@robinmordasiewicz/f5xc-terraform-mcp 2.3.0 → 2.4.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +98 -15
- package/dist/docs/data-sources/addon_subscription.md +51 -0
- package/dist/docs/data-sources/address_allocator.md +51 -0
- package/dist/docs/data-sources/advertise_policy.md +51 -0
- package/dist/docs/data-sources/alert_policy.md +51 -0
- package/dist/docs/data-sources/alert_receiver.md +62 -0
- package/dist/docs/data-sources/allowed_tenant.md +51 -0
- package/dist/docs/data-sources/api_crawler.md +51 -0
- package/dist/docs/data-sources/api_credential.md +51 -0
- package/dist/docs/data-sources/api_definition.md +51 -0
- package/dist/docs/data-sources/api_discovery.md +51 -0
- package/dist/docs/data-sources/api_testing.md +51 -0
- package/dist/docs/data-sources/apm.md +51 -0
- package/dist/docs/data-sources/app_api_group.md +51 -0
- package/dist/docs/data-sources/app_firewall.md +62 -0
- package/dist/docs/data-sources/app_setting.md +51 -0
- package/dist/docs/data-sources/app_type.md +51 -0
- package/dist/docs/data-sources/authentication.md +51 -0
- package/dist/docs/data-sources/aws_tgw_site.md +51 -0
- package/dist/docs/data-sources/aws_vpc_site.md +68 -0
- package/dist/docs/data-sources/azure_vnet_site.md +68 -0
- package/dist/docs/data-sources/bgp.md +51 -0
- package/dist/docs/data-sources/bgp_asn_set.md +51 -0
- package/dist/docs/data-sources/bgp_routing_policy.md +51 -0
- package/dist/docs/data-sources/bigip_irule.md +51 -0
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +51 -0
- package/dist/docs/data-sources/cdn_cache_rule.md +51 -0
- package/dist/docs/data-sources/cdn_loadbalancer.md +51 -0
- package/dist/docs/data-sources/certificate.md +66 -0
- package/dist/docs/data-sources/certificate_chain.md +51 -0
- package/dist/docs/data-sources/child_tenant.md +51 -0
- package/dist/docs/data-sources/child_tenant_manager.md +51 -0
- package/dist/docs/data-sources/cloud_connect.md +51 -0
- package/dist/docs/data-sources/cloud_credentials.md +62 -0
- package/dist/docs/data-sources/cloud_elastic_ip.md +51 -0
- package/dist/docs/data-sources/cloud_link.md +51 -0
- package/dist/docs/data-sources/cluster.md +51 -0
- package/dist/docs/data-sources/cminstance.md +51 -0
- package/dist/docs/data-sources/code_base_integration.md +51 -0
- package/dist/docs/data-sources/contact.md +51 -0
- package/dist/docs/data-sources/container_registry.md +51 -0
- package/dist/docs/data-sources/crl.md +51 -0
- package/dist/docs/data-sources/customer_support.md +51 -0
- package/dist/docs/data-sources/data_group.md +51 -0
- package/dist/docs/data-sources/data_type.md +51 -0
- package/dist/docs/data-sources/dc_cluster_group.md +51 -0
- package/dist/docs/data-sources/discovery.md +51 -0
- package/dist/docs/data-sources/dns_compliance_checks.md +51 -0
- package/dist/docs/data-sources/dns_domain.md +51 -0
- package/dist/docs/data-sources/dns_lb_health_check.md +51 -0
- package/dist/docs/data-sources/dns_lb_pool.md +51 -0
- package/dist/docs/data-sources/dns_load_balancer.md +51 -0
- package/dist/docs/data-sources/dns_zone.md +62 -0
- package/dist/docs/data-sources/endpoint.md +51 -0
- package/dist/docs/data-sources/enhanced_firewall_policy.md +51 -0
- package/dist/docs/data-sources/external_connector.md +51 -0
- package/dist/docs/data-sources/fast_acl.md +51 -0
- package/dist/docs/data-sources/fast_acl_rule.md +51 -0
- package/dist/docs/data-sources/filter_set.md +51 -0
- package/dist/docs/data-sources/fleet.md +51 -0
- package/dist/docs/data-sources/forward_proxy_policy.md +51 -0
- package/dist/docs/data-sources/forwarding_class.md +51 -0
- package/dist/docs/data-sources/gcp_vpc_site.md +68 -0
- package/dist/docs/data-sources/geo_location_set.md +51 -0
- package/dist/docs/data-sources/global_log_receiver.md +51 -0
- package/dist/docs/data-sources/healthcheck.md +62 -0
- package/dist/docs/data-sources/http_loadbalancer.md +60 -0
- package/dist/docs/data-sources/ike1.md +51 -0
- package/dist/docs/data-sources/ike2.md +51 -0
- package/dist/docs/data-sources/ike_phase1_profile.md +51 -0
- package/dist/docs/data-sources/ike_phase2_profile.md +51 -0
- package/dist/docs/data-sources/infraprotect_asn.md +51 -0
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +51 -0
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +51 -0
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +51 -0
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +51 -0
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +51 -0
- package/dist/docs/data-sources/infraprotect_tunnel.md +51 -0
- package/dist/docs/data-sources/ip_prefix_set.md +51 -0
- package/dist/docs/data-sources/irule.md +51 -0
- package/dist/docs/data-sources/k8s_cluster.md +51 -0
- package/dist/docs/data-sources/k8s_cluster_role.md +51 -0
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +51 -0
- package/dist/docs/data-sources/k8s_pod_security_admission.md +51 -0
- package/dist/docs/data-sources/k8s_pod_security_policy.md +51 -0
- package/dist/docs/data-sources/log_receiver.md +62 -0
- package/dist/docs/data-sources/malicious_user_mitigation.md +51 -0
- package/dist/docs/data-sources/managed_tenant.md +51 -0
- package/dist/docs/data-sources/namespace.md +58 -0
- package/dist/docs/data-sources/nat_policy.md +51 -0
- package/dist/docs/data-sources/network_connector.md +51 -0
- package/dist/docs/data-sources/network_firewall.md +51 -0
- package/dist/docs/data-sources/network_interface.md +51 -0
- package/dist/docs/data-sources/network_policy.md +51 -0
- package/dist/docs/data-sources/network_policy_rule.md +51 -0
- package/dist/docs/data-sources/network_policy_view.md +51 -0
- package/dist/docs/data-sources/nfv_service.md +51 -0
- package/dist/docs/data-sources/oidc_provider.md +51 -0
- package/dist/docs/data-sources/origin_pool.md +65 -0
- package/dist/docs/data-sources/policer.md +51 -0
- package/dist/docs/data-sources/policy_based_routing.md +51 -0
- package/dist/docs/data-sources/protocol_inspection.md +51 -0
- package/dist/docs/data-sources/protocol_policer.md +51 -0
- package/dist/docs/data-sources/proxy.md +51 -0
- package/dist/docs/data-sources/quota.md +51 -0
- package/dist/docs/data-sources/rate_limiter.md +64 -0
- package/dist/docs/data-sources/rate_limiter_policy.md +51 -0
- package/dist/docs/data-sources/registration.md +51 -0
- package/dist/docs/data-sources/report_config.md +51 -0
- package/dist/docs/data-sources/role.md +51 -0
- package/dist/docs/data-sources/route.md +51 -0
- package/dist/docs/data-sources/secret_management_access.md +51 -0
- package/dist/docs/data-sources/secret_policy.md +51 -0
- package/dist/docs/data-sources/secret_policy_rule.md +51 -0
- package/dist/docs/data-sources/securemesh_site.md +51 -0
- package/dist/docs/data-sources/securemesh_site_v2.md +51 -0
- package/dist/docs/data-sources/segment.md +51 -0
- package/dist/docs/data-sources/sensitive_data_policy.md +51 -0
- package/dist/docs/data-sources/service_policy.md +64 -0
- package/dist/docs/data-sources/service_policy_rule.md +51 -0
- package/dist/docs/data-sources/site_mesh_group.md +51 -0
- package/dist/docs/data-sources/srv6_network_slice.md +51 -0
- package/dist/docs/data-sources/subnet.md +51 -0
- package/dist/docs/data-sources/tcp_loadbalancer.md +51 -0
- package/dist/docs/data-sources/tenant_configuration.md +51 -0
- package/dist/docs/data-sources/tenant_profile.md +51 -0
- package/dist/docs/data-sources/ticket_tracking_system.md +51 -0
- package/dist/docs/data-sources/token.md +51 -0
- package/dist/docs/data-sources/tpm_api_key.md +51 -0
- package/dist/docs/data-sources/tpm_category.md +51 -0
- package/dist/docs/data-sources/tpm_manager.md +51 -0
- package/dist/docs/data-sources/trusted_ca_list.md +51 -0
- package/dist/docs/data-sources/tunnel.md +51 -0
- package/dist/docs/data-sources/udp_loadbalancer.md +51 -0
- package/dist/docs/data-sources/usb_policy.md +51 -0
- package/dist/docs/data-sources/user_identification.md +51 -0
- package/dist/docs/data-sources/virtual_host.md +51 -0
- package/dist/docs/data-sources/virtual_k8s.md +51 -0
- package/dist/docs/data-sources/virtual_network.md +51 -0
- package/dist/docs/data-sources/virtual_site.md +68 -0
- package/dist/docs/data-sources/voltshare_admin_policy.md +51 -0
- package/dist/docs/data-sources/voltstack_site.md +51 -0
- package/dist/docs/data-sources/waf_exclusion_policy.md +51 -0
- package/dist/docs/data-sources/workload.md +51 -0
- package/dist/docs/data-sources/workload_flavor.md +51 -0
- package/dist/docs/functions/blindfold.md +133 -0
- package/dist/docs/functions/blindfold_file.md +154 -0
- package/dist/docs/guides/authentication.md +389 -0
- package/dist/docs/guides/blindfold.md +509 -0
- package/dist/docs/guides/http-loadbalancer.md +274 -0
- package/dist/docs/resources/addon_subscription.md +136 -0
- package/dist/docs/resources/address_allocator.md +106 -0
- package/dist/docs/resources/advertise_policy.md +318 -0
- package/dist/docs/resources/alert_policy.md +242 -0
- package/dist/docs/resources/alert_receiver.md +394 -0
- package/dist/docs/resources/allowed_tenant.md +104 -0
- package/dist/docs/resources/api_crawler.md +142 -0
- package/dist/docs/resources/api_credential.md +101 -0
- package/dist/docs/resources/api_definition.md +127 -0
- package/dist/docs/resources/api_discovery.md +100 -0
- package/dist/docs/resources/api_testing.md +273 -0
- package/dist/docs/resources/apm.md +946 -0
- package/dist/docs/resources/app_api_group.md +161 -0
- package/dist/docs/resources/app_firewall.md +282 -0
- package/dist/docs/resources/app_setting.md +228 -0
- package/dist/docs/resources/app_type.md +124 -0
- package/dist/docs/resources/authentication.md +228 -0
- package/dist/docs/resources/aws_tgw_site.md +948 -0
- package/dist/docs/resources/aws_vpc_site.md +1262 -0
- package/dist/docs/resources/azure_vnet_site.md +2316 -0
- package/dist/docs/resources/bgp.md +341 -0
- package/dist/docs/resources/bgp_asn_set.md +86 -0
- package/dist/docs/resources/bgp_routing_policy.md +166 -0
- package/dist/docs/resources/bigip_irule.md +90 -0
- package/dist/docs/resources/bot_defense_app_infrastructure.md +166 -0
- package/dist/docs/resources/cdn_cache_rule.md +278 -0
- package/dist/docs/resources/cdn_loadbalancer.md +3800 -0
- package/dist/docs/resources/certificate.md +146 -0
- package/dist/docs/resources/certificate_chain.md +86 -0
- package/dist/docs/resources/child_tenant.md +166 -0
- package/dist/docs/resources/child_tenant_manager.md +130 -0
- package/dist/docs/resources/cloud_connect.md +260 -0
- package/dist/docs/resources/cloud_credentials.md +264 -0
- package/dist/docs/resources/cloud_elastic_ip.md +108 -0
- package/dist/docs/resources/cloud_link.md +252 -0
- package/dist/docs/resources/cluster.md +408 -0
- package/dist/docs/resources/cminstance.md +166 -0
- package/dist/docs/resources/code_base_integration.md +360 -0
- package/dist/docs/resources/contact.md +104 -0
- package/dist/docs/resources/container_registry.md +132 -0
- package/dist/docs/resources/crl.md +106 -0
- package/dist/docs/resources/customer_support.md +170 -0
- package/dist/docs/resources/data_group.md +121 -0
- package/dist/docs/resources/data_type.md +188 -0
- package/dist/docs/resources/dc_cluster_group.md +108 -0
- package/dist/docs/resources/discovery.md +443 -0
- package/dist/docs/resources/dns_compliance_checks.md +90 -0
- package/dist/docs/resources/dns_domain.md +94 -0
- package/dist/docs/resources/dns_lb_health_check.md +166 -0
- package/dist/docs/resources/dns_lb_pool.md +233 -0
- package/dist/docs/resources/dns_load_balancer.md +254 -0
- package/dist/docs/resources/dns_zone.md +135 -0
- package/dist/docs/resources/endpoint.md +234 -0
- package/dist/docs/resources/enhanced_firewall_policy.md +327 -0
- package/dist/docs/resources/external_connector.md +246 -0
- package/dist/docs/resources/fast_acl.md +376 -0
- package/dist/docs/resources/fast_acl_rule.md +192 -0
- package/dist/docs/resources/filter_set.md +142 -0
- package/dist/docs/resources/fleet.md +1267 -0
- package/dist/docs/resources/forward_proxy_policy.md +408 -0
- package/dist/docs/resources/forwarding_class.md +133 -0
- package/dist/docs/resources/gcp_vpc_site.md +1170 -0
- package/dist/docs/resources/geo_location_set.md +97 -0
- package/dist/docs/resources/global_log_receiver.md +1085 -0
- package/dist/docs/resources/healthcheck.md +148 -0
- package/dist/docs/resources/http_loadbalancer.md +7118 -0
- package/dist/docs/resources/ike1.md +133 -0
- package/dist/docs/resources/ike2.md +127 -0
- package/dist/docs/resources/ike_phase1_profile.md +141 -0
- package/dist/docs/resources/ike_phase2_profile.md +131 -0
- package/dist/docs/resources/infraprotect_asn.md +100 -0
- package/dist/docs/resources/infraprotect_asn_prefix.md +104 -0
- package/dist/docs/resources/infraprotect_deny_list_rule.md +108 -0
- package/dist/docs/resources/infraprotect_firewall_rule.md +205 -0
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -0
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +108 -0
- package/dist/docs/resources/infraprotect_tunnel.md +228 -0
- package/dist/docs/resources/ip_prefix_set.md +97 -0
- package/dist/docs/resources/irule.md +88 -0
- package/dist/docs/resources/k8s_cluster.md +291 -0
- package/dist/docs/resources/k8s_cluster_role.md +143 -0
- package/dist/docs/resources/k8s_cluster_role_binding.md +130 -0
- package/dist/docs/resources/k8s_pod_security_admission.md +116 -0
- package/dist/docs/resources/k8s_pod_security_policy.md +258 -0
- package/dist/docs/resources/log_receiver.md +183 -0
- package/dist/docs/resources/malicious_user_mitigation.md +132 -0
- package/dist/docs/resources/managed_tenant.md +116 -0
- package/dist/docs/resources/namespace.md +87 -0
- package/dist/docs/resources/nat_policy.md +408 -0
- package/dist/docs/resources/network_connector.md +252 -0
- package/dist/docs/resources/network_firewall.md +178 -0
- package/dist/docs/resources/network_interface.md +439 -0
- package/dist/docs/resources/network_policy.md +347 -0
- package/dist/docs/resources/network_policy_rule.md +157 -0
- package/dist/docs/resources/network_policy_view.md +330 -0
- package/dist/docs/resources/nfv_service.md +992 -0
- package/dist/docs/resources/oidc_provider.md +208 -0
- package/dist/docs/resources/origin_pool.md +801 -0
- package/dist/docs/resources/policer.md +97 -0
- package/dist/docs/resources/policy_based_routing.md +330 -0
- package/dist/docs/resources/protocol_inspection.md +130 -0
- package/dist/docs/resources/protocol_policer.md +146 -0
- package/dist/docs/resources/proxy.md +1181 -0
- package/dist/docs/resources/quota.md +104 -0
- package/dist/docs/resources/rate_limiter.md +155 -0
- package/dist/docs/resources/rate_limiter_policy.md +296 -0
- package/dist/docs/resources/registration.md +406 -0
- package/dist/docs/resources/report_config.md +160 -0
- package/dist/docs/resources/role.md +100 -0
- package/dist/docs/resources/route.md +724 -0
- package/dist/docs/resources/secret_management_access.md +498 -0
- package/dist/docs/resources/secret_policy.md +157 -0
- package/dist/docs/resources/secret_policy_rule.md +115 -0
- package/dist/docs/resources/securemesh_site.md +940 -0
- package/dist/docs/resources/securemesh_site_v2.md +2942 -0
- package/dist/docs/resources/segment.md +97 -0
- package/dist/docs/resources/sensitive_data_policy.md +116 -0
- package/dist/docs/resources/service_policy.md +795 -0
- package/dist/docs/resources/service_policy_rule.md +609 -0
- package/dist/docs/resources/site_mesh_group.md +163 -0
- package/dist/docs/resources/srv6_network_slice.md +92 -0
- package/dist/docs/resources/subnet.md +155 -0
- package/dist/docs/resources/tcp_loadbalancer.md +671 -0
- package/dist/docs/resources/tenant_configuration.md +136 -0
- package/dist/docs/resources/tenant_profile.md +156 -0
- package/dist/docs/resources/ticket_tracking_system.md +112 -0
- package/dist/docs/resources/token.md +87 -0
- package/dist/docs/resources/tpm_api_key.md +108 -0
- package/dist/docs/resources/tpm_category.md +108 -0
- package/dist/docs/resources/tpm_manager.md +84 -0
- package/dist/docs/resources/trusted_ca_list.md +89 -0
- package/dist/docs/resources/tunnel.md +250 -0
- package/dist/docs/resources/udp_loadbalancer.md +336 -0
- package/dist/docs/resources/usb_policy.md +108 -0
- package/dist/docs/resources/user_identification.md +126 -0
- package/dist/docs/resources/virtual_host.md +934 -0
- package/dist/docs/resources/virtual_k8s.md +132 -0
- package/dist/docs/resources/virtual_network.md +149 -0
- package/dist/docs/resources/virtual_site.md +102 -0
- package/dist/docs/resources/voltshare_admin_policy.md +196 -0
- package/dist/docs/resources/voltstack_site.md +2259 -0
- package/dist/docs/resources/waf_exclusion_policy.md +182 -0
- package/dist/docs/resources/workload.md +6021 -0
- package/dist/docs/resources/workload_flavor.md +90 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0000.public.ves.io.schema.ai_assistant.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0001.public.ves.io.schema.api_sec.api_crawler.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0002.public.ves.io.schema.views.api_definition.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0003.public.ves.io.schema.api_sec.api_discovery.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0004.public.ves.io.schema.api_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0005.public.ves.io.schema.api_group_element.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0006.public.ves.io.schema.api_sec.api_testing.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0007.public.ves.io.schema.api_credential.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0008.public.ves.io.schema.pbac.addon_service.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0009.public.ves.io.schema.pbac.addon_subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0010.public.ves.io.schema.address_allocator.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0011.public.ves.io.schema.advertise_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0012.public.ves.io.schema.alert_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0013.public.ves.io.schema.alert_receiver.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0014.public.ves.io.schema.alert.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0015.public.ves.io.schema.tenant_management.allowed_tenant.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0016.public.ves.io.schema.views.app_api_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0017.public.ves.io.schema.app_setting.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0018.public.ves.io.schema.app_type.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0019.public.ves.io.schema.app_firewall.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0020.public.ves.io.schema.app_security.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0021.public.ves.io.schema.api_sec.rule_suggestion.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0022.public.ves.io.schema.shape.device_id.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0023.public.ves.io.schema.authentication.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0024.public.ves.io.schema.ai_data.bfdp.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0025.public.ves.io.schema.ai_data.bfdp.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0026.public.ves.io.schema.bgp.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0027.public.ves.io.schema.bgp_asn_set.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0028.public.ves.io.schema.operate.bgp.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0029.public.ves.io.schema.bgp_routing_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0030.public.ves.io.schema.bigip.apm.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0031.public.ves.io.schema.bigip_irule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0032.public.ves.io.schema.views.bigip_virtual_server.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0033.public.ves.io.schema.shape.brmalerts.alert_gen_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0034.public.ves.io.schema.shape.brmalerts.alert_template.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0035.public.ves.io.schema.views.bot_defense_app_infrastructure.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0036.public.ves.io.schema.shape.bot_defense.threat_intelligence.bot_detection_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0037.public.ves.io.schema.shape.bot_defense.threat_intelligence.bot_detection_update.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0038.public.ves.io.schema.shape.bot_defense.bot_endpoint_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0039.public.ves.io.schema.shape.bot_defense.bot_infrastructure.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0040.public.ves.io.schema.shape.bot_defense.bot_allowlist_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0041.public.ves.io.schema.shape.bot_defense.bot_network_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0042.public.ves.io.schema.views.cdn_loadbalancer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0043.public.ves.io.schema.cdn_cache_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0044.public.ves.io.schema.crl.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0045.public.ves.io.schema.operate.crl.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0046.public.ves.io.schema.pbac.catalog.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0047.public.ves.io.schema.cminstance.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0048.public.ves.io.schema.certificate.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0049.public.ves.io.schema.certificate_chain.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0050.public.ves.io.schema.certified_hardware.