@robinmordasiewicz/f5xc-terraform-mcp 2.4.6 → 2.4.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/resources/addon_subscription.md +5 -5
- package/dist/docs/resources/address_allocator.md +3 -3
- package/dist/docs/resources/advertise_policy.md +39 -39
- package/dist/docs/resources/alert_policy.md +6 -6
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +9 -9
- package/dist/docs/resources/api_testing.md +40 -40
- package/dist/docs/resources/apm.md +320 -320
- package/dist/docs/resources/app_api_group.md +10 -10
- package/dist/docs/resources/app_firewall.md +36 -36
- package/dist/docs/resources/app_setting.md +46 -46
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/authentication.md +30 -30
- package/dist/docs/resources/aws_tgw_site.md +184 -184
- package/dist/docs/resources/aws_vpc_site.md +296 -296
- package/dist/docs/resources/azure_vnet_site.md +677 -677
- package/dist/docs/resources/bgp.md +20 -20
- package/dist/docs/resources/bgp_routing_policy.md +4 -4
- package/dist/docs/resources/cdn_cache_rule.md +68 -68
- package/dist/docs/resources/cdn_loadbalancer.md +1166 -1166
- package/dist/docs/resources/certificate.md +4 -4
- package/dist/docs/resources/child_tenant.md +2 -2
- package/dist/docs/resources/cloud_connect.md +35 -35
- package/dist/docs/resources/cloud_credentials.md +37 -37
- package/dist/docs/resources/cloud_link.md +16 -16
- package/dist/docs/resources/cluster.md +68 -68
- package/dist/docs/resources/cminstance.md +6 -6
- package/dist/docs/resources/code_base_integration.md +82 -82
- package/dist/docs/resources/container_registry.md +2 -2
- package/dist/docs/resources/data_type.md +12 -12
- package/dist/docs/resources/discovery.md +71 -71
- package/dist/docs/resources/dns_lb_health_check.md +5 -5
- package/dist/docs/resources/dns_load_balancer.md +25 -25
- package/dist/docs/resources/dns_zone.md +24 -877
- package/dist/docs/resources/endpoint.md +1 -1
- package/dist/docs/resources/enhanced_firewall_policy.md +33 -33
- package/dist/docs/resources/external_connector.md +32 -32
- package/dist/docs/resources/fast_acl.md +59 -59
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/filter_set.md +3 -3
- package/dist/docs/resources/fleet.md +359 -359
- package/dist/docs/resources/forward_proxy_policy.md +18 -18
- package/dist/docs/resources/gcp_vpc_site.md +280 -280
- package/dist/docs/resources/geo_location_set.md +1 -1
- package/dist/docs/resources/global_log_receiver.md +216 -216
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +2190 -2190
- package/dist/docs/resources/infraprotect_tunnel.md +9 -9
- package/dist/docs/resources/k8s_cluster.md +39 -39
- package/dist/docs/resources/k8s_cluster_role.md +10 -10
- package/dist/docs/resources/k8s_pod_security_policy.md +9 -9
- package/dist/docs/resources/log_receiver.md +11 -11
- package/dist/docs/resources/malicious_user_mitigation.md +4 -4
- package/dist/docs/resources/nat_policy.md +22 -22
- package/dist/docs/resources/network_connector.md +37 -37
- package/dist/docs/resources/network_firewall.md +15 -15
- package/dist/docs/resources/network_interface.md +78 -78
- package/dist/docs/resources/network_policy.md +21 -21
- package/dist/docs/resources/network_policy_view.md +7 -7
- package/dist/docs/resources/nfv_service.md +306 -306
- package/dist/docs/resources/oidc_provider.md +1 -1
- package/dist/docs/resources/origin_pool.md +151 -151
- package/dist/docs/resources/policy_based_routing.md +71 -71
- package/dist/docs/resources/protocol_inspection.md +8 -8
- package/dist/docs/resources/proxy.md +401 -401
- package/dist/docs/resources/rate_limiter_policy.md +4 -4
- package/dist/docs/resources/registration.md +1 -1
- package/dist/docs/resources/route.md +155 -155
- package/dist/docs/resources/secret_management_access.md +103 -103
- package/dist/docs/resources/secret_policy.md +7 -7
- package/dist/docs/resources/securemesh_site.md +274 -274
- package/dist/docs/resources/securemesh_site_v2.md +940 -940
- package/dist/docs/resources/sensitive_data_policy.md +3 -3
- package/dist/docs/resources/service_policy.md +154 -154
- package/dist/docs/resources/service_policy_rule.md +51 -51
- package/dist/docs/resources/subnet.md +7 -7
- package/dist/docs/resources/tcp_loadbalancer.md +138 -138
- package/dist/docs/resources/tenant_configuration.md +1 -1
- package/dist/docs/resources/ticket_tracking_system.md +2 -2
- package/dist/docs/resources/tunnel.md +16 -16
- package/dist/docs/resources/udp_loadbalancer.md +56 -56
- package/dist/docs/resources/virtual_host.md +146 -146
- package/dist/docs/resources/virtual_network.md +7 -7
- package/dist/docs/resources/voltshare_admin_policy.md +22 -22
- package/dist/docs/resources/voltstack_site.md +778 -778
- package/dist/docs/resources/waf_exclusion_policy.md +22 -22
- package/dist/docs/resources/workload.md +2226 -2226
- package/package.json +1 -1
|
@@ -124,27 +124,27 @@ An [`asn`](#bgp-information-asn) block (within [`bgp_information`](#bgp-informat
|
|
|
124
124
|
|
|
125
125
|
A [`peer_secret_override`](#bgp-information-peer-secret-override) block (within [`bgp_information`](#bgp-information)) supports the following:
|
|
126
126
|
|
|
127
|
-
<a id="
|
|
127
|
+
<a id="info-6d3a2a"></a>• [`blindfold_secret_info`](#info-6d3a2a) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-6d3a2a) below.
