@robinmordasiewicz/f5xc-terraform-mcp 3.0.2 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/certificate.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/certificate.md +4 -56
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/policer.md +10 -50
- package/dist/docs/resources/securemesh_site.md +1614 -253
- package/dist/docs/resources/site.md +12 -819
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/docs/specifications/api/CHANGELOG.md +4 -4
- package/dist/docs/specifications/api/README.md +2 -2
- package/dist/docs/specifications/api/domains/admin_console_and_ui.json +29 -25
- package/dist/docs/specifications/api/domains/ai_services.json +23 -21
- package/dist/docs/specifications/api/domains/api.json +201 -173
- package/dist/docs/specifications/api/domains/authentication.json +57 -45
- package/dist/docs/specifications/api/domains/bigip.json +106 -94
- package/dist/docs/specifications/api/domains/billing_and_usage.json +71 -63
- package/dist/docs/specifications/api/domains/blindfold.json +141 -109
- package/dist/docs/specifications/api/domains/bot_and_threat_defense.json +77 -65
- package/dist/docs/specifications/api/domains/cdn.json +371 -177
- package/dist/docs/specifications/api/domains/ce_management.json +137 -111
- package/dist/docs/specifications/api/domains/certificates.json +81 -75
- package/dist/docs/specifications/api/domains/cloud_infrastructure.json +136 -112
- package/dist/docs/specifications/api/domains/container_services.json +123 -91
- package/dist/docs/specifications/api/domains/data_and_privacy_security.json +72 -66
- package/dist/docs/specifications/api/domains/data_intelligence.json +68 -62
- package/dist/docs/specifications/api/domains/ddos.json +168 -154
- package/dist/docs/specifications/api/domains/dns.json +160 -148
- package/dist/docs/specifications/api/domains/managed_kubernetes.json +91 -85
- package/dist/docs/specifications/api/domains/marketplace.json +111 -103
- package/dist/docs/specifications/api/domains/network.json +269 -230
- package/dist/docs/specifications/api/domains/network_security.json +243 -187
- package/dist/docs/specifications/api/domains/nginx_one.json +70 -62
- package/dist/docs/specifications/api/domains/object_storage.json +12 -12
- package/dist/docs/specifications/api/domains/observability.json +231 -102
- package/dist/docs/specifications/api/domains/rate_limiting.json +58 -52
- package/dist/docs/specifications/api/domains/secops_and_incident_response.json +42 -36
- package/dist/docs/specifications/api/domains/service_mesh.json +143 -119
- package/dist/docs/specifications/api/domains/shape.json +327 -313
- package/dist/docs/specifications/api/domains/sites.json +536 -349
- package/dist/docs/specifications/api/domains/statistics.json +401 -225
- package/dist/docs/specifications/api/domains/support.json +116 -108
- package/dist/docs/specifications/api/domains/telemetry_and_insights.json +118 -72
- package/dist/docs/specifications/api/domains/tenant_and_identity.json +298 -268
- package/dist/docs/specifications/api/domains/threat_campaign.json +126 -66
- package/dist/docs/specifications/api/domains/users.json +76 -66
- package/dist/docs/specifications/api/domains/virtual.json +492 -244
- package/dist/docs/specifications/api/domains/vpm_and_node_management.json +1 -1
- package/dist/docs/specifications/api/domains/waf.json +227 -139
- package/dist/docs/specifications/api/index.json +99 -4
- package/dist/docs/specifications/api/openapi.json +3409 -2616
- package/dist/docs/specifications/api/openapi.yaml +5304 -2616
- package/package.json +1 -1
- package/dist/docs/data-sources/addon_service.md +0 -143
- package/dist/docs/data-sources/addon_service_activation_status.md +0 -144
- package/dist/docs/data-sources/addon_subscription.md +0 -134
- package/dist/docs/data-sources/allowed_tenant.md +0 -134
- package/dist/docs/data-sources/api_credential.md +0 -134
- package/dist/docs/data-sources/bigip_irule.md +0 -134
- package/dist/docs/data-sources/child_tenant.md +0 -134
- package/dist/docs/data-sources/child_tenant_manager.md +0 -134
- package/dist/docs/data-sources/contact.md +0 -134
- package/dist/docs/data-sources/customer_support.md +0 -134
- package/dist/docs/data-sources/dns_lb_health_check.md +0 -134
- package/dist/docs/data-sources/dns_lb_pool.md +0 -134
- package/dist/docs/data-sources/dns_load_balancer.md +0 -134
- package/dist/docs/data-sources/dns_zone.md +0 -145
- package/dist/docs/data-sources/geo_location_set.md +0 -134
- package/dist/docs/data-sources/ike1.md +0 -134
- package/dist/docs/data-sources/ike2.md +0 -134
- package/dist/docs/data-sources/ike_phase1_profile.md +0 -134
- package/dist/docs/data-sources/ike_phase2_profile.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +0 -134
