@robinmordasiewicz/f5xc-terraform-mcp 2.3.0 → 2.4.4

package/dist/docs/resources/app_setting.md

@@ -0,0 +1,228 @@
+---
+page_title: "f5xc_app_setting Resource - terraform-provider-f5xc"
+subcategory: "Applications"
+description: |-
+  [Namespace: required] Manages App setting configuration in namespace metadata.namespace in F5 Distributed Cloud.
+---
+
+# f5xc_app_setting (Resource)
+
+[Namespace: required] Manages App setting configuration in namespace metadata.namespace in F5 Distributed Cloud.
+
+~> **Note** Please refer to [App Setting API docs](https://docs.cloud.f5.com/docs-v2/api/app-setting) to learn more.
+
+## Example Usage
+
+```terraform
+# App Setting Resource Example
+# [Namespace: required] Manages App setting configuration in namespace metadata.namespace in F5 Distributed Cloud.
+
+# Basic App Setting configuration
+resource "f5xc_app_setting" "example" {
+  name      = "example-app-setting"
+  namespace = "staging"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # Customize AppType For This Namespace. List of settings to...
+  app_type_settings {
+    # Configure app_type_settings settings
+  }
+  # AppType. The AppType of App instance in current Namespace...
+  app_type_ref {
+    # Configure app_type_ref settings
+  }
+  # API Discovery. Settings specifying how API Discovery will...
+  business_logic_markup_setting {
+    # Configure business_logic_markup_setting settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the App Setting. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the App Setting will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+<a id="app-type-settings"></a>&#x2022; [`app_type_settings`](#app-type-settings) - Optional Block<br>Customize AppType For This Namespace. List of settings to enable for each AppType, given instance of AppType Exist in this Namespace<br>See [App Type Settings](#app-type-settings) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### App Type Settings
+
+An [`app_type_settings`](#app-type-settings) block supports the following:
+
+<a id="app-type-settings-app-type-ref"></a>&#x2022; [`app_type_ref`](#app-type-settings-app-type-ref) - Optional Block<br>AppType. The AppType of App instance in current Namespace. Associating an AppType reference, will enable analysis on this instance's generated data<br>See [App Type Ref](#app-type-settings-app-type-ref) below.
+
+<a id="app-type-settings-business-logic-markup-setting"></a>&#x2022; [`business_logic_markup_setting`](#app-type-settings-business-logic-markup-setting) - Optional Block<br>API Discovery. Settings specifying how API Discovery will be performed<br>See [Business Logic Markup Setting](#app-type-settings-business-logic-markup-setting) below.
+
+<a id="app-type-settings-timeseries-analyses-setting"></a>&#x2022; [`timeseries_analyses_setting`](#app-type-settings-timeseries-analyses-setting) - Optional Block<br>DDOS Settings. Configuration for DDOS Detection<br>See [Timeseries Analyses Setting](#app-type-settings-timeseries-analyses-setting) below.
+
+<a id="app-type-settings-user-behavior-analysis-setting"></a>&#x2022; [`user_behavior_analysis_setting`](#app-type-settings-user-behavior-analysis-setting) - Optional Block<br>User Behavior Analysis Setting. Configuration for user behavior analysis<br>See [User Behavior Analysis Setting](#app-type-settings-user-behavior-analysis-setting) below.
