@robinmordasiewicz/f5xc-terraform-mcp 2.6.1 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_subscription.md +85 -2
- package/dist/docs/data-sources/address_allocator.md +85 -2
- package/dist/docs/data-sources/advertise_policy.md +85 -2
- package/dist/docs/data-sources/alert_policy.md +85 -2
- package/dist/docs/data-sources/alert_receiver.md +85 -2
- package/dist/docs/data-sources/allowed_tenant.md +85 -2
- package/dist/docs/data-sources/api_crawler.md +85 -2
- package/dist/docs/data-sources/api_credential.md +85 -2
- package/dist/docs/data-sources/api_definition.md +85 -2
- package/dist/docs/data-sources/api_discovery.md +85 -2
- package/dist/docs/data-sources/api_testing.md +85 -2
- package/dist/docs/data-sources/apm.md +85 -2
- package/dist/docs/data-sources/app_api_group.md +85 -2
- package/dist/docs/data-sources/app_firewall.md +85 -2
- package/dist/docs/data-sources/app_setting.md +85 -2
- package/dist/docs/data-sources/app_type.md +85 -2
- package/dist/docs/data-sources/authentication.md +85 -2
- package/dist/docs/data-sources/aws_tgw_site.md +85 -2
- package/dist/docs/data-sources/aws_vpc_site.md +85 -2
- package/dist/docs/data-sources/azure_vnet_site.md +85 -2
- package/dist/docs/data-sources/bgp.md +85 -2
- package/dist/docs/data-sources/bgp_asn_set.md +85 -2
- package/dist/docs/data-sources/bgp_routing_policy.md +85 -2
- package/dist/docs/data-sources/bigip_irule.md +85 -2
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +85 -2
- package/dist/docs/data-sources/cdn_cache_rule.md +85 -2
- package/dist/docs/data-sources/cdn_loadbalancer.md +85 -2
- package/dist/docs/data-sources/certificate.md +85 -2
- package/dist/docs/data-sources/certificate_chain.md +85 -2
- package/dist/docs/data-sources/child_tenant.md +85 -2
- package/dist/docs/data-sources/child_tenant_manager.md +85 -2
- package/dist/docs/data-sources/cloud_connect.md +85 -2
- package/dist/docs/data-sources/cloud_credentials.md +85 -2
- package/dist/docs/data-sources/cloud_elastic_ip.md +85 -2
- package/dist/docs/data-sources/cloud_link.md +85 -2
- package/dist/docs/data-sources/cluster.md +85 -2
- package/dist/docs/data-sources/cminstance.md +85 -2
- package/dist/docs/data-sources/code_base_integration.md +85 -2
- package/dist/docs/data-sources/contact.md +85 -2
- package/dist/docs/data-sources/container_registry.md +85 -2
- package/dist/docs/data-sources/crl.md +85 -2
- package/dist/docs/data-sources/customer_support.md +85 -2
- package/dist/docs/data-sources/data_group.md +85 -2
- package/dist/docs/data-sources/data_type.md +85 -2
- package/dist/docs/data-sources/dc_cluster_group.md +85 -2
- package/dist/docs/data-sources/discovery.md +85 -2
- package/dist/docs/data-sources/dns_compliance_checks.md +85 -2
- package/dist/docs/data-sources/dns_domain.md +85 -2
- package/dist/docs/data-sources/dns_lb_health_check.md +85 -2
- package/dist/docs/data-sources/dns_lb_pool.md +85 -2
- package/dist/docs/data-sources/dns_load_balancer.md +85 -2
- package/dist/docs/data-sources/dns_zone.md +85 -2
- package/dist/docs/data-sources/endpoint.md +85 -2
- package/dist/docs/data-sources/enhanced_firewall_policy.md +85 -2
- package/dist/docs/data-sources/external_connector.md +85 -2
- package/dist/docs/data-sources/fast_acl.md +85 -2
- package/dist/docs/data-sources/fast_acl_rule.md +85 -2
- package/dist/docs/data-sources/filter_set.md +85 -2
- package/dist/docs/data-sources/fleet.md +85 -2
- package/dist/docs/data-sources/forward_proxy_policy.md +85 -2
- package/dist/docs/data-sources/forwarding_class.md +85 -2
- package/dist/docs/data-sources/gcp_vpc_site.md +85 -2
- package/dist/docs/data-sources/geo_location_set.md +85 -2
- package/dist/docs/data-sources/global_log_receiver.md +85 -2
- package/dist/docs/data-sources/healthcheck.md +85 -2
- package/dist/docs/data-sources/http_loadbalancer.md +85 -2
- package/dist/docs/data-sources/ike1.md +85 -2
- package/dist/docs/data-sources/ike2.md +85 -2
- package/dist/docs/data-sources/ike_phase1_profile.md +85 -2
- package/dist/docs/data-sources/ike_phase2_profile.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +85 -2
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +85 -2
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +85 -2
- package/dist/docs/data-sources/infraprotect_tunnel.md +85 -2
- package/dist/docs/data-sources/ip_prefix_set.md +85 -2
- package/dist/docs/data-sources/irule.md +85 -2
- package/dist/docs/data-sources/k8s_cluster.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_admission.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_policy.md +85 -2
- package/dist/docs/data-sources/log_receiver.md +85 -2
- package/dist/docs/data-sources/malicious_user_mitigation.md +85 -2
- package/dist/docs/data-sources/managed_tenant.md +85 -2
- package/dist/docs/data-sources/namespace.md +85 -2
- package/dist/docs/data-sources/nat_policy.md +85 -2
- package/dist/docs/data-sources/network_connector.md +85 -2
- package/dist/docs/data-sources/network_firewall.md +85 -2
- package/dist/docs/data-sources/network_interface.md +85 -2
- package/dist/docs/data-sources/network_policy.md +85 -2
- package/dist/docs/data-sources/network_policy_rule.md +85 -2
- package/dist/docs/data-sources/network_policy_view.md +85 -2
- package/dist/docs/data-sources/nfv_service.md +85 -2
- package/dist/docs/data-sources/oidc_provider.md +85 -2
- package/dist/docs/data-sources/origin_pool.md +85 -2
- package/dist/docs/data-sources/policer.md +85 -2
- package/dist/docs/data-sources/policy_based_routing.md +85 -2
- package/dist/docs/data-sources/protocol_inspection.md +85 -2
- package/dist/docs/data-sources/protocol_policer.md +85 -2
- package/dist/docs/data-sources/proxy.md +85 -2
- package/dist/docs/data-sources/quota.md +85 -2
- package/dist/docs/data-sources/rate_limiter.md +85 -2
- package/dist/docs/data-sources/rate_limiter_policy.md +85 -2
- package/dist/docs/data-sources/registration.md +85 -2
- package/dist/docs/data-sources/report_config.md +85 -2
- package/dist/docs/data-sources/role.md +85 -2
- package/dist/docs/data-sources/route.md +85 -2
- package/dist/docs/data-sources/secret_management_access.md +85 -2
- package/dist/docs/data-sources/secret_policy.md +85 -2
