Node.js installation is required.
|
|
78
|
+
|
|
21
79
|
### From Source
|
|
22
80
|
|
|
23
81
|
```bash
|
|
@@ -139,6 +197,18 @@ To make the MCP server available across all workspaces, add to your VS Code user
|
|
|
139
197
|
}
|
|
140
198
|
```
|
|
141
199
|
|
|
200
|
+
**Verify VSCode Installation:**
|
|
201
|
+
|
|
202
|
+
1. Press `Ctrl+Shift+P` / `Cmd+Shift+P`
|
|
203
|
+
2. Run `MCP: List Servers`
|
|
204
|
+
3. Look for `f5xc-terraform` with a green status indicator
|
|
205
|
+
|
|
206
|
+
**Troubleshooting VSCode:**
|
|
207
|
+
|
|
208
|
+
- **Server not appearing**: Restart VSCode after adding the server configuration
|
|
209
|
+
- **Connection issues**: Check the Output panel (`View > Output`) and select "MCP" from the dropdown
|
|
210
|
+
- **Node.js not found**: Use the [MCPB Bundle](#mcpb-bundle-no-nodejs-required) method instead
|
|
211
|
+
|
|
142
212
|
## Available Tools
|
|
143
213
|
|
|
144
214
|
### Documentation Tools
|
|
@@ -159,6 +229,21 @@ To make the MCP server available across all workspaces, add to your VS Code user
|
|
|
159
229
|
| `f5xc_terraform_get_schema_definition` | Get a schema definition from a spec |
|
|
160
230
|
| `f5xc_terraform_list_definitions` | List all definitions in a spec |
|
|
161
231
|
|
|
232
|
+
### Subscription Tier Tools
|
|
233
|
+
|
|
234
|
+
| Tool | Description |
|
|
235
|
+
|------|-------------|
|
|
236
|
+
| `f5xc_terraform_get_subscription_info` | Get subscription tier requirements for resources |
|
|
237
|
+
| `f5xc_terraform_get_property_subscription_info` | Get property-level subscription tier indicators |
|
|
238
|
+
|
|
239
|
+
### Addon Service Tools
|
|
240
|
+
|
|
241
|
+
| Tool | Description |
|
|
242
|
+
|------|-------------|
|
|
243
|
+
| `f5xc_terraform_addon_list_services` | List available addon services with activation requirements |
|
|
244
|
+
| `f5xc_terraform_addon_check_activation` | Check if an addon service is activated for the tenant |
|
|
245
|
+
| `f5xc_terraform_addon_activation_workflow` | Get activation workflow and Terraform code for addons |
|
|
246
|
+
|
|
162
247
|
### Utility Tools
|
|
163
248
|
|
|
164
249
|
| Tool | Description |
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_dns_zone Data Source - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "DNS"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages DNS Zone in a given namespace. If one already exist it will give a error. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_dns_zone (Data Source)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages DNS Zone in a given namespace. If one already exist it will give a error. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [DNS Zone API docs](https://docs.cloud.f5.com/docs-v2/api/dns-zone) to learn more.
|
|
13
13
|
|
|
@@ -125,9 +125,9 @@ resource "f5xc_http_loadbalancer" "secure" {
|
|
|
125
125
|
# Example: Encrypt multiple certificate files using for_each
|
|
126
126
|
locals {
|
|
127
127
|
certificates = {
|
|
128
|
-
"server"
|
|
129
|
-
"client"
|
|
130
|
-
"ca"
|
|
128
|
+
"server" = "${path.module}/certs/server.key"
|
|
129
|
+
"client" = "${path.module}/certs/client.key"
|
|
130
|
+
"ca" = "${path.module}/certs/ca.key"
|
|
131
131
|
}
|
|
132
132
|
}
|
|
133
133
|
|
|
@@ -13,16 +13,16 @@ This guide extends the [basic HTTP Load Balancer guide](http-loadbalancer) with
|
|
|
13
13
|
|
|
14
14
|
By following this guide, you'll deploy an HTTP Load Balancer with **11 security controls**:
|
|
15
15
|
|
|
16
|
-
| Security Layer
|
|
17
|
-
|
|
18
|
-
| **Perimeter**
|
|
19
|
-
| **Perimeter**
|
|
20
|
-
| **Bot Defense**
|
|
21
|
-
| **Bot Defense**
|
|
22
|
-
| **Application**
|
|
23
|
-
| **Application**
|
|
24
|
-
| **Rate Control**
|
|
25
|
-
| **Data Protection** | Data Guard
|
|
16
|
+
| Security Layer | Feature | Protection |
|
|
17
|
+
| ------------------- | -------------------------- | ---------------------------------------------- |
|
|
18
|
+
| **Perimeter** | IP Reputation | Blocks known malicious IPs by threat category |
|
|
19
|
+
| **Perimeter** | Threat Mesh | Global threat intelligence sharing |
|
|
20
|
+
| **Bot Defense** | JavaScript Challenge | Client-side bot detection |
|
|
21
|
+
| **Bot Defense** | Malicious User Detection | Behavioral analysis and risk scoring |
|
|
22
|
+
| **Application** | Web Application Firewall | Blocks SQLi, XSS, and OWASP Top 10 |
|
|
23
|
+
| **Application** | Bot Protection Settings | Signature-based bot classification |
|
|
24
|
+
| **Rate Control** | Rate Limiting | Prevents abuse with configurable thresholds |
|
|
25
|
+
| **Data Protection** | Data Guard | Masks sensitive data (CC, SSN) in responses |
|
|
26
26
|
|
|
27
27
|
## Prerequisites
|
|
28
28
|
|
|
@@ -305,16 +305,16 @@ resource "f5xc_http_loadbalancer" "app" {
|
|
|
305
305
|
|
|
306
306
|
The IP Reputation service maintains a continuously-updated database of known malicious IP addresses. When enabled, requests from IPs matching configured threat categories are automatically blocked.
|
|
307
307
|
|
|
308
|
-
| Threat Category
|
|
309
|
-
|
|
310
|
-
| `SPAM_SOURCES`
|
|
311
|
-
| `WEB_ATTACKS`
|
|
312
|
-
| `BOTNETS`
|
|
313
|
-
| `SCANNERS`
|
|
314
|
-
| `PHISHING`
|
|
315
|
-
| `PROXY`
|
|
316
|
-
| `TOR_PROXY`
|
|
317
|
-
| `DENIAL_OF_SERVICE`
|
|
308
|
+
| Threat Category | Description |
|
|
309
|
+
| --------------------- | ------------------------------------ |
|
|
310
|
+
| `SPAM_SOURCES` | Known spam-sending IP addresses |
|
|
311
|
+
| `WEB_ATTACKS` | IPs involved in web-based attacks |
|
|
312
|
+
| `BOTNETS` | Command & control and infected hosts |
|
|
313
|
+
| `SCANNERS` | Reconnaissance, probes, brute force |
|
|
314
|
+
| `PHISHING` | Phishing and fraud operations |
|
|
315
|
+
| `PROXY` | Anonymous proxy services |
|
|
316
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
317
|
+
| `DENIAL_OF_SERVICE` | DoS and DDoS sources |
|
|
318
318
|
|
|
319
319
|
-> **Tip:** Start with all categories enabled, then selectively disable based on your application requirements. For example, disable `TOR_PROXY` if you need to support privacy-focused users.
