@robinmordasiewicz/f5xc-terraform-mcp 3.0.0 → 3.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_service.md +143 -0
- package/dist/docs/data-sources/addon_service_activation_status.md +144 -0
- package/dist/docs/data-sources/addon_subscription.md +134 -0
- package/dist/docs/data-sources/allowed_tenant.md +134 -0
- package/dist/docs/data-sources/api_credential.md +134 -0
- package/dist/docs/data-sources/bigip_irule.md +134 -0
- package/dist/docs/data-sources/child_tenant.md +134 -0
- package/dist/docs/data-sources/child_tenant_manager.md +134 -0
- package/dist/docs/data-sources/contact.md +134 -0
- package/dist/docs/data-sources/customer_support.md +134 -0
- package/dist/docs/data-sources/dns_lb_health_check.md +134 -0
- package/dist/docs/data-sources/dns_lb_pool.md +134 -0
- package/dist/docs/data-sources/dns_load_balancer.md +134 -0
- package/dist/docs/data-sources/dns_zone.md +145 -0
- package/dist/docs/data-sources/geo_location_set.md +134 -0
- package/dist/docs/data-sources/ike1.md +134 -0
- package/dist/docs/data-sources/ike2.md +134 -0
- package/dist/docs/data-sources/ike_phase1_profile.md +134 -0
- package/dist/docs/data-sources/ike_phase2_profile.md +134 -0
- package/dist/docs/data-sources/infraprotect_asn.md +134 -0
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +134 -0
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +134 -0
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +134 -0
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +134 -0
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +134 -0
- package/dist/docs/data-sources/infraprotect_tunnel.md +134 -0
- package/dist/docs/data-sources/k8s_cluster.md +134 -0
- package/dist/docs/data-sources/k8s_cluster_role.md +134 -0
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +134 -0
- package/dist/docs/data-sources/k8s_pod_security_admission.md +134 -0
- package/dist/docs/data-sources/k8s_pod_security_policy.md +134 -0
- package/dist/docs/data-sources/managed_tenant.md +134 -0
- package/dist/docs/data-sources/namespace.md +141 -0
- package/dist/docs/data-sources/oidc_provider.md +134 -0
- package/dist/docs/data-sources/quota.md +134 -0
- package/dist/docs/data-sources/registration.md +134 -0
- package/dist/docs/data-sources/report_config.md +134 -0
- package/dist/docs/data-sources/role.md +134 -0
- package/dist/docs/data-sources/secret_policy.md +134 -0
- package/dist/docs/data-sources/secret_policy_rule.md +134 -0
- package/dist/docs/data-sources/securemesh_site_v2.md +134 -0
- package/dist/docs/data-sources/srv6_network_slice.md +134 -0
- package/dist/docs/data-sources/tenant_profile.md +134 -0
- package/dist/docs/data-sources/ticket_tracking_system.md +134 -0
- package/dist/docs/data-sources/token.md +134 -0
- package/dist/docs/data-sources/tpm_api_key.md +134 -0
- package/dist/docs/data-sources/tpm_category.md +134 -0
- package/dist/docs/data-sources/tpm_manager.md +134 -0
- package/dist/docs/data-sources/virtual_k8s.md +134 -0
- package/dist/docs/data-sources/voltshare_admin_policy.md +134 -0
- package/dist/docs/resources/addon_subscription.md +213 -0
- package/dist/docs/resources/allowed_tenant.md +181 -0
- package/dist/docs/resources/api_credential.md +184 -0
- package/dist/docs/resources/bigip_irule.md +173 -0
- package/dist/docs/resources/child_tenant.md +237 -0
- package/dist/docs/resources/child_tenant_manager.md +201 -0
- package/dist/docs/resources/contact.md +187 -0
