@robinmordasiewicz/f5xc-terraform-mcp 2.4.8 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_subscription.md +85 -2
- package/dist/docs/data-sources/address_allocator.md +85 -2
- package/dist/docs/data-sources/advertise_policy.md +85 -2
- package/dist/docs/data-sources/alert_policy.md +85 -2
- package/dist/docs/data-sources/alert_receiver.md +85 -2
- package/dist/docs/data-sources/allowed_tenant.md +85 -2
- package/dist/docs/data-sources/api_crawler.md +85 -2
- package/dist/docs/data-sources/api_credential.md +85 -2
- package/dist/docs/data-sources/api_definition.md +85 -2
- package/dist/docs/data-sources/api_discovery.md +85 -2
- package/dist/docs/data-sources/api_testing.md +85 -2
- package/dist/docs/data-sources/apm.md +85 -2
- package/dist/docs/data-sources/app_api_group.md +85 -2
- package/dist/docs/data-sources/app_firewall.md +85 -2
- package/dist/docs/data-sources/app_setting.md +85 -2
- package/dist/docs/data-sources/app_type.md +85 -2
- package/dist/docs/data-sources/authentication.md +85 -2
- package/dist/docs/data-sources/aws_tgw_site.md +85 -2
- package/dist/docs/data-sources/aws_vpc_site.md +85 -2
- package/dist/docs/data-sources/azure_vnet_site.md +85 -2
- package/dist/docs/data-sources/bgp.md +85 -2
- package/dist/docs/data-sources/bgp_asn_set.md +85 -2
- package/dist/docs/data-sources/bgp_routing_policy.md +85 -2
- package/dist/docs/data-sources/bigip_irule.md +85 -2
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +85 -2
- package/dist/docs/data-sources/cdn_cache_rule.md +85 -2
- package/dist/docs/data-sources/cdn_loadbalancer.md +85 -2
- package/dist/docs/data-sources/certificate.md +85 -2
- package/dist/docs/data-sources/certificate_chain.md +85 -2
- package/dist/docs/data-sources/child_tenant.md +85 -2
- package/dist/docs/data-sources/child_tenant_manager.md +85 -2
- package/dist/docs/data-sources/cloud_connect.md +85 -2
- package/dist/docs/data-sources/cloud_credentials.md +85 -2
- package/dist/docs/data-sources/cloud_elastic_ip.md +85 -2
- package/dist/docs/data-sources/cloud_link.md +85 -2
- package/dist/docs/data-sources/cluster.md +85 -2
- package/dist/docs/data-sources/cminstance.md +85 -2
- package/dist/docs/data-sources/code_base_integration.md +85 -2
- package/dist/docs/data-sources/contact.md +85 -2
- package/dist/docs/data-sources/container_registry.md +85 -2
- package/dist/docs/data-sources/crl.md +85 -2
- package/dist/docs/data-sources/customer_support.md +85 -2
- package/dist/docs/data-sources/data_group.md +85 -2
- package/dist/docs/data-sources/data_type.md +85 -2
- package/dist/docs/data-sources/dc_cluster_group.md +85 -2
- package/dist/docs/data-sources/discovery.md +85 -2
- package/dist/docs/data-sources/dns_compliance_checks.md +85 -2
- package/dist/docs/data-sources/dns_domain.md +85 -2
- package/dist/docs/data-sources/dns_lb_health_check.md +85 -2
- package/dist/docs/data-sources/dns_lb_pool.md +85 -2
- package/dist/docs/data-sources/dns_load_balancer.md +85 -2
- package/dist/docs/data-sources/dns_zone.md +85 -2
- package/dist/docs/data-sources/endpoint.md +85 -2
- package/dist/docs/data-sources/enhanced_firewall_policy.md +85 -2
- package/dist/docs/data-sources/external_connector.md +85 -2
- package/dist/docs/data-sources/fast_acl.md +85 -2
- package/dist/docs/data-sources/fast_acl_rule.md +85 -2
- package/dist/docs/data-sources/filter_set.md +85 -2
- package/dist/docs/data-sources/fleet.md +85 -2
- package/dist/docs/data-sources/forward_proxy_policy.md +85 -2
- package/dist/docs/data-sources/forwarding_class.md +85 -2
- package/dist/docs/data-sources/gcp_vpc_site.md +85 -2
- package/dist/docs/data-sources/geo_location_set.md +85 -2
- package/dist/docs/data-sources/global_log_receiver.md +85 -2
- package/dist/docs/data-sources/healthcheck.md +85 -2
- package/dist/docs/data-sources/http_loadbalancer.md +85 -2
- package/dist/docs/data-sources/ike1.md +85 -2
- package/dist/docs/data-sources/ike2.md +85 -2
- package/dist/docs/data-sources/ike_phase1_profile.md +85 -2
- package/dist/docs/data-sources/ike_phase2_profile.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +85 -2
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +85 -2
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +85 -2
- package/dist/docs/data-sources/infraprotect_tunnel.md +85 -2
- package/dist/docs/data-sources/ip_prefix_set.md +85 -2
- package/dist/docs/data-sources/irule.md +85 -2
- package/dist/docs/data-sources/k8s_cluster.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_admission.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_policy.md +85 -2
- package/dist/docs/data-sources/log_receiver.md +85 -2
- package/dist/docs/data-sources/malicious_user_mitigation.md +85 -2
- package/dist/docs/data-sources/managed_tenant.md +85 -2
- package/dist/docs/data-sources/namespace.md +85 -2
- package/dist/docs/data-sources/nat_policy.md +85 -2
- package/dist/docs/data-sources/network_connector.md +85 -2
- package/dist/docs/data-sources/network_firewall.md +85 -2
- package/dist/docs/data-sources/network_interface.md +85 -2
- package/dist/docs/data-sources/network_policy.md +85 -2
- package/dist/docs/data-sources/network_policy_rule.md +85 -2
- package/dist/docs/data-sources/network_policy_view.md +85 -2
- package/dist/docs/data-sources/nfv_service.md +85 -2
- package/dist/docs/data-sources/oidc_provider.md +85 -2
- package/dist/docs/data-sources/origin_pool.md +85 -2
- package/dist/docs/data-sources/policer.md +85 -2