|
|
320
320
|
|
|
@@ -12,11 +12,11 @@ This guide covers authentication configuration for the F5 Distributed Cloud Terr
|
|
|
12
12
|
|
|
13
13
|
## Quick Reference
|
|
14
14
|
|
|
15
|
-
| Method
|
|
16
|
-
|
|
17
|
-
| API Token
|
|
18
|
-
| P12 Certificate | Moderate
|
|
19
|
-
| PEM Certificate | Advanced
|
|
15
|
+
| Method | Complexity | Best For | Security |
|
|
16
|
+
| --------------- | ---------- | -------------------------------- | ---------------------- |
|
|
17
|
+
| API Token | Simplest | Development, quick testing | Bearer token over TLS |
|
|
18
|
+
| P12 Certificate | Moderate | Production, CI/CD | Mutual TLS (mTLS) |
|
|
19
|
+
| PEM Certificate | Advanced | When tooling requires PEM format | Derived from P12, mTLS |
|
|
20
20
|
|
|
21
21
|
## Prerequisites
|
|
22
22
|
|
|
@@ -79,7 +79,7 @@ Service credentials are managed through IAM and recommended for production. They
|
|
|
79
79
|
7. Select an expiry date
|
|
80
80
|
8. Click **Download** to get the `.p12` file
|
|
81
81
|
|
|
82
|
-
##
|
|
82
|
+
## Provider Configuration
|
|
83
83
|
|
|
84
84
|
### Method 1: API Token Authentication (Simplest)
|
|
85
85
|
|
|
@@ -170,15 +170,15 @@ provider "f5xc" {
|
|
|
170
170
|
|
|
171
171
|
## Environment Variable Reference
|
|
172
172
|
|
|
173
|
-
| Variable
|
|
174
|
-
|
|
175
|
-
| `F5XC_API_URL`
|
|
176
|
-
| `F5XC_API_TOKEN`
|
|
177
|
-
| `F5XC_P12_FILE`
|
|
178
|
-
| `F5XC_P12_PASSWORD` | Password for P12 file
|
|
179
|
-
| `F5XC_CERT`
|
|
180
|
-
| `F5XC_KEY`
|
|
181
|
-
| `F5XC_CACERT`
|
|
173
|
+
| Variable | Description | Required |
|
|
174
|
+
| ------------------- | ---------------------------------------------- | ------------------------------ |
|
|
175
|
+
| `F5XC_API_URL` | F5XC tenant API URL | Yes |
|
|
176
|
+
| `F5XC_API_TOKEN` | API token for bearer authentication | One of: token, P12, or PEM |
|
|
177
|
+
| `F5XC_P12_FILE` | Path to P12 certificate file | With `F5XC_P12_PASSWORD` |
|
|
178
|
+
| `F5XC_P12_PASSWORD` | Password for P12 file | With `F5XC_P12_FILE` |
|
|
179
|
+
| `F5XC_CERT` | Path to PEM certificate file | With `F5XC_KEY` |
|
|
180
|
+
| `F5XC_KEY` | Path to PEM private key file | With `F5XC_CERT` |
|
|
181
|
+
| `F5XC_CACERT` | Path to CA certificate for server verification | No |
|
|
182
182
|
|
|
183
183
|
**Adding to Shell Profile:**
|
|
184
184
|
|
|
@@ -241,10 +241,10 @@ jobs:
|
|
|
241
241
|
|
|
242
242
|
**GitHub Secrets to configure:**
|
|
243
243
|
|
|
244
|
-
| Secret Name
|
|
245
|
-
|
|
246
|
-
| `F5XC_API_URL`
|
|
247
|
-
| `F5XC_API_TOKEN`
|
|
244
|
+
| Secret Name | Value |
|
|
245
|
+
| ------------------ | ---------------------------------------------- |
|
|
246
|
+
| `F5XC_API_URL` | `https://your-tenant.console.ves.volterra.io` |
|
|
247
|
+
| `F5XC_API_TOKEN` | Your API token value |
|
|
248
248
|
|
|
249
249
|
### GitHub Actions with P12 Certificate
|
|
250
250
|
|
|
@@ -306,11 +306,11 @@ base64 -w 0 your-credentials.p12
|
|
|
306
306
|
|
|
307
307
|
**GitHub Secrets to configure:**
|
|
308
308
|
|
|
309
|
-
| Secret Name
|
|
310
|
-
|
|
311
|
-
| `F5XC_API_URL`
|
|
312
|
-
| `F5XC_P12_BASE64`
|
|
313
|
-
| `F5XC_P12_PASSWORD` | Password for the P12 file
|
|
309
|
+
| Secret Name | Value |
|
|
310
|
+
| ------------------- | ---------------------------------------------- |
|
|
311
|
+
| `F5XC_API_URL` | `https://your-tenant.console.ves.volterra.io` |
|
|
312
|
+
| `F5XC_P12_BASE64` | Base64-encoded P12 file contents |
|
|
313
|
+
| `F5XC_P12_PASSWORD` | Password for the P12 file |
|
|
314
314
|
|
|
315
315
|
## Security Best Practices
|
|
316
316
|
|
|
@@ -321,10 +321,10 @@ base64 -w 0 your-credentials.p12
|
|
|
321
321
|
|
|
322
322
|
### Choosing the Right Method
|
|
323
323
|
|
|
324
|
-
| Use Case
|
|
325
|
-
|
|
326
|
-
| Local development
|
|
327
|
-
| CI/CD pipelines
|
|
324
|
+
| Use Case | Recommended Method | Reason |
|
|
325
|
+
| --------------------- | ------------------- | ------------------------- |
|
|
326
|
+
| Local development | API Token | Simplest setup |
|
|
327
|
+
| CI/CD pipelines | P12 Certificate | mTLS security |
|
|
328
328
|
| Production automation | Service Credentials | Role-based access control |
|
|
329
329
|
|
|
330
330
|
## Troubleshooting
|
|
@@ -366,8 +366,8 @@ export F5XC_API_TOKEN="token" # Correct
|
|
|
366
366
|
F5XC_API_TOKEN="token" # Won't work
|
|
367
367
|
```
|
|
368
368
|
|
|
369
|
-
|
|
370
|
-
|
|
369
|
+
1. Verify spelling is exact (case-sensitive)
|
|
370
|
+
2. Check for hidden characters in values
|
|
371
371
|
|
|
372
372
|
## Revoking Credentials
|
|
373
373
|
|
|
@@ -21,7 +21,7 @@ F5 Distributed Cloud Secret Management ("blindfold") provides client-side encryp
|
|
|
21
21
|
|
|
22
22
|
### How It Works
|
|
23
23
|
|
|
24
|
-
```
|
|
24
|
+
```text
|
|
25
25
|
┌─────────────────────────────────────────────────────────────────────┐
|
|
26
26
|
│ Your Local Machine │
|
|
27
27
|
│ │
|
|
@@ -64,13 +64,15 @@ Before you begin, ensure you have:
|
|
|
64
64
|
|
|
65
65
|
Configure one of these authentication methods via environment variables:
|
|
66
66
|
|
|
67
|
-
|
|
67
|
+
#### Option 1: API Token (Recommended for development)
|
|
68
|
+
|
|
68
69
|
```bash
|
|
69
70
|
export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
|
|
70
71
|
export F5XC_API_TOKEN="your-api-token"
|
|
71
72
|
```
|
|
72
73
|
|
|
73
|
-
|
|
74
|
+
#### Option 2: P12 Certificate (Recommended for production)
|
|
75
|
+
|
|
74
76
|
```bash
|
|
75
77
|
export F5XC_API_URL="https://your-tenant.console.ves.volterra.io"
|
|
76
78
|
export F5XC_P12_FILE="/path/to/your-credentials.p12"
|
|
@@ -143,13 +145,14 @@ Encrypts base64-encoded plaintext:
|
|
|
143
145
|
provider::f5xc::blindfold(plaintext, policy_name, namespace)
|
|
144
146
|
```
|
|
145
147
|
|
|
146
|
-
| Parameter
|
|
147
|
-
|
|
148
|
-
| `plaintext`
|
|
149
|
-
| `policy_name` | string | Name of the SecretPolicy
|
|
150
|
-
| `namespace`
|
|
148
|
+
| Parameter | Type | Description |
|
|
149
|
+
| ------------- | ------ | -------------------------------- |
|
|
150
|
+
| `plaintext` | string | Base64-encoded secret to encrypt |
|
|
151
|
+
| `policy_name` | string | Name of the SecretPolicy |
|
|
152
|
+
| `namespace` | string | Namespace containing the policy |
|
|
151
153
|
|
|
152
154
|
**Example:**
|
|
155
|
+
|
|
153
156
|
```hcl
|
|
154
157
|
location = provider::f5xc::blindfold(
|
|
155
158
|
base64encode(var.my_secret),
|
|
@@ -166,13 +169,14 @@ Reads a file and encrypts its contents:
|
|
|
166
169
|
provider::f5xc::blindfold_file(path, policy_name, namespace)
|
|
167
170
|
```
|
|
168
171
|
|
|
169
|
-
| Parameter
|
|
170
|
-
|
|
171
|
-
| `path`
|
|
172
|
-
| `policy_name` | string | Name of the SecretPolicy
|
|
173
|
-
| `namespace`
|
|
172
|
+
| Parameter | Type | Description |
|
|
173
|
+
| ------------- | ------ | ------------------------------- |
|
|
174
|
+
| `path` | string | Path to the file to encrypt |
|
|
175
|
+
| `policy_name` | string | Name of the SecretPolicy |
|
|
176
|
+
| `namespace` | string | Namespace containing the policy |
|
|
174
177
|
|
|
175
178
|
**Example:**
|
|
179
|
+
|
|
176
180
|
```hcl
|
|
177
181
|
location = provider::f5xc::blindfold_file(
|
|
178
182
|
"${path.module}/certs/server.key",
|
|
@@ -361,9 +365,9 @@ locals {
|
|
|
361
365
|
RSA-OAEP encryption has a maximum plaintext size based on the key size:
|
|
362
366
|
|
|
363
367
|
| Key Size | Maximum Plaintext |
|
|
364
|
-
|
|
365
|
-
| 2048-bit | ~190 bytes
|
|
366
|
-
| 4096-bit | ~446 bytes
|
|
368
|
+
| -------- | ----------------- |
|
|
369
|
+
| 2048-bit | ~190 bytes |
|
|
370
|
+
| 4096-bit | ~446 bytes |
|
|
367
371
|
|
|
368
372
|
~> **Note:** If your secret exceeds the size limit, consider splitting it or using a different approach. The function will return a clear error message if the plaintext is too large.
|
|
369
373
|
|
|
@@ -371,7 +375,7 @@ RSA-OAEP encryption has a maximum plaintext size based on the key size:
|
|
|
371
375
|
|
|
372
376
|
The blindfold functions return a sealed secret string with the `string:///` prefix followed by a base64-encoded JSON structure:
|
|
373
377
|
|
|
374
|
-
```
|
|
378
|
+
```text
|
|
375
379
|
string:///eyJrZXlfdmVyc2lvbiI6InYxLjIuMyIsInBvbGljeV9pZCI6InNoYXJlZC92ZXMtaW8tYWxsb3ctdm9sdGVycmEiLCJ0ZW5hbnQiOiJ5b3VyLXRlbmFudCIsImRhdGEiOiJBQkNERUYxMjM0NTY3ODkwLi4uIn0=
|
|
376
380
|
```
|
|
377
381
|
|
|
@@ -387,6 +391,7 @@ When base64-decoded, the sealed JSON contains these fields:
|
|
|
387
391
|
```
|
|
388
392
|
|
|
389
393
|
Field descriptions:
|
|
394
|
+
|
|
390
395
|
- `key_version`: Public key version used for encryption
|
|
391
396
|
- `policy_id`: Reference to the SecretPolicy (namespace/name format)
|
|
392
397
|
- `tenant`: Your F5XC tenant identifier
|
|
@@ -405,6 +410,7 @@ Field descriptions:
|
|
|
405
410
|
**Symptom:** Error message about missing authentication configuration.
|
|
406
411
|
|
|
407
412
|
**Solution:**
|
|
413
|
+
|
|
408
414
|
```bash
|
|
409
415
|
# Verify environment variables are set
|
|
410
416
|
echo $F5XC_API_URL
|
|
@@ -422,6 +428,7 @@ export F5XC_API_TOKEN="your-api-token"
|
|
|
422
428
|
**Solutions:**
|
|
423
429
|
|
|
424
430
|
1. Use the built-in policy:
|
|
431
|
+
|
|
425
432
|
```hcl
|
|
426
433
|
policy_name = "ves-io-allow-volterra"
|
|
427
434
|
namespace = "shared"
|
|
@@ -436,6 +443,7 @@ export F5XC_API_TOKEN="your-api-token"
|
|
|
436
443
|
**Solutions:**
|
|
437
444
|
|
|
438
445
|
1. Verify your secret size:
|
|
446
|
+
|
|
439
447
|
```bash
|
|
440
448
|
wc -c < your-secret-file
|
|
441
449
|
```
|
|
@@ -451,6 +459,7 @@ export F5XC_API_TOKEN="your-api-token"
|
|
|
451
459
|
**Solutions:**
|
|
452
460
|
|
|
453
461
|
1. Use `${path.module}` for relative paths:
|
|
462
|
+
|
|
454
463
|
```hcl
|
|
455
464
|
location = provider::f5xc::blindfold_file(
|
|
456
465
|
"${path.module}/certs/server.key", # Correct
|
|
@@ -465,6 +474,7 @@ export F5XC_API_TOKEN="your-api-token"
|
|
|
465
474
|
**Symptom:** Error about invalid base64 encoding.
|
|
466
475
|
|
|
467
476
|
**Solution:** Ensure you're base64-encoding your plaintext:
|
|
477
|
+
|
|
468
478
|
```hcl
|
|
469
479
|
# Correct
|
|
470
480
|
location = provider::f5xc::blindfold(
|
|
@@ -89,9 +89,9 @@ Review the plan output, then type `yes` to confirm deployment.