+
+#### App Type Settings App Type Ref
+
+An [`app_type_ref`](#app-type-settings-app-type-ref) block (within [`app_type_settings`](#app-type-settings)) supports the following:
+
+<a id="app-type-settings-app-type-ref-kind"></a>&#x2022; [`kind`](#app-type-settings-app-type-ref-kind) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
+
+<a id="app-type-settings-app-type-ref-name"></a>&#x2022; [`name`](#app-type-settings-app-type-ref-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="app-type-settings-app-type-ref-namespace"></a>&#x2022; [`namespace`](#app-type-settings-app-type-ref-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="app-type-settings-app-type-ref-tenant"></a>&#x2022; [`tenant`](#app-type-settings-app-type-ref-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+<a id="app-type-settings-app-type-ref-uid"></a>&#x2022; [`uid`](#app-type-settings-app-type-ref-uid) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
+
+#### App Type Settings Business Logic Markup Setting
+
+A [`business_logic_markup_setting`](#app-type-settings-business-logic-markup-setting) block (within [`app_type_settings`](#app-type-settings)) supports the following:
+
+<a id="app-type-settings-business-logic-markup-setting-disable"></a>&#x2022; [`disable`](#app-type-settings-business-logic-markup-setting-disable) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-business-logic-markup-setting-enable"></a>&#x2022; [`enable`](#app-type-settings-business-logic-markup-setting-enable) - Optional Block<br>Enable this option
+
+#### App Type Settings Timeseries Analyses Setting
+
+A [`timeseries_analyses_setting`](#app-type-settings-timeseries-analyses-setting) block (within [`app_type_settings`](#app-type-settings)) supports the following:
+
+<a id="app-type-settings-timeseries-analyses-setting-metric-selectors"></a>&#x2022; [`metric_selectors`](#app-type-settings-timeseries-analyses-setting-metric-selectors) - Optional Block<br>Metric Selectors. Define the metric selection criteria, i.e. the metrics source and the actual metrics that should be included in the detection logic<br>See [Metric Selectors](#app-type-settings-timeseries-analyses-setting-metric-selectors) below.
+
+#### App Type Settings Timeseries Analyses Setting Metric Selectors
+
+A [`metric_selectors`](#app-type-settings-timeseries-analyses-setting-metric-selectors) block (within [`app_type_settings.timeseries_analyses_setting`](#app-type-settings-timeseries-analyses-setting)) supports the following:
+
+<a id="app-type-settings-timeseries-analyses-setting-metric-selectors-metric"></a>&#x2022; [`metric`](#app-type-settings-timeseries-analyses-setting-metric-selectors-metric) - Optional List  Defaults to `NO_METRICS`<br>Possible values are `NO_METRICS`, `REQUEST_RATE`, `ERROR_RATE`, `LATENCY`, `THROUGHPUT`<br>[Enum: NO_METRICS|REQUEST_RATE|ERROR_RATE|LATENCY|THROUGHPUT] Metrics. Choose one or more metrics to be included in the detection logic
+
+<a id="app-type-settings-timeseries-analyses-setting-metric-selectors-metrics-source"></a>&#x2022; [`metrics_source`](#app-type-settings-timeseries-analyses-setting-metric-selectors-metrics-source) - Optional String<br>Possible values are `NONE`, `NODES`, `EDGES`, `VIRTUAL_HOSTS`<br>[Enum: NONE|NODES|EDGES|VIRTUAL_HOSTS] Metrics Source. Supported sources from which Metrics can be analyzed All edges in the service mesh graph. Metrics are analyzed separately between all source and destination service combinations
+
+#### App Type Settings User Behavior Analysis Setting
+
+An [`user_behavior_analysis_setting`](#app-type-settings-user-behavior-analysis-setting) block (within [`app_type_settings`](#app-type-settings)) supports the following:
+
+<a id="app-type-settings-user-behavior-analysis-setting-disable-detection"></a>&#x2022; [`disable_detection`](#app-type-settings-user-behavior-analysis-setting-disable-detection) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-disable-learning"></a>&#x2022; [`disable_learning`](#app-type-settings-user-behavior-analysis-setting-disable-learning) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection"></a>&#x2022; [`enable_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection) - Optional Block<br>Malicious User Detection Settings. Various factors about user activity are monitored and analysed to determine malicious users. These settings allow tuning those factors used by the system to detect malicious users<br>See [Enable Detection](#app-type-settings-user-behavior-analysis-setting-enable-detection) below.
