@robinmordasiewicz/f5xc-terraform-mcp 2.3.0 → 2.4.4

package/dist/docs/resources/k8s_pod_security_admission.md

@@ -0,0 +1,116 @@
+---
+page_title: "f5xc_k8s_pod_security_admission Resource - terraform-provider-f5xc"
+subcategory: "Kubernetes"
+description: |-
+  [Namespace: required] Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
+---
+
+# f5xc_k8s_pod_security_admission (Resource)
+
+[Namespace: required] Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
+
+~> **Note** Please refer to [K8S Pod Security Admission API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-pod-security-admission) to learn more.
+
+## Example Usage
+
+```terraform
+# K8S Pod Security Admission Resource Example
+# [Namespace: required] Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
+
+# Basic K8S Pod Security Admission configuration
+resource "f5xc_k8s_pod_security_admission" "example" {
+  name      = "example-k8s-pod-security-admission"
+  namespace = "staging"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # K8s Pod Security Admission.
+  pod_security_admission_specs {
+    # Configure pod_security_admission_specs settings
+  }
+  # Enable this option
+  audit {
+    # Configure audit settings
+  }
+  # Enable this option
+  baseline {
+    # Configure baseline settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the K8S Pod Security Admission. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the K8S Pod Security Admission will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+<a id="pod-security-admission-specs"></a>&#x2022; [`pod_security_admission_specs`](#pod-security-admission-specs) - Optional Block<br>K8S Pod Security Admission<br>See [Pod Security Admission Specs](#pod-security-admission-specs) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Pod Security Admission Specs
+
+A [`pod_security_admission_specs`](#pod-security-admission-specs) block supports the following:
+
+<a id="pod-security-admission-specs-audit"></a>&#x2022; [`audit`](#pod-security-admission-specs-audit) - Optional Block<br>Enable this option
+
+<a id="pod-security-admission-specs-baseline"></a>&#x2022; [`baseline`](#pod-security-admission-specs-baseline) - Optional Block<br>Enable this option
+
+<a id="pod-security-admission-specs-enforce"></a>&#x2022; [`enforce`](#pod-security-admission-specs-enforce) - Optional Block<br>Enable this option
+
+<a id="pod-security-admission-specs-privileged"></a>&#x2022; [`privileged`](#pod-security-admission-specs-privileged) - Optional Block<br>Enable this option
+
+<a id="pod-security-admission-specs-restricted"></a>&#x2022; [`restricted`](#pod-security-admission-specs-restricted) - Optional Block<br>Enable this option
+
+<a id="pod-security-admission-specs-warn"></a>&#x2022; [`warn`](#pod-security-admission-specs-warn) - Optional Block<br>Enable this option
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_k8s_pod_security_admission.example system/example
+```

package/dist/docs/resources/k8s_pod_security_policy.md

@@ -0,0 +1,258 @@
+---
+page_title: "f5xc_k8s_pod_security_policy Resource - terraform-provider-f5xc"
+subcategory: "Security"
+description: |-
+  [Category: Kubernetes] [Namespace: required] Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+---
+
+# f5xc_k8s_pod_security_policy (Resource)
+
+[Category: Kubernetes] [Namespace: required] Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+~> **Note** Please refer to [K8S Pod Security Policy API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-pod-security-policy) to learn more.
+
+## Example Usage
+
+```terraform
+# K8S Pod Security Policy Resource Example
+# [Category: Kubernetes] [Namespace: required] Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
+
+# Basic K8S Pod Security Policy configuration
+resource "f5xc_k8s_pod_security_policy" "example" {
+  name      = "example-k8s-pod-security-policy"
+  namespace = "staging"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # [OneOf: psp_spec, yaml] Pod Security Policy Specification...
+  psp_spec {
+    # Configure psp_spec settings
+  }
+  # Capability List. List of capabilities that docker contain...
+  allowed_capabilities {
+    # Configure allowed_capabilities settings
+  }
+  # Allowed Host Paths. Restrict list of host paths, default ...
+  allowed_host_paths {
+    # Configure allowed_host_paths settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the K8S Pod Security Policy. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the K8S Pod Security Policy will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="psp-spec"></a>[`psp_spec`](#psp-spec) - Optional Block<br>Pod Security Policy Specification. Form based pod security specification<br>See [Psp Spec](#psp-spec) below for details.