- package/dist/docs/data-sources/secret_policy_rule.md +85 -2
- package/dist/docs/data-sources/securemesh_site.md +85 -2
- package/dist/docs/data-sources/securemesh_site_v2.md +85 -2
- package/dist/docs/data-sources/segment.md +85 -2
- package/dist/docs/data-sources/sensitive_data_policy.md +85 -2
- package/dist/docs/data-sources/service_policy.md +85 -2
- package/dist/docs/data-sources/service_policy_rule.md +85 -2
- package/dist/docs/data-sources/site_mesh_group.md +85 -2
- package/dist/docs/data-sources/srv6_network_slice.md +85 -2
- package/dist/docs/data-sources/subnet.md +85 -2
- package/dist/docs/data-sources/tcp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/tenant_configuration.md +85 -2
- package/dist/docs/data-sources/tenant_profile.md +85 -2
- package/dist/docs/data-sources/ticket_tracking_system.md +85 -2
- package/dist/docs/data-sources/token.md +85 -2
- package/dist/docs/data-sources/tpm_api_key.md +85 -2
- package/dist/docs/data-sources/tpm_category.md +85 -2
- package/dist/docs/data-sources/tpm_manager.md +85 -2
- package/dist/docs/data-sources/trusted_ca_list.md +85 -2
- package/dist/docs/data-sources/tunnel.md +85 -2
- package/dist/docs/data-sources/udp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/usb_policy.md +85 -2
- package/dist/docs/data-sources/user_identification.md +85 -2
- package/dist/docs/data-sources/virtual_host.md +85 -2
- package/dist/docs/data-sources/virtual_k8s.md +85 -2
- package/dist/docs/data-sources/virtual_network.md +85 -2
- package/dist/docs/data-sources/virtual_site.md +85 -2
- package/dist/docs/data-sources/voltshare_admin_policy.md +85 -2
- package/dist/docs/data-sources/voltstack_site.md +85 -2
- package/dist/docs/data-sources/waf_exclusion_policy.md +85 -2
- package/dist/docs/data-sources/workload.md +85 -2
- package/dist/docs/data-sources/workload_flavor.md +85 -2
- package/dist/docs/resources/addon_subscription.md +87 -10
- package/dist/docs/resources/address_allocator.md +86 -3
- package/dist/docs/resources/advertise_policy.md +112 -57
- package/dist/docs/resources/alert_policy.md +91 -8
- package/dist/docs/resources/alert_receiver.md +94 -55
- package/dist/docs/resources/allowed_tenant.md +87 -10
- package/dist/docs/resources/api_crawler.md +86 -3
- package/dist/docs/resources/api_credential.md +88 -5
- package/dist/docs/resources/api_definition.md +89 -6
- package/dist/docs/resources/api_discovery.md +86 -3
- package/dist/docs/resources/api_testing.md +95 -52
- package/dist/docs/resources/apm.md +156 -519
- package/dist/docs/resources/app_api_group.md +90 -25
- package/dist/docs/resources/app_firewall.md +87 -6
- package/dist/docs/resources/app_setting.md +97 -66
- package/dist/docs/resources/app_type.md +86 -3
- package/dist/docs/resources/authentication.md +90 -27
- package/dist/docs/resources/aws_tgw_site.md +125 -222
- package/dist/docs/resources/aws_vpc_site.md +149 -352
- package/dist/docs/resources/azure_vnet_site.md +233 -860
- package/dist/docs/resources/bgp.md +103 -32
- package/dist/docs/resources/bgp_asn_set.md +86 -3
- package/dist/docs/resources/bgp_routing_policy.md +86 -3
- package/dist/docs/resources/bigip_irule.md +86 -3
- package/dist/docs/resources/bot_defense_app_infrastructure.md +86 -3
- package/dist/docs/resources/cdn_cache_rule.md +97 -120
- package/dist/docs/resources/cdn_loadbalancer.md +325 -1620
- package/dist/docs/resources/certificate.md +87 -10
- package/dist/docs/resources/certificate_chain.md +86 -3
- package/dist/docs/resources/child_tenant.md +88 -17
- package/dist/docs/resources/child_tenant_manager.md +88 -17
- package/dist/docs/resources/cloud_connect.md +98 -63
- package/dist/docs/resources/cloud_credentials.md +92 -39
- package/dist/docs/resources/cloud_elastic_ip.md +91 -8
- package/dist/docs/resources/cloud_link.md +90 -29
- package/dist/docs/resources/cluster.md +109 -66
- package/dist/docs/resources/cminstance.md +86 -3
- package/dist/docs/resources/code_base_integration.md +100 -87
- package/dist/docs/resources/contact.md +86 -3
- package/dist/docs/resources/container_registry.md +86 -3
- package/dist/docs/resources/crl.md +86 -3
- package/dist/docs/resources/customer_support.md +91 -8
- package/dist/docs/resources/data_group.md +86 -3
- package/dist/docs/resources/data_type.md +88 -9
- package/dist/docs/resources/dc_cluster_group.md +86 -3
- package/dist/docs/resources/discovery.md +115 -104
- package/dist/docs/resources/dns_compliance_checks.md +86 -3
- package/dist/docs/resources/dns_domain.md +86 -3
- package/dist/docs/resources/dns_lb_health_check.md +86 -3
- package/dist/docs/resources/dns_lb_pool.md +87 -10
- package/dist/docs/resources/dns_load_balancer.md +95 -40
- package/dist/docs/resources/dns_zone.md +111 -926
- package/dist/docs/resources/endpoint.md +101 -18
- package/dist/docs/resources/enhanced_firewall_policy.md +89 -32
- package/dist/docs/resources/external_connector.md +94 -29
- package/dist/docs/resources/fast_acl.md +100 -101
- package/dist/docs/resources/fast_acl_rule.md +101 -18
- package/dist/docs/resources/filter_set.md +86 -3
- package/dist/docs/resources/fleet.md +170 -541
- package/dist/docs/resources/forward_proxy_policy.md +90 -31
- package/dist/docs/resources/forwarding_class.md +87 -10
- package/dist/docs/resources/gcp_vpc_site.md +141 -328
- package/dist/docs/resources/geo_location_set.md +86 -3
- package/dist/docs/resources/global_log_receiver.md +116 -181
- package/dist/docs/resources/healthcheck.md +86 -3
- package/dist/docs/resources/http_loadbalancer.md +523 -2778
- package/dist/docs/resources/ike1.md +86 -3
- package/dist/docs/resources/ike2.md +86 -3
- package/dist/docs/resources/ike_phase1_profile.md +86 -3
- package/dist/docs/resources/ike_phase2_profile.md +86 -3
- package/dist/docs/resources/infraprotect_asn.md +86 -3
- package/dist/docs/resources/infraprotect_asn_prefix.md +87 -10
- package/dist/docs/resources/infraprotect_deny_list_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -3
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +86 -3
- package/dist/docs/resources/infraprotect_tunnel.md +90 -29
- package/dist/docs/resources/ip_prefix_set.md +86 -3
