@robinmordasiewicz/f5xc-terraform-mcp 2.3.0 → 2.4.3

package/dist/docs/resources/k8s_cluster.md

@@ -0,0 +1,291 @@
+---
+page_title: "f5xc_k8s_cluster Resource - terraform-provider-f5xc"
+subcategory: "Kubernetes"
+description: |-
+  [Category: Kubernetes] [Namespace: required] Manages k8s_cluster will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+---
+
+# f5xc_k8s_cluster (Resource)
+
+[Category: Kubernetes] [Namespace: required] Manages k8s_cluster will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+~> **Note** Please refer to [K8S Cluster API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-cluster) to learn more.
+
+## Example Usage
+
+```terraform
+# K8S Cluster Resource Example
+# [Category: Kubernetes] [Namespace: required] Manages k8s_cluster will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+# Basic K8S Cluster configuration
+resource "f5xc_k8s_cluster" "example" {
+  name      = "example-k8s-cluster"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Kubernetes Cluster configuration
+  # Use custom local domain
+  use_custom_cluster_role_bindings {
+    cluster_role_bindings {
+      name      = "admin-binding"
+      namespace = "system"
+    }
+  }
+
+  cluster_wide_app_list {
+    cluster_wide_apps {
+      name      = "nginx-ingress"
+      namespace = "system"
+    }
+  }
+
+  local_access_config {
+    local_domain = "cluster.local"
+    default_port {}
+  }
+
+  global_access_enable {}
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the K8S Cluster. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the K8S Cluster will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="cluster-scoped-access-deny"></a>[`cluster_scoped_access_deny`](#cluster-scoped-access-deny) - Optional Block<br>Enable this option
+<br><br>&#x2022; <a id="cluster-scoped-access-permit"></a>[`cluster_scoped_access_permit`](#cluster-scoped-access-permit) - Optional Block<br>Enable this option
+
+-> **One of the following:**
+&#x2022; <a id="cluster-wide-app-list"></a>[`cluster_wide_app_list`](#cluster-wide-app-list) - Optional Block<br>Cluster Wide Application List. List of cluster wide applications<br>See [Cluster Wide App List](#cluster-wide-app-list) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="global-access-enable"></a>[`global_access_enable`](#global-access-enable) - Optional Block<br>Enable this option
+
+-> **One of the following:**
+&#x2022; <a id="insecure-registry-list"></a>[`insecure_registry_list`](#insecure-registry-list) - Optional Block<br>Docker Insecure Registry List. List of docker insecure registries<br>See [Insecure Registry List](#insecure-registry-list) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="local-access-config"></a>[`local_access_config`](#local-access-config) - Optional Block<br>Local Access Configuration. Parameters required to enable local access<br>See [Local Access Config](#local-access-config) below for details.
+
+<a id="no-cluster-wide-apps"></a>&#x2022; [`no_cluster_wide_apps`](#no-cluster-wide-apps) - Optional Block<br>Enable this option
+
+<a id="no-global-access"></a>&#x2022; [`no_global_access`](#no-global-access) - Optional Block<br>Enable this option
+
+<a id="no-insecure-registries"></a>&#x2022; [`no_insecure_registries`](#no-insecure-registries) - Optional Block<br>Enable this option
+
+<a id="no-local-access"></a>&#x2022; [`no_local_access`](#no-local-access) - Optional Block<br>Enable this option
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="use-custom-cluster-role-bindings"></a>[`use_custom_cluster_role_bindings`](#use-custom-cluster-role-bindings) - Optional Block<br>Cluster Role Binding List. List of active cluster role binding list for a K8S cluster<br>See [Use Custom Cluster Role Bindings](#use-custom-cluster-role-bindings) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="use-custom-cluster-role-list"></a>[`use_custom_cluster_role_list`](#use-custom-cluster-role-list) - Optional Block<br>Cluster Role List. List of active cluster role list for a K8S cluster<br>See [Use Custom Cluster Role List](#use-custom-cluster-role-list) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="use-custom-pod-security-admission"></a>[`use_custom_pod_security_admission`](#use-custom-pod-security-admission) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Use Custom Pod Security Admission](#use-custom-pod-security-admission) below for details.
