@robinmordasiewicz/f5xc-terraform-mcp 2.4.8 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_subscription.md +85 -2
- package/dist/docs/data-sources/address_allocator.md +85 -2
- package/dist/docs/data-sources/advertise_policy.md +85 -2
- package/dist/docs/data-sources/alert_policy.md +85 -2
- package/dist/docs/data-sources/alert_receiver.md +85 -2
- package/dist/docs/data-sources/allowed_tenant.md +85 -2
- package/dist/docs/data-sources/api_crawler.md +85 -2
- package/dist/docs/data-sources/api_credential.md +85 -2
- package/dist/docs/data-sources/api_definition.md +85 -2
- package/dist/docs/data-sources/api_discovery.md +85 -2
- package/dist/docs/data-sources/api_testing.md +85 -2
- package/dist/docs/data-sources/apm.md +85 -2
- package/dist/docs/data-sources/app_api_group.md +85 -2
- package/dist/docs/data-sources/app_firewall.md +85 -2
- package/dist/docs/data-sources/app_setting.md +85 -2
- package/dist/docs/data-sources/app_type.md +85 -2
- package/dist/docs/data-sources/authentication.md +85 -2
- package/dist/docs/data-sources/aws_tgw_site.md +85 -2
- package/dist/docs/data-sources/aws_vpc_site.md +85 -2
- package/dist/docs/data-sources/azure_vnet_site.md +85 -2
- package/dist/docs/data-sources/bgp.md +85 -2
- package/dist/docs/data-sources/bgp_asn_set.md +85 -2
- package/dist/docs/data-sources/bgp_routing_policy.md +85 -2
- package/dist/docs/data-sources/bigip_irule.md +85 -2
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +85 -2
- package/dist/docs/data-sources/cdn_cache_rule.md +85 -2
- package/dist/docs/data-sources/cdn_loadbalancer.md +85 -2
- package/dist/docs/data-sources/certificate.md +85 -2
- package/dist/docs/data-sources/certificate_chain.md +85 -2
- package/dist/docs/data-sources/child_tenant.md +85 -2
- package/dist/docs/data-sources/child_tenant_manager.md +85 -2
- package/dist/docs/data-sources/cloud_connect.md +85 -2
- package/dist/docs/data-sources/cloud_credentials.md +85 -2
- package/dist/docs/data-sources/cloud_elastic_ip.md +85 -2
- package/dist/docs/data-sources/cloud_link.md +85 -2
- package/dist/docs/data-sources/cluster.md +85 -2
- package/dist/docs/data-sources/cminstance.md +85 -2
- package/dist/docs/data-sources/code_base_integration.md +85 -2
- package/dist/docs/data-sources/contact.md +85 -2
- package/dist/docs/data-sources/container_registry.md +85 -2
- package/dist/docs/data-sources/crl.md +85 -2
- package/dist/docs/data-sources/customer_support.md +85 -2
- package/dist/docs/data-sources/data_group.md +85 -2
- package/dist/docs/data-sources/data_type.md +85 -2
- package/dist/docs/data-sources/dc_cluster_group.md +85 -2
- package/dist/docs/data-sources/discovery.md +85 -2
- package/dist/docs/data-sources/dns_compliance_checks.md +85 -2
- package/dist/docs/data-sources/dns_domain.md +85 -2
- package/dist/docs/data-sources/dns_lb_health_check.md +85 -2
- package/dist/docs/data-sources/dns_lb_pool.md +85 -2
- package/dist/docs/data-sources/dns_load_balancer.md +85 -2
- package/dist/docs/data-sources/dns_zone.md +85 -2
- package/dist/docs/data-sources/endpoint.md +85 -2
- package/dist/docs/data-sources/enhanced_firewall_policy.md +85 -2
- package/dist/docs/data-sources/external_connector.md +85 -2
- package/dist/docs/data-sources/fast_acl.md +85 -2
- package/dist/docs/data-sources/fast_acl_rule.md +85 -2
- package/dist/docs/data-sources/filter_set.md +85 -2
- package/dist/docs/data-sources/fleet.md +85 -2
- package/dist/docs/data-sources/forward_proxy_policy.md +85 -2
- package/dist/docs/data-sources/forwarding_class.md +85 -2
- package/dist/docs/data-sources/gcp_vpc_site.md +85 -2
- package/dist/docs/data-sources/geo_location_set.md +85 -2
- package/dist/docs/data-sources/global_log_receiver.md +85 -2
- package/dist/docs/data-sources/healthcheck.md +85 -2
- package/dist/docs/data-sources/http_loadbalancer.md +85 -2
- package/dist/docs/data-sources/ike1.md +85 -2
- package/dist/docs/data-sources/ike2.md +85 -2
- package/dist/docs/data-sources/ike_phase1_profile.md +85 -2
- package/dist/docs/data-sources/ike_phase2_profile.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +85 -2
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +85 -2
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +85 -2
- package/dist/docs/data-sources/infraprotect_tunnel.md +85 -2
- package/dist/docs/data-sources/ip_prefix_set.md +85 -2
- package/dist/docs/data-sources/irule.md +85 -2
- package/dist/docs/data-sources/k8s_cluster.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_admission.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_policy.md +85 -2
- package/dist/docs/data-sources/log_receiver.md +85 -2
- package/dist/docs/data-sources/malicious_user_mitigation.md +85 -2