|
|
|
89
89
|
|
|
90
90
|
After deployment, Terraform outputs a CNAME target. Create a DNS record:
|
|
91
91
|
|
|
92
|
-
| Type
|
|
93
|
-
|
|
94
|
-
| CNAME | app.example.com | ves-io-app-example-com.ac.vh.ves.io
|
|
92
|
+
| Type | Name | Value |
|
|
93
|
+
| ----- | --------------- | ------------------------------------ |
|
|
94
|
+
| CNAME | app.example.com | ves-io-app-example-com.ac.vh.ves.io |
|
|
95
95
|
|
|
96
96
|
~> **Note:** DNS propagation may take up to 48 hours, though typically completes within minutes.
|
|
97
97
|
|
|
@@ -153,7 +153,7 @@ labels = {
|
|
|
153
153
|
|
|
154
154
|
This guide creates the following resources:
|
|
155
155
|
|
|
156
|
-
```
|
|
156
|
+
```text
|
|
157
157
|
┌─────────────────────────────────────────┐
|
|
158
158
|
│ F5 Distributed Cloud │
|
|
159
159
|
│ │
|
|
@@ -185,14 +185,14 @@ This guide creates the following resources:
|
|
|
185
185
|
|
|
186
186
|
### Resources Created
|
|
187
187
|
|
|
188
|
-
| Resource
|
|
189
|
-
|
|
190
|
-
| `f5xc_namespace`
|
|
191
|
-
| `f5xc_healthcheck`
|
|
192
|
-
| `f5xc_origin_pool`
|
|
193
|
-
| `f5xc_app_firewall`
|
|
194
|
-
| `f5xc_rate_limiter`
|
|
195
|
-
| `f5xc_http_loadbalancer` | Main load balancer
|
|
188
|
+
| Resource | Purpose |
|
|
189
|
+
| ------------------------ | ----------------------------- |
|
|
190
|
+
| `f5xc_namespace` | Isolates resources (optional) |
|
|
191
|
+
| `f5xc_healthcheck` | Monitors origin server health |
|
|
192
|
+
| `f5xc_origin_pool` | Defines backend servers |
|
|
193
|
+
| `f5xc_app_firewall` | WAF configuration |
|
|
194
|
+
| `f5xc_rate_limiter` | Rate limiting policy |
|
|
195
|
+
| `f5xc_http_loadbalancer` | Main load balancer |
|
|
196
196
|
|
|
197
197
|
## Troubleshooting
|
|
198
198
|
|
|
@@ -49,6 +49,8 @@ resource "f5xc_api_credential" "example" {
|
|
|
49
49
|
|
|
50
50
|
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the API Credential. Must be unique within the namespace
|
|
51
51
|
|
|
52
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the API Credential will be created
|
|
53
|
+
|
|
52
54
|
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
53
55
|
|
|
54
56
|
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
@@ -57,8 +59,6 @@ resource "f5xc_api_credential" "example" {
|
|
|
57
59
|
|
|
58
60
|
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
59
61
|
|
|
60
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Optional String<br>Namespace for the API Credential. For this resource type, namespace should be empty or omitted
|
|
61
|
-
|
|
62
62
|
### Spec Argument Reference
|
|
63
63
|
|
|
64
64
|
<a id="password"></a>• [`password`](#password) - Optional String<br>Password. Password is used for generating an API certificate P12 bundle user can use to protect access to it. this password will not be saved/persisted anywhere in the system. Applicable for credential type API_CERTIFICATE Users have to use this password when they use the certificate, e.g. in curl or while adding to key chain
|
|
@@ -54,8 +54,6 @@ resource "f5xc_child_tenant" "example" {
|
|
|
54
54
|
|
|
55
55
|
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Child Tenant. Must be unique within the namespace
|
|
56
56
|
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Child Tenant will be created
|
|
58
|
-
|
|
59
57
|
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
58
|
|
|
61
59
|
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
@@ -64,6 +62,8 @@ resource "f5xc_child_tenant" "example" {
|
|
|
64
62
|
|
|
65
63
|
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
64
|
|
|
65
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Optional String<br>Namespace for the Child Tenant. For this resource type, namespace should be empty or omitted
|
|
66
|
+
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
69
|
<a id="child-tenant-manager"></a>• [`child_tenant_manager`](#child-tenant-manager) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Child Tenant Manager](#child-tenant-manager) below for details.
|
|
@@ -54,8 +54,6 @@ resource "f5xc_cloud_connect" "example" {
|
|
|
54
54
|
|
|
55
55
|
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Cloud Connect. Must be unique within the namespace
|
|
56
56
|
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Cloud Connect will be created
|
|
58
|
-
|
|
59
57
|
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
58
|
|
|
61
59
|
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
@@ -64,6 +62,8 @@ resource "f5xc_cloud_connect" "example" {
|
|
|
64
62
|
|
|
65
63
|
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
64
|
|
|
65
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Optional String<br>Namespace for the Cloud Connect. For this resource type, namespace should be empty or omitted
|
|
66
|
+
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
69
|
-> **One of the following:**
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_dns_zone Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "DNS"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages DNS Zone in a given namespace. If one already exist it will give a error. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_dns_zone (Resource)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages DNS Zone in a given namespace. If one already exist it will give a error. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [DNS Zone API docs](https://docs.cloud.f5.com/docs-v2/api/dns-zone) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ Manages a DNS Zone resource in F5 Distributed Cloud.
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# DNS Zone Resource Example
|
|
18
|
-
# Manages
|
|
18
|
+
# Manages DNS Zone in a given namespace. If one already exist it will give a error. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic DNS Zone configuration
|
|
21
21
|
resource "f5xc_dns_zone" "example" {
|
|
@@ -69,15 +69,11 @@ resource "f5xc_dns_zone" "example" {
|
|
|
69
69
|
|
|
70
70
|
### Spec Argument Reference
|
|
71
71
|
|
|
72
|
-
|
|
72
|
+
-> **One of the following:**
|
|
73
|
+
• <a id="primary"></a>[`primary`](#primary) - Optional Block<br>PrimaryDNSCreateSpecType<br>See [Primary](#primary) below for details.
|
|
74
|
+
<br><br>• <a id="secondary"></a>[`secondary`](#secondary) - Optional Block<br>SecondaryDNSCreateSpecType
|
|
73
75
|
|
|
74
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
75
|
-
|
|
76
|
-
<a id="tsig-key-algorithm"></a>• [`tsig_key_algorithm`](#tsig-key-algorithm) - Optional String Defaults to `UNDEFINED`<br>Possible values are `HMAC_MD5`, `UNDEFINED`, `HMAC_SHA1`, `HMAC_SHA224`, `HMAC_SHA256`, `HMAC_SHA384`, `HMAC_SHA512`<br>[Enum: HMAC_MD5|UNDEFINED|HMAC_SHA1|HMAC_SHA224|HMAC_SHA256|HMAC_SHA384|HMAC_SHA512] TSIG Key Algorithm. TSIG key value must be compatible with the specified algorithm - UNDEFINED: UNDEFINED - HMAC_MD5: HMAC_MD5 - HMAC_SHA1: HMAC_SHA1 - HMAC_SHA224: HMAC_SHA224 - HMAC_SHA256: HMAC_SHA256 - HMAC_SHA384: HMAC_SHA384 - HMAC_SHA512: HMAC_SHA512
|
|
77
|
-
|
|
78
|
-
<a id="tsig-key-name"></a>• [`tsig_key_name`](#tsig-key-name) - Optional String<br>TSIG Key Name. TSIG key name as used in TSIG protocol extension
|
|
79
|
-
|
|
80
|
-
<a id="tsig-key-value"></a>• [`tsig_key_value`](#tsig-key-value) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Tsig Key Value](#tsig-key-value) below for details.
|
|
76
|
+
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
81
77
|
|
|
82
78
|
### Attributes Reference
|
|
83
79
|
|
|
@@ -87,43 +83,619 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
87
83
|
|
|
88
84
|
---
|
|
89
85
|
|
|
90
|
-
####
|
|
86
|
+
#### Primary
|
|
91
87
|
|
|
92
|
-
A [`
|
|
88
|
+
A [`primary`](#primary) block supports the following:
|
|
93
89
|
|
|
94
|
-
<a id="
|
|
90
|
+
<a id="primary-allow-http-lb-managed-records"></a>• [`allow_http_lb_managed_records`](#primary-allow-http-lb-managed-records) - Optional Bool<br>Option to allow user-created HTTP, TCP, and CDN load balancer related resource records to be automatically managed in a protected RRset
|
|
95
91
|
|
|
96
|
-
<a id="
|
|
92
|
+
<a id="primary-default-rr-set-group"></a>• [`default_rr_set_group`](#primary-default-rr-set-group) - Optional Block<br>Add and manage DNS resource record sets part of Default set group<br>See [Default Rr Set Group](#primary-default-rr-set-group) below.
|
|
97
93
|
|
|
98
|
-
<a id="
|
|
94
|
+
<a id="primary-default-soa-parameters"></a>• [`default_soa_parameters`](#primary-default-soa-parameters) - Optional Block<br>Enable this option
|
|
99
95
|
|
|
100
|
-
<a id="
|
|
96
|
+
<a id="primary-dnssec-mode"></a>• [`dnssec_mode`](#primary-dnssec-mode) - Optional Block<br>Disable<br>See [Dnssec Mode](#primary-dnssec-mode) below.