- package/dist/docs/resources/customer_support.md +253 -0
- package/dist/docs/resources/dns_lb_health_check.md +249 -0
- package/dist/docs/resources/dns_lb_pool.md +310 -0
- package/dist/docs/resources/dns_load_balancer.md +309 -0
- package/dist/docs/resources/dns_zone.md +790 -0
- package/dist/docs/resources/geo_location_set.md +180 -0
- package/dist/docs/resources/ike1.md +216 -0
- package/dist/docs/resources/ike2.md +210 -0
- package/dist/docs/resources/ike_phase1_profile.md +224 -0
- package/dist/docs/resources/ike_phase2_profile.md +214 -0
- package/dist/docs/resources/infraprotect_asn.md +183 -0
- package/dist/docs/resources/infraprotect_asn_prefix.md +181 -0
- package/dist/docs/resources/infraprotect_deny_list_rule.md +191 -0
- package/dist/docs/resources/infraprotect_firewall_rule.md +288 -0
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +169 -0
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +191 -0
- package/dist/docs/resources/infraprotect_tunnel.md +289 -0
- package/dist/docs/resources/k8s_cluster.md +326 -0
- package/dist/docs/resources/k8s_cluster_role.md +222 -0
- package/dist/docs/resources/k8s_cluster_role_binding.md +207 -0
- package/dist/docs/resources/k8s_pod_security_admission.md +199 -0
- package/dist/docs/resources/k8s_pod_security_policy.md +337 -0
- package/dist/docs/resources/managed_tenant.md +193 -0
- package/dist/docs/resources/namespace.md +170 -0
- package/dist/docs/resources/oidc_provider.md +291 -0
- package/dist/docs/resources/quota.md +187 -0
- package/dist/docs/resources/registration.md +489 -0
- package/dist/docs/resources/report_config.md +237 -0
- package/dist/docs/resources/role.md +183 -0
- package/dist/docs/resources/secret_policy.md +240 -0
- package/dist/docs/resources/secret_policy_rule.md +198 -0
- package/dist/docs/resources/securemesh_site_v2.md +2027 -0
- package/dist/docs/resources/srv6_network_slice.md +175 -0
- package/dist/docs/resources/tenant_profile.md +233 -0
- package/dist/docs/resources/ticket_tracking_system.md +195 -0
- package/dist/docs/resources/token.md +170 -0
- package/dist/docs/resources/tpm_api_key.md +191 -0
- package/dist/docs/resources/tpm_category.md +191 -0
- package/dist/docs/resources/tpm_manager.md +167 -0
- package/dist/docs/resources/virtual_k8s.md +209 -0
- package/dist/docs/resources/voltshare_admin_policy.md +271 -0
- package/package.json +1 -1
|
@@ -0,0 +1,170 @@
|
|
|
1
|
+
---
|
|
2
|
+
page_title: "f5xc_token Resource - terraform-provider-f5xc"
|
|
3
|
+
subcategory: "Authentication"
|
|
4
|
+
description: |-
|
|
5
|
+
Manages new token. token object is used to manage site admission. User must generate token before provisioning and pass this token to site during it's registration. in F5 Distributed Cloud.
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# f5xc_token (Resource)
|
|
9
|
+
|
|
10
|
+
Manages new token. token object is used to manage site admission. User must generate token before provisioning and pass this token to site during it's registration. in F5 Distributed Cloud.
|
|
11
|
+
|
|
12
|
+
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
+
|
|
14
|
+
## Example Usage
|
|
15
|
+
|
|
16
|
+
```terraform
|
|
17
|
+
# Token Resource Example
|
|
18
|
+
# Manages new token. token object is used to manage site admission. User must generate token before provisioning and pass this token to site during it's registration. in F5 Distributed Cloud.