+<br><br>&#x2022; <a id="yaml"></a>[`yaml`](#yaml) - Optional String<br>K8S YAML. K8S YAML for Pod Security Policy
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Psp Spec
+
+A [`psp_spec`](#psp-spec) block supports the following:
+
+<a id="psp-spec-allow-privilege-escalation"></a>&#x2022; [`allow_privilege_escalation`](#psp-spec-allow-privilege-escalation) - Optional Bool<br>Allow Privilege Escalation. Pod can request to privilege escalation
+
+<a id="psp-spec-allowed-capabilities"></a>&#x2022; [`allowed_capabilities`](#psp-spec-allowed-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Allowed Capabilities](#psp-spec-allowed-capabilities) below.
+
+<a id="psp-spec-allowed-csi-drivers"></a>&#x2022; [`allowed_csi_drivers`](#psp-spec-allowed-csi-drivers) - Optional List<br>Allowed CSI drivers. Restrict the available CSI drivers for POD, default all drivers are available
+
+<a id="psp-spec-allowed-flex-volumes"></a>&#x2022; [`allowed_flex_volumes`](#psp-spec-allowed-flex-volumes) - Optional List<br>Allowed Flex Volumes. Restrict list of Flex volumes, default all volumes are allowed
+
+<a id="psp-spec-allowed-host-paths"></a>&#x2022; [`allowed_host_paths`](#psp-spec-allowed-host-paths) - Optional Block<br>Allowed Host Paths. Restrict list of host paths, default all host paths are allowed<br>See [Allowed Host Paths](#psp-spec-allowed-host-paths) below.
+
+<a id="psp-spec-allowed-proc-mounts"></a>&#x2022; [`allowed_proc_mounts`](#psp-spec-allowed-proc-mounts) - Optional List<br>Allowed Proc Mounts. allowed list of proc mounts, empty list allows default proc mounts
+
+<a id="psp-spec-allowed-unsafe-sysctls"></a>&#x2022; [`allowed_unsafe_sysctls`](#psp-spec-allowed-unsafe-sysctls) - Optional List<br>Allowed Unsafe Sysctls. allowed list of unsafe sysctls, empty list allows none. supports prefix reg-ex
+
+<a id="psp-spec-default-allow-privilege-escalation"></a>&#x2022; [`default_allow_privilege_escalation`](#psp-spec-default-allow-privilege-escalation) - Optional Bool<br>Default Allow Privilege Escalation. Pod has permission for privilege escalation by default
+
+<a id="psp-spec-default-capabilities"></a>&#x2022; [`default_capabilities`](#psp-spec-default-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Default Capabilities](#psp-spec-default-capabilities) below.
+
+<a id="psp-spec-drop-capabilities"></a>&#x2022; [`drop_capabilities`](#psp-spec-drop-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Drop Capabilities](#psp-spec-drop-capabilities) below.
+
+<a id="psp-spec-forbidden-sysctls"></a>&#x2022; [`forbidden_sysctls`](#psp-spec-forbidden-sysctls) - Optional List<br>Forbidden Sysctls. Forbidden list of sysctls, empty list forbids none. supports prefix reg-ex
+
+<a id="psp-spec-fs-group-strategy-options"></a>&#x2022; [`fs_group_strategy_options`](#psp-spec-fs-group-strategy-options) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Fs Group Strategy Options](#psp-spec-fs-group-strategy-options) below.
