@robinmordasiewicz/f5xc-terraform-mcp 2.4.5 → 2.4.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/resources/addon_subscription.md +5 -5
- package/dist/docs/resources/address_allocator.md +3 -3
- package/dist/docs/resources/advertise_policy.md +39 -39
- package/dist/docs/resources/alert_policy.md +6 -6
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +9 -9
- package/dist/docs/resources/api_testing.md +40 -40
- package/dist/docs/resources/apm.md +320 -320
- package/dist/docs/resources/app_api_group.md +10 -10
- package/dist/docs/resources/app_firewall.md +36 -36
- package/dist/docs/resources/app_setting.md +46 -46
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/authentication.md +30 -30
- package/dist/docs/resources/aws_tgw_site.md +184 -184
- package/dist/docs/resources/aws_vpc_site.md +296 -296
- package/dist/docs/resources/azure_vnet_site.md +677 -677
- package/dist/docs/resources/bgp.md +20 -20
- package/dist/docs/resources/bgp_routing_policy.md +4 -4
- package/dist/docs/resources/cdn_cache_rule.md +68 -68
- package/dist/docs/resources/cdn_loadbalancer.md +1166 -1166
- package/dist/docs/resources/certificate.md +4 -4
- package/dist/docs/resources/cloud_connect.md +35 -35
- package/dist/docs/resources/cloud_credentials.md +37 -37
- package/dist/docs/resources/cloud_link.md +16 -16
- package/dist/docs/resources/cluster.md +68 -68
- package/dist/docs/resources/cminstance.md +6 -6
- package/dist/docs/resources/code_base_integration.md +82 -82
- package/dist/docs/resources/container_registry.md +2 -2
- package/dist/docs/resources/data_type.md +12 -12
- package/dist/docs/resources/discovery.md +71 -71
- package/dist/docs/resources/dns_lb_health_check.md +5 -5
- package/dist/docs/resources/dns_load_balancer.md +25 -25
- package/dist/docs/resources/dns_zone.md +144 -144
- package/dist/docs/resources/endpoint.md +1 -1
- package/dist/docs/resources/enhanced_firewall_policy.md +33 -33
- package/dist/docs/resources/external_connector.md +32 -32
- package/dist/docs/resources/fast_acl.md +59 -59
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/filter_set.md +3 -3
- package/dist/docs/resources/fleet.md +359 -359
- package/dist/docs/resources/forward_proxy_policy.md +18 -18
- package/dist/docs/resources/gcp_vpc_site.md +280 -280
- package/dist/docs/resources/geo_location_set.md +1 -1
- package/dist/docs/resources/global_log_receiver.md +216 -216
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +2190 -2190
- package/dist/docs/resources/infraprotect_tunnel.md +9 -9
- package/dist/docs/resources/k8s_cluster.md +39 -39
- package/dist/docs/resources/k8s_cluster_role.md +10 -10
- package/dist/docs/resources/k8s_pod_security_policy.md +9 -9
- package/dist/docs/resources/log_receiver.md +11 -11
- package/dist/docs/resources/malicious_user_mitigation.md +4 -4
- package/dist/docs/resources/nat_policy.md +22 -22
- package/dist/docs/resources/network_connector.md +37 -37
- package/dist/docs/resources/network_firewall.md +15 -15
- package/dist/docs/resources/network_interface.md +78 -78
- package/dist/docs/resources/network_policy.md +21 -21
- package/dist/docs/resources/network_policy_view.md +7 -7
- package/dist/docs/resources/nfv_service.md +306 -306
- package/dist/docs/resources/oidc_provider.md +1 -1
- package/dist/docs/resources/origin_pool.md +151 -151
- package/dist/docs/resources/policy_based_routing.md +71 -71
- package/dist/docs/resources/protocol_inspection.md +8 -8
- package/dist/docs/resources/proxy.md +401 -401
- package/dist/docs/resources/rate_limiter_policy.md +4 -4
- package/dist/docs/resources/registration.md +1 -1
- package/dist/docs/resources/route.md +155 -155
- package/dist/docs/resources/secret_management_access.md +103 -103
- package/dist/docs/resources/secret_policy.md +7 -7
- package/dist/docs/resources/securemesh_site.md +274 -274
- package/dist/docs/resources/securemesh_site_v2.md +940 -940
- package/dist/docs/resources/sensitive_data_policy.md +3 -3
- package/dist/docs/resources/service_policy.md +154 -154
- package/dist/docs/resources/service_policy_rule.md +51 -51
- package/dist/docs/resources/subnet.md +7 -7
- package/dist/docs/resources/tcp_loadbalancer.md +138 -138
- package/dist/docs/resources/tenant_configuration.md +1 -1
- package/dist/docs/resources/ticket_tracking_system.md +2 -2
- package/dist/docs/resources/tunnel.md +16 -16
- package/dist/docs/resources/udp_loadbalancer.md +56 -56
- package/dist/docs/resources/virtual_host.md +146 -146
- package/dist/docs/resources/virtual_network.md +7 -7
- package/dist/docs/resources/voltshare_admin_policy.md +22 -22
- package/dist/docs/resources/voltstack_site.md +778 -778
- package/dist/docs/resources/waf_exclusion_policy.md +22 -22
- package/dist/docs/resources/workload.md +2226 -2226
- package/package.json +1 -1
|
@@ -111,89 +111,89 @@ A [`discovery_consul`](#discovery-consul) block supports the following:
|
|
|
111
111
|
|
|
112
112
|
An [`access_info`](#discovery-consul-access-info) block (within [`discovery_consul`](#discovery-consul)) supports the following:
|
|
113
113
|
|
|
114
|
-
<a id="
|
|
114
|
+
<a id="info-c7c3de"></a>• [`connection_info`](#info-c7c3de) - Optional Block<br>REST API Config. Configuration details to access discovery service REST API<br>See [Connection Info](#info-c7c3de) below.