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0051.public.ves.io.schema.tenant_management.child_tenant.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0052.public.ves.io.schema.tenant_management.child_tenant_manager.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0053.public.ves.io.schema.shape.client_side_defense.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0054.public.ves.io.schema.shape.client_side_defense.allowed_domain.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0055.public.ves.io.schema.shape.client_side_defense.protected_domain.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0056.public.ves.io.schema.shape.client_side_defense.mitigated_domain.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0057.public.ves.io.schema.shape.client_side_defense.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0058.public.ves.io.schema.cloud_connect.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0059.public.ves.io.schema.cloud_credentials.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0060.public.ves.io.schema.cloud_elastic_ip.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0061.public.ves.io.schema.cloud_region.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0062.public.ves.io.schema.cloud_link.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0063.public.ves.io.schema.cluster.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0064.public.ves.io.schema.api_sec.code_base_integration.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0065.public.ves.io.schema.views.aws_tgw_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0066.public.ves.io.schema.views.aws_vpc_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0067.public.ves.io.schema.views.voltstack_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0068.public.ves.io.schema.views.azure_vnet_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0069.public.ves.io.schema.dns_compliance_checks.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0071.public.ves.io.schema.views.forward_proxy_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0072.public.ves.io.schema.views.gcp_vpc_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0073.public.ves.io.schema.views.http_loadbalancer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0074.public.ves.io.schema.views.network_policy_view.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0075.public.ves.io.schema.protocol_inspection.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0076.public.ves.io.schema.views.securemesh_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0077.public.ves.io.schema.views.securemesh_site_v2.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0078.public.ves.io.schema.views.tcp_loadbalancer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0079.public.ves.io.schema.views.udp_loadbalancer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0080.public.ves.io.schema.bigcne.irule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0081.public.ves.io.schema.graph.connectivity.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0082.public.ves.io.schema.contact.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0083.public.ves.io.schema.container_registry.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0084.public.ves.io.schema.customer_support.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0085.public.ves.io.schema.dc_cluster_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0086.public.ves.io.schema.dns_domain.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0087.public.ves.io.schema.dns_load_balancer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0088.public.ves.io.schema.dns_lb_health_check.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0089.public.ves.io.schema.dns_lb_pool.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0090.public.ves.io.schema.observability.synthetic_monitor.v1_dns_monitor.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0091.public.ves.io.schema.dns_zone.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0092.public.ves.io.schema.shape.data_delivery.receiver.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0093.public.ves.io.schema.shape.data_delivery.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0094.public.ves.io.schema.bigcne.data_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0095.public.ves.io.schema.shape.data_delivery.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0096.public.ves.io.schema.data_type.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0097.public.ves.io.schema.operate.debug.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0098.public.ves.io.schema.operate.dhcp.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0100.public.ves.io.schema.discovered_service.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0101.public.ves.io.schema.discovery.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0102.public.ves.io.schema.endpoint.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0103.public.ves.io.schema.enhanced_firewall_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0104.public.ves.io.schema.views.external_connector.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0105.public.ves.io.schema.dns_zone.rrset.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0106.public.ves.io.schema.dns_zone.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0107.public.ves.io.schema.malware_protection.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0108.public.ves.io.schema.secret_management.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0109.public.ves.io.schema.voltshare.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0110.public.ves.io.schema.maintenance_status.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0111.public.ves.io.schema.fast_acl.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0112.public.ves.io.schema.fast_acl_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0113.public.ves.io.schema.filter_set.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0114.public.ves.io.schema.fleet.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0115.public.ves.io.schema.flow_anomaly.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0116.public.ves.io.schema.operate.flow.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0117.public.ves.io.schema.flow.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0118.public.ves.io.schema.forwarding_class.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0119.public.ves.io.schema.data_privacy.geo_config.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0120.public.ves.io.schema.geo_location_set.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0121.public.ves.io.schema.gia.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0122.public.ves.io.schema.global_log_receiver.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0123.public.ves.io.schema.observability.synthetic_monitor.v1_http_monitor.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0124.public.ves.io.schema.healthcheck.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0125.public.ves.io.schema.ike1.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0126.public.ves.io.schema.views.ike_phase1_profile.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0127.public.ves.io.schema.ike2.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0128.public.ves.io.schema.views.ike_phase2_profile.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0129.public.ves.io.schema.ip_prefix_set.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0130.public.ves.io.schema.implicit_label.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0131.public.ves.io.schema.infraprotect.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0132.public.ves.io.schema.infraprotect_asn.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0133.public.ves.io.schema.infraprotect_asn_prefix.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0134.public.ves.io.schema.infraprotect_deny_list_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0135.public.ves.io.schema.infraprotect_firewall_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0136.public.ves.io.schema.infraprotect_firewall_rule_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0137.public.ves.io.schema.infraprotect_firewall_ruleset.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0138.public.ves.io.schema.infraprotect_information.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0139.public.ves.io.schema.infraprotect_internet_prefix_advertisement.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0140.public.ves.io.schema.usage.invoice.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0141.public.ves.io.schema.k8s_cluster.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0142.public.ves.io.schema.k8s_cluster_role.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0143.public.ves.io.schema.k8s_cluster_role_binding.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0144.public.ves.io.schema.k8s_pod_security_admission.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0145.public.ves.io.schema.k8s_pod_security_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0146.public.ves.io.schema.known_label.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0147.public.ves.io.schema.known_label_key.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0148.public.ves.io.schema.data_privacy.lma_region.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0149.public.ves.io.schema.operate.lte.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0150.public.ves.io.schema.log_receiver.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0151.public.ves.io.schema.log.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0152.public.ves.io.schema.malicious_user_mitigation.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0153.public.ves.io.schema.tenant_management.managed_tenant.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0154.public.ves.io.schema.shape.mobile_app_shield.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0155.public.ves.io.schema.shape.mobile_integrator.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0156.public.ves.io.schema.shape.bot_defense.mobile_sdk.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0157.public.ves.io.schema.shape.bot_defense.mobile_base_config.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0158.public.ves.io.schema.module_management.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0159.public.ves.io.schema.nat_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0160.public.ves.io.schema.nfv_service.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0161.public.ves.io.schema.nginx.one.nginx_csg.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0162.public.ves.io.schema.nginx.one.nginx_instance.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0163.public.ves.io.schema.nginx.one.nginx_server.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0164.public.ves.io.schema.nginx.one.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0165.public.ves.io.schema.nginx.one.nginx_service_discovery.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0166.public.ves.io.schema.namespace.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0167.public.ves.io.schema.namespace_role.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0168.public.ves.io.schema.pbac.navigation_tile.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0169.public.ves.io.schema.network_connector.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0170.public.ves.io.schema.network_firewall.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0171.public.ves.io.schema.network_interface.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0172.public.ves.io.schema.network_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0173.public.ves.io.schema.network_policy_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0174.public.ves.io.schema.network_policy_set.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0175.public.ves.io.schema.observability.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0176.public.ves.io.schema.marketplace.aws_account.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0177.public.ves.io.schema.views.origin_pool.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0178.public.ves.io.schema.billing.payment_method.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0179.public.ves.io.schema.operate.ping.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0180.public.ves.io.schema.pbac.plan.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0181.public.ves.io.schema.billing.plan_transition.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0182.public.ves.io.schema.policer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0183.public.ves.io.schema.views.policy_based_routing.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0184.public.ves.io.schema.shape.bot_defense.protected_application.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0185.public.ves.io.schema.protocol_policer.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0186.public.ves.io.schema.views.proxy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0187.public.ves.io.schema.public_ip.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0188.public.ves.io.schema.quota.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0189.public.ves.io.schema.rbac_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0190.public.ves.io.schema.rate_limiter.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0191.public.ves.io.schema.views.rate_limiter_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0192.public.ves.io.schema.registration.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0193.public.ves.io.schema.report.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0194.public.ves.io.schema.report_config.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0195.public.ves.io.schema.role.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0196.public.ves.io.schema.trusted_ca_list.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0197.public.ves.io.schema.route.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0198.public.ves.io.schema.operate.route.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0199.public.ves.io.schema.srv6_network_slice.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0200.public.ves.io.schema.oidc_provider.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0201.public.ves.io.schema.secret_management_access.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0202.public.ves.io.schema.secret_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0203.public.ves.io.schema.secret_policy_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0204.public.ves.io.schema.segment.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0205.public.ves.io.schema.segment_connection.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0206.public.ves.io.schema.sensitive_data_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0207.public.ves.io.schema.graph.service.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0208.public.ves.io.schema.service_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0209.public.ves.io.schema.service_policy_rule.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0210.public.ves.io.schema.service_policy_set.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0211.public.ves.io.schema.shape_bot_defense_instance.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0212.public.ves.io.schema.shape.bot_defense.reporting.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0213.public.ves.io.schema.shape.bot_defense.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0214.public.ves.io.schema.shape.recognize.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0215.public.ves.io.schema.shape.safeap.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0216.public.ves.io.schema.shape.safe.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0217.public.ves.io.schema.signup.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0218.public.ves.io.schema.site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0219.public.ves.io.schema.graph.site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0220.public.ves.io.schema.site_mesh_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0221.public.ves.io.schema.status_at_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0222.public.ves.io.schema.stored_object.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0223.public.ves.io.schema.subnet.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0224.public.ves.io.schema.usage.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0225.public.ves.io.schema.subscription.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0226.public.ves.io.schema.observability.synthetic_monitor.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0227.public.ves.io.schema.scim.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0228.public.ves.io.schema.tpm_api_key.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0229.public.ves.io.schema.tpm_category.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0230.public.ves.io.schema.tpm_manager.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0231.public.ves.io.schema.tpm_provision.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0232.public.ves.io.schema.operate.tcpdump.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0233.public.ves.io.schema.tenant.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0234.public.ves.io.schema.views.tenant_configuration.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0235.public.ves.io.schema.tenant_management.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0236.public.ves.io.schema.tenant_management.tenant_profile.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0237.public.ves.io.schema.views.third_party_application.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0238.public.ves.io.schema.ticket_management.ticket_tracking_system.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0239.public.ves.io.schema.token.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0240.public.ves.io.schema.topology.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0241.public.ves.io.schema.operate.traceroute.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0242.public.ves.io.schema.tunnel.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0243.public.ves.io.schema.infraprotect_tunnel.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0244.public.ves.io.schema.operate.usb.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0245.public.ves.io.schema.usb_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0246.public.ves.io.schema.ui.static_component.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0247.public.ves.io.schema.upgrade_status.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0248.public.ves.io.schema.virtual_appliance.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0249.public.ves.io.schema.usage.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0250.public.ves.io.schema.usage.plan.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0251.public.ves.io.schema.user.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0252.public.ves.io.schema.user_group.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0253.public.ves.io.schema.user_identification.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0254.public.ves.io.schema.user.setting.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0255.public.ves.io.schema.views.view_internal.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0256.public.ves.io.schema.views.terraform_parameters.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0257.public.ves.io.schema.virtual_host.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0258.public.ves.io.schema.virtual_k8s.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0259.public.ves.io.schema.virtual_network.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0260.public.ves.io.schema.virtual_site.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0261.public.ves.io.schema.voltshare_admin_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0262.public.ves.io.schema.waf.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0263.public.ves.io.schema.waf_exclusion_policy.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0264.public.ves.io.schema.waf_signatures_changelog.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0265.public.ves.io.schema.operate.wifi.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0266.public.ves.io.schema.was.user_token.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0267.public.ves.io.schema.views.workload.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0268.public.ves.io.schema.workload_flavor.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0269.public.ves.io.schema.marketplace.xc_saas.ves-swagger.json +1 -0
- package/dist/docs/specifications/api/docs-cloud-f5-com.0270.public.ves.io.schema.graph.l3l4.ves-swagger.json +1 -0
- package/dist/index.js +21 -21
- package/dist/index.js.map +1 -1
- package/dist/services/api-specs.d.ts.map +1 -1
- package/dist/services/api-specs.js +15 -3
- package/dist/services/api-specs.js.map +1 -1
- package/dist/services/documentation.d.ts.map +1 -1
- package/dist/services/documentation.js +25 -9
- package/dist/services/documentation.js.map +1 -1
- package/package.json +6 -3
|
@@ -0,0 +1,992 @@
|
|
|
1
|
+
---
|
|
2
|
+
page_title: "f5xc_nfv_service Resource - terraform-provider-f5xc"
|
|
3
|
+
subcategory: "Networking"
|
|
4
|
+
description: |-
|
|
5
|
+
[Namespace: required] Manages new NFV service with configured parameters in F5 Distributed Cloud.