- package/dist/docs/data-sources/managed_tenant.md +85 -2
- package/dist/docs/data-sources/namespace.md +85 -2
- package/dist/docs/data-sources/nat_policy.md +85 -2
- package/dist/docs/data-sources/network_connector.md +85 -2
- package/dist/docs/data-sources/network_firewall.md +85 -2
- package/dist/docs/data-sources/network_interface.md +85 -2
- package/dist/docs/data-sources/network_policy.md +85 -2
- package/dist/docs/data-sources/network_policy_rule.md +85 -2
- package/dist/docs/data-sources/network_policy_view.md +85 -2
- package/dist/docs/data-sources/nfv_service.md +85 -2
- package/dist/docs/data-sources/oidc_provider.md +85 -2
- package/dist/docs/data-sources/origin_pool.md +85 -2
- package/dist/docs/data-sources/policer.md +85 -2
- package/dist/docs/data-sources/policy_based_routing.md +85 -2
- package/dist/docs/data-sources/protocol_inspection.md +85 -2
- package/dist/docs/data-sources/protocol_policer.md +85 -2
- package/dist/docs/data-sources/proxy.md +85 -2
- package/dist/docs/data-sources/quota.md +85 -2
- package/dist/docs/data-sources/rate_limiter.md +85 -2
- package/dist/docs/data-sources/rate_limiter_policy.md +85 -2
- package/dist/docs/data-sources/registration.md +85 -2
- package/dist/docs/data-sources/report_config.md +85 -2
- package/dist/docs/data-sources/role.md +85 -2
- package/dist/docs/data-sources/route.md +85 -2
- package/dist/docs/data-sources/secret_management_access.md +85 -2
- package/dist/docs/data-sources/secret_policy.md +85 -2
- package/dist/docs/data-sources/secret_policy_rule.md +85 -2
- package/dist/docs/data-sources/securemesh_site.md +85 -2
- package/dist/docs/data-sources/securemesh_site_v2.md +85 -2
- package/dist/docs/data-sources/segment.md +85 -2
- package/dist/docs/data-sources/sensitive_data_policy.md +85 -2
- package/dist/docs/data-sources/service_policy.md +85 -2
- package/dist/docs/data-sources/service_policy_rule.md +85 -2
- package/dist/docs/data-sources/site_mesh_group.md +85 -2
- package/dist/docs/data-sources/srv6_network_slice.md +85 -2
- package/dist/docs/data-sources/subnet.md +85 -2
- package/dist/docs/data-sources/tcp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/tenant_configuration.md +85 -2
- package/dist/docs/data-sources/tenant_profile.md +85 -2
- package/dist/docs/data-sources/ticket_tracking_system.md +85 -2
- package/dist/docs/data-sources/token.md +85 -2
- package/dist/docs/data-sources/tpm_api_key.md +85 -2
- package/dist/docs/data-sources/tpm_category.md +85 -2
- package/dist/docs/data-sources/tpm_manager.md +85 -2
- package/dist/docs/data-sources/trusted_ca_list.md +85 -2
- package/dist/docs/data-sources/tunnel.md +85 -2
- package/dist/docs/data-sources/udp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/usb_policy.md +85 -2
- package/dist/docs/data-sources/user_identification.md +85 -2
- package/dist/docs/data-sources/virtual_host.md +85 -2
- package/dist/docs/data-sources/virtual_k8s.md +85 -2
- package/dist/docs/data-sources/virtual_network.md +85 -2
- package/dist/docs/data-sources/virtual_site.md +85 -2
- package/dist/docs/data-sources/voltshare_admin_policy.md +85 -2
- package/dist/docs/data-sources/voltstack_site.md +85 -2
- package/dist/docs/data-sources/waf_exclusion_policy.md +85 -2
- package/dist/docs/data-sources/workload.md +85 -2
- package/dist/docs/data-sources/workload_flavor.md +85 -2
- package/dist/docs/guides/advanced-http-loadbalancer.md +569 -0
- package/dist/docs/resources/addon_subscription.md +87 -10
- package/dist/docs/resources/address_allocator.md +86 -3
- package/dist/docs/resources/advertise_policy.md +112 -57
- package/dist/docs/resources/alert_policy.md +91 -8
- package/dist/docs/resources/alert_receiver.md +94 -55
- package/dist/docs/resources/allowed_tenant.md +87 -10
- package/dist/docs/resources/api_crawler.md +86 -3
- package/dist/docs/resources/api_credential.md +86 -3
- package/dist/docs/resources/api_definition.md +89 -6
- package/dist/docs/resources/api_discovery.md +86 -3
- package/dist/docs/resources/api_testing.md +95 -52
- package/dist/docs/resources/apm.md +156 -519
- package/dist/docs/resources/app_api_group.md +90 -25
- package/dist/docs/resources/app_firewall.md +87 -6
- package/dist/docs/resources/app_setting.md +97 -66
- package/dist/docs/resources/app_type.md +86 -3
- package/dist/docs/resources/authentication.md +90 -27
- package/dist/docs/resources/aws_tgw_site.md +125 -222
- package/dist/docs/resources/aws_vpc_site.md +149 -352
- package/dist/docs/resources/azure_vnet_site.md +233 -860
- package/dist/docs/resources/bgp.md +103 -32
- package/dist/docs/resources/bgp_asn_set.md +86 -3
- package/dist/docs/resources/bgp_routing_policy.md +86 -3