- package/dist/docs/resources/irule.md +86 -3
- package/dist/docs/resources/k8s_cluster.md +93 -58
- package/dist/docs/resources/k8s_cluster_role.md +87 -8
- package/dist/docs/resources/k8s_cluster_role_binding.md +87 -10
- package/dist/docs/resources/k8s_pod_security_admission.md +86 -3
- package/dist/docs/resources/k8s_pod_security_policy.md +87 -8
- package/dist/docs/resources/log_receiver.md +88 -15
- package/dist/docs/resources/malicious_user_mitigation.md +86 -3
- package/dist/docs/resources/managed_tenant.md +89 -12
- package/dist/docs/resources/namespace.md +86 -3
- package/dist/docs/resources/nat_policy.md +126 -43
- package/dist/docs/resources/network_connector.md +94 -51
- package/dist/docs/resources/network_firewall.md +90 -31
- package/dist/docs/resources/network_interface.md +93 -46
- package/dist/docs/resources/network_policy.md +96 -13
- package/dist/docs/resources/network_policy_rule.md +91 -8
- package/dist/docs/resources/network_policy_view.md +96 -13
- package/dist/docs/resources/nfv_service.md +153 -446
- package/dist/docs/resources/oidc_provider.md +86 -3
- package/dist/docs/resources/origin_pool.md +108 -145
- package/dist/docs/resources/policer.md +86 -3
- package/dist/docs/resources/policy_based_routing.md +100 -89
- package/dist/docs/resources/protocol_inspection.md +87 -10
- package/dist/docs/resources/protocol_policer.md +91 -8
- package/dist/docs/resources/proxy.md +154 -571
- package/dist/docs/resources/quota.md +86 -3
- package/dist/docs/resources/rate_limiter.md +91 -8
- package/dist/docs/resources/rate_limiter_policy.md +100 -23
- package/dist/docs/resources/registration.md +86 -3
- package/dist/docs/resources/report_config.md +87 -10
- package/dist/docs/resources/role.md +86 -3
- package/dist/docs/resources/route.md +113 -82
- package/dist/docs/resources/secret_management_access.md +127 -156
- package/dist/docs/resources/secret_policy.md +87 -4
- package/dist/docs/resources/secret_policy_rule.md +86 -3
- package/dist/docs/resources/securemesh_site.md +137 -380
- package/dist/docs/resources/securemesh_site_v2.md +289 -1204
- package/dist/docs/resources/segment.md +86 -3
- package/dist/docs/resources/sensitive_data_policy.md +87 -10
- package/dist/docs/resources/service_policy.md +115 -122
- package/dist/docs/resources/service_policy_rule.md +110 -59
- package/dist/docs/resources/site_mesh_group.md +92 -15
- package/dist/docs/resources/srv6_network_slice.md +86 -3
- package/dist/docs/resources/subnet.md +89 -20
- package/dist/docs/resources/tcp_loadbalancer.md +114 -185
- package/dist/docs/resources/tenant_configuration.md +86 -3
- package/dist/docs/resources/tenant_profile.md +87 -10
- package/dist/docs/resources/ticket_tracking_system.md +86 -3
- package/dist/docs/resources/token.md +86 -3
- package/dist/docs/resources/tpm_api_key.md +91 -8
- package/dist/docs/resources/tpm_category.md +91 -8
- package/dist/docs/resources/tpm_manager.md +86 -3
- package/dist/docs/resources/trusted_ca_list.md +86 -3
- package/dist/docs/resources/tunnel.md +91 -8
- package/dist/docs/resources/udp_loadbalancer.md +97 -80
- package/dist/docs/resources/usb_policy.md +86 -3
- package/dist/docs/resources/user_identification.md +86 -3
- package/dist/docs/resources/virtual_host.md +152 -177
- package/dist/docs/resources/virtual_k8s.md +92 -15
- package/dist/docs/resources/virtual_network.md +91 -8
- package/dist/docs/resources/virtual_site.md +86 -3
- package/dist/docs/resources/voltshare_admin_policy.md +86 -11
- package/dist/docs/resources/voltstack_site.md +380 -1365
- package/dist/docs/resources/waf_exclusion_policy.md +91 -28
- package/dist/docs/resources/workload.md +1189 -4148
- package/dist/docs/resources/workload_flavor.md +86 -3
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_virtual_host Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Load Balancing"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages virtual host in a given namespace. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_virtual_host (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages virtual host in a given namespace. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Virtual Host API docs](https://docs.cloud.f5.com/docs-v2/api/virtual-host) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Virtual Host Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages virtual host in a given namespace. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Virtual Host configuration
|
|
21
21
|
resource "f5xc_virtual_host" "example" {
|
|
@@ -176,15 +176,15 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
176
176
|
|
|
177
177
|
An [`advertise_policies`](#advertise-policies) block supports the following:
|
|
178
178
|
|
|
179
|
-
<a id="advertise-policies-kind"></a>• [`kind`](#advertise-policies-kind) - Optional String<br>
|
|
179
|
+
<a id="advertise-policies-kind"></a>• [`kind`](#advertise-policies-kind) - Optional String<br>Object reference kind
|
|
180
180
|
|
|
181
|
-
<a id="advertise-policies-name"></a>• [`name`](#advertise-policies-name) - Optional String<br>
|
|
181
|
+
<a id="advertise-policies-name"></a>• [`name`](#advertise-policies-name) - Optional String<br>Object reference name
|
|
182
182
|
|
|
183
|
-
<a id="advertise-policies-namespace"></a>• [`namespace`](#advertise-policies-namespace) - Optional String<br>
|
|
183
|
+
<a id="advertise-policies-namespace"></a>• [`namespace`](#advertise-policies-namespace) - Optional String<br>Object reference namespace
|
|
184
184
|
|
|
185
|
-
<a id="advertise-policies-tenant"></a>• [`tenant`](#advertise-policies-tenant) - Optional String<br>
|
|
185
|
+
<a id="advertise-policies-tenant"></a>• [`tenant`](#advertise-policies-tenant) - Optional String<br>Object reference tenant
|
|
186
186
|
|
|
187
|
-
<a id="advertise-policies-uid"></a>• [`uid`](#advertise-policies-uid) - Optional String<br>
|
|
187
|
+
<a id="advertise-policies-uid"></a>• [`uid`](#advertise-policies-uid) - Optional String<br>Object reference UID
|
|
188
188
|
|
|
189
189
|
#### Authentication
|
|
190
190
|
|
|
@@ -204,15 +204,15 @@ An [`authentication`](#authentication) block supports the following:
|
|
|
204
204
|
|