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +0 -134
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +0 -134
- package/dist/docs/data-sources/infraprotect_tunnel.md +0 -134
- package/dist/docs/data-sources/k8s_cluster.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_admission.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_policy.md +0 -134
- package/dist/docs/data-sources/managed_tenant.md +0 -134
- package/dist/docs/data-sources/namespace.md +0 -141
- package/dist/docs/data-sources/oidc_provider.md +0 -134
- package/dist/docs/data-sources/quota.md +0 -134
- package/dist/docs/data-sources/registration.md +0 -134
- package/dist/docs/data-sources/report_config.md +0 -134
- package/dist/docs/data-sources/role.md +0 -134
- package/dist/docs/data-sources/secret_policy.md +0 -134
- package/dist/docs/data-sources/secret_policy_rule.md +0 -134
- package/dist/docs/data-sources/securemesh_site_v2.md +0 -134
- package/dist/docs/data-sources/srv6_network_slice.md +0 -134
- package/dist/docs/data-sources/tenant_profile.md +0 -134
- package/dist/docs/data-sources/ticket_tracking_system.md +0 -134
- package/dist/docs/data-sources/token.md +0 -134
- package/dist/docs/data-sources/tpm_api_key.md +0 -134
- package/dist/docs/data-sources/tpm_category.md +0 -134
- package/dist/docs/data-sources/tpm_manager.md +0 -134
- package/dist/docs/data-sources/virtual_k8s.md +0 -134
- package/dist/docs/data-sources/voltshare_admin_policy.md +0 -134
- package/dist/docs/resources/addon_subscription.md +0 -213
- package/dist/docs/resources/allowed_tenant.md +0 -181
- package/dist/docs/resources/api_credential.md +0 -184
- package/dist/docs/resources/bigip_irule.md +0 -173
- package/dist/docs/resources/child_tenant.md +0 -237
- package/dist/docs/resources/child_tenant_manager.md +0 -201
- package/dist/docs/resources/contact.md +0 -187
- package/dist/docs/resources/customer_support.md +0 -253
- package/dist/docs/resources/dns_lb_health_check.md +0 -249
- package/dist/docs/resources/dns_lb_pool.md +0 -310
- package/dist/docs/resources/dns_load_balancer.md +0 -309
- package/dist/docs/resources/dns_zone.md +0 -790
- package/dist/docs/resources/geo_location_set.md +0 -180
- package/dist/docs/resources/ike1.md +0 -216
- package/dist/docs/resources/ike2.md +0 -210
- package/dist/docs/resources/ike_phase1_profile.md +0 -224
- package/dist/docs/resources/ike_phase2_profile.md +0 -214
- package/dist/docs/resources/infraprotect_asn.md +0 -183
- package/dist/docs/resources/infraprotect_asn_prefix.md +0 -181
- package/dist/docs/resources/infraprotect_deny_list_rule.md +0 -191
- package/dist/docs/resources/infraprotect_firewall_rule.md +0 -288
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +0 -169
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +0 -191
- package/dist/docs/resources/infraprotect_tunnel.md +0 -289
- package/dist/docs/resources/k8s_cluster.md +0 -326
- package/dist/docs/resources/k8s_cluster_role.md +0 -222
- package/dist/docs/resources/k8s_cluster_role_binding.md +0 -207
- package/dist/docs/resources/k8s_pod_security_admission.md +0 -199
- package/dist/docs/resources/k8s_pod_security_policy.md +0 -337
- package/dist/docs/resources/managed_tenant.md +0 -193
- package/dist/docs/resources/namespace.md +0 -170
- package/dist/docs/resources/oidc_provider.md +0 -291
- package/dist/docs/resources/quota.md +0 -187
- package/dist/docs/resources/registration.md +0 -489
- package/dist/docs/resources/report_config.md +0 -237
- package/dist/docs/resources/role.md +0 -183
- package/dist/docs/resources/secret_policy.md +0 -240
- package/dist/docs/resources/secret_policy_rule.md +0 -198
- package/dist/docs/resources/securemesh_site_v2.md +0 -2027
- package/dist/docs/resources/srv6_network_slice.md +0 -175
- package/dist/docs/resources/tenant_profile.md +0 -233
- package/dist/docs/resources/ticket_tracking_system.md +0 -195
- package/dist/docs/resources/token.md +0 -170
- package/dist/docs/resources/tpm_api_key.md +0 -191
- package/dist/docs/resources/tpm_category.md +0 -191
- package/dist/docs/resources/tpm_manager.md +0 -167
- package/dist/docs/resources/virtual_k8s.md +0 -209
- package/dist/docs/resources/voltshare_admin_policy.md +0 -271
|
@@ -1,167 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_tpm_manager Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Integrations"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages a Tpm Manager resource in F5 Distributed Cloud for create a tpm manager configuration.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_tpm_manager (Resource)
|
|
9
|
-
|
|
10
|
-
Manages a Tpm Manager resource in F5 Distributed Cloud for create a tpm manager configuration.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Tpm Manager Resource Example
