@robinmordasiewicz/f5xc-terraform-mcp 3.0.2 → 3.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (157) hide show
  1. package/dist/docs/data-sources/certificate.md +2 -2
  2. package/dist/docs/data-sources/fast_acl.md +2 -2
  3. package/dist/docs/data-sources/irule.md +2 -2
  4. package/dist/docs/data-sources/network_policy.md +2 -2
  5. package/dist/docs/data-sources/policer.md +2 -2
  6. package/dist/docs/data-sources/site.md +2 -2
  7. package/dist/docs/data-sources/workload.md +2 -2
  8. package/dist/docs/resources/certificate.md +4 -56
  9. package/dist/docs/resources/fast_acl.md +166 -60
  10. package/dist/docs/resources/irule.md +7 -5
  11. package/dist/docs/resources/network_policy.md +210 -37
  12. package/dist/docs/resources/policer.md +10 -50
  13. package/dist/docs/resources/securemesh_site.md +1614 -253
  14. package/dist/docs/resources/site.md +12 -819
  15. package/dist/docs/resources/workload.md +9 -2951
  16. package/dist/docs/specifications/api/CHANGELOG.md +4 -4
  17. package/dist/docs/specifications/api/README.md +2 -2
  18. package/dist/docs/specifications/api/domains/admin_console_and_ui.json +29 -25
  19. package/dist/docs/specifications/api/domains/ai_services.json +23 -21
  20. package/dist/docs/specifications/api/domains/api.json +201 -173
  21. package/dist/docs/specifications/api/domains/authentication.json +57 -45
  22. package/dist/docs/specifications/api/domains/bigip.json +106 -94
  23. package/dist/docs/specifications/api/domains/billing_and_usage.json +71 -63
  24. package/dist/docs/specifications/api/domains/blindfold.json +141 -109
  25. package/dist/docs/specifications/api/domains/bot_and_threat_defense.json +77 -65
  26. package/dist/docs/specifications/api/domains/cdn.json +371 -177
  27. package/dist/docs/specifications/api/domains/ce_management.json +137 -111
  28. package/dist/docs/specifications/api/domains/certificates.json +81 -75
  29. package/dist/docs/specifications/api/domains/cloud_infrastructure.json +136 -112
  30. package/dist/docs/specifications/api/domains/container_services.json +123 -91
  31. package/dist/docs/specifications/api/domains/data_and_privacy_security.json +72 -66
  32. package/dist/docs/specifications/api/domains/data_intelligence.json +68 -62
  33. package/dist/docs/specifications/api/domains/ddos.json +168 -154
  34. package/dist/docs/specifications/api/domains/dns.json +160 -148
  35. package/dist/docs/specifications/api/domains/managed_kubernetes.json +91 -85
  36. package/dist/docs/specifications/api/domains/marketplace.json +111 -103
  37. package/dist/docs/specifications/api/domains/network.json +269 -230
  38. package/dist/docs/specifications/api/domains/network_security.json +243 -187
  39. package/dist/docs/specifications/api/domains/nginx_one.json +70 -62
  40. package/dist/docs/specifications/api/domains/object_storage.json +12 -12
  41. package/dist/docs/specifications/api/domains/observability.json +231 -102
  42. package/dist/docs/specifications/api/domains/rate_limiting.json +58 -52
  43. package/dist/docs/specifications/api/domains/secops_and_incident_response.json +42 -36
  44. package/dist/docs/specifications/api/domains/service_mesh.json +143 -119
  45. package/dist/docs/specifications/api/domains/shape.json +327 -313
  46. package/dist/docs/specifications/api/domains/sites.json +536 -349
  47. package/dist/docs/specifications/api/domains/statistics.json +401 -225
  48. package/dist/docs/specifications/api/domains/support.json +116 -108
  49. package/dist/docs/specifications/api/domains/telemetry_and_insights.json +118 -72
  50. package/dist/docs/specifications/api/domains/tenant_and_identity.json +298 -268
  51. package/dist/docs/specifications/api/domains/threat_campaign.json +126 -66
  52. package/dist/docs/specifications/api/domains/users.json +76 -66
  53. package/dist/docs/specifications/api/domains/virtual.json +492 -244
  54. package/dist/docs/specifications/api/domains/vpm_and_node_management.json +1 -1
  55. package/dist/docs/specifications/api/domains/waf.json +227 -139
  56. package/dist/docs/specifications/api/index.json +99 -4
  57. package/dist/docs/specifications/api/openapi.json +3409 -2616
  58. package/dist/docs/specifications/api/openapi.yaml +5304 -2616
  59. package/package.json +1 -1
  60. package/dist/docs/data-sources/addon_service.md +0 -143
  61. package/dist/docs/data-sources/addon_service_activation_status.md +0 -144
  62. package/dist/docs/data-sources/addon_subscription.md +0 -134
  63. package/dist/docs/data-sources/allowed_tenant.md +0 -134
  64. package/dist/docs/data-sources/api_credential.md +0 -134