+
+<a id="psp-spec-host-ipc"></a>&#x2022; [`host_ipc`](#psp-spec-host-ipc) - Optional Bool<br>Host IPC. Host IPC determines if the policy allows the use of host IPC in the pod spec
+
+<a id="psp-spec-host-network"></a>&#x2022; [`host_network`](#psp-spec-host-network) - Optional Bool<br>Host Network. Host Network determines if the policy allows the use of host network in the pod spec
+
+<a id="psp-spec-host-pid"></a>&#x2022; [`host_pid`](#psp-spec-host-pid) - Optional Bool<br>Host PID. Host PID determines if the policy allows the use of host PID in the pod spec
+
+<a id="psp-spec-host-port-ranges"></a>&#x2022; [`host_port_ranges`](#psp-spec-host-port-ranges) - Optional String<br>Host Ports Ranges. Host port ranges determines which ports ranges are allowed to be exposed
+
+<a id="psp-spec-no-allowed-capabilities"></a>&#x2022; [`no_allowed_capabilities`](#psp-spec-no-allowed-capabilities) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-default-capabilities"></a>&#x2022; [`no_default_capabilities`](#psp-spec-no-default-capabilities) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-drop-capabilities"></a>&#x2022; [`no_drop_capabilities`](#psp-spec-no-drop-capabilities) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-fs-groups"></a>&#x2022; [`no_fs_groups`](#psp-spec-no-fs-groups) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-run-as-group"></a>&#x2022; [`no_run_as_group`](#psp-spec-no-run-as-group) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-run-as-user"></a>&#x2022; [`no_run_as_user`](#psp-spec-no-run-as-user) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-runtime-class"></a>&#x2022; [`no_runtime_class`](#psp-spec-no-runtime-class) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-se-linux-options"></a>&#x2022; [`no_se_linux_options`](#psp-spec-no-se-linux-options) - Optional Block<br>Enable this option
+
+<a id="psp-spec-no-supplemental-groups"></a>&#x2022; [`no_supplemental_groups`](#psp-spec-no-supplemental-groups) - Optional Block<br>Enable this option
+
+<a id="psp-spec-privileged"></a>&#x2022; [`privileged`](#psp-spec-privileged) - Optional Bool<br>Privileged. Privileged determines if a pod can request to be run as privileged
+
+<a id="psp-spec-read-only-root-filesystem"></a>&#x2022; [`read_only_root_filesystem`](#psp-spec-read-only-root-filesystem) - Optional Bool<br>Read Only Root Filesystem. Containers can only run with read only root filesystem
+
+<a id="psp-spec-run-as-group"></a>&#x2022; [`run_as_group`](#psp-spec-run-as-group) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Run As Group](#psp-spec-run-as-group) below.
+
+<a id="psp-spec-run-as-user"></a>&#x2022; [`run_as_user`](#psp-spec-run-as-user) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Run As User](#psp-spec-run-as-user) below.
+
+<a id="psp-spec-supplemental-groups"></a>&#x2022; [`supplemental_groups`](#psp-spec-supplemental-groups) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Supplemental Groups](#psp-spec-supplemental-groups) below.
+
+<a id="psp-spec-volumes"></a>&#x2022; [`volumes`](#psp-spec-volumes) - Optional List<br>Volume. Allow List of volume plugins. Empty no volumes are allowed
+
+#### Psp Spec Allowed Capabilities
+
+An [`allowed_capabilities`](#psp-spec-allowed-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-allowed-capabilities-capabilities"></a>&#x2022; [`capabilities`](#psp-spec-allowed-capabilities-capabilities) - Optional List<br>Capability List. List of capabilities that docker container has
+
+#### Psp Spec Allowed Host Paths
+
+An [`allowed_host_paths`](#psp-spec-allowed-host-paths) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-allowed-host-paths-path-prefix"></a>&#x2022; [`path_prefix`](#psp-spec-allowed-host-paths-path-prefix) - Optional String<br>Host Path Prefix. Host path prefix is the path prefix that the host volume must match. It does not support \*
+
+<a id="psp-spec-allowed-host-paths-read-only"></a>&#x2022; [`read_only`](#psp-spec-allowed-host-paths-read-only) - Optional Bool<br>Read Only. This volume will be allowed to mount read only
+
+#### Psp Spec Default Capabilities
+
+A [`default_capabilities`](#psp-spec-default-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-default-capabilities-capabilities"></a>&#x2022; [`capabilities`](#psp-spec-default-capabilities-capabilities) - Optional List<br>Capability List. List of capabilities that docker container has
+
+#### Psp Spec Drop Capabilities
+
+A [`drop_capabilities`](#psp-spec-drop-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-drop-capabilities-capabilities"></a>&#x2022; [`capabilities`](#psp-spec-drop-capabilities-capabilities) - Optional List<br>Capability List. List of capabilities that docker container has
+
+#### Psp Spec Fs Group Strategy Options
+
+A [`fs_group_strategy_options`](#psp-spec-fs-group-strategy-options) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-fs-group-strategy-options-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-fs-group-strategy-options-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-fs-group-strategy-options-id-ranges) below.
