@robinmordasiewicz/f5xc-terraform-mcp 3.10.3 → 3.10.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2,12 +2,12 @@
2
2
  page_title: "f5xc_site Resource - terraform-provider-f5xc"
3
3
  subcategory: "Uncategorized"
4
4
  description: |-
5
- Manages a Site resource in F5 Distributed Cloud for secure mesh site specification. configuration.
5
+ Manages a Site resource in F5 Distributed Cloud for gcp vpc site specification. configuration.
6
6
  ---
7
7
 
8
8
  # f5xc_site (Resource)
9
9
 
10
- Manages a Site resource in F5 Distributed Cloud for secure mesh site specification. configuration.
10
+ Manages a Site resource in F5 Distributed Cloud for gcp vpc site specification. configuration.
11
11
 
12
12
  ~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
13
13
 
@@ -15,7 +15,7 @@ Manages a Site resource in F5 Distributed Cloud for secure mesh site specificati
15
15
 
16
16
  ```terraform
17
17
  # Site Resource Example
18
- # Manages a Site resource in F5 Distributed Cloud for secure mesh site specification. configuration.
18
+ # Manages a Site resource in F5 Distributed Cloud for gcp vpc site specification. configuration.
19
19
 
20
20
  # Basic Site configuration
21
21
  resource "f5xc_site" "example" {
@@ -32,17 +32,17 @@ resource "f5xc_site" "example" {
32
32
  }
33
33
 
34
34
  # Resource-specific configuration
35
- # [OneOf: blocked_services, default_blocked_services; Defau...
36
- blocked_services {
37
- # Configure blocked_services settings
35
+ # SecretType is used in an object to indicate a sensitive/c...
36
+ admin_password {
37
+ # Configure admin_password settings
38
38
  }
39
- # Disable Node Local Services. Blocking or denial configura...
40
- blocked_sevice {
41
- # Configure blocked_sevice settings
39
+ # BlindfoldSecretInfoType specifies information about the S...
40
+ blindfold_secret_info {
41
+ # Configure blindfold_secret_info settings
42
42
  }
43
- # Enable this option
44
- dns {
45
- # Configure dns settings
43
+ # ClearSecretInfoType specifies information about the Secre...
44
+ clear_secret_info {
45
+ # Configure clear_secret_info settings
46
46
  }
47
47
  }
48
48
  ```
@@ -68,20 +68,32 @@ resource "f5xc_site" "example" {
68
68
 
69
69
  <a id="address"></a>&#x2022; [`address`](#address) - Optional String<br>Site's geographical address that can be used to determine its latitude and longitude
70
70
 
71
- -> **One of the following:**
72
- &#x2022; <a id="blocked-services"></a>[`blocked_services`](#blocked-services) - Optional Block<br>Disable node local services on this site<br>See [Blocked Services](#blocked-services) below for details.
71
+ <a id="admin-password"></a>&#x2022; [`admin_password`](#admin-password) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Admin Password](#admin-password) below for details.
73
72
 
74
73
  -> **One of the following:**
75
- &#x2022; <a id="bond-device-list"></a>[`bond_device_list`](#bond-device-list) - Optional Block<br>Bond Devices List. List of bond devices for this fleet<br>See [Bond Device List](#bond-device-list) below for details.
74
+ &#x2022; <a id="block-all-services"></a>[`block_all_services`](#block-all-services) - Optional Block<br>Enable this option
75
+ <br><br>&#x2022; <a id="blocked-services"></a>[`blocked_services`](#blocked-services) - Optional Block<br>Disable node local services on this site<br>See [Blocked Services](#blocked-services) below for details.
76
+
77
+ <a id="cloud-credentials"></a>&#x2022; [`cloud_credentials`](#cloud-credentials) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Cloud Credentials](#cloud-credentials) below for details.
76
78
 
77
79
  <a id="coordinates"></a>&#x2022; [`coordinates`](#coordinates) - Optional Block<br>Coordinates of the site which provides the site physical location<br>See [Coordinates](#coordinates) below for details.
78
80
 
79
- -> **One of the following:**
80
- &#x2022; <a id="custom-network-config"></a>[`custom_network_config`](#custom-network-config) - Optional Block<br>SmsNetworkConfiguration<br>See [Custom Network Config](#custom-network-config) below for details.
81
+ <a id="custom-dns"></a>&#x2022; [`custom_dns`](#custom-dns) - Optional Block<br>Custom DNS is the configured for specify CE site<br>See [Custom DNS](#custom-dns) below for details.
81
82
 
82
83
  <a id="default-blocked-services"></a>&#x2022; [`default_blocked_services`](#default-blocked-services) - Optional Block<br>Enable this option
83
84
 