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-learning"></a>&#x2022; [`enable_learning`](#app-type-settings-user-behavior-analysis-setting-enable-learning) - Optional Block<br>Enable this option
+
+#### App Type Settings User Behavior Analysis Setting Enable Detection
+
+An [`enable_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection) block (within [`app_type_settings.user_behavior_analysis_setting`](#app-type-settings-user-behavior-analysis-setting)) supports the following:
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-bola-detection-automatic"></a>&#x2022; [`bola_detection_automatic`](#app-type-settings-user-behavior-analysis-setting-enable-detection-bola-detection-automatic) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-cooling-off-period"></a>&#x2022; [`cooling_off_period`](#app-type-settings-user-behavior-analysis-setting-enable-detection-cooling-off-period) - Optional Number<br>Cooling off period. Malicious user detection assigns a threat level to each user based on their activity. Once a threat level is assigned, the system continues tracking activity from this user and if no further malicious activity is seen, it gradually reduces the threat assesment to lower levels. This field specifies the time period, in minutes, used by the system to decay a user's threat level from a high to medium or medium to low or low to none
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-bola-detection"></a>&#x2022; [`exclude_bola_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-bola-detection) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-bot-defense-activity"></a>&#x2022; [`exclude_bot_defense_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-bot-defense-activity) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-failed-login-activity"></a>&#x2022; [`exclude_failed_login_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-failed-login-activity) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-forbidden-activity"></a>&#x2022; [`exclude_forbidden_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-forbidden-activity) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-ip-reputation"></a>&#x2022; [`exclude_ip_reputation`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-ip-reputation) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-non-existent-url-activity"></a>&#x2022; [`exclude_non_existent_url_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-non-existent-url-activity) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-rate-limit"></a>&#x2022; [`exclude_rate_limit`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-rate-limit) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-waf-activity"></a>&#x2022; [`exclude_waf_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-exclude-waf-activity) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-bot-defense-activity"></a>&#x2022; [`include_bot_defense_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-bot-defense-activity) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-failed-login-activity"></a>&#x2022; [`include_failed_login_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-failed-login-activity) - Optional Block<br>Failed Login Activity Setting. When enabled, the system monitors persistent failed login attempts from a user. A failed login is detected if a request results in a response code of 401. These settings specify how to use failed login activity to determine suspicious behavior<br>See [Include Failed Login Activity](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-failed-login-activity) below.
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-forbidden-activity"></a>&#x2022; [`include_forbidden_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-forbidden-activity) - Optional Block<br>Forbidden Activity Setting. When L7 policy rules are set up to disallow certain types of requests, the system monitors persistent attempts from a user to send requests which result in policy denies. These settings specify how to use disallowed request activity from a user to determine suspicious behavior<br>See [Include Forbidden Activity](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-forbidden-activity) below.
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-ip-reputation"></a>&#x2022; [`include_ip_reputation`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-ip-reputation) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic"></a>&#x2022; [`include_non_existent_url_activity_automatic`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic) - Optional Block<br>Non-existent URL Automatic Activity Settings<br>See [Include Non Existent URL Activity Automatic](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic) below.
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-custom"></a>&#x2022; [`include_non_existent_url_activity_custom`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-custom) - Optional Block<br>Non-existent URL Custom Activity Setting<br>See [Include Non Existent URL Activity Custom](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-custom) below.
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-rate-limit"></a>&#x2022; [`include_rate_limit`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-rate-limit) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-waf-activity"></a>&#x2022; [`include_waf_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-waf-activity) - Optional Block<br>Enable this option
+
+#### App Type Settings User Behavior Analysis Setting Enable Detection Include Failed Login Activity
+
+An [`include_failed_login_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-failed-login-activity) block (within [`app_type_settings.user_behavior_analysis_setting.enable_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection)) supports the following:
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-failed-login-activity-login-failures-threshold"></a>&#x2022; [`login_failures_threshold`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-failed-login-activity-login-failures-threshold) - Optional Number<br>Login Failures Threshold. The number of failed logins beyond which the system will flag this user as malicious
+
+#### App Type Settings User Behavior Analysis Setting Enable Detection Include Forbidden Activity
+
+An [`include_forbidden_activity`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-forbidden-activity) block (within [`app_type_settings.user_behavior_analysis_setting.enable_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection)) supports the following:
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-forbidden-activity-forbidden-requests-threshold"></a>&#x2022; [`forbidden_requests_threshold`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-forbidden-activity-forbidden-requests-threshold) - Optional Number<br>Forbidden Requests Threshold. The number of forbidden requests beyond which the system will flag this user as malicious
+
+#### App Type Settings User Behavior Analysis Setting Enable Detection Include Non Existent URL Activity Automatic
+
+An [`include_non_existent_url_activity_automatic`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic) block (within [`app_type_settings.user_behavior_analysis_setting.enable_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection)) supports the following:
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic-high"></a>&#x2022; [`high`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic-high) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic-low"></a>&#x2022; [`low`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic-low) - Optional Block<br>Enable this option
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic-medium"></a>&#x2022; [`medium`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-automatic-medium) - Optional Block<br>Enable this option
+
+#### App Type Settings User Behavior Analysis Setting Enable Detection Include Non Existent URL Activity Custom
+
+An [`include_non_existent_url_activity_custom`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-custom) block (within [`app_type_settings.user_behavior_analysis_setting.enable_detection`](#app-type-settings-user-behavior-analysis-setting-enable-detection)) supports the following:
+
+<a id="app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-custom-nonexistent-requests-threshold"></a>&#x2022; [`nonexistent_requests_threshold`](#app-type-settings-user-behavior-analysis-setting-enable-detection-include-non-existent-url-activity-custom-nonexistent-requests-threshold) - Optional Number<br>Non-existent URL Custom Threshold (percentage). The percentage of non-existent requests beyond which the system will flag this user as malicious
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_app_setting.example system/example
+```

package/dist/docs/resources/app_type.md

@@ -0,0 +1,124 @@
+---
+page_title: "f5xc_app_type Resource - terraform-provider-f5xc"
+subcategory: "Applications"
+description: |-
+  [Namespace: required] Manages App type will create the configuration in namespace metadata.namespace in F5 Distributed Cloud.