|
|
115
115
|
|
|
116
|
-
<a id="
|
|
116
|
+
<a id="info-28e890"></a>• [`http_basic_auth_info`](#info-28e890) - Optional Block<br>Hashicorp Consul Credentials. Authentication parameters to access Hashicorp Consul<br>See [HTTP Basic Auth Info](#info-28e890) below.
|
|
117
117
|
|
|
118
118
|
#### Discovery Consul Access Info Connection Info
|
|
119
119
|
|
|
120
|
-
A [`connection_info`](#
|
|
120
|
+
A [`connection_info`](#info-c7c3de) block (within [`discovery_consul.access_info`](#discovery-consul-access-info)) supports the following:
|
|
121
121
|
|
|
122
|
-
<a id="
|
|
122
|
+
<a id="server-db3eac"></a>• [`api_server`](#server-db3eac) - Optional String<br>API Server and Port. API server must be a fully qualified domain string and port specified as host:port pair
|
|
123
123
|
|
|
124
|
-
<a id="
|
|
124
|
+
<a id="info-72d38f"></a>• [`tls_info`](#info-72d38f) - Optional Block<br>Client TLS Config. TLS config for client of discovery service<br>See [TLS Info](#info-72d38f) below.
|
|
125
125
|
|
|
126
126
|
#### Discovery Consul Access Info Connection Info TLS Info
|
|
127
127
|
|
|
128
|
-
A [`tls_info`](#
|
|
128
|
+
A [`tls_info`](#info-72d38f) block (within [`discovery_consul.access_info.connection_info`](#info-c7c3de)) supports the following:
|
|
129
129
|
|
|
130
|
-
<a id="
|
|
130
|
+
<a id="certificate-76bba3"></a>• [`certificate`](#certificate-76bba3) - Optional String<br>Client Certificate. Client certificate is PEM-encoded certificate or certificate-chain
|
|
131
131
|
|
|
132
|
-
<a id="
|
|
132
|
+
<a id="url-2f392f"></a>• [`key_url`](#url-2f392f) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Key URL](#url-2f392f) below.
|
|
133
133
|
|
|
134
|
-
<a id="
|
|
134
|
+
<a id="name-d19379"></a>• [`server_name`](#name-d19379) - Optional String<br>SNI name. ServerName is passed to the server for SNI and is used in the client to check server certificates against. If ServerName is empty, the hostname used to contact the server is used
|
|
135
135
|
|
|
136
|
-
<a id="
|
|
136
|
+
<a id="url-2e26a9"></a>• [`trusted_ca_url`](#url-2e26a9) - Optional String<br>Server CA Certificates. The URL or value for trusted Server CA certificate or certificate chain Certificates in PEM format including the PEM headers
|
|
137
137
|
|
|
138
138
|
#### Discovery Consul Access Info Connection Info TLS Info Key URL
|
|
139
139
|
|
|
140
|
-
A [`key_url`](#
|
|
140
|
+
A [`key_url`](#url-2f392f) block (within [`discovery_consul.access_info.connection_info.tls_info`](#info-72d38f)) supports the following:
|
|
141
141
|
|
|
142
|
-
<a id="
|
|
142
|
+
<a id="info-795098"></a>• [`blindfold_secret_info`](#info-795098) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-795098) below.
|
|
143
143
|
|
|
144
|
-
<a id="
|
|
144
|
+
<a id="info-25cbe5"></a>• [`clear_secret_info`](#info-25cbe5) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-25cbe5) below.