- package/dist/docs/data-sources/policy_based_routing.md +85 -2
- package/dist/docs/data-sources/protocol_inspection.md +85 -2
- package/dist/docs/data-sources/protocol_policer.md +85 -2
- package/dist/docs/data-sources/proxy.md +85 -2
- package/dist/docs/data-sources/quota.md +85 -2
- package/dist/docs/data-sources/rate_limiter.md +85 -2
- package/dist/docs/data-sources/rate_limiter_policy.md +85 -2
- package/dist/docs/data-sources/registration.md +85 -2
- package/dist/docs/data-sources/report_config.md +85 -2
- package/dist/docs/data-sources/role.md +85 -2
- package/dist/docs/data-sources/route.md +85 -2
- package/dist/docs/data-sources/secret_management_access.md +85 -2
- package/dist/docs/data-sources/secret_policy.md +85 -2
- package/dist/docs/data-sources/secret_policy_rule.md +85 -2
- package/dist/docs/data-sources/securemesh_site.md +85 -2
- package/dist/docs/data-sources/securemesh_site_v2.md +85 -2
- package/dist/docs/data-sources/segment.md +85 -2
- package/dist/docs/data-sources/sensitive_data_policy.md +85 -2
- package/dist/docs/data-sources/service_policy.md +85 -2
- package/dist/docs/data-sources/service_policy_rule.md +85 -2
- package/dist/docs/data-sources/site_mesh_group.md +85 -2
- package/dist/docs/data-sources/srv6_network_slice.md +85 -2
- package/dist/docs/data-sources/subnet.md +85 -2
- package/dist/docs/data-sources/tcp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/tenant_configuration.md +85 -2
- package/dist/docs/data-sources/tenant_profile.md +85 -2
- package/dist/docs/data-sources/ticket_tracking_system.md +85 -2
- package/dist/docs/data-sources/token.md +85 -2
- package/dist/docs/data-sources/tpm_api_key.md +85 -2
- package/dist/docs/data-sources/tpm_category.md +85 -2
- package/dist/docs/data-sources/tpm_manager.md +85 -2
- package/dist/docs/data-sources/trusted_ca_list.md +85 -2
- package/dist/docs/data-sources/tunnel.md +85 -2
- package/dist/docs/data-sources/udp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/usb_policy.md +85 -2
- package/dist/docs/data-sources/user_identification.md +85 -2
- package/dist/docs/data-sources/virtual_host.md +85 -2
- package/dist/docs/data-sources/virtual_k8s.md +85 -2
- package/dist/docs/data-sources/virtual_network.md +85 -2
- package/dist/docs/data-sources/virtual_site.md +85 -2
- package/dist/docs/data-sources/voltshare_admin_policy.md +85 -2
- package/dist/docs/data-sources/voltstack_site.md +85 -2
- package/dist/docs/data-sources/waf_exclusion_policy.md +85 -2
- package/dist/docs/data-sources/workload.md +85 -2
- package/dist/docs/data-sources/workload_flavor.md +85 -2
- package/dist/docs/guides/advanced-http-loadbalancer.md +569 -0
- package/dist/docs/resources/addon_subscription.md +87 -10
- package/dist/docs/resources/address_allocator.md +86 -3
- package/dist/docs/resources/advertise_policy.md +112 -57
- package/dist/docs/resources/alert_policy.md +91 -8
- package/dist/docs/resources/alert_receiver.md +94 -55
- package/dist/docs/resources/allowed_tenant.md +87 -10
- package/dist/docs/resources/api_crawler.md +86 -3
- package/dist/docs/resources/api_credential.md +86 -3
- package/dist/docs/resources/api_definition.md +89 -6
- package/dist/docs/resources/api_discovery.md +86 -3
- package/dist/docs/resources/api_testing.md +95 -52
- package/dist/docs/resources/apm.md +156 -519
- package/dist/docs/resources/app_api_group.md +90 -25
- package/dist/docs/resources/app_firewall.md +87 -6
- package/dist/docs/resources/app_setting.md +97 -66
- package/dist/docs/resources/app_type.md +86 -3
- package/dist/docs/resources/authentication.md +90 -27
- package/dist/docs/resources/aws_tgw_site.md +125 -222
- package/dist/docs/resources/aws_vpc_site.md +149 -352
- package/dist/docs/resources/azure_vnet_site.md +233 -860
- package/dist/docs/resources/bgp.md +103 -32
- package/dist/docs/resources/bgp_asn_set.md +86 -3
- package/dist/docs/resources/bgp_routing_policy.md +86 -3
- package/dist/docs/resources/bigip_irule.md +86 -3
- package/dist/docs/resources/bot_defense_app_infrastructure.md +86 -3
- package/dist/docs/resources/cdn_cache_rule.md +97 -120
- package/dist/docs/resources/cdn_loadbalancer.md +325 -1620
- package/dist/docs/resources/certificate.md +87 -10
- package/dist/docs/resources/certificate_chain.md +86 -3
- package/dist/docs/resources/child_tenant.md +88 -17
- package/dist/docs/resources/child_tenant_manager.md +88 -17
- package/dist/docs/resources/cloud_connect.md +98 -63
- package/dist/docs/resources/cloud_credentials.md +92 -39
- package/dist/docs/resources/cloud_elastic_ip.md +91 -8
- package/dist/docs/resources/cloud_link.md +90 -29
- package/dist/docs/resources/cluster.md +109 -66
- package/dist/docs/resources/cminstance.md +86 -3
- package/dist/docs/resources/code_base_integration.md +100 -87
- package/dist/docs/resources/contact.md +86 -3
- package/dist/docs/resources/container_registry.md +86 -3
- package/dist/docs/resources/crl.md +86 -3
- package/dist/docs/resources/customer_support.md +91 -8
- package/dist/docs/resources/data_group.md +86 -3
- package/dist/docs/resources/data_type.md +88 -9
- package/dist/docs/resources/dc_cluster_group.md +86 -3
- package/dist/docs/resources/discovery.md +115 -104
- package/dist/docs/resources/dns_compliance_checks.md +86 -3
- package/dist/docs/resources/dns_domain.md +86 -3
- package/dist/docs/resources/dns_lb_health_check.md +86 -3
- package/dist/docs/resources/dns_lb_pool.md +87 -10
- package/dist/docs/resources/dns_load_balancer.md +95 -40