+
+-> **One of the following:**
+&#x2022; <a id="use-custom-psp-list"></a>[`use_custom_psp_list`](#use-custom-psp-list) - Optional Block<br>Pod Security Policy List. List of active Pod security policies for a K8S cluster<br>See [Use Custom Psp List](#use-custom-psp-list) below for details.
+
+<a id="use-default-cluster-role-bindings"></a>&#x2022; [`use_default_cluster_role_bindings`](#use-default-cluster-role-bindings) - Optional Block<br>Enable this option
+
+<a id="use-default-cluster-roles"></a>&#x2022; [`use_default_cluster_roles`](#use-default-cluster-roles) - Optional Block<br>Enable this option
+
+<a id="use-default-pod-security-admission"></a>&#x2022; [`use_default_pod_security_admission`](#use-default-pod-security-admission) - Optional Block<br>Enable this option
+
+<a id="use-default-psp"></a>&#x2022; [`use_default_psp`](#use-default-psp) - Optional Block<br>Enable this option
+
+-> **One of the following:**
+&#x2022; <a id="vk8s-namespace-access-deny"></a>[`vk8s_namespace_access_deny`](#vk8s-namespace-access-deny) - Optional Block<br>Enable this option
+<br><br>&#x2022; <a id="vk8s-namespace-access-permit"></a>[`vk8s_namespace_access_permit`](#vk8s-namespace-access-permit) - Optional Block<br>Enable this option
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Cluster Wide App List
+
+A [`cluster_wide_app_list`](#cluster-wide-app-list) block supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps"></a>&#x2022; [`cluster_wide_apps`](#cluster-wide-app-list-cluster-wide-apps) - Optional Block<br>Cluster Wide Application List. List of cluster wide applications<br>See [Cluster Wide Apps](#cluster-wide-app-list-cluster-wide-apps) below.
+
+#### Cluster Wide App List Cluster Wide Apps
+
+A [`cluster_wide_apps`](#cluster-wide-app-list-cluster-wide-apps) block (within [`cluster_wide_app_list`](#cluster-wide-app-list)) supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd"></a>&#x2022; [`argo_cd`](#cluster-wide-app-list-cluster-wide-apps-argo-cd) - Optional Block<br>Argo CD configuration. description Parameters for Argo Continuous Deployment(CD) application<br>See [Argo Cd](#cluster-wide-app-list-cluster-wide-apps-argo-cd) below.
+
+<a id="cluster-wide-app-list-cluster-wide-apps-dashboard"></a>&#x2022; [`dashboard`](#cluster-wide-app-list-cluster-wide-apps-dashboard) - Optional Block<br>K8S Dashboard configuration. description Parameters for K8S dashboard
+
+<a id="cluster-wide-app-list-cluster-wide-apps-metrics-server"></a>&#x2022; [`metrics_server`](#cluster-wide-app-list-cluster-wide-apps-metrics-server) - Optional Block<br>K8S Metrics Server configuration. description Parameters for Kubernetes Metrics Server application
+
+<a id="cluster-wide-app-list-cluster-wide-apps-prometheus"></a>&#x2022; [`prometheus`](#cluster-wide-app-list-cluster-wide-apps-prometheus) - Optional Block<br>Prometheus access configuration. description Parameters for Prometheus server access
+
+#### Cluster Wide App List Cluster Wide Apps Argo Cd
+
+An [`argo_cd`](#cluster-wide-app-list-cluster-wide-apps-argo-cd) block (within [`cluster_wide_app_list.cluster_wide_apps`](#cluster-wide-app-list-cluster-wide-apps)) supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain"></a>&#x2022; [`local_domain`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain) - Optional Block<br>Local Access Configuration. Parameters required to enable local access<br>See [Local Domain](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain) below.
+
+#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain
+
+A [`local_domain`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd`](#cluster-wide-app-list-cluster-wide-apps-argo-cd)) supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-default-port"></a>&#x2022; [`default_port`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-default-port) - Optional Block<br>Enable this option
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-local-domain"></a>&#x2022; [`local_domain`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-local-domain) - Optional String<br>Local Domain. ArgoCD will be accessible at `<site name>`.`<local domain>`
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password"></a>&#x2022; [`password`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Password](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password) below.