  65. package/dist/docs/data-sources/bigip_irule.md +0 -134
  66. package/dist/docs/data-sources/child_tenant.md +0 -134
  67. package/dist/docs/data-sources/child_tenant_manager.md +0 -134
  68. package/dist/docs/data-sources/contact.md +0 -134
  69. package/dist/docs/data-sources/customer_support.md +0 -134
  70. package/dist/docs/data-sources/dns_lb_health_check.md +0 -134
  71. package/dist/docs/data-sources/dns_lb_pool.md +0 -134
  72. package/dist/docs/data-sources/dns_load_balancer.md +0 -134
  73. package/dist/docs/data-sources/dns_zone.md +0 -145
  74. package/dist/docs/data-sources/geo_location_set.md +0 -134
  75. package/dist/docs/data-sources/ike1.md +0 -134
  76. package/dist/docs/data-sources/ike2.md +0 -134
  77. package/dist/docs/data-sources/ike_phase1_profile.md +0 -134
  78. package/dist/docs/data-sources/ike_phase2_profile.md +0 -134
  79. package/dist/docs/data-sources/infraprotect_asn.md +0 -134
  80. package/dist/docs/data-sources/infraprotect_asn_prefix.md +0 -134
  81. package/dist/docs/data-sources/infraprotect_deny_list_rule.md +0 -134
  82. package/dist/docs/data-sources/infraprotect_firewall_rule.md +0 -134
  83. package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +0 -134
  84. package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +0 -134
  85. package/dist/docs/data-sources/infraprotect_tunnel.md +0 -134
  86. package/dist/docs/data-sources/k8s_cluster.md +0 -134
  87. package/dist/docs/data-sources/k8s_cluster_role.md +0 -134
  88. package/dist/docs/data-sources/k8s_cluster_role_binding.md +0 -134
  89. package/dist/docs/data-sources/k8s_pod_security_admission.md +0 -134
  90. package/dist/docs/data-sources/k8s_pod_security_policy.md +0 -134
  91. package/dist/docs/data-sources/managed_tenant.md +0 -134
  92. package/dist/docs/data-sources/namespace.md +0 -141
  93. package/dist/docs/data-sources/oidc_provider.md +0 -134
  94. package/dist/docs/data-sources/quota.md +0 -134
  95. package/dist/docs/data-sources/registration.md +0 -134
  96. package/dist/docs/data-sources/report_config.md +0 -134
  97. package/dist/docs/data-sources/role.md +0 -134
  98. package/dist/docs/data-sources/secret_policy.md +0 -134
  99. package/dist/docs/data-sources/secret_policy_rule.md +0 -134
  100. package/dist/docs/data-sources/securemesh_site_v2.md +0 -134
  101. package/dist/docs/data-sources/srv6_network_slice.md +0 -134
  102. package/dist/docs/data-sources/tenant_profile.md +0 -134
  103. package/dist/docs/data-sources/ticket_tracking_system.md +0 -134
  104. package/dist/docs/data-sources/token.md +0 -134
  105. package/dist/docs/data-sources/tpm_api_key.md +0 -134
  106. package/dist/docs/data-sources/tpm_category.md +0 -134
  107. package/dist/docs/data-sources/tpm_manager.md +0 -134
  108. package/dist/docs/data-sources/virtual_k8s.md +0 -134
  109. package/dist/docs/data-sources/voltshare_admin_policy.md +0 -134
  110. package/dist/docs/resources/addon_subscription.md +0 -213
  111. package/dist/docs/resources/allowed_tenant.md +0 -181
  112. package/dist/docs/resources/api_credential.md +0 -184
  113. package/dist/docs/resources/bigip_irule.md +0 -173
  114. package/dist/docs/resources/child_tenant.md +0 -237
  115. package/dist/docs/resources/child_tenant_manager.md +0 -201
  116. package/dist/docs/resources/contact.md +0 -187
  117. package/dist/docs/resources/customer_support.md +0 -253
  118. package/dist/docs/resources/dns_lb_health_check.md +0 -249
  119. package/dist/docs/resources/dns_lb_pool.md +0 -310
  120. package/dist/docs/resources/dns_load_balancer.md +0 -309
  121. package/dist/docs/resources/dns_zone.md +0 -790
  122. package/dist/docs/resources/geo_location_set.md +0 -180
  123. package/dist/docs/resources/ike1.md +0 -216
  124. package/dist/docs/resources/ike2.md +0 -210
  125. package/dist/docs/resources/ike_phase1_profile.md +0 -224
  126. package/dist/docs/resources/ike_phase2_profile.md +0 -214
  127. package/dist/docs/resources/infraprotect_asn.md +0 -183
  128. package/dist/docs/resources/infraprotect_asn_prefix.md +0 -181
  129. package/dist/docs/resources/infraprotect_deny_list_rule.md +0 -191
  130. package/dist/docs/resources/infraprotect_firewall_rule.md +0 -288
  131. package/dist/docs/resources/infraprotect_firewall_rule_group.md +0 -169
  132. package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +0 -191
  133. package/dist/docs/resources/infraprotect_tunnel.md +0 -289
  134. package/dist/docs/resources/k8s_cluster.md +0 -326
  135. package/dist/docs/resources/k8s_cluster_role.md +0 -222