- package/dist/docs/resources/bigip_irule.md +86 -3
- package/dist/docs/resources/bot_defense_app_infrastructure.md +86 -3
- package/dist/docs/resources/cdn_cache_rule.md +97 -120
- package/dist/docs/resources/cdn_loadbalancer.md +325 -1620
- package/dist/docs/resources/certificate.md +87 -10
- package/dist/docs/resources/certificate_chain.md +86 -3
- package/dist/docs/resources/child_tenant.md +88 -17
- package/dist/docs/resources/child_tenant_manager.md +88 -17
- package/dist/docs/resources/cloud_connect.md +98 -63
- package/dist/docs/resources/cloud_credentials.md +92 -39
- package/dist/docs/resources/cloud_elastic_ip.md +91 -8
- package/dist/docs/resources/cloud_link.md +90 -29
- package/dist/docs/resources/cluster.md +109 -66
- package/dist/docs/resources/cminstance.md +86 -3
- package/dist/docs/resources/code_base_integration.md +100 -87
- package/dist/docs/resources/contact.md +86 -3
- package/dist/docs/resources/container_registry.md +86 -3
- package/dist/docs/resources/crl.md +86 -3
- package/dist/docs/resources/customer_support.md +91 -8
- package/dist/docs/resources/data_group.md +86 -3
- package/dist/docs/resources/data_type.md +88 -9
- package/dist/docs/resources/dc_cluster_group.md +86 -3
- package/dist/docs/resources/discovery.md +115 -104
- package/dist/docs/resources/dns_compliance_checks.md +86 -3
- package/dist/docs/resources/dns_domain.md +86 -3
- package/dist/docs/resources/dns_lb_health_check.md +86 -3
- package/dist/docs/resources/dns_lb_pool.md +87 -10
- package/dist/docs/resources/dns_load_balancer.md +95 -40
- package/dist/docs/resources/dns_zone.md +86 -3
- package/dist/docs/resources/endpoint.md +101 -18
- package/dist/docs/resources/enhanced_firewall_policy.md +89 -32
- package/dist/docs/resources/external_connector.md +94 -29
- package/dist/docs/resources/fast_acl.md +100 -101
- package/dist/docs/resources/fast_acl_rule.md +101 -18
- package/dist/docs/resources/filter_set.md +86 -3
- package/dist/docs/resources/fleet.md +170 -541
- package/dist/docs/resources/forward_proxy_policy.md +90 -31
- package/dist/docs/resources/forwarding_class.md +87 -10
- package/dist/docs/resources/gcp_vpc_site.md +141 -328
- package/dist/docs/resources/geo_location_set.md +86 -3
- package/dist/docs/resources/global_log_receiver.md +116 -181
- package/dist/docs/resources/healthcheck.md +86 -3
- package/dist/docs/resources/http_loadbalancer.md +523 -2778
- package/dist/docs/resources/ike1.md +86 -3
- package/dist/docs/resources/ike2.md +86 -3
- package/dist/docs/resources/ike_phase1_profile.md +86 -3
- package/dist/docs/resources/ike_phase2_profile.md +86 -3
- package/dist/docs/resources/infraprotect_asn.md +86 -3
- package/dist/docs/resources/infraprotect_asn_prefix.md +87 -10
- package/dist/docs/resources/infraprotect_deny_list_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -3
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +86 -3
- package/dist/docs/resources/infraprotect_tunnel.md +90 -29
- package/dist/docs/resources/ip_prefix_set.md +86 -3
- package/dist/docs/resources/irule.md +86 -3
- package/dist/docs/resources/k8s_cluster.md +93 -58
- package/dist/docs/resources/k8s_cluster_role.md +87 -8
- package/dist/docs/resources/k8s_cluster_role_binding.md +87 -10
- package/dist/docs/resources/k8s_pod_security_admission.md +86 -3
- package/dist/docs/resources/k8s_pod_security_policy.md +87 -8
- package/dist/docs/resources/log_receiver.md +88 -15
- package/dist/docs/resources/malicious_user_mitigation.md +86 -3
- package/dist/docs/resources/managed_tenant.md +89 -12
- package/dist/docs/resources/namespace.md +86 -3
- package/dist/docs/resources/nat_policy.md +126 -43
- package/dist/docs/resources/network_connector.md +94 -51
- package/dist/docs/resources/network_firewall.md +90 -31
- package/dist/docs/resources/network_interface.md +93 -46
- package/dist/docs/resources/network_policy.md +96 -13
- package/dist/docs/resources/network_policy_rule.md +91 -8
- package/dist/docs/resources/network_policy_view.md +96 -13
- package/dist/docs/resources/nfv_service.md +153 -446
- package/dist/docs/resources/oidc_provider.md +86 -3
- package/dist/docs/resources/origin_pool.md +108 -145
- package/dist/docs/resources/policer.md +86 -3
- package/dist/docs/resources/policy_based_routing.md +100 -89
- package/dist/docs/resources/protocol_inspection.md +87 -10
- package/dist/docs/resources/protocol_policer.md +91 -8
- package/dist/docs/resources/proxy.md +154 -571
- package/dist/docs/resources/quota.md +86 -3
- package/dist/docs/resources/rate_limiter.md +91 -8
- package/dist/docs/resources/rate_limiter_policy.md +100 -23
- package/dist/docs/resources/registration.md +86 -3