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# f5xc_nfv_service (Resource)
|
|
9
|
+
|
|
10
|
+
[Namespace: required] Manages new NFV service with configured parameters in F5 Distributed Cloud.
|
|
11
|
+
|
|
12
|
+
~> **Note** Please refer to [Nfv Service API docs](https://docs.cloud.f5.com/docs-v2/api/nfv-service) to learn more.
|
|
13
|
+
|
|
14
|
+
## Example Usage
|
|
15
|
+
|
|
16
|
+
```terraform
|
|
17
|
+
# Nfv Service Resource Example
|
|
18
|
+
# [Namespace: required] Manages new NFV service with configured parameters in F5 Distributed Cloud.
|
|
19
|
+
|
|
20
|
+
# Basic Nfv Service configuration
|
|
21
|
+
resource "f5xc_nfv_service" "example" {
|
|
22
|
+
name = "example-nfv-service"
|
|
23
|
+
namespace = "staging"
|
|
24
|
+
|
|
25
|
+
labels = {
|
|
26
|
+
environment = "production"
|
|
27
|
+
managed_by = "terraform"
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
annotations = {
|
|
31
|
+
"owner" = "platform-team"
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
# Resource-specific configuration
|
|
35
|
+
# [OneOf: disable_https_management, https_management; Defau...
|
|
36
|
+
disable_https_management {
|
|
37
|
+
# Configure disable_https_management settings
|
|
38
|
+
}
|
|
39
|
+
# [OneOf: disable_ssh_access, enabled_ssh_access; Default: ...
|
|
40
|
+
disable_ssh_access {
|
|
41
|
+
# Configure disable_ssh_access settings
|
|
42
|
+
}
|
|
43
|
+
# SSH based management. SSH based configuration
|
|
44
|
+
enabled_ssh_access {
|
|
45
|
+
# Configure enabled_ssh_access settings
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
```
|
|
49
|
+
|
|
50
|
+
<!-- schema generated by tfplugindocs -->
|
|
51
|
+
## Argument Reference
|
|
52
|
+
|
|
53
|
+
### Metadata Argument Reference
|
|
54
|
+
|
|
55
|
+
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Nfv Service. Must be unique within the namespace
|
|
56
|
+
|
|
57
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Nfv Service will be created
|
|
58
|
+
|
|
59
|
+
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
+
|
|
61
|
+
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
+
|
|
63
|
+
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
+
|
|
65
|
+
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
+
|
|
67
|
+
### Spec Argument Reference
|
|
68
|
+
|
|
69
|
+
-> **One of the following:**
|
|
70
|
+
• <a id="disable-https-management"></a>[`disable_https_management`](#disable-https-management) - Optional Block<br>Enable this option
|
|
71
|
+
|
|
72
|
+
-> **One of the following:**
|
|
73
|
+
• <a id="disable-ssh-access"></a>[`disable_ssh_access`](#disable-ssh-access) - Optional Block<br>Enable this option
|
|
74
|
+
|
|
75
|
+
<a id="enabled-ssh-access"></a>• [`enabled_ssh_access`](#enabled-ssh-access) - Optional Block<br>SSH based management. SSH based configuration<br>See [Enabled SSH Access](#enabled-ssh-access) below for details.
|
|
76
|
+
|
|
77
|
+
-> **One of the following:**
|
|
78
|
+
• <a id="f5-big-ip-aws-service"></a>[`f5_big_ip_aws_service`](#f5-big-ip-aws-service) - Optional Block<br>Virtual BIG-IP AWS. Virtual BIG-IP specification for AWS<br>See [F5 Big IP AWS Service](#f5-big-ip-aws-service) below for details.
|
|
79
|
+
<br><br>• <a id="palo-alto-fw-service"></a>[`palo_alto_fw_service`](#palo-alto-fw-service) - Optional Block<br>Palo Alto Networks VM-Series Firewall. Palo Alto Networks VM-Series next-generation firewall configuration
|
|
80
|
+
|
|
81
|
+
<a id="https-management"></a>• [`https_management`](#https-management) - Optional Block<br>HTTPS based management. HTTPS based configuration<br>See [HTTPS Management](#https-management) below for details.
|
|
82
|
+
|
|
83
|
+
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
84
|
+
|
|
85
|
+
### Attributes Reference
|
|
86
|
+
|
|
87
|
+
In addition to all arguments above, the following attributes are exported:
|
|
88
|
+
|
|
89
|
+
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
90
|
+
|
|
91
|
+
---
|
|
92
|
+
|
|
93
|
+
#### Enabled SSH Access
|
|
94
|
+
|
|
95
|
+
An [`enabled_ssh_access`](#enabled-ssh-access) block supports the following:
|
|
96
|
+
|
|
97
|
+
<a id="enabled-ssh-access-advertise-on-sli"></a>• [`advertise_on_sli`](#enabled-ssh-access-advertise-on-sli) - Optional Block<br>Enable this option
|
|
98
|
+
|
|
99
|
+
<a id="enabled-ssh-access-advertise-on-slo"></a>• [`advertise_on_slo`](#enabled-ssh-access-advertise-on-slo) - Optional Block<br>Enable this option
|
|
100
|
+
|
|
101
|
+
<a id="enabled-ssh-access-advertise-on-slo-sli"></a>• [`advertise_on_slo_sli`](#enabled-ssh-access-advertise-on-slo-sli) - Optional Block<br>Enable this option
|
|
102
|
+
|
|
103
|
+
<a id="enabled-ssh-access-domain-suffix"></a>• [`domain_suffix`](#enabled-ssh-access-domain-suffix) - Optional String<br>Domain Suffix. Domain suffix will be used along with node name to form the hostname for SSH node management
|
|
104
|
+
|
|
105
|
+
<a id="enabled-ssh-access-node-ssh-ports"></a>• [`node_ssh_ports`](#enabled-ssh-access-node-ssh-ports) - Optional Block<br>Management Node SSH Port. Enter TCP port and node name per node<br>See [Node SSH Ports](#enabled-ssh-access-node-ssh-ports) below.
|
|
106
|
+
|
|
107
|
+
#### Enabled SSH Access Node SSH Ports
|
|
108
|
+
|
|
109
|
+
A [`node_ssh_ports`](#enabled-ssh-access-node-ssh-ports) block (within [`enabled_ssh_access`](#enabled-ssh-access)) supports the following:
|
|
110
|
+
|
|
111
|
+
<a id="enabled-ssh-access-node-ssh-ports-node-name"></a>• [`node_name`](#enabled-ssh-access-node-ssh-ports-node-name) - Optional String<br>Node Name. Node name will be used to match a particular node with the desired TCP port
|
|
112
|
+
|
|
113
|
+
<a id="enabled-ssh-access-node-ssh-ports-ssh-port"></a>• [`ssh_port`](#enabled-ssh-access-node-ssh-ports-ssh-port) - Optional Number<br>SSH Port. Enter TCP port per node
|
|
114
|
+
|
|
115
|
+
#### F5 Big IP AWS Service
|
|
116
|
+
|
|
117
|
+
A [`f5_big_ip_aws_service`](#f5-big-ip-aws-service) block supports the following:
|
|
118
|
+
|
|
119
|
+
<a id="f5-big-ip-aws-service-admin-password"></a>• [`admin_password`](#f5-big-ip-aws-service-admin-password) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Admin Password](#f5-big-ip-aws-service-admin-password) below.
|
|
120
|
+
|
|
121
|
+
<a id="f5-big-ip-aws-service-admin-username"></a>• [`admin_username`](#f5-big-ip-aws-service-admin-username) - Optional String<br>Admin Username. Admin Username for BIG-IP
|
|
122
|
+
|
|
123
|
+
<a id="f5-big-ip-aws-service-aws-tgw-site-params"></a>• [`aws_tgw_site_params`](#f5-big-ip-aws-service-aws-tgw-site-params) - Optional Block<br>BIG-IP AWS TGW Site. BIG-IP AWS TGW site specification<br>See [AWS TGW Site Params](#f5-big-ip-aws-service-aws-tgw-site-params) below.
|
|
124
|
+
|
|
125
|
+
<a id="f5-big-ip-aws-service-endpoint-service"></a>• [`endpoint_service`](#f5-big-ip-aws-service-endpoint-service) - Optional Block<br>Endpoint Service. Endpoint Service is a type of NFV service where the packets are destined to NFV and service modifies the destination with a new destination address<br>See [Endpoint Service](#f5-big-ip-aws-service-endpoint-service) below.
|
|
126
|
+
|
|
127
|
+
<a id="f5-big-ip-aws-service-market-place-image"></a>• [`market_place_image`](#f5-big-ip-aws-service-market-place-image) - Optional Block<br>BIG-IP AWS Pay as You Go Image. BIG-IP AWS Pay as You Go Image Selection<br>See [Market Place Image](#f5-big-ip-aws-service-market-place-image) below.
|
|
128
|
+
|
|
129
|
+
<a id="f5-big-ip-aws-service-nodes"></a>• [`nodes`](#f5-big-ip-aws-service-nodes) - Optional Block<br>Service Nodes. Specify how and where the service nodes are spawned<br>See [Nodes](#f5-big-ip-aws-service-nodes) below.
|
|
130
|
+
|
|
131
|
+
<a id="f5-big-ip-aws-service-ssh-key"></a>• [`ssh_key`](#f5-big-ip-aws-service-ssh-key) - Optional String<br>Public SSH key. Public SSH key for accessing the Big IP nodes
|
|
132
|
+
|
|
133
|
+
<a id="f5-big-ip-aws-service-tags"></a>• [`tags`](#f5-big-ip-aws-service-tags) - Optional Block<br>AWS Tags. AWS Tags is a label consisting of a user-defined key and value. It helps to manage, identify, organize, search for, and filter resources in AWS console
|
|
134
|
+
|
|
135
|
+
#### F5 Big IP AWS Service Admin Password
|
|
136
|
+
|
|
137
|
+
An [`admin_password`](#f5-big-ip-aws-service-admin-password) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
138
|
+
|
|
139
|
+
<a id="f5-big-ip-aws-service-admin-password-blindfold-secret-info"></a>• [`blindfold_secret_info`](#f5-big-ip-aws-service-admin-password-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#f5-big-ip-aws-service-admin-password-blindfold-secret-info) below.
|
|
140
|
+
|
|
141
|
+
<a id="f5-big-ip-aws-service-admin-password-clear-secret-info"></a>• [`clear_secret_info`](#f5-big-ip-aws-service-admin-password-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#f5-big-ip-aws-service-admin-password-clear-secret-info) below.
|
|
142
|
+
|
|
143
|
+
#### F5 Big IP AWS Service Admin Password Blindfold Secret Info
|
|
144
|
+
|
|
145
|
+
A [`blindfold_secret_info`](#f5-big-ip-aws-service-admin-password-blindfold-secret-info) block (within [`f5_big_ip_aws_service.admin_password`](#f5-big-ip-aws-service-admin-password)) supports the following:
|
|
146
|
+
|
|
147
|
+
<a id="f5-big-ip-aws-service-admin-password-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#f5-big-ip-aws-service-admin-password-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
148
|
+
|
|
149
|
+
<a id="f5-big-ip-aws-service-admin-password-blindfold-secret-info-location"></a>• [`location`](#f5-big-ip-aws-service-admin-password-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
150
|
+
|
|
151
|
+
<a id="f5-big-ip-aws-service-admin-password-blindfold-secret-info-store-provider"></a>• [`store_provider`](#f5-big-ip-aws-service-admin-password-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
152
|
+
|
|
153
|
+
#### F5 Big IP AWS Service Admin Password Clear Secret Info
|
|
154
|
+
|
|
155
|
+
A [`clear_secret_info`](#f5-big-ip-aws-service-admin-password-clear-secret-info) block (within [`f5_big_ip_aws_service.admin_password`](#f5-big-ip-aws-service-admin-password)) supports the following:
|
|
156
|
+
|
|
157
|
+
<a id="f5-big-ip-aws-service-admin-password-clear-secret-info-provider-ref"></a>• [`provider_ref`](#f5-big-ip-aws-service-admin-password-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
158
|
+
|
|
159
|
+
<a id="f5-big-ip-aws-service-admin-password-clear-secret-info-url"></a>• [`url`](#f5-big-ip-aws-service-admin-password-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
160
|
+
|
|
161
|
+
#### F5 Big IP AWS Service AWS TGW Site Params
|
|
162
|
+
|
|
163
|
+
An [`aws_tgw_site_params`](#f5-big-ip-aws-service-aws-tgw-site-params) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
164
|
+
|
|
165
|
+
<a id="f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site"></a>• [`aws_tgw_site`](#f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [AWS TGW Site](#f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site) below.
|
|
166
|
+
|
|
167
|
+
#### F5 Big IP AWS Service AWS TGW Site Params AWS TGW Site
|
|
168
|
+
|
|
169
|
+
An [`aws_tgw_site`](#f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site) block (within [`f5_big_ip_aws_service.aws_tgw_site_params`](#f5-big-ip-aws-service-aws-tgw-site-params)) supports the following:
|
|
170
|
+
|
|
171
|
+
<a id="f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site-name"></a>• [`name`](#f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
172
|
+
|
|
173
|
+
<a id="f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site-namespace"></a>• [`namespace`](#f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
174
|
+
|
|
175
|
+
<a id="f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site-tenant"></a>• [`tenant`](#f5-big-ip-aws-service-aws-tgw-site-params-aws-tgw-site-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
176
|
+
|
|
177
|
+
#### F5 Big IP AWS Service Endpoint Service
|
|
178
|
+
|
|
179
|
+
An [`endpoint_service`](#f5-big-ip-aws-service-endpoint-service) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
180
|
+
|
|
181
|
+
<a id="f5-big-ip-aws-service-endpoint-service-advertise-on-slo-ip"></a>• [`advertise_on_slo_ip`](#f5-big-ip-aws-service-endpoint-service-advertise-on-slo-ip) - Optional Block<br>Enable this option
|
|
182
|
+
|
|
183
|
+
<a id="f5-big-ip-aws-service-endpoint-service-advertise-on-slo-ip-external"></a>• [`advertise_on_slo_ip_external`](#f5-big-ip-aws-service-endpoint-service-advertise-on-slo-ip-external) - Optional Block<br>Enable this option
|
|
184
|
+
|
|
185
|
+
<a id="f5-big-ip-aws-service-endpoint-service-automatic-vip"></a>• [`automatic_vip`](#f5-big-ip-aws-service-endpoint-service-automatic-vip) - Optional Block<br>Enable this option
|
|
186
|
+
|
|
187
|
+
<a id="f5-big-ip-aws-service-endpoint-service-configured-vip"></a>• [`configured_vip`](#f5-big-ip-aws-service-endpoint-service-configured-vip) - Optional String<br>Configured VIP. Enter IP address for the default VIP
|
|
188
|
+
|
|
189
|
+
<a id="f5-big-ip-aws-service-endpoint-service-custom-tcp-ports"></a>• [`custom_tcp_ports`](#f5-big-ip-aws-service-endpoint-service-custom-tcp-ports) - Optional Block<br>Port Range List. List of port ranges<br>See [Custom TCP Ports](#f5-big-ip-aws-service-endpoint-service-custom-tcp-ports) below.