|
|
19
|
+
|
|
20
|
+
# Basic Token configuration
|
|
21
|
+
resource "f5xc_token" "example" {
|
|
22
|
+
name = "example-token"
|
|
23
|
+
namespace = "system"
|
|
24
|
+
|
|
25
|
+
labels = {
|
|
26
|
+
environment = "production"
|
|
27
|
+
managed_by = "terraform"
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
annotations = {
|
|
31
|
+
"owner" = "platform-team"
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
# Token configuration
|
|
35
|
+
token_type = "REGISTRATION_TOKEN"
|
|
36
|
+
}
|
|
37
|
+
```
|
|
38
|
+
|
|
39
|
+
<!-- schema generated by tfplugindocs -->
|
|
40
|
+
## Argument Reference
|
|
41
|
+
|
|
42
|
+
### Metadata Argument Reference
|
|
43
|
+
|
|
44
|
+
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Token. Must be unique within the namespace
|
|
45
|
+
|
|
46
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Token will be created
|
|
47
|
+
|
|
48
|
+
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
49
|
+
|
|
50
|
+
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
51
|
+
|
|
52
|
+
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
53
|
+
|
|
54
|
+
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
55
|
+
|
|
56
|
+
### Spec Argument Reference
|
|
57
|
+
|
|
58
|
+
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
59
|
+
|
|
60
|
+
### Attributes Reference
|
|
61
|
+
|
|
62
|
+
In addition to all arguments above, the following attributes are exported:
|
|
63
|
+
|
|
64
|
+
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
65
|
+
|
|
66
|
+
---
|
|
67
|
+
|
|
68
|
+
#### Timeouts
|
|
69
|
+
|
|
70
|
+
A [`timeouts`](#timeouts) block supports the following:
|
|
71
|
+
|
|
72
|
+
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
73
|
+
|
|
74
|
+
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
75
|
+
|
|
76
|
+
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
77
|
+
|
|
78
|
+
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
79
|
+
|
|
80
|
+
---
|
|
81
|
+
|
|
82
|
+
## Common Types
|
|
83
|
+
|
|
84
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
85
|
+
|
|
86
|
+
### Object Reference {#common-object-reference}
|
|
87
|
+
|
|
88
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
89
|
+
|
|
90
|
+
| Field | Type | Description |
|
|
91
|
+
| ----- | ---- | ----------- |
|
|
92
|
+
| `name` | String | Name of the referenced object |
|
|
93
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
94
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
95
|
+
|
|
96
|
+
### Transformers {#common-transformers}
|
|
97
|
+
|
|
98
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
99
|
+
|
|
100
|
+
| Value | Description |
|
|
101
|
+
| ----- | ----------- |
|
|
102
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
103
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
104
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
105
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
106
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
107
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
108
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
109
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
110
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
111
|
+
|
|
112
|
+
### HTTP Methods {#common-http-methods}
|
|
113
|
+
|
|
114
|
+
HTTP methods used for request matching.
|
|
115
|
+
|
|
116
|
+
| Value | Description |
|
|
117
|
+
| ----- | ----------- |
|
|
118
|
+
| `ANY` | Match any HTTP method |
|
|
119
|
+
| `GET` | HTTP GET request |
|
|
120
|
+
| `HEAD` | HTTP HEAD request |
|
|
121
|
+
| `POST` | HTTP POST request |
|
|
122
|
+
| `PUT` | HTTP PUT request |
|
|
123
|
+
| `DELETE` | HTTP DELETE request |
|
|
124
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
125
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
126
|
+
| `TRACE` | HTTP TRACE request |
|
|
127
|
+
| `PATCH` | HTTP PATCH request |
|
|
128
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
129
|
+
|
|
130
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
131
|
+
|
|
132
|
+
TLS fingerprint categories for malicious client detection.
|
|
133
|
+
|
|
134
|
+
| Value | Description |
|
|
135
|
+
| ----- | ----------- |
|
|
136
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
137
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
138
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
139
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
140
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
141
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
142
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
143
|
+
|
|
144
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
145
|
+
|
|
146
|
+
IP address threat categories for security filtering.