- package/dist/docs/resources/report_config.md +87 -10
- package/dist/docs/resources/role.md +86 -3
- package/dist/docs/resources/route.md +113 -82
- package/dist/docs/resources/secret_management_access.md +127 -156
- package/dist/docs/resources/secret_policy.md +87 -4
- package/dist/docs/resources/secret_policy_rule.md +86 -3
- package/dist/docs/resources/securemesh_site.md +137 -380
- package/dist/docs/resources/securemesh_site_v2.md +289 -1204
- package/dist/docs/resources/segment.md +86 -3
- package/dist/docs/resources/sensitive_data_policy.md +87 -10
- package/dist/docs/resources/service_policy.md +115 -122
- package/dist/docs/resources/service_policy_rule.md +110 -59
- package/dist/docs/resources/site_mesh_group.md +92 -15
- package/dist/docs/resources/srv6_network_slice.md +86 -3
- package/dist/docs/resources/subnet.md +89 -20
- package/dist/docs/resources/tcp_loadbalancer.md +114 -185
- package/dist/docs/resources/tenant_configuration.md +86 -3
- package/dist/docs/resources/tenant_profile.md +87 -10
- package/dist/docs/resources/ticket_tracking_system.md +86 -3
- package/dist/docs/resources/token.md +86 -3
- package/dist/docs/resources/tpm_api_key.md +91 -8
- package/dist/docs/resources/tpm_category.md +91 -8
- package/dist/docs/resources/tpm_manager.md +86 -3
- package/dist/docs/resources/trusted_ca_list.md +86 -3
- package/dist/docs/resources/tunnel.md +91 -8
- package/dist/docs/resources/udp_loadbalancer.md +97 -80
- package/dist/docs/resources/usb_policy.md +86 -3
- package/dist/docs/resources/user_identification.md +86 -3
- package/dist/docs/resources/virtual_host.md +152 -177
- package/dist/docs/resources/virtual_k8s.md +92 -15
- package/dist/docs/resources/virtual_network.md +91 -8
- package/dist/docs/resources/virtual_site.md +86 -3
- package/dist/docs/resources/voltshare_admin_policy.md +86 -11
- package/dist/docs/resources/voltstack_site.md +380 -1365
- package/dist/docs/resources/waf_exclusion_policy.md +91 -28
- package/dist/docs/resources/workload.md +1189 -4148
- package/dist/docs/resources/workload_flavor.md +86 -3
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_k8s_cluster_role_binding Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Kubernetes"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_k8s_cluster_role_binding (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [K8S Cluster Role Binding API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-cluster-role-binding) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# K8S Cluster Role Binding Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic K8S Cluster Role Binding configuration
|
|
21
21
|
resource "f5xc_k8s_cluster_role_binding" "example" {
|
|
@@ -82,13 +82,7 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
82
82
|
|
|
83
83
|
#### K8S Cluster Role
|
|
84
84
|
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
<a id="k8s-cluster-role-name"></a>• [`name`](#k8s-cluster-role-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
88
|
-
|
|
89
|
-
<a id="k8s-cluster-role-namespace"></a>• [`namespace`](#k8s-cluster-role-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
90
|
-
|
|
91
|
-
<a id="k8s-cluster-role-tenant"></a>• [`tenant`](#k8s-cluster-role-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
85
|
+
<a id="objref-f13a95"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
92
86
|
|
|
93
87
|
#### Subjects
|
|
94
88
|
|
|
@@ -120,6 +114,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
120
114
|
|
|
121
115
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
122
116
|
|
|
117
|
+
---
|
|
118
|
+
|
|
119
|
+
## Common Types
|
|
120
|
+
|
|
121
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
122
|
+
|
|
123
|
+
### Object Reference {#common-object-reference}
|
|
124
|
+
|
|
125
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
126
|
+
|
|
127
|
+
| Field | Type | Description |
|
|
128
|
+
| ----- | ---- | ----------- |
|
|
129
|
+
| `name` | String | Name of the referenced object |
|
|
130
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
131
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
132
|
+
|
|
133
|
+
### Transformers {#common-transformers}
|
|
134
|
+
|
|
135
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
136
|
+
|
|
137
|
+
| Value | Description |
|
|
138
|
+
| ----- | ----------- |
|
|
139
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
140
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
141
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
142
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
143
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
144
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
145