|
|
145
145
|
|
|
146
146
|
#### Discovery Consul Access Info Connection Info TLS Info Key URL Blindfold Secret Info
|
|
147
147
|
|
|
148
|
-
A [`blindfold_secret_info`](#
|
|
148
|
+
A [`blindfold_secret_info`](#info-795098) block (within [`discovery_consul.access_info.connection_info.tls_info.key_url`](#url-2f392f)) supports the following:
|
|
149
149
|
|
|
150
|
-
<a id="
|
|
150
|
+
<a id="provider-a0db12"></a>• [`decryption_provider`](#provider-a0db12) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
151
151
|
|
|
152
|
-
<a id="
|
|
152
|
+
<a id="location-d91df6"></a>• [`location`](#location-d91df6) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
153
153
|
|
|
154
|
-
<a id="
|
|
154
|
+
<a id="provider-bdff0e"></a>• [`store_provider`](#provider-bdff0e) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
155
155
|
|
|
156
156
|
#### Discovery Consul Access Info Connection Info TLS Info Key URL Clear Secret Info
|
|
157
157
|
|
|
158
|
-
A [`clear_secret_info`](#
|
|
158
|
+
A [`clear_secret_info`](#info-25cbe5) block (within [`discovery_consul.access_info.connection_info.tls_info.key_url`](#url-2f392f)) supports the following:
|
|
159
159
|
|
|
160
|
-
<a id="
|
|
160
|
+
<a id="ref-ba5961"></a>• [`provider_ref`](#ref-ba5961) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
161
161
|
|
|
162
|
-
<a id="
|
|
162
|
+
<a id="url-cd17ea"></a>• [`url`](#url-cd17ea) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
163
163
|
|
|
164
164
|
#### Discovery Consul Access Info HTTP Basic Auth Info
|
|
165
165
|
|
|
166
|
-
A [`http_basic_auth_info`](#
|
|
166
|
+
A [`http_basic_auth_info`](#info-28e890) block (within [`discovery_consul.access_info`](#discovery-consul-access-info)) supports the following:
|
|
167
167
|
|
|
168
|
-
<a id="
|
|
168
|
+
<a id="url-f10130"></a>• [`passwd_url`](#url-f10130) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Passwd URL](#url-f10130) below.
|
|
169
169
|
|
|
170
|
-
<a id="
|
|
170
|
+
<a id="name-1f38a5"></a>• [`user_name`](#name-1f38a5) - Optional String<br>User Name. username in consul
|
|
171
171
|
|
|
172
172
|
#### Discovery Consul Access Info HTTP Basic Auth Info Passwd URL
|
|
173
173
|
|
|
174
|
-
A [`passwd_url`](#
|
|
174
|
+
A [`passwd_url`](#url-f10130) block (within [`discovery_consul.access_info.http_basic_auth_info`](#info-28e890)) supports the following:
|
|
175
175
|
|
|
176
|
-
<a id="
|
|
176
|
+
<a id="info-c6fde9"></a>• [`blindfold_secret_info`](#info-c6fde9) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-c6fde9) below.
|
|
177
177
|
|
|
178
|
-
<a id="
|
|
178
|
+
<a id="info-f147bc"></a>• [`clear_secret_info`](#info-f147bc) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-f147bc) below.
|
|
179
179
|
|
|
180
180
|
#### Discovery Consul Access Info HTTP Basic Auth Info Passwd URL Blindfold Secret Info
|
|
181
181
|
|
|
182
|
-
A [`blindfold_secret_info`](#
|
|
182
|
+
A [`blindfold_secret_info`](#info-c6fde9) block (within [`discovery_consul.access_info.http_basic_auth_info.passwd_url`](#url-f10130)) supports the following:
|
|
183
183
|
|
|
184
|
-
<a id="
|
|
184
|
+
<a id="provider-b778a8"></a>• [`decryption_provider`](#provider-b778a8) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
185
185
|
|
|
186
|
-
<a id="
|
|
186
|
+
<a id="location-46e2b7"></a>• [`location`](#location-46e2b7) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
187
187
|
|
|
188
|
-
<a id="
|
|
188
|
+
<a id="provider-d0e688"></a>• [`store_provider`](#provider-d0e688) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
189
189
|
|
|
190
190
|
#### Discovery Consul Access Info HTTP Basic Auth Info Passwd URL Clear Secret Info
|
|
191
191
|
|
|
192
|
-
A [`clear_secret_info`](#
|
|
192
|
+
A [`clear_secret_info`](#info-f147bc) block (within [`discovery_consul.access_info.http_basic_auth_info.passwd_url`](#url-f10130)) supports the following:
|
|
193
193
|
|
|
194
|
-
<a id="
|
|
194
|
+
<a id="ref-c71575"></a>• [`provider_ref`](#ref-c71575) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
195
195
|
|
|
196
|
-
<a id="
|
|
196
|
+
<a id="url-8704ad"></a>• [`url`](#url-8704ad) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
197
197
|
|
|
198
198
|
#### Discovery Consul Publish Info
|
|
199
199
|
|
|
@@ -219,85 +219,85 @@ A [`discovery_k8s`](#discovery-k8s) block supports the following:
|
|
|
219
219
|
|
|
220
220
|
An [`access_info`](#discovery-k8s-access-info) block (within [`discovery_k8s`](#discovery-k8s)) supports the following:
|
|
221
221
|
|
|
222
|
-
<a id="
|
|
222
|
+
<a id="info-731c25"></a>• [`connection_info`](#info-731c25) - Optional Block<br>REST API Config. Configuration details to access discovery service REST API<br>See [Connection Info](#info-731c25) below.
|
|
223
223
|
|
|
224
224
|
<a id="discovery-k8s-access-info-isolated"></a>• [`isolated`](#discovery-k8s-access-info-isolated) - Optional Block<br>Enable this option
|
|
225
225
|
|
|
226
|
-
<a id="
|
|
226
|
+
<a id="url-d50898"></a>• [`kubeconfig_url`](#url-d50898) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Kubeconfig URL](#url-d50898) below.