- package/dist/docs/resources/dns_zone.md +86 -3
- package/dist/docs/resources/endpoint.md +101 -18
- package/dist/docs/resources/enhanced_firewall_policy.md +89 -32
- package/dist/docs/resources/external_connector.md +94 -29
- package/dist/docs/resources/fast_acl.md +100 -101
- package/dist/docs/resources/fast_acl_rule.md +101 -18
- package/dist/docs/resources/filter_set.md +86 -3
- package/dist/docs/resources/fleet.md +170 -541
- package/dist/docs/resources/forward_proxy_policy.md +90 -31
- package/dist/docs/resources/forwarding_class.md +87 -10
- package/dist/docs/resources/gcp_vpc_site.md +141 -328
- package/dist/docs/resources/geo_location_set.md +86 -3
- package/dist/docs/resources/global_log_receiver.md +116 -181
- package/dist/docs/resources/healthcheck.md +86 -3
- package/dist/docs/resources/http_loadbalancer.md +523 -2778
- package/dist/docs/resources/ike1.md +86 -3
- package/dist/docs/resources/ike2.md +86 -3
- package/dist/docs/resources/ike_phase1_profile.md +86 -3
- package/dist/docs/resources/ike_phase2_profile.md +86 -3
- package/dist/docs/resources/infraprotect_asn.md +86 -3
- package/dist/docs/resources/infraprotect_asn_prefix.md +87 -10
- package/dist/docs/resources/infraprotect_deny_list_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -3
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +86 -3
- package/dist/docs/resources/infraprotect_tunnel.md +90 -29
- package/dist/docs/resources/ip_prefix_set.md +86 -3
- package/dist/docs/resources/irule.md +86 -3
- package/dist/docs/resources/k8s_cluster.md +93 -58
- package/dist/docs/resources/k8s_cluster_role.md +87 -8
- package/dist/docs/resources/k8s_cluster_role_binding.md +87 -10
- package/dist/docs/resources/k8s_pod_security_admission.md +86 -3
- package/dist/docs/resources/k8s_pod_security_policy.md +87 -8
- package/dist/docs/resources/log_receiver.md +88 -15
- package/dist/docs/resources/malicious_user_mitigation.md +86 -3
- package/dist/docs/resources/managed_tenant.md +89 -12
- package/dist/docs/resources/namespace.md +86 -3
- package/dist/docs/resources/nat_policy.md +126 -43
- package/dist/docs/resources/network_connector.md +94 -51
- package/dist/docs/resources/network_firewall.md +90 -31
- package/dist/docs/resources/network_interface.md +93 -46
- package/dist/docs/resources/network_policy.md +96 -13
- package/dist/docs/resources/network_policy_rule.md +91 -8
- package/dist/docs/resources/network_policy_view.md +96 -13
- package/dist/docs/resources/nfv_service.md +153 -446
- package/dist/docs/resources/oidc_provider.md +86 -3
- package/dist/docs/resources/origin_pool.md +108 -145
- package/dist/docs/resources/policer.md +86 -3
- package/dist/docs/resources/policy_based_routing.md +100 -89
- package/dist/docs/resources/protocol_inspection.md +87 -10
- package/dist/docs/resources/protocol_policer.md +91 -8
- package/dist/docs/resources/proxy.md +154 -571
- package/dist/docs/resources/quota.md +86 -3
- package/dist/docs/resources/rate_limiter.md +91 -8
- package/dist/docs/resources/rate_limiter_policy.md +100 -23
- package/dist/docs/resources/registration.md +86 -3
- package/dist/docs/resources/report_config.md +87 -10
- package/dist/docs/resources/role.md +86 -3
- package/dist/docs/resources/route.md +113 -82
- package/dist/docs/resources/secret_management_access.md +127 -156
- package/dist/docs/resources/secret_policy.md +87 -4
- package/dist/docs/resources/secret_policy_rule.md +86 -3
- package/dist/docs/resources/securemesh_site.md +137 -380
- package/dist/docs/resources/securemesh_site_v2.md +289 -1204
- package/dist/docs/resources/segment.md +86 -3
- package/dist/docs/resources/sensitive_data_policy.md +87 -10
- package/dist/docs/resources/service_policy.md +115 -122
- package/dist/docs/resources/service_policy_rule.md +110 -59
- package/dist/docs/resources/site_mesh_group.md +92 -15
- package/dist/docs/resources/srv6_network_slice.md +86 -3
- package/dist/docs/resources/subnet.md +89 -20
- package/dist/docs/resources/tcp_loadbalancer.md +114 -185
- package/dist/docs/resources/tenant_configuration.md +86 -3
- package/dist/docs/resources/tenant_profile.md +87 -10
- package/dist/docs/resources/ticket_tracking_system.md +86 -3
- package/dist/docs/resources/token.md +86 -3
- package/dist/docs/resources/tpm_api_key.md +91 -8
- package/dist/docs/resources/tpm_category.md +91 -8
- package/dist/docs/resources/tpm_manager.md +86 -3
- package/dist/docs/resources/trusted_ca_list.md +86 -3
- package/dist/docs/resources/tunnel.md +91 -8
- package/dist/docs/resources/udp_loadbalancer.md +97 -80
- package/dist/docs/resources/usb_policy.md +86 -3
- package/dist/docs/resources/user_identification.md +86 -3
- package/dist/docs/resources/virtual_host.md +152 -177
- package/dist/docs/resources/virtual_k8s.md +92 -15
- package/dist/docs/resources/virtual_network.md +91 -8
- package/dist/docs/resources/virtual_site.md +86 -3
- package/dist/docs/resources/voltshare_admin_policy.md +86 -11
- package/dist/docs/resources/voltstack_site.md +380 -1365
- package/dist/docs/resources/waf_exclusion_policy.md +91 -28
- package/dist/docs/resources/workload.md +1189 -4148
- package/dist/docs/resources/workload_flavor.md +86 -3
