@robinmordasiewicz/f5xc-terraform-mcp 3.0.2 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/certificate.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/certificate.md +4 -56
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/policer.md +10 -50
- package/dist/docs/resources/securemesh_site.md +1614 -253
- package/dist/docs/resources/site.md +12 -819
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/docs/specifications/api/CHANGELOG.md +4 -4
- package/dist/docs/specifications/api/README.md +2 -2
- package/dist/docs/specifications/api/domains/admin_console_and_ui.json +29 -25
- package/dist/docs/specifications/api/domains/ai_services.json +23 -21
- package/dist/docs/specifications/api/domains/api.json +201 -173
- package/dist/docs/specifications/api/domains/authentication.json +57 -45
- package/dist/docs/specifications/api/domains/bigip.json +106 -94
- package/dist/docs/specifications/api/domains/billing_and_usage.json +71 -63
- package/dist/docs/specifications/api/domains/blindfold.json +141 -109
- package/dist/docs/specifications/api/domains/bot_and_threat_defense.json +77 -65
- package/dist/docs/specifications/api/domains/cdn.json +371 -177
- package/dist/docs/specifications/api/domains/ce_management.json +137 -111
- package/dist/docs/specifications/api/domains/certificates.json +81 -75
- package/dist/docs/specifications/api/domains/cloud_infrastructure.json +136 -112
- package/dist/docs/specifications/api/domains/container_services.json +123 -91
- package/dist/docs/specifications/api/domains/data_and_privacy_security.json +72 -66
- package/dist/docs/specifications/api/domains/data_intelligence.json +68 -62
- package/dist/docs/specifications/api/domains/ddos.json +168 -154
- package/dist/docs/specifications/api/domains/dns.json +160 -148
- package/dist/docs/specifications/api/domains/managed_kubernetes.json +91 -85
- package/dist/docs/specifications/api/domains/marketplace.json +111 -103
- package/dist/docs/specifications/api/domains/network.json +269 -230
- package/dist/docs/specifications/api/domains/network_security.json +243 -187
- package/dist/docs/specifications/api/domains/nginx_one.json +70 -62
- package/dist/docs/specifications/api/domains/object_storage.json +12 -12
- package/dist/docs/specifications/api/domains/observability.json +231 -102
- package/dist/docs/specifications/api/domains/rate_limiting.json +58 -52
- package/dist/docs/specifications/api/domains/secops_and_incident_response.json +42 -36
- package/dist/docs/specifications/api/domains/service_mesh.json +143 -119
- package/dist/docs/specifications/api/domains/shape.json +327 -313
- package/dist/docs/specifications/api/domains/sites.json +536 -349
- package/dist/docs/specifications/api/domains/statistics.json +401 -225
- package/dist/docs/specifications/api/domains/support.json +116 -108
- package/dist/docs/specifications/api/domains/telemetry_and_insights.json +118 -72
- package/dist/docs/specifications/api/domains/tenant_and_identity.json +298 -268
- package/dist/docs/specifications/api/domains/threat_campaign.json +126 -66
- package/dist/docs/specifications/api/domains/users.json +76 -66
- package/dist/docs/specifications/api/domains/virtual.json +492 -244
- package/dist/docs/specifications/api/domains/vpm_and_node_management.json +1 -1
- package/dist/docs/specifications/api/domains/waf.json +227 -139
- package/dist/docs/specifications/api/index.json +99 -4
- package/dist/docs/specifications/api/openapi.json +3409 -2616
- package/dist/docs/specifications/api/openapi.yaml +5304 -2616
- package/package.json +1 -1
- package/dist/docs/data-sources/addon_service.md +0 -143
- package/dist/docs/data-sources/addon_service_activation_status.md +0 -144
- package/dist/docs/data-sources/addon_subscription.md +0 -134
- package/dist/docs/data-sources/allowed_tenant.md +0 -134
- package/dist/docs/data-sources/api_credential.md +0 -134
- package/dist/docs/data-sources/bigip_irule.md +0 -134
- package/dist/docs/data-sources/child_tenant.md +0 -134
- package/dist/docs/data-sources/child_tenant_manager.md +0 -134
- package/dist/docs/data-sources/contact.md +0 -134
- package/dist/docs/data-sources/customer_support.md +0 -134
- package/dist/docs/data-sources/dns_lb_health_check.md +0 -134
- package/dist/docs/data-sources/dns_lb_pool.md +0 -134
- package/dist/docs/data-sources/dns_load_balancer.md +0 -134
- package/dist/docs/data-sources/dns_zone.md +0 -145
- package/dist/docs/data-sources/geo_location_set.md +0 -134
- package/dist/docs/data-sources/ike1.md +0 -134
- package/dist/docs/data-sources/ike2.md +0 -134
- package/dist/docs/data-sources/ike_phase1_profile.md +0 -134
- package/dist/docs/data-sources/ike_phase2_profile.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +0 -134
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +0 -134
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +0 -134