|
|
97
|
+
|
|
98
|
+
<a id="primary-rr-set-group"></a>• [`rr_set_group`](#primary-rr-set-group) - Optional Block<br>Create and manage set groups, and resource record sets within them, x-ves-io-managed set is managed by F5<br>See [Rr Set Group](#primary-rr-set-group) below.
|
|
99
|
+
|
|
100
|
+
<a id="primary-soa-parameters"></a>• [`soa_parameters`](#primary-soa-parameters) - Optional Block<br>SOARecordParameterConfig<br>See [Soa Parameters](#primary-soa-parameters) below.
|
|
101
|
+
|
|
102
|
+
#### Primary Default Rr Set Group
|
|
103
|
+
|
|
104
|
+
A [`default_rr_set_group`](#primary-default-rr-set-group) block (within [`primary`](#primary)) supports the following:
|
|
105
|
+
|
|
106
|
+
<a id="primary-default-rr-set-group-a-record"></a>• [`a_record`](#primary-default-rr-set-group-a-record) - Optional Block<br>DNSAResourceRecord. A Records<br>See [A Record](#primary-default-rr-set-group-a-record) below.
|
|
107
|
+
|
|
108
|
+
<a id="record-6a4ef0"></a>• [`aaaa_record`](#record-6a4ef0) - Optional Block<br>DNSAAAAResourceRecord. RecordSet for AAAA Records<br>See [Aaaa Record](#record-6a4ef0) below.
|
|
109
|
+
|
|
110
|
+
<a id="record-026644"></a>• [`afsdb_record`](#record-026644) - Optional Block<br>DNS AFSDB Record. DNS AFSDB Record<br>See [Afsdb Record](#record-026644) below.
|
|
111
|
+
|
|
112
|
+
<a id="record-6e32d8"></a>• [`alias_record`](#record-6e32d8) - Optional Block<br>DNSAliasResourceRecord<br>See [Alias Record](#record-6e32d8) below.
|
|
113
|
+
|
|
114
|
+
<a id="primary-default-rr-set-group-caa-record"></a>• [`caa_record`](#primary-default-rr-set-group-caa-record) - Optional Block<br>DNSCAAResourceRecord<br>See [Caa Record](#primary-default-rr-set-group-caa-record) below.
|
|
115
|
+
|
|
116
|
+
<a id="primary-default-rr-set-group-cds-record"></a>• [`cds_record`](#primary-default-rr-set-group-cds-record) - Optional Block<br>DNS CDS Record. DNS CDS Record<br>See [Cds Record](#primary-default-rr-set-group-cds-record) below.
|
|
117
|
+
|
|
118
|
+
<a id="record-3ef094"></a>• [`cert_record`](#record-3ef094) - Optional Block<br>DNS CERT Record. DNS CERT Record<br>See [Cert Record](#record-3ef094) below.
|
|
119
|
+
|
|
120
|
+
<a id="record-8b5bff"></a>• [`cname_record`](#record-8b5bff) - Optional Block<br>DNSCNAMEResourceRecord<br>See [Cname Record](#record-8b5bff) below.
|
|
121
|
+
|
|
122
|
+
<a id="spec-4eb13e"></a>• [`description_spec`](#spec-4eb13e) - Optional String<br>Comment
|
|
123
|
+
|
|
124
|
+
<a id="primary-default-rr-set-group-ds-record"></a>• [`ds_record`](#primary-default-rr-set-group-ds-record) - Optional Block<br>DNS DS Record. DNS DS Record<br>See [Ds Record](#primary-default-rr-set-group-ds-record) below.
|
|
125
|
+
|
|
126
|
+
<a id="record-d72d9f"></a>• [`eui48_record`](#record-d72d9f) - Optional Block<br>DNS EUI48 Record. DNS EUI48 Record<br>See [Eui48 Record](#record-d72d9f) below.
|
|
127
|
+
|
|
128
|
+
<a id="record-d3d028"></a>• [`eui64_record`](#record-d3d028) - Optional Block<br>DNS EUI64 Record. DNS EUI64 Record<br>See [Eui64 Record](#record-d3d028) below.
|
|
129
|
+
|
|
130
|
+
<a id="primary-default-rr-set-group-lb-record"></a>• [`lb_record`](#primary-default-rr-set-group-lb-record) - Optional Block<br>DNS Load Balancer Record. DNS Load Balancer Record<br>See [LB Record](#primary-default-rr-set-group-lb-record) below.
|
|
131
|
+
|
|
132
|
+
<a id="primary-default-rr-set-group-loc-record"></a>• [`loc_record`](#primary-default-rr-set-group-loc-record) - Optional Block<br>DNS LOC Record. DNS LOC Record<br>See [Loc Record](#primary-default-rr-set-group-loc-record) below.
|
|
133
|
+
|
|
134
|
+
<a id="primary-default-rr-set-group-mx-record"></a>• [`mx_record`](#primary-default-rr-set-group-mx-record) - Optional Block<br>DNSMXResourceRecord<br>See [Mx Record](#primary-default-rr-set-group-mx-record) below.
|
|
135
|
+
|
|
136
|
+
<a id="record-16470e"></a>• [`naptr_record`](#record-16470e) - Optional Block<br>DNS NAPTR Record. DNS NAPTR Record<br>See [Naptr Record](#record-16470e) below.
|
|
137
|
+
|
|
138
|
+
<a id="primary-default-rr-set-group-ns-record"></a>• [`ns_record`](#primary-default-rr-set-group-ns-record) - Optional Block<br>DNSNSResourceRecord<br>See [Ns Record](#primary-default-rr-set-group-ns-record) below.
|
|
139
|
+
|
|
140
|
+
<a id="primary-default-rr-set-group-ptr-record"></a>• [`ptr_record`](#primary-default-rr-set-group-ptr-record) - Optional Block<br>DNSPTRResourceRecord<br>See [Ptr Record](#primary-default-rr-set-group-ptr-record) below.
|
|
141
|
+
|
|
142
|
+
<a id="primary-default-rr-set-group-srv-record"></a>• [`srv_record`](#primary-default-rr-set-group-srv-record) - Optional Block<br>DNSSRVResourceRecord<br>See [Srv Record](#primary-default-rr-set-group-srv-record) below.
|
|
143
|
+
|
|
144
|
+
<a id="record-cc1927"></a>• [`sshfp_record`](#record-cc1927) - Optional Block<br>DNS SSHFP Record. DNS SSHFP Record<br>See [Sshfp Record](#record-cc1927) below.
|
|
145
|
+
|
|
146
|
+
<a id="record-db5883"></a>• [`tlsa_record`](#record-db5883) - Optional Block<br>DNS TLSA Record. DNS TLSA Record<br>See [Tlsa Record](#record-db5883) below.
|
|
147
|
+
|
|
148
|
+
<a id="primary-default-rr-set-group-ttl"></a>• [`ttl`](#primary-default-rr-set-group-ttl) - Optional Number<br>Time to live
|
|
149
|
+
|
|
150
|
+
<a id="primary-default-rr-set-group-txt-record"></a>• [`txt_record`](#primary-default-rr-set-group-txt-record) - Optional Block<br>DNSTXTResourceRecord<br>See [Txt Record](#primary-default-rr-set-group-txt-record) below.
|
|
151
|
+
|
|
152
|
+
#### Primary Default Rr Set Group A Record
|
|
153
|
+
|
|
154
|
+
An [`a_record`](#primary-default-rr-set-group-a-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
155
|
+
|
|
156
|
+
<a id="name-59b7b8"></a>• [`name`](#name-59b7b8) - Optional String<br>Record Name (Excluding Domain name). A Record name, please provide only the specific subdomain or record name without the base domain
|
|
157
|
+
|
|
158
|
+
<a id="values-6ab550"></a>• [`values`](#values-6ab550) - Optional List<br>IPv4 Addresses. A valid IPv4 address, for example: 1.1.1.1
|
|
159
|
+
|
|
160
|
+
#### Primary Default Rr Set Group Aaaa Record
|
|
161
|
+
|
|
162
|
+
An [`aaaa_record`](#record-6a4ef0) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
163
|
+
|
|
164
|
+
<a id="name-c55d66"></a>• [`name`](#name-c55d66) - Optional String<br>Record Name (Excluding Domain name). AAAA Record name, please provide only the specific subdomain or record name without the base domain
|
|
165
|
+
|
|
166
|
+
<a id="values-6b9908"></a>• [`values`](#values-6b9908) - Optional List<br>IPv6 Addresses. A valid IPv6 address, for example: 2001:0db8:85a3:0000:0000:8a2e:0370:7334
|
|
167
|
+
|
|
168
|
+
#### Primary Default Rr Set Group Afsdb Record
|
|
169
|
+
|
|
170
|
+
An [`afsdb_record`](#record-026644) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
171
|
+
|
|
172
|
+
<a id="name-996289"></a>• [`name`](#name-996289) - Optional String<br>Record Name (Excluding Domain name). AFSDB Record name, please provide only the specific subdomain or record name without the base domain
|
|
173
|
+
|
|
174
|
+
<a id="values-776b5a"></a>• [`values`](#values-776b5a) - Optional Block<br>AFSDB Value<br>See [Values](#values-776b5a) below.
|
|
175
|
+
|
|
176
|
+
#### Primary Default Rr Set Group Afsdb Record Values
|
|
177
|
+
|
|
178
|
+
<a id="deep-7224a6"></a>Deeply nested **Values** block collapsed for readability.
|
|
179
|
+
|
|
180
|
+
#### Primary Default Rr Set Group Alias Record
|
|
181
|
+
|
|
182
|
+
An [`alias_record`](#record-6e32d8) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
183
|
+
|
|
184
|
+
<a id="value-da5681"></a>• [`value`](#value-da5681) - Optional String<br>Domain. A valid domain name, for example: example.com
|
|
185
|
+
|
|
186
|
+
#### Primary Default Rr Set Group Caa Record
|
|
187
|
+
|
|
188
|
+
A [`caa_record`](#primary-default-rr-set-group-caa-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
189
|
+
|
|
190
|
+
<a id="name-5c8e96"></a>• [`name`](#name-5c8e96) - Optional String<br>Record Name (Excluding Domain name). CAA Record name, please provide only the specific subdomain or record name without the base domain
|
|
191
|
+
|
|
192
|
+
<a id="values-41ba0e"></a>• [`values`](#values-41ba0e) - Optional Block<br>CAA Record Value<br>See [Values](#values-41ba0e) below.