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_managed_tenant Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Organization"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages managed_tenant config instance. Name of the object is name of the tenant that is allowed to manage. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_managed_tenant (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages managed_tenant config instance. Name of the object is name of the tenant that is allowed to manage. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Managed Tenant API docs](https://docs.cloud.f5.com/docs-v2/api/tenant-management-managed-tenant) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Managed Tenant Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages managed_tenant config instance. Name of the object is name of the tenant that is allowed to manage. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Managed Tenant configuration
|
|
21
21
|
resource "f5xc_managed_tenant" "example" {
|
|
@@ -50,6 +50,8 @@ resource "f5xc_managed_tenant" "example" {
|
|
|
50
50
|
|
|
51
51
|
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Managed Tenant. Must be unique within the namespace
|
|
52
52
|
|
|
53
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Managed Tenant will be created
|
|
54
|
+
|
|
53
55
|
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
54
56
|
|
|
55
57
|
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
@@ -58,8 +60,6 @@ resource "f5xc_managed_tenant" "example" {
|
|
|
58
60
|
|
|
59
61
|
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
60
62
|
|
|
61
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Optional String<br>Namespace for the Managed Tenant. For this resource type, namespace should be empty or omitted
|
|
62
|
-
|
|
63
63
|
### Spec Argument Reference
|
|
64
64
|
|
|
65
65
|
<a id="groups"></a>• [`groups`](#groups) - Optional Block<br>Group Mapping. List of local user group association to user groups in the managed tenant specified in the tenant_choice<br>See [Groups](#groups) below for details.
|
|
@@ -86,13 +86,7 @@ A [`groups`](#groups) block supports the following:
|
|
|
86
86
|
|
|
87
87
|
#### Groups Group
|
|
88
88
|
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
<a id="groups-group-name"></a>• [`name`](#groups-group-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
92
|
-
|
|
93
|
-
<a id="groups-group-namespace"></a>• [`namespace`](#groups-group-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
94
|
-
|
|
95
|
-
<a id="groups-group-tenant"></a>• [`tenant`](#groups-group-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
89
|
+
<a id="objref-8dbe1b"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
96
90
|
|
|
97
91
|
#### Timeouts
|
|
98
92
|
|
|
@@ -106,6 +100,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
106
100
|
|
|
107
101
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
108
102
|
|
|
103
|
+
---
|
|
104
|
+
|
|
105
|
+
## Common Types
|
|
106
|
+
|
|
107
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
108
|
+
|
|
109
|
+
### Object Reference {#common-object-reference}
|
|
110
|
+
|
|
111
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
112
|
+
|
|
113
|
+
| Field | Type | Description |
|
|
114
|
+
| ----- | ---- | ----------- |
|
|
115
|
+
| `name` | String | Name of the referenced object |
|
|
116
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
117
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
118
|
+
|
|
119
|
+
### Transformers {#common-transformers}
|
|
120
|
+
|
|
121
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
122
|
+
|
|
123
|
+
| Value | Description |
|
|
124
|
+
| ----- | ----------- |
|
|
125
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
126
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
127
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
128
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
129
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
130
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
131
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
132
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
133
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
134
|
+
|
|
135
|
+
### HTTP Methods {#common-http-methods}
|
|
136
|
+
|
|
137
|
+
HTTP methods used for request matching.
|
|
138
|
+
|
|
139
|
+
| Value | Description |
|
|
140
|
+
| ----- | ----------- |
|
|
141
|
+
| `ANY` | Match any HTTP method |
|
|
142
|
+
| `GET` | HTTP GET request |
|
|
143
|
+
| `HEAD` | HTTP HEAD request |
|
|
144
|
+
| `POST` | HTTP POST request |
|
|
145
|
+
| `PUT` | HTTP PUT request |
|
|
146
|
+
| `DELETE` | HTTP DELETE request |
|
|
147
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
148
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
149
|
+
| `TRACE` | HTTP TRACE request |
|
|
150
|
+
| `PATCH` | HTTP PATCH request |
|
|
151
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
152
|
+
|
|
153
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
154
|
+
|
|
155
|
+
TLS fingerprint categories for malicious client detection.
|
|
156
|
+
|
|
157
|
+
| Value | Description |
|
|
158
|
+
| ----- | ----------- |
|
|
159
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
160
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
161
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
162
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
163
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
164
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
165
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
166
|
+
|
|
167
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
168
|
+
|
|
169
|
+
IP address threat categories for security filtering.