|
|
18
|
-
# Manages a Tpm Manager resource in F5 Distributed Cloud for create a tpm manager configuration.
|
|
19
|
-
|
|
20
|
-
# Basic Tpm Manager configuration
|
|
21
|
-
resource "f5xc_tpm_manager" "example" {
|
|
22
|
-
name = "example-tpm-manager"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
}
|
|
34
|
-
```
|
|
35
|
-
|
|
36
|
-
<!-- schema generated by tfplugindocs -->
|
|
37
|
-
## Argument Reference
|
|
38
|
-
|
|
39
|
-
### Metadata Argument Reference
|
|
40
|
-
|
|
41
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Tpm Manager. Must be unique within the namespace
|
|
42
|
-
|
|
43
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Tpm Manager will be created
|
|
44
|
-
|
|
45
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
46
|
-
|
|
47
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
48
|
-
|
|
49
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
50
|
-
|
|
51
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
52
|
-
|
|
53
|
-
### Spec Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
56
|
-
|
|
57
|
-
### Attributes Reference
|
|
58
|
-
|
|
59
|
-
In addition to all arguments above, the following attributes are exported:
|
|
60
|
-
|
|
61
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
62
|
-
|
|
63
|
-
---
|
|
64
|
-
|
|
65
|
-
#### Timeouts
|
|
66
|
-
|
|
67
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
68
|
-
|
|
69
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
70
|
-
|
|
71
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
72
|
-
|
|
73
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
74
|
-
|
|
75
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
76
|
-
|
|
77
|
-
---
|
|
78
|
-
|
|
79
|
-
## Common Types
|
|
80
|
-
|
|
81
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
82
|
-
|
|
83
|
-
### Object Reference {#common-object-reference}
|
|
84
|
-
|
|
85
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
86
|
-
|
|
87
|
-
| Field | Type | Description |
|
|
88
|
-
| ----- | ---- | ----------- |
|
|
89
|
-
| `name` | String | Name of the referenced object |
|
|
90
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
91
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
92
|
-
|
|
93
|
-
### Transformers {#common-transformers}
|
|
94
|
-
|
|
95
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
96
|
-
|
|
97
|
-
| Value | Description |
|
|
98
|
-
| ----- | ----------- |
|
|
99
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
100
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
101
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
102
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
103
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
104
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
105
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
106
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
107
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
108
|
-
|
|
109
|
-
### HTTP Methods {#common-http-methods}
|
|
110
|
-
|
|
111
|
-
HTTP methods used for request matching.
|
|
112
|
-
|
|
113
|
-
| Value | Description |
|
|
114
|
-
| ----- | ----------- |
|
|
115
|
-
| `ANY` | Match any HTTP method |
|
|
116
|
-
| `GET` | HTTP GET request |
|
|
117
|
-
| `HEAD` | HTTP HEAD request |
|
|
118
|
-
| `POST` | HTTP POST request |
|
|
119
|
-
| `PUT` | HTTP PUT request |
|
|
120
|
-
| `DELETE` | HTTP DELETE request |
|
|
121
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
122
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
123
|
-
| `TRACE` | HTTP TRACE request |
|
|
124
|
-
| `PATCH` | HTTP PATCH request |
|
|
125
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
126
|
-
|
|
127
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
128
|
-
|
|
129
|
-
TLS fingerprint categories for malicious client detection.