|
|
147
|
+
|
|
148
|
+
| Value | Description |
|
|
149
|
+
| ----- | ----------- |
|
|
150
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
151
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
152
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
153
|
+
| `BOTNETS` | Known botnet IPs |
|
|
154
|
+
| `SCANNERS` | Network scanner IPs |
|
|
155
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
156
|
+
| `PHISHING` | Phishing-related IPs |
|
|
157
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
158
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
159
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
160
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
161
|
+
| `NETWORK` | Known bad network ranges |
|
|
162
|
+
|
|
163
|
+
## Import
|
|
164
|
+
|
|
165
|
+
Import is supported using the following syntax:
|
|
166
|
+
|
|
167
|
+
```shell
|
|
168
|
+
# Import using namespace/name format
|
|
169
|
+
terraform import f5xc_token.example system/example
|
|
170
|
+
```
|
|
@@ -0,0 +1,191 @@
|
|
|
1
|
+
---
|
|
2
|
+
page_title: "f5xc_tpm_api_key Resource - terraform-provider-f5xc"
|
|
3
|
+
subcategory: "API Security"
|
|
4
|
+
description: |-
|
|
5
|
+
Manages a Tpm API Key resource in F5 Distributed Cloud for apikey object when successfully created returns actual apikey bytes which is used by the users to call in to tpm provisioning api. configuration.
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# f5xc_tpm_api_key (Resource)
|
|
9
|
+
|
|
10
|
+
Manages a Tpm API Key resource in F5 Distributed Cloud for apikey object when successfully created returns actual apikey bytes which is used by the users to call in to tpm provisioning api. configuration.
|
|
11
|
+
|
|
12
|
+
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
+
|
|
14
|
+
## Example Usage
|
|
15
|
+
|
|
16
|
+
```terraform
|
|
17
|
+
# Tpm API Key Resource Example
|
|
18
|
+
# Manages a Tpm API Key resource in F5 Distributed Cloud for apikey object when successfully created returns actual apikey bytes which is used by the users to call in to tpm provisioning api. configuration.
|
|
19
|
+
|
|
20
|
+
# Basic Tpm API Key configuration
|
|
21
|
+
resource "f5xc_tpm_api_key" "example" {
|
|
22
|
+
name = "example-tpm-api-key"
|
|
23
|
+
namespace = "staging"
|
|
24
|
+
|
|
25
|
+
labels = {
|
|
26
|
+
environment = "production"
|
|
27
|
+
managed_by = "terraform"
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
annotations = {
|
|
31
|
+
"owner" = "platform-team"
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
# Resource-specific configuration
|
|
35
|
+
# TPM Category. APIKey needs a reference to an existing TPM...
|
|
36
|
+
category_ref {
|
|
37
|
+
# Configure category_ref settings
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
```
|
|
41
|
+
|
|
42
|
+
<!-- schema generated by tfplugindocs -->
|
|
43
|
+
## Argument Reference
|
|
44
|
+
|
|
45
|
+
### Metadata Argument Reference
|
|
46
|
+
|
|
47
|
+
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Tpm API Key. Must be unique within the namespace
|
|
48
|
+
|
|
49
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Tpm API Key will be created
|
|
50
|
+
|
|
51
|
+
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
52
|
+
|
|
53
|
+
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
54
|
+
|
|
55
|
+
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
56
|
+
|
|
57
|
+
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
58
|
+
|
|
59
|
+
### Spec Argument Reference
|
|
60
|
+
|
|
61
|
+
<a id="category-ref"></a>• [`category_ref`](#category-ref) - Optional Block<br>TPM Category. APIKey needs a reference to an existing TPM category object TPM category is used for grouping customer owned APIKeys and manage them as one entity<br>See [Category Ref](#category-ref) below for details.
|
|
62
|
+
|
|
63
|
+
<a id="need-mtls"></a>• [`need_mtls`](#need-mtls) - Optional Bool<br>Need mTLS. is mTLS required when using this APIKey?