|
|
227
227
|
|
|
228
228
|
<a id="discovery-k8s-access-info-reachable"></a>• [`reachable`](#discovery-k8s-access-info-reachable) - Optional Block<br>Enable this option
|
|
229
229
|
|
|
230
230
|
#### Discovery K8S Access Info Connection Info
|
|
231
231
|
|
|
232
|
-
A [`connection_info`](#
|
|
232
|
+
A [`connection_info`](#info-731c25) block (within [`discovery_k8s.access_info`](#discovery-k8s-access-info)) supports the following:
|
|
233
233
|
|
|
234
|
-
<a id="
|
|
234
|
+
<a id="server-c32428"></a>• [`api_server`](#server-c32428) - Optional String<br>API Server and Port. API server must be a fully qualified domain string and port specified as host:port pair
|
|
235
235
|
|
|
236
|
-
<a id="
|
|
236
|
+
<a id="info-16e7c5"></a>• [`tls_info`](#info-16e7c5) - Optional Block<br>Client TLS Config. TLS config for client of discovery service<br>See [TLS Info](#info-16e7c5) below.
|
|
237
237
|
|
|
238
238
|
#### Discovery K8S Access Info Connection Info TLS Info
|
|
239
239
|
|
|
240
|
-
A [`tls_info`](#
|
|
240
|
+
A [`tls_info`](#info-16e7c5) block (within [`discovery_k8s.access_info.connection_info`](#info-731c25)) supports the following:
|
|
241
241
|
|
|
242
|
-
<a id="
|
|
242
|
+
<a id="certificate-a20a33"></a>• [`certificate`](#certificate-a20a33) - Optional String<br>Client Certificate. Client certificate is PEM-encoded certificate or certificate-chain
|
|
243
243
|
|
|
244
|
-
<a id="
|
|
244
|
+
<a id="url-a24c45"></a>• [`key_url`](#url-a24c45) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Key URL](#url-a24c45) below.
|
|
245
245
|
|
|
246
|
-
<a id="
|
|
246
|
+
<a id="name-de16f2"></a>• [`server_name`](#name-de16f2) - Optional String<br>SNI name. ServerName is passed to the server for SNI and is used in the client to check server certificates against. If ServerName is empty, the hostname used to contact the server is used
|
|
247
247
|
|
|
248
|
-
<a id="
|
|
248
|
+
<a id="url-2f0b33"></a>• [`trusted_ca_url`](#url-2f0b33) - Optional String<br>Server CA Certificates. The URL or value for trusted Server CA certificate or certificate chain Certificates in PEM format including the PEM headers
|
|
249
249
|
|
|
250
250
|
#### Discovery K8S Access Info Connection Info TLS Info Key URL
|
|
251
251
|
|
|
252
|
-
A [`key_url`](#
|
|
252
|
+
A [`key_url`](#url-a24c45) block (within [`discovery_k8s.access_info.connection_info.tls_info`](#info-16e7c5)) supports the following:
|
|
253
253
|
|
|
254
|
-
<a id="
|
|
254
|
+
<a id="info-6a0978"></a>• [`blindfold_secret_info`](#info-6a0978) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-6a0978) below.
|
|
255
255
|
|
|
256
|
-
<a id="
|
|
256
|
+
<a id="info-48bdf2"></a>• [`clear_secret_info`](#info-48bdf2) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-48bdf2) below.
|
|
257
257
|
|
|
258
258
|
#### Discovery K8S Access Info Connection Info TLS Info Key URL Blindfold Secret Info
|
|
259
259
|
|
|
260
|
-
A [`blindfold_secret_info`](#
|
|
260
|
+
A [`blindfold_secret_info`](#info-6a0978) block (within [`discovery_k8s.access_info.connection_info.tls_info.key_url`](#url-a24c45)) supports the following:
|
|
261
261
|
|
|
262
|
-
<a id="
|
|
262
|
+
<a id="provider-014b88"></a>• [`decryption_provider`](#provider-014b88) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
263
263
|
|
|
264
|
-
<a id="
|
|
264
|
+
<a id="location-a75d09"></a>• [`location`](#location-a75d09) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
265
265
|
|
|
266
|
-
<a id="
|
|
266
|
+
<a id="provider-44bd87"></a>• [`store_provider`](#provider-44bd87) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
267
267
|
|
|
268
268
|
#### Discovery K8S Access Info Connection Info TLS Info Key URL Clear Secret Info
|
|
269
269
|
|
|
270
|
-
A [`clear_secret_info`](#
|
|
270
|
+
A [`clear_secret_info`](#info-48bdf2) block (within [`discovery_k8s.access_info.connection_info.tls_info.key_url`](#url-a24c45)) supports the following:
|
|
271
271
|
|
|
272
|
-
<a id="
|
|
272
|
+
<a id="ref-ac3f1a"></a>• [`provider_ref`](#ref-ac3f1a) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
273
273
|
|
|
274
|
-
<a id="
|
|
274
|
+
<a id="url-a539e6"></a>• [`url`](#url-a539e6) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
275
275
|
|
|
276
276
|
#### Discovery K8S Access Info Kubeconfig URL
|
|
277
277
|
|
|
278
|
-
A [`kubeconfig_url`](#
|
|
278
|
+
A [`kubeconfig_url`](#url-d50898) block (within [`discovery_k8s.access_info`](#discovery-k8s-access-info)) supports the following:
|
|
279
279
|
|
|
280
|
-
<a id="
|
|
280
|
+
<a id="info-fef53c"></a>• [`blindfold_secret_info`](#info-fef53c) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-fef53c) below.