|
|
128
128
|
|
|
129
|
-
<a id="
|
|
129
|
+
<a id="info-586fa4"></a>• [`clear_secret_info`](#info-586fa4) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-586fa4) below.
|
|
130
130
|
|
|
131
131
|
#### BGP Information Peer Secret Override Blindfold Secret Info
|
|
132
132
|
|
|
133
|
-
A [`blindfold_secret_info`](#
|
|
133
|
+
A [`blindfold_secret_info`](#info-6d3a2a) block (within [`bgp_information.peer_secret_override`](#bgp-information-peer-secret-override)) supports the following:
|
|
134
134
|
|
|
135
|
-
<a id="
|
|
135
|
+
<a id="provider-b2f46b"></a>• [`decryption_provider`](#provider-b2f46b) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
136
136
|
|
|
137
|
-
<a id="
|
|
137
|
+
<a id="location-f9c053"></a>• [`location`](#location-f9c053) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
138
138
|
|
|
139
|
-
<a id="
|
|
139
|
+
<a id="provider-2b3f27"></a>• [`store_provider`](#provider-2b3f27) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
140
140
|
|
|
141
141
|
#### BGP Information Peer Secret Override Clear Secret Info
|
|
142
142
|
|
|
143
|
-
A [`clear_secret_info`](#
|
|
143
|
+
A [`clear_secret_info`](#info-586fa4) block (within [`bgp_information.peer_secret_override`](#bgp-information-peer-secret-override)) supports the following:
|
|
144
144
|
|
|
145
|
-
<a id="
|
|
145
|
+
<a id="ref-f0de71"></a>• [`provider_ref`](#ref-f0de71) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
146
146
|
|
|
147
|
-
<a id="
|
|
147
|
+
<a id="url-4c3b0f"></a>• [`url`](#url-4c3b0f) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
148
148
|
|
|
149
149
|
#### Firewall Rule Group
|
|
150
150
|
|
|
@@ -143,63 +143,63 @@ A [`cluster_wide_app_list`](#cluster-wide-app-list) block supports the following
|
|
|
143
143
|
|
|
144
144
|
A [`cluster_wide_apps`](#cluster-wide-app-list-cluster-wide-apps) block (within [`cluster_wide_app_list`](#cluster-wide-app-list)) supports the following:
|
|
145
145
|
|
|
146
|
-
<a id="
|
|
146
|
+
<a id="argo-cd-64d0ab"></a>• [`argo_cd`](#argo-cd-64d0ab) - Optional Block<br>Argo CD configuration. description Parameters for Argo Continuous Deployment(CD) application<br>See [Argo Cd](#argo-cd-64d0ab) below.
|
|
147
147
|
|
|
148
|
-
<a id="
|
|
148
|
+
<a id="dashboard-0fee36"></a>• [`dashboard`](#dashboard-0fee36) - Optional Block<br>K8S Dashboard configuration. description Parameters for K8S dashboard
|
|
149
149
|
|
|
150
|
-
<a id="
|
|
150
|
+
<a id="server-f57512"></a>• [`metrics_server`](#server-f57512) - Optional Block<br>K8S Metrics Server configuration. description Parameters for Kubernetes Metrics Server application
|
|
151
151
|
|
|
152
|
-
<a id="
|
|
152
|
+
<a id="prometheus-0ee820"></a>• [`prometheus`](#prometheus-0ee820) - Optional Block<br>Prometheus access configuration. description Parameters for Prometheus server access
|
|
153
153
|
|
|
154
154
|
#### Cluster Wide App List Cluster Wide Apps Argo Cd
|
|
155
155
|
|
|
156
|
-
An [`argo_cd`](#
|
|
156
|
+
An [`argo_cd`](#argo-cd-64d0ab) block (within [`cluster_wide_app_list.cluster_wide_apps`](#cluster-wide-app-list-cluster-wide-apps)) supports the following:
|
|
157
157
|
|
|
158
|
-
<a id="
|
|
158
|
+
<a id="domain-a232c5"></a>• [`local_domain`](#domain-a232c5) - Optional Block<br>Local Access Configuration. Parameters required to enable local access<br>See [Local Domain](#domain-a232c5) below.