|
|
190
|
+
|
|
191
|
+
<a id="f5-big-ip-aws-service-endpoint-service-custom-udp-ports"></a>• [`custom_udp_ports`](#f5-big-ip-aws-service-endpoint-service-custom-udp-ports) - Optional Block<br>Port Range List. List of port ranges<br>See [Custom UDP Ports](#f5-big-ip-aws-service-endpoint-service-custom-udp-ports) below.
|
|
192
|
+
|
|
193
|
+
<a id="f5-big-ip-aws-service-endpoint-service-default-tcp-ports"></a>• [`default_tcp_ports`](#f5-big-ip-aws-service-endpoint-service-default-tcp-ports) - Optional Block<br>Enable this option
|
|
194
|
+
|
|
195
|
+
<a id="f5-big-ip-aws-service-endpoint-service-disable-advertise-on-slo-ip"></a>• [`disable_advertise_on_slo_ip`](#f5-big-ip-aws-service-endpoint-service-disable-advertise-on-slo-ip) - Optional Block<br>Enable this option
|
|
196
|
+
|
|
197
|
+
<a id="f5-big-ip-aws-service-endpoint-service-http-port"></a>• [`http_port`](#f5-big-ip-aws-service-endpoint-service-http-port) - Optional Block<br>Enable this option
|
|
198
|
+
|
|
199
|
+
<a id="f5-big-ip-aws-service-endpoint-service-https-port"></a>• [`https_port`](#f5-big-ip-aws-service-endpoint-service-https-port) - Optional Block<br>Enable this option
|
|
200
|
+
|
|
201
|
+
<a id="f5-big-ip-aws-service-endpoint-service-no-tcp-ports"></a>• [`no_tcp_ports`](#f5-big-ip-aws-service-endpoint-service-no-tcp-ports) - Optional Block<br>Enable this option
|
|
202
|
+
|
|
203
|
+
<a id="f5-big-ip-aws-service-endpoint-service-no-udp-ports"></a>• [`no_udp_ports`](#f5-big-ip-aws-service-endpoint-service-no-udp-ports) - Optional Block<br>Enable this option
|
|
204
|
+
|
|
205
|
+
#### F5 Big IP AWS Service Endpoint Service Custom TCP Ports
|
|
206
|
+
|
|
207
|
+
A [`custom_tcp_ports`](#f5-big-ip-aws-service-endpoint-service-custom-tcp-ports) block (within [`f5_big_ip_aws_service.endpoint_service`](#f5-big-ip-aws-service-endpoint-service)) supports the following:
|
|
208
|
+
|
|
209
|
+
<a id="f5-big-ip-aws-service-endpoint-service-custom-tcp-ports-ports"></a>• [`ports`](#f5-big-ip-aws-service-endpoint-service-custom-tcp-ports-ports) - Optional List<br>Port Ranges. List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
|
|
210
|
+
|
|
211
|
+
#### F5 Big IP AWS Service Endpoint Service Custom UDP Ports
|
|
212
|
+
|
|
213
|
+
A [`custom_udp_ports`](#f5-big-ip-aws-service-endpoint-service-custom-udp-ports) block (within [`f5_big_ip_aws_service.endpoint_service`](#f5-big-ip-aws-service-endpoint-service)) supports the following:
|
|
214
|
+
|
|
215
|
+
<a id="f5-big-ip-aws-service-endpoint-service-custom-udp-ports-ports"></a>• [`ports`](#f5-big-ip-aws-service-endpoint-service-custom-udp-ports-ports) - Optional List<br>Port Ranges. List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
|
|
216
|
+
|
|
217
|
+
#### F5 Big IP AWS Service Market Place Image
|
|
218
|
+
|
|
219
|
+
A [`market_place_image`](#f5-big-ip-aws-service-market-place-image) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
220
|
+
|
|
221
|
+
<a id="f5-big-ip-aws-service-market-place-image-awafpay-g200-mbps"></a>• [`awafpay_g200_mbps`](#f5-big-ip-aws-service-market-place-image-awafpay-g200-mbps) - Optional Block<br>Enable this option
|
|
222
|
+
|
|
223
|
+
<a id="f5-big-ip-aws-service-market-place-image-awafpay-g3-gbps"></a>• [`awafpay_g3_gbps`](#f5-big-ip-aws-service-market-place-image-awafpay-g3-gbps) - Optional Block<br>Enable this option
|
|
224
|
+
|
|
225
|
+
#### F5 Big IP AWS Service Nodes
|
|
226
|
+
|
|
227
|
+
A [`nodes`](#f5-big-ip-aws-service-nodes) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
228
|
+
|
|
229
|
+
<a id="f5-big-ip-aws-service-nodes-automatic-prefix"></a>• [`automatic_prefix`](#f5-big-ip-aws-service-nodes-automatic-prefix) - Optional Block<br>Enable this option
|
|
230
|
+
|
|
231
|
+
<a id="f5-big-ip-aws-service-nodes-aws-az-name"></a>• [`aws_az_name`](#f5-big-ip-aws-service-nodes-aws-az-name) - Optional String<br>AWS AZ Name. The AWS Availability Zone must be consistent with the AWS Region chosen. Please select an AZ in the same Region as your TGW Site
|
|
232
|
+
|
|
233
|
+
<a id="f5-big-ip-aws-service-nodes-mgmt-subnet"></a>• [`mgmt_subnet`](#f5-big-ip-aws-service-nodes-mgmt-subnet) - Optional Block<br>AWS Subnet. Parameters for AWS subnet<br>See [Mgmt Subnet](#f5-big-ip-aws-service-nodes-mgmt-subnet) below.
|
|
234
|
+
|
|
235
|
+
<a id="f5-big-ip-aws-service-nodes-node-name"></a>• [`node_name`](#f5-big-ip-aws-service-nodes-node-name) - Optional String<br>Node Name. Node Name will be used to assign as hostname to the service
|
|
236
|
+
|
|
237
|
+
<a id="f5-big-ip-aws-service-nodes-reserved-mgmt-subnet"></a>• [`reserved_mgmt_subnet`](#f5-big-ip-aws-service-nodes-reserved-mgmt-subnet) - Optional Block<br>Enable this option
|
|
238
|
+
|
|
239
|
+
<a id="f5-big-ip-aws-service-nodes-tunnel-prefix"></a>• [`tunnel_prefix`](#f5-big-ip-aws-service-nodes-tunnel-prefix) - Optional String<br>Tunnel IP Prefix. Enter IP prefix for the tunnel, it has to be /30
|
|
240
|
+
|
|
241
|
+
#### F5 Big IP AWS Service Nodes Mgmt Subnet
|
|
242
|
+
|
|
243
|
+
A [`mgmt_subnet`](#f5-big-ip-aws-service-nodes-mgmt-subnet) block (within [`f5_big_ip_aws_service.nodes`](#f5-big-ip-aws-service-nodes)) supports the following:
|
|
244
|
+
|
|
245
|
+
<a id="f5-big-ip-aws-service-nodes-mgmt-subnet-existing-subnet-id"></a>• [`existing_subnet_id`](#f5-big-ip-aws-service-nodes-mgmt-subnet-existing-subnet-id) - Optional String<br>Existing Subnet ID. Information about existing subnet ID
|
|
246
|
+
|
|
247
|
+
<a id="f5-big-ip-aws-service-nodes-mgmt-subnet-subnet-param"></a>• [`subnet_param`](#f5-big-ip-aws-service-nodes-mgmt-subnet-subnet-param) - Optional Block<br>New Cloud Subnet Parameters. Parameters for creating a new cloud subnet<br>See [Subnet Param](#f5-big-ip-aws-service-nodes-mgmt-subnet-subnet-param) below.
|
|
248
|
+
|
|
249
|
+
#### F5 Big IP AWS Service Nodes Mgmt Subnet Subnet Param
|
|
250
|
+
|
|
251
|
+
A [`subnet_param`](#f5-big-ip-aws-service-nodes-mgmt-subnet-subnet-param) block (within [`f5_big_ip_aws_service.nodes.mgmt_subnet`](#f5-big-ip-aws-service-nodes-mgmt-subnet)) supports the following:
|
|
252
|
+
|
|
253
|
+
<a id="f5-big-ip-aws-service-nodes-mgmt-subnet-subnet-param-ipv4"></a>• [`ipv4`](#f5-big-ip-aws-service-nodes-mgmt-subnet-subnet-param-ipv4) - Optional String<br>IPv4 Subnet. IPv4 subnet prefix for this subnet
|
|
254
|
+
|
|
255
|
+
#### HTTPS Management
|
|
256
|
+
|
|
257
|
+
A [`https_management`](#https-management) block supports the following:
|
|
258
|
+
|
|
259
|
+
<a id="https-management-advertise-on-internet"></a>• [`advertise_on_internet`](#https-management-advertise-on-internet) - Optional Block<br>Advertise Public. This defines a way to advertise a load balancer on public. If optional public_ip is provided, it will only be advertised on RE sites where that public_ip is available<br>See [Advertise On Internet](#https-management-advertise-on-internet) below.
|
|
260
|
+
|
|
261
|
+
<a id="https-management-advertise-on-internet-default-vip"></a>• [`advertise_on_internet_default_vip`](#https-management-advertise-on-internet-default-vip) - Optional Block<br>Enable this option
|
|
262
|
+
|
|
263
|
+
<a id="https-management-advertise-on-sli-vip"></a>• [`advertise_on_sli_vip`](#https-management-advertise-on-sli-vip) - Optional Block<br>Inline TLS Parameters. Inline TLS parameters<br>See [Advertise On SLI VIP](#https-management-advertise-on-sli-vip) below.
|
|
264
|
+
|
|
265
|
+
<a id="https-management-advertise-on-slo-internet-vip"></a>• [`advertise_on_slo_internet_vip`](#https-management-advertise-on-slo-internet-vip) - Optional Block<br>Inline TLS Parameters. Inline TLS parameters<br>See [Advertise On Slo Internet VIP](#https-management-advertise-on-slo-internet-vip) below.
|
|
266
|
+
|
|
267
|
+
<a id="https-management-advertise-on-slo-sli"></a>• [`advertise_on_slo_sli`](#https-management-advertise-on-slo-sli) - Optional Block<br>Inline TLS Parameters. Inline TLS parameters<br>See [Advertise On Slo SLI](#https-management-advertise-on-slo-sli) below.
|
|
268
|
+
|
|
269
|
+
<a id="https-management-advertise-on-slo-vip"></a>• [`advertise_on_slo_vip`](#https-management-advertise-on-slo-vip) - Optional Block<br>Inline TLS Parameters. Inline TLS parameters<br>See [Advertise On Slo VIP](#https-management-advertise-on-slo-vip) below.
|
|
270
|
+
|
|
271
|
+
<a id="https-management-default-https-port"></a>• [`default_https_port`](#https-management-default-https-port) - Optional Block<br>Enable this option
|
|
272
|
+
|
|
273
|
+
<a id="https-management-domain-suffix"></a>• [`domain_suffix`](#https-management-domain-suffix) - Optional String<br>Domain Suffix. Domain suffix will be used along with node name to form URL to access node management
|
|
274
|
+
|
|
275
|
+
<a id="https-management-https-port"></a>• [`https_port`](#https-management-https-port) - Optional Number<br>HTTPS Port. Enter TCP port number
|
|
276
|
+
|
|
277
|
+
#### HTTPS Management Advertise On Internet
|
|
278
|
+
|
|
279
|
+
An [`advertise_on_internet`](#https-management-advertise-on-internet) block (within [`https_management`](#https-management)) supports the following:
|
|
280
|
+
|
|
281
|
+
<a id="https-management-advertise-on-internet-public-ip"></a>• [`public_ip`](#https-management-advertise-on-internet-public-ip) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Public IP](#https-management-advertise-on-internet-public-ip) below.
|
|
282
|
+
|
|
283
|
+
#### HTTPS Management Advertise On Internet Public IP
|
|
284
|
+
|
|
285
|
+
A [`public_ip`](#https-management-advertise-on-internet-public-ip) block (within [`https_management.advertise_on_internet`](#https-management-advertise-on-internet)) supports the following:
|
|
286
|
+
|
|
287
|
+
<a id="https-management-advertise-on-internet-public-ip-name"></a>• [`name`](#https-management-advertise-on-internet-public-ip-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
288
|
+
|
|
289
|
+
<a id="https-management-advertise-on-internet-public-ip-namespace"></a>• [`namespace`](#https-management-advertise-on-internet-public-ip-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
290
|
+
|
|
291
|
+
<a id="https-management-advertise-on-internet-public-ip-tenant"></a>• [`tenant`](#https-management-advertise-on-internet-public-ip-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
292
|
+
|
|
293
|
+
#### HTTPS Management Advertise On SLI VIP
|
|
294
|
+
|
|
295
|
+
An [`advertise_on_sli_vip`](#https-management-advertise-on-sli-vip) block (within [`https_management`](#https-management)) supports the following:
|
|
296
|
+
|
|
297
|
+
<a id="https-management-advertise-on-sli-vip-no-mtls"></a>• [`no_mtls`](#https-management-advertise-on-sli-vip-no-mtls) - Optional Block<br>Enable this option
|
|
298
|
+
|
|
299
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates"></a>• [`tls_certificates`](#https-management-advertise-on-sli-vip-tls-certificates) - Optional Block<br>TLS Certificates. Users can add one or more certificates that share the same set of domains. for example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#https-management-advertise-on-sli-vip-tls-certificates) below.
|
|
300
|
+
|
|
301
|
+
<a id="https-management-advertise-on-sli-vip-tls-config"></a>• [`tls_config`](#https-management-advertise-on-sli-vip-tls-config) - Optional Block<br>TLS Config. This defines various options to configure TLS configuration parameters<br>See [TLS Config](#https-management-advertise-on-sli-vip-tls-config) below.
|
|
302
|
+
|
|
303
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls"></a>• [`use_mtls`](#https-management-advertise-on-sli-vip-use-mtls) - Optional Block<br>Clients TLS validation context. Validation context for downstream client TLS connections<br>See [Use mTLS](#https-management-advertise-on-sli-vip-use-mtls) below.
|
|
304
|
+
|
|
305
|
+
#### HTTPS Management Advertise On SLI VIP TLS Certificates
|
|
306
|
+
|
|
307
|
+
A [`tls_certificates`](#https-management-advertise-on-sli-vip-tls-certificates) block (within [`https_management.advertise_on_sli_vip`](#https-management-advertise-on-sli-vip)) supports the following:
|
|
308
|
+
|
|
309
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-certificate-url"></a>• [`certificate_url`](#https-management-advertise-on-sli-vip-tls-certificates-certificate-url) - Optional String<br>Certificate. TLS certificate. Certificate or certificate chain in PEM format including the PEM headers
|
|
310
|
+
|
|
311
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-custom-hash-algorithms"></a>• [`custom_hash_algorithms`](#https-management-advertise-on-sli-vip-tls-certificates-custom-hash-algorithms) - Optional Block<br>Hash Algorithms. Specifies the hash algorithms to be used<br>See [Custom Hash Algorithms](#https-management-advertise-on-sli-vip-tls-certificates-custom-hash-algorithms) below.
|
|
312
|
+
|
|
313
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-description-spec"></a>• [`description_spec`](#https-management-advertise-on-sli-vip-tls-certificates-description-spec) - Optional String<br>Description. Description for the certificate
|
|
314
|
+
|
|
315
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-disable-ocsp-stapling"></a>• [`disable_ocsp_stapling`](#https-management-advertise-on-sli-vip-tls-certificates-disable-ocsp-stapling) - Optional Block<br>Enable this option
|
|
316
|
+
|
|
317
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key"></a>• [`private_key`](#https-management-advertise-on-sli-vip-tls-certificates-private-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#https-management-advertise-on-sli-vip-tls-certificates-private-key) below.