|
|
281
281
|
|
|
282
|
-
<a id="
|
|
282
|
+
<a id="info-ba8969"></a>• [`clear_secret_info`](#info-ba8969) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-ba8969) below.
|
|
283
283
|
|
|
284
284
|
#### Discovery K8S Access Info Kubeconfig URL Blindfold Secret Info
|
|
285
285
|
|
|
286
|
-
A [`blindfold_secret_info`](#
|
|
286
|
+
A [`blindfold_secret_info`](#info-fef53c) block (within [`discovery_k8s.access_info.kubeconfig_url`](#url-d50898)) supports the following:
|
|
287
287
|
|
|
288
|
-
<a id="
|
|
288
|
+
<a id="provider-138cbc"></a>• [`decryption_provider`](#provider-138cbc) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
289
289
|
|
|
290
|
-
<a id="
|
|
290
|
+
<a id="location-aa600f"></a>• [`location`](#location-aa600f) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
291
291
|
|
|
292
|
-
<a id="
|
|
292
|
+
<a id="provider-5ceac5"></a>• [`store_provider`](#provider-5ceac5) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
293
293
|
|
|
294
294
|
#### Discovery K8S Access Info Kubeconfig URL Clear Secret Info
|
|
295
295
|
|
|
296
|
-
A [`clear_secret_info`](#
|
|
296
|
+
A [`clear_secret_info`](#info-ba8969) block (within [`discovery_k8s.access_info.kubeconfig_url`](#url-d50898)) supports the following:
|
|
297
297
|
|
|
298
|
-
<a id="
|
|
298
|
+
<a id="ref-56d71f"></a>• [`provider_ref`](#ref-56d71f) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
299
299
|
|
|
300
|
-
<a id="
|
|
300
|
+
<a id="url-88dd37"></a>• [`url`](#url-88dd37) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
301
301
|
|
|
302
302
|
#### Discovery K8S Namespace Mapping
|
|
303
303
|
|
|
@@ -309,9 +309,9 @@ A [`namespace_mapping`](#discovery-k8s-namespace-mapping) block (within [`discov
|
|
|
309
309
|
|
|
310
310
|
An [`items`](#discovery-k8s-namespace-mapping-items) block (within [`discovery_k8s.namespace_mapping`](#discovery-k8s-namespace-mapping)) supports the following:
|
|
311
311
|
|
|
312
|
-
<a id="
|
|
312
|
+
<a id="namespace-b6599c"></a>• [`namespace`](#namespace-b6599c) - Optional String<br>F5XC Application Namespaces. Select a namespace
|
|
313
313
|
|
|
314
|
-
<a id="
|
|
314
|
+
<a id="regex-0aa709"></a>• [`namespace_regex`](#regex-0aa709) - Optional String<br>K8S Namespaces. The regex here will be used to match K8S namespace(s)
|
|
315
315
|
|
|
316
316
|
#### Discovery K8S Publish Info
|
|
317
317
|
|
|
@@ -319,25 +319,25 @@ A [`publish_info`](#discovery-k8s-publish-info) block (within [`discovery_k8s`](
|
|
|
319
319
|
|
|
320
320
|
<a id="discovery-k8s-publish-info-disable"></a>• [`disable`](#discovery-k8s-publish-info-disable) - Optional Block<br>Enable this option
|
|
321
321
|
|
|
322
|
-
<a id="
|
|
322
|
+
<a id="delegation-53a235"></a>• [`dns_delegation`](#delegation-53a235) - Optional Block<br>K8SDelegationType<br>See [DNS Delegation](#delegation-53a235) below.
|
|
323
323
|
|
|
324
324
|
<a id="discovery-k8s-publish-info-publish"></a>• [`publish`](#discovery-k8s-publish-info-publish) - Optional Block<br>K8SPublishType<br>See [Publish](#discovery-k8s-publish-info-publish) below.