|
|
159
159
|
|
|
160
160
|
#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain
|
|
161
161
|
|
|
162
|
-
A [`local_domain`](#
|
|
162
|
+
A [`local_domain`](#domain-a232c5) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd`](#argo-cd-64d0ab)) supports the following:
|
|
163
163
|
|
|
164
|
-
<a id="
|
|
164
|
+
<a id="port-44b8d0"></a>• [`default_port`](#port-44b8d0) - Optional Block<br>Enable this option
|
|
165
165
|
|
|
166
|
-
<a id="
|
|
166
|
+
<a id="domain-eb4958"></a>• [`local_domain`](#domain-eb4958) - Optional String<br>Local Domain. ArgoCD will be accessible at `<site name>`.`<local domain>`
|
|
167
167
|
|
|
168
|
-
<a id="
|
|
168
|
+
<a id="password-332d17"></a>• [`password`](#password-332d17) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Password](#password-332d17) below.
|
|
169
169
|
|
|
170
|
-
<a id="
|
|
170
|
+
<a id="port-5bbc5c"></a>• [`port`](#port-5bbc5c) - Optional Number<br>Custom ArgoCD Port. Use custom ArgoCD port. Available port range is less than 65000 except reserved ports
|
|
171
171
|
|
|
172
172
|
#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain Password
|
|
173
173
|
|
|
174
|
-
A [`password`](#
|
|
174
|
+
A [`password`](#password-332d17) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd.local_domain`](#domain-a232c5)) supports the following:
|
|
175
175
|
|
|
176
|
-
<a id="
|
|
176
|
+
<a id="info-586e53"></a>• [`blindfold_secret_info`](#info-586e53) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-586e53) below.
|
|
177
177
|
|
|
178
|
-
<a id="
|
|
178
|
+
<a id="info-29e9ad"></a>• [`clear_secret_info`](#info-29e9ad) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-29e9ad) below.
|
|
179
179
|
|
|
180
180
|
#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain Password Blindfold Secret Info
|
|
181
181
|
|
|
182
|
-
A [`blindfold_secret_info`](#
|
|
182
|
+
A [`blindfold_secret_info`](#info-586e53) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd.local_domain.password`](#password-332d17)) supports the following:
|
|
183
183
|
|
|
184
|
-
<a id="
|
|
184
|
+
<a id="provider-e0dc71"></a>• [`decryption_provider`](#provider-e0dc71) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
185
185
|
|
|
186
|
-
<a id="
|
|
186
|
+
<a id="location-0e412c"></a>• [`location`](#location-0e412c) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
187
187
|
|
|
188
|
-
<a id="
|
|
188
|
+
<a id="provider-889cbb"></a>• [`store_provider`](#provider-889cbb) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
189
189
|
|
|
190
190
|
#### Cluster Wide App List Cluster Wide Apps Argo Cd Local Domain Password Clear Secret Info
|
|
191
191
|
|
|
192
|
-
A [`clear_secret_info`](#
|
|
192
|
+
A [`clear_secret_info`](#info-29e9ad) block (within [`cluster_wide_app_list.cluster_wide_apps.argo_cd.local_domain.password`](#password-332d17)) supports the following:
|
|
193
193
|
|
|
194
|
-
<a id="
|
|
194
|
+
<a id="ref-f24530"></a>• [`provider_ref`](#ref-f24530) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
195
195
|
|
|
196
|
-
<a id="
|
|
196
|
+
<a id="url-c25af6"></a>• [`url`](#url-c25af6) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
197
197
|
|
|
198
198
|
#### Insecure Registry List
|
|
199
199
|
|
|
200
200
|
An [`insecure_registry_list`](#insecure-registry-list) block supports the following:
|
|
201
201
|
|
|
202
|
-
<a id="
|
|
202
|
+
<a id="registries-b1bc10"></a>• [`insecure_registries`](#registries-b1bc10) - Optional List<br>Docker Insecure Registry List. List of docker insecure registries in format 'example.com:5000'
|
|
203
203
|
|
|
204
204
|
#### Local Access Config
|
|
205
205
|
|
|
@@ -227,33 +227,33 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
227
227
|
|
|
228
228
|
An [`use_custom_cluster_role_bindings`](#use-custom-cluster-role-bindings) block supports the following:
|
|
229
229
|
|
|
230
|
-
<a id="
|
|
230
|
+
<a id="bindings-6adfa9"></a>• [`cluster_role_bindings`](#bindings-6adfa9) - Optional Block<br>Cluster Role Binding List. List of active cluster role binding list for a K8S cluster<br>See [Cluster Role Bindings](#bindings-6adfa9) below.
|
|
231
231
|
|
|
232
232
|
#### Use Custom Cluster Role Bindings Cluster Role Bindings
|
|
233
233
|
|
|
234
|
-
A [`cluster_role_bindings`](#
|
|
234
|
+
A [`cluster_role_bindings`](#bindings-6adfa9) block (within [`use_custom_cluster_role_bindings`](#use-custom-cluster-role-bindings)) supports the following:
|
|
235
235
|
|
|
236
|
-
<a id="
|
|
236
|
+
<a id="name-83c4b7"></a>• [`name`](#name-83c4b7) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
237
237
|
|
|
238
|
-
<a id="
|
|
238
|
+
<a id="namespace-0206bd"></a>• [`namespace`](#namespace-0206bd) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
239
239
|
|
|
240
|
-
<a id="
|
|
240
|
+
<a id="tenant-bdd834"></a>• [`tenant`](#tenant-bdd834) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
241
241
|
|
|
242
242
|
#### Use Custom Cluster Role List
|
|
243
243
|
|
|
244
244
|
An [`use_custom_cluster_role_list`](#use-custom-cluster-role-list) block supports the following:
|
|
245
245
|
|
|
246
|
-
<a id="
|
|
246
|
+
<a id="roles-cf2cf4"></a>• [`cluster_roles`](#roles-cf2cf4) - Optional Block<br>Cluster Role List. List of active cluster role list for a K8S cluster<br>See [Cluster Roles](#roles-cf2cf4) below.