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-port"></a>&#x2022; [`port`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-port) - Optional Number<br>Custom ArgoCD Port. Use custom ArgoCD port. Available port range is less than 65000 except reserved ports
+
+#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain Password
+
+A [`password`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd.local_domain`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain)) supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info) below.
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info) below.
+
+#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain Password Blindfold Secret Info
+
+A [`blindfold_secret_info`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd.local_domain.password`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password)) supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info-location"></a>&#x2022; [`location`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain Password Clear Secret Info
+
+A [`clear_secret_info`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd.local_domain.password`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password)) supports the following:
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info-url"></a>&#x2022; [`url`](#cluster-wide-app-list-cluster-wide-apps-argo-cd-local-domain-password-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Insecure Registry List
+
+An [`insecure_registry_list`](#insecure-registry-list) block supports the following:
+
+<a id="insecure-registry-list-insecure-registries"></a>&#x2022; [`insecure_registries`](#insecure-registry-list-insecure-registries) - Optional List<br>Docker Insecure Registry List. List of docker insecure registries in format 'example.com:5000'
+
+#### Local Access Config
+
+A [`local_access_config`](#local-access-config) block supports the following:
+
+<a id="local-access-config-default-port"></a>&#x2022; [`default_port`](#local-access-config-default-port) - Optional Block<br>Enable this option
+
+<a id="local-access-config-local-domain"></a>&#x2022; [`local_domain`](#local-access-config-local-domain) - Optional String<br>Local Domain. Local K8S API server will be accessible at `<site name>`.`<local domain>`
+
+<a id="local-access-config-port"></a>&#x2022; [`port`](#local-access-config-port) - Optional Number<br>Custom K8S Port. Use custom K8S port for API server. Available port range is less than 65000 except reserved ports
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `30 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `30 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `30 minutes`)<br>Used when updating the resource
+
+#### Use Custom Cluster Role Bindings
+
+An [`use_custom_cluster_role_bindings`](#use-custom-cluster-role-bindings) block supports the following:
+
+<a id="use-custom-cluster-role-bindings-cluster-role-bindings"></a>&#x2022; [`cluster_role_bindings`](#use-custom-cluster-role-bindings-cluster-role-bindings) - Optional Block<br>Cluster Role Binding List. List of active cluster role binding list for a K8S cluster<br>See [Cluster Role Bindings](#use-custom-cluster-role-bindings-cluster-role-bindings) below.
+
+#### Use Custom Cluster Role Bindings Cluster Role Bindings
+
+A [`cluster_role_bindings`](#use-custom-cluster-role-bindings-cluster-role-bindings) block (within [`use_custom_cluster_role_bindings`](#use-custom-cluster-role-bindings)) supports the following:
+
+<a id="use-custom-cluster-role-bindings-cluster-role-bindings-name"></a>&#x2022; [`name`](#use-custom-cluster-role-bindings-cluster-role-bindings-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="use-custom-cluster-role-bindings-cluster-role-bindings-namespace"></a>&#x2022; [`namespace`](#use-custom-cluster-role-bindings-cluster-role-bindings-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="use-custom-cluster-role-bindings-cluster-role-bindings-tenant"></a>&#x2022; [`tenant`](#use-custom-cluster-role-bindings-cluster-role-bindings-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Use Custom Cluster Role List
+
+An [`use_custom_cluster_role_list`](#use-custom-cluster-role-list) block supports the following:
+
+<a id="use-custom-cluster-role-list-cluster-roles"></a>&#x2022; [`cluster_roles`](#use-custom-cluster-role-list-cluster-roles) - Optional Block<br>Cluster Role List. List of active cluster role list for a K8S cluster<br>See [Cluster Roles](#use-custom-cluster-role-list-cluster-roles) below.