|
|
318
|
+
|
|
319
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-use-system-defaults"></a>• [`use_system_defaults`](#https-management-advertise-on-sli-vip-tls-certificates-use-system-defaults) - Optional Block<br>Enable this option
|
|
320
|
+
|
|
321
|
+
#### HTTPS Management Advertise On SLI VIP TLS Certificates Custom Hash Algorithms
|
|
322
|
+
|
|
323
|
+
A [`custom_hash_algorithms`](#https-management-advertise-on-sli-vip-tls-certificates-custom-hash-algorithms) block (within [`https_management.advertise_on_sli_vip.tls_certificates`](#https-management-advertise-on-sli-vip-tls-certificates)) supports the following:
|
|
324
|
+
|
|
325
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-custom-hash-algorithms-hash-algorithms"></a>• [`hash_algorithms`](#https-management-advertise-on-sli-vip-tls-certificates-custom-hash-algorithms-hash-algorithms) - Optional List Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
|
|
326
|
+
|
|
327
|
+
#### HTTPS Management Advertise On SLI VIP TLS Certificates Private Key
|
|
328
|
+
|
|
329
|
+
A [`private_key`](#https-management-advertise-on-sli-vip-tls-certificates-private-key) block (within [`https_management.advertise_on_sli_vip.tls_certificates`](#https-management-advertise-on-sli-vip-tls-certificates)) supports the following:
|
|
330
|
+
|
|
331
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info"></a>• [`blindfold_secret_info`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info) below.
|
|
332
|
+
|
|
333
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info"></a>• [`clear_secret_info`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info) below.
|
|
334
|
+
|
|
335
|
+
#### HTTPS Management Advertise On SLI VIP TLS Certificates Private Key Blindfold Secret Info
|
|
336
|
+
|
|
337
|
+
A [`blindfold_secret_info`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info) block (within [`https_management.advertise_on_sli_vip.tls_certificates.private_key`](#https-management-advertise-on-sli-vip-tls-certificates-private-key)) supports the following:
|
|
338
|
+
|
|
339
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
340
|
+
|
|
341
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info-location"></a>• [`location`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
342
|
+
|
|
343
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info-store-provider"></a>• [`store_provider`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
344
|
+
|
|
345
|
+
#### HTTPS Management Advertise On SLI VIP TLS Certificates Private Key Clear Secret Info
|
|
346
|
+
|
|
347
|
+
A [`clear_secret_info`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info) block (within [`https_management.advertise_on_sli_vip.tls_certificates.private_key`](#https-management-advertise-on-sli-vip-tls-certificates-private-key)) supports the following:
|
|
348
|
+
|
|
349
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info-provider-ref"></a>• [`provider_ref`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
350
|
+
|
|
351
|
+
<a id="https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info-url"></a>• [`url`](#https-management-advertise-on-sli-vip-tls-certificates-private-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
352
|
+
|
|
353
|
+
#### HTTPS Management Advertise On SLI VIP TLS Config
|
|
354
|
+
|
|
355
|
+
A [`tls_config`](#https-management-advertise-on-sli-vip-tls-config) block (within [`https_management.advertise_on_sli_vip`](#https-management-advertise-on-sli-vip)) supports the following:
|
|
356
|
+
|
|
357
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-custom-security"></a>• [`custom_security`](#https-management-advertise-on-sli-vip-tls-config-custom-security) - Optional Block<br>Custom Ciphers. This defines TLS protocol config including min/max versions and allowed ciphers<br>See [Custom Security](#https-management-advertise-on-sli-vip-tls-config-custom-security) below.
|
|
358
|
+
|
|
359
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-default-security"></a>• [`default_security`](#https-management-advertise-on-sli-vip-tls-config-default-security) - Optional Block<br>Enable this option
|
|
360
|
+
|
|
361
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-low-security"></a>• [`low_security`](#https-management-advertise-on-sli-vip-tls-config-low-security) - Optional Block<br>Enable this option
|
|
362
|
+
|
|
363
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-medium-security"></a>• [`medium_security`](#https-management-advertise-on-sli-vip-tls-config-medium-security) - Optional Block<br>Enable this option
|
|
364
|
+
|
|
365
|
+
#### HTTPS Management Advertise On SLI VIP TLS Config Custom Security
|
|
366
|
+
|
|
367
|
+
A [`custom_security`](#https-management-advertise-on-sli-vip-tls-config-custom-security) block (within [`https_management.advertise_on_sli_vip.tls_config`](#https-management-advertise-on-sli-vip-tls-config)) supports the following:
|
|
368
|
+
|
|
369
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-custom-security-cipher-suites"></a>• [`cipher_suites`](#https-management-advertise-on-sli-vip-tls-config-custom-security-cipher-suites) - Optional List<br>Cipher Suites. The TLS listener will only support the specified cipher list
|
|
370
|
+
|
|
371
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-custom-security-max-version"></a>• [`max_version`](#https-management-advertise-on-sli-vip-tls-config-custom-security-max-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
372
|
+
|
|
373
|
+
<a id="https-management-advertise-on-sli-vip-tls-config-custom-security-min-version"></a>• [`min_version`](#https-management-advertise-on-sli-vip-tls-config-custom-security-min-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
374
|
+
|
|
375
|
+
#### HTTPS Management Advertise On SLI VIP Use mTLS
|
|
376
|
+
|
|
377
|
+
An [`use_mtls`](#https-management-advertise-on-sli-vip-use-mtls) block (within [`https_management.advertise_on_sli_vip`](#https-management-advertise-on-sli-vip)) supports the following:
|
|
378
|
+
|
|
379
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-client-certificate-optional"></a>• [`client_certificate_optional`](#https-management-advertise-on-sli-vip-use-mtls-client-certificate-optional) - Optional Bool<br>Client Certificate Optional. Client certificate is optional. If the client has provided a certificate, the load balancer will verify it. If certification verification fails, the connection will be terminated. If the client does not provide a certificate, the connection will be accepted
|
|
380
|
+
|
|
381
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-crl"></a>• [`crl`](#https-management-advertise-on-sli-vip-use-mtls-crl) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [CRL](#https-management-advertise-on-sli-vip-use-mtls-crl) below.
|
|
382
|
+
|
|
383
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-no-crl"></a>• [`no_crl`](#https-management-advertise-on-sli-vip-use-mtls-no-crl) - Optional Block<br>Enable this option
|
|
384
|
+
|
|
385
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-trusted-ca"></a>• [`trusted_ca`](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Trusted CA](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca) below.
|
|
386
|
+
|
|
387
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-trusted-ca-url"></a>• [`trusted_ca_url`](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca-url) - Optional String<br>Inline Root CA Certificate (legacy). Upload a Root CA Certificate specifically for this Load Balancer
|
|
388
|
+
|
|
389
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-xfcc-disabled"></a>• [`xfcc_disabled`](#https-management-advertise-on-sli-vip-use-mtls-xfcc-disabled) - Optional Block<br>Enable this option
|
|
390
|
+
|
|
391
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-xfcc-options"></a>• [`xfcc_options`](#https-management-advertise-on-sli-vip-use-mtls-xfcc-options) - Optional Block<br>XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests<br>See [Xfcc Options](#https-management-advertise-on-sli-vip-use-mtls-xfcc-options) below.
|
|
392
|
+
|
|
393
|
+
#### HTTPS Management Advertise On SLI VIP Use mTLS CRL
|
|
394
|
+
|
|
395
|
+
A [`crl`](#https-management-advertise-on-sli-vip-use-mtls-crl) block (within [`https_management.advertise_on_sli_vip.use_mtls`](#https-management-advertise-on-sli-vip-use-mtls)) supports the following:
|
|
396
|
+
|
|
397
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-crl-name"></a>• [`name`](#https-management-advertise-on-sli-vip-use-mtls-crl-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
398
|
+
|
|
399
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-crl-namespace"></a>• [`namespace`](#https-management-advertise-on-sli-vip-use-mtls-crl-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
400
|
+
|
|
401
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-crl-tenant"></a>• [`tenant`](#https-management-advertise-on-sli-vip-use-mtls-crl-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
402
|
+
|
|
403
|
+
#### HTTPS Management Advertise On SLI VIP Use mTLS Trusted CA
|
|
404
|
+
|
|
405
|
+
A [`trusted_ca`](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca) block (within [`https_management.advertise_on_sli_vip.use_mtls`](#https-management-advertise-on-sli-vip-use-mtls)) supports the following:
|
|
406
|
+
|
|
407
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-trusted-ca-name"></a>• [`name`](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
408
|
+
|
|
409
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-trusted-ca-namespace"></a>• [`namespace`](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
410
|
+
|
|
411
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-trusted-ca-tenant"></a>• [`tenant`](#https-management-advertise-on-sli-vip-use-mtls-trusted-ca-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
412
|
+
|
|
413
|
+
#### HTTPS Management Advertise On SLI VIP Use mTLS Xfcc Options
|
|
414
|
+
|
|
415
|
+
A [`xfcc_options`](#https-management-advertise-on-sli-vip-use-mtls-xfcc-options) block (within [`https_management.advertise_on_sli_vip.use_mtls`](#https-management-advertise-on-sli-vip-use-mtls)) supports the following:
|
|
416
|
+
|
|
417
|
+
<a id="https-management-advertise-on-sli-vip-use-mtls-xfcc-options-xfcc-header-elements"></a>• [`xfcc_header_elements`](#https-management-advertise-on-sli-vip-use-mtls-xfcc-options-xfcc-header-elements) - Optional List Defaults to `XFCC_NONE`<br>Possible values are `XFCC_NONE`, `XFCC_CERT`, `XFCC_CHAIN`, `XFCC_SUBJECT`, `XFCC_URI`, `XFCC_DNS`<br>[Enum: XFCC_NONE|XFCC_CERT|XFCC_CHAIN|XFCC_SUBJECT|XFCC_URI|XFCC_DNS] XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests
|
|
418
|
+
|
|
419
|
+
#### HTTPS Management Advertise On Slo Internet VIP
|
|
420
|
+
|
|
421
|
+
An [`advertise_on_slo_internet_vip`](#https-management-advertise-on-slo-internet-vip) block (within [`https_management`](#https-management)) supports the following:
|
|
422
|
+
|
|
423
|
+
<a id="https-management-advertise-on-slo-internet-vip-no-mtls"></a>• [`no_mtls`](#https-management-advertise-on-slo-internet-vip-no-mtls) - Optional Block<br>Enable this option
|
|
424
|
+
|
|
425
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates"></a>• [`tls_certificates`](#https-management-advertise-on-slo-internet-vip-tls-certificates) - Optional Block<br>TLS Certificates. Users can add one or more certificates that share the same set of domains. for example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#https-management-advertise-on-slo-internet-vip-tls-certificates) below.
|
|
426
|
+
|
|
427
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config"></a>• [`tls_config`](#https-management-advertise-on-slo-internet-vip-tls-config) - Optional Block<br>TLS Config. This defines various options to configure TLS configuration parameters<br>See [TLS Config](#https-management-advertise-on-slo-internet-vip-tls-config) below.
|
|
428
|
+
|
|
429
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls"></a>• [`use_mtls`](#https-management-advertise-on-slo-internet-vip-use-mtls) - Optional Block<br>Clients TLS validation context. Validation context for downstream client TLS connections<br>See [Use mTLS](#https-management-advertise-on-slo-internet-vip-use-mtls) below.
|
|
430
|
+
|
|
431
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Certificates
|
|
432
|
+
|
|
433
|
+
A [`tls_certificates`](#https-management-advertise-on-slo-internet-vip-tls-certificates) block (within [`https_management.advertise_on_slo_internet_vip`](#https-management-advertise-on-slo-internet-vip)) supports the following:
|
|
434
|
+
|
|
435
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-certificate-url"></a>• [`certificate_url`](#https-management-advertise-on-slo-internet-vip-tls-certificates-certificate-url) - Optional String<br>Certificate. TLS certificate. Certificate or certificate chain in PEM format including the PEM headers
|
|
436
|
+
|
|
437
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-custom-hash-algorithms"></a>• [`custom_hash_algorithms`](#https-management-advertise-on-slo-internet-vip-tls-certificates-custom-hash-algorithms) - Optional Block<br>Hash Algorithms. Specifies the hash algorithms to be used<br>See [Custom Hash Algorithms](#https-management-advertise-on-slo-internet-vip-tls-certificates-custom-hash-algorithms) below.
|
|
438
|
+
|
|
439
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-description-spec"></a>• [`description_spec`](#https-management-advertise-on-slo-internet-vip-tls-certificates-description-spec) - Optional String<br>Description. Description for the certificate
|
|
440
|
+
|
|
441
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-disable-ocsp-stapling"></a>• [`disable_ocsp_stapling`](#https-management-advertise-on-slo-internet-vip-tls-certificates-disable-ocsp-stapling) - Optional Block<br>Enable this option
|
|
442
|
+
|
|
443
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key"></a>• [`private_key`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key) below.
|
|
444
|
+
|
|
445
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-use-system-defaults"></a>• [`use_system_defaults`](#https-management-advertise-on-slo-internet-vip-tls-certificates-use-system-defaults) - Optional Block<br>Enable this option
|
|
446
|
+
|
|
447
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Certificates Custom Hash Algorithms
|
|
448
|
+
|
|
449
|
+
A [`custom_hash_algorithms`](#https-management-advertise-on-slo-internet-vip-tls-certificates-custom-hash-algorithms) block (within [`https_management.advertise_on_slo_internet_vip.tls_certificates`](#https-management-advertise-on-slo-internet-vip-tls-certificates)) supports the following:
|
|
450
|
+
|
|
451
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-custom-hash-algorithms-hash-algorithms"></a>• [`hash_algorithms`](#https-management-advertise-on-slo-internet-vip-tls-certificates-custom-hash-algorithms-hash-algorithms) - Optional List Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
|
|
452
|
+
|
|
453
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Certificates Private Key
|
|
454
|
+
|
|
455
|
+
A [`private_key`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key) block (within [`https_management.advertise_on_slo_internet_vip.tls_certificates`](#https-management-advertise-on-slo-internet-vip-tls-certificates)) supports the following:
|
|
456
|
+
|
|
457
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info"></a>• [`blindfold_secret_info`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info) below.
|
|
458
|
+
|
|
459
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info"></a>• [`clear_secret_info`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info) below.
|
|
460
|
+
|
|
461
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Certificates Private Key Blindfold Secret Info
|
|
462
|
+
|
|
463
|
+
A [`blindfold_secret_info`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info) block (within [`https_management.advertise_on_slo_internet_vip.tls_certificates.private_key`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key)) supports the following:
|
|
464
|
+
|
|
465
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
466
|
+
|
|
467
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info-location"></a>• [`location`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
468
|
+
|
|
469
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info-store-provider"></a>• [`store_provider`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
470
|
+
|
|
471
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Certificates Private Key Clear Secret Info
|
|
472
|
+
|
|
473
|
+
A [`clear_secret_info`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info) block (within [`https_management.advertise_on_slo_internet_vip.tls_certificates.private_key`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key)) supports the following:
|
|
474
|
+
|
|
475
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info-provider-ref"></a>• [`provider_ref`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
476
|
+
|
|
477
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info-url"></a>• [`url`](#https-management-advertise-on-slo-internet-vip-tls-certificates-private-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
478
|
+
|
|
479
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Config
|
|
480
|
+
|
|
481
|
+
A [`tls_config`](#https-management-advertise-on-slo-internet-vip-tls-config) block (within [`https_management.advertise_on_slo_internet_vip`](#https-management-advertise-on-slo-internet-vip)) supports the following:
|
|
482
|
+
|
|
483
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-custom-security"></a>• [`custom_security`](#https-management-advertise-on-slo-internet-vip-tls-config-custom-security) - Optional Block<br>Custom Ciphers. This defines TLS protocol config including min/max versions and allowed ciphers<br>See [Custom Security](#https-management-advertise-on-slo-internet-vip-tls-config-custom-security) below.