|
|
325
325
|
|
|
326
|
-
<a id="
|
|
326
|
+
<a id="fqdns-f85bbe"></a>• [`publish_fqdns`](#fqdns-f85bbe) - Optional Block<br>Enable this option
|
|
327
327
|
|
|
328
328
|
#### Discovery K8S Publish Info DNS Delegation
|
|
329
329
|
|
|
330
|
-
A [`dns_delegation`](#
|
|
330
|
+
A [`dns_delegation`](#delegation-53a235) block (within [`discovery_k8s.publish_info`](#discovery-k8s-publish-info)) supports the following:
|
|
331
331
|
|
|
332
|
-
<a id="
|
|
332
|
+
<a id="mode-f08507"></a>• [`dns_mode`](#mode-f08507) - Optional String Defaults to `CORE_DNS`<br>Possible values are `CORE_DNS`, `KUBE_DNS`<br>[Enum: CORE_DNS|KUBE_DNS] DNS Mode. Two modes are possible CoreDNS: Whether external K8S cluster is running core-DNS KubeDNS: External K8S cluster is running kube-DNS
|
|
333
333
|
|
|
334
|
-
<a id="
|
|
334
|
+
<a id="subdomain-f4f8f0"></a>• [`subdomain`](#subdomain-f4f8f0) - Optional String<br>Subdomain. The DNS subdomain for which F5XC will respond to DNS queries
|
|
335
335
|
|
|
336
336
|
#### Discovery K8S Publish Info Publish
|
|
337
337
|
|
|
338
338
|
A [`publish`](#discovery-k8s-publish-info-publish) block (within [`discovery_k8s.publish_info`](#discovery-k8s-publish-info)) supports the following:
|
|
339
339
|
|
|
340
|
-
<a id="
|
|
340
|
+
<a id="namespace-a13be9"></a>• [`namespace`](#namespace-a13be9) - Optional String<br>Default Namespace. The namespace where the service/endpoints need to be created if it's not included in the domain. The external K8S administrator needs to ensure that the namespace exists
|
|
341
341
|
|
|
342
342
|
#### Timeouts
|
|
343
343
|
|
|
@@ -90,7 +90,7 @@ A [`http_health_check`](#http-health-check) block supports the following:
|
|
|
90
90
|
|
|
91
91
|
<a id="http-health-check-health-check-port"></a>• [`health_check_port`](#http-health-check-health-check-port) - Optional Number<br>Health Check Port. Port used for performing health check
|
|
92
92
|
|
|
93
|
-
<a id="
|
|
93
|
+
<a id="port-d66aae"></a>• [`health_check_secondary_port`](#port-d66aae) - Optional Number<br>Health Check Secondary Port. Secondary port used for performing health check. If included, both ports must be healthy for the health check to pass
|
|
94
94
|
|
|
95
95
|
<a id="http-health-check-receive"></a>• [`receive`](#http-health-check-receive) - Optional String<br>Receive String. Regular expression used to match against the response to the health check's request. Mark node up upon receipt of a successful regular expression match. Uses re2 regular expression syntax
|
|
96
96
|
|
|
@@ -102,7 +102,7 @@ A [`https_health_check`](#https-health-check) block supports the following:
|
|
|
102
102
|
|
|
103
103
|
<a id="https-health-check-health-check-port"></a>• [`health_check_port`](#https-health-check-health-check-port) - Optional Number<br>Health Check Port. Port used for performing health check
|
|
104
104
|
|
|
105
|
-
<a id="
|
|
105
|
+
<a id="port-4b56cd"></a>• [`health_check_secondary_port`](#port-4b56cd) - Optional Number<br>Health Check Secondary Port. Secondary port used for performing health check. If included, both ports must be healthy for the health check to pass
|
|
106
106
|
|
|
107
107
|
<a id="https-health-check-receive"></a>• [`receive`](#https-health-check-receive) - Optional String<br>Receive String. Regular expression used to match against the response to the health check's request. Mark node up upon receipt of a successful regular expression match. Uses re2 regular expression syntax
|
|
108
108
|
|
|
@@ -114,7 +114,7 @@ A [`tcp_health_check`](#tcp-health-check) block supports the following:
|
|
|
114
114
|
|
|
115
115
|
<a id="tcp-health-check-health-check-port"></a>• [`health_check_port`](#tcp-health-check-health-check-port) - Optional Number<br>Health Check Port. Port used for performing health check
|
|
116
116
|
|
|
117
|
-
<a id="
|
|
117
|
+
<a id="port-719c9f"></a>• [`health_check_secondary_port`](#port-719c9f) - Optional Number<br>Health Check Secondary Port. Secondary port used for performing health check. If included, both ports must be healthy for the health check to pass
|
|
118
118
|
|
|
119
119
|
<a id="tcp-health-check-receive"></a>• [`receive`](#tcp-health-check-receive) - Optional String<br>Receive String. Regular expression used to match against the response to the monitor's request. Mark node up upon receipt of a successful regular expression match. Uses re2 regular expression syntax
|
|
120
120
|
|
|
@@ -126,7 +126,7 @@ A [`tcp_hex_health_check`](#tcp-hex-health-check) block supports the following:
|
|
|
126
126
|
|
|
127
127
|