  136. package/dist/docs/resources/k8s_cluster_role_binding.md +0 -207
  137. package/dist/docs/resources/k8s_pod_security_admission.md +0 -199
  138. package/dist/docs/resources/k8s_pod_security_policy.md +0 -337
  139. package/dist/docs/resources/managed_tenant.md +0 -193
  140. package/dist/docs/resources/namespace.md +0 -170
  141. package/dist/docs/resources/oidc_provider.md +0 -291
  142. package/dist/docs/resources/quota.md +0 -187
  143. package/dist/docs/resources/registration.md +0 -489
  144. package/dist/docs/resources/report_config.md +0 -237
  145. package/dist/docs/resources/role.md +0 -183
  146. package/dist/docs/resources/secret_policy.md +0 -240
  147. package/dist/docs/resources/secret_policy_rule.md +0 -198
  148. package/dist/docs/resources/securemesh_site_v2.md +0 -2027
  149. package/dist/docs/resources/srv6_network_slice.md +0 -175
  150. package/dist/docs/resources/tenant_profile.md +0 -233
  151. package/dist/docs/resources/ticket_tracking_system.md +0 -195
  152. package/dist/docs/resources/token.md +0 -170
  153. package/dist/docs/resources/tpm_api_key.md +0 -191
  154. package/dist/docs/resources/tpm_category.md +0 -191
  155. package/dist/docs/resources/tpm_manager.md +0 -167
  156. package/dist/docs/resources/virtual_k8s.md +0 -209
  157. package/dist/docs/resources/voltshare_admin_policy.md +0 -271
@@ -1,337 +0,0 @@
1
- ---
2
- page_title: "f5xc_k8s_pod_security_policy Resource - terraform-provider-f5xc"
3
- subcategory: "Security"
4
- description: |-
5
- Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
6
- ---
7
-
8
- # f5xc_k8s_pod_security_policy (Resource)
9
-
10
- Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
11
-
12
- ~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
13
-
14
- ## Example Usage
15
-
16
- ```terraform
17
- # K8S Pod Security Policy Resource Example
18
- # Manages k8s_pod_security_policy will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
19
-
20
- # Basic K8S Pod Security Policy configuration
21
- resource "f5xc_k8s_pod_security_policy" "example" {
22
- name = "example-k8s-pod-security-policy"
23
- namespace = "staging"
24
-
25
- labels = {
26
- environment = "production"
27
- managed_by = "terraform"
28
- }
29
-
30
- annotations = {
31
- "owner" = "platform-team"
32
- }
33
-
34
- # Resource-specific configuration
35
- # [OneOf: psp_spec, yaml] Pod Security Policy Specification...
36
- psp_spec {
37
- # Configure psp_spec settings
38
- }
39
- # Capability List. List of capabilities that docker contain...
40
- allowed_capabilities {
41
- # Configure allowed_capabilities settings
42
- }
43
- # Allowed Host Paths. Restrict list of host paths, default ...
44
- allowed_host_paths {
45
- # Configure allowed_host_paths settings
46
- }
47
- }
48
- ```
49
-
50
- <!-- schema generated by tfplugindocs -->
51
- ## Argument Reference
52
-
53
- ### Metadata Argument Reference
54
-
55
- <a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the K8S Pod Security Policy. Must be unique within the namespace
56
-
57
- <a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the K8S Pod Security Policy will be created
58
-
59
- <a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
60
-
61
- <a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
62
-
63
- <a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
64
-
65
- <a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
66
-
67
- ### Spec Argument Reference
68
-
69
- -> **One of the following:**
70
- &#x2022; <a id="psp-spec"></a>[`psp_spec`](#psp-spec) - Optional Block<br>Pod Security Policy Specification. Form based pod security specification<br>See [Psp Spec](#psp-spec) below for details.
71
- <br><br>&#x2022; <a id="yaml"></a>[`yaml`](#yaml) - Optional String<br>K8S YAML. K8S YAML for Pod Security Policy
72
-
73
- <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
74
-
75
- ### Attributes Reference
76
-
77
- In addition to all arguments above, the following attributes are exported:
78
-
79
- <a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
80
-
81
- ---
82
-
83
- #### Psp Spec
84
-
85
- A [`psp_spec`](#psp-spec) block supports the following:
86
-
87
- <a id="psp-spec-allow-privilege-escalation"></a>&#x2022; [`allow_privilege_escalation`](#psp-spec-allow-privilege-escalation) - Optional Bool<br>Allow Privilege Escalation. Pod can request to privilege escalation
88
-
89
- <a id="psp-spec-allowed-capabilities"></a>&#x2022; [`allowed_capabilities`](#psp-spec-allowed-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Allowed Capabilities](#psp-spec-allowed-capabilities) below.