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
146
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
147
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
148
|
+
|
|
149
|
+
### HTTP Methods {#common-http-methods}
|
|
150
|
+
|
|
151
|
+
HTTP methods used for request matching.
|
|
152
|
+
|
|
153
|
+
| Value | Description |
|
|
154
|
+
| ----- | ----------- |
|
|
155
|
+
| `ANY` | Match any HTTP method |
|
|
156
|
+
| `GET` | HTTP GET request |
|
|
157
|
+
| `HEAD` | HTTP HEAD request |
|
|
158
|
+
| `POST` | HTTP POST request |
|
|
159
|
+
| `PUT` | HTTP PUT request |
|
|
160
|
+
| `DELETE` | HTTP DELETE request |
|
|
161
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
162
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
163
|
+
| `TRACE` | HTTP TRACE request |
|
|
164
|
+
| `PATCH` | HTTP PATCH request |
|
|
165
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
166
|
+
|
|
167
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
168
|
+
|
|
169
|
+
TLS fingerprint categories for malicious client detection.
|
|
170
|
+
|
|
171
|
+
| Value | Description |
|
|
172
|
+
| ----- | ----------- |
|
|
173
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
174
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
175
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
176
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
177
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
178
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
179
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
180
|
+
|
|
181
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
182
|
+
|
|
183
|
+
IP address threat categories for security filtering.
|
|
184
|
+
|
|
185
|
+
| Value | Description |
|
|
186
|
+
| ----- | ----------- |
|
|
187
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
188
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
189
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
190
|
+
| `BOTNETS` | Known botnet IPs |
|
|
191
|
+
| `SCANNERS` | Network scanner IPs |
|
|
192
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
193
|
+
| `PHISHING` | Phishing-related IPs |
|
|
194
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
195
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
196
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
197
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
198
|
+
| `NETWORK` | Known bad network ranges |
|
|
199
|
+
|
|
123
200
|
## Import
|
|
124
201
|
|
|
125
202
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_k8s_pod_security_admission Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Kubernetes"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_k8s_pod_security_admission (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [K8S Pod Security Admission API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-pod-security-admission) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# K8S Pod Security Admission Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic K8S Pod Security Admission configuration
|
|
21
21
|
resource "f5xc_k8s_pod_security_admission" "example" {
|
|
@@ -106,6 +106,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
106
106
|
|
|
107
107
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
108
108
|
|
|
109
|
+
---
|
|
110
|
+
|
|
111
|
+
## Common Types
|
|
112
|
+
|
|
113
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
114
|
+
|
|
115
|
+
### Object Reference {#common-object-reference}
|
|
116
|
+
|
|
117
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
118
|
+
|
|
119
|
+
| Field | Type | Description |
|
|
120
|
+
| ----- | ---- | ----------- |
|
|
121
|
+
| `name` | String | Name of the referenced object |
|
|
122
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
123
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
124
|
+
|
|
125
|
+
### Transformers {#common-transformers}
|
|
126
|
+
|
|
127
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
128
|
+
|
|
129
|
+
| Value | Description |
|
|
130
|
+
| ----- | ----------- |
|
|
131
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
132
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
133
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
134
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
135
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
136
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
137
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
138
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
139
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
140
|
+
|
|
141
|
+
### HTTP Methods {#common-http-methods}
|
|
142
|
+
|
|
143
|
+
HTTP methods used for request matching.