<a id="tcp-hex-health-check-health-check-port"></a>• [`health_check_port`](#tcp-hex-health-check-health-check-port) - Optional Number<br>Health Check Port. Port used for performing health check
|
|
128
128
|
|
|
129
|
-
<a id="
|
|
129
|
+
<a id="port-1599fa"></a>• [`health_check_secondary_port`](#port-1599fa) - Optional Number<br>Health Check Secondary Port. Secondary port used for performing health check. If included, both ports must be healthy for the health check to pass
|
|
130
130
|
|
|
131
131
|
<a id="tcp-hex-health-check-receive"></a>• [`receive`](#tcp-hex-health-check-receive) - Optional String<br>Receive Payload. Hex encoded raw bytes expected in the response
|
|
132
132
|
|
|
@@ -150,7 +150,7 @@ An [`udp_health_check`](#udp-health-check) block supports the following:
|
|
|
150
150
|
|
|
151
151
|
<a id="udp-health-check-health-check-port"></a>• [`health_check_port`](#udp-health-check-health-check-port) - Optional Number<br>Health Check Port. Port used for performing health check
|
|
152
152
|
|
|
153
|
-
<a id="
|
|
153
|
+
<a id="port-71a6d7"></a>• [`health_check_secondary_port`](#port-71a6d7) - Optional Number<br>Health Check Secondary Port. Secondary port used for performing health check. If included, both ports must be healthy for the health check to pass
|
|
154
154
|
|
|
155
155
|
<a id="udp-health-check-receive"></a>• [`receive`](#udp-health-check-receive) - Optional String<br>Receive String. UDP response to be matched. It can be a regex
|
|
156
156
|
|
|
@@ -108,21 +108,21 @@ A [`fallback_pool`](#fallback-pool) block supports the following:
|
|
|
108
108
|
|
|
109
109
|
A [`response_cache`](#response-cache) block supports the following:
|
|
110
110
|
|
|
111
|
-
<a id="
|
|
111
|
+
<a id="parameters-3b3c71"></a>• [`default_response_cache_parameters`](#parameters-3b3c71) - Optional Block<br>Enable this option
|
|
112
112
|
|
|
113
113
|
<a id="response-cache-disable"></a>• [`disable`](#response-cache-disable) - Optional Block<br>Enable this option
|
|
114
114
|
|
|
115
|
-
<a id="
|
|
115
|
+
<a id="parameters-0ffd09"></a>• [`response_cache_parameters`](#parameters-0ffd09) - Optional Block<br>Response Cache Parameters<br>See [Response Cache Parameters](#parameters-0ffd09) below.
|
|
116
116
|
|
|
117
117
|
#### Response Cache Response Cache Parameters
|
|
118
118
|
|
|
119
|
-
A [`response_cache_parameters`](#
|
|
119
|
+
A [`response_cache_parameters`](#parameters-0ffd09) block (within [`response_cache`](#response-cache)) supports the following:
|
|
120
120
|
|
|
121
|
-
<a id="
|
|
121
|
+
<a id="ipv4-f27f02"></a>• [`cache_cidr_ipv4`](#ipv4-f27f02) - Optional Number<br>Length of IPv4 CIDR masks. Length of CIDR masks used to group IPv4 clients
|
|
122
122
|
|
|
123
|
-
<a id="
|
|
123
|
+
<a id="ipv6-f739d0"></a>• [`cache_cidr_ipv6`](#ipv6-f739d0) - Optional Number<br>Length of IPv6 CIDR masks. Length of CIDR masks used to group IPv6 clients
|
|
124
124
|
|
|
125
|
-
<a id="
|
|
125
|
+
<a id="ttl-3f40f9"></a>• [`cache_ttl`](#ttl-3f40f9) - Optional Number<br>TTL. TTL for response cache
|
|
126
126
|
|
|
127
127
|
#### Rule List
|
|
128
128
|
|
|
@@ -138,7 +138,7 @@ A [`rules`](#rule-list-rules) block (within [`rule_list`](#rule-list)) supports
|
|
|
138
138
|
|
|
139
139
|
<a id="rule-list-rules-asn-matcher"></a>• [`asn_matcher`](#rule-list-rules-asn-matcher) - Optional Block<br>ASN Matcher. Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#rule-list-rules-asn-matcher) below.
|
|
140
140
|
|
|
141
|
-
<a id="
|
|
141
|
+
<a id="selector-5f4505"></a>• [`geo_location_label_selector`](#selector-5f4505) - Optional Block<br>Label Selector. This type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects. A null label selector matches no objects. Label selector is immutable. expressions is a list of strings of label selection expression. Each string has ',' separated values which are 'AND' and all strings are logically 'OR'. BNF for expression string `<selector-syntax>` ::= `<requirement>` | `<requirement>` ',' `<selector-syntax>` `<requirement>` ::= [!] KEY [ `<set-based-restriction>` | `<exact-match-restriction>` ] `<set-based-restriction>` ::= '' | `<inclusion-exclusion>` `<value-set>` `<inclusion-exclusion>` ::= `<inclusion>` | `<exclusion>` `<exclusion>` ::= 'notin' `<inclusion>` ::= 'in' `<value-set>` ::= '(' `<values>` ')' `<values>` ::= VALUE | VALUE ',' `<values>` `<exact-match-restriction>` ::= ['='|'=='|'!='] VALUE<br>See [Geo Location Label Selector](#selector-5f4505) below.
|
|
142
142
|
|
|
143
143
|
<a id="rule-list-rules-geo-location-set"></a>• [`geo_location_set`](#rule-list-rules-geo-location-set) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Geo Location Set](#rule-list-rules-geo-location-set) below.