90
-
91
- <a id="psp-spec-allowed-csi-drivers"></a>&#x2022; [`allowed_csi_drivers`](#psp-spec-allowed-csi-drivers) - Optional List<br>Allowed CSI drivers. Restrict the available CSI drivers for POD, default all drivers are available
92
-
93
- <a id="psp-spec-allowed-flex-volumes"></a>&#x2022; [`allowed_flex_volumes`](#psp-spec-allowed-flex-volumes) - Optional List<br>Allowed Flex Volumes. Restrict list of Flex volumes, default all volumes are allowed
94
-
95
- <a id="psp-spec-allowed-host-paths"></a>&#x2022; [`allowed_host_paths`](#psp-spec-allowed-host-paths) - Optional Block<br>Allowed Host Paths. Restrict list of host paths, default all host paths are allowed<br>See [Allowed Host Paths](#psp-spec-allowed-host-paths) below.
96
-
97
- <a id="psp-spec-allowed-proc-mounts"></a>&#x2022; [`allowed_proc_mounts`](#psp-spec-allowed-proc-mounts) - Optional List<br>Allowed Proc Mounts. allowed list of proc mounts, empty list allows default proc mounts
98
-
99
- <a id="psp-spec-allowed-unsafe-sysctls"></a>&#x2022; [`allowed_unsafe_sysctls`](#psp-spec-allowed-unsafe-sysctls) - Optional List<br>Allowed Unsafe Sysctls. allowed list of unsafe sysctls, empty list allows none. supports prefix reg-ex
100
-
101
- <a id="escalation-d3a7ab"></a>&#x2022; [`default_allow_privilege_escalation`](#escalation-d3a7ab) - Optional Bool<br>Default Allow Privilege Escalation. Pod has permission for privilege escalation by default
102
-
103
- <a id="psp-spec-default-capabilities"></a>&#x2022; [`default_capabilities`](#psp-spec-default-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Default Capabilities](#psp-spec-default-capabilities) below.
104
-
105
- <a id="psp-spec-drop-capabilities"></a>&#x2022; [`drop_capabilities`](#psp-spec-drop-capabilities) - Optional Block<br>Capability List. List of capabilities that docker container has<br>See [Drop Capabilities](#psp-spec-drop-capabilities) below.
106
-
107
- <a id="psp-spec-forbidden-sysctls"></a>&#x2022; [`forbidden_sysctls`](#psp-spec-forbidden-sysctls) - Optional List<br>Forbidden Sysctls. Forbidden list of sysctls, empty list forbids none. supports prefix reg-ex
108
-
109
- <a id="psp-spec-fs-group-strategy-options"></a>&#x2022; [`fs_group_strategy_options`](#psp-spec-fs-group-strategy-options) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Fs Group Strategy Options](#psp-spec-fs-group-strategy-options) below.
110
-
111
- <a id="psp-spec-host-ipc"></a>&#x2022; [`host_ipc`](#psp-spec-host-ipc) - Optional Bool<br>Host IPC. Host IPC determines if the policy allows the use of host IPC in the pod spec
112
-
113
- <a id="psp-spec-host-network"></a>&#x2022; [`host_network`](#psp-spec-host-network) - Optional Bool<br>Host Network. Host Network determines if the policy allows the use of host network in the pod spec
114
-
115
- <a id="psp-spec-host-pid"></a>&#x2022; [`host_pid`](#psp-spec-host-pid) - Optional Bool<br>Host PID. Host PID determines if the policy allows the use of host PID in the pod spec
116
-
117
- <a id="psp-spec-host-port-ranges"></a>&#x2022; [`host_port_ranges`](#psp-spec-host-port-ranges) - Optional String<br>Host Ports Ranges. Host port ranges determines which ports ranges are allowed to be exposed
118
-
119
- <a id="psp-spec-no-allowed-capabilities"></a>&#x2022; [`no_allowed_capabilities`](#psp-spec-no-allowed-capabilities) - Optional Block<br>Enable this option
120
-
121
- <a id="psp-spec-no-default-capabilities"></a>&#x2022; [`no_default_capabilities`](#psp-spec-no-default-capabilities) - Optional Block<br>Enable this option
122
-
123
- <a id="psp-spec-no-drop-capabilities"></a>&#x2022; [`no_drop_capabilities`](#psp-spec-no-drop-capabilities) - Optional Block<br>Enable this option
124
-
125
- <a id="psp-spec-no-fs-groups"></a>&#x2022; [`no_fs_groups`](#psp-spec-no-fs-groups) - Optional Block<br>Enable this option
126
-
127
- <a id="psp-spec-no-run-as-group"></a>&#x2022; [`no_run_as_group`](#psp-spec-no-run-as-group) - Optional Block<br>Enable this option
128
-
129
- <a id="psp-spec-no-run-as-user"></a>&#x2022; [`no_run_as_user`](#psp-spec-no-run-as-user) - Optional Block<br>Enable this option
130
-
131
- <a id="psp-spec-no-runtime-class"></a>&#x2022; [`no_runtime_class`](#psp-spec-no-runtime-class) - Optional Block<br>Enable this option
132
-
133
- <a id="psp-spec-no-se-linux-options"></a>&#x2022; [`no_se_linux_options`](#psp-spec-no-se-linux-options) - Optional Block<br>Enable this option
134
-
135
- <a id="psp-spec-no-supplemental-groups"></a>&#x2022; [`no_supplemental_groups`](#psp-spec-no-supplemental-groups) - Optional Block<br>Enable this option
136
-
137
- <a id="psp-spec-privileged"></a>&#x2022; [`privileged`](#psp-spec-privileged) - Optional Bool<br>Privileged. Privileged determines if a pod can request to be run as privileged
138
-
139
- <a id="psp-spec-read-only-root-filesystem"></a>&#x2022; [`read_only_root_filesystem`](#psp-spec-read-only-root-filesystem) - Optional Bool<br>Read Only Root Filesystem. Containers can only run with read only root filesystem
140
-
141
- <a id="psp-spec-run-as-group"></a>&#x2022; [`run_as_group`](#psp-spec-run-as-group) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Run As Group](#psp-spec-run-as-group) below.