+---
+
+# f5xc_app_type (Resource)
+
+[Namespace: required] Manages App type will create the configuration in namespace metadata.namespace in F5 Distributed Cloud.
+
+~> **Note** Please refer to [App Type API docs](https://docs.cloud.f5.com/docs-v2/api/app-type) to learn more.
+
+## Example Usage
+
+```terraform
+# App Type Resource Example
+# [Namespace: required] Manages App type will create the configuration in namespace metadata.namespace in F5 Distributed Cloud.
+
+# Basic App Type configuration
+resource "f5xc_app_type" "example" {
+  name      = "example-app-type"
+  namespace = "staging"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # API Discovery Settings. Settings specifying how API Disco...
+  business_logic_markup_setting {
+    # Configure business_logic_markup_setting settings
+  }
+  # Enable this option
+  disable {
+    # Configure disable settings
+  }
+  # Discovered API Settings. Configure Discovered API Settings.
+  discovered_api_settings {
+    # Configure discovered_api_settings settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the App Type. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the App Type will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+<a id="business-logic-markup-setting"></a>&#x2022; [`business_logic_markup_setting`](#business-logic-markup-setting) - Optional Block<br>API Discovery Settings. Settings specifying how API Discovery will be performed<br>See [Business Logic Markup Setting](#business-logic-markup-setting) below for details.
+
+<a id="features"></a>&#x2022; [`features`](#features) - Optional Block<br>Features. List of various AI/ML features enabled<br>See [Features](#features) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Business Logic Markup Setting
+
+A [`business_logic_markup_setting`](#business-logic-markup-setting) block supports the following:
+
+<a id="business-logic-markup-setting-disable"></a>&#x2022; [`disable`](#business-logic-markup-setting-disable) - Optional Block<br>Enable this option
+
+<a id="business-logic-markup-setting-discovered-api-settings"></a>&#x2022; [`discovered_api_settings`](#business-logic-markup-setting-discovered-api-settings) - Optional Block<br>Discovered API Settings. Configure Discovered API Settings<br>See [Discovered API Settings](#business-logic-markup-setting-discovered-api-settings) below.
+
+<a id="business-logic-markup-setting-enable"></a>&#x2022; [`enable`](#business-logic-markup-setting-enable) - Optional Block<br>Enable this option
+
+#### Business Logic Markup Setting Discovered API Settings
+
+A [`discovered_api_settings`](#business-logic-markup-setting-discovered-api-settings) block (within [`business_logic_markup_setting`](#business-logic-markup-setting)) supports the following:
+
+<a id="business-logic-markup-setting-discovered-api-settings-purge-duration-for-inactive-discovered-apis"></a>&#x2022; [`purge_duration_for_inactive_discovered_apis`](#business-logic-markup-setting-discovered-api-settings-purge-duration-for-inactive-discovered-apis) - Optional Number<br>Purge Duration for Inactive Discovered APIs from Traffic. Inactive discovered API will be deleted after configured duration
+
+#### Features
+
+A [`features`](#features) block supports the following:
+
+<a id="features-type"></a>&#x2022; [`type`](#features-type) - Optional String  Defaults to `BUSINESS_LOGIC_MARKUP`<br>Possible values are `BUSINESS_LOGIC_MARKUP`, `TIMESERIES_ANOMALY_DETECTION`, `PER_REQ_ANOMALY_DETECTION`, `USER_BEHAVIOR_ANALYSIS`<br>[Enum: BUSINESS_LOGIC_MARKUP|TIMESERIES_ANOMALY_DETECTION|PER_REQ_ANOMALY_DETECTION|USER_BEHAVIOR_ANALYSIS] AI/ML Features. Enumeration for AI/ML features supported API Discovery enables generation of model for various API interactions between services of App type. Enable analysis of timeseries for various metric collected like requests, errors, latency etc. Enable anomaly detection per API request, i.e. the probability density function (PDF) charts generation for API endpoints Enable user behavior analysis
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_app_type.example system/example
+```

package/dist/docs/resources/authentication.md

@@ -0,0 +1,228 @@
+---
+page_title: "f5xc_authentication Resource - terraform-provider-f5xc"
+subcategory: "Authentication"
+description: |-
+  [Category: Authentication] [Namespace: required] Manages a Authentication resource in F5 Distributed Cloud.