+
+#### Use Custom Cluster Role List Cluster Roles
+
+A [`cluster_roles`](#use-custom-cluster-role-list-cluster-roles) block (within [`use_custom_cluster_role_list`](#use-custom-cluster-role-list)) supports the following:
+
+<a id="use-custom-cluster-role-list-cluster-roles-name"></a>&#x2022; [`name`](#use-custom-cluster-role-list-cluster-roles-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="use-custom-cluster-role-list-cluster-roles-namespace"></a>&#x2022; [`namespace`](#use-custom-cluster-role-list-cluster-roles-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="use-custom-cluster-role-list-cluster-roles-tenant"></a>&#x2022; [`tenant`](#use-custom-cluster-role-list-cluster-roles-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Use Custom Pod Security Admission
+
+An [`use_custom_pod_security_admission`](#use-custom-pod-security-admission) block supports the following:
+
+<a id="use-custom-pod-security-admission-name"></a>&#x2022; [`name`](#use-custom-pod-security-admission-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="use-custom-pod-security-admission-namespace"></a>&#x2022; [`namespace`](#use-custom-pod-security-admission-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="use-custom-pod-security-admission-tenant"></a>&#x2022; [`tenant`](#use-custom-pod-security-admission-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Use Custom Psp List
+
+An [`use_custom_psp_list`](#use-custom-psp-list) block supports the following:
+
+<a id="use-custom-psp-list-pod-security-policies"></a>&#x2022; [`pod_security_policies`](#use-custom-psp-list-pod-security-policies) - Optional Block<br>Pod Security Policy List. List of active Pod security policies for a K8S cluster<br>See [Pod Security Policies](#use-custom-psp-list-pod-security-policies) below.
+
+#### Use Custom Psp List Pod Security Policies
+
+A [`pod_security_policies`](#use-custom-psp-list-pod-security-policies) block (within [`use_custom_psp_list`](#use-custom-psp-list)) supports the following:
+
+<a id="use-custom-psp-list-pod-security-policies-name"></a>&#x2022; [`name`](#use-custom-psp-list-pod-security-policies-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="use-custom-psp-list-pod-security-policies-namespace"></a>&#x2022; [`namespace`](#use-custom-psp-list-pod-security-policies-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="use-custom-psp-list-pod-security-policies-tenant"></a>&#x2022; [`tenant`](#use-custom-psp-list-pod-security-policies-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_k8s_cluster.example system/example
+```

package/dist/docs/resources/k8s_cluster_role.md

@@ -0,0 +1,143 @@
+---
+page_title: "f5xc_k8s_cluster_role Resource - terraform-provider-f5xc"
+subcategory: "Kubernetes"
+description: |-
+  [Category: Kubernetes] [Namespace: required] Manages k8s_cluster_role will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+---
+
+# f5xc_k8s_cluster_role (Resource)
+
+[Category: Kubernetes] [Namespace: required] Manages k8s_cluster_role will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+~> **Note** Please refer to [K8S Cluster Role API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-cluster-role) to learn more.
+
+## Example Usage
+
+```terraform
+# K8S Cluster Role Resource Example
+# [Category: Kubernetes] [Namespace: required] Manages k8s_cluster_role will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+# Basic K8S Cluster Role configuration
+resource "f5xc_k8s_cluster_role" "example" {
+  name      = "example-k8s-cluster-role"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # [OneOf: k8s_cluster_role_selector, policy_rule_list, yaml...
+  k8s_cluster_role_selector {
+    # Configure k8s_cluster_role_selector settings
+  }
+  # Policy Rule List. List of rules for role permissions
+  policy_rule_list {
+    # Configure policy_rule_list settings
+  }
+  # Policy Rules. List of rules for role permissions
+  policy_rule {
+    # Configure policy_rule settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the K8S Cluster Role. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the K8S Cluster Role will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="k8s-cluster-role-selector"></a>[`k8s_cluster_role_selector`](#k8s-cluster-role-selector) - Optional Block<br>Label Selector. This type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects. A null label selector matches no objects. Label selector is immutable. expressions is a list of strings of label selection expression. Each string has ',' separated values which are 'AND' and all strings are logically 'OR'. BNF for expression string `<selector-syntax>` ::= `<requirement>` | `<requirement>` ',' `<selector-syntax>` `<requirement>` ::= [!] KEY [ `<set-based-restriction>` | `<exact-match-restriction>` ] `<set-based-restriction>` ::= '' | `<inclusion-exclusion>` `<value-set>` `<inclusion-exclusion>` ::= `<inclusion>` | `<exclusion>` `<exclusion>` ::= 'notin' `<inclusion>` ::= 'in' `<value-set>` ::= '(' `<values>` ')' `<values>` ::= VALUE | VALUE ',' `<values>` `<exact-match-restriction>` ::= ['='|'=='|'!='] VALUE<br>See [K8S Cluster Role Selector](#k8s-cluster-role-selector) below for details.