|
|
64
|
+
|
|
65
|
+
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
66
|
+
|
|
67
|
+
### Attributes Reference
|
|
68
|
+
|
|
69
|
+
In addition to all arguments above, the following attributes are exported:
|
|
70
|
+
|
|
71
|
+
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
72
|
+
|
|
73
|
+
---
|
|
74
|
+
|
|
75
|
+
#### Category Ref
|
|
76
|
+
|
|
77
|
+
A [`category_ref`](#category-ref) block supports the following:
|
|
78
|
+
|
|
79
|
+
<a id="category-ref-kind"></a>• [`kind`](#category-ref-kind) - Optional String<br>Object reference kind
|
|
80
|
+
|
|
81
|
+
<a id="category-ref-name"></a>• [`name`](#category-ref-name) - Optional String<br>Object reference name
|
|
82
|
+
|
|
83
|
+
<a id="category-ref-namespace"></a>• [`namespace`](#category-ref-namespace) - Optional String<br>Object reference namespace
|
|
84
|
+
|
|
85
|
+
<a id="category-ref-tenant"></a>• [`tenant`](#category-ref-tenant) - Optional String<br>Object reference tenant
|
|
86
|
+
|
|
87
|
+
<a id="category-ref-uid"></a>• [`uid`](#category-ref-uid) - Optional String<br>Object reference UID
|
|
88
|
+
|
|
89
|
+
#### Timeouts
|
|
90
|
+
|
|
91
|
+
A [`timeouts`](#timeouts) block supports the following:
|
|
92
|
+
|
|
93
|
+
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
94
|
+
|
|
95
|
+
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
96
|
+
|
|
97
|
+
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
98
|
+
|
|
99
|
+
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
100
|
+
|
|
101
|
+
---
|
|
102
|
+
|
|
103
|
+
## Common Types
|
|
104
|
+
|
|
105
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
106
|
+
|
|
107
|
+
### Object Reference {#common-object-reference}
|
|
108
|
+
|
|
109
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
110
|
+
|
|
111
|
+
| Field | Type | Description |
|
|
112
|
+
| ----- | ---- | ----------- |
|
|
113
|
+
| `name` | String | Name of the referenced object |
|
|
114
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
115
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
116
|
+
|
|
117
|
+
### Transformers {#common-transformers}
|
|
118
|
+
|
|
119
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
120
|
+
|
|
121
|
+
| Value | Description |
|
|
122
|
+
| ----- | ----------- |
|
|
123
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
124
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
125
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
126
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
127
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
128
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
129
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
130
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
131
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
132
|
+
|
|
133
|
+
### HTTP Methods {#common-http-methods}
|
|
134
|
+
|
|
135
|
+
HTTP methods used for request matching.
|
|
136
|
+
|
|
137
|
+
| Value | Description |
|
|
138
|
+
| ----- | ----------- |
|
|
139
|
+
| `ANY` | Match any HTTP method |
|
|
140
|
+
| `GET` | HTTP GET request |
|
|
141
|
+
| `HEAD` | HTTP HEAD request |
|
|
142
|
+
| `POST` | HTTP POST request |
|
|
143
|
+
| `PUT` | HTTP PUT request |
|
|
144
|
+
| `DELETE` | HTTP DELETE request |
|
|
145
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
146
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
147
|
+
| `TRACE` | HTTP TRACE request |
|
|
148
|
+
| `PATCH` | HTTP PATCH request |
|
|
149
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
150
|
+
|
|
151
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
152
|
+
|
|
153
|
+
TLS fingerprint categories for malicious client detection.
|
|
154
|
+
|
|
155
|
+
| Value | Description |
|
|
156
|
+
| ----- | ----------- |
|
|
157
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
158
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
159
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
160
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
161
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
162
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
163
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
164
|
+
|
|
165
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
166
|
+
|
|
167
|
+
IP address threat categories for security filtering.
|
|
168
|
+
|
|
169
|
+
| Value | Description |
|
|
170
|
+
| ----- | ----------- |
|
|
171
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
172
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
173
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
174
|
+
| `BOTNETS` | Known botnet IPs |
|
|
175
|
+
| `SCANNERS` | Network scanner IPs |
|
|
176
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
177
|
+
| `PHISHING` | Phishing-related IPs |
|
|
178
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
179
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
180
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
181
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
182
|
+
| `NETWORK` | Known bad network ranges |
|
|
183
|
+
|
|
184
|
+
## Import
|
|
185
|
+
|
|
186
|
+
Import is supported using the following syntax:
|
|
187
|
+
|
|
188
|
+
```shell
|
|
189
|
+
# Import using namespace/name format
|
|
190
|
+
terraform import f5xc_tpm_api_key.example system/example
|
|
191
|
+
```
|
|
@@ -0,0 +1,191 @@
|
|
|
1
|
+
---
|
|
2
|
+
page_title: "f5xc_tpm_category Resource - terraform-provider-f5xc"
|
|
3
|
+
subcategory: "Integrations"
|
|
4
|
+
description: |-
|
|
5
|
+
Manages Category object, which is a grouping of APIKeys used for TPM provisioning in F5 Distributed Cloud.