|
|
170
|
+
|
|
171
|
+
| Value | Description |
|
|
172
|
+
| ----- | ----------- |
|
|
173
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
174
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
175
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
176
|
+
| `BOTNETS` | Known botnet IPs |
|
|
177
|
+
| `SCANNERS` | Network scanner IPs |
|
|
178
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
179
|
+
| `PHISHING` | Phishing-related IPs |
|
|
180
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
181
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
182
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
183
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
184
|
+
| `NETWORK` | Known bad network ranges |
|
|
185
|
+
|
|
109
186
|
## Import
|
|
110
187
|
|
|
111
188
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_namespace Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Organization"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages new namespace. Name of the object is name of the name space. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_namespace (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages new namespace. Name of the object is name of the name space. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Namespace API docs](https://docs.cloud.f5.com/docs-v2/api/namespace) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Namespace Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages new namespace. Name of the object is name of the name space. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Namespace configuration
|
|
21
21
|
resource "f5xc_namespace" "example" {
|
|
@@ -77,6 +77,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
77
77
|
|
|
78
78
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
79
79
|
|
|
80
|
+
---
|
|
81
|
+
|
|
82
|
+
## Common Types
|
|
83
|
+
|
|
84
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
85
|
+
|
|
86
|
+
### Object Reference {#common-object-reference}
|
|
87
|
+
|
|
88
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
89
|
+
|
|
90
|
+
| Field | Type | Description |
|
|
91
|
+
| ----- | ---- | ----------- |
|
|
92
|
+
| `name` | String | Name of the referenced object |
|
|
93
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
94
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
95
|
+
|
|
96
|
+
### Transformers {#common-transformers}
|
|
97
|
+
|
|
98
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
99
|
+
|
|
100
|
+
| Value | Description |
|
|
101
|
+
| ----- | ----------- |
|
|
102
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
103
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
104
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
105
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
106
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
107
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
108
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
109
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
110
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
111
|
+
|
|
112
|
+
### HTTP Methods {#common-http-methods}
|
|
113
|
+
|
|
114
|
+
HTTP methods used for request matching.
|
|
115
|
+
|
|
116
|
+
| Value | Description |
|
|
117
|
+
| ----- | ----------- |
|
|
118
|
+
| `ANY` | Match any HTTP method |
|
|
119
|
+
| `GET` | HTTP GET request |
|
|
120
|
+
| `HEAD` | HTTP HEAD request |
|
|
121
|
+
| `POST` | HTTP POST request |
|
|
122
|
+
| `PUT` | HTTP PUT request |
|
|
123
|
+
| `DELETE` | HTTP DELETE request |
|
|
124
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
125
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
126
|
+
| `TRACE` | HTTP TRACE request |
|
|
127
|
+
| `PATCH` | HTTP PATCH request |
|
|
128
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
129
|
+
|
|
130
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
131
|
+
|
|
132
|
+
TLS fingerprint categories for malicious client detection.
|
|
133
|
+
|
|
134
|
+
| Value | Description |
|
|
135
|
+
| ----- | ----------- |
|
|
136
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
137
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
138
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
139
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
140
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
141
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
142
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
143
|
+
|
|
144
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
145
|
+
|
|
146
|
+
IP address threat categories for security filtering.
|
|
147
|
+
|
|
148
|
+
| Value | Description |
|
|
149
|
+
| ----- | ----------- |
|
|
150
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
151
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
152
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
153
|
+
| `BOTNETS` | Known botnet IPs |
|
|
154
|
+
| `SCANNERS` | Network scanner IPs |
|
|
155
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
156
|
+
| `PHISHING` | Phishing-related IPs |
|
|
157
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
158
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
159
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
160
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
161
|
+
| `NETWORK` | Known bad network ranges |
|
|
162
|
+
|
|
80
163
|
## Import
|
|
81
164
|
|
|
82
165