+<br><br>&#x2022; <a id="policy-rule-list"></a>[`policy_rule_list`](#policy-rule-list) - Optional Block<br>Policy Rule List. List of rules for role permissions<br>See [Policy Rule List](#policy-rule-list) below for details.
+<br><br>&#x2022; <a id="yaml"></a>[`yaml`](#yaml) - Optional String<br>K8S YAML. K8S YAML for ClusterRole
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### K8S Cluster Role Selector
+
+A [`k8s_cluster_role_selector`](#k8s-cluster-role-selector) block supports the following:
+
+<a id="k8s-cluster-role-selector-expressions"></a>&#x2022; [`expressions`](#k8s-cluster-role-selector-expressions) - Optional List<br>Selector Expression. expressions contains the kubernetes style label expression for selections
+
+#### Policy Rule List
+
+A [`policy_rule_list`](#policy-rule-list) block supports the following:
+
+<a id="policy-rule-list-policy-rule"></a>&#x2022; [`policy_rule`](#policy-rule-list-policy-rule) - Optional Block<br>Policy Rules. List of rules for role permissions<br>See [Policy Rule](#policy-rule-list-policy-rule) below.
+
+#### Policy Rule List Policy Rule
+
+A [`policy_rule`](#policy-rule-list-policy-rule) block (within [`policy_rule_list`](#policy-rule-list)) supports the following:
+
+<a id="policy-rule-list-policy-rule-non-resource-url-list"></a>&#x2022; [`non_resource_url_list`](#policy-rule-list-policy-rule-non-resource-url-list) - Optional Block<br>List of Non Resource URL(s). permissions for URL(s) that do not represent K8S resource<br>See [Non Resource URL List](#policy-rule-list-policy-rule-non-resource-url-list) below.
+
+<a id="policy-rule-list-policy-rule-resource-list"></a>&#x2022; [`resource_list`](#policy-rule-list-policy-rule-resource-list) - Optional Block<br>Resource List. List of resources in terms of API groups/resource types/resource instances and verbs allowed<br>See [Resource List](#policy-rule-list-policy-rule-resource-list) below.
+
+#### Policy Rule List Policy Rule Non Resource URL List
+
+A [`non_resource_url_list`](#policy-rule-list-policy-rule-non-resource-url-list) block (within [`policy_rule_list.policy_rule`](#policy-rule-list-policy-rule)) supports the following:
+
+<a id="policy-rule-list-policy-rule-non-resource-url-list-urls"></a>&#x2022; [`urls`](#policy-rule-list-policy-rule-non-resource-url-list-urls) - Optional List<br>Non Resource URL(s). allowed URL(s) that do not represent any K8S resource. URL can be suffix or regex
+
+<a id="policy-rule-list-policy-rule-non-resource-url-list-verbs"></a>&#x2022; [`verbs`](#policy-rule-list-policy-rule-non-resource-url-list-verbs) - Optional List<br>Allowed Verbs. Allowed list of verbs(operations) on resources. Use VerbAll for all operations
+
+#### Policy Rule List Policy Rule Resource List
+
+A [`resource_list`](#policy-rule-list-policy-rule-resource-list) block (within [`policy_rule_list.policy_rule`](#policy-rule-list-policy-rule)) supports the following:
+
+<a id="policy-rule-list-policy-rule-resource-list-api-groups"></a>&#x2022; [`api_groups`](#policy-rule-list-policy-rule-resource-list-api-groups) - Optional List<br>API Groups. Allowed list of API group that contains resources, all resources of a given API group
+
+<a id="policy-rule-list-policy-rule-resource-list-resource-instances"></a>&#x2022; [`resource_instances`](#policy-rule-list-policy-rule-resource-list-resource-instances) - Optional List<br>Resource Instances. Allowed list of resource instances within the resource types
+
+<a id="policy-rule-list-policy-rule-resource-list-resource-types"></a>&#x2022; [`resource_types`](#policy-rule-list-policy-rule-resource-list-resource-types) - Optional List<br>Resource Types. Allowed list of resource types within the API groups
+