|
|
247
247
|
|
|
248
248
|
#### Use Custom Cluster Role List Cluster Roles
|
|
249
249
|
|
|
250
|
-
A [`cluster_roles`](#
|
|
250
|
+
A [`cluster_roles`](#roles-cf2cf4) block (within [`use_custom_cluster_role_list`](#use-custom-cluster-role-list)) supports the following:
|
|
251
251
|
|
|
252
|
-
<a id="
|
|
252
|
+
<a id="name-af02fa"></a>• [`name`](#name-af02fa) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
253
253
|
|
|
254
|
-
<a id="
|
|
254
|
+
<a id="namespace-441b4d"></a>• [`namespace`](#namespace-441b4d) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
255
255
|
|
|
256
|
-
<a id="
|
|
256
|
+
<a id="tenant-ef8ebd"></a>• [`tenant`](#tenant-ef8ebd) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
257
257
|
|
|
258
258
|
#### Use Custom Pod Security Admission
|
|
259
259
|
|
|
@@ -261,25 +261,25 @@ An [`use_custom_pod_security_admission`](#use-custom-pod-security-admission) blo
|
|
|
261
261
|
|
|
262
262
|
<a id="use-custom-pod-security-admission-name"></a>• [`name`](#use-custom-pod-security-admission-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
263
263
|
|
|
264
|
-
<a id="
|
|
264
|
+
<a id="namespace-ea84bb"></a>• [`namespace`](#namespace-ea84bb) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
265
265
|
|
|
266
|
-
<a id="
|
|
266
|
+
<a id="tenant-3b27e9"></a>• [`tenant`](#tenant-3b27e9) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
267
267
|
|
|
268
268
|
#### Use Custom Psp List
|
|
269
269
|
|
|
270
270
|
An [`use_custom_psp_list`](#use-custom-psp-list) block supports the following:
|
|
271
271
|
|
|
272
|
-
<a id="
|
|
272
|
+
<a id="policies-4f6709"></a>• [`pod_security_policies`](#policies-4f6709) - Optional Block<br>Pod Security Policy List. List of active Pod security policies for a K8S cluster<br>See [Pod Security Policies](#policies-4f6709) below.
|
|
273
273
|
|
|
274
274
|
#### Use Custom Psp List Pod Security Policies
|
|
275
275
|
|
|
276
|
-
A [`pod_security_policies`](#
|
|
276
|
+
A [`pod_security_policies`](#policies-4f6709) block (within [`use_custom_psp_list`](#use-custom-psp-list)) supports the following:
|
|
277
277
|
|
|
278
|
-
<a id="
|
|
278
|
+
<a id="name-651eda"></a>• [`name`](#name-651eda) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
279
279
|
|
|
280
|
-
<a id="
|
|
280
|
+
<a id="namespace-c1705c"></a>• [`namespace`](#namespace-c1705c) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
281
281
|
|
|
282
|
-
<a id="
|
|
282
|
+
<a id="tenant-de8ae0"></a>• [`tenant`](#tenant-de8ae0) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
283
283
|
|
|
284
284
|
## Import
|
|
285
285
|
|
|
@@ -97,29 +97,29 @@ A [`policy_rule_list`](#policy-rule-list) block supports the following:
|
|
|
97
97
|
|
|
98
98
|
A [`policy_rule`](#policy-rule-list-policy-rule) block (within [`policy_rule_list`](#policy-rule-list)) supports the following:
|
|
99
99
|
|
|
100
|
-
<a id="
|
|
100
|
+
<a id="list-d430d1"></a>• [`non_resource_url_list`](#list-d430d1) - Optional Block<br>List of Non Resource URL(s). permissions for URL(s) that do not represent K8S resource<br>See [Non Resource URL List](#list-d430d1) below.
|
|
101
101
|
|
|
102
|
-
<a id="
|
|
102
|
+
<a id="list-0add02"></a>• [`resource_list`](#list-0add02) - Optional Block<br>Resource List. List of resources in terms of API groups/resource types/resource instances and verbs allowed<br>See [Resource List](#list-0add02) below.