142
-
143
- <a id="psp-spec-run-as-user"></a>&#x2022; [`run_as_user`](#psp-spec-run-as-user) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Run As User](#psp-spec-run-as-user) below.
144
-
145
- <a id="psp-spec-supplemental-groups"></a>&#x2022; [`supplemental_groups`](#psp-spec-supplemental-groups) - Optional Block<br>ID(User,Group,FSGroup) Strategy. ID ranges and rules<br>See [Supplemental Groups](#psp-spec-supplemental-groups) below.
146
-
147
- <a id="psp-spec-volumes"></a>&#x2022; [`volumes`](#psp-spec-volumes) - Optional List<br>Volume. Allow List of volume plugins. Empty no volumes are allowed
148
-
149
- #### Psp Spec Allowed Capabilities
150
-
151
- An [`allowed_capabilities`](#psp-spec-allowed-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
152
-
153
- <a id="capabilities-e66bba"></a>&#x2022; [`capabilities`](#capabilities-e66bba) - Optional List<br>Capability List. List of capabilities that docker container has
154
-
155
- #### Psp Spec Allowed Host Paths
156
-
157
- An [`allowed_host_paths`](#psp-spec-allowed-host-paths) block (within [`psp_spec`](#psp-spec)) supports the following:
158
-
159
- <a id="psp-spec-allowed-host-paths-path-prefix"></a>&#x2022; [`path_prefix`](#psp-spec-allowed-host-paths-path-prefix) - Optional String<br>Host Path Prefix. Host path prefix is the path prefix that the host volume must match. It does not support \*
160
-
161
- <a id="psp-spec-allowed-host-paths-read-only"></a>&#x2022; [`read_only`](#psp-spec-allowed-host-paths-read-only) - Optional Bool<br>Read Only. This volume will be allowed to mount read only
162
-
163
- #### Psp Spec Default Capabilities
164
-
165
- A [`default_capabilities`](#psp-spec-default-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
166
-
167
- <a id="capabilities-15b1b9"></a>&#x2022; [`capabilities`](#capabilities-15b1b9) - Optional List<br>Capability List. List of capabilities that docker container has
168
-
169
- #### Psp Spec Drop Capabilities
170
-
171
- A [`drop_capabilities`](#psp-spec-drop-capabilities) block (within [`psp_spec`](#psp-spec)) supports the following:
172
-
173
- <a id="psp-spec-drop-capabilities-capabilities"></a>&#x2022; [`capabilities`](#psp-spec-drop-capabilities-capabilities) - Optional List<br>Capability List. List of capabilities that docker container has
174
-
175
- #### Psp Spec Fs Group Strategy Options
176
-
177
- A [`fs_group_strategy_options`](#psp-spec-fs-group-strategy-options) block (within [`psp_spec`](#psp-spec)) supports the following:
178
-
179
- <a id="ranges-e5468c"></a>&#x2022; [`id_ranges`](#ranges-e5468c) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#ranges-e5468c) below.
180
-
181
- <a id="psp-spec-fs-group-strategy-options-rule"></a>&#x2022; [`rule`](#psp-spec-fs-group-strategy-options-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
182
-
183
- #### Psp Spec Fs Group Strategy Options ID Ranges
184
-
185
- <a id="deep-9e04ba"></a>Deeply nested **Ranges** block collapsed for readability.
186
-
187
- #### Psp Spec Run As Group
188
-
189
- A [`run_as_group`](#psp-spec-run-as-group) block (within [`psp_spec`](#psp-spec)) supports the following:
190
-
191
- <a id="psp-spec-run-as-group-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-run-as-group-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-run-as-group-id-ranges) below.