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
# f5xc_tpm_category (Resource)
|
|
9
|
+
|
|
10
|
+
Manages Category object, which is a grouping of APIKeys used for TPM provisioning in F5 Distributed Cloud.
|
|
11
|
+
|
|
12
|
+
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
+
|
|
14
|
+
## Example Usage
|
|
15
|
+
|
|
16
|
+
```terraform
|
|
17
|
+
# Tpm Category Resource Example
|
|
18
|
+
# Manages Category object, which is a grouping of APIKeys used for TPM provisioning in F5 Distributed Cloud.
|
|
19
|
+
|
|
20
|
+
# Basic Tpm Category configuration
|
|
21
|
+
resource "f5xc_tpm_category" "example" {
|
|
22
|
+
name = "example-tpm-category"
|
|
23
|
+
namespace = "staging"
|
|
24
|
+
|
|
25
|
+
labels = {
|
|
26
|
+
environment = "production"
|
|
27
|
+
managed_by = "terraform"
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
annotations = {
|
|
31
|
+
"owner" = "platform-team"
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
# Resource-specific configuration
|
|
35
|
+
# TPM Manager reference. Reference to TPM Manager
|
|
36
|
+
tpm_manager_ref {
|
|
37
|
+
# Configure tpm_manager_ref settings
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
```
|
|
41
|
+
|
|
42
|
+
<!-- schema generated by tfplugindocs -->
|
|
43
|
+
## Argument Reference
|
|
44
|
+
|
|
45
|
+
### Metadata Argument Reference
|
|
46
|
+
|
|
47
|
+
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Tpm Category. Must be unique within the namespace
|
|
48
|
+
|
|
49
|
+
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Tpm Category will be created
|
|
50
|
+
|
|
51
|
+
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
52
|
+
|
|
53
|
+
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
54
|
+
|
|
55
|
+
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
56
|
+
|
|
57
|
+
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
58
|
+
|
|
59
|
+
### Spec Argument Reference
|
|
60
|
+
|
|
61
|
+
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
62
|
+
|
|
63
|
+
<a id="tpm-allow-list"></a>• [`tpm_allow_list`](#tpm-allow-list) - Optional List<br>list of allowed TPM EK Certificates. A TPM manufacturer is typically identified by its EK certificate. TPMAdmin can configure a allow-list of EK certificates for a given category When a TPM provision request is called, TPMAuthority verifies that EK certificate provided in provision matches one the EK certificate on this allow-list Allow list of TPM EK Certificates
|
|
64
|
+
|
|
65
|
+
<a id="tpm-manager-ref"></a>• [`tpm_manager_ref`](#tpm-manager-ref) - Optional Block<br>TPM Manager reference. Reference to TPM Manager<br>See [Tpm Manager Ref](#tpm-manager-ref) below for details.