|
205
205
|
An [`auth_config`](#authentication-auth-config) block (within [`authentication`](#authentication)) supports the following:
|
|
206
206
|
|
|
207
|
-
<a id="authentication-auth-config-kind"></a>• [`kind`](#authentication-auth-config-kind) - Optional String<br>
|
|
207
|
+
<a id="authentication-auth-config-kind"></a>• [`kind`](#authentication-auth-config-kind) - Optional String<br>Object reference kind
|
|
208
208
|
|
|
209
|
-
<a id="authentication-auth-config-name"></a>• [`name`](#authentication-auth-config-name) - Optional String<br>
|
|
209
|
+
<a id="authentication-auth-config-name"></a>• [`name`](#authentication-auth-config-name) - Optional String<br>Object reference name
|
|
210
210
|
|
|
211
|
-
<a id="authentication-auth-config-namespace"></a>• [`namespace`](#authentication-auth-config-namespace) - Optional String<br>
|
|
211
|
+
<a id="authentication-auth-config-namespace"></a>• [`namespace`](#authentication-auth-config-namespace) - Optional String<br>Object reference namespace
|
|
212
212
|
|
|
213
|
-
<a id="authentication-auth-config-tenant"></a>• [`tenant`](#authentication-auth-config-tenant) - Optional String<br>
|
|
213
|
+
<a id="authentication-auth-config-tenant"></a>• [`tenant`](#authentication-auth-config-tenant) - Optional String<br>Object reference tenant
|
|
214
214
|
|
|
215
|
-
<a id="authentication-auth-config-uid"></a>• [`uid`](#authentication-auth-config-uid) - Optional String<br>
|
|
215
|
+
<a id="authentication-auth-config-uid"></a>• [`uid`](#authentication-auth-config-uid) - Optional String<br>Object reference UID
|
|
216
216
|
|
|
217
217
|
#### Authentication Cookie Params
|
|
218
218
|
|
|
@@ -250,21 +250,11 @@ A [`prim_key`](#key-cec38f) block (within [`authentication.cookie_params.auth_hm
|
|
|
250
250
|
|
|
251
251
|
#### Authentication Cookie Params Auth HMAC Prim Key Blindfold Secret Info
|
|
252
252
|
|
|
253
|
-
|
|
254
|
-
|
|
255
|
-
<a id="provider-eeb447"></a>• [`decryption_provider`](#provider-eeb447) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
256
|
-
|
|
257
|
-
<a id="location-a494d6"></a>• [`location`](#location-a494d6) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
258
|
-
|
|
259
|
-
<a id="provider-a9048f"></a>• [`store_provider`](#provider-a9048f) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
253
|
+
<a id="deep-b713e4"></a>Deeply nested **Info** block collapsed for readability.
|
|
260
254
|
|
|
261
255
|
#### Authentication Cookie Params Auth HMAC Prim Key Clear Secret Info
|
|
262
256
|
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
<a id="ref-1927df"></a>• [`provider_ref`](#ref-1927df) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
266
|
-
|
|
267
|
-
<a id="url-868594"></a>• [`url`](#url-868594) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
257
|
+
<a id="deep-1ef372"></a>Deeply nested **Info** block collapsed for readability.
|
|
268
258
|
|
|
269
259
|
#### Authentication Cookie Params Auth HMAC Sec Key
|
|
270
260
|
|
|
@@ -276,21 +266,11 @@ A [`sec_key`](#key-f289cf) block (within [`authentication.cookie_params.auth_hma
|
|
|
276
266
|
|
|
277
267
|
#### Authentication Cookie Params Auth HMAC Sec Key Blindfold Secret Info
|
|
278
268
|
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
<a id="provider-57d865"></a>• [`decryption_provider`](#provider-57d865) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
282
|
-
|
|
283
|
-
<a id="location-4e56d1"></a>• [`location`](#location-4e56d1) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
284
|
-
|
|
285
|
-
<a id="provider-d7613c"></a>• [`store_provider`](#provider-d7613c) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
269
|
+
<a id="deep-9385f0"></a>Deeply nested **Info** block collapsed for readability.
|
|
286
270
|
|
|
287
271
|
#### Authentication Cookie Params Auth HMAC Sec Key Clear Secret Info
|
|
288
272
|
|
|
289
|
-
|
|
290
|
-
|
|
291
|
-
<a id="ref-f80e6a"></a>• [`provider_ref`](#ref-f80e6a) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
292
|
-
|
|
293
|
-
<a id="url-b9e8aa"></a>• [`url`](#url-b9e8aa) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
273
|
+
<a id="deep-cfac36"></a>Deeply nested **Info** block collapsed for readability.
|
|
294
274
|
|
|
295
275
|
#### Buffer Policy
|
|
296
276
|
|
|
@@ -380,15 +360,15 @@ A [`dynamic_reverse_proxy`](#dynamic-reverse-proxy) block supports the following
|
|
|
380
360
|
|
|
381
361
|
A [`resolution_network`](#network-fd11f9) block (within [`dynamic_reverse_proxy`](#dynamic-reverse-proxy)) supports the following:
|
|
382
362
|
|
|
383
|
-
<a id="kind-b4600a"></a>• [`kind`](#kind-b4600a) - Optional String<br>
|
|
363
|
+
<a id="kind-b4600a"></a>• [`kind`](#kind-b4600a) - Optional String<br>Object reference kind
|
|
384
364
|
|
|
385
|
-
<a id="name-30f08c"></a>• [`name`](#name-30f08c) - Optional String<br>
|
|
365
|
+
<a id="name-30f08c"></a>• [`name`](#name-30f08c) - Optional String<br>Object reference name
|
|
386
366
|
|
|
387
|
-
<a id="namespace-8df863"></a>• [`namespace`](#namespace-8df863) - Optional String<br>
|
|
367
|
+
<a id="namespace-8df863"></a>• [`namespace`](#namespace-8df863) - Optional String<br>Object reference namespace
|
|
388
368
|
|
|
389
|
-
<a id="tenant-ab33db"></a>• [`tenant`](#tenant-ab33db) - Optional String<br>
|
|
369
|
+
<a id="tenant-ab33db"></a>• [`tenant`](#tenant-ab33db) - Optional String<br>Object reference tenant
|
|
390
370
|
|
|
391
|
-
<a id="uid-2ee5fb"></a>• [`uid`](#uid-2ee5fb) - Optional String<br>
|
|
371
|
+
<a id="uid-2ee5fb"></a>• [`uid`](#uid-2ee5fb) - Optional String<br>Object reference UID
|
|
392
372
|
|
|
393
373
|
#### HTTP Protocol Options
|
|
394
374
|
|
|
@@ -402,21 +382,11 @@ A [`http_protocol_options`](#http-protocol-options) block supports the following
|
|
|
402
382
|
|
|
403
383
|
#### HTTP Protocol Options HTTP Protocol Enable V1 Only
|
|
404
384
|
|
|
405
|
-
|
|
406
|
-
|
|
407
|
-
<a id="transformation-e44133"></a>• [`header_transformation`](#transformation-e44133) - Optional Block<br>Header Transformation. Header Transformation options for HTTP/1.1 request/response headers<br>See [Header Transformation](#transformation-e44133) below.