+---
+
+# f5xc_authentication (Resource)
+
+[Category: Authentication] [Namespace: required] Manages a Authentication resource in F5 Distributed Cloud.
+
+~> **Note** Please refer to [Authentication API docs](https://docs.cloud.f5.com/docs-v2/api/authentication) to learn more.
+
+## Example Usage
+
+```terraform
+# Authentication Resource Example
+# [Category: Authentication] [Namespace: required] Manages a Authentication resource in F5 Distributed Cloud.
+
+# Basic Authentication configuration
+resource "f5xc_authentication" "example" {
+  name      = "example-authentication"
+  namespace = "staging"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # Cookie Parameters. Specifies different cookie related con...
+  cookie_params {
+    # Configure cookie_params settings
+  }
+  # HMAC Key Pair. HMAC primary and secondary keys to be used...
+  auth_hmac {
+    # Configure auth_hmac settings
+  }
+  # Secret. SecretType is used in an object to indicate a sen...
+  prim_key {
+    # Configure prim_key settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Authentication. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Authentication will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+<a id="cookie-params"></a>&#x2022; [`cookie_params`](#cookie-params) - Optional Block<br>Cookie Parameters. Specifies different cookie related config parameters for authentication<br>See [Cookie Params](#cookie-params) below for details.
+
+<a id="oidc-auth"></a>&#x2022; [`oidc_auth`](#oidc-auth) - Optional Block<br>OIDCAuthType<br>See [OIDC Auth](#oidc-auth) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Cookie Params
+
+A [`cookie_params`](#cookie-params) block supports the following:
+
+<a id="cookie-params-auth-hmac"></a>&#x2022; [`auth_hmac`](#cookie-params-auth-hmac) - Optional Block<br>HMAC Key Pair. HMAC primary and secondary keys to be used for hashing the Cookie. Each key also have an associated expiry timestamp, beyond which key is invalid<br>See [Auth HMAC](#cookie-params-auth-hmac) below.
+
+<a id="cookie-params-cookie-expiry"></a>&#x2022; [`cookie_expiry`](#cookie-params-cookie-expiry) - Optional Number<br>Cookie Expiry duration. specifies in seconds max duration of the allocated cookie. This maps to “Max-Age” attribute in the session cookie. This will act as an expiry duration on the client side after which client will not be setting the cookie as part of the request. Default cookie expiry is 3600 seconds
+
+<a id="cookie-params-cookie-refresh-interval"></a>&#x2022; [`cookie_refresh_interval`](#cookie-params-cookie-refresh-interval) - Optional Number<br>Cookie Refresh Interval. Specifies in seconds refresh interval for session cookie. This is used to keep the active user active and reduce RE-login. When an incoming cookie's session expiry is still valid, and time to expire falls behind this interval, RE-issue a cookie with new expiry and with the same original session expiry. Default refresh interval is 3000 seconds
+
+<a id="cookie-params-kms-key-hmac"></a>&#x2022; [`kms_key_hmac`](#cookie-params-kms-key-hmac) - Optional Block<br>KMS Key Reference. Reference to KMS Key Object
+
+<a id="cookie-params-session-expiry"></a>&#x2022; [`session_expiry`](#cookie-params-session-expiry) - Optional Number<br>Session Expiry duration. specifies in seconds max lifetime of an authenticated session after which the user will be forced to login again. Default session expiry is 86400 seconds(24 hours)
+
+#### Cookie Params Auth HMAC
+
+An [`auth_hmac`](#cookie-params-auth-hmac) block (within [`cookie_params`](#cookie-params)) supports the following:
+
+<a id="cookie-params-auth-hmac-prim-key"></a>&#x2022; [`prim_key`](#cookie-params-auth-hmac-prim-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Prim Key](#cookie-params-auth-hmac-prim-key) below.