|
|
484
|
+
|
|
485
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-default-security"></a>• [`default_security`](#https-management-advertise-on-slo-internet-vip-tls-config-default-security) - Optional Block<br>Enable this option
|
|
486
|
+
|
|
487
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-low-security"></a>• [`low_security`](#https-management-advertise-on-slo-internet-vip-tls-config-low-security) - Optional Block<br>Enable this option
|
|
488
|
+
|
|
489
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-medium-security"></a>• [`medium_security`](#https-management-advertise-on-slo-internet-vip-tls-config-medium-security) - Optional Block<br>Enable this option
|
|
490
|
+
|
|
491
|
+
#### HTTPS Management Advertise On Slo Internet VIP TLS Config Custom Security
|
|
492
|
+
|
|
493
|
+
A [`custom_security`](#https-management-advertise-on-slo-internet-vip-tls-config-custom-security) block (within [`https_management.advertise_on_slo_internet_vip.tls_config`](#https-management-advertise-on-slo-internet-vip-tls-config)) supports the following:
|
|
494
|
+
|
|
495
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-custom-security-cipher-suites"></a>• [`cipher_suites`](#https-management-advertise-on-slo-internet-vip-tls-config-custom-security-cipher-suites) - Optional List<br>Cipher Suites. The TLS listener will only support the specified cipher list
|
|
496
|
+
|
|
497
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-custom-security-max-version"></a>• [`max_version`](#https-management-advertise-on-slo-internet-vip-tls-config-custom-security-max-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
498
|
+
|
|
499
|
+
<a id="https-management-advertise-on-slo-internet-vip-tls-config-custom-security-min-version"></a>• [`min_version`](#https-management-advertise-on-slo-internet-vip-tls-config-custom-security-min-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
500
|
+
|
|
501
|
+
#### HTTPS Management Advertise On Slo Internet VIP Use mTLS
|
|
502
|
+
|
|
503
|
+
An [`use_mtls`](#https-management-advertise-on-slo-internet-vip-use-mtls) block (within [`https_management.advertise_on_slo_internet_vip`](#https-management-advertise-on-slo-internet-vip)) supports the following:
|
|
504
|
+
|
|
505
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-client-certificate-optional"></a>• [`client_certificate_optional`](#https-management-advertise-on-slo-internet-vip-use-mtls-client-certificate-optional) - Optional Bool<br>Client Certificate Optional. Client certificate is optional. If the client has provided a certificate, the load balancer will verify it. If certification verification fails, the connection will be terminated. If the client does not provide a certificate, the connection will be accepted
|
|
506
|
+
|
|
507
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-crl"></a>• [`crl`](#https-management-advertise-on-slo-internet-vip-use-mtls-crl) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [CRL](#https-management-advertise-on-slo-internet-vip-use-mtls-crl) below.
|
|
508
|
+
|
|
509
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-no-crl"></a>• [`no_crl`](#https-management-advertise-on-slo-internet-vip-use-mtls-no-crl) - Optional Block<br>Enable this option
|
|
510
|
+
|
|
511
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca"></a>• [`trusted_ca`](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Trusted CA](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca) below.
|
|
512
|
+
|
|
513
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-url"></a>• [`trusted_ca_url`](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-url) - Optional String<br>Inline Root CA Certificate (legacy). Upload a Root CA Certificate specifically for this Load Balancer
|
|
514
|
+
|
|
515
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-disabled"></a>• [`xfcc_disabled`](#https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-disabled) - Optional Block<br>Enable this option
|
|
516
|
+
|
|
517
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-options"></a>• [`xfcc_options`](#https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-options) - Optional Block<br>XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests<br>See [Xfcc Options](#https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-options) below.
|
|
518
|
+
|
|
519
|
+
#### HTTPS Management Advertise On Slo Internet VIP Use mTLS CRL
|
|
520
|
+
|
|
521
|
+
A [`crl`](#https-management-advertise-on-slo-internet-vip-use-mtls-crl) block (within [`https_management.advertise_on_slo_internet_vip.use_mtls`](#https-management-advertise-on-slo-internet-vip-use-mtls)) supports the following:
|
|
522
|
+
|
|
523
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-crl-name"></a>• [`name`](#https-management-advertise-on-slo-internet-vip-use-mtls-crl-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
524
|
+
|
|
525
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-crl-namespace"></a>• [`namespace`](#https-management-advertise-on-slo-internet-vip-use-mtls-crl-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
526
|
+
|
|
527
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-crl-tenant"></a>• [`tenant`](#https-management-advertise-on-slo-internet-vip-use-mtls-crl-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
528
|
+
|
|
529
|
+
#### HTTPS Management Advertise On Slo Internet VIP Use mTLS Trusted CA
|
|
530
|
+
|
|
531
|
+
A [`trusted_ca`](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca) block (within [`https_management.advertise_on_slo_internet_vip.use_mtls`](#https-management-advertise-on-slo-internet-vip-use-mtls)) supports the following:
|
|
532
|
+
|
|
533
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-name"></a>• [`name`](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
534
|
+
|
|
535
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-namespace"></a>• [`namespace`](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
536
|
+
|
|
537
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-tenant"></a>• [`tenant`](#https-management-advertise-on-slo-internet-vip-use-mtls-trusted-ca-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
538
|
+
|
|
539
|
+
#### HTTPS Management Advertise On Slo Internet VIP Use mTLS Xfcc Options
|
|
540
|
+
|
|
541
|
+
A [`xfcc_options`](#https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-options) block (within [`https_management.advertise_on_slo_internet_vip.use_mtls`](#https-management-advertise-on-slo-internet-vip-use-mtls)) supports the following:
|
|
542
|
+
|
|
543
|
+
<a id="https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-options-xfcc-header-elements"></a>• [`xfcc_header_elements`](#https-management-advertise-on-slo-internet-vip-use-mtls-xfcc-options-xfcc-header-elements) - Optional List Defaults to `XFCC_NONE`<br>Possible values are `XFCC_NONE`, `XFCC_CERT`, `XFCC_CHAIN`, `XFCC_SUBJECT`, `XFCC_URI`, `XFCC_DNS`<br>[Enum: XFCC_NONE|XFCC_CERT|XFCC_CHAIN|XFCC_SUBJECT|XFCC_URI|XFCC_DNS] XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests
|
|
544
|
+
|
|
545
|
+
#### HTTPS Management Advertise On Slo SLI
|
|
546
|
+
|
|
547
|
+
An [`advertise_on_slo_sli`](#https-management-advertise-on-slo-sli) block (within [`https_management`](#https-management)) supports the following:
|
|
548
|
+
|
|
549
|
+
<a id="https-management-advertise-on-slo-sli-no-mtls"></a>• [`no_mtls`](#https-management-advertise-on-slo-sli-no-mtls) - Optional Block<br>Enable this option
|
|
550
|
+
|
|
551
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates"></a>• [`tls_certificates`](#https-management-advertise-on-slo-sli-tls-certificates) - Optional Block<br>TLS Certificates. Users can add one or more certificates that share the same set of domains. for example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#https-management-advertise-on-slo-sli-tls-certificates) below.
|
|
552
|
+
|
|
553
|
+
<a id="https-management-advertise-on-slo-sli-tls-config"></a>• [`tls_config`](#https-management-advertise-on-slo-sli-tls-config) - Optional Block<br>TLS Config. This defines various options to configure TLS configuration parameters<br>See [TLS Config](#https-management-advertise-on-slo-sli-tls-config) below.
|
|
554
|
+
|
|
555
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls"></a>• [`use_mtls`](#https-management-advertise-on-slo-sli-use-mtls) - Optional Block<br>Clients TLS validation context. Validation context for downstream client TLS connections<br>See [Use mTLS](#https-management-advertise-on-slo-sli-use-mtls) below.
|
|
556
|
+
|
|
557
|
+
#### HTTPS Management Advertise On Slo SLI TLS Certificates
|
|
558
|
+
|
|
559
|
+
A [`tls_certificates`](#https-management-advertise-on-slo-sli-tls-certificates) block (within [`https_management.advertise_on_slo_sli`](#https-management-advertise-on-slo-sli)) supports the following:
|
|
560
|
+
|
|
561
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-certificate-url"></a>• [`certificate_url`](#https-management-advertise-on-slo-sli-tls-certificates-certificate-url) - Optional String<br>Certificate. TLS certificate. Certificate or certificate chain in PEM format including the PEM headers
|
|
562
|
+
|
|
563
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-custom-hash-algorithms"></a>• [`custom_hash_algorithms`](#https-management-advertise-on-slo-sli-tls-certificates-custom-hash-algorithms) - Optional Block<br>Hash Algorithms. Specifies the hash algorithms to be used<br>See [Custom Hash Algorithms](#https-management-advertise-on-slo-sli-tls-certificates-custom-hash-algorithms) below.
|
|
564
|
+
|
|
565
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-description-spec"></a>• [`description_spec`](#https-management-advertise-on-slo-sli-tls-certificates-description-spec) - Optional String<br>Description. Description for the certificate
|
|
566
|
+
|
|
567
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-disable-ocsp-stapling"></a>• [`disable_ocsp_stapling`](#https-management-advertise-on-slo-sli-tls-certificates-disable-ocsp-stapling) - Optional Block<br>Enable this option
|
|
568
|
+
|
|
569
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key"></a>• [`private_key`](#https-management-advertise-on-slo-sli-tls-certificates-private-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#https-management-advertise-on-slo-sli-tls-certificates-private-key) below.
|
|
570
|
+
|
|
571
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-use-system-defaults"></a>• [`use_system_defaults`](#https-management-advertise-on-slo-sli-tls-certificates-use-system-defaults) - Optional Block<br>Enable this option
|
|
572
|
+
|
|
573
|
+
#### HTTPS Management Advertise On Slo SLI TLS Certificates Custom Hash Algorithms
|
|
574
|
+
|
|
575
|
+
A [`custom_hash_algorithms`](#https-management-advertise-on-slo-sli-tls-certificates-custom-hash-algorithms) block (within [`https_management.advertise_on_slo_sli.tls_certificates`](#https-management-advertise-on-slo-sli-tls-certificates)) supports the following:
|
|
576
|
+
|
|
577
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-custom-hash-algorithms-hash-algorithms"></a>• [`hash_algorithms`](#https-management-advertise-on-slo-sli-tls-certificates-custom-hash-algorithms-hash-algorithms) - Optional List Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
|
|
578
|
+
|
|
579
|
+
#### HTTPS Management Advertise On Slo SLI TLS Certificates Private Key
|
|
580
|
+
|
|
581
|
+
A [`private_key`](#https-management-advertise-on-slo-sli-tls-certificates-private-key) block (within [`https_management.advertise_on_slo_sli.tls_certificates`](#https-management-advertise-on-slo-sli-tls-certificates)) supports the following:
|
|
582
|
+
|
|
583
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info"></a>• [`blindfold_secret_info`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info) below.
|
|
584
|
+
|
|
585
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info"></a>• [`clear_secret_info`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info) below.
|
|
586
|
+
|
|
587
|
+
#### HTTPS Management Advertise On Slo SLI TLS Certificates Private Key Blindfold Secret Info
|
|
588
|
+
|
|
589
|
+
A [`blindfold_secret_info`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info) block (within [`https_management.advertise_on_slo_sli.tls_certificates.private_key`](#https-management-advertise-on-slo-sli-tls-certificates-private-key)) supports the following:
|
|
590
|
+
|
|
591
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
592
|
+
|
|
593
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info-location"></a>• [`location`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
594
|
+
|
|
595
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info-store-provider"></a>• [`store_provider`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
596
|
+
|
|
597
|
+
#### HTTPS Management Advertise On Slo SLI TLS Certificates Private Key Clear Secret Info
|
|
598
|
+
|
|
599
|
+
A [`clear_secret_info`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info) block (within [`https_management.advertise_on_slo_sli.tls_certificates.private_key`](#https-management-advertise-on-slo-sli-tls-certificates-private-key)) supports the following:
|
|
600
|
+
|
|
601
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info-provider-ref"></a>• [`provider_ref`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
602
|
+
|
|
603
|
+
<a id="https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info-url"></a>• [`url`](#https-management-advertise-on-slo-sli-tls-certificates-private-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
604
|
+
|
|
605
|
+
#### HTTPS Management Advertise On Slo SLI TLS Config
|
|
606
|
+
|
|
607
|
+
A [`tls_config`](#https-management-advertise-on-slo-sli-tls-config) block (within [`https_management.advertise_on_slo_sli`](#https-management-advertise-on-slo-sli)) supports the following:
|
|
608
|
+
|
|
609
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-custom-security"></a>• [`custom_security`](#https-management-advertise-on-slo-sli-tls-config-custom-security) - Optional Block<br>Custom Ciphers. This defines TLS protocol config including min/max versions and allowed ciphers<br>See [Custom Security](#https-management-advertise-on-slo-sli-tls-config-custom-security) below.
|
|
610
|
+
|
|
611
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-default-security"></a>• [`default_security`](#https-management-advertise-on-slo-sli-tls-config-default-security) - Optional Block<br>Enable this option
|
|
612
|
+
|
|
613
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-low-security"></a>• [`low_security`](#https-management-advertise-on-slo-sli-tls-config-low-security) - Optional Block<br>Enable this option
|
|
614
|
+
|
|
615
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-medium-security"></a>• [`medium_security`](#https-management-advertise-on-slo-sli-tls-config-medium-security) - Optional Block<br>Enable this option
|
|
616
|
+
|
|
617
|
+
#### HTTPS Management Advertise On Slo SLI TLS Config Custom Security
|
|
618
|
+
|
|
619
|
+
A [`custom_security`](#https-management-advertise-on-slo-sli-tls-config-custom-security) block (within [`https_management.advertise_on_slo_sli.tls_config`](#https-management-advertise-on-slo-sli-tls-config)) supports the following:
|
|
620
|
+
|
|
621
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-custom-security-cipher-suites"></a>• [`cipher_suites`](#https-management-advertise-on-slo-sli-tls-config-custom-security-cipher-suites) - Optional List<br>Cipher Suites. The TLS listener will only support the specified cipher list
|
|
622
|
+
|
|
623
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-custom-security-max-version"></a>• [`max_version`](#https-management-advertise-on-slo-sli-tls-config-custom-security-max-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
624
|
+
|
|
625
|
+
<a id="https-management-advertise-on-slo-sli-tls-config-custom-security-min-version"></a>• [`min_version`](#https-management-advertise-on-slo-sli-tls-config-custom-security-min-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
626
|
+
|
|
627
|
+
#### HTTPS Management Advertise On Slo SLI Use mTLS
|
|
628
|
+
|
|
629
|
+
An [`use_mtls`](#https-management-advertise-on-slo-sli-use-mtls) block (within [`https_management.advertise_on_slo_sli`](#https-management-advertise-on-slo-sli)) supports the following:
|
|
630
|
+
|
|
631
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-client-certificate-optional"></a>• [`client_certificate_optional`](#https-management-advertise-on-slo-sli-use-mtls-client-certificate-optional) - Optional Bool<br>Client Certificate Optional. Client certificate is optional. If the client has provided a certificate, the load balancer will verify it. If certification verification fails, the connection will be terminated. If the client does not provide a certificate, the connection will be accepted
|
|
632
|
+
|
|
633
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-crl"></a>• [`crl`](#https-management-advertise-on-slo-sli-use-mtls-crl) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [CRL](#https-management-advertise-on-slo-sli-use-mtls-crl) below.
|
|
634
|
+
|
|
635
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-no-crl"></a>• [`no_crl`](#https-management-advertise-on-slo-sli-use-mtls-no-crl) - Optional Block<br>Enable this option
|
|
636
|
+
|
|
637
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-trusted-ca"></a>• [`trusted_ca`](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Trusted CA](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca) below.
|
|
638
|
+
|
|
639
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-trusted-ca-url"></a>• [`trusted_ca_url`](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca-url) - Optional String<br>Inline Root CA Certificate (legacy). Upload a Root CA Certificate specifically for this Load Balancer
|
|
640
|
+
|
|
641
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-xfcc-disabled"></a>• [`xfcc_disabled`](#https-management-advertise-on-slo-sli-use-mtls-xfcc-disabled) - Optional Block<br>Enable this option
|
|
642
|
+
|
|
643
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-xfcc-options"></a>• [`xfcc_options`](#https-management-advertise-on-slo-sli-use-mtls-xfcc-options) - Optional Block<br>XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests<br>See [Xfcc Options](#https-management-advertise-on-slo-sli-use-mtls-xfcc-options) below.