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_nat_policy Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a NAT Policy resource in F5 Distributed Cloud for nat policy create specification configures nat policy with multiple rules, configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_nat_policy (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a NAT Policy resource in F5 Distributed Cloud for nat policy create specification configures nat policy with multiple rules, configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [NAT Policy API docs](https://docs.cloud.f5.com/docs-v2/api/nat-policy) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# NAT Policy Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a NAT Policy resource in F5 Distributed Cloud for nat policy create specification configures nat policy with multiple rules, configuration.
|
|
19
19
|
|
|
20
20
|
# Basic NAT Policy configuration
|
|
21
21
|
resource "f5xc_nat_policy" "example" {
|
|
@@ -128,15 +128,15 @@ An [`elastic_ips`](#rules-action-dynamic-elastic-ips) block (within [`rules.acti
|
|
|
128
128
|
|
|
129
129
|
A [`refs`](#rules-action-dynamic-elastic-ips-refs) block (within [`rules.action.dynamic.elastic_ips`](#rules-action-dynamic-elastic-ips)) supports the following:
|
|
130
130
|
|
|
131
|
-
<a id="kind-df4674"></a>• [`kind`](#kind-df4674) - Optional String<br>
|
|
131
|
+
<a id="kind-df4674"></a>• [`kind`](#kind-df4674) - Optional String<br>Object reference kind
|
|
132
132
|
|
|
133
|
-
<a id="name-fdfa81"></a>• [`name`](#name-fdfa81) - Optional String<br>
|
|
133
|
+
<a id="name-fdfa81"></a>• [`name`](#name-fdfa81) - Optional String<br>Object reference name
|
|
134
134
|
|
|
135
|
-
<a id="namespace-fa1e70"></a>• [`namespace`](#namespace-fa1e70) - Optional String<br>
|
|
135
|
+
<a id="namespace-fa1e70"></a>• [`namespace`](#namespace-fa1e70) - Optional String<br>Object reference namespace
|
|
136
136
|
|
|
137
|
-
<a id="tenant-aec1f4"></a>• [`tenant`](#tenant-aec1f4) - Optional String<br>
|
|
137
|
+
<a id="tenant-aec1f4"></a>• [`tenant`](#tenant-aec1f4) - Optional String<br>Object reference tenant
|
|
138
138
|
|
|
139
|
-
<a id="uid-83b949"></a>• [`uid`](#uid-83b949) - Optional String<br>
|
|
139
|
+
<a id="uid-83b949"></a>• [`uid`](#uid-83b949) - Optional String<br>Object reference UID
|
|
140
140
|
|
|
141
141
|
#### Rules Action Dynamic Pools
|
|
142
142
|
|
|
@@ -154,15 +154,15 @@ A [`cloud_connect`](#rules-cloud-connect) block (within [`rules`](#rules)) suppo
|
|
|
154
154
|
|
|
155
155
|
A [`refs`](#rules-cloud-connect-refs) block (within [`rules.cloud_connect`](#rules-cloud-connect)) supports the following:
|
|
156
156
|
|
|
157
|
-
<a id="rules-cloud-connect-refs-kind"></a>• [`kind`](#rules-cloud-connect-refs-kind) - Optional String<br>
|
|
157
|
+
<a id="rules-cloud-connect-refs-kind"></a>• [`kind`](#rules-cloud-connect-refs-kind) - Optional String<br>Object reference kind
|
|
158
158
|
|
|
159
|
-
<a id="rules-cloud-connect-refs-name"></a>• [`name`](#rules-cloud-connect-refs-name) - Optional String<br>
|
|
159
|
+
<a id="rules-cloud-connect-refs-name"></a>• [`name`](#rules-cloud-connect-refs-name) - Optional String<br>Object reference name
|
|
160
160
|
|
|
161
|
-
<a id="rules-cloud-connect-refs-namespace"></a>• [`namespace`](#rules-cloud-connect-refs-namespace) - Optional String<br>
|
|
161
|
+
<a id="rules-cloud-connect-refs-namespace"></a>• [`namespace`](#rules-cloud-connect-refs-namespace) - Optional String<br>Object reference namespace
|
|
162
162
|
|
|
163
|
-
<a id="rules-cloud-connect-refs-tenant"></a>• [`tenant`](#rules-cloud-connect-refs-tenant) - Optional String<br>
|
|
163
|
+
<a id="rules-cloud-connect-refs-tenant"></a>• [`tenant`](#rules-cloud-connect-refs-tenant) - Optional String<br>Object reference tenant
|
|
164
164
|
|
|
165
|
-
<a id="rules-cloud-connect-refs-uid"></a>• [`uid`](#rules-cloud-connect-refs-uid) - Optional String<br>
|
|
165
|
+
<a id="rules-cloud-connect-refs-uid"></a>• [`uid`](#rules-cloud-connect-refs-uid) - Optional String<br>Object reference UID
|
|
166
166
|
|
|
167
167
|
#### Rules Criteria
|
|
168
168
|
|
|
@@ -210,15 +210,15 @@ A [`segment`](#rules-criteria-segment) block (within [`rules.criteria`](#rules-c
|
|
|
210
210
|
|
|
211
211
|
A [`refs`](#rules-criteria-segment-refs) block (within [`rules.criteria.segment`](#rules-criteria-segment)) supports the following:
|
|
212
212
|
|
|
213
|
-
<a id="rules-criteria-segment-refs-kind"></a>• [`kind`](#rules-criteria-segment-refs-kind) - Optional String<br>
|
|
213
|
+
<a id="rules-criteria-segment-refs-kind"></a>• [`kind`](#rules-criteria-segment-refs-kind) - Optional String<br>Object reference kind
|
|
214
214
|
|
|
215
|
-
<a id="rules-criteria-segment-refs-name"></a>• [`name`](#rules-criteria-segment-refs-name) - Optional String<br>
|
|
215
|
+
<a id="rules-criteria-segment-refs-name"></a>• [`name`](#rules-criteria-segment-refs-name) - Optional String<br>Object reference name
|
|
216
216
|
|
|
217
|
-
<a id="rules-criteria-segment-refs-namespace"></a>• [`namespace`](#rules-criteria-segment-refs-namespace) - Optional String<br>
|
|
217
|
+
<a id="rules-criteria-segment-refs-namespace"></a>• [`namespace`](#rules-criteria-segment-refs-namespace) - Optional String<br>Object reference namespace
|
|
218
218
|
|
|
219
|
-
<a id="rules-criteria-segment-refs-tenant"></a>• [`tenant`](#rules-criteria-segment-refs-tenant) - Optional String<br>
|
|
219
|
+
<a id="rules-criteria-segment-refs-tenant"></a>• [`tenant`](#rules-criteria-segment-refs-tenant) - Optional String<br>Object reference tenant
|
|
220
220
|
|
|
221
|
-
<a id="rules-criteria-segment-refs-uid"></a>• [`uid`](#rules-criteria-segment-refs-uid) - Optional String<br>
|
|
221
|
+
<a id="rules-criteria-segment-refs-uid"></a>• [`uid`](#rules-criteria-segment-refs-uid) - Optional String<br>Object reference UID
|
|
222
222
|
|
|
223
223
|
#### Rules Criteria Source Port
|
|
224
224
|
|
|
@@ -296,15 +296,15 @@ A [`virtual_network`](#rules-criteria-virtual-network) block (within [`rules.cri
|
|
|
296
296
|
|
|
297
297
|
A [`refs`](#rules-criteria-virtual-network-refs) block (within [`rules.criteria.virtual_network`](#rules-criteria-virtual-network)) supports the following:
|
|
298
298
|
|
|
299
|
-
<a id="kind-8d8876"></a>• [`kind`](#kind-8d8876) - Optional String<br>
|
|
299
|
+
<a id="kind-8d8876"></a>• [`kind`](#kind-8d8876) - Optional String<br>Object reference kind
|
|
300
300
|
|
|
301
|
-
<a id="name-369d2b"></a>• [`name`](#name-369d2b) - Optional String<br>
|
|
301
|
+
<a id="name-369d2b"></a>• [`name`](#name-369d2b) - Optional String<br>Object reference name
|
|
302
302
|
|
|
303
|
-
<a id="namespace-a79f74"></a>• [`namespace`](#namespace-a79f74) - Optional String<br>
|
|
303
|
+
<a id="namespace-a79f74"></a>• [`namespace`](#namespace-a79f74) - Optional String<br>Object reference namespace
|
|
304
304
|
|
|
305
|
-
<a id="tenant-79ff48"></a>• [`tenant`](#tenant-79ff48) - Optional String<br>
|
|
305
|
+
<a id="tenant-79ff48"></a>• [`tenant`](#tenant-79ff48) - Optional String<br>Object reference tenant
|
|
306
306
|
|
|
307
|
-
<a id="rules-criteria-virtual-network-refs-uid"></a>• [`uid`](#rules-criteria-virtual-network-refs-uid) - Optional String<br>
|
|
307
|
+
<a id="rules-criteria-virtual-network-refs-uid"></a>• [`uid`](#rules-criteria-virtual-network-refs-uid) - Optional String<br>Object reference UID
|
|
308
308
|
|
|
309
309
|
#### Rules Network Interface
|
|
310
310
|
|
|
@@ -316,15 +316,15 @@ A [`network_interface`](#rules-network-interface) block (within [`rules`](#rules
|
|
|
316
316
|
|
|
317
317
|
A [`refs`](#rules-network-interface-refs) block (within [`rules.network_interface`](#rules-network-interface)) supports the following:
|
|
318
318
|
|
|
319
|
-
<a id="rules-network-interface-refs-kind"></a>• [`kind`](#rules-network-interface-refs-kind) - Optional String<br>
|
|
319
|
+
<a id="rules-network-interface-refs-kind"></a>• [`kind`](#rules-network-interface-refs-kind) - Optional String<br>Object reference kind
|
|
320
320
|
|
|
321
|
-
<a id="rules-network-interface-refs-name"></a>• [`name`](#rules-network-interface-refs-name) - Optional String<br>
|
|
321
|
+
<a id="rules-network-interface-refs-name"></a>• [`name`](#rules-network-interface-refs-name) - Optional String<br>Object reference name
|
|
322
322
|
|
|
323
|
-
<a id="rules-network-interface-refs-namespace"></a>• [`namespace`](#rules-network-interface-refs-namespace) - Optional String<br>
|
|
323
|
+
<a id="rules-network-interface-refs-namespace"></a>• [`namespace`](#rules-network-interface-refs-namespace) - Optional String<br>Object reference namespace
|
|
324
324
|
|
|
325
|
-
<a id="rules-network-interface-refs-tenant"></a>• [`tenant`](#rules-network-interface-refs-tenant) - Optional String<br>
|
|
325
|
+
<a id="rules-network-interface-refs-tenant"></a>• [`tenant`](#rules-network-interface-refs-tenant) - Optional String<br>Object reference tenant
|
|
326
326
|
|
|
327
|
-
<a id="rules-network-interface-refs-uid"></a>• [`uid`](#rules-network-interface-refs-uid) - Optional String<br>
|
|
327
|
+
<a id="rules-network-interface-refs-uid"></a>• [`uid`](#rules-network-interface-refs-uid) - Optional String<br>Object reference UID
|
|
328
328
|
|
|
329
329
|
#### Rules Segment
|
|
330
330
|
|
|
@@ -336,15 +336,15 @@ A [`segment`](#rules-segment) block (within [`rules`](#rules)) supports the foll
|
|
|
336
336
|
|
|
337
337
|
A [`refs`](#rules-segment-refs) block (within [`rules.segment`](#rules-segment)) supports the following:
|
|
338
338
|
|
|
339
|
-
<a id="rules-segment-refs-kind"></a>• [`kind`](#rules-segment-refs-kind) - Optional String<br>
|
|
339
|
+
<a id="rules-segment-refs-kind"></a>• [`kind`](#rules-segment-refs-kind) - Optional String<br>Object reference kind
|
|
340
340
|
|
|
341
|
-
<a id="rules-segment-refs-name"></a>• [`name`](#rules-segment-refs-name) - Optional String<br>
|
|
341
|
+
<a id="rules-segment-refs-name"></a>• [`name`](#rules-segment-refs-name) - Optional String<br>Object reference name
|
|
342
342
|
|
|
343
|
-
<a id="rules-segment-refs-namespace"></a>• [`namespace`](#rules-segment-refs-namespace) - Optional String<br>
|
|
343
|
+
<a id="rules-segment-refs-namespace"></a>• [`namespace`](#rules-segment-refs-namespace) - Optional String<br>Object reference namespace
|
|
344
344
|
|
|
345
|
-
<a id="rules-segment-refs-tenant"></a>• [`tenant`](#rules-segment-refs-tenant) - Optional String<br>
|
|
345
|
+
<a id="rules-segment-refs-tenant"></a>• [`tenant`](#rules-segment-refs-tenant) - Optional String<br>Object reference tenant
|
|
346
346
|
|
|
347
|
-
<a id="rules-segment-refs-uid"></a>• [`uid`](#rules-segment-refs-uid) - Optional String<br>
|
|
347
|
+
<a id="rules-segment-refs-uid"></a>• [`uid`](#rules-segment-refs-uid) - Optional String<br>Object reference UID
|
|
348
348
|
|
|
349
349
|
#### Rules Virtual Network
|
|
350
350
|
|
|
@@ -356,15 +356,15 @@ A [`virtual_network`](#rules-virtual-network) block (within [`rules`](#rules)) s
|
|
|
356
356
|
|
|
357
357
|
A [`refs`](#rules-virtual-network-refs) block (within [`rules.virtual_network`](#rules-virtual-network)) supports the following:
|
|
358
358
|
|
|
359
|
-
<a id="rules-virtual-network-refs-kind"></a>• [`kind`](#rules-virtual-network-refs-kind) - Optional String<br>
|
|
359
|
+
<a id="rules-virtual-network-refs-kind"></a>• [`kind`](#rules-virtual-network-refs-kind) - Optional String<br>Object reference kind
|
|
360
360
|
|
|
361
|
-
<a id="rules-virtual-network-refs-name"></a>• [`name`](#rules-virtual-network-refs-name) - Optional String<br>
|
|
361
|
+
<a id="rules-virtual-network-refs-name"></a>• [`name`](#rules-virtual-network-refs-name) - Optional String<br>Object reference name
|
|
362
362
|
|
|
363
|
-
<a id="rules-virtual-network-refs-namespace"></a>• [`namespace`](#rules-virtual-network-refs-namespace) - Optional String<br>
|
|
363
|
+
<a id="rules-virtual-network-refs-namespace"></a>• [`namespace`](#rules-virtual-network-refs-namespace) - Optional String<br>Object reference namespace