+
+<a id="cookie-params-auth-hmac-prim-key-expiry"></a>&#x2022; [`prim_key_expiry`](#cookie-params-auth-hmac-prim-key-expiry) - Optional String<br>HMAC Primary Key Expiry. Primary HMAC Key Expiry time
+
+<a id="cookie-params-auth-hmac-sec-key"></a>&#x2022; [`sec_key`](#cookie-params-auth-hmac-sec-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Sec Key](#cookie-params-auth-hmac-sec-key) below.
+
+<a id="cookie-params-auth-hmac-sec-key-expiry"></a>&#x2022; [`sec_key_expiry`](#cookie-params-auth-hmac-sec-key-expiry) - Optional String<br>HMAC Secondary Key Expiry. Secondary HMAC Key Expiry time
+
+#### Cookie Params Auth HMAC Prim Key
+
+A [`prim_key`](#cookie-params-auth-hmac-prim-key) block (within [`cookie_params.auth_hmac`](#cookie-params-auth-hmac)) supports the following:
+
+<a id="cookie-params-auth-hmac-prim-key-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#cookie-params-auth-hmac-prim-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#cookie-params-auth-hmac-prim-key-blindfold-secret-info) below.
+
+<a id="cookie-params-auth-hmac-prim-key-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#cookie-params-auth-hmac-prim-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#cookie-params-auth-hmac-prim-key-clear-secret-info) below.
+
+#### Cookie Params Auth HMAC Prim Key Blindfold Secret Info
+
+A [`blindfold_secret_info`](#cookie-params-auth-hmac-prim-key-blindfold-secret-info) block (within [`cookie_params.auth_hmac.prim_key`](#cookie-params-auth-hmac-prim-key)) supports the following:
+
+<a id="cookie-params-auth-hmac-prim-key-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#cookie-params-auth-hmac-prim-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="cookie-params-auth-hmac-prim-key-blindfold-secret-info-location"></a>&#x2022; [`location`](#cookie-params-auth-hmac-prim-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="cookie-params-auth-hmac-prim-key-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#cookie-params-auth-hmac-prim-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Cookie Params Auth HMAC Prim Key Clear Secret Info
+
+A [`clear_secret_info`](#cookie-params-auth-hmac-prim-key-clear-secret-info) block (within [`cookie_params.auth_hmac.prim_key`](#cookie-params-auth-hmac-prim-key)) supports the following:
+
+<a id="cookie-params-auth-hmac-prim-key-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#cookie-params-auth-hmac-prim-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="cookie-params-auth-hmac-prim-key-clear-secret-info-url"></a>&#x2022; [`url`](#cookie-params-auth-hmac-prim-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Cookie Params Auth HMAC Sec Key
+
+A [`sec_key`](#cookie-params-auth-hmac-sec-key) block (within [`cookie_params.auth_hmac`](#cookie-params-auth-hmac)) supports the following:
+
+<a id="cookie-params-auth-hmac-sec-key-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#cookie-params-auth-hmac-sec-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#cookie-params-auth-hmac-sec-key-blindfold-secret-info) below.
+
+<a id="cookie-params-auth-hmac-sec-key-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#cookie-params-auth-hmac-sec-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#cookie-params-auth-hmac-sec-key-clear-secret-info) below.