+<a id="policy-rule-list-policy-rule-resource-list-verbs"></a>&#x2022; [`verbs`](#policy-rule-list-policy-rule-resource-list-verbs) - Optional List<br>Allowed Verbs. Allowed list of verbs(operations) on resources. Use \* for all operations
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_k8s_cluster_role.example system/example
+```

package/dist/docs/resources/k8s_cluster_role_binding.md

@@ -0,0 +1,130 @@
+---
+page_title: "f5xc_k8s_cluster_role_binding Resource - terraform-provider-f5xc"
+subcategory: "Kubernetes"
+description: |-
+  [Category: Kubernetes] [Namespace: required] Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+---
+
+# f5xc_k8s_cluster_role_binding (Resource)
+
+[Category: Kubernetes] [Namespace: required] Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+~> **Note** Please refer to [K8S Cluster Role Binding API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-cluster-role-binding) to learn more.
+
+## Example Usage
+
+```terraform
+# K8S Cluster Role Binding Resource Example
+# [Category: Kubernetes] [Namespace: required] Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+# Basic K8S Cluster Role Binding configuration
+resource "f5xc_k8s_cluster_role_binding" "example" {
+  name      = "example-k8s-cluster-role-binding"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # Object reference. This type establishes a direct referenc...
+  k8s_cluster_role {
+    # Configure k8s_cluster_role settings
+  }
+  # Subjects. List of subjects (user, group or service accoun...
+  subjects {
+    # Configure subjects settings
+  }
+  # ServiceAccountType.
+  service_account {
+    # Configure service_account settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the K8S Cluster Role Binding. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the K8S Cluster Role Binding will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+<a id="k8s-cluster-role"></a>&#x2022; [`k8s_cluster_role`](#k8s-cluster-role) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [K8S Cluster Role](#k8s-cluster-role) below for details.
+
+<a id="subjects"></a>&#x2022; [`subjects`](#subjects) - Optional Block<br>Subjects. List of subjects (user, group or service account) to which this role is bound<br>See [Subjects](#subjects) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### K8S Cluster Role
+
+A [`k8s_cluster_role`](#k8s-cluster-role) block supports the following:
+
+<a id="k8s-cluster-role-name"></a>&#x2022; [`name`](#k8s-cluster-role-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="k8s-cluster-role-namespace"></a>&#x2022; [`namespace`](#k8s-cluster-role-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="k8s-cluster-role-tenant"></a>&#x2022; [`tenant`](#k8s-cluster-role-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Subjects
+
+A [`subjects`](#subjects) block supports the following:
+
+<a id="subjects-group"></a>&#x2022; [`group`](#subjects-group) - Optional String<br>Group. Group ID of the user group
+
+<a id="subjects-service-account"></a>&#x2022; [`service_account`](#subjects-service-account) - Optional Block<br>ServiceAccountType<br>See [Service Account](#subjects-service-account) below.
+
+<a id="subjects-user"></a>&#x2022; [`user`](#subjects-user) - Optional String<br>User. User ID of the user
+
+#### Subjects Service Account
+
+A [`service_account`](#subjects-service-account) block (within [`subjects`](#subjects)) supports the following:
+
+<a id="subjects-service-account-name"></a>&#x2022; [`name`](#subjects-service-account-name) - Optional String<br>Name. Name of the service account
+
+<a id="subjects-service-account-namespace"></a>&#x2022; [`namespace`](#subjects-service-account-namespace) - Optional String<br>Namespace. Namespace of the service account
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_k8s_cluster_role_binding.example system/example
+```