|
|
130
|
-
|
|
131
|
-
| Value | Description |
|
|
132
|
-
| ----- | ----------- |
|
|
133
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
134
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
135
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
136
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
137
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
138
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
139
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
140
|
-
|
|
141
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
142
|
-
|
|
143
|
-
IP address threat categories for security filtering.
|
|
144
|
-
|
|
145
|
-
| Value | Description |
|
|
146
|
-
| ----- | ----------- |
|
|
147
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
148
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
149
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
150
|
-
| `BOTNETS` | Known botnet IPs |
|
|
151
|
-
| `SCANNERS` | Network scanner IPs |
|
|
152
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
153
|
-
| `PHISHING` | Phishing-related IPs |
|
|
154
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
155
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
156
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
157
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
158
|
-
| `NETWORK` | Known bad network ranges |
|
|
159
|
-
|
|
160
|
-
## Import
|
|
161
|
-
|
|
162
|
-
Import is supported using the following syntax:
|
|
163
|
-
|
|
164
|
-
```shell
|
|
165
|
-
# Import using namespace/name format
|
|
166
|
-
terraform import f5xc_tpm_manager.example system/example
|
|
167
|
-
```
|
|
@@ -1,209 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_virtual_k8s Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Kubernetes"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages virtual_k8s will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_virtual_k8s (Resource)
|
|
9
|
-
|
|
10
|
-
Manages virtual_k8s will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Virtual K8S Resource Example
|
|
18
|
-
# Manages virtual_k8s will create the object in the storage backend for namespace metadata.namespace in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic Virtual K8S configuration
|
|
21
|
-
resource "f5xc_virtual_k8s" "example" {
|
|
22
|
-
name = "example-virtual-k8s"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
// Virtual site selection for workload deployment
|
|
35
|
-
vsite_refs {
|
|
36
|
-
name = "example-virtual-site"
|
|
37
|
-
namespace = "system"
|
|
38
|
-
}
|
|
39
|
-
|
|
40
|
-
// One of the arguments from this list "disabled isolated" must be set
|
|
41
|
-
|
|
42
|
-
isolated {}
|
|
43
|
-
|
|
44
|
-
// Default workload flavor reference
|
|
45
|
-
default_flavor_ref {
|
|
46
|
-
name = "example-workload-flavor"
|
|
47
|
-
namespace = "staging"
|
|
48
|
-
}
|
|
49
|
-
}
|
|
50
|
-
```
|
|
51
|
-
|
|
52
|
-
<!-- schema generated by tfplugindocs -->
|
|
53
|
-
## Argument Reference
|
|
54
|
-
|
|
55
|
-
### Metadata Argument Reference
|
|
56
|
-
|
|
57
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Virtual K8S. Must be unique within the namespace
|
|
58
|
-
|
|
59
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Virtual K8S will be created
|
|
60
|
-
|
|
61
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
62
|
-
|
|
63
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
64
|
-
|
|
65
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
66
|
-
|
|
67
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
68
|
-
|
|
69
|
-
### Spec Argument Reference
|
|
70
|
-
|
|
71
|
-
<a id="default-flavor-ref"></a>• [`default_flavor_ref`](#default-flavor-ref) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Default Flavor Ref](#default-flavor-ref) below for details.
|
|
72
|
-
|
|
73
|
-
-> **One of the following:**
|
|
74
|
-
• <a id="disabled"></a>[`disabled`](#disabled) - Optional Block<br>Enable this option
|
|
75
|
-
<br><br>• <a id="isolated"></a>[`isolated`](#isolated) - Optional Block<br>Enable this option
|
|
76
|
-
|
|
77
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
78
|
-
|
|
79
|
-
<a id="vsite-refs"></a>• [`vsite_refs`](#vsite-refs) - Optional Block<br>Virtual Sites. Reference to virtual-sites Default virtual-site of the Virtual K8S object. If no virtual-site is specified in the Kubernetes API resource object annotations via ves.io/virtual-sites, then this virtual-site is used select sites on which to instantiate the Kubernetes API resource object<br>See [Vsite Refs](#vsite-refs) below for details.