192
-
193
- <a id="psp-spec-run-as-group-rule"></a>&#x2022; [`rule`](#psp-spec-run-as-group-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
194
-
195
- #### Psp Spec Run As Group ID Ranges
196
-
197
- An [`id_ranges`](#psp-spec-run-as-group-id-ranges) block (within [`psp_spec.run_as_group`](#psp-spec-run-as-group)) supports the following:
198
-
199
- <a id="psp-spec-run-as-group-id-ranges-max-id"></a>&#x2022; [`max_id`](#psp-spec-run-as-group-id-ranges-max-id) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
200
-
201
- <a id="psp-spec-run-as-group-id-ranges-min-id"></a>&#x2022; [`min_id`](#psp-spec-run-as-group-id-ranges-min-id) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
202
-
203
- #### Psp Spec Run As User
204
-
205
- A [`run_as_user`](#psp-spec-run-as-user) block (within [`psp_spec`](#psp-spec)) supports the following:
206
-
207
- <a id="psp-spec-run-as-user-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-run-as-user-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-run-as-user-id-ranges) below.
208
-
209
- <a id="psp-spec-run-as-user-rule"></a>&#x2022; [`rule`](#psp-spec-run-as-user-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
210
-
211
- #### Psp Spec Run As User ID Ranges
212
-
213
- An [`id_ranges`](#psp-spec-run-as-user-id-ranges) block (within [`psp_spec.run_as_user`](#psp-spec-run-as-user)) supports the following:
214
-
215
- <a id="psp-spec-run-as-user-id-ranges-max-id"></a>&#x2022; [`max_id`](#psp-spec-run-as-user-id-ranges-max-id) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
216
-
217
- <a id="psp-spec-run-as-user-id-ranges-min-id"></a>&#x2022; [`min_id`](#psp-spec-run-as-user-id-ranges-min-id) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
218
-
219
- #### Psp Spec Supplemental Groups
220
-
221
- A [`supplemental_groups`](#psp-spec-supplemental-groups) block (within [`psp_spec`](#psp-spec)) supports the following:
222
-
223
- <a id="psp-spec-supplemental-groups-id-ranges"></a>&#x2022; [`id_ranges`](#psp-spec-supplemental-groups-id-ranges) - Optional Block<br>ID Ranges. List of range of ID(s)<br>See [ID Ranges](#psp-spec-supplemental-groups-id-ranges) below.
224
-
225
- <a id="psp-spec-supplemental-groups-rule"></a>&#x2022; [`rule`](#psp-spec-supplemental-groups-rule) - Optional String<br>Rule. Rule indicated how the FS group ID range is used
226
-
227
- #### Psp Spec Supplemental Groups ID Ranges
228
-
229
- An [`id_ranges`](#psp-spec-supplemental-groups-id-ranges) block (within [`psp_spec.supplemental_groups`](#psp-spec-supplemental-groups)) supports the following:
230
-
231
- <a id="max-id-83c629"></a>&#x2022; [`max_id`](#max-id-83c629) - Optional Number<br>Ending ID. Ending(maximum) ID for for ID range
232
-
233
- <a id="min-id-9f7a47"></a>&#x2022; [`min_id`](#min-id-9f7a47) - Optional Number<br>Starting ID. Starting(minimum) ID for for ID range
234
-
235
- #### Timeouts
236
-
237
- A [`timeouts`](#timeouts) block supports the following:
238
-
239
- <a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
240
-
241
- <a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
242
-
243
- <a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
244
-
245
- <a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
246
-
247
- ---
248
-
249
- ## Common Types
250
-
251
- The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
252
-
253
- ### Object Reference {#common-object-reference}
254
-
255
- Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
256
-
257
- | Field | Type | Description |
258
- | ----- | ---- | ----------- |
259
- | `name` | String | Name of the referenced object |
260
- | `namespace` | String | Namespace containing the referenced object |
261
- | `tenant` | String | Tenant of the referenced object (system-managed) |
262
-
263
- ### Transformers {#common-transformers}
264
-
265
- Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
266
-
267
- | Value | Description |
268
- | ----- | ----------- |
269
- | `LOWER_CASE` | Convert to lowercase |
270
- | `UPPER_CASE` | Convert to uppercase |
271
- | `BASE64_DECODE` | Decode base64 content |
272
- | `NORMALIZE_PATH` | Normalize URL path |
273
- | `REMOVE_WHITESPACE` | Remove whitespace characters |
274
- | `URL_DECODE` | Decode URL-encoded characters |
275
- | `TRIM_LEFT` | Trim leading whitespace |
276
- | `TRIM_RIGHT` | Trim trailing whitespace |
277
- | `TRIM` | Trim both leading and trailing whitespace |
278
-
279
- ### HTTP Methods {#common-http-methods}
280
-
281
- HTTP methods used for request matching.