|
|
644
|
+
|
|
645
|
+
#### HTTPS Management Advertise On Slo SLI Use mTLS CRL
|
|
646
|
+
|
|
647
|
+
A [`crl`](#https-management-advertise-on-slo-sli-use-mtls-crl) block (within [`https_management.advertise_on_slo_sli.use_mtls`](#https-management-advertise-on-slo-sli-use-mtls)) supports the following:
|
|
648
|
+
|
|
649
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-crl-name"></a>• [`name`](#https-management-advertise-on-slo-sli-use-mtls-crl-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
650
|
+
|
|
651
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-crl-namespace"></a>• [`namespace`](#https-management-advertise-on-slo-sli-use-mtls-crl-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
652
|
+
|
|
653
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-crl-tenant"></a>• [`tenant`](#https-management-advertise-on-slo-sli-use-mtls-crl-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
654
|
+
|
|
655
|
+
#### HTTPS Management Advertise On Slo SLI Use mTLS Trusted CA
|
|
656
|
+
|
|
657
|
+
A [`trusted_ca`](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca) block (within [`https_management.advertise_on_slo_sli.use_mtls`](#https-management-advertise-on-slo-sli-use-mtls)) supports the following:
|
|
658
|
+
|
|
659
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-trusted-ca-name"></a>• [`name`](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
660
|
+
|
|
661
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-trusted-ca-namespace"></a>• [`namespace`](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
662
|
+
|
|
663
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-trusted-ca-tenant"></a>• [`tenant`](#https-management-advertise-on-slo-sli-use-mtls-trusted-ca-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
664
|
+
|
|
665
|
+
#### HTTPS Management Advertise On Slo SLI Use mTLS Xfcc Options
|
|
666
|
+
|
|
667
|
+
A [`xfcc_options`](#https-management-advertise-on-slo-sli-use-mtls-xfcc-options) block (within [`https_management.advertise_on_slo_sli.use_mtls`](#https-management-advertise-on-slo-sli-use-mtls)) supports the following:
|
|
668
|
+
|
|
669
|
+
<a id="https-management-advertise-on-slo-sli-use-mtls-xfcc-options-xfcc-header-elements"></a>• [`xfcc_header_elements`](#https-management-advertise-on-slo-sli-use-mtls-xfcc-options-xfcc-header-elements) - Optional List Defaults to `XFCC_NONE`<br>Possible values are `XFCC_NONE`, `XFCC_CERT`, `XFCC_CHAIN`, `XFCC_SUBJECT`, `XFCC_URI`, `XFCC_DNS`<br>[Enum: XFCC_NONE|XFCC_CERT|XFCC_CHAIN|XFCC_SUBJECT|XFCC_URI|XFCC_DNS] XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests
|
|
670
|
+
|
|
671
|
+
#### HTTPS Management Advertise On Slo VIP
|
|
672
|
+
|
|
673
|
+
An [`advertise_on_slo_vip`](#https-management-advertise-on-slo-vip) block (within [`https_management`](#https-management)) supports the following:
|
|
674
|
+
|
|
675
|
+
<a id="https-management-advertise-on-slo-vip-no-mtls"></a>• [`no_mtls`](#https-management-advertise-on-slo-vip-no-mtls) - Optional Block<br>Enable this option
|
|
676
|
+
|
|
677
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates"></a>• [`tls_certificates`](#https-management-advertise-on-slo-vip-tls-certificates) - Optional Block<br>TLS Certificates. Users can add one or more certificates that share the same set of domains. for example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#https-management-advertise-on-slo-vip-tls-certificates) below.
|
|
678
|
+
|
|
679
|
+
<a id="https-management-advertise-on-slo-vip-tls-config"></a>• [`tls_config`](#https-management-advertise-on-slo-vip-tls-config) - Optional Block<br>TLS Config. This defines various options to configure TLS configuration parameters<br>See [TLS Config](#https-management-advertise-on-slo-vip-tls-config) below.
|
|
680
|
+
|
|
681
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls"></a>• [`use_mtls`](#https-management-advertise-on-slo-vip-use-mtls) - Optional Block<br>Clients TLS validation context. Validation context for downstream client TLS connections<br>See [Use mTLS](#https-management-advertise-on-slo-vip-use-mtls) below.
|
|
682
|
+
|
|
683
|
+
#### HTTPS Management Advertise On Slo VIP TLS Certificates
|
|
684
|
+
|
|
685
|
+
A [`tls_certificates`](#https-management-advertise-on-slo-vip-tls-certificates) block (within [`https_management.advertise_on_slo_vip`](#https-management-advertise-on-slo-vip)) supports the following:
|
|
686
|
+
|
|
687
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-certificate-url"></a>• [`certificate_url`](#https-management-advertise-on-slo-vip-tls-certificates-certificate-url) - Optional String<br>Certificate. TLS certificate. Certificate or certificate chain in PEM format including the PEM headers
|
|
688
|
+
|
|
689
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-custom-hash-algorithms"></a>• [`custom_hash_algorithms`](#https-management-advertise-on-slo-vip-tls-certificates-custom-hash-algorithms) - Optional Block<br>Hash Algorithms. Specifies the hash algorithms to be used<br>See [Custom Hash Algorithms](#https-management-advertise-on-slo-vip-tls-certificates-custom-hash-algorithms) below.
|
|
690
|
+
|
|
691
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-description-spec"></a>• [`description_spec`](#https-management-advertise-on-slo-vip-tls-certificates-description-spec) - Optional String<br>Description. Description for the certificate
|
|
692
|
+
|
|
693
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-disable-ocsp-stapling"></a>• [`disable_ocsp_stapling`](#https-management-advertise-on-slo-vip-tls-certificates-disable-ocsp-stapling) - Optional Block<br>Enable this option
|
|
694
|
+
|
|
695
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key"></a>• [`private_key`](#https-management-advertise-on-slo-vip-tls-certificates-private-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#https-management-advertise-on-slo-vip-tls-certificates-private-key) below.
|
|
696
|
+
|
|
697
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-use-system-defaults"></a>• [`use_system_defaults`](#https-management-advertise-on-slo-vip-tls-certificates-use-system-defaults) - Optional Block<br>Enable this option
|
|
698
|
+
|
|
699
|
+
#### HTTPS Management Advertise On Slo VIP TLS Certificates Custom Hash Algorithms
|
|
700
|
+
|
|
701
|
+
A [`custom_hash_algorithms`](#https-management-advertise-on-slo-vip-tls-certificates-custom-hash-algorithms) block (within [`https_management.advertise_on_slo_vip.tls_certificates`](#https-management-advertise-on-slo-vip-tls-certificates)) supports the following:
|
|
702
|
+
|
|
703
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-custom-hash-algorithms-hash-algorithms"></a>• [`hash_algorithms`](#https-management-advertise-on-slo-vip-tls-certificates-custom-hash-algorithms-hash-algorithms) - Optional List Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
|
|
704
|
+
|
|
705
|
+
#### HTTPS Management Advertise On Slo VIP TLS Certificates Private Key
|
|
706
|
+
|
|
707
|
+
A [`private_key`](#https-management-advertise-on-slo-vip-tls-certificates-private-key) block (within [`https_management.advertise_on_slo_vip.tls_certificates`](#https-management-advertise-on-slo-vip-tls-certificates)) supports the following:
|
|
708
|
+
|
|
709
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info"></a>• [`blindfold_secret_info`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info) below.
|
|
710
|
+
|
|
711
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info"></a>• [`clear_secret_info`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info) below.
|
|
712
|
+
|
|
713
|
+
#### HTTPS Management Advertise On Slo VIP TLS Certificates Private Key Blindfold Secret Info
|
|
714
|
+
|
|
715
|
+
A [`blindfold_secret_info`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info) block (within [`https_management.advertise_on_slo_vip.tls_certificates.private_key`](#https-management-advertise-on-slo-vip-tls-certificates-private-key)) supports the following:
|
|
716
|
+
|
|
717
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
718
|
+
|
|
719
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info-location"></a>• [`location`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
720
|
+
|
|
721
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info-store-provider"></a>• [`store_provider`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
722
|
+
|
|
723
|
+
#### HTTPS Management Advertise On Slo VIP TLS Certificates Private Key Clear Secret Info
|
|
724
|
+
|
|
725
|
+
A [`clear_secret_info`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info) block (within [`https_management.advertise_on_slo_vip.tls_certificates.private_key`](#https-management-advertise-on-slo-vip-tls-certificates-private-key)) supports the following:
|
|
726
|
+
|
|
727
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info-provider-ref"></a>• [`provider_ref`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
728
|
+
|
|
729
|
+
<a id="https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info-url"></a>• [`url`](#https-management-advertise-on-slo-vip-tls-certificates-private-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
730
|
+
|
|
731
|
+
#### HTTPS Management Advertise On Slo VIP TLS Config
|
|
732
|
+
|
|
733
|
+
A [`tls_config`](#https-management-advertise-on-slo-vip-tls-config) block (within [`https_management.advertise_on_slo_vip`](#https-management-advertise-on-slo-vip)) supports the following:
|
|
734
|
+
|
|
735
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-custom-security"></a>• [`custom_security`](#https-management-advertise-on-slo-vip-tls-config-custom-security) - Optional Block<br>Custom Ciphers. This defines TLS protocol config including min/max versions and allowed ciphers<br>See [Custom Security](#https-management-advertise-on-slo-vip-tls-config-custom-security) below.
|
|
736
|
+
|
|
737
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-default-security"></a>• [`default_security`](#https-management-advertise-on-slo-vip-tls-config-default-security) - Optional Block<br>Enable this option
|
|
738
|
+
|
|
739
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-low-security"></a>• [`low_security`](#https-management-advertise-on-slo-vip-tls-config-low-security) - Optional Block<br>Enable this option
|
|
740
|
+
|
|
741
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-medium-security"></a>• [`medium_security`](#https-management-advertise-on-slo-vip-tls-config-medium-security) - Optional Block<br>Enable this option
|
|
742
|
+
|
|
743
|
+
#### HTTPS Management Advertise On Slo VIP TLS Config Custom Security
|
|
744
|
+
|
|
745
|
+
A [`custom_security`](#https-management-advertise-on-slo-vip-tls-config-custom-security) block (within [`https_management.advertise_on_slo_vip.tls_config`](#https-management-advertise-on-slo-vip-tls-config)) supports the following:
|
|
746
|
+
|
|
747
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-custom-security-cipher-suites"></a>• [`cipher_suites`](#https-management-advertise-on-slo-vip-tls-config-custom-security-cipher-suites) - Optional List<br>Cipher Suites. The TLS listener will only support the specified cipher list
|
|
748
|
+
|
|
749
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-custom-security-max-version"></a>• [`max_version`](#https-management-advertise-on-slo-vip-tls-config-custom-security-max-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
750
|
+
|
|
751
|
+
<a id="https-management-advertise-on-slo-vip-tls-config-custom-security-min-version"></a>• [`min_version`](#https-management-advertise-on-slo-vip-tls-config-custom-security-min-version) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TLS Protocol. TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
752
|
+
|
|
753
|
+
#### HTTPS Management Advertise On Slo VIP Use mTLS
|
|
754
|
+
|
|
755
|
+
An [`use_mtls`](#https-management-advertise-on-slo-vip-use-mtls) block (within [`https_management.advertise_on_slo_vip`](#https-management-advertise-on-slo-vip)) supports the following:
|
|
756
|
+
|
|
757
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-client-certificate-optional"></a>• [`client_certificate_optional`](#https-management-advertise-on-slo-vip-use-mtls-client-certificate-optional) - Optional Bool<br>Client Certificate Optional. Client certificate is optional. If the client has provided a certificate, the load balancer will verify it. If certification verification fails, the connection will be terminated. If the client does not provide a certificate, the connection will be accepted
|
|
758
|
+
|
|
759
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-crl"></a>• [`crl`](#https-management-advertise-on-slo-vip-use-mtls-crl) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [CRL](#https-management-advertise-on-slo-vip-use-mtls-crl) below.
|
|
760
|
+
|
|
761
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-no-crl"></a>• [`no_crl`](#https-management-advertise-on-slo-vip-use-mtls-no-crl) - Optional Block<br>Enable this option
|
|
762
|
+
|
|
763
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-trusted-ca"></a>• [`trusted_ca`](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Trusted CA](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca) below.
|
|
764
|
+
|
|
765
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-trusted-ca-url"></a>• [`trusted_ca_url`](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca-url) - Optional String<br>Inline Root CA Certificate (legacy). Upload a Root CA Certificate specifically for this Load Balancer
|
|
766
|
+
|
|
767
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-xfcc-disabled"></a>• [`xfcc_disabled`](#https-management-advertise-on-slo-vip-use-mtls-xfcc-disabled) - Optional Block<br>Enable this option
|
|
768
|
+
|
|
769
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-xfcc-options"></a>• [`xfcc_options`](#https-management-advertise-on-slo-vip-use-mtls-xfcc-options) - Optional Block<br>XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests<br>See [Xfcc Options](#https-management-advertise-on-slo-vip-use-mtls-xfcc-options) below.
|
|
770
|
+
|
|
771
|
+
#### HTTPS Management Advertise On Slo VIP Use mTLS CRL
|
|
772
|
+
|
|
773
|
+
A [`crl`](#https-management-advertise-on-slo-vip-use-mtls-crl) block (within [`https_management.advertise_on_slo_vip.use_mtls`](#https-management-advertise-on-slo-vip-use-mtls)) supports the following:
|
|
774
|
+
|
|
775
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-crl-name"></a>• [`name`](#https-management-advertise-on-slo-vip-use-mtls-crl-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
776
|
+
|
|
777
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-crl-namespace"></a>• [`namespace`](#https-management-advertise-on-slo-vip-use-mtls-crl-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
778
|
+
|
|
779
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-crl-tenant"></a>• [`tenant`](#https-management-advertise-on-slo-vip-use-mtls-crl-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
780
|
+
|
|
781
|
+
#### HTTPS Management Advertise On Slo VIP Use mTLS Trusted CA
|
|
782
|
+
|
|
783
|
+
A [`trusted_ca`](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca) block (within [`https_management.advertise_on_slo_vip.use_mtls`](#https-management-advertise-on-slo-vip-use-mtls)) supports the following:
|
|
784
|
+
|
|
785
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-trusted-ca-name"></a>• [`name`](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
786
|
+
|
|
787
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-trusted-ca-namespace"></a>• [`namespace`](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
788
|
+
|
|
789
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-trusted-ca-tenant"></a>• [`tenant`](#https-management-advertise-on-slo-vip-use-mtls-trusted-ca-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
790
|
+
|
|
791
|
+
#### HTTPS Management Advertise On Slo VIP Use mTLS Xfcc Options
|
|
792
|
+
|
|
793
|
+
A [`xfcc_options`](#https-management-advertise-on-slo-vip-use-mtls-xfcc-options) block (within [`https_management.advertise_on_slo_vip.use_mtls`](#https-management-advertise-on-slo-vip-use-mtls)) supports the following:
|
|
794
|
+
|
|
795
|
+
<a id="https-management-advertise-on-slo-vip-use-mtls-xfcc-options-xfcc-header-elements"></a>• [`xfcc_header_elements`](#https-management-advertise-on-slo-vip-use-mtls-xfcc-options-xfcc-header-elements) - Optional List Defaults to `XFCC_NONE`<br>Possible values are `XFCC_NONE`, `XFCC_CERT`, `XFCC_CHAIN`, `XFCC_SUBJECT`, `XFCC_URI`, `XFCC_DNS`<br>[Enum: XFCC_NONE|XFCC_CERT|XFCC_CHAIN|XFCC_SUBJECT|XFCC_URI|XFCC_DNS] XFCC Header Elements. X-Forwarded-Client-Cert header elements to be added to requests
|
|
796
|
+
|
|
797
|
+
#### Palo Alto Fw Service
|
|
798
|
+
|
|
799
|
+
A [`palo_alto_fw_service`](#palo-alto-fw-service) block supports the following:
|
|
800
|
+
|
|
801
|
+
<a id="palo-alto-fw-service-auto-setup"></a>• [`auto_setup`](#palo-alto-fw-service-auto-setup) - Optional Block<br>PAN VM Series Firewall Auto Setup. For auto-setup, SSH public and pvt keys are needed. Using the given config user, SSH and API access will be configured<br>See [Auto Setup](#palo-alto-fw-service-auto-setup) below.
|
|
802
|
+
|
|
803
|
+
<a id="palo-alto-fw-service-aws-tgw-site"></a>• [`aws_tgw_site`](#palo-alto-fw-service-aws-tgw-site) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [AWS TGW Site](#palo-alto-fw-service-aws-tgw-site) below.