|
|
80
|
-
|
|
81
|
-
### Attributes Reference
|
|
82
|
-
|
|
83
|
-
In addition to all arguments above, the following attributes are exported:
|
|
84
|
-
|
|
85
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
86
|
-
|
|
87
|
-
---
|
|
88
|
-
|
|
89
|
-
#### Default Flavor Ref
|
|
90
|
-
|
|
91
|
-
<a id="objref-3b1901"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
92
|
-
|
|
93
|
-
#### Timeouts
|
|
94
|
-
|
|
95
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
96
|
-
|
|
97
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `30 minutes`)<br>Used when creating the resource
|
|
98
|
-
|
|
99
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `30 minutes`)<br>Used when deleting the resource
|
|
100
|
-
|
|
101
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
102
|
-
|
|
103
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `30 minutes`)<br>Used when updating the resource
|
|
104
|
-
|
|
105
|
-
#### Vsite Refs
|
|
106
|
-
|
|
107
|
-
A [`vsite_refs`](#vsite-refs) block supports the following:
|
|
108
|
-
|
|
109
|
-
<a id="vsite-refs-kind"></a>• [`kind`](#vsite-refs-kind) - Optional String<br>Object reference kind
|
|
110
|
-
|
|
111
|
-
<a id="vsite-refs-name"></a>• [`name`](#vsite-refs-name) - Optional String<br>Object reference name
|
|
112
|
-
|
|
113
|
-
<a id="vsite-refs-namespace"></a>• [`namespace`](#vsite-refs-namespace) - Optional String<br>Object reference namespace
|
|
114
|
-
|
|
115
|
-
<a id="vsite-refs-tenant"></a>• [`tenant`](#vsite-refs-tenant) - Optional String<br>Object reference tenant
|
|
116
|
-
|
|
117
|
-
<a id="vsite-refs-uid"></a>• [`uid`](#vsite-refs-uid) - Optional String<br>Object reference UID
|
|
118
|
-
|
|
119
|
-
---
|
|
120
|
-
|
|
121
|
-
## Common Types
|
|
122
|
-
|
|
123
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
124
|
-
|
|
125
|
-
### Object Reference {#common-object-reference}
|
|
126
|
-
|
|
127
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
128
|
-
|
|
129
|
-
| Field | Type | Description |
|
|
130
|
-
| ----- | ---- | ----------- |
|
|
131
|
-
| `name` | String | Name of the referenced object |
|
|
132
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
133
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
134
|
-
|
|
135
|
-
### Transformers {#common-transformers}
|
|
136
|
-
|
|
137
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
138
|
-
|
|
139
|
-
| Value | Description |
|
|
140
|
-
| ----- | ----------- |
|
|
141
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
142
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
143
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
144
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
145
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
146
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
147
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
148
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
149
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
150
|
-
|
|
151
|
-
### HTTP Methods {#common-http-methods}
|
|
152
|
-
|
|
153
|
-
HTTP methods used for request matching.
|
|
154
|
-
|
|
155
|
-
| Value | Description |
|
|
156
|
-
| ----- | ----------- |
|
|
157
|
-
| `ANY` | Match any HTTP method |
|
|
158
|
-
| `GET` | HTTP GET request |
|
|
159
|
-
| `HEAD` | HTTP HEAD request |
|
|
160
|
-
| `POST` | HTTP POST request |
|
|
161
|
-
| `PUT` | HTTP PUT request |
|
|
162
|
-
| `DELETE` | HTTP DELETE request |
|
|
163
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
164
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
165
|
-
| `TRACE` | HTTP TRACE request |
|
|
166
|
-
| `PATCH` | HTTP PATCH request |
|
|
167
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
168
|
-
|
|
169
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
170
|
-
|
|
171
|
-
TLS fingerprint categories for malicious client detection.
|
|
172
|
-
|
|
173
|
-
| Value | Description |
|
|
174
|
-
| ----- | ----------- |
|
|
175
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
176
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
177
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
178
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
179
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
180
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
181
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
182
|
-
|
|
183
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
184
|
-
|
|
185
|
-
IP address threat categories for security filtering.
|
|
186
|
-
|
|
187
|
-
| Value | Description |
|
|
188
|
-
| ----- | ----------- |
|
|
189
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
190
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
191
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
192
|
-
| `BOTNETS` | Known botnet IPs |
|
|
193
|
-
| `SCANNERS` | Network scanner IPs |
|
|
194
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
195
|
-
| `PHISHING` | Phishing-related IPs |
|
|
196
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
197
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
198
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
199
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
200
|
-
| `NETWORK` | Known bad network ranges |
|
|
201
|
-
|
|
202
|
-
## Import
|
|
203
|
-
|
|
204
|
-
Import is supported using the following syntax:
|
|
205
|
-
|
|
206
|
-
```shell
|
|
207
|
-
# Import using namespace/name format
|
|
208
|
-
terraform import f5xc_virtual_k8s.example system/example
|
|
209
|
-
```
|
|
@@ -1,271 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_voltshare_admin_policy Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Security"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages voltshare_admin_policy creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_voltshare_admin_policy (Resource)
|
|
9
|
-
|
|
10
|
-
Manages voltshare_admin_policy creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Voltshare Admin Policy Resource Example
|
|
18
|
-
# Manages voltshare_admin_policy creates a new object in the storage backend for metadata.namespace. in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic Voltshare Admin Policy configuration
|
|
21
|
-
resource "f5xc_voltshare_admin_policy" "example" {
|
|
22
|
-
name = "example-voltshare-admin-policy"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# User Matcher. user_matcher contains contains the allow/de...