|
|
103
103
|
|
|
104
104
|
#### Policy Rule List Policy Rule Non Resource URL List
|
|
105
105
|
|
|
106
|
-
A [`non_resource_url_list`](#
|
|
106
|
+
A [`non_resource_url_list`](#list-d430d1) block (within [`policy_rule_list.policy_rule`](#policy-rule-list-policy-rule)) supports the following:
|
|
107
107
|
|
|
108
|
-
<a id="
|
|
108
|
+
<a id="urls-eb1439"></a>• [`urls`](#urls-eb1439) - Optional List<br>Non Resource URL(s). allowed URL(s) that do not represent any K8S resource. URL can be suffix or regex
|
|
109
109
|
|
|
110
|
-
<a id="
|
|
110
|
+
<a id="verbs-c79bf5"></a>• [`verbs`](#verbs-c79bf5) - Optional List<br>Allowed Verbs. Allowed list of verbs(operations) on resources. Use VerbAll for all operations
|
|
111
111
|
|
|
112
112
|
#### Policy Rule List Policy Rule Resource List
|
|
113
113
|
|
|
114
|
-
A [`resource_list`](#
|
|
114
|
+
A [`resource_list`](#list-0add02) block (within [`policy_rule_list.policy_rule`](#policy-rule-list-policy-rule)) supports the following:
|
|
115
115
|
|
|
116
|
-
<a id="
|
|
116
|
+
<a id="groups-8a629b"></a>• [`api_groups`](#groups-8a629b) - Optional List<br>API Groups. Allowed list of API group that contains resources, all resources of a given API group
|
|
117
117
|
|
|
118
|
-
<a id="
|
|
118
|
+
<a id="instances-311644"></a>• [`resource_instances`](#instances-311644) - Optional List<br>Resource Instances. Allowed list of resource instances within the resource types
|
|
119
119
|
|
|
120
|
-
<a id="
|
|
120
|
+
<a id="types-062a5a"></a>• [`resource_types`](#types-062a5a) - Optional List<br>Resource Types. Allowed list of resource types within the API groups
|
|
121
121
|
|
|
122
|
-
<a id="
|
|
122
|
+
<a id="verbs-d805f1"></a>• [`verbs`](#verbs-d805f1) - Optional List<br>Allowed Verbs. Allowed list of verbs(operations) on resources. Use \* for all operations
|
|
123
123
|
|
|
124
124
|
#### Timeouts
|
|
125
125
|
|
|
@@ -98,7 +98,7 @@ A [`psp_spec`](#psp-spec) block supports the following:
|
|
|
98
98
|
|
|
99
99
|
<a id="psp-spec-allowed-unsafe-sysctls"></a>• [`allowed_unsafe_sysctls`](#psp-spec-allowed-unsafe-sysctls) - Optional List<br>Allowed Unsafe Sysctls. allowed list of unsafe sysctls, empty list allows none. supports prefix reg-ex
|
|
100
100
|
|
|
101
|
-
<a id="
|
|
101
|
+
<a id="escalation-d3a7ab"></a>• [`default_allow_privilege_escalation`](#escalation-d3a7ab) - Optional Bool<br>Default Allow Privilege Escalation. Pod has permission for privilege escalation by default
|
|
102
102
|
|
|
103
103
|
<a id="psp-spec-default-capabilities"></a>• [`default_capabilities`](#psp-spec-default-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Default Capabilities](#psp-spec-default-capabilities) below.
|
|
104
104
|
|
|
@@ -150,7 +150,7 @@ A [`psp_spec`](#psp-spec) block supports the following:
|
|
|
150
150
|
|
|
151
151
|
An [`allowed_capabilities`](#psp-spec-allowed-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
|
|
152
152
|
|
|
153
|
-
<a id="
|
|
153
|
+
<a id="capabilities-e66bba"></a>• [`capabilities`](#capabilities-e66bba) - Optional List<br>Capability List. List of capabilities that docker container has
|
|
154
154
|
|
|
155
155
|
#### Psp Spec Allowed Host Paths
|
|
156
156
|
|
|
@@ -164,7 +164,7 @@ An [`allowed_host_paths`](#psp-spec-allowed-host-paths) block (within [`psp_spec
|
|
|
164
164
|
|
|
165
165
|
A [`default_capabilities`](#psp-spec-default-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
|
|
166
166
|
|
|
167
|
-
<a id="
|
|
167
|
+
<a id="capabilities-15b1b9"></a>• [`capabilities`](#capabilities-15b1b9) - Optional List<br>Capability List. List of capabilities that docker container has
|
|
168
168
|
|
|
169
169
|
#### Psp Spec Drop Capabilities
|
|
170
170
|
|
|
@@ -176,17 +176,17 @@ A [`drop_capabilities`](#psp-spec-drop-capabilities) block (within [`psp_spec`](
|
|
|
176
176
|
|
|
177
177
|
A [`fs_group_strategy_options`](#psp-spec-fs-group-strategy-options) block (within [`psp_spec`](#psp-spec)) supports the following:
|
|
178
178
|
|
|
179
|
-
<a id="
|
|
179
|
+
<a id="ranges-e5468c"></a>• [`id_ranges`](#ranges-e5468c) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#ranges-e5468c) below.