|
|
385
|
+
<a id="deep-d896a4"></a>Deeply nested **Only** block collapsed for readability.
|
|
408
386
|
|
|
409
387
|
#### HTTP Protocol Options HTTP Protocol Enable V1 Only Header Transformation
|
|
410
388
|
|
|
411
|
-
|
|
412
|
-
|
|
413
|
-
<a id="transformation-d957b9"></a>• [`default_header_transformation`](#transformation-d957b9) - Optional Block<br>Enable this option
|
|
414
|
-
|
|
415
|
-
<a id="transformation-f5e991"></a>• [`legacy_header_transformation`](#transformation-f5e991) - Optional Block<br>Enable this option
|
|
416
|
-
|
|
417
|
-
<a id="transformation-abce75"></a>• [`preserve_case_header_transformation`](#transformation-abce75) - Optional Block<br>Enable this option
|
|
418
|
-
|
|
419
|
-
<a id="transformation-00bb40"></a>• [`proper_case_header_transformation`](#transformation-00bb40) - Optional Block<br>Enable this option
|
|
389
|
+
<a id="deep-e44357"></a>Deeply nested **Transformation** block collapsed for readability.
|
|
420
390
|
|
|
421
391
|
#### Js Challenge
|
|
422
392
|
|
|
@@ -432,15 +402,15 @@ A [`js_challenge`](#js-challenge) block supports the following:
|
|
|
432
402
|
|
|
433
403
|
A [`rate_limiter_allowed_prefixes`](#rate-limiter-allowed-prefixes) block supports the following:
|
|
434
404
|
|
|
435
|
-
<a id="rate-limiter-allowed-prefixes-kind"></a>• [`kind`](#rate-limiter-allowed-prefixes-kind) - Optional String<br>
|
|
405
|
+
<a id="rate-limiter-allowed-prefixes-kind"></a>• [`kind`](#rate-limiter-allowed-prefixes-kind) - Optional String<br>Object reference kind
|
|
436
406
|
|
|
437
|
-
<a id="rate-limiter-allowed-prefixes-name"></a>• [`name`](#rate-limiter-allowed-prefixes-name) - Optional String<br>
|
|
407
|
+
<a id="rate-limiter-allowed-prefixes-name"></a>• [`name`](#rate-limiter-allowed-prefixes-name) - Optional String<br>Object reference name
|
|
438
408
|
|
|
439
|
-
<a id="rate-limiter-allowed-prefixes-namespace"></a>• [`namespace`](#rate-limiter-allowed-prefixes-namespace) - Optional String<br>
|
|
409
|
+
<a id="rate-limiter-allowed-prefixes-namespace"></a>• [`namespace`](#rate-limiter-allowed-prefixes-namespace) - Optional String<br>Object reference namespace
|
|
440
410
|
|
|
441
|
-
<a id="rate-limiter-allowed-prefixes-tenant"></a>• [`tenant`](#rate-limiter-allowed-prefixes-tenant) - Optional String<br>
|
|
411
|
+
<a id="rate-limiter-allowed-prefixes-tenant"></a>• [`tenant`](#rate-limiter-allowed-prefixes-tenant) - Optional String<br>Object reference tenant
|
|
442
412
|
|
|
443
|
-
<a id="rate-limiter-allowed-prefixes-uid"></a>• [`uid`](#rate-limiter-allowed-prefixes-uid) - Optional String<br>
|
|
413
|
+
<a id="rate-limiter-allowed-prefixes-uid"></a>• [`uid`](#rate-limiter-allowed-prefixes-uid) - Optional String<br>Object reference UID
|
|
444
414
|
|
|
445
415
|
#### Request Cookies To Add
|
|
446
416
|
|
|
@@ -464,21 +434,11 @@ A [`secret_value`](#request-cookies-to-add-secret-value) block (within [`request
|
|
|
464
434
|
|
|
465
435
|
#### Request Cookies To Add Secret Value Blindfold Secret Info
|
|
466
436
|
|
|
467
|
-
|
|
468
|
-
|
|
469
|
-
<a id="provider-1e9a96"></a>• [`decryption_provider`](#provider-1e9a96) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
470
|
-
|
|
471
|
-
<a id="location-a7c694"></a>• [`location`](#location-a7c694) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
472
|
-
|
|
473
|
-
<a id="provider-7f7b1b"></a>• [`store_provider`](#provider-7f7b1b) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
437
|
+
<a id="deep-1a3967"></a>Deeply nested **Info** block collapsed for readability.
|
|
474
438
|
|
|
475
439
|
#### Request Cookies To Add Secret Value Clear Secret Info
|
|
476
440
|
|
|
477
|
-
|
|
478
|
-
|
|
479
|
-
<a id="ref-61071c"></a>• [`provider_ref`](#ref-61071c) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
480
|
-
|
|
481
|
-
<a id="url-c44b15"></a>• [`url`](#url-c44b15) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
441
|
+
<a id="deep-fdee34"></a>Deeply nested **Info** block collapsed for readability.
|
|
482
442
|
|
|
483
443
|
#### Request Headers To Add
|
|
484
444
|
|
|
@@ -502,21 +462,11 @@ A [`secret_value`](#request-headers-to-add-secret-value) block (within [`request
|
|
|
502
462
|
|
|
503
463
|
#### Request Headers To Add Secret Value Blindfold Secret Info
|
|
504
464
|
|
|
505
|
-
|
|
506
|
-
|
|
507
|
-
<a id="provider-064ccc"></a>• [`decryption_provider`](#provider-064ccc) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
508
|
-
|
|
509
|
-
<a id="location-5c63de"></a>• [`location`](#location-5c63de) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
510
|
-
|
|
511
|
-
<a id="provider-0b58dd"></a>• [`store_provider`](#provider-0b58dd) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
465
|
+
<a id="deep-c5e129"></a>Deeply nested **Info** block collapsed for readability.
|
|
512
466
|
|
|
513
467
|
#### Request Headers To Add Secret Value Clear Secret Info
|
|
514
468
|
|
|
515
|
-
|
|
516
|
-
|
|
517
|
-
<a id="ref-8cc2a7"></a>• [`provider_ref`](#ref-8cc2a7) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
518
|
-
|
|
519
|
-
<a id="url-177876"></a>• [`url`](#url-177876) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
469
|
+
<a id="deep-1c0a8c"></a>Deeply nested **Info** block collapsed for readability.