- package/dist/docs/data-sources/infraprotect_tunnel.md +0 -134
- package/dist/docs/data-sources/k8s_cluster.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_admission.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_policy.md +0 -134
- package/dist/docs/data-sources/managed_tenant.md +0 -134
- package/dist/docs/data-sources/namespace.md +0 -141
- package/dist/docs/data-sources/oidc_provider.md +0 -134
- package/dist/docs/data-sources/quota.md +0 -134
- package/dist/docs/data-sources/registration.md +0 -134
- package/dist/docs/data-sources/report_config.md +0 -134
- package/dist/docs/data-sources/role.md +0 -134
- package/dist/docs/data-sources/secret_policy.md +0 -134
- package/dist/docs/data-sources/secret_policy_rule.md +0 -134
- package/dist/docs/data-sources/securemesh_site_v2.md +0 -134
- package/dist/docs/data-sources/srv6_network_slice.md +0 -134
- package/dist/docs/data-sources/tenant_profile.md +0 -134
- package/dist/docs/data-sources/ticket_tracking_system.md +0 -134
- package/dist/docs/data-sources/token.md +0 -134
- package/dist/docs/data-sources/tpm_api_key.md +0 -134
- package/dist/docs/data-sources/tpm_category.md +0 -134
- package/dist/docs/data-sources/tpm_manager.md +0 -134
- package/dist/docs/data-sources/virtual_k8s.md +0 -134
- package/dist/docs/data-sources/voltshare_admin_policy.md +0 -134
- package/dist/docs/resources/addon_subscription.md +0 -213
- package/dist/docs/resources/allowed_tenant.md +0 -181
- package/dist/docs/resources/api_credential.md +0 -184
- package/dist/docs/resources/bigip_irule.md +0 -173
- package/dist/docs/resources/child_tenant.md +0 -237
- package/dist/docs/resources/child_tenant_manager.md +0 -201
- package/dist/docs/resources/contact.md +0 -187
- package/dist/docs/resources/customer_support.md +0 -253
- package/dist/docs/resources/dns_lb_health_check.md +0 -249
- package/dist/docs/resources/dns_lb_pool.md +0 -310
- package/dist/docs/resources/dns_load_balancer.md +0 -309
- package/dist/docs/resources/dns_zone.md +0 -790
- package/dist/docs/resources/geo_location_set.md +0 -180
- package/dist/docs/resources/ike1.md +0 -216
- package/dist/docs/resources/ike2.md +0 -210
- package/dist/docs/resources/ike_phase1_profile.md +0 -224
- package/dist/docs/resources/ike_phase2_profile.md +0 -214
- package/dist/docs/resources/infraprotect_asn.md +0 -183
- package/dist/docs/resources/infraprotect_asn_prefix.md +0 -181
- package/dist/docs/resources/infraprotect_deny_list_rule.md +0 -191
- package/dist/docs/resources/infraprotect_firewall_rule.md +0 -288
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +0 -169
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +0 -191
- package/dist/docs/resources/infraprotect_tunnel.md +0 -289
- package/dist/docs/resources/k8s_cluster.md +0 -326
- package/dist/docs/resources/k8s_cluster_role.md +0 -222
- package/dist/docs/resources/k8s_cluster_role_binding.md +0 -207
- package/dist/docs/resources/k8s_pod_security_admission.md +0 -199
- package/dist/docs/resources/k8s_pod_security_policy.md +0 -337
- package/dist/docs/resources/managed_tenant.md +0 -193
- package/dist/docs/resources/namespace.md +0 -170
- package/dist/docs/resources/oidc_provider.md +0 -291
- package/dist/docs/resources/quota.md +0 -187
- package/dist/docs/resources/registration.md +0 -489
- package/dist/docs/resources/report_config.md +0 -237
- package/dist/docs/resources/role.md +0 -183
- package/dist/docs/resources/secret_policy.md +0 -240
- package/dist/docs/resources/secret_policy_rule.md +0 -198
- package/dist/docs/resources/securemesh_site_v2.md +0 -2027
- package/dist/docs/resources/srv6_network_slice.md +0 -175
- package/dist/docs/resources/tenant_profile.md +0 -233
- package/dist/docs/resources/ticket_tracking_system.md +0 -195
- package/dist/docs/resources/token.md +0 -170
- package/dist/docs/resources/tpm_api_key.md +0 -191
- package/dist/docs/resources/tpm_category.md +0 -191
- package/dist/docs/resources/tpm_manager.md +0 -167
- package/dist/docs/resources/virtual_k8s.md +0 -209
- package/dist/docs/resources/voltshare_admin_policy.md +0 -271
|
@@ -1,207 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_k8s_cluster_role_binding Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Kubernetes"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_k8s_cluster_role_binding (Resource)
|
|
9
|
-
|
|
10
|
-
Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# K8S Cluster Role Binding Resource Example
|
|
18
|
-
# Manages k8s_cluster_role_binding will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic K8S Cluster Role Binding configuration
|
|
21
|
-
resource "f5xc_k8s_cluster_role_binding" "example" {
|
|
22
|
-
name = "example-k8s-cluster-role-binding"
|
|
23
|
-
namespace = "system"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# Object reference. This type establishes a direct referenc...