|
|
804
|
+
|
|
805
|
+
<a id="palo-alto-fw-service-disable-panaroma"></a>• [`disable_panaroma`](#palo-alto-fw-service-disable-panaroma) - Optional Block<br>Enable this option
|
|
806
|
+
|
|
807
|
+
<a id="palo-alto-fw-service-instance-type"></a>• [`instance_type`](#palo-alto-fw-service-instance-type) - Optional String Defaults to `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE`<br>Possible values are `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE`<br>[Enum: PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE] Palo Alto Networks VM-Series Instance Typ. - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE: m4.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE: m4.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE: m4.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE: m5.large - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE: m5.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE: m5.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE: m5.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE: m5.12xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE: m5n.large - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE: m5n.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE: m5n.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE: m5n.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE: c4.large - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE: c4.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE: c4.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE: c4.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE: c4.8xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE: c5.large - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE: c5.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE: c5.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE: c5.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE: c5.9xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE: c5.18xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE: c5n.large - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE: c5n.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE: c5n.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE: c5n.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE: c5n.9xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE: c5n.18xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE: r5.2xlarge
|
|
808
|
+
|
|
809
|
+
<a id="palo-alto-fw-service-pan-ami-bundle1"></a>• [`pan_ami_bundle1`](#palo-alto-fw-service-pan-ami-bundle1) - Optional Block<br>Enable this option
|
|
810
|
+
|
|
811
|
+
<a id="palo-alto-fw-service-pan-ami-bundle2"></a>• [`pan_ami_bundle2`](#palo-alto-fw-service-pan-ami-bundle2) - Optional Block<br>Enable this option
|
|
812
|
+
|
|
813
|
+
<a id="palo-alto-fw-service-panorama-server"></a>• [`panorama_server`](#palo-alto-fw-service-panorama-server) - Optional Block<br>Panorama Server Type. Panorama Server Type<br>See [Panorama Server](#palo-alto-fw-service-panorama-server) below.
|
|
814
|
+
|
|
815
|
+
<a id="palo-alto-fw-service-service-nodes"></a>• [`service_nodes`](#palo-alto-fw-service-service-nodes) - Optional Block<br>Palo Alto Networks VM-Series AZ Nodes<br>See [Service Nodes](#palo-alto-fw-service-service-nodes) below.
|
|
816
|
+
|
|
817
|
+
<a id="palo-alto-fw-service-ssh-key"></a>• [`ssh_key`](#palo-alto-fw-service-ssh-key) - Optional String<br>Setup Authorized Public SSH key. Setup Authorized Public SSH key. User will be able to SSH to the vmseries nodes using its corresponding SSH private key
|
|
818
|
+
|
|
819
|
+
<a id="palo-alto-fw-service-tags"></a>• [`tags`](#palo-alto-fw-service-tags) - Optional Block<br>AWS Tags. AWS Tags is a label consisting of a user-defined key and value. It helps to manage, identify, organize, search for, and filter resources in AWS console
|
|
820
|
+
|
|
821
|
+
<a id="palo-alto-fw-service-version"></a>• [`version`](#palo-alto-fw-service-version) - Optional String<br>PAN VM-Series version. PAN-OS version
|
|
822
|
+
|
|
823
|
+
#### Palo Alto Fw Service Auto Setup
|
|
824
|
+
|
|
825
|
+
An [`auto_setup`](#palo-alto-fw-service-auto-setup) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
826
|
+
|
|
827
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password"></a>• [`admin_password`](#palo-alto-fw-service-auto-setup-admin-password) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Admin Password](#palo-alto-fw-service-auto-setup-admin-password) below.
|
|
828
|
+
|
|
829
|
+
<a id="palo-alto-fw-service-auto-setup-admin-username"></a>• [`admin_username`](#palo-alto-fw-service-auto-setup-admin-username) - Optional String<br>Firewall Admin Username. Firewall Admin Username
|
|
830
|
+
|
|
831
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys"></a>• [`manual_ssh_keys`](#palo-alto-fw-service-auto-setup-manual-ssh-keys) - Optional Block<br>SSH key. SSH Key includes both public and private key<br>See [Manual SSH Keys](#palo-alto-fw-service-auto-setup-manual-ssh-keys) below.
|
|
832
|
+
|
|
833
|
+
#### Palo Alto Fw Service Auto Setup Admin Password
|
|
834
|
+
|
|
835
|
+
An [`admin_password`](#palo-alto-fw-service-auto-setup-admin-password) block (within [`palo_alto_fw_service.auto_setup`](#palo-alto-fw-service-auto-setup)) supports the following:
|
|
836
|
+
|
|
837
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info"></a>• [`blindfold_secret_info`](#palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info) below.
|
|
838
|
+
|
|
839
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-clear-secret-info"></a>• [`clear_secret_info`](#palo-alto-fw-service-auto-setup-admin-password-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#palo-alto-fw-service-auto-setup-admin-password-clear-secret-info) below.
|
|
840
|
+
|
|
841
|
+
#### Palo Alto Fw Service Auto Setup Admin Password Blindfold Secret Info
|
|
842
|
+
|
|
843
|
+
A [`blindfold_secret_info`](#palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info) block (within [`palo_alto_fw_service.auto_setup.admin_password`](#palo-alto-fw-service-auto-setup-admin-password)) supports the following:
|
|
844
|
+
|
|
845
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
846
|
+
|
|
847
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info-location"></a>• [`location`](#palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
848
|
+
|
|
849
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info-store-provider"></a>• [`store_provider`](#palo-alto-fw-service-auto-setup-admin-password-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
850
|
+
|
|
851
|
+
#### Palo Alto Fw Service Auto Setup Admin Password Clear Secret Info
|
|
852
|
+
|
|
853
|
+
A [`clear_secret_info`](#palo-alto-fw-service-auto-setup-admin-password-clear-secret-info) block (within [`palo_alto_fw_service.auto_setup.admin_password`](#palo-alto-fw-service-auto-setup-admin-password)) supports the following:
|
|
854
|
+
|
|
855
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-clear-secret-info-provider-ref"></a>• [`provider_ref`](#palo-alto-fw-service-auto-setup-admin-password-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
856
|
+
|
|
857
|
+
<a id="palo-alto-fw-service-auto-setup-admin-password-clear-secret-info-url"></a>• [`url`](#palo-alto-fw-service-auto-setup-admin-password-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
858
|
+
|
|
859
|
+
#### Palo Alto Fw Service Auto Setup Manual SSH Keys
|
|
860
|
+
|
|
861
|
+
A [`manual_ssh_keys`](#palo-alto-fw-service-auto-setup-manual-ssh-keys) block (within [`palo_alto_fw_service.auto_setup`](#palo-alto-fw-service-auto-setup)) supports the following:
|
|
862
|
+
|
|
863
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key"></a>• [`private_key`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key) below.
|
|
864
|
+
|
|
865
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-public-key"></a>• [`public_key`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-public-key) - Optional String<br>Public SSH key. Authorized Public SSH key which will be programmed on the node
|
|
866
|
+
|
|
867
|
+
#### Palo Alto Fw Service Auto Setup Manual SSH Keys Private Key
|
|
868
|
+
|
|
869
|
+
A [`private_key`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key) block (within [`palo_alto_fw_service.auto_setup.manual_ssh_keys`](#palo-alto-fw-service-auto-setup-manual-ssh-keys)) supports the following:
|
|
870
|
+
|
|
871
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info"></a>• [`blindfold_secret_info`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info) below.
|
|
872
|
+
|
|
873
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info"></a>• [`clear_secret_info`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info) below.
|
|
874
|
+
|
|
875
|
+
#### Palo Alto Fw Service Auto Setup Manual SSH Keys Private Key Blindfold Secret Info
|
|
876
|
+
|
|
877
|
+
A [`blindfold_secret_info`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info) block (within [`palo_alto_fw_service.auto_setup.manual_ssh_keys.private_key`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key)) supports the following:
|
|
878
|
+
|
|
879
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
880
|
+
|
|
881
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info-location"></a>• [`location`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
882
|
+
|
|
883
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info-store-provider"></a>• [`store_provider`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
884
|
+
|
|
885
|
+
#### Palo Alto Fw Service Auto Setup Manual SSH Keys Private Key Clear Secret Info
|
|
886
|
+
|
|
887
|
+
A [`clear_secret_info`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info) block (within [`palo_alto_fw_service.auto_setup.manual_ssh_keys.private_key`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key)) supports the following:
|
|
888
|
+
|
|
889
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info-provider-ref"></a>• [`provider_ref`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
890
|
+
|
|
891
|
+
<a id="palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info-url"></a>• [`url`](#palo-alto-fw-service-auto-setup-manual-ssh-keys-private-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
892
|
+
|
|
893
|
+
#### Palo Alto Fw Service AWS TGW Site
|
|
894
|
+
|
|
895
|
+
An [`aws_tgw_site`](#palo-alto-fw-service-aws-tgw-site) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
896
|
+
|
|
897
|
+
<a id="palo-alto-fw-service-aws-tgw-site-name"></a>• [`name`](#palo-alto-fw-service-aws-tgw-site-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
898
|
+
|
|
899
|
+
<a id="palo-alto-fw-service-aws-tgw-site-namespace"></a>• [`namespace`](#palo-alto-fw-service-aws-tgw-site-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
900
|
+
|
|
901
|
+
<a id="palo-alto-fw-service-aws-tgw-site-tenant"></a>• [`tenant`](#palo-alto-fw-service-aws-tgw-site-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
902
|
+
|
|
903
|
+
#### Palo Alto Fw Service Panorama Server
|
|
904
|
+
|
|
905
|
+
A [`panorama_server`](#palo-alto-fw-service-panorama-server) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
906
|
+
|
|
907
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key"></a>• [`authorization_key`](#palo-alto-fw-service-panorama-server-authorization-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Authorization Key](#palo-alto-fw-service-panorama-server-authorization-key) below.
|
|
908
|
+
|
|
909
|
+
<a id="palo-alto-fw-service-panorama-server-device-group-name"></a>• [`device_group_name`](#palo-alto-fw-service-panorama-server-device-group-name) - Optional String<br>Device Group Name. Device Group Name
|
|
910
|
+
|
|
911
|
+
<a id="palo-alto-fw-service-panorama-server-server"></a>• [`server`](#palo-alto-fw-service-panorama-server-server) - Optional String<br>Server IPv4 Address. Panorama Server Address to which the firewall should connect to
|
|
912
|
+
|
|
913
|
+
<a id="palo-alto-fw-service-panorama-server-template-stack-name"></a>• [`template_stack_name`](#palo-alto-fw-service-panorama-server-template-stack-name) - Optional String<br>template stack name. Template Stack Name
|
|
914
|
+
|
|
915
|
+
#### Palo Alto Fw Service Panorama Server Authorization Key
|
|
916
|
+
|
|
917
|
+
An [`authorization_key`](#palo-alto-fw-service-panorama-server-authorization-key) block (within [`palo_alto_fw_service.panorama_server`](#palo-alto-fw-service-panorama-server)) supports the following:
|
|
918
|
+
|
|
919
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info"></a>• [`blindfold_secret_info`](#palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info) below.
|
|
920
|
+
|
|
921
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info"></a>• [`clear_secret_info`](#palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info) below.
|
|
922
|
+
|
|
923
|
+
#### Palo Alto Fw Service Panorama Server Authorization Key Blindfold Secret Info
|
|
924
|
+
|
|
925
|
+
A [`blindfold_secret_info`](#palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info) block (within [`palo_alto_fw_service.panorama_server.authorization_key`](#palo-alto-fw-service-panorama-server-authorization-key)) supports the following:
|
|
926
|
+
|
|
927
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info-decryption-provider"></a>• [`decryption_provider`](#palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
928
|
+
|
|
929
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info-location"></a>• [`location`](#palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
930
|
+
|
|
931
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info-store-provider"></a>• [`store_provider`](#palo-alto-fw-service-panorama-server-authorization-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
932
|
+
|
|
933
|
+
#### Palo Alto Fw Service Panorama Server Authorization Key Clear Secret Info
|
|
934
|
+
|
|
935
|
+
A [`clear_secret_info`](#palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info) block (within [`palo_alto_fw_service.panorama_server.authorization_key`](#palo-alto-fw-service-panorama-server-authorization-key)) supports the following:
|
|
936
|
+
|
|
937
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info-provider-ref"></a>• [`provider_ref`](#palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
938
|
+
|
|
939
|
+
<a id="palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info-url"></a>• [`url`](#palo-alto-fw-service-panorama-server-authorization-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
940
|
+
|
|
941
|
+
#### Palo Alto Fw Service Service Nodes
|
|
942
|
+
|
|
943
|
+
A [`service_nodes`](#palo-alto-fw-service-service-nodes) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
944
|
+
|
|
945
|
+
<a id="palo-alto-fw-service-service-nodes-nodes"></a>• [`nodes`](#palo-alto-fw-service-service-nodes-nodes) - Optional Block<br>Palo Alto Networks AZ Nodes<br>See [Nodes](#palo-alto-fw-service-service-nodes-nodes) below.
|
|
946
|
+
|
|
947
|
+
#### Palo Alto Fw Service Service Nodes Nodes
|
|
948
|
+
|
|
949
|
+
A [`nodes`](#palo-alto-fw-service-service-nodes-nodes) block (within [`palo_alto_fw_service.service_nodes`](#palo-alto-fw-service-service-nodes)) supports the following:
|
|
950
|
+
|
|
951
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-aws-az-name"></a>• [`aws_az_name`](#palo-alto-fw-service-service-nodes-nodes-aws-az-name) - Optional String<br>AWS AZ Name. AWS availability zone, must be consistent with the selected AWS region. It is recommended that AZ is one of the AZ for sites
|
|
952
|
+
|
|
953
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-mgmt-subnet"></a>• [`mgmt_subnet`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet) - Optional Block<br>AWS Subnet. Parameters for AWS subnet<br>See [Mgmt Subnet](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet) below.
|
|
954
|
+
|
|
955
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-node-name"></a>• [`node_name`](#palo-alto-fw-service-service-nodes-nodes-node-name) - Optional String<br>Node Name. Node Name will be used to assign as hostname to the service
|
|
956
|
+
|
|
957
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-reserved-mgmt-subnet"></a>• [`reserved_mgmt_subnet`](#palo-alto-fw-service-service-nodes-nodes-reserved-mgmt-subnet) - Optional Block<br>Enable this option
|
|
958
|
+
|
|
959
|
+
#### Palo Alto Fw Service Service Nodes Nodes Mgmt Subnet
|
|
960
|
+
|
|
961
|
+
A [`mgmt_subnet`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet) block (within [`palo_alto_fw_service.service_nodes.nodes`](#palo-alto-fw-service-service-nodes-nodes)) supports the following:
|
|
962
|
+
|
|
963
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-existing-subnet-id"></a>• [`existing_subnet_id`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-existing-subnet-id) - Optional String<br>Existing Subnet ID. Information about existing subnet ID
|
|
964
|
+
|
|
965
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-subnet-param"></a>• [`subnet_param`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-subnet-param) - Optional Block<br>New Cloud Subnet Parameters. Parameters for creating a new cloud subnet<br>See [Subnet Param](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-subnet-param) below.
|
|
966
|
+
|
|
967
|
+
#### Palo Alto Fw Service Service Nodes Nodes Mgmt Subnet Subnet Param
|
|
968
|
+
|
|
969
|
+
A [`subnet_param`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-subnet-param) block (within [`palo_alto_fw_service.service_nodes.nodes.mgmt_subnet`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet)) supports the following:
|
|
970
|
+
|
|
971
|
+
<a id="palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-subnet-param-ipv4"></a>• [`ipv4`](#palo-alto-fw-service-service-nodes-nodes-mgmt-subnet-subnet-param-ipv4) - Optional String<br>IPv4 Subnet. IPv4 subnet prefix for this subnet
|
|
972
|
+
|
|
973
|
+
#### Timeouts
|
|
974
|
+
|
|
975
|
+
A [`timeouts`](#timeouts) block supports the following:
|
|
976
|
+
|
|
977
|
+
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
978
|
+
|
|
979
|
+
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
980
|
+
|
|
981
|
+
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
982
|
+
|
|
983
|
+
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
984
|
+
|
|
985
|
+
## Import
|
|
986
|
+
|
|
987
|
+
Import is supported using the following syntax:
|
|
988
|
+
|
|
989
|
+
```shell
|
|
990
|
+
# Import using namespace/name format
|
|
991
|
+
terraform import f5xc_nfv_service.example system/example
|
|
992
|
+
```
|