|
|
193
|
+
|
|
194
|
+
#### Primary Default Rr Set Group Caa Record Values
|
|
195
|
+
|
|
196
|
+
<a id="deep-31a8bf"></a>Deeply nested **Values** block collapsed for readability.
|
|
197
|
+
|
|
198
|
+
#### Primary Default Rr Set Group Cds Record
|
|
199
|
+
|
|
200
|
+
A [`cds_record`](#primary-default-rr-set-group-cds-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
201
|
+
|
|
202
|
+
<a id="name-54ff93"></a>• [`name`](#name-54ff93) - Optional String<br>Record Name (Excluding Domain name). CDS Record name, please provide only the specific subdomain or record name without the base domain
|
|
203
|
+
|
|
204
|
+
<a id="values-970128"></a>• [`values`](#values-970128) - Optional Block<br>DS Value<br>See [Values](#values-970128) below.
|
|
205
|
+
|
|
206
|
+
#### Primary Default Rr Set Group Cds Record Values
|
|
207
|
+
|
|
208
|
+
<a id="deep-6b61a3"></a>Deeply nested **Values** block collapsed for readability.
|
|
209
|
+
|
|
210
|
+
#### Primary Default Rr Set Group Cds Record Values Sha1 Digest
|
|
211
|
+
|
|
212
|
+
<a id="deep-336942"></a>Deeply nested **Digest** block collapsed for readability.
|
|
213
|
+
|
|
214
|
+
#### Primary Default Rr Set Group Cds Record Values Sha256 Digest
|
|
215
|
+
|
|
216
|
+
<a id="deep-2d3a7f"></a>Deeply nested **Digest** block collapsed for readability.
|
|
217
|
+
|
|
218
|
+
#### Primary Default Rr Set Group Cds Record Values Sha384 Digest
|
|
219
|
+
|
|
220
|
+
<a id="deep-107b34"></a>Deeply nested **Digest** block collapsed for readability.
|
|
221
|
+
|
|
222
|
+
#### Primary Default Rr Set Group Cert Record
|
|
223
|
+
|
|
224
|
+
A [`cert_record`](#record-3ef094) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
225
|
+
|
|
226
|
+
<a id="name-f59c0d"></a>• [`name`](#name-f59c0d) - Optional String<br>Record Name (Excluding Domain name). CERT Record name, please provide only the specific subdomain or record name without the base domain
|
|
227
|
+
|
|
228
|
+
<a id="values-753772"></a>• [`values`](#values-753772) - Optional Block<br>CERT Value<br>See [Values](#values-753772) below.
|
|
229
|
+
|
|
230
|
+
#### Primary Default Rr Set Group Cert Record Values
|
|
231
|
+
|
|
232
|
+
<a id="deep-4cedd5"></a>Deeply nested **Values** block collapsed for readability.
|
|
233
|
+
|
|
234
|
+
#### Primary Default Rr Set Group Cname Record
|
|
235
|
+
|
|
236
|
+
A [`cname_record`](#record-8b5bff) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
237
|
+
|
|
238
|
+
<a id="name-73c139"></a>• [`name`](#name-73c139) - Optional String<br>Record Name (Excluding Domain name). CName Record name, please provide only the specific subdomain or record name without the base domain
|
|
239
|
+
|
|
240
|
+
<a id="value-8158f9"></a>• [`value`](#value-8158f9) - Optional String<br>Domain
|
|
241
|
+
|
|
242
|
+
#### Primary Default Rr Set Group Ds Record
|
|
243
|
+
|
|
244
|
+
A [`ds_record`](#primary-default-rr-set-group-ds-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
245
|
+
|
|
246
|
+
<a id="name-4472e4"></a>• [`name`](#name-4472e4) - Optional String<br>Record Name (Excluding Domain name). DS Record name, please provide only the specific subdomain or record name without the base domain
|
|
247
|
+
|
|
248
|
+
<a id="values-6934cb"></a>• [`values`](#values-6934cb) - Optional Block<br>DS Value<br>See [Values](#values-6934cb) below.
|
|
249
|
+
|
|
250
|
+
#### Primary Default Rr Set Group Ds Record Values
|
|
251
|
+
|
|
252
|
+
<a id="deep-235ea7"></a>Deeply nested **Values** block collapsed for readability.
|
|
253
|
+
|
|
254
|
+
#### Primary Default Rr Set Group Ds Record Values Sha1 Digest
|
|
255
|
+
|
|
256
|
+
<a id="deep-093891"></a>Deeply nested **Digest** block collapsed for readability.
|
|
257
|
+
|
|
258
|
+
#### Primary Default Rr Set Group Ds Record Values Sha256 Digest
|
|
259
|
+
|
|
260
|
+
<a id="deep-b950dc"></a>Deeply nested **Digest** block collapsed for readability.
|
|
261
|
+
|
|
262
|
+
#### Primary Default Rr Set Group Ds Record Values Sha384 Digest
|
|
263
|
+
|
|
264
|
+
<a id="deep-6d3795"></a>Deeply nested **Digest** block collapsed for readability.
|
|
265
|
+
|
|
266
|
+
#### Primary Default Rr Set Group Eui48 Record
|
|
267
|
+
|
|
268
|
+
An [`eui48_record`](#record-d72d9f) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
269
|
+
|
|
270
|
+
<a id="name-fcad11"></a>• [`name`](#name-fcad11) - Optional String<br>Record Name (Excluding Domain name). EUI48 Record name, please provide only the specific subdomain or record name without the base domain
|
|
271
|
+
|
|
272
|
+
<a id="value-9c7097"></a>• [`value`](#value-9c7097) - Optional String<br>EUI48 Identifier. A valid eui48 identifier, for example: 01-23-45-67-89-ab
|
|
273
|
+
|
|
274
|
+
#### Primary Default Rr Set Group Eui64 Record
|
|
275
|
+
|
|
276
|
+
An [`eui64_record`](#record-d3d028) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
277
|
+
|
|
278
|
+
<a id="name-148f42"></a>• [`name`](#name-148f42) - Optional String<br>Record Name (Excluding Domain name). EUI64 Record name, please provide only the specific subdomain or record name without the base domain
|
|
279
|
+
|
|
280
|
+
<a id="value-9f20fd"></a>• [`value`](#value-9f20fd) - Optional String<br>EUI64 Identifier. A valid EUI64 identifier, for example: 01-23-45-67-89-ab-cd-ef
|
|
281
|
+
|
|
282
|
+
#### Primary Default Rr Set Group LB Record
|
|
283
|
+
|
|
284
|
+
A [`lb_record`](#primary-default-rr-set-group-lb-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
285
|
+
|
|
286
|
+
<a id="name-423e27"></a>• [`name`](#name-423e27) - Optional String<br>Record Name (Excluding Domain name). Load Balancer record name (except for SRV DNS Load balancer record) should be a simple record name and not a subdomain of a subdomain
|
|
287
|
+
|
|
288
|
+
<a id="value-4b593b"></a>• [`value`](#value-4b593b) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Value](#value-4b593b) below.
|
|
289
|
+
|
|
290
|
+
#### Primary Default Rr Set Group LB Record Value
|
|
291
|
+
|
|
292
|
+
<a id="deep-b51e9f"></a>Deeply nested **Value** block collapsed for readability.
|
|
293
|
+
|
|
294
|
+
#### Primary Default Rr Set Group Loc Record
|
|
295
|
+
|
|
296
|
+
A [`loc_record`](#primary-default-rr-set-group-loc-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
297
|
+
|
|
298
|
+
<a id="name-568c6c"></a>• [`name`](#name-568c6c) - Optional String<br>Record Name (Excluding Domain name). LOC Record name, please provide only the specific subdomain or record name without the base domain
|
|
299
|
+
|
|
300
|
+
<a id="values-17d6e4"></a>• [`values`](#values-17d6e4) - Optional Block<br>LOC Value<br>See [Values](#values-17d6e4) below.
|
|
301
|
+
|
|
302
|
+
#### Primary Default Rr Set Group Loc Record Values
|
|
303
|
+
|
|
304
|
+
<a id="deep-6917cb"></a>Deeply nested **Values** block collapsed for readability.
|
|
305
|
+
|
|
306
|
+
#### Primary Default Rr Set Group Mx Record
|
|
307
|
+
|
|
308
|
+
A [`mx_record`](#primary-default-rr-set-group-mx-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
309
|
+
|
|
310
|
+
<a id="name-0ee04c"></a>• [`name`](#name-0ee04c) - Optional String<br>Record Name (Excluding Domain name). MX Record name, please provide only the specific subdomain or record name without the base domain
|
|
311
|
+
|
|
312
|
+
<a id="values-032997"></a>• [`values`](#values-032997) - Optional Block<br>MX Record Value<br>See [Values](#values-032997) below.
|
|
313
|
+
|
|
314
|
+
#### Primary Default Rr Set Group Mx Record Values
|
|
315
|
+
|
|
316
|
+
<a id="deep-877222"></a>Deeply nested **Values** block collapsed for readability.
|
|
317
|
+
|
|
318
|
+
#### Primary Default Rr Set Group Naptr Record
|
|
319
|
+
|
|
320
|
+
A [`naptr_record`](#record-16470e) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
321
|
+
|
|
322
|
+
<a id="name-9ba043"></a>• [`name`](#name-9ba043) - Optional String<br>Record Name (Excluding Domain name). NAPTR Record name, please provide only the specific subdomain or record name without the base domain
|
|
323
|
+
|
|
324
|
+
<a id="values-8f9cd5"></a>• [`values`](#values-8f9cd5) - Optional Block<br>NAPTR Value<br>See [Values](#values-8f9cd5) below.
|
|
325
|
+
|
|
326
|
+
#### Primary Default Rr Set Group Naptr Record Values
|
|
327
|
+
|
|
328
|
+
<a id="deep-26168f"></a>Deeply nested **Values** block collapsed for readability.