282
-
283
- | Value | Description |
284
- | ----- | ----------- |
285
- | `ANY` | Match any HTTP method |
286
- | `GET` | HTTP GET request |
287
- | `HEAD` | HTTP HEAD request |
288
- | `POST` | HTTP POST request |
289
- | `PUT` | HTTP PUT request |
290
- | `DELETE` | HTTP DELETE request |
291
- | `CONNECT` | HTTP CONNECT request |
292
- | `OPTIONS` | HTTP OPTIONS request |
293
- | `TRACE` | HTTP TRACE request |
294
- | `PATCH` | HTTP PATCH request |
295
- | `COPY` | HTTP COPY request (WebDAV) |
296
-
297
- ### TLS Fingerprints {#common-tls-fingerprints}
298
-
299
- TLS fingerprint categories for malicious client detection.
300
-
301
- | Value | Description |
302
- | ----- | ----------- |
303
- | `TLS_FINGERPRINT_NONE` | No fingerprint matching |
304
- | `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
305
- | `ADWARE` | Adware-associated fingerprints |
306
- | `DRIDEX` | Dridex malware fingerprints |
307
- | `GOOTKIT` | Gootkit malware fingerprints |
308
- | `RANSOMWARE` | Ransomware-associated fingerprints |
309
- | `TRICKBOT` | Trickbot malware fingerprints |
310
-
311
- ### IP Threat Categories {#common-ip-threat-categories}
312
-
313
- IP address threat categories for security filtering.
314
-
315
- | Value | Description |
316
- | ----- | ----------- |
317
- | `SPAM_SOURCES` | Known spam sources |
318
- | `WINDOWS_EXPLOITS` | Windows exploit sources |
319
- | `WEB_ATTACKS` | Web attack sources |
320
- | `BOTNETS` | Known botnet IPs |
321
- | `SCANNERS` | Network scanner IPs |
322
- | `REPUTATION` | Poor reputation IPs |
323
- | `PHISHING` | Phishing-related IPs |
324
- | `PROXY` | Anonymous proxy IPs |
325
- | `MOBILE_THREATS` | Mobile threat sources |
326
- | `TOR_PROXY` | Tor exit nodes |
327
- | `DENIAL_OF_SERVICE` | DoS attack sources |
328
- | `NETWORK` | Known bad network ranges |
329
-
330
- ## Import
331
-
332
- Import is supported using the following syntax:
333
-
334
- ```shell
335
- # Import using namespace/name format
336
- terraform import f5xc_k8s_pod_security_policy.example system/example
337
- ```
@@ -1,193 +0,0 @@
1
- ---
2
- page_title: "f5xc_managed_tenant Resource - terraform-provider-f5xc"
3
- subcategory: "Organization"
4
- description: |-
5
- Manages managed_tenant config instance. Name of the object is name of the tenant that is allowed to manage. in F5 Distributed Cloud.
6
- ---
7
-
8
- # f5xc_managed_tenant (Resource)
9
-
10
- Manages managed_tenant config instance. Name of the object is name of the tenant that is allowed to manage. in F5 Distributed Cloud.
11
-
12
- ~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
13
-
14
- ## Example Usage
15
-
16
- ```terraform
17
- # Managed Tenant Resource Example
18
- # Manages managed_tenant config instance. Name of the object is name of the tenant that is allowed to manage. in F5 Distributed Cloud.
19
-
20
- # Basic Managed Tenant configuration
21
- resource "f5xc_managed_tenant" "example" {
22
- name = "example-managed-tenant"
23
- namespace = "staging"
24
-
25
- labels = {
26
- environment = "production"
27
- managed_by = "terraform"
28
- }
29
-
30
- annotations = {
31
- "owner" = "platform-team"
32
- }
33
-
34
- # Resource-specific configuration
35
- # Group Mapping. List of local user group association to us...
36
- groups {
37
- # Configure groups settings
38
- }
39
- # Object reference. This type establishes a direct referenc...
40
- group {
41
- # Configure group settings
42
- }
43
- }
44
- ```
45
-
46
- <!-- schema generated by tfplugindocs -->
47
- ## Argument Reference
48
-
49
- ### Metadata Argument Reference
50
-
51
- <a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Managed Tenant. Must be unique within the namespace
52
-
53
- <a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Managed Tenant will be created
54
-
55
- <a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
56
-
57
- <a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
58
-
59
- <a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
60
-
61
- <a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
62
-
63
- ### Spec Argument Reference
64
-
65
- <a id="groups"></a>&#x2022; [`groups`](#groups) - Optional Block<br>Group Mapping. List of local user group association to user groups in the managed tenant specified in the tenant_choice<br>See [Groups](#groups) below for details.
66
-
67
- <a id="tenant-id"></a>&#x2022; [`tenant_id`](#tenant-id) - Optional String<br>Managed Tenant ID. Specify the Tenant ID of the existing tenant which needs to be managed. User can select Tenant ID from dropdown if managed tenant has already configured delegated access or manually input the Tenant ID if managed tenant configuration will happen in future
68
-
69
- <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
70
-
71
- ### Attributes Reference
72
-
73
- In addition to all arguments above, the following attributes are exported:
74
-
75
- <a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
76
-
77
- ---
78
-
79
- #### Groups
80
-
81
- A [`groups`](#groups) block supports the following:
82
-
83
- <a id="groups-group"></a>&#x2022; [`group`](#groups-group) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Group](#groups-group) below.