|
|
36
|
-
author_restrictions {
|
|
37
|
-
# Configure author_restrictions settings
|
|
38
|
-
}
|
|
39
|
-
# Enable this option
|
|
40
|
-
allow_all {
|
|
41
|
-
# Configure allow_all settings
|
|
42
|
-
}
|
|
43
|
-
# Custom List. Custom List contains user customized list of...
|
|
44
|
-
allow_list {
|
|
45
|
-
# Configure allow_list settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Voltshare Admin Policy. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Voltshare Admin Policy will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
<a id="author-restrictions"></a>• [`author_restrictions`](#author-restrictions) - Optional Block<br>User Matcher. user_matcher contains contains the allow/deny list of users/authors<br>See [Author Restrictions](#author-restrictions) below for details.
|
|
70
|
-
|
|
71
|
-
<a id="max-validity-duration"></a>• [`max_validity_duration`](#max-validity-duration) - Optional String<br>Maximum Duration for Validity. max_validity_duration contains the maximum amount of time a secret from any users from this team/tenant is valid. Value for this parameter is a string ending in the suffix 's' (indicating seconds), suffix 'm' (indicating minutes) or suffix 'h' (indicating hours)
|
|
72
|
-
|
|
73
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
74
|
-
|
|
75
|
-
<a id="user-restrictions"></a>• [`user_restrictions`](#user-restrictions) - Optional Block<br>Per Team Decryption Policy. user_restrictions contains per tenant/team list of allowed/disallowed users with whom a secret can be shared using F5XC VoltShare<br>See [User Restrictions](#user-restrictions) below for details.
|
|
76
|
-
|
|
77
|
-
### Attributes Reference
|
|
78
|
-
|
|
79
|
-
In addition to all arguments above, the following attributes are exported:
|
|
80
|
-
|
|
81
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
82
|
-
|
|
83
|
-
---
|
|
84
|
-
|
|
85
|
-
#### Author Restrictions
|
|
86
|
-
|
|
87
|
-
An [`author_restrictions`](#author-restrictions) block supports the following:
|
|
88
|
-
|
|
89
|
-
<a id="author-restrictions-allow-all"></a>• [`allow_all`](#author-restrictions-allow-all) - Optional Block<br>Enable this option
|
|
90
|
-
|
|
91
|
-
<a id="author-restrictions-allow-list"></a>• [`allow_list`](#author-restrictions-allow-list) - Optional Block<br>Custom List. Custom List contains user customized list of matcher values<br>See [Allow List](#author-restrictions-allow-list) below.
|
|
92
|
-
|
|
93
|
-
<a id="author-restrictions-deny-all"></a>• [`deny_all`](#author-restrictions-deny-all) - Optional Block<br>Enable this option
|
|
94
|
-
|
|
95
|
-
<a id="author-restrictions-deny-list"></a>• [`deny_list`](#author-restrictions-deny-list) - Optional Block<br>Custom List. Custom List contains user customized list of matcher values<br>See [Deny List](#author-restrictions-deny-list) below.
|
|
96
|
-
|
|
97
|
-
#### Author Restrictions Allow List
|
|
98
|
-
|
|
99
|
-
An [`allow_list`](#author-restrictions-allow-list) block (within [`author_restrictions`](#author-restrictions)) supports the following:
|
|
100
|
-
|
|
101
|
-
<a id="list-666236"></a>• [`custom_list`](#list-666236) - Optional Block<br>List of User ID(s). List of user ID(s)<br>See [Custom List](#list-666236) below.