|
|
144
|
+
|
|
145
|
+
| Value | Description |
|
|
146
|
+
| ----- | ----------- |
|
|
147
|
+
| `ANY` | Match any HTTP method |
|
|
148
|
+
| `GET` | HTTP GET request |
|
|
149
|
+
| `HEAD` | HTTP HEAD request |
|
|
150
|
+
| `POST` | HTTP POST request |
|
|
151
|
+
| `PUT` | HTTP PUT request |
|
|
152
|
+
| `DELETE` | HTTP DELETE request |
|
|
153
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
154
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
155
|
+
| `TRACE` | HTTP TRACE request |
|
|
156
|
+
| `PATCH` | HTTP PATCH request |
|
|
157
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
158
|
+
|
|
159
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
160
|
+
|
|
161
|
+
TLS fingerprint categories for malicious client detection.
|
|
162
|
+
|
|
163
|
+
| Value | Description |
|
|
164
|
+
| ----- | ----------- |
|
|
165
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
166
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
167
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
168
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
169
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
170
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
171
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
172
|
+
|
|
173
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
174
|
+
|
|
175
|
+
IP address threat categories for security filtering.
|
|
176
|
+
|
|
177
|
+
| Value | Description |
|
|
178
|
+
| ----- | ----------- |
|
|
179
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
180
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
181
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
182
|
+
| `BOTNETS` | Known botnet IPs |
|
|
183
|
+
| `SCANNERS` | Network scanner IPs |
|
|
184
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
185
|
+
| `PHISHING` | Phishing-related IPs |
|
|
186
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
187
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
188
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
189
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
190
|
+
| `NETWORK` | Known bad network ranges |
|
|
191
|
+
|
|
109
192
|
## Import
|
|
110
193
|
|
|
111
194
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_k8s_pod_security_policy Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_k8s_pod_security_policy (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [K8S Pod Security Policy API docs](https://docs.cloud.f5.com/docs-v2/api/k8s-pod-security-policy) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# K8S Pod Security Policy Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic K8S Pod Security Policy configuration
|
|
21
21
|
resource "f5xc_k8s_pod_security_policy" "example" {
|
|
@@ -182,11 +182,7 @@ A [`fs_group_strategy_options`](#psp-spec-fs-group-strategy-options) block (with
|
|
|
182
182
|
|
|
183
183
|
#### Psp Spec Fs Group Strategy Options ID Ranges
|
|
184
184
|
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
<a id="max-id-aa26e6"></a>• [`max_id`](#max-id-aa26e6) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
|
|
188
|
-
|
|
189
|
-
<a id="min-id-c0dbd4"></a>• [`min_id`](#min-id-c0dbd4) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
|
|
185
|
+
<a id="deep-9e04ba"></a>Deeply nested **Ranges** block collapsed for readability.
|
|
190
186
|
|
|
191
187
|
#### Psp Spec Run As Group
|
|
192
188
|
|
|
@@ -248,6 +244,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
248
244
|
|
|
249
245
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
250
246
|
|
|
247
|
+
---
|
|
248
|
+
|
|
249
|
+
## Common Types
|
|
250
|
+
|
|
251
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
252
|
+
|
|
253
|
+
### Object Reference {#common-object-reference}
|
|
254
|
+
|
|
255
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
256
|
+
|
|
257
|
+
| Field | Type | Description |
|
|
258
|
+
| ----- | ---- | ----------- |
|
|
259
|
+
| `name` | String | Name of the referenced object |
|
|
260
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
261
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
262
|
+
|
|
263
|
+
### Transformers {#common-transformers}
|
|
264
|
+
|
|
265
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
266
|
+
|
|
267
|
+
| Value | Description |
|
|
268
|
+
| ----- | ----------- |
|
|
269
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
270
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
271
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
272
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
273
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
274
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
275
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
276
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
277
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
278
|
+
|
|
279
|
+
### HTTP Methods {#common-http-methods}
|
|
280
|
+
|
|
281
|
+
HTTP methods used for request matching.
|
|
282
|
+
|
|
283
|
+
| Value | Description |
|
|
284
|
+
| ----- | ----------- |
|
|
285
|
+
| `ANY` | Match any HTTP method |
|
|
286
|
+
| `GET` | HTTP GET request |
|
|
287
|
+
| `HEAD` | HTTP HEAD request |
|
|
288
|
+
| `POST` | HTTP POST request |
|
|
289
|
+
| `PUT` | HTTP PUT request |
|
|
290
|
+
| `DELETE` | HTTP DELETE request |
|
|
291
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
292
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
293
|
+
| `TRACE` | HTTP TRACE request |
|
|
294
|
+
| `PATCH` | HTTP PATCH request |
|
|
295
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
296
|
+
|
|
297
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
298
|
+
|
|
299
|
+
TLS fingerprint categories for malicious client detection.