|
|
180
180
|
|
|
181
181
|
<a id="psp-spec-fs-group-strategy-options-rule"></a>• [`rule`](#psp-spec-fs-group-strategy-options-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
|
|
182
182
|
|
|
183
183
|
#### Psp Spec Fs Group Strategy Options ID Ranges
|
|
184
184
|
|
|
185
|
-
An [`id_ranges`](#
|
|
185
|
+
An [`id_ranges`](#ranges-e5468c) block (within [`psp_spec.fs_group_strategy_options`](#psp-spec-fs-group-strategy-options)) supports the following:
|
|
186
186
|
|
|
187
|
-
<a id="
|
|
187
|
+
<a id="max-id-aa26e6"></a>• [`max_id`](#max-id-aa26e6) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
|
|
188
188
|
|
|
189
|
-
<a id="
|
|
189
|
+
<a id="min-id-c0dbd4"></a>• [`min_id`](#min-id-c0dbd4) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
|
|
190
190
|
|
|
191
191
|
#### Psp Spec Run As Group
|
|
192
192
|
|
|
@@ -232,9 +232,9 @@ A [`supplemental_groups`](#psp-spec-supplemental-groups) block (within [`psp_spe
|
|
|
232
232
|
|
|
233
233
|
An [`id_ranges`](#psp-spec-supplemental-groups-id-ranges) block (within [`psp_spec.supplemental_groups`](#psp-spec-supplemental-groups)) supports the following:
|
|
234
234
|
|
|
235
|
-
<a id="
|
|
235
|
+
<a id="max-id-83c629"></a>• [`max_id`](#max-id-83c629) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
|
|
236
236
|
|
|
237
|
-
<a id="
|
|
237
|
+
<a id="min-id-9f7a47"></a>• [`min_id`](#min-id-9f7a47) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
|
|
238
238
|
|
|
239
239
|
#### Timeouts
|
|
240
240
|
|
|
@@ -105,7 +105,7 @@ A [`tls_server`](#syslog-tls-server) block (within [`syslog`](#syslog)) supports
|
|
|
105
105
|
|
|
106
106
|
<a id="syslog-tls-server-default-https-port"></a>• [`default_https_port`](#syslog-tls-server-default-https-port) - Optional Block<br>Enable this option
|
|
107
107
|
|
|
108
|
-
<a id="
|
|
108
|
+
<a id="port-c39d1c"></a>• [`default_syslog_tls_port`](#port-c39d1c) - Optional Block<br>Enable this option
|
|
109
109
|
|
|
110
110
|
<a id="syslog-tls-server-mtls-disabled"></a>• [`mtls_disabled`](#syslog-tls-server-mtls-disabled) - Optional Block<br>Enable this option
|
|
111
111
|
|
|
@@ -123,7 +123,7 @@ A [`tls_server`](#syslog-tls-server) block (within [`syslog`](#syslog)) supports
|
|
|
123
123
|
|
|
124
124
|
A [`mtls_enable`](#syslog-tls-server-mtls-enable) block (within [`syslog.tls_server`](#syslog-tls-server)) supports the following:
|
|
125
125
|
|
|
126
|
-
<a id="
|
|
126
|
+
<a id="certificate-bd035f"></a>• [`certificate`](#certificate-bd035f) - Optional String<br>Client Certificate. Client certificate is PEM-encoded certificate or certificate-chain
|
|
127
127
|
|
|
128
128
|
<a id="syslog-tls-server-mtls-enable-key-url"></a>• [`key_url`](#syslog-tls-server-mtls-enable-key-url) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Key URL](#syslog-tls-server-mtls-enable-key-url) below.
|
|
129
129
|
|
|
@@ -131,27 +131,27 @@ A [`mtls_enable`](#syslog-tls-server-mtls-enable) block (within [`syslog.tls_ser
|
|
|
131
131
|
|
|
132
132
|
A [`key_url`](#syslog-tls-server-mtls-enable-key-url) block (within [`syslog.tls_server.mtls_enable`](#syslog-tls-server-mtls-enable)) supports the following:
|
|
133
133
|
|
|
134
|
-
<a id="
|
|
134
|
+
<a id="info-306978"></a>• [`blindfold_secret_info`](#info-306978) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-306978) below.
|
|
135
135
|
|
|
136
|
-
<a id="
|
|
136
|
+
<a id="info-2b11e1"></a>• [`clear_secret_info`](#info-2b11e1) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-2b11e1) below.