|
|
364
364
|
|
|
365
|
-
<a id="rules-virtual-network-refs-tenant"></a>• [`tenant`](#rules-virtual-network-refs-tenant) - Optional String<br>
|
|
365
|
+
<a id="rules-virtual-network-refs-tenant"></a>• [`tenant`](#rules-virtual-network-refs-tenant) - Optional String<br>Object reference tenant
|
|
366
366
|
|
|
367
|
-
<a id="rules-virtual-network-refs-uid"></a>• [`uid`](#rules-virtual-network-refs-uid) - Optional String<br>
|
|
367
|
+
<a id="rules-virtual-network-refs-uid"></a>• [`uid`](#rules-virtual-network-refs-uid) - Optional String<br>Object reference UID
|
|
368
368
|
|
|
369
369
|
#### Site
|
|
370
370
|
|
|
@@ -376,15 +376,15 @@ A [`site`](#site) block supports the following:
|
|
|
376
376
|
|
|
377
377
|
A [`refs`](#site-refs) block (within [`site`](#site)) supports the following:
|
|
378
378
|
|
|
379
|
-
<a id="site-refs-kind"></a>• [`kind`](#site-refs-kind) - Optional String<br>
|
|
379
|
+
<a id="site-refs-kind"></a>• [`kind`](#site-refs-kind) - Optional String<br>Object reference kind
|
|
380
380
|
|
|
381
|
-
<a id="site-refs-name"></a>• [`name`](#site-refs-name) - Optional String<br>
|
|
381
|
+
<a id="site-refs-name"></a>• [`name`](#site-refs-name) - Optional String<br>Object reference name
|
|
382
382
|
|
|
383
|
-
<a id="site-refs-namespace"></a>• [`namespace`](#site-refs-namespace) - Optional String<br>
|
|
383
|
+
<a id="site-refs-namespace"></a>• [`namespace`](#site-refs-namespace) - Optional String<br>Object reference namespace
|
|
384
384
|
|
|
385
|
-
<a id="site-refs-tenant"></a>• [`tenant`](#site-refs-tenant) - Optional String<br>
|
|
385
|
+
<a id="site-refs-tenant"></a>• [`tenant`](#site-refs-tenant) - Optional String<br>Object reference tenant
|
|
386
386
|
|
|
387
|
-
<a id="site-refs-uid"></a>• [`uid`](#site-refs-uid) - Optional String<br>
|
|
387
|
+
<a id="site-refs-uid"></a>• [`uid`](#site-refs-uid) - Optional String<br>Object reference UID
|
|
388
388
|
|
|
389
389
|
#### Timeouts
|
|
390
390
|
|
|
@@ -398,6 +398,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
398
398
|
|
|
399
399
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
400
400
|
|
|
401
|
+
---
|
|
402
|
+
|
|
403
|
+
## Common Types
|
|
404
|
+
|
|
405
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
406
|
+
|
|
407
|
+
### Object Reference {#common-object-reference}
|
|
408
|
+
|
|
409
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
410
|
+
|
|
411
|
+
| Field | Type | Description |
|
|
412
|
+
| ----- | ---- | ----------- |
|
|
413
|
+
| `name` | String | Name of the referenced object |
|
|
414
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
415
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
416
|
+
|
|
417
|
+
### Transformers {#common-transformers}
|
|
418
|
+
|
|
419
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
420
|
+
|
|
421
|
+
| Value | Description |
|
|
422
|
+
| ----- | ----------- |
|
|
423
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
424
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
425
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
426
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
427
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
428
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
429
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
430
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
431
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
432
|
+
|
|
433
|
+
### HTTP Methods {#common-http-methods}
|
|
434
|
+
|
|
435
|
+
HTTP methods used for request matching.
|
|
436
|
+
|
|
437
|
+
| Value | Description |
|
|
438
|
+
| ----- | ----------- |
|
|
439
|
+
| `ANY` | Match any HTTP method |
|
|
440
|
+
| `GET` | HTTP GET request |
|
|
441
|
+
| `HEAD` | HTTP HEAD request |
|
|
442
|
+
| `POST` | HTTP POST request |
|
|
443
|
+
| `PUT` | HTTP PUT request |
|
|
444
|
+
| `DELETE` | HTTP DELETE request |
|
|
445
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
446
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
447
|
+
| `TRACE` | HTTP TRACE request |
|
|
448
|
+
| `PATCH` | HTTP PATCH request |
|
|
449
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
450
|
+
|
|
451
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
452
|
+
|
|
453
|
+
TLS fingerprint categories for malicious client detection.
|
|
454
|
+
|
|
455
|
+
| Value | Description |
|
|
456
|
+
| ----- | ----------- |
|
|
457
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
458
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
459
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
460
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
461
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
462
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
463
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
464
|
+
|
|
465
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
466
|
+
|
|
467
|
+
IP address threat categories for security filtering.
|
|
468
|
+
|
|
469
|
+
| Value | Description |
|
|
470
|
+
| ----- | ----------- |
|
|
471
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
472
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
473
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
474
|
+
| `BOTNETS` | Known botnet IPs |
|
|
475
|
+
| `SCANNERS` | Network scanner IPs |
|
|
476
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
477
|
+
| `PHISHING` | Phishing-related IPs |
|
|
478
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
479
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
480
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
481
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
482
|
+
| `NETWORK` | Known bad network ranges |
|
|
483
|
+
|
|
401
484
|
## Import
|
|
402
485
|
|
|
403
486
|
Import is supported using the following syntax:
|