|
|
300
|
+
|
|
301
|
+
| Value | Description |
|
|
302
|
+
| ----- | ----------- |
|
|
303
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
304
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
305
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
306
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
307
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
308
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
309
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
310
|
+
|
|
311
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
312
|
+
|
|
313
|
+
IP address threat categories for security filtering.
|
|
314
|
+
|
|
315
|
+
| Value | Description |
|
|
316
|
+
| ----- | ----------- |
|
|
317
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
318
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
319
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
320
|
+
| `BOTNETS` | Known botnet IPs |
|
|
321
|
+
| `SCANNERS` | Network scanner IPs |
|
|
322
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
323
|
+
| `PHISHING` | Phishing-related IPs |
|
|
324
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
325
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
326
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
327
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
328
|
+
| `NETWORK` | Known bad network ranges |
|
|
329
|
+
|
|
251
330
|
## Import
|
|
252
331
|
|
|
253
332
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_log_receiver Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Monitoring"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a Log Receiver resource in F5 Distributed Cloud for log collection and forwarding configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_log_receiver (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a Log Receiver resource in F5 Distributed Cloud for log collection and forwarding configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Log Receiver API docs](https://docs.cloud.f5.com/docs-v2/api/log-receiver) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Log Receiver Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a Log Receiver resource in F5 Distributed Cloud for log collection and forwarding configuration.
|
|
19
19
|
|
|
20
20
|
# Basic Log Receiver configuration
|
|
21
21
|
resource "f5xc_log_receiver" "example" {
|
|
@@ -137,21 +137,11 @@ A [`key_url`](#syslog-tls-server-mtls-enable-key-url) block (within [`syslog.tls
|
|
|
137
137
|
|
|
138
138
|
#### Syslog TLS Server mTLS Enable Key URL Blindfold Secret Info
|
|
139
139
|
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
<a id="provider-d7f008"></a>• [`decryption_provider`](#provider-d7f008) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
143
|
-
|
|
144
|
-
<a id="location-9754ae"></a>• [`location`](#location-9754ae) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
145
|
-
|
|
146
|
-
<a id="provider-891a61"></a>• [`store_provider`](#provider-891a61) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
140
|
+
<a id="deep-259b9d"></a>Deeply nested **Info** block collapsed for readability.
|
|
147
141
|
|
|
148
142
|
#### Syslog TLS Server mTLS Enable Key URL Clear Secret Info
|
|
149
143
|
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
<a id="ref-d658d3"></a>• [`provider_ref`](#ref-d658d3) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
153
|
-
|
|
154
|
-
<a id="url-0a4c15"></a>• [`url`](#url-0a4c15) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
144
|
+
<a id="deep-fa3192"></a>Deeply nested **Info** block collapsed for readability.
|
|
155
145
|
|
|
156
146
|
#### Syslog UDP Server
|
|
157
147
|
|
|
@@ -173,6 +163,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
173
163
|
|
|
174
164
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
175
165
|
|
|
166
|
+
---
|
|
167
|
+
|
|
168
|
+
## Common Types
|
|
169
|
+
|
|
170
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
171
|
+
|
|
172
|
+
### Object Reference {#common-object-reference}
|
|
173
|
+
|
|
174
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
175
|
+
|
|
176
|
+
| Field | Type | Description |
|
|
177
|
+
| ----- | ---- | ----------- |
|
|
178
|
+
| `name` | String | Name of the referenced object |
|
|
179
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
180
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
181
|
+
|
|
182
|
+
### Transformers {#common-transformers}
|
|
183
|
+
|
|
184
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
185
|
+
|
|
186
|
+
| Value | Description |
|
|
187
|
+
| ----- | ----------- |
|
|
188
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
189
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
190
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
191
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
192
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
193
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
194
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
195
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
196
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
197
|
+
|
|
198
|
+
### HTTP Methods {#common-http-methods}
|
|
199
|
+
|
|
200
|
+
HTTP methods used for request matching.