|
|
137
137
|
|
|
138
138
|
#### Syslog TLS Server mTLS Enable Key URL Blindfold Secret Info
|
|
139
139
|
|
|
140
|
-
A [`blindfold_secret_info`](#
|
|
140
|
+
A [`blindfold_secret_info`](#info-306978) block (within [`syslog.tls_server.mtls_enable.key_url`](#syslog-tls-server-mtls-enable-key-url)) supports the following:
|
|
141
141
|
|
|
142
|
-
<a id="
|
|
142
|
+
<a id="provider-d7f008"></a>• [`decryption_provider`](#provider-d7f008) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
143
143
|
|
|
144
|
-
<a id="
|
|
144
|
+
<a id="location-9754ae"></a>• [`location`](#location-9754ae) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
145
145
|
|
|
146
|
-
<a id="
|
|
146
|
+
<a id="provider-891a61"></a>• [`store_provider`](#provider-891a61) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
147
147
|
|
|
148
148
|
#### Syslog TLS Server mTLS Enable Key URL Clear Secret Info
|
|
149
149
|
|
|
150
|
-
A [`clear_secret_info`](#
|
|
150
|
+
A [`clear_secret_info`](#info-2b11e1) block (within [`syslog.tls_server.mtls_enable.key_url`](#syslog-tls-server-mtls-enable-key-url)) supports the following:
|
|
151
151
|
|
|
152
|
-
<a id="
|
|
152
|
+
<a id="ref-d658d3"></a>• [`provider_ref`](#ref-d658d3) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
153
153
|
|
|
154
|
-
<a id="
|
|
154
|
+
<a id="url-0a4c15"></a>• [`url`](#url-0a4c15) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
155
155
|
|
|
156
156
|
#### Syslog UDP Server
|
|
157
157
|
|
|
@@ -94,11 +94,11 @@ A [`rules`](#mitigation-type-rules) block (within [`mitigation_type`](#mitigatio
|
|
|
94
94
|
|
|
95
95
|
A [`mitigation_action`](#mitigation-type-rules-mitigation-action) block (within [`mitigation_type.rules`](#mitigation-type-rules)) supports the following:
|
|
96
96
|
|
|
97
|
-
<a id="
|
|
97
|
+
<a id="temporarily-ae6df1"></a>• [`block_temporarily`](#temporarily-ae6df1) - Optional Block<br>Enable this option
|
|
98
98
|
|
|
99
|
-
<a id="
|
|
99
|
+
<a id="challenge-783e81"></a>• [`captcha_challenge`](#challenge-783e81) - Optional Block<br>Enable this option
|
|
100
100
|
|
|
101
|
-
<a id="
|
|
101
|
+
<a id="challenge-784169"></a>• [`javascript_challenge`](#challenge-784169) - Optional Block<br>Enable this option
|
|
102
102
|
|
|
103
103
|
#### Mitigation Type Rules Threat Level
|
|
104
104
|
|
|
@@ -108,7 +108,7 @@ A [`threat_level`](#mitigation-type-rules-threat-level) block (within [`mitigati
|
|
|
108
108
|
|
|
109
109
|
<a id="mitigation-type-rules-threat-level-low"></a>• [`low`](#mitigation-type-rules-threat-level-low) - Optional Block<br>Enable this option
|
|
110
110
|
|
|
111
|
-
<a id="
|
|
111
|
+
<a id="medium-bfd9e9"></a>• [`medium`](#medium-bfd9e9) - Optional Block<br>Enable this option
|
|
112
112
|
|
|
113
113
|
#### Timeouts
|
|
114
114
|
|
|
@@ -128,15 +128,15 @@ An [`elastic_ips`](#rules-action-dynamic-elastic-ips) block (within [`rules.acti
|
|
|
128
128
|
|
|
129
129
|
A [`refs`](#rules-action-dynamic-elastic-ips-refs) block (within [`rules.action.dynamic.elastic_ips`](#rules-action-dynamic-elastic-ips)) supports the following:
|
|
130
130
|
|
|
131
|
-
<a id="
|
|
131
|
+
<a id="kind-df4674"></a>• [`kind`](#kind-df4674) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
132
132
|
|
|
133
|
-
<a id="
|
|
133
|
+
<a id="name-fdfa81"></a>• [`name`](#name-fdfa81) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
134
134
|
|
|
135
|
-
<a id="
|
|
135
|
+
<a id="namespace-fa1e70"></a>• [`namespace`](#namespace-fa1e70) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
136
136
|
|
|
137
|
-
<a id="
|
|
137
|
+
<a id="tenant-aec1f4"></a>• [`tenant`](#tenant-aec1f4) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
138
138
|
|
|
139
|
-
<a id="
|
|
139
|
+
<a id="uid-83b949"></a>• [`uid`](#uid-83b949) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
140
140
|
|
|
141
141
|
#### Rules Action Dynamic Pools
|
|
142
142
|
|
|
@@ -194,11 +194,11 @@ A [`criteria`](#rules-criteria) block (within [`rules`](#rules)) supports the fo
|
|
|
194
194
|
|
|
195
195
|
A [`destination_port`](#rules-criteria-destination-port) block (within [`rules.criteria`](#rules-criteria)) supports the following:
|
|
196
196
|
|
|
197
|
-
<a id="
|
|
197
|
+
<a id="match-408035"></a>• [`no_port_match`](#match-408035) - Optional Block<br>Enable this option
|
|
198
198
|
|
|
199
199
|
<a id="rules-criteria-destination-port-port"></a>• [`port`](#rules-criteria-destination-port-port) - Optional Number<br>Port. Exact Port to match
|
|
200
200
|
|
|
201
|
-
<a id="
|
|
201
|
+
<a id="ranges-c8d271"></a>• [`port_ranges`](#ranges-c8d271) - Optional String<br>Port range. Port range to match
|
|
202
202
|
|
|
203
203
|
#### Rules Criteria Segment
|