|
|
329
|
+
|
|
330
|
+
#### Primary Default Rr Set Group Ns Record
|
|
331
|
+
|
|
332
|
+
A [`ns_record`](#primary-default-rr-set-group-ns-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
333
|
+
|
|
334
|
+
<a id="name-816a8e"></a>• [`name`](#name-816a8e) - Optional String<br>Record Name (Excluding Domain name). NS Record name, please provide only the specific subdomain or record name without the base domain
|
|
335
|
+
|
|
336
|
+
<a id="values-0b1572"></a>• [`values`](#values-0b1572) - Optional List<br>Name Servers
|
|
337
|
+
|
|
338
|
+
#### Primary Default Rr Set Group Ptr Record
|
|
339
|
+
|
|
340
|
+
A [`ptr_record`](#primary-default-rr-set-group-ptr-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
341
|
+
|
|
342
|
+
<a id="name-87ab5a"></a>• [`name`](#name-87ab5a) - Optional String<br>Record Name (Excluding Domain name). PTR Record name, please provide only the specific subdomain or record name without the base domain
|
|
343
|
+
|
|
344
|
+
<a id="values-987974"></a>• [`values`](#values-987974) - Optional List<br>Domain Name
|
|
345
|
+
|
|
346
|
+
#### Primary Default Rr Set Group Srv Record
|
|
347
|
+
|
|
348
|
+
A [`srv_record`](#primary-default-rr-set-group-srv-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
349
|
+
|
|
350
|
+
<a id="name-d7e083"></a>• [`name`](#name-d7e083) - Optional String<br>Record Name (Excluding Domain name). SRV Record name, please provide only the specific subdomain or record name without the base domain
|
|
351
|
+
|
|
352
|
+
<a id="values-41fcb0"></a>• [`values`](#values-41fcb0) - Optional Block<br>SRV Value<br>See [Values](#values-41fcb0) below.
|
|
353
|
+
|
|
354
|
+
#### Primary Default Rr Set Group Srv Record Values
|
|
355
|
+
|
|
356
|
+
<a id="deep-6da59a"></a>Deeply nested **Values** block collapsed for readability.
|
|
357
|
+
|
|
358
|
+
#### Primary Default Rr Set Group Sshfp Record
|
|
359
|
+
|
|
360
|
+
A [`sshfp_record`](#record-cc1927) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
361
|
+
|
|
362
|
+
<a id="name-dba42e"></a>• [`name`](#name-dba42e) - Optional String<br>Record Name (Excluding Domain name). SSHFP Record name, please provide only the specific subdomain or record name without the base domain
|
|
363
|
+
|
|
364
|
+
<a id="values-eea3f2"></a>• [`values`](#values-eea3f2) - Optional Block<br>SSHFP Value<br>See [Values](#values-eea3f2) below.
|
|
365
|
+
|
|
366
|
+
#### Primary Default Rr Set Group Sshfp Record Values
|
|
367
|
+
|
|
368
|
+
<a id="deep-240021"></a>Deeply nested **Values** block collapsed for readability.
|
|
369
|
+
|
|
370
|
+
#### Primary Default Rr Set Group Sshfp Record Values Sha1 Fingerprint
|
|
371
|
+
|
|
372
|
+
<a id="deep-080f3e"></a>Deeply nested **Fingerprint** block collapsed for readability.
|
|
373
|
+
|
|
374
|
+
#### Primary Default Rr Set Group Sshfp Record Values Sha256 Fingerprint
|
|
375
|
+
|
|
376
|
+
<a id="deep-95a797"></a>Deeply nested **Fingerprint** block collapsed for readability.
|
|
377
|
+
|
|
378
|
+
#### Primary Default Rr Set Group Tlsa Record
|
|
379
|
+
|
|
380
|
+
A [`tlsa_record`](#record-db5883) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
381
|
+
|
|
382
|
+
<a id="name-687010"></a>• [`name`](#name-687010) - Optional String<br>Record Name (Excluding Domain name). TLSA Record name, please provide only the specific subdomain or record name without the base domain
|
|
101
383
|
|
|
102
|
-
|
|
384
|
+
<a id="values-49e48c"></a>• [`values`](#values-49e48c) - Optional Block<br>TLSA Value<br>See [Values](#values-49e48c) below.
|
|
103
385
|
|
|
104
|
-
|
|
386
|
+
#### Primary Default Rr Set Group Tlsa Record Values
|
|
105
387
|
|
|
106
|
-
<a id="
|
|
388
|
+
<a id="deep-1962b2"></a>Deeply nested **Values** block collapsed for readability.
|
|
107
389
|
|
|
108
|
-
|
|
390
|
+
#### Primary Default Rr Set Group Txt Record
|
|
109
391
|
|
|
110
|
-
|
|
392
|
+
A [`txt_record`](#primary-default-rr-set-group-txt-record) block (within [`primary.default_rr_set_group`](#primary-default-rr-set-group)) supports the following:
|
|
111
393
|
|
|
112
|
-
|
|
394
|
+
<a id="name-ea3275"></a>• [`name`](#name-ea3275) - Optional String<br>Record Name (Excluding Domain name). TXT Record name, please provide only the specific subdomain or record name without the base domain
|
|
113
395
|
|
|
114
|
-
<a id="
|
|
396
|
+
<a id="values-49770a"></a>• [`values`](#values-49770a) - Optional List<br>Text
|
|
115
397
|
|
|
116
|
-
|
|
398
|
+
#### Primary Dnssec Mode
|
|
117
399
|
|
|
118
|
-
|
|
400
|
+
A [`dnssec_mode`](#primary-dnssec-mode) block (within [`primary`](#primary)) supports the following:
|
|
119
401
|
|
|
120
|
-
|
|
402
|
+
<a id="primary-dnssec-mode-disable"></a>• [`disable`](#primary-dnssec-mode-disable) - Optional Block<br>Enable this option
|
|
121
403
|
|
|
122
|
-
|
|
404
|
+
<a id="primary-dnssec-mode-enable"></a>• [`enable`](#primary-dnssec-mode-enable) - Optional Block<br>Enable. DNSSEC enable
|
|
123
405
|
|
|
124
|
-
|
|
406
|
+
#### Primary Rr Set Group
|
|
125
407
|
|
|
126
|
-
|
|
408
|
+
A [`rr_set_group`](#primary-rr-set-group) block (within [`primary`](#primary)) supports the following:
|
|
409
|
+
|
|
410
|
+
<a id="primary-rr-set-group-metadata"></a>• [`metadata`](#primary-rr-set-group-metadata) - Optional Block<br>Message Metadata. MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create and replace APIs<br>See [Metadata](#primary-rr-set-group-metadata) below.
|
|
411
|
+
|
|
412
|
+
<a id="primary-rr-set-group-rr-set"></a>• [`rr_set`](#primary-rr-set-group-rr-set) - Optional Block<br>Resource Record Sets. Collection of DNS resource record sets<br>See [Rr Set](#primary-rr-set-group-rr-set) below.
|
|
413
|
+
|
|
414
|
+
#### Primary Rr Set Group Metadata
|
|
415
|
+
|
|
416
|
+
A [`metadata`](#primary-rr-set-group-metadata) block (within [`primary.rr_set_group`](#primary-rr-set-group)) supports the following:
|
|
417
|
+
|
|
418
|
+
<a id="spec-383031"></a>• [`description_spec`](#spec-383031) - Optional String<br>Description. Human readable description
|
|
419
|
+
|
|
420
|
+
<a id="primary-rr-set-group-metadata-name"></a>• [`name`](#primary-rr-set-group-metadata-name) - Optional String<br>Name. This is the name of the message. The value of name has to follow DNS-1035 format
|
|
421
|
+
|
|
422
|
+
#### Primary Rr Set Group Rr Set
|
|
423
|
+
|
|
424
|
+
A [`rr_set`](#primary-rr-set-group-rr-set) block (within [`primary.rr_set_group`](#primary-rr-set-group)) supports the following:
|
|
425
|
+
|
|
426
|
+
<a id="primary-rr-set-group-rr-set-a-record"></a>• [`a_record`](#primary-rr-set-group-rr-set-a-record) - Optional Block<br>DNSAResourceRecord. A Records<br>See [A Record](#primary-rr-set-group-rr-set-a-record) below.
|
|
427
|
+
|
|
428
|
+
<a id="primary-rr-set-group-rr-set-aaaa-record"></a>• [`aaaa_record`](#primary-rr-set-group-rr-set-aaaa-record) - Optional Block<br>DNSAAAAResourceRecord. RecordSet for AAAA Records<br>See [Aaaa Record](#primary-rr-set-group-rr-set-aaaa-record) below.
|
|
429
|
+
|
|
430
|
+
<a id="record-5fff7a"></a>• [`afsdb_record`](#record-5fff7a) - Optional Block<br>DNS AFSDB Record. DNS AFSDB Record<br>See [Afsdb Record](#record-5fff7a) below.
|
|
431
|
+
|
|
432
|
+
<a id="record-62faa8"></a>• [`alias_record`](#record-62faa8) - Optional Block<br>DNSAliasResourceRecord<br>See [Alias Record](#record-62faa8) below.
|
|
433
|
+
|
|
434
|
+
<a id="primary-rr-set-group-rr-set-caa-record"></a>• [`caa_record`](#primary-rr-set-group-rr-set-caa-record) - Optional Block<br>DNSCAAResourceRecord<br>See [Caa Record](#primary-rr-set-group-rr-set-caa-record) below.
|
|
435
|
+
|
|
436
|
+
<a id="primary-rr-set-group-rr-set-cds-record"></a>• [`cds_record`](#primary-rr-set-group-rr-set-cds-record) - Optional Block<br>DNS CDS Record. DNS CDS Record<br>See [Cds Record](#primary-rr-set-group-rr-set-cds-record) below.
|
|
437
|
+
|
|
438
|
+
<a id="primary-rr-set-group-rr-set-cert-record"></a>• [`cert_record`](#primary-rr-set-group-rr-set-cert-record) - Optional Block<br>DNS CERT Record. DNS CERT Record<br>See [Cert Record](#primary-rr-set-group-rr-set-cert-record) below.
|
|
439
|
+
|
|
440
|
+
<a id="record-c00906"></a>• [`cname_record`](#record-c00906) - Optional Block<br>DNSCNAMEResourceRecord<br>See [Cname Record](#record-c00906) below.