|
|
201
|
+
|
|
202
|
+
| Value | Description |
|
|
203
|
+
| ----- | ----------- |
|
|
204
|
+
| `ANY` | Match any HTTP method |
|
|
205
|
+
| `GET` | HTTP GET request |
|
|
206
|
+
| `HEAD` | HTTP HEAD request |
|
|
207
|
+
| `POST` | HTTP POST request |
|
|
208
|
+
| `PUT` | HTTP PUT request |
|
|
209
|
+
| `DELETE` | HTTP DELETE request |
|
|
210
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
211
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
212
|
+
| `TRACE` | HTTP TRACE request |
|
|
213
|
+
| `PATCH` | HTTP PATCH request |
|
|
214
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
215
|
+
|
|
216
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
217
|
+
|
|
218
|
+
TLS fingerprint categories for malicious client detection.
|
|
219
|
+
|
|
220
|
+
| Value | Description |
|
|
221
|
+
| ----- | ----------- |
|
|
222
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
223
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
224
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
225
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
226
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
227
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
228
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
229
|
+
|
|
230
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
231
|
+
|
|
232
|
+
IP address threat categories for security filtering.
|
|
233
|
+
|
|
234
|
+
| Value | Description |
|
|
235
|
+
| ----- | ----------- |
|
|
236
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
237
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
238
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
239
|
+
| `BOTNETS` | Known botnet IPs |
|
|
240
|
+
| `SCANNERS` | Network scanner IPs |
|
|
241
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
242
|
+
| `PHISHING` | Phishing-related IPs |
|
|
243
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
244
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
245
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
246
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
247
|
+
| `NETWORK` | Known bad network ranges |
|
|
248
|
+
|
|
176
249
|
## Import
|
|
177
250
|
|
|
178
251
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_malicious_user_mitigation Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages malicious_user_mitigation creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_malicious_user_mitigation (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages malicious_user_mitigation creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Malicious User Mitigation API docs](https://docs.cloud.f5.com/docs-v2/api/malicious-user-mitigation) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Malicious User Mitigation Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages malicious_user_mitigation creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Malicious User Mitigation configuration
|
|
21
21
|
resource "f5xc_malicious_user_mitigation" "example" {
|
|
@@ -122,6 +122,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
122
122
|
|
|
123
123
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
124
124
|
|
|
125
|
+
---
|
|
126
|
+
|
|
127
|
+
## Common Types
|
|
128
|
+
|
|
129
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
130
|
+
|
|
131
|
+
### Object Reference {#common-object-reference}
|
|
132
|
+
|
|
133
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
134
|
+
|
|
135
|
+
| Field | Type | Description |
|
|
136
|
+
| ----- | ---- | ----------- |
|
|
137
|
+
| `name` | String | Name of the referenced object |
|
|
138
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
139
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
140
|
+
|
|
141
|
+
### Transformers {#common-transformers}
|
|
142
|
+
|
|
143
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
144
|
+
|
|
145
|
+
| Value | Description |
|
|
146
|
+
| ----- | ----------- |
|
|
147
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
148
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
149
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
150
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
151
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
152
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
153
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
154
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
155
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
156
|
+
|
|
157
|
+
### HTTP Methods {#common-http-methods}
|
|
158
|
+
|
|
159
|
+
HTTP methods used for request matching.
|
|
160
|
+
|
|
161
|
+
| Value | Description |
|
|
162
|
+
| ----- | ----------- |
|
|
163
|
+
| `ANY` | Match any HTTP method |
|
|
164
|
+
| `GET` | HTTP GET request |
|
|
165
|
+
| `HEAD` | HTTP HEAD request |
|
|
166
|
+
| `POST` | HTTP POST request |
|
|
167
|
+
| `PUT` | HTTP PUT request |
|
|
168
|
+
| `DELETE` | HTTP DELETE request |
|
|
169
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
170
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
171
|
+
| `TRACE` | HTTP TRACE request |
|
|
172
|
+
| `PATCH` | HTTP PATCH request |
|
|
173
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
174
|
+
|
|
175
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
176
|
+
|
|
177
|
+
TLS fingerprint categories for malicious client detection.
|
|
178
|
+
|
|
179
|
+
| Value | Description |
|
|
180
|
+
| ----- | ----------- |
|
|
181
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
182
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
183
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
184
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
185
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
186
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
187
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
188
|
+
|
|
189
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
190
|
+
|
|
191
|
+
IP address threat categories for security filtering.
|
|
192
|
+
|
|
193
|
+
| Value | Description |
|
|
194
|
+
| ----- | ----------- |
|
|
195
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
196
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
197
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
198
|
+
| `BOTNETS` | Known botnet IPs |
|
|
199
|
+
| `SCANNERS` | Network scanner IPs |
|
|
200
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
201
|
+
| `PHISHING` | Phishing-related IPs |
|
|
202
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
203
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
204
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
205
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
206
|
+
| `NETWORK` | Known bad network ranges |
|
|
207
|
+
|
|
125
208
|
## Import
|
|
126
209
|
|
|
127
210
|
Import is supported using the following syntax:
|