+
+<a id="psp-spec-fs-group-strategy-options-rule"></a>&#x2022; [`rule`](#psp-spec-fs-group-strategy-options-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
+
+#### Psp Spec Fs Group Strategy Options ID Ranges
+
+An [`id_ranges`](#psp-spec-fs-group-strategy-options-id-ranges) block (within [`psp_spec.fs_group_strategy_options`](#psp-spec-fs-group-strategy-options)) supports the following:
+
+<a id="psp-spec-fs-group-strategy-options-id-ranges-max-id"></a>&#x2022; [`max_id`](#psp-spec-fs-group-strategy-options-id-ranges-max-id) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
+
+<a id="psp-spec-fs-group-strategy-options-id-ranges-min-id"></a>&#x2022; [`min_id`](#psp-spec-fs-group-strategy-options-id-ranges-min-id) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
+
+#### Psp Spec Run As Group
+
+A [`run_as_group`](#psp-spec-run-as-group) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-run-as-group-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-run-as-group-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-run-as-group-id-ranges) below.
+
+<a id="psp-spec-run-as-group-rule"></a>&#x2022; [`rule`](#psp-spec-run-as-group-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
+
+#### Psp Spec Run As Group ID Ranges
+
+An [`id_ranges`](#psp-spec-run-as-group-id-ranges) block (within [`psp_spec.run_as_group`](#psp-spec-run-as-group)) supports the following:
+
+<a id="psp-spec-run-as-group-id-ranges-max-id"></a>&#x2022; [`max_id`](#psp-spec-run-as-group-id-ranges-max-id) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
+
+<a id="psp-spec-run-as-group-id-ranges-min-id"></a>&#x2022; [`min_id`](#psp-spec-run-as-group-id-ranges-min-id) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
+
+#### Psp Spec Run As User
+
+A [`run_as_user`](#psp-spec-run-as-user) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-run-as-user-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-run-as-user-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-run-as-user-id-ranges) below.
+
+<a id="psp-spec-run-as-user-rule"></a>&#x2022; [`rule`](#psp-spec-run-as-user-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
+
+#### Psp Spec Run As User ID Ranges
+
+An [`id_ranges`](#psp-spec-run-as-user-id-ranges) block (within [`psp_spec.run_as_user`](#psp-spec-run-as-user)) supports the following:
+
+<a id="psp-spec-run-as-user-id-ranges-max-id"></a>&#x2022; [`max_id`](#psp-spec-run-as-user-id-ranges-max-id) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
+
+<a id="psp-spec-run-as-user-id-ranges-min-id"></a>&#x2022; [`min_id`](#psp-spec-run-as-user-id-ranges-min-id) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
+
+#### Psp Spec Supplemental Groups
+
+A [`supplemental_groups`](#psp-spec-supplemental-groups) block (within [`psp_spec`](#psp-spec)) supports the following:
+
+<a id="psp-spec-supplemental-groups-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-supplemental-groups-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-supplemental-groups-id-ranges) below.
+
+<a id="psp-spec-supplemental-groups-rule"></a>&#x2022; [`rule`](#psp-spec-supplemental-groups-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
+
+#### Psp Spec Supplemental Groups ID Ranges
+
+An [`id_ranges`](#psp-spec-supplemental-groups-id-ranges) block (within [`psp_spec.supplemental_groups`](#psp-spec-supplemental-groups)) supports the following:
+
+<a id="psp-spec-supplemental-groups-id-ranges-max-id"></a>&#x2022; [`max_id`](#psp-spec-supplemental-groups-id-ranges-max-id) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
+
+<a id="psp-spec-supplemental-groups-id-ranges-min-id"></a>&#x2022; [`min_id`](#psp-spec-supplemental-groups-id-ranges-min-id) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_k8s_pod_security_policy.example system/example
+```

package/dist/docs/resources/log_receiver.md

@@ -0,0 +1,183 @@
+---
+page_title: "f5xc_log_receiver Resource - terraform-provider-f5xc"
+subcategory: "Monitoring"
+description: |-
+  [Category: Monitoring] [Namespace: required] Manages a Log Receiver resource in F5 Distributed Cloud for log collection and forwarding configuration.