|
|
36
|
-
k8s_cluster_role {
|
|
37
|
-
# Configure k8s_cluster_role settings
|
|
38
|
-
}
|
|
39
|
-
# Subjects. List of subjects (user, group or service accoun...
|
|
40
|
-
subjects {
|
|
41
|
-
# Configure subjects settings
|
|
42
|
-
}
|
|
43
|
-
# ServiceAccountType.
|
|
44
|
-
service_account {
|
|
45
|
-
# Configure service_account settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the K8S Cluster Role Binding. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the K8S Cluster Role Binding will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
<a id="k8s-cluster-role"></a>• [`k8s_cluster_role`](#k8s-cluster-role) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [K8S Cluster Role](#k8s-cluster-role) below for details.
|
|
70
|
-
|
|
71
|
-
<a id="subjects"></a>• [`subjects`](#subjects) - Optional Block<br>Subjects. List of subjects (user, group or service account) to which this role is bound<br>See [Subjects](#subjects) below for details.
|
|
72
|
-
|
|
73
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
74
|
-
|
|
75
|
-
### Attributes Reference
|
|
76
|
-
|
|
77
|
-
In addition to all arguments above, the following attributes are exported:
|
|
78
|
-
|
|
79
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
80
|
-
|
|
81
|
-
---
|
|
82
|
-
|
|
83
|
-
#### K8S Cluster Role
|
|
84
|
-
|
|
85
|
-
<a id="objref-f13a95"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
86
|
-
|
|
87
|
-
#### Subjects
|
|
88
|
-
|
|
89
|
-
A [`subjects`](#subjects) block supports the following:
|
|
90
|
-
|
|
91
|
-
<a id="subjects-group"></a>• [`group`](#subjects-group) - Optional String<br>Group. Group ID of the user group
|
|
92
|
-
|
|
93
|
-
<a id="subjects-service-account"></a>• [`service_account`](#subjects-service-account) - Optional Block<br>ServiceAccountType<br>See [Service Account](#subjects-service-account) below.
|
|
94
|
-
|
|
95
|
-
<a id="subjects-user"></a>• [`user`](#subjects-user) - Optional String<br>User. User ID of the user
|
|
96
|
-
|
|
97
|
-
#### Subjects Service Account
|
|
98
|
-
|
|
99
|
-
A [`service_account`](#subjects-service-account) block (within [`subjects`](#subjects)) supports the following:
|
|
100
|
-
|
|
101
|
-
<a id="subjects-service-account-name"></a>• [`name`](#subjects-service-account-name) - Optional String<br>Name. Name of the service account
|
|
102
|
-
|
|
103
|
-
<a id="subjects-service-account-namespace"></a>• [`namespace`](#subjects-service-account-namespace) - Optional String<br>Namespace. Namespace of the service account
|
|
104
|
-
|
|
105
|
-
#### Timeouts
|
|
106
|
-
|
|
107
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
108
|
-
|
|
109
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
110
|
-
|
|
111
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
112
|
-
|
|
113
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
114
|
-
|
|
115
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
116
|
-
|
|
117
|
-
---
|
|
118
|
-
|
|
119
|
-
## Common Types
|
|
120
|
-
|
|
121
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
122
|
-
|
|
123
|
-
### Object Reference {#common-object-reference}
|
|
124
|
-
|
|
125
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
126
|
-
|
|
127
|
-
| Field | Type | Description |
|
|
128
|
-
| ----- | ---- | ----------- |
|
|
129
|
-
| `name` | String | Name of the referenced object |
|
|
130
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
131
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
132
|
-
|
|
133
|
-
### Transformers {#common-transformers}
|
|
134
|
-
|
|
135
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
136
|
-
|
|
137
|
-
| Value | Description |
|
|
138
|
-
| ----- | ----------- |
|
|
139
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
140
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
141
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
142
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
143
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
144
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
145
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
146
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
147
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
148
|
-
|
|
149
|
-
### HTTP Methods {#common-http-methods}
|
|
150
|
-
|
|
151
|
-
HTTP methods used for request matching.