|
|
66
|
+
|
|
67
|
+
### Attributes Reference
|
|
68
|
+
|
|
69
|
+
In addition to all arguments above, the following attributes are exported:
|
|
70
|
+
|
|
71
|
+
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
72
|
+
|
|
73
|
+
---
|
|
74
|
+
|
|
75
|
+
#### Timeouts
|
|
76
|
+
|
|
77
|
+
A [`timeouts`](#timeouts) block supports the following:
|
|
78
|
+
|
|
79
|
+
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
80
|
+
|
|
81
|
+
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
82
|
+
|
|
83
|
+
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
84
|
+
|
|
85
|
+
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
86
|
+
|
|
87
|
+
#### Tpm Manager Ref
|
|
88
|
+
|
|
89
|
+
A [`tpm_manager_ref`](#tpm-manager-ref) block supports the following:
|
|
90
|
+
|
|
91
|
+
<a id="tpm-manager-ref-kind"></a>• [`kind`](#tpm-manager-ref-kind) - Optional String<br>Object reference kind
|
|
92
|
+
|
|
93
|
+
<a id="tpm-manager-ref-name"></a>• [`name`](#tpm-manager-ref-name) - Optional String<br>Object reference name
|
|
94
|
+
|
|
95
|
+
<a id="tpm-manager-ref-namespace"></a>• [`namespace`](#tpm-manager-ref-namespace) - Optional String<br>Object reference namespace
|
|
96
|
+
|
|
97
|
+
<a id="tpm-manager-ref-tenant"></a>• [`tenant`](#tpm-manager-ref-tenant) - Optional String<br>Object reference tenant
|
|
98
|
+
|
|
99
|
+
<a id="tpm-manager-ref-uid"></a>• [`uid`](#tpm-manager-ref-uid) - Optional String<br>Object reference UID
|
|
100
|
+
|
|
101
|
+
---
|
|
102
|
+
|
|
103
|
+
## Common Types
|
|
104
|
+
|
|
105
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
106
|
+
|
|
107
|
+
### Object Reference {#common-object-reference}
|
|
108
|
+
|
|
109
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
110
|
+
|
|
111
|
+
| Field | Type | Description |
|
|
112
|
+
| ----- | ---- | ----------- |
|
|
113
|
+
| `name` | String | Name of the referenced object |
|
|
114
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
115
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
116
|
+
|
|
117
|
+
### Transformers {#common-transformers}
|
|
118
|
+
|
|
119
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
120
|
+
|
|
121
|
+
| Value | Description |
|
|
122
|
+
| ----- | ----------- |
|
|
123
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
124
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
125
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
126
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
127
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
128
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
129
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
130
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
131
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
132
|
+
|
|
133
|
+
### HTTP Methods {#common-http-methods}
|
|
134
|
+
|
|
135
|
+
HTTP methods used for request matching.
|
|
136
|
+
|
|
137
|
+
| Value | Description |
|
|
138
|
+
| ----- | ----------- |
|
|
139
|
+
| `ANY` | Match any HTTP method |
|
|
140
|
+
| `GET` | HTTP GET request |
|
|
141
|
+
| `HEAD` | HTTP HEAD request |
|
|
142
|
+
| `POST` | HTTP POST request |
|
|
143
|
+
| `PUT` | HTTP PUT request |
|
|
144
|
+
| `DELETE` | HTTP DELETE request |
|
|
145
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
146
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
147
|
+
| `TRACE` | HTTP TRACE request |
|
|
148
|
+
| `PATCH` | HTTP PATCH request |
|
|
149
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
150
|
+
|
|
151
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
152
|
+
|
|
153
|
+
TLS fingerprint categories for malicious client detection.
|
|
154
|
+
|
|
155
|
+
| Value | Description |
|
|
156
|
+
| ----- | ----------- |
|
|
157
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
158
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
159
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
160
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
161
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
162
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
163
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
164
|
+
|
|
165
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
166
|
+
|
|
167
|
+
IP address threat categories for security filtering.
|
|
168
|
+
|
|
169
|
+
| Value | Description |
|
|
170
|
+
| ----- | ----------- |
|
|
171
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
172
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
173
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
174
|
+
| `BOTNETS` | Known botnet IPs |
|
|
175
|
+
| `SCANNERS` | Network scanner IPs |
|
|
176
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
177
|
+
| `PHISHING` | Phishing-related IPs |
|
|
178
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
179
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
180
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
181
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
182
|
+
| `NETWORK` | Known bad network ranges |
|
|
183
|
+
|
|
184
|
+
## Import
|
|
185
|
+
|
|
186
|
+
Import is supported using the following syntax:
|
|
187
|
+
|
|
188
|
+
```shell
|
|
189
|
+
# Import using namespace/name format
|
|
190
|
+
terraform import f5xc_tpm_category.example system/example
|
|
191
|
+
```
|