|
|
102
|
-
|
|
103
|
-
#### Author Restrictions Allow List Custom List
|
|
104
|
-
|
|
105
|
-
A [`custom_list`](#list-666236) block (within [`author_restrictions.allow_list`](#author-restrictions-allow-list)) supports the following:
|
|
106
|
-
|
|
107
|
-
<a id="value-cc6b5b"></a>• [`exact_value`](#value-cc6b5b) - Optional String<br>Exact User ID. exact_match contains user_id to match against
|
|
108
|
-
|
|
109
|
-
<a id="pattern-657c24"></a>• [`regex_pattern`](#pattern-657c24) - Optional String<br>Regex For User ID. regex_values contains a regex pattern to match against
|
|
110
|
-
|
|
111
|
-
#### Author Restrictions Deny List
|
|
112
|
-
|
|
113
|
-
A [`deny_list`](#author-restrictions-deny-list) block (within [`author_restrictions`](#author-restrictions)) supports the following:
|
|
114
|
-
|
|
115
|
-
<a id="list-b82333"></a>• [`custom_list`](#list-b82333) - Optional Block<br>List of User ID(s). List of user ID(s)<br>See [Custom List](#list-b82333) below.
|
|
116
|
-
|
|
117
|
-
#### Author Restrictions Deny List Custom List
|
|
118
|
-
|
|
119
|
-
A [`custom_list`](#list-b82333) block (within [`author_restrictions.deny_list`](#author-restrictions-deny-list)) supports the following:
|
|
120
|
-
|
|
121
|
-
<a id="value-403381"></a>• [`exact_value`](#value-403381) - Optional String<br>Exact User ID. exact_match contains user_id to match against
|
|
122
|
-
|
|
123
|
-
<a id="pattern-ccdbe4"></a>• [`regex_pattern`](#pattern-ccdbe4) - Optional String<br>Regex For User ID. regex_values contains a regex pattern to match against
|
|
124
|
-
|
|
125
|
-
#### Timeouts
|
|
126
|
-
|
|
127
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
128
|
-
|
|
129
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
130
|
-
|
|
131
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
132
|
-
|
|
133
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
134
|
-
|
|
135
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
136
|
-
|
|
137
|
-
#### User Restrictions
|
|
138
|
-
|
|
139
|
-
An [`user_restrictions`](#user-restrictions) block supports the following:
|
|
140
|
-
|
|
141
|
-
<a id="user-restrictions-all-tenants"></a>• [`all_tenants`](#user-restrictions-all-tenants) - Optional Block<br>Enable this option
|
|
142
|
-
|
|
143
|
-
<a id="user-restrictions-individual-users"></a>• [`individual_users`](#user-restrictions-individual-users) - Optional Block<br>Enable this option
|
|
144
|
-
|
|
145
|
-
<a id="user-restrictions-tenant"></a>• [`tenant`](#user-restrictions-tenant) - Optional String<br>Team/Tenant. Team/Tenant for which this rule is valid
|
|
146
|
-
|
|
147
|
-
<a id="user-restrictions-user-restrictions"></a>• [`user_restrictions`](#user-restrictions-user-restrictions) - Optional Block<br>User Matcher. user_matcher contains contains the allow/deny list of users/authors<br>See [User Restrictions](#user-restrictions-user-restrictions) below.
|
|
148
|
-
|
|
149
|
-
#### User Restrictions User Restrictions
|
|
150
|
-
|
|
151
|
-
An [`user_restrictions`](#user-restrictions-user-restrictions) block (within [`user_restrictions`](#user-restrictions)) supports the following:
|
|
152
|
-
|
|
153
|
-
<a id="all-f17b7a"></a>• [`allow_all`](#all-f17b7a) - Optional Block<br>Enable this option
|
|
154
|
-
|
|
155
|
-
<a id="list-2c1ff3"></a>• [`allow_list`](#list-2c1ff3) - Optional Block<br>Custom List. Custom List contains user customized list of matcher values<br>See [Allow List](#list-2c1ff3) below.
|
|
156
|
-
|
|
157
|
-
<a id="all-51bcc9"></a>• [`deny_all`](#all-51bcc9) - Optional Block<br>Enable this option
|
|
158
|
-
|
|
159
|
-
<a id="list-fc497b"></a>• [`deny_list`](#list-fc497b) - Optional Block<br>Custom List. Custom List contains user customized list of matcher values<br>See [Deny List](#list-fc497b) below.