|
|
152
|
-
|
|
153
|
-
| Value | Description |
|
|
154
|
-
| ----- | ----------- |
|
|
155
|
-
| `ANY` | Match any HTTP method |
|
|
156
|
-
| `GET` | HTTP GET request |
|
|
157
|
-
| `HEAD` | HTTP HEAD request |
|
|
158
|
-
| `POST` | HTTP POST request |
|
|
159
|
-
| `PUT` | HTTP PUT request |
|
|
160
|
-
| `DELETE` | HTTP DELETE request |
|
|
161
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
162
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
163
|
-
| `TRACE` | HTTP TRACE request |
|
|
164
|
-
| `PATCH` | HTTP PATCH request |
|
|
165
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
166
|
-
|
|
167
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
168
|
-
|
|
169
|
-
TLS fingerprint categories for malicious client detection.
|
|
170
|
-
|
|
171
|
-
| Value | Description |
|
|
172
|
-
| ----- | ----------- |
|
|
173
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
174
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
175
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
176
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
177
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
178
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
179
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
180
|
-
|
|
181
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
182
|
-
|
|
183
|
-
IP address threat categories for security filtering.
|
|
184
|
-
|
|
185
|
-
| Value | Description |
|
|
186
|
-
| ----- | ----------- |
|
|
187
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
188
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
189
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
190
|
-
| `BOTNETS` | Known botnet IPs |
|
|
191
|
-
| `SCANNERS` | Network scanner IPs |
|
|
192
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
193
|
-
| `PHISHING` | Phishing-related IPs |
|
|
194
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
195
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
196
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
197
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
198
|
-
| `NETWORK` | Known bad network ranges |
|
|
199
|
-
|
|
200
|
-
## Import
|
|
201
|
-
|
|
202
|
-
Import is supported using the following syntax:
|
|
203
|
-
|
|
204
|
-
```shell
|
|
205
|
-
# Import using namespace/name format
|
|
206
|
-
terraform import f5xc_k8s_cluster_role_binding.example system/example
|
|
207
|
-
```
|
|
@@ -1,199 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_k8s_pod_security_admission Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Kubernetes"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_k8s_pod_security_admission (Resource)
|
|
9
|
-
|
|
10
|
-
Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# K8S Pod Security Admission Resource Example
|
|
18
|
-
# Manages k8s_pod_security_admission will create the object in the storage backend in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic K8S Pod Security Admission configuration
|
|
21
|
-
resource "f5xc_k8s_pod_security_admission" "example" {
|
|
22
|
-
name = "example-k8s-pod-security-admission"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# K8s Pod Security Admission.
|
|
36
|
-
pod_security_admission_specs {
|
|
37
|
-
# Configure pod_security_admission_specs settings
|
|
38
|
-
}
|
|
39
|
-
# Enable this option
|
|
40
|
-
audit {
|
|
41
|
-
# Configure audit settings
|
|
42
|
-
}
|
|
43
|
-
# Enable this option
|
|
44
|
-
baseline {
|
|
45
|
-
# Configure baseline settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the K8S Pod Security Admission. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the K8S Pod Security Admission will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
<a id="pod-security-admission-specs"></a>• [`pod_security_admission_specs`](#pod-security-admission-specs) - Optional Block<br>K8S Pod Security Admission<br>See [Pod Security Admission Specs](#pod-security-admission-specs) below for details.