|
|
520
470
|
|
|
521
471
|
#### Response Cookies To Add
|
|
522
472
|
|
|
@@ -578,21 +528,11 @@ A [`secret_value`](#response-cookies-to-add-secret-value) block (within [`respon
|
|
|
578
528
|
|
|
579
529
|
#### Response Cookies To Add Secret Value Blindfold Secret Info
|
|
580
530
|
|
|
581
|
-
|
|
582
|
-
|
|
583
|
-
<a id="provider-079749"></a>• [`decryption_provider`](#provider-079749) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
584
|
-
|
|
585
|
-
<a id="location-51bd00"></a>• [`location`](#location-51bd00) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
586
|
-
|
|
587
|
-
<a id="provider-216308"></a>• [`store_provider`](#provider-216308) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
531
|
+
<a id="deep-1bea87"></a>Deeply nested **Info** block collapsed for readability.
|
|
588
532
|
|
|
589
533
|
#### Response Cookies To Add Secret Value Clear Secret Info
|
|
590
534
|
|
|
591
|
-
|
|
592
|
-
|
|
593
|
-
<a id="ref-324f7c"></a>• [`provider_ref`](#ref-324f7c) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
594
|
-
|
|
595
|
-
<a id="url-edd55e"></a>• [`url`](#url-edd55e) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
535
|
+
<a id="deep-76591c"></a>Deeply nested **Info** block collapsed for readability.
|
|
596
536
|
|
|
597
537
|
#### Response Headers To Add
|
|
598
538
|
|
|
@@ -616,21 +556,11 @@ A [`secret_value`](#response-headers-to-add-secret-value) block (within [`respon
|
|
|
616
556
|
|
|
617
557
|
#### Response Headers To Add Secret Value Blindfold Secret Info
|
|
618
558
|
|
|
619
|
-
|
|
620
|
-
|
|
621
|
-
<a id="provider-7abeeb"></a>• [`decryption_provider`](#provider-7abeeb) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
622
|
-
|
|
623
|
-
<a id="location-ee9a34"></a>• [`location`](#location-ee9a34) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
624
|
-
|
|
625
|
-
<a id="provider-010616"></a>• [`store_provider`](#provider-010616) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
559
|
+
<a id="deep-7e46c8"></a>Deeply nested **Info** block collapsed for readability.
|
|
626
560
|
|
|
627
561
|
#### Response Headers To Add Secret Value Clear Secret Info
|
|
628
562
|
|
|
629
|
-
|
|
630
|
-
|
|
631
|
-
<a id="ref-478df0"></a>• [`provider_ref`](#ref-478df0) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
632
|
-
|
|
633
|
-
<a id="url-d6f859"></a>• [`url`](#url-d6f859) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
563
|
+
<a id="deep-f3df47"></a>Deeply nested **Info** block collapsed for readability.
|
|
634
564
|
|
|
635
565
|
#### Retry Policy
|
|
636
566
|
|
|
@@ -658,29 +588,29 @@ A [`back_off`](#retry-policy-back-off) block (within [`retry_policy`](#retry-pol
|
|
|
658
588
|
|
|
659
589
|
A [`routes`](#routes) block supports the following:
|
|
660
590
|
|
|
661
|
-
<a id="routes-kind"></a>• [`kind`](#routes-kind) - Optional String<br>
|
|
591
|
+
<a id="routes-kind"></a>• [`kind`](#routes-kind) - Optional String<br>Object reference kind
|
|
662
592
|
|
|
663
|
-
<a id="routes-name"></a>• [`name`](#routes-name) - Optional String<br>
|
|
593
|
+
<a id="routes-name"></a>• [`name`](#routes-name) - Optional String<br>Object reference name
|
|
664
594
|
|
|
665
|
-
<a id="routes-namespace"></a>• [`namespace`](#routes-namespace) - Optional String<br>
|
|
595
|
+
<a id="routes-namespace"></a>• [`namespace`](#routes-namespace) - Optional String<br>Object reference namespace
|
|
666
596
|
|
|
667
|
-
<a id="routes-tenant"></a>• [`tenant`](#routes-tenant) - Optional String<br>
|
|
597
|
+
<a id="routes-tenant"></a>• [`tenant`](#routes-tenant) - Optional String<br>Object reference tenant
|
|
668
598
|
|
|
669
|
-
<a id="routes-uid"></a>• [`uid`](#routes-uid) - Optional String<br>
|
|
599
|
+
<a id="routes-uid"></a>• [`uid`](#routes-uid) - Optional String<br>Object reference UID
|
|
670
600
|
|
|
671
601
|
#### Sensitive Data Policy
|
|
672
602
|
|
|
673
603
|
A [`sensitive_data_policy`](#sensitive-data-policy) block supports the following:
|
|
674
604
|
|
|
675
|
-
<a id="sensitive-data-policy-kind"></a>• [`kind`](#sensitive-data-policy-kind) - Optional String<br>
|
|
605
|
+
<a id="sensitive-data-policy-kind"></a>• [`kind`](#sensitive-data-policy-kind) - Optional String<br>Object reference kind
|
|
676
606
|
|
|
677
|
-
<a id="sensitive-data-policy-name"></a>• [`name`](#sensitive-data-policy-name) - Optional String<br>
|
|
607
|
+
<a id="sensitive-data-policy-name"></a>• [`name`](#sensitive-data-policy-name) - Optional String<br>Object reference name
|
|
678
608
|
|
|
679
|
-
<a id="sensitive-data-policy-namespace"></a>• [`namespace`](#sensitive-data-policy-namespace) - Optional String<br>
|
|
609
|
+
<a id="sensitive-data-policy-namespace"></a>• [`namespace`](#sensitive-data-policy-namespace) - Optional String<br>Object reference namespace
|
|
680
610
|
|
|
681
|
-
<a id="sensitive-data-policy-tenant"></a>• [`tenant`](#sensitive-data-policy-tenant) - Optional String<br>
|
|
611
|
+
<a id="sensitive-data-policy-tenant"></a>• [`tenant`](#sensitive-data-policy-tenant) - Optional String<br>Object reference tenant
|
|
682
612
|
|
|
683
|
-
<a id="sensitive-data-policy-uid"></a>• [`uid`](#sensitive-data-policy-uid) - Optional String<br>
|
|
613
|
+
<a id="sensitive-data-policy-uid"></a>• [`uid`](#sensitive-data-policy-uid) - Optional String<br>Object reference UID
|
|
684
614
|
|
|
685
615
|
#### Slow DDOS Mitigation
|
|
686
616
|
|
|
@@ -730,15 +660,15 @@ A [`tls_cert_params`](#tls-cert-params) block supports the following:
|
|
|
730
660
|
|
|
731
661
|
A [`certificates`](#tls-cert-params-certificates) block (within [`tls_cert_params`](#tls-cert-params)) supports the following:
|
|
732
662
|
|
|
733
|
-
<a id="tls-cert-params-certificates-kind"></a>• [`kind`](#tls-cert-params-certificates-kind) - Optional String<br>
|
|
663
|
+
<a id="tls-cert-params-certificates-kind"></a>• [`kind`](#tls-cert-params-certificates-kind) - Optional String<br>Object reference kind