+---
+
+# f5xc_log_receiver (Resource)
+
+[Category: Monitoring] [Namespace: required] Manages a Log Receiver resource in F5 Distributed Cloud for log collection and forwarding configuration.
+
+~> **Note** Please refer to [Log Receiver API docs](https://docs.cloud.f5.com/docs-v2/api/log-receiver) to learn more.
+
+## Example Usage
+
+```terraform
+# Log Receiver Resource Example
+# [Category: Monitoring] [Namespace: required] Manages a Log Receiver resource in F5 Distributed Cloud for log collection and forwarding configuration.
+
+# Basic Log Receiver configuration
+resource "f5xc_log_receiver" "example" {
+  name      = "example-log-receiver"
+  namespace = "shared"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Log Receiver configuration
+  # HTTP receiver example
+  http_receiver {
+    uri = "`https://logs.example.com/ingest"`
+    batch {
+      max_bytes       = 1048576
+      max_events      = 100
+      timeout_seconds = 5
+    }
+    no_tls_verify_hostname {}
+    no_compression {}
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Log Receiver. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Log Receiver will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+<a id="site-local"></a>&#x2022; [`site_local`](#site-local) - Optional Block<br>Enable this option
+
+<a id="syslog"></a>&#x2022; [`syslog`](#syslog) - Optional Block<br>Syslog Server Configuration. Configuration for syslog server<br>See [Syslog](#syslog) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### Syslog
+
+A [`syslog`](#syslog) block supports the following:
+
+<a id="syslog-syslog-rfc5424"></a>&#x2022; [`syslog_rfc5424`](#syslog-syslog-rfc5424) - Optional Number<br>Syslog RFC5424 Format. Select RFC5424 syslog format and maximum message length
+
+<a id="syslog-tcp-server"></a>&#x2022; [`tcp_server`](#syslog-tcp-server) - Optional Block<br>TCP Server name and Port Number. Name and port number for a TCP server<br>See [TCP Server](#syslog-tcp-server) below.
+
+<a id="syslog-tls-server"></a>&#x2022; [`tls_server`](#syslog-tls-server) - Optional Block<br>Client TLS Config. TLS config for client of discovery service<br>See [TLS Server](#syslog-tls-server) below.
+
+<a id="syslog-udp-server"></a>&#x2022; [`udp_server`](#syslog-udp-server) - Optional Block<br>UDP Server Name and Port Number. Name and port number for a UDP server<br>See [UDP Server](#syslog-udp-server) below.
+
+#### Syslog TCP Server
+
+A [`tcp_server`](#syslog-tcp-server) block (within [`syslog`](#syslog)) supports the following:
+
+<a id="syslog-tcp-server-port"></a>&#x2022; [`port`](#syslog-tcp-server-port) - Optional Number<br>Port Number. Port number used for communication
+
+<a id="syslog-tcp-server-server-name"></a>&#x2022; [`server_name`](#syslog-tcp-server-server-name) - Optional String<br>Server name. Server name is fully qualified domain name or IP address of the server
+
+#### Syslog TLS Server
+
+A [`tls_server`](#syslog-tls-server) block (within [`syslog`](#syslog)) supports the following:
+
+<a id="syslog-tls-server-default-https-port"></a>&#x2022; [`default_https_port`](#syslog-tls-server-default-https-port) - Optional Block<br>Enable this option
+
+<a id="syslog-tls-server-default-syslog-tls-port"></a>&#x2022; [`default_syslog_tls_port`](#syslog-tls-server-default-syslog-tls-port) - Optional Block<br>Enable this option
+
+<a id="syslog-tls-server-mtls-disabled"></a>&#x2022; [`mtls_disabled`](#syslog-tls-server-mtls-disabled) - Optional Block<br>Enable this option
+
+<a id="syslog-tls-server-mtls-enable"></a>&#x2022; [`mtls_enable`](#syslog-tls-server-mtls-enable) - Optional Block<br>mTLS Client Config. TLS config for client<br>See [mTLS Enable](#syslog-tls-server-mtls-enable) below.