|
|
70
|
-
|
|
71
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
72
|
-
|
|
73
|
-
### Attributes Reference
|
|
74
|
-
|
|
75
|
-
In addition to all arguments above, the following attributes are exported:
|
|
76
|
-
|
|
77
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
78
|
-
|
|
79
|
-
---
|
|
80
|
-
|
|
81
|
-
#### Pod Security Admission Specs
|
|
82
|
-
|
|
83
|
-
A [`pod_security_admission_specs`](#pod-security-admission-specs) block supports the following:
|
|
84
|
-
|
|
85
|
-
<a id="pod-security-admission-specs-audit"></a>• [`audit`](#pod-security-admission-specs-audit) - Optional Block<br>Enable this option
|
|
86
|
-
|
|
87
|
-
<a id="pod-security-admission-specs-baseline"></a>• [`baseline`](#pod-security-admission-specs-baseline) - Optional Block<br>Enable this option
|
|
88
|
-
|
|
89
|
-
<a id="pod-security-admission-specs-enforce"></a>• [`enforce`](#pod-security-admission-specs-enforce) - Optional Block<br>Enable this option
|
|
90
|
-
|
|
91
|
-
<a id="pod-security-admission-specs-privileged"></a>• [`privileged`](#pod-security-admission-specs-privileged) - Optional Block<br>Enable this option
|
|
92
|
-
|
|
93
|
-
<a id="pod-security-admission-specs-restricted"></a>• [`restricted`](#pod-security-admission-specs-restricted) - Optional Block<br>Enable this option
|
|
94
|
-
|
|
95
|
-
<a id="pod-security-admission-specs-warn"></a>• [`warn`](#pod-security-admission-specs-warn) - Optional Block<br>Enable this option
|
|
96
|
-
|
|
97
|
-
#### Timeouts
|
|
98
|
-
|
|
99
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
100
|
-
|
|
101
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
102
|
-
|
|
103
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
104
|
-
|
|
105
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
106
|
-
|
|
107
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
108
|
-
|
|
109
|
-
---
|
|
110
|
-
|
|
111
|
-
## Common Types
|
|
112
|
-
|
|
113
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
114
|
-
|
|
115
|
-
### Object Reference {#common-object-reference}
|
|
116
|
-
|
|
117
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
118
|
-
|
|
119
|
-
| Field | Type | Description |
|
|
120
|
-
| ----- | ---- | ----------- |
|
|
121
|
-
| `name` | String | Name of the referenced object |
|
|
122
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
123
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
124
|
-
|
|
125
|
-
### Transformers {#common-transformers}
|
|
126
|
-
|
|
127
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
128
|
-
|
|
129
|
-
| Value | Description |
|
|
130
|
-
| ----- | ----------- |
|
|
131
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
132
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
133
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
134
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
135
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
136
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
137
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
138
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
139
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
140
|
-
|
|
141
|
-
### HTTP Methods {#common-http-methods}
|
|
142
|
-
|
|
143
|
-
HTTP methods used for request matching.
|
|
144
|
-
|
|
145
|
-
| Value | Description |
|
|
146
|
-
| ----- | ----------- |
|
|
147
|
-
| `ANY` | Match any HTTP method |
|
|
148
|
-
| `GET` | HTTP GET request |
|
|
149
|
-
| `HEAD` | HTTP HEAD request |
|
|
150
|
-
| `POST` | HTTP POST request |
|
|
151
|
-
| `PUT` | HTTP PUT request |
|
|
152
|
-
| `DELETE` | HTTP DELETE request |
|
|
153
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
154
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
155
|
-
| `TRACE` | HTTP TRACE request |
|
|
156
|
-
| `PATCH` | HTTP PATCH request |
|
|
157
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
158
|
-
|
|
159
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
160
|
-
|
|
161
|
-
TLS fingerprint categories for malicious client detection.
|
|
162
|
-
|
|
163
|
-
| Value | Description |
|
|
164
|
-
| ----- | ----------- |
|
|
165
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
166
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
167
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
168
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
169
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
170
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
171
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
172
|
-
|
|
173
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
174
|
-
|
|
175
|
-
IP address threat categories for security filtering.
|
|
176
|
-
|
|
177
|
-
| Value | Description |
|
|
178
|
-
| ----- | ----------- |
|
|
179
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
180
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
181
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
182
|
-
| `BOTNETS` | Known botnet IPs |
|
|
183
|
-
| `SCANNERS` | Network scanner IPs |
|
|
184
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
185
|
-
| `PHISHING` | Phishing-related IPs |
|
|
186
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
187
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
188
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
189
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
190
|
-
| `NETWORK` | Known bad network ranges |
|
|
191
|
-
|
|
192
|
-
## Import
|
|
193
|
-
|
|
194
|
-
Import is supported using the following syntax:
|
|
195
|
-
|
|
196
|
-
```shell
|
|
197
|
-
# Import using namespace/name format
|
|
198
|
-
terraform import f5xc_k8s_pod_security_admission.example system/example
|
|
199
|
-
```
|