+
+#### Cookie Params Auth HMAC Sec Key Blindfold Secret Info
+
+A [`blindfold_secret_info`](#cookie-params-auth-hmac-sec-key-blindfold-secret-info) block (within [`cookie_params.auth_hmac.sec_key`](#cookie-params-auth-hmac-sec-key)) supports the following:
+
+<a id="cookie-params-auth-hmac-sec-key-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#cookie-params-auth-hmac-sec-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="cookie-params-auth-hmac-sec-key-blindfold-secret-info-location"></a>&#x2022; [`location`](#cookie-params-auth-hmac-sec-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="cookie-params-auth-hmac-sec-key-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#cookie-params-auth-hmac-sec-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Cookie Params Auth HMAC Sec Key Clear Secret Info
+
+A [`clear_secret_info`](#cookie-params-auth-hmac-sec-key-clear-secret-info) block (within [`cookie_params.auth_hmac.sec_key`](#cookie-params-auth-hmac-sec-key)) supports the following:
+
+<a id="cookie-params-auth-hmac-sec-key-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#cookie-params-auth-hmac-sec-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="cookie-params-auth-hmac-sec-key-clear-secret-info-url"></a>&#x2022; [`url`](#cookie-params-auth-hmac-sec-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### OIDC Auth
+
+An [`oidc_auth`](#oidc-auth) block supports the following:
+
+<a id="oidc-auth-client-secret"></a>&#x2022; [`client_secret`](#oidc-auth-client-secret) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Client Secret](#oidc-auth-client-secret) below.
+
+<a id="oidc-auth-oidc-auth-params"></a>&#x2022; [`oidc_auth_params`](#oidc-auth-oidc-auth-params) - Optional Block<br>OIDCAuthParams<br>See [OIDC Auth Params](#oidc-auth-oidc-auth-params) below.
+
+<a id="oidc-auth-oidc-client-id"></a>&#x2022; [`oidc_client_id`](#oidc-auth-oidc-client-id) - Optional String<br>OIDC Client ID. Client ID used while sending the Authorization Request to OIDC server
+
+<a id="oidc-auth-oidc-well-known-config-url"></a>&#x2022; [`oidc_well_known_config_url`](#oidc-auth-oidc-well-known-config-url) - Optional String<br>Well-known Configuration URL. An OIDC well-known configuration URL that will be used to fetch authentication related endpoints
+
+#### OIDC Auth Client Secret
+
+A [`client_secret`](#oidc-auth-client-secret) block (within [`oidc_auth`](#oidc-auth)) supports the following:
+
+<a id="oidc-auth-client-secret-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#oidc-auth-client-secret-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#oidc-auth-client-secret-blindfold-secret-info) below.
+
+<a id="oidc-auth-client-secret-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#oidc-auth-client-secret-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#oidc-auth-client-secret-clear-secret-info) below.
+
+#### OIDC Auth Client Secret Blindfold Secret Info
+
+A [`blindfold_secret_info`](#oidc-auth-client-secret-blindfold-secret-info) block (within [`oidc_auth.client_secret`](#oidc-auth-client-secret)) supports the following:
+
+<a id="oidc-auth-client-secret-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#oidc-auth-client-secret-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="oidc-auth-client-secret-blindfold-secret-info-location"></a>&#x2022; [`location`](#oidc-auth-client-secret-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="oidc-auth-client-secret-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#oidc-auth-client-secret-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### OIDC Auth Client Secret Clear Secret Info
+
+A [`clear_secret_info`](#oidc-auth-client-secret-clear-secret-info) block (within [`oidc_auth.client_secret`](#oidc-auth-client-secret)) supports the following:
+
+<a id="oidc-auth-client-secret-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#oidc-auth-client-secret-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="oidc-auth-client-secret-clear-secret-info-url"></a>&#x2022; [`url`](#oidc-auth-client-secret-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### OIDC Auth OIDC Auth Params
+
+An [`oidc_auth_params`](#oidc-auth-oidc-auth-params) block (within [`oidc_auth`](#oidc-auth)) supports the following:
+
+<a id="oidc-auth-oidc-auth-params-auth-endpoint-url"></a>&#x2022; [`auth_endpoint_url`](#oidc-auth-oidc-auth-params-auth-endpoint-url) - Optional String<br>Authorization Endpoint. URL of the authorization server's authorization endpoint
+
+<a id="oidc-auth-oidc-auth-params-end-session-endpoint-url"></a>&#x2022; [`end_session_endpoint_url`](#oidc-auth-oidc-auth-params-end-session-endpoint-url) - Optional String<br>Logout Endpoint. URL of the authorization server's Logout endpoint
+
+<a id="oidc-auth-oidc-auth-params-token-endpoint-url"></a>&#x2022; [`token_endpoint_url`](#oidc-auth-oidc-auth-params-token-endpoint-url) - Optional String<br>Token Endpoint. URL of the authorization server's Token endpoint
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_authentication.example system/example
+```