|
|
441
|
+
|
|
442
|
+
<a id="spec-fe6497"></a>• [`description_spec`](#spec-fe6497) - Optional String<br>Comment
|
|
443
|
+
|
|
444
|
+
<a id="primary-rr-set-group-rr-set-ds-record"></a>• [`ds_record`](#primary-rr-set-group-rr-set-ds-record) - Optional Block<br>DNS DS Record. DNS DS Record<br>See [Ds Record](#primary-rr-set-group-rr-set-ds-record) below.
|
|
445
|
+
|
|
446
|
+
<a id="record-9b288e"></a>• [`eui48_record`](#record-9b288e) - Optional Block<br>DNS EUI48 Record. DNS EUI48 Record<br>See [Eui48 Record](#record-9b288e) below.
|
|
447
|
+
|
|
448
|
+
<a id="record-4ddc4d"></a>• [`eui64_record`](#record-4ddc4d) - Optional Block<br>DNS EUI64 Record. DNS EUI64 Record<br>See [Eui64 Record](#record-4ddc4d) below.
|
|
449
|
+
|
|
450
|
+
<a id="primary-rr-set-group-rr-set-lb-record"></a>• [`lb_record`](#primary-rr-set-group-rr-set-lb-record) - Optional Block<br>DNS Load Balancer Record. DNS Load Balancer Record<br>See [LB Record](#primary-rr-set-group-rr-set-lb-record) below.
|
|
451
|
+
|
|
452
|
+
<a id="primary-rr-set-group-rr-set-loc-record"></a>• [`loc_record`](#primary-rr-set-group-rr-set-loc-record) - Optional Block<br>DNS LOC Record. DNS LOC Record<br>See [Loc Record](#primary-rr-set-group-rr-set-loc-record) below.
|
|
453
|
+
|
|
454
|
+
<a id="primary-rr-set-group-rr-set-mx-record"></a>• [`mx_record`](#primary-rr-set-group-rr-set-mx-record) - Optional Block<br>DNSMXResourceRecord<br>See [Mx Record](#primary-rr-set-group-rr-set-mx-record) below.
|
|
455
|
+
|
|
456
|
+
<a id="record-8d4520"></a>• [`naptr_record`](#record-8d4520) - Optional Block<br>DNS NAPTR Record. DNS NAPTR Record<br>See [Naptr Record](#record-8d4520) below.
|
|
457
|
+
|
|
458
|
+
<a id="primary-rr-set-group-rr-set-ns-record"></a>• [`ns_record`](#primary-rr-set-group-rr-set-ns-record) - Optional Block<br>DNSNSResourceRecord<br>See [Ns Record](#primary-rr-set-group-rr-set-ns-record) below.
|
|
459
|
+
|
|
460
|
+
<a id="primary-rr-set-group-rr-set-ptr-record"></a>• [`ptr_record`](#primary-rr-set-group-rr-set-ptr-record) - Optional Block<br>DNSPTRResourceRecord<br>See [Ptr Record](#primary-rr-set-group-rr-set-ptr-record) below.
|
|
461
|
+
|
|
462
|
+
<a id="primary-rr-set-group-rr-set-srv-record"></a>• [`srv_record`](#primary-rr-set-group-rr-set-srv-record) - Optional Block<br>DNSSRVResourceRecord<br>See [Srv Record](#primary-rr-set-group-rr-set-srv-record) below.
|
|
463
|
+
|
|
464
|
+
<a id="record-736138"></a>• [`sshfp_record`](#record-736138) - Optional Block<br>DNS SSHFP Record. DNS SSHFP Record<br>See [Sshfp Record](#record-736138) below.
|
|
465
|
+
|
|
466
|
+
<a id="primary-rr-set-group-rr-set-tlsa-record"></a>• [`tlsa_record`](#primary-rr-set-group-rr-set-tlsa-record) - Optional Block<br>DNS TLSA Record. DNS TLSA Record<br>See [Tlsa Record](#primary-rr-set-group-rr-set-tlsa-record) below.
|
|
467
|
+
|
|
468
|
+
<a id="primary-rr-set-group-rr-set-ttl"></a>• [`ttl`](#primary-rr-set-group-rr-set-ttl) - Optional Number<br>Time to live
|
|
469
|
+
|
|
470
|
+
<a id="primary-rr-set-group-rr-set-txt-record"></a>• [`txt_record`](#primary-rr-set-group-rr-set-txt-record) - Optional Block<br>DNSTXTResourceRecord<br>See [Txt Record](#primary-rr-set-group-rr-set-txt-record) below.
|
|
471
|
+
|
|
472
|
+
#### Primary Rr Set Group Rr Set A Record
|
|
473
|
+
|
|
474
|
+
<a id="deep-533e88"></a>Deeply nested **Record** block collapsed for readability.
|
|
475
|
+
|
|
476
|
+
#### Primary Rr Set Group Rr Set Aaaa Record
|
|
477
|
+
|
|
478
|
+
<a id="deep-42bc39"></a>Deeply nested **Record** block collapsed for readability.
|
|
479
|
+
|
|
480
|
+
#### Primary Rr Set Group Rr Set Afsdb Record
|
|
481
|
+
|
|
482
|
+
<a id="deep-477f8d"></a>Deeply nested **Record** block collapsed for readability.
|
|
483
|
+
|
|
484
|
+
#### Primary Rr Set Group Rr Set Afsdb Record Values
|
|
485
|
+
|
|
486
|
+
<a id="deep-7e2a54"></a>Deeply nested **Values** block collapsed for readability.
|
|
487
|
+
|
|
488
|
+
#### Primary Rr Set Group Rr Set Alias Record
|
|
489
|
+
|
|
490
|
+
<a id="deep-482a6d"></a>Deeply nested **Record** block collapsed for readability.
|
|
491
|
+
|
|
492
|
+
#### Primary Rr Set Group Rr Set Caa Record
|
|
493
|
+
|
|
494
|
+
<a id="deep-66ae76"></a>Deeply nested **Record** block collapsed for readability.
|
|
495
|
+
|
|
496
|
+
#### Primary Rr Set Group Rr Set Caa Record Values
|
|
497
|
+
|
|
498
|
+
<a id="deep-c100ec"></a>Deeply nested **Values** block collapsed for readability.
|
|
499
|
+
|
|
500
|
+
#### Primary Rr Set Group Rr Set Cds Record
|
|
501
|
+
|
|
502
|
+
<a id="deep-89f1fe"></a>Deeply nested **Record** block collapsed for readability.
|
|
503
|
+
|
|
504
|
+
#### Primary Rr Set Group Rr Set Cds Record Values
|
|
505
|
+
|
|
506
|
+
<a id="deep-ca260e"></a>Deeply nested **Values** block collapsed for readability.
|
|
507
|
+
|
|
508
|
+
#### Primary Rr Set Group Rr Set Cds Record Values Sha1 Digest
|
|
509
|
+
|
|
510
|
+
<a id="deep-8ef0c5"></a>Deeply nested **Digest** block collapsed for readability.
|
|
511
|
+
|
|
512
|
+
#### Primary Rr Set Group Rr Set Cds Record Values Sha256 Digest
|
|
513
|
+
|
|
514
|
+
<a id="deep-affe0f"></a>Deeply nested **Digest** block collapsed for readability.
|
|
515
|
+
|
|
516
|
+
#### Primary Rr Set Group Rr Set Cds Record Values Sha384 Digest
|
|
517
|
+
|
|
518
|
+
<a id="deep-023fe9"></a>Deeply nested **Digest** block collapsed for readability.
|
|
519
|
+
|
|
520
|
+
#### Primary Rr Set Group Rr Set Cert Record
|
|
521
|
+
|
|
522
|
+
<a id="deep-91c89f"></a>Deeply nested **Record** block collapsed for readability.
|
|
523
|
+
|
|
524
|
+
#### Primary Rr Set Group Rr Set Cert Record Values
|
|
525
|
+
|
|
526
|
+
<a id="deep-d23a7c"></a>Deeply nested **Values** block collapsed for readability.
|
|
527
|
+
|
|
528
|
+
#### Primary Rr Set Group Rr Set Cname Record
|
|
529
|
+
|
|
530
|
+
<a id="deep-ebf6fd"></a>Deeply nested **Record** block collapsed for readability.
|
|
531
|
+
|
|
532
|
+
#### Primary Rr Set Group Rr Set Ds Record
|
|
533
|
+
|
|
534
|
+
<a id="deep-56b2e6"></a>Deeply nested **Record** block collapsed for readability.
|
|
535
|
+
|
|
536
|
+
#### Primary Rr Set Group Rr Set Ds Record Values
|
|
537
|
+
|
|
538
|
+
<a id="deep-cc2512"></a>Deeply nested **Values** block collapsed for readability.
|
|
539
|
+
|
|
540
|
+
#### Primary Rr Set Group Rr Set Ds Record Values Sha1 Digest
|
|
541
|
+
|
|
542
|
+
<a id="deep-58123e"></a>Deeply nested **Digest** block collapsed for readability.
|
|
543
|
+
|
|
544
|
+
#### Primary Rr Set Group Rr Set Ds Record Values Sha256 Digest
|
|
545
|
+
|
|
546
|
+
<a id="deep-551194"></a>Deeply nested **Digest** block collapsed for readability.
|
|
547
|
+
|
|
548
|
+
#### Primary Rr Set Group Rr Set Ds Record Values Sha384 Digest
|
|
549
|
+
|
|
550
|
+
<a id="deep-7a7126"></a>Deeply nested **Digest** block collapsed for readability.
|
|
551
|
+
|
|
552
|
+
#### Primary Rr Set Group Rr Set Eui48 Record
|
|
553
|
+
|
|
554
|
+
<a id="deep-407753"></a>Deeply nested **Record** block collapsed for readability.
|
|
555
|
+
|
|
556
|
+
#### Primary Rr Set Group Rr Set Eui64 Record
|
|
557
|
+
|
|
558
|
+
<a id="deep-b94961"></a>Deeply nested **Record** block collapsed for readability.
|
|
559
|
+
|
|
560
|
+
#### Primary Rr Set Group Rr Set LB Record
|
|
561
|
+
|
|
562
|
+
<a id="deep-6258c5"></a>Deeply nested **Record** block collapsed for readability.