+
+<a id="syslog-tls-server-port"></a>&#x2022; [`port`](#syslog-tls-server-port) - Optional Number<br>TCP Port Number. Custom port number used for communication
+
+<a id="syslog-tls-server-server-name"></a>&#x2022; [`server_name`](#syslog-tls-server-server-name) - Optional String<br>SNI name. ServerName is passed to the server for SNI and is used in the client to check server certificates against
+
+<a id="syslog-tls-server-trusted-ca-url"></a>&#x2022; [`trusted_ca_url`](#syslog-tls-server-trusted-ca-url) - Optional String<br>Server CA Certificates. The URL or value for trusted Server CA certificate or certificate chain Certificates in PEM format including the PEM headers
+
+<a id="syslog-tls-server-volterra-ca"></a>&#x2022; [`volterra_ca`](#syslog-tls-server-volterra-ca) - Optional Block<br>Enable this option
+
+#### Syslog TLS Server mTLS Enable
+
+A [`mtls_enable`](#syslog-tls-server-mtls-enable) block (within [`syslog.tls_server`](#syslog-tls-server)) supports the following:
+
+<a id="syslog-tls-server-mtls-enable-certificate"></a>&#x2022; [`certificate`](#syslog-tls-server-mtls-enable-certificate) - Optional String<br>Client Certificate. Client certificate is PEM-encoded certificate or certificate-chain
+
+<a id="syslog-tls-server-mtls-enable-key-url"></a>&#x2022; [`key_url`](#syslog-tls-server-mtls-enable-key-url) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Key URL](#syslog-tls-server-mtls-enable-key-url) below.
+
+#### Syslog TLS Server mTLS Enable Key URL
+
+A [`key_url`](#syslog-tls-server-mtls-enable-key-url) block (within [`syslog.tls_server.mtls_enable`](#syslog-tls-server-mtls-enable)) supports the following:
+
+<a id="syslog-tls-server-mtls-enable-key-url-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#syslog-tls-server-mtls-enable-key-url-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#syslog-tls-server-mtls-enable-key-url-blindfold-secret-info) below.
+
+<a id="syslog-tls-server-mtls-enable-key-url-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#syslog-tls-server-mtls-enable-key-url-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#syslog-tls-server-mtls-enable-key-url-clear-secret-info) below.
+
+#### Syslog TLS Server mTLS Enable Key URL Blindfold Secret Info
+
+A [`blindfold_secret_info`](#syslog-tls-server-mtls-enable-key-url-blindfold-secret-info) block (within [`syslog.tls_server.mtls_enable.key_url`](#syslog-tls-server-mtls-enable-key-url)) supports the following:
+
+<a id="syslog-tls-server-mtls-enable-key-url-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#syslog-tls-server-mtls-enable-key-url-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="syslog-tls-server-mtls-enable-key-url-blindfold-secret-info-location"></a>&#x2022; [`location`](#syslog-tls-server-mtls-enable-key-url-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="syslog-tls-server-mtls-enable-key-url-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#syslog-tls-server-mtls-enable-key-url-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Syslog TLS Server mTLS Enable Key URL Clear Secret Info
+
+A [`clear_secret_info`](#syslog-tls-server-mtls-enable-key-url-clear-secret-info) block (within [`syslog.tls_server.mtls_enable.key_url`](#syslog-tls-server-mtls-enable-key-url)) supports the following:
+
+<a id="syslog-tls-server-mtls-enable-key-url-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#syslog-tls-server-mtls-enable-key-url-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="syslog-tls-server-mtls-enable-key-url-clear-secret-info-url"></a>&#x2022; [`url`](#syslog-tls-server-mtls-enable-key-url-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Syslog UDP Server
+
+An [`udp_server`](#syslog-udp-server) block (within [`syslog`](#syslog)) supports the following:
+
+<a id="syslog-udp-server-port"></a>&#x2022; [`port`](#syslog-udp-server-port) - Optional Number<br>Port Number. Port number used for communication
+
+<a id="syslog-udp-server-server-name"></a>&#x2022; [`server_name`](#syslog-udp-server-server-name) - Optional String<br>Server name. Server name is fully qualified domain name or IP address of the server
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_log_receiver.example system/example
+```