|
|
144
144
|
|
|
@@ -166,21 +166,21 @@ An [`asn_matcher`](#rule-list-rules-asn-matcher) block (within [`rule_list.rules
|
|
|
166
166
|
|
|
167
167
|
An [`asn_sets`](#rule-list-rules-asn-matcher-asn-sets) block (within [`rule_list.rules.asn_matcher`](#rule-list-rules-asn-matcher)) supports the following:
|
|
168
168
|
|
|
169
|
-
<a id="
|
|
169
|
+
<a id="kind-bd89a0"></a>• [`kind`](#kind-bd89a0) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
170
170
|
|
|
171
|
-
<a id="
|
|
171
|
+
<a id="name-378ca0"></a>• [`name`](#name-378ca0) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
172
172
|
|
|
173
|
-
<a id="
|
|
173
|
+
<a id="namespace-963f1b"></a>• [`namespace`](#namespace-963f1b) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
174
174
|
|
|
175
|
-
<a id="
|
|
175
|
+
<a id="tenant-c46e8d"></a>• [`tenant`](#tenant-c46e8d) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
176
176
|
|
|
177
|
-
<a id="
|
|
177
|
+
<a id="uid-ec2c4e"></a>• [`uid`](#uid-ec2c4e) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
178
178
|
|
|
179
179
|
#### Rule List Rules Geo Location Label Selector
|
|
180
180
|
|
|
181
|
-
A [`geo_location_label_selector`](#
|
|
181
|
+
A [`geo_location_label_selector`](#selector-5f4505) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
182
182
|
|
|
183
|
-
<a id="
|
|
183
|
+
<a id="expressions-7e492b"></a>• [`expressions`](#expressions-7e492b) - Optional List<br>Selector Expression. expressions contains the kubernetes style label expression for selections
|
|
184
184
|
|
|
185
185
|
#### Rule List Rules Geo Location Set
|
|
186
186
|
|
|
@@ -188,7 +188,7 @@ A [`geo_location_set`](#rule-list-rules-geo-location-set) block (within [`rule_l
|
|
|
188
188
|
|
|
189
189
|
<a id="rule-list-rules-geo-location-set-name"></a>• [`name`](#rule-list-rules-geo-location-set-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
190
190
|
|
|
191
|
-
<a id="
|
|
191
|
+
<a id="namespace-92cf39"></a>• [`namespace`](#namespace-92cf39) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
192
192
|
|
|
193
193
|
<a id="rule-list-rules-geo-location-set-tenant"></a>• [`tenant`](#rule-list-rules-geo-location-set-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
194
194
|
|
|
@@ -196,31 +196,31 @@ A [`geo_location_set`](#rule-list-rules-geo-location-set) block (within [`rule_l
|
|
|
196
196
|
|
|
197
197
|
An [`ip_prefix_list`](#rule-list-rules-ip-prefix-list) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
198
198
|
|
|
199
|
-
<a id="
|
|
199
|
+
<a id="match-e89cea"></a>• [`invert_match`](#match-e89cea) - Optional Bool<br>Invert Match Result. Invert the match result
|
|
200
200
|
|
|
201
|
-
<a id="
|
|
201
|
+
<a id="prefixes-3033cf"></a>• [`ip_prefixes`](#prefixes-3033cf) - Optional List<br>IPv4 Prefix List. List of IPv4 prefix strings
|
|
202
202
|
|
|
203
203
|
#### Rule List Rules IP Prefix Set
|
|
204
204
|
|
|
205
205
|
An [`ip_prefix_set`](#rule-list-rules-ip-prefix-set) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
206
206
|
|
|
207
|
-
<a id="
|
|
207
|
+
<a id="matcher-727022"></a>• [`invert_matcher`](#matcher-727022) - Optional Bool<br>Invert IP Matcher. Invert the match result
|
|
208
208
|
|
|
209
|
-
<a id="
|
|
209
|
+
<a id="sets-74d68b"></a>• [`prefix_sets`](#sets-74d68b) - Optional Block<br>IP Prefix Sets. A list of references to ip_prefix_set objects<br>See [Prefix Sets](#sets-74d68b) below.
|
|
210
210
|
|
|
211
211
|
#### Rule List Rules IP Prefix Set Prefix Sets
|
|
212
212
|
|
|
213
|
-
A [`prefix_sets`](#
|
|
213
|
+
A [`prefix_sets`](#sets-74d68b) block (within [`rule_list.rules.ip_prefix_set`](#rule-list-rules-ip-prefix-set)) supports the following:
|
|
214
214
|
|
|
215
|
-
<a id="
|
|
215
|
+
<a id="kind-be6097"></a>• [`kind`](#kind-be6097) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
216
216
|
|
|
217
|
-
<a id="
|
|
217
|
+
<a id="name-c8abbe"></a>• [`name`](#name-c8abbe) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
218
218
|
|
|
219
|
-
<a id="
|
|
219
|
+
<a id="namespace-deeb04"></a>• [`namespace`](#namespace-deeb04) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
220
220
|
|
|
221
|
-
<a id="
|
|
221
|
+
<a id="tenant-d1a271"></a>• [`tenant`](#tenant-d1a271) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
222
222
|
|
|
223
|
-
<a id="
|
|
223
|
+
<a id="uid-38b272"></a>• [`uid`](#uid-38b272) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
224
224
|
|
|
225
225
|
#### Rule List Rules Pool
|
|
226
226
|
|