|
|
734
664
|
|
|
735
|
-
<a id="tls-cert-params-certificates-name"></a>• [`name`](#tls-cert-params-certificates-name) - Optional String<br>
|
|
665
|
+
<a id="tls-cert-params-certificates-name"></a>• [`name`](#tls-cert-params-certificates-name) - Optional String<br>Object reference name
|
|
736
666
|
|
|
737
|
-
<a id="tls-cert-params-certificates-namespace"></a>• [`namespace`](#tls-cert-params-certificates-namespace) - Optional String<br>
|
|
667
|
+
<a id="tls-cert-params-certificates-namespace"></a>• [`namespace`](#tls-cert-params-certificates-namespace) - Optional String<br>Object reference namespace
|
|
738
668
|
|
|
739
|
-
<a id="tls-cert-params-certificates-tenant"></a>• [`tenant`](#tls-cert-params-certificates-tenant) - Optional String<br>
|
|
669
|
+
<a id="tls-cert-params-certificates-tenant"></a>• [`tenant`](#tls-cert-params-certificates-tenant) - Optional String<br>Object reference tenant
|
|
740
670
|
|
|
741
|
-
<a id="tls-cert-params-certificates-uid"></a>• [`uid`](#tls-cert-params-certificates-uid) - Optional String<br>
|
|
671
|
+
<a id="tls-cert-params-certificates-uid"></a>• [`uid`](#tls-cert-params-certificates-uid) - Optional String<br>Object reference UID
|
|
742
672
|
|
|
743
673
|
#### TLS Cert Params Validation Params
|
|
744
674
|
|
|
@@ -760,17 +690,7 @@ A [`trusted_ca`](#trusted-ca-f27956) block (within [`tls_cert_params.validation_
|
|
|
760
690
|
|
|
761
691
|
#### TLS Cert Params Validation Params Trusted CA Trusted CA List
|
|
762
692
|
|
|
763
|
-
|
|
764
|
-
|
|
765
|
-
<a id="kind-15adf6"></a>• [`kind`](#kind-15adf6) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
766
|
-
|
|
767
|
-
<a id="name-35457f"></a>• [`name`](#name-35457f) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
768
|
-
|
|
769
|
-
<a id="namespace-56542c"></a>• [`namespace`](#namespace-56542c) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
770
|
-
|
|
771
|
-
<a id="tenant-449098"></a>• [`tenant`](#tenant-449098) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
772
|
-
|
|
773
|
-
<a id="uid-ceb5df"></a>• [`uid`](#uid-ceb5df) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
693
|
+
<a id="deep-e1476c"></a>Deeply nested **List** block collapsed for readability.
|
|
774
694
|
|
|
775
695
|
#### TLS Parameters
|
|
776
696
|
|
|
@@ -818,35 +738,19 @@ A [`tls_certificates`](#certificates-c9caff) block (within [`tls_parameters.comm
|
|
|
818
738
|
|
|
819
739
|
#### TLS Parameters Common Params TLS Certificates Custom Hash Algorithms
|
|
820
740
|
|
|
821
|
-
|
|
822
|
-
|
|
823
|
-
<a id="algorithms-707f27"></a>• [`hash_algorithms`](#algorithms-707f27) - Optional List Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
|
|
741
|
+
<a id="deep-2bb8e0"></a>Deeply nested **Algorithms** block collapsed for readability.
|
|
824
742
|
|
|
825
743
|
#### TLS Parameters Common Params TLS Certificates Private Key
|
|
826
744
|
|
|
827
|
-
|
|
828
|
-
|
|
829
|
-
<a id="info-eaa266"></a>• [`blindfold_secret_info`](#info-eaa266) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-eaa266) below.
|
|
830
|
-
|
|
831
|
-
<a id="info-b039d1"></a>• [`clear_secret_info`](#info-b039d1) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-b039d1) below.
|
|
745
|
+
<a id="deep-9d0eb1"></a>Deeply nested **Key** block collapsed for readability.
|
|
832
746
|
|
|
833
747
|
#### TLS Parameters Common Params TLS Certificates Private Key Blindfold Secret Info
|
|
834
748
|
|
|
835
|
-
|
|
836
|
-
|
|
837
|
-
<a id="provider-fc3d7d"></a>• [`decryption_provider`](#provider-fc3d7d) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
838
|
-
|
|
839
|
-
<a id="location-373b8d"></a>• [`location`](#location-373b8d) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
840
|
-
|
|
841
|
-
<a id="provider-68c63b"></a>• [`store_provider`](#provider-68c63b) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
749
|
+
<a id="deep-188353"></a>Deeply nested **Info** block collapsed for readability.
|
|
842
750
|
|
|
843
751
|
#### TLS Parameters Common Params TLS Certificates Private Key Clear Secret Info
|
|
844
752
|
|
|
845
|
-
|
|
846
|
-
|
|
847
|
-
<a id="ref-571118"></a>• [`provider_ref`](#ref-571118) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
848
|
-
|
|
849
|
-
<a id="url-65b084"></a>• [`url`](#url-65b084) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
753
|
+
<a id="deep-fbf9ed"></a>Deeply nested **Info** block collapsed for readability.
|
|
850
754
|
|
|
851
755
|
#### TLS Parameters Common Params Validation Params
|
|
852
756
|
|
|
@@ -862,37 +766,25 @@ A [`validation_params`](#params-6e95a6) block (within [`tls_parameters.common_pa
|
|
|
862
766
|
|
|
863
767
|
#### TLS Parameters Common Params Validation Params Trusted CA
|
|
864
768
|
|
|
865
|
-
|
|
866
|
-
|
|
867
|
-
<a id="list-01ba8e"></a>• [`trusted_ca_list`](#list-01ba8e) - Optional Block<br>Root CA Certificate Reference. Reference to Root CA Certificate<br>See [Trusted CA List](#list-01ba8e) below.
|
|
769
|
+
<a id="deep-79bc8f"></a>Deeply nested **CA** block collapsed for readability.
|
|
868
770
|
|
|
869
771
|
#### TLS Parameters Common Params Validation Params Trusted CA Trusted CA List
|
|
870
772
|
|
|
871
|
-
|
|
872
|
-
|
|
873
|
-
<a id="kind-c488bc"></a>• [`kind`](#kind-c488bc) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
874
|
-
|
|
875
|
-
<a id="name-dedff6"></a>• [`name`](#name-dedff6) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
876
|
-
|
|
877
|
-
<a id="namespace-1917fa"></a>• [`namespace`](#namespace-1917fa) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
878
|
-
|
|
879
|
-
<a id="tenant-eb6cbc"></a>• [`tenant`](#tenant-eb6cbc) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
880
|
-
|
|
881
|
-
<a id="uid-a48fb2"></a>• [`uid`](#uid-a48fb2) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
773
|
+
<a id="deep-7e09ed"></a>Deeply nested **List** block collapsed for readability.