84
-
85
- <a id="groups-managed-tenant-groups"></a>&#x2022; [`managed_tenant_groups`](#groups-managed-tenant-groups) - Optional List<br>Managed Tenant Groups. List of group names in managed tenant (MT). Note - To properly establish access, admin of managed tenant need to create corresponding Allowed Tenant configuration object with access to use same group names. Once it's setup, when user from original tenant access managed tenant, underlying roles from managed tenant will be applied to user
86
-
87
- #### Groups Group
88
-
89
- <a id="objref-8dbe1b"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
90
-
91
- #### Timeouts
92
-
93
- A [`timeouts`](#timeouts) block supports the following:
94
-
95
- <a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
96
-
97
- <a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
98
-
99
- <a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
100
-
101
- <a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
102
-
103
- ---
104
-
105
- ## Common Types
106
-
107
- The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
108
-
109
- ### Object Reference {#common-object-reference}
110
-
111
- Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
112
-
113
- | Field | Type | Description |
114
- | ----- | ---- | ----------- |
115
- | `name` | String | Name of the referenced object |
116
- | `namespace` | String | Namespace containing the referenced object |
117
- | `tenant` | String | Tenant of the referenced object (system-managed) |
118
-
119
- ### Transformers {#common-transformers}
120
-
121
- Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
122
-
123
- | Value | Description |
124
- | ----- | ----------- |
125
- | `LOWER_CASE` | Convert to lowercase |
126
- | `UPPER_CASE` | Convert to uppercase |
127
- | `BASE64_DECODE` | Decode base64 content |
128
- | `NORMALIZE_PATH` | Normalize URL path |
129
- | `REMOVE_WHITESPACE` | Remove whitespace characters |
130
- | `URL_DECODE` | Decode URL-encoded characters |
131
- | `TRIM_LEFT` | Trim leading whitespace |
132
- | `TRIM_RIGHT` | Trim trailing whitespace |
133
- | `TRIM` | Trim both leading and trailing whitespace |
134
-
135
- ### HTTP Methods {#common-http-methods}
136
-
137
- HTTP methods used for request matching.
138
-
139
- | Value | Description |
140
- | ----- | ----------- |
141
- | `ANY` | Match any HTTP method |
142
- | `GET` | HTTP GET request |
143
- | `HEAD` | HTTP HEAD request |
144
- | `POST` | HTTP POST request |
145
- | `PUT` | HTTP PUT request |
146
- | `DELETE` | HTTP DELETE request |
147
- | `CONNECT` | HTTP CONNECT request |
148
- | `OPTIONS` | HTTP OPTIONS request |
149
- | `TRACE` | HTTP TRACE request |
150
- | `PATCH` | HTTP PATCH request |
151
- | `COPY` | HTTP COPY request (WebDAV) |
152
-
153
- ### TLS Fingerprints {#common-tls-fingerprints}
154
-
155
- TLS fingerprint categories for malicious client detection.
156
-
157
- | Value | Description |
158
- | ----- | ----------- |
159
- | `TLS_FINGERPRINT_NONE` | No fingerprint matching |
160
- | `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
161
- | `ADWARE` | Adware-associated fingerprints |
162
- | `DRIDEX` | Dridex malware fingerprints |
163
- | `GOOTKIT` | Gootkit malware fingerprints |
164
- | `RANSOMWARE` | Ransomware-associated fingerprints |
165
- | `TRICKBOT` | Trickbot malware fingerprints |
166
-
167
- ### IP Threat Categories {#common-ip-threat-categories}
168
-
169
- IP address threat categories for security filtering.
170
-
171
- | Value | Description |
172
- | ----- | ----------- |
173
- | `SPAM_SOURCES` | Known spam sources |
174
- | `WINDOWS_EXPLOITS` | Windows exploit sources |
175
- | `WEB_ATTACKS` | Web attack sources |
176
- | `BOTNETS` | Known botnet IPs |
177
- | `SCANNERS` | Network scanner IPs |
178
- | `REPUTATION` | Poor reputation IPs |
179
- | `PHISHING` | Phishing-related IPs |
180
- | `PROXY` | Anonymous proxy IPs |
181
- | `MOBILE_THREATS` | Mobile threat sources |
182
- | `TOR_PROXY` | Tor exit nodes |
183
- | `DENIAL_OF_SERVICE` | DoS attack sources |
184
- | `NETWORK` | Known bad network ranges |
185
-
186
- ## Import
187
-
188
- Import is supported using the following syntax:
189
-
190
- ```shell
191
- # Import using namespace/name format
192
- terraform import f5xc_managed_tenant.example system/example
193
- ```