|
|
563
|
+
|
|
564
|
+
#### Primary Rr Set Group Rr Set LB Record Value
|
|
565
|
+
|
|
566
|
+
<a id="deep-96233f"></a>Deeply nested **Value** block collapsed for readability.
|
|
567
|
+
|
|
568
|
+
#### Primary Rr Set Group Rr Set Loc Record
|
|
569
|
+
|
|
570
|
+
<a id="deep-fdb347"></a>Deeply nested **Record** block collapsed for readability.
|
|
571
|
+
|
|
572
|
+
#### Primary Rr Set Group Rr Set Loc Record Values
|
|
573
|
+
|
|
574
|
+
<a id="deep-706e2d"></a>Deeply nested **Values** block collapsed for readability.
|
|
575
|
+
|
|
576
|
+
#### Primary Rr Set Group Rr Set Mx Record
|
|
577
|
+
|
|
578
|
+
<a id="deep-7baabe"></a>Deeply nested **Record** block collapsed for readability.
|
|
579
|
+
|
|
580
|
+
#### Primary Rr Set Group Rr Set Mx Record Values
|
|
581
|
+
|
|
582
|
+
<a id="deep-cc2223"></a>Deeply nested **Values** block collapsed for readability.
|
|
583
|
+
|
|
584
|
+
#### Primary Rr Set Group Rr Set Naptr Record
|
|
585
|
+
|
|
586
|
+
<a id="deep-4722da"></a>Deeply nested **Record** block collapsed for readability.
|
|
587
|
+
|
|
588
|
+
#### Primary Rr Set Group Rr Set Naptr Record Values
|
|
589
|
+
|
|
590
|
+
<a id="deep-978399"></a>Deeply nested **Values** block collapsed for readability.
|
|
591
|
+
|
|
592
|
+
#### Primary Rr Set Group Rr Set Ns Record
|
|
593
|
+
|
|
594
|
+
<a id="deep-d1e54f"></a>Deeply nested **Record** block collapsed for readability.
|
|
595
|
+
|
|
596
|
+
#### Primary Rr Set Group Rr Set Ptr Record
|
|
597
|
+
|
|
598
|
+
<a id="deep-22ef4c"></a>Deeply nested **Record** block collapsed for readability.
|
|
599
|
+
|
|
600
|
+
#### Primary Rr Set Group Rr Set Srv Record
|
|
601
|
+
|
|
602
|
+
<a id="deep-fd89f4"></a>Deeply nested **Record** block collapsed for readability.
|
|
603
|
+
|
|
604
|
+
#### Primary Rr Set Group Rr Set Srv Record Values
|
|
605
|
+
|
|
606
|
+
<a id="deep-468bb2"></a>Deeply nested **Values** block collapsed for readability.
|
|
607
|
+
|
|
608
|
+
#### Primary Rr Set Group Rr Set Sshfp Record
|
|
609
|
+
|
|
610
|
+
<a id="deep-902aa9"></a>Deeply nested **Record** block collapsed for readability.
|
|
611
|
+
|
|
612
|
+
#### Primary Rr Set Group Rr Set Sshfp Record Values
|
|
613
|
+
|
|
614
|
+
<a id="deep-8adb01"></a>Deeply nested **Values** block collapsed for readability.
|
|
615
|
+
|
|
616
|
+
#### Primary Rr Set Group Rr Set Sshfp Record Values Sha1 Fingerprint
|
|
617
|
+
|
|
618
|
+
<a id="deep-2e2d00"></a>Deeply nested **Fingerprint** block collapsed for readability.
|
|
619
|
+
|
|
620
|
+
#### Primary Rr Set Group Rr Set Sshfp Record Values Sha256 Fingerprint
|
|
621
|
+
|
|
622
|
+
<a id="deep-af6d05"></a>Deeply nested **Fingerprint** block collapsed for readability.
|
|
623
|
+
|
|
624
|
+
#### Primary Rr Set Group Rr Set Tlsa Record
|
|
625
|
+
|
|
626
|
+
<a id="deep-5be176"></a>Deeply nested **Record** block collapsed for readability.
|
|
627
|
+
|
|
628
|
+
#### Primary Rr Set Group Rr Set Tlsa Record Values
|
|
629
|
+
|
|
630
|
+
<a id="deep-a25b62"></a>Deeply nested **Values** block collapsed for readability.
|
|
631
|
+
|
|
632
|
+
#### Primary Rr Set Group Rr Set Txt Record
|
|
633
|
+
|
|
634
|
+
<a id="deep-6399bb"></a>Deeply nested **Record** block collapsed for readability.
|
|
635
|
+
|
|
636
|
+
#### Primary Soa Parameters
|
|
637
|
+
|
|
638
|
+
A [`soa_parameters`](#primary-soa-parameters) block (within [`primary`](#primary)) supports the following:
|
|
639
|
+
|
|
640
|
+
<a id="primary-soa-parameters-expire"></a>• [`expire`](#primary-soa-parameters-expire) - Optional Number<br>Expire. expire value indicates when secondary nameservers should stop answering request for this zone if primary does not respond
|
|
641
|
+
|
|
642
|
+
<a id="primary-soa-parameters-negative-ttl"></a>• [`negative_ttl`](#primary-soa-parameters-negative-ttl) - Optional Number<br>Negative TTL. negative TTL value indicates how long to cache non-existent resource record for this zone
|
|
643
|
+
|
|
644
|
+
<a id="primary-soa-parameters-refresh"></a>• [`refresh`](#primary-soa-parameters-refresh) - Optional Number<br>Refresh interval. refresh value indicates when secondary nameservers should query for the SOA record to detect zone changes
|
|
645
|
+
|
|
646
|
+
<a id="primary-soa-parameters-retry"></a>• [`retry`](#primary-soa-parameters-retry) - Optional Number<br>Retry Interval. retry value indicates when secondary nameservers should retry to request the serial number if primary does not respond
|
|
647
|
+
|
|
648
|
+
<a id="primary-soa-parameters-ttl"></a>• [`ttl`](#primary-soa-parameters-ttl) - Optional Number<br>TTL. SOA record time to live (in seconds)
|
|
649
|
+
|
|
650
|
+
#### Secondary
|
|
651
|
+
|
|
652
|
+
A [`secondary`](#secondary) block supports the following:
|
|
653
|
+
|
|
654
|
+
<a id="secondary-primary-servers"></a>• [`primary_servers`](#secondary-primary-servers) - Optional List<br>DNS Primary Server IP
|
|
655
|
+
|
|
656
|
+
<a id="secondary-tsig-key-algorithm"></a>• [`tsig_key_algorithm`](#secondary-tsig-key-algorithm) - Optional String Defaults to `UNDEFINED`<br>Possible values are `HMAC_MD5`, `UNDEFINED`, `HMAC_SHA1`, `HMAC_SHA224`, `HMAC_SHA256`, `HMAC_SHA384`, `HMAC_SHA512`<br>[Enum: HMAC_MD5|UNDEFINED|HMAC_SHA1|HMAC_SHA224|HMAC_SHA256|HMAC_SHA384|HMAC_SHA512] TSIG Key Algorithm. TSIG key value must be compatible with the specified algorithm - UNDEFINED: UNDEFINED - HMAC_MD5: HMAC_MD5 - HMAC_SHA1: HMAC_SHA1 - HMAC_SHA224: HMAC_SHA224 - HMAC_SHA256: HMAC_SHA256 - HMAC_SHA384: HMAC_SHA384 - HMAC_SHA512: HMAC_SHA512
|
|
657
|
+
|
|
658
|
+
<a id="secondary-tsig-key-name"></a>• [`tsig_key_name`](#secondary-tsig-key-name) - Optional String<br>TSIG Key Name. TSIG key name as used in TSIG protocol extension
|
|
659
|
+
|
|
660
|
+
<a id="secondary-tsig-key-value"></a>• [`tsig_key_value`](#secondary-tsig-key-value) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Tsig Key Value](#secondary-tsig-key-value) below.
|
|
661
|
+
|
|
662
|
+
#### Secondary Tsig Key Value
|
|
663
|
+
|
|
664
|
+
A [`tsig_key_value`](#secondary-tsig-key-value) block (within [`secondary`](#secondary)) supports the following:
|
|
665
|
+
|
|
666
|
+
<a id="info-dc8549"></a>• [`blindfold_secret_info`](#info-dc8549) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-dc8549) below.
|
|
667
|
+
|
|
668
|
+
<a id="info-712cd8"></a>• [`clear_secret_info`](#info-712cd8) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-712cd8) below.
|
|
669
|
+
|
|
670
|
+
#### Secondary Tsig Key Value Blindfold Secret Info
|
|
671
|
+
|
|
672
|
+
A [`blindfold_secret_info`](#info-dc8549) block (within [`secondary.tsig_key_value`](#secondary-tsig-key-value)) supports the following:
|
|
673
|
+
|
|
674
|
+
<a id="provider-9d03fe"></a>• [`decryption_provider`](#provider-9d03fe) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
675
|
+
|
|
676
|
+
<a id="location-ef4bdb"></a>• [`location`](#location-ef4bdb) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
677
|
+
|
|
678
|
+
<a id="provider-be11a9"></a>• [`store_provider`](#provider-be11a9) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
679
|
+
|
|
680
|
+
#### Secondary Tsig Key Value Clear Secret Info
|
|
681
|
+
|
|
682
|
+
A [`clear_secret_info`](#info-712cd8) block (within [`secondary.tsig_key_value`](#secondary-tsig-key-value)) supports the following:
|
|
683
|
+
|
|
684
|
+
<a id="ref-f21028"></a>• [`provider_ref`](#ref-f21028) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
685
|
+
|
|
686
|
+
<a id="url-f87f89"></a>• [`url`](#url-f87f89) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
687
|
+
|
|
688
|
+
#### Timeouts
|
|
689
|
+
|
|
690
|
+
A [`timeouts`](#timeouts) block supports the following:
|
|
691
|
+
|
|
692
|
+
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
693
|
+
|
|
694
|
+
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
695
|
+
|
|
696
|
+
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
697
|
+
|
|
698
|
+
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
127
699
|
|
|
128
700
|
---
|
|
129
701
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@robinmordasiewicz/f5xc-terraform-mcp",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.12.0",
|
|
4
4
|
"description": "MCP server for F5 Distributed Cloud Terraform provider - provides documentation and API specification access for AI assistants",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|