|
|
882
774
|
|
|
883
775
|
#### User Identification
|
|
884
776
|
|
|
885
777
|
An [`user_identification`](#user-identification) block supports the following:
|
|
886
778
|
|
|
887
|
-
<a id="user-identification-kind"></a>• [`kind`](#user-identification-kind) - Optional String<br>
|
|
779
|
+
<a id="user-identification-kind"></a>• [`kind`](#user-identification-kind) - Optional String<br>Object reference kind
|
|
888
780
|
|
|
889
|
-
<a id="user-identification-name"></a>• [`name`](#user-identification-name) - Optional String<br>
|
|
781
|
+
<a id="user-identification-name"></a>• [`name`](#user-identification-name) - Optional String<br>Object reference name
|
|
890
782
|
|
|
891
|
-
<a id="user-identification-namespace"></a>• [`namespace`](#user-identification-namespace) - Optional String<br>
|
|
783
|
+
<a id="user-identification-namespace"></a>• [`namespace`](#user-identification-namespace) - Optional String<br>Object reference namespace
|
|
892
784
|
|
|
893
|
-
<a id="user-identification-tenant"></a>• [`tenant`](#user-identification-tenant) - Optional String<br>
|
|
785
|
+
<a id="user-identification-tenant"></a>• [`tenant`](#user-identification-tenant) - Optional String<br>Object reference tenant
|
|
894
786
|
|
|
895
|
-
<a id="user-identification-uid"></a>• [`uid`](#user-identification-uid) - Optional String<br>
|
|
787
|
+
<a id="user-identification-uid"></a>• [`uid`](#user-identification-uid) - Optional String<br>Object reference UID
|
|
896
788
|
|
|
897
789
|
#### WAF Type
|
|
898
790
|
|
|
@@ -914,15 +806,98 @@ An [`app_firewall`](#waf-type-app-firewall) block (within [`waf_type`](#waf-type
|
|
|
914
806
|
|
|
915
807
|
An [`app_firewall`](#waf-type-app-firewall-app-firewall) block (within [`waf_type.app_firewall`](#waf-type-app-firewall)) supports the following:
|
|
916
808
|
|
|
917
|
-
<a id="waf-type-app-firewall-app-firewall-kind"></a>• [`kind`](#waf-type-app-firewall-app-firewall-kind) - Optional String<br>
|
|
809
|
+
<a id="waf-type-app-firewall-app-firewall-kind"></a>• [`kind`](#waf-type-app-firewall-app-firewall-kind) - Optional String<br>Object reference kind
|
|
918
810
|
|
|
919
|
-
<a id="waf-type-app-firewall-app-firewall-name"></a>• [`name`](#waf-type-app-firewall-app-firewall-name) - Optional String<br>
|
|
811
|
+
<a id="waf-type-app-firewall-app-firewall-name"></a>• [`name`](#waf-type-app-firewall-app-firewall-name) - Optional String<br>Object reference name
|
|
920
812
|
|
|
921
|
-
<a id="namespace-e90470"></a>• [`namespace`](#namespace-e90470) - Optional String<br>
|
|
813
|
+
<a id="namespace-e90470"></a>• [`namespace`](#namespace-e90470) - Optional String<br>Object reference namespace
|
|
922
814
|
|
|
923
|
-
<a id="tenant-441c06"></a>• [`tenant`](#tenant-441c06) - Optional String<br>
|
|
815
|
+
<a id="tenant-441c06"></a>• [`tenant`](#tenant-441c06) - Optional String<br>Object reference tenant
|
|
816
|
+
|
|
817
|
+
<a id="waf-type-app-firewall-app-firewall-uid"></a>• [`uid`](#waf-type-app-firewall-app-firewall-uid) - Optional String<br>Object reference UID
|
|
818
|
+
|
|
819
|
+
---
|
|
924
820
|
|
|
925
|
-
|
|
821
|
+
## Common Types
|
|
822
|
+
|
|
823
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
824
|
+
|
|
825
|
+
### Object Reference {#common-object-reference}
|
|
826
|
+
|
|
827
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
828
|
+
|
|
829
|
+
| Field | Type | Description |
|
|
830
|
+
| ----- | ---- | ----------- |
|
|
831
|
+
| `name` | String | Name of the referenced object |
|
|
832
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
833
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
834
|
+
|
|
835
|
+
### Transformers {#common-transformers}
|
|
836
|
+
|
|
837
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
838
|
+
|
|
839
|
+
| Value | Description |
|
|
840
|
+
| ----- | ----------- |
|
|
841
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
842
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
843
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
844
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
845
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
846
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
847
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
848
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
849
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
850
|
+
|
|
851
|
+
### HTTP Methods {#common-http-methods}
|
|
852
|
+
|
|
853
|
+
HTTP methods used for request matching.
|
|
854
|
+
|
|
855
|
+
| Value | Description |
|
|
856
|
+
| ----- | ----------- |
|
|
857
|
+
| `ANY` | Match any HTTP method |
|
|
858
|
+
| `GET` | HTTP GET request |
|
|
859
|
+
| `HEAD` | HTTP HEAD request |
|
|
860
|
+
| `POST` | HTTP POST request |
|
|
861
|
+
| `PUT` | HTTP PUT request |
|
|
862
|
+
| `DELETE` | HTTP DELETE request |
|
|
863
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
864
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
865
|
+
| `TRACE` | HTTP TRACE request |
|
|
866
|
+
| `PATCH` | HTTP PATCH request |
|
|
867
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
868
|
+
|
|
869
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
870
|
+
|
|
871
|
+
TLS fingerprint categories for malicious client detection.
|
|
872
|
+
|
|
873
|
+
| Value | Description |
|
|
874
|
+
| ----- | ----------- |
|
|
875
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
876
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
877
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
878
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
879
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
880
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
881
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
882
|
+
|
|
883
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
884
|
+
|
|
885
|
+
IP address threat categories for security filtering.
|
|
886
|
+
|
|
887
|
+
| Value | Description |
|
|
888
|
+
| ----- | ----------- |
|
|
889
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
890
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
891
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
892
|
+
| `BOTNETS` | Known botnet IPs |
|
|
893
|
+
| `SCANNERS` | Network scanner IPs |
|
|
894
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
895
|
+
| `PHISHING` | Phishing-related IPs |
|
|
896
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
897
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
898
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
899
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
900
|
+
| `NETWORK` | Known bad network ranges |
|
|
926
901
|
|
|
927
902
|
## Import
|
|
928
903
|
|