|
204
204
|
|
|
@@ -224,7 +224,7 @@ A [`refs`](#rules-criteria-segment-refs) block (within [`rules.criteria.segment`
|
|
|
224
224
|
|
|
225
225
|
A [`source_port`](#rules-criteria-source-port) block (within [`rules.criteria`](#rules-criteria)) supports the following:
|
|
226
226
|
|
|
227
|
-
<a id="
|
|
227
|
+
<a id="match-b33190"></a>• [`no_port_match`](#match-b33190) - Optional Block<br>Enable this option
|
|
228
228
|
|
|
229
229
|
<a id="rules-criteria-source-port-port"></a>• [`port`](#rules-criteria-source-port-port) - Optional Number<br>Port. Exact Port to match
|
|
230
230
|
|
|
@@ -242,21 +242,21 @@ A [`tcp`](#rules-criteria-tcp) block (within [`rules.criteria`](#rules-criteria)
|
|
|
242
242
|
|
|
243
243
|
A [`destination_port`](#rules-criteria-tcp-destination-port) block (within [`rules.criteria.tcp`](#rules-criteria-tcp)) supports the following:
|
|
244
244
|
|
|
245
|
-
<a id="
|
|
245
|
+
<a id="match-d7a933"></a>• [`no_port_match`](#match-d7a933) - Optional Block<br>Enable this option
|
|
246
246
|
|
|
247
|
-
<a id="
|
|
247
|
+
<a id="port-8bd6fd"></a>• [`port`](#port-8bd6fd) - Optional Number<br>Port. Exact Port to match
|
|
248
248
|
|
|
249
|
-
<a id="
|
|
249
|
+
<a id="ranges-d800d8"></a>• [`port_ranges`](#ranges-d800d8) - Optional String<br>Port range. Port range to match
|
|
250
250
|
|
|
251
251
|
#### Rules Criteria TCP Source Port
|
|
252
252
|
|
|
253
253
|
A [`source_port`](#rules-criteria-tcp-source-port) block (within [`rules.criteria.tcp`](#rules-criteria-tcp)) supports the following:
|
|
254
254
|
|
|
255
|
-
<a id="
|
|
255
|
+
<a id="match-dbf0f6"></a>• [`no_port_match`](#match-dbf0f6) - Optional Block<br>Enable this option
|
|
256
256
|
|
|
257
257
|
<a id="rules-criteria-tcp-source-port-port"></a>• [`port`](#rules-criteria-tcp-source-port-port) - Optional Number<br>Port. Exact Port to match
|
|
258
258
|
|
|
259
|
-
<a id="
|
|
259
|
+
<a id="ranges-8fd5fe"></a>• [`port_ranges`](#ranges-8fd5fe) - Optional String<br>Port range. Port range to match
|
|
260
260
|
|
|
261
261
|
#### Rules Criteria UDP
|
|
262
262
|
|
|
@@ -270,21 +270,21 @@ An [`udp`](#rules-criteria-udp) block (within [`rules.criteria`](#rules-criteria
|
|
|
270
270
|
|
|
271
271
|
A [`destination_port`](#rules-criteria-udp-destination-port) block (within [`rules.criteria.udp`](#rules-criteria-udp)) supports the following:
|
|
272
272
|
|
|
273
|
-
<a id="
|
|
273
|
+
<a id="match-214578"></a>• [`no_port_match`](#match-214578) - Optional Block<br>Enable this option
|
|
274
274
|
|
|
275
|
-
<a id="
|
|
275
|
+
<a id="port-955148"></a>• [`port`](#port-955148) - Optional Number<br>Port. Exact Port to match
|
|
276
276
|
|
|
277
|
-
<a id="
|
|
277
|
+
<a id="ranges-6407dd"></a>• [`port_ranges`](#ranges-6407dd) - Optional String<br>Port range. Port range to match
|
|
278
278
|
|
|
279
279
|
#### Rules Criteria UDP Source Port
|
|
280
280
|
|
|
281
281
|
A [`source_port`](#rules-criteria-udp-source-port) block (within [`rules.criteria.udp`](#rules-criteria-udp)) supports the following:
|
|
282
282
|
|
|
283
|
-
<a id="
|
|
283
|
+
<a id="match-2dbf46"></a>• [`no_port_match`](#match-2dbf46) - Optional Block<br>Enable this option
|
|
284
284
|
|
|
285
285
|
<a id="rules-criteria-udp-source-port-port"></a>• [`port`](#rules-criteria-udp-source-port-port) - Optional Number<br>Port. Exact Port to match
|
|
286
286
|
|
|
287
|
-
<a id="
|
|
287
|
+
<a id="ranges-a44153"></a>• [`port_ranges`](#ranges-a44153) - Optional String<br>Port range. Port range to match
|
|
288
288
|
|
|
289
289
|
#### Rules Criteria Virtual Network
|
|
290
290
|
|
|
@@ -296,13 +296,13 @@ A [`virtual_network`](#rules-criteria-virtual-network) block (within [`rules.cri
|
|
|
296
296
|
|
|
297
297
|
A [`refs`](#rules-criteria-virtual-network-refs) block (within [`rules.criteria.virtual_network`](#rules-criteria-virtual-network)) supports the following:
|
|
298
298
|
|
|
299
|
-
<a id="
|
|
299
|
+
<a id="kind-8d8876"></a>• [`kind`](#kind-8d8876) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
300
300
|
|
|
301
|
-
<a id="
|
|
301
|
+
<a id="name-369d2b"></a>• [`name`](#name-369d2b) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
302
302
|
|
|
303
|
-
<a id="
|
|
303
|
+
<a id="namespace-a79f74"></a>• [`namespace`](#namespace-a79f74) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
304
304
|
|
|
305
|
-
<a id="
|
|
305
|
+
<a id="tenant-79ff48"></a>• [`tenant`](#tenant-79ff48) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
306
306
|
|
|
307
307
|
<a id="rules-criteria-virtual-network-refs-uid"></a>• [`uid`](#rules-criteria-virtual-network-refs-uid) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
308
308
|
|