|
|
160
|
-
|
|
161
|
-
#### User Restrictions User Restrictions Allow List
|
|
162
|
-
|
|
163
|
-
An [`allow_list`](#list-2c1ff3) block (within [`user_restrictions.user_restrictions`](#user-restrictions-user-restrictions)) supports the following:
|
|
164
|
-
|
|
165
|
-
<a id="list-bd1704"></a>• [`custom_list`](#list-bd1704) - Optional Block<br>List of User ID(s). List of user ID(s)<br>See [Custom List](#list-bd1704) below.
|
|
166
|
-
|
|
167
|
-
#### User Restrictions User Restrictions Allow List Custom List
|
|
168
|
-
|
|
169
|
-
<a id="deep-331175"></a>Deeply nested **List** block collapsed for readability.
|
|
170
|
-
|
|
171
|
-
#### User Restrictions User Restrictions Deny List
|
|
172
|
-
|
|
173
|
-
A [`deny_list`](#list-fc497b) block (within [`user_restrictions.user_restrictions`](#user-restrictions-user-restrictions)) supports the following:
|
|
174
|
-
|
|
175
|
-
<a id="list-8cc74e"></a>• [`custom_list`](#list-8cc74e) - Optional Block<br>List of User ID(s). List of user ID(s)<br>See [Custom List](#list-8cc74e) below.
|
|
176
|
-
|
|
177
|
-
#### User Restrictions User Restrictions Deny List Custom List
|
|
178
|
-
|
|
179
|
-
<a id="deep-2f3f46"></a>Deeply nested **List** block collapsed for readability.
|
|
180
|
-
|
|
181
|
-
---
|
|
182
|
-
|
|
183
|
-
## Common Types
|
|
184
|
-
|
|
185
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
186
|
-
|
|
187
|
-
### Object Reference {#common-object-reference}
|
|
188
|
-
|
|
189
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
190
|
-
|
|
191
|
-
| Field | Type | Description |
|
|
192
|
-
| ----- | ---- | ----------- |
|
|
193
|
-
| `name` | String | Name of the referenced object |
|
|
194
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
195
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
196
|
-
|
|
197
|
-
### Transformers {#common-transformers}
|
|
198
|
-
|
|
199
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
200
|
-
|
|
201
|
-
| Value | Description |
|
|
202
|
-
| ----- | ----------- |
|
|
203
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
204
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
205
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
206
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
207
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
208
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
209
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
210
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
211
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
212
|
-
|
|
213
|
-
### HTTP Methods {#common-http-methods}
|
|
214
|
-
|
|
215
|
-
HTTP methods used for request matching.
|
|
216
|
-
|
|
217
|
-
| Value | Description |
|
|
218
|
-
| ----- | ----------- |
|
|
219
|
-
| `ANY` | Match any HTTP method |
|
|
220
|
-
| `GET` | HTTP GET request |
|
|
221
|
-
| `HEAD` | HTTP HEAD request |
|
|
222
|
-
| `POST` | HTTP POST request |
|
|
223
|
-
| `PUT` | HTTP PUT request |
|
|
224
|
-
| `DELETE` | HTTP DELETE request |
|
|
225
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
226
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
227
|
-
| `TRACE` | HTTP TRACE request |
|
|
228
|
-
| `PATCH` | HTTP PATCH request |
|
|
229
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
230
|
-
|
|
231
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
232
|
-
|
|
233
|
-
TLS fingerprint categories for malicious client detection.
|
|
234
|
-
|
|
235
|
-
| Value | Description |
|
|
236
|
-
| ----- | ----------- |
|
|
237
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
238
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
239
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
240
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
241
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
242
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
243
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
244
|
-
|
|
245
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
246
|
-
|
|
247
|
-
IP address threat categories for security filtering.
|
|
248
|
-
|
|
249
|
-
| Value | Description |
|
|
250
|
-
| ----- | ----------- |
|
|
251
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
252
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
253
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
254
|
-
| `BOTNETS` | Known botnet IPs |
|
|
255
|
-
| `SCANNERS` | Network scanner IPs |
|
|
256
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
257
|
-
| `PHISHING` | Phishing-related IPs |
|
|
258
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
259
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
260
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
261
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
262
|
-
| `NETWORK` | Known bad network ranges |
|
|
263
|
-
|
|
264
|
-
## Import
|
|
265
|
-
|
|
266
|
-
Import is supported using the following syntax:
|
|
267
|
-
|
|
268
|
-
```shell
|
|
269
|
-
# Import using namespace/name format
|
|
270
|
-
terraform import f5xc_voltshare_admin_policy.example system/example
|
|
271
|
-
```
|