84
- <a id="default-network-config"></a>&#x2022; [`default_network_config`](#default-network-config) - Optional Block<br>Enable this option
85
+ <a id="disk-size"></a>&#x2022; [`disk_size`](#disk-size) - Optional Number<br>Disk size to be used for this instance in GiB. 80 is 80 GiB
86
+
87
+ <a id="gcp-labels"></a>&#x2022; [`gcp_labels`](#gcp-labels) - Optional Block<br>GCP Label is a label consisting of a user-defined key and value. It helps to manage, identify, organize, search for, and filter resources in GCP console
88
+
89
+ <a id="gcp-region"></a>&#x2022; [`gcp_region`](#gcp-region) - Optional String<br>GCP Region. Name for GCP Region
90
+
91
+ -> **One of the following:**
92
+ &#x2022; <a id="ingress-egress-gw"></a>[`ingress_egress_gw`](#ingress-egress-gw) - Optional Block<br>GCP Ingress/Egress Gateway. Two interface GCP ingress/egress site<br>See [Ingress Egress Gw](#ingress-egress-gw) below for details.
93
+ <br><br>&#x2022; <a id="ingress-gw"></a>[`ingress_gw`](#ingress-gw) - Optional Block<br>GCP Ingress Gateway. Single interface GCP ingress site
94
+ <br><br>&#x2022; <a id="voltstack-cluster"></a>[`voltstack_cluster`](#voltstack-cluster) - Optional Block<br>App Stack cluster of single interface GCP site
95
+
96
+ <a id="instance-type"></a>&#x2022; [`instance_type`](#instance-type) - Optional String<br>Select Instance size based on performance needed
85
97
 
86
98
  <a id="kubernetes-upgrade-drain"></a>&#x2022; [`kubernetes_upgrade_drain`](#kubernetes-upgrade-drain) - Optional Block<br>Specify how worker nodes within a site will be upgraded
87
99
 
@@ -89,24 +101,20 @@ resource "f5xc_site" "example" {
89
101
  &#x2022; <a id="log-receiver"></a>[`log_receiver`](#log-receiver) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
90
102
  <br><br>&#x2022; <a id="logs-streaming-disabled"></a>[`logs_streaming_disabled`](#logs-streaming-disabled) - Optional Block<br>Enable this option
91
103
 
92
- <a id="master-node-configuration"></a>&#x2022; [`master_node_configuration`](#master-node-configuration) - Optional Block<br>Configuration of master nodes
93
-
94
- <a id="no-bond-devices"></a>&#x2022; [`no_bond_devices`](#no-bond-devices) - Optional Block<br>Enable this option
95
-
96
104
  <a id="offline-survivability-mode"></a>&#x2022; [`offline_survivability_mode`](#offline-survivability-mode) - Optional Block<br>Offline Survivability allows the Site to continue functioning normally without traffic loss during periods of connectivity loss to the Regional Edge (RE) or the Global Controller (GC). When this feature is enabled, a site can continue to function as is with existing configuration for upto 7
97
105
 
98
106
  <a id="os"></a>&#x2022; [`os`](#os) - Optional Block<br>Select the F5XC Operating System Version for the site. By default, latest available OS Version will be used. Refer to release notes to find required released OS versions
99
107
 
100
- <a id="performance-enhancement-mode"></a>&#x2022; [`performance_enhancement_mode`](#performance-enhancement-mode) - Optional Block<br>Optimize the site for L3 or L7 traffic processing. L7 optimized is the default
108
+ -> **One of the following:**
109
+ &#x2022; <a id="private-connect-disabled"></a>[`private_connect_disabled`](#private-connect-disabled) - Optional Block<br>Enable this option
110
+ <br><br>&#x2022; <a id="private-connectivity"></a>[`private_connectivity`](#private-connectivity) - Optional Block<br>Private Connect Configuration. Private Connect Configuration
111
+
112
+ <a id="ssh-key"></a>&#x2022; [`ssh_key`](#ssh-key) - Optional String<br>Public SSH key for accessing the site
101
113
 
102
114
  <a id="sw"></a>&#x2022; [`sw`](#sw) - Optional Block<br>Select the F5XC Software Version for the site. By default, latest available F5XC Software Version will be used. Refer to release notes to find required released SW versions
103
115
 
104
116
  <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block
105
117
 
106
- <a id="volterra-certified-hw"></a>&#x2022; [`volterra_certified_hw`](#volterra-certified-hw) - Optional String<br>Name for generic server certified hardware to form this Secure Mesh site
107
-
108
- <a id="worker-nodes"></a>&#x2022; [`worker_nodes`](#worker-nodes) - Optional List<br>Worker Nodes. Names of worker nodes
109
-
110
118
  ### Attributes Reference
111
119
 
112
120
  In addition to all arguments above, the following attributes are exported:
@@ -115,6 +123,32 @@ In addition to all arguments above, the following attributes are exported:
115
123
 
116
124
  ---
117
125
 
126
+ #### Admin Password
127
+
128
+ An [`admin_password`](#admin-password) block supports the following:
129
+
130
+ <a id="admin-password-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#admin-password-blindfold-secret-info) - Optional Block<br>BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#admin-password-blindfold-secret-info) below.
131
+
132
+ <a id="admin-password-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#admin-password-clear-secret-info) - Optional Block<br>ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#admin-password-clear-secret-info) below.
133
+
134
+ #### Admin Password Blindfold Secret Info
135
+
136
+ A [`blindfold_secret_info`](#admin-password-blindfold-secret-info) block (within [`admin_password`](#admin-password)) supports the following:
137
+
138
+ <a id="provider-e88368"></a>&#x2022; [`decryption_provider`](#provider-e88368) - Optional String<br>Name of the Secret Management Access object that contains information about the backend Secret Management service
139
+
140
+ <a id="location-60af3e"></a>&#x2022; [`location`](#location-60af3e) - Optional String<br>Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
141
+
142
+ <a id="provider-5c48c5"></a>&#x2022; [`store_provider`](#provider-5c48c5) - Optional String<br>Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
143
+
144
+ #### Admin Password Clear Secret Info
145
+
146
+ A [`clear_secret_info`](#admin-password-clear-secret-info) block (within [`admin_password`](#admin-password)) supports the following:
147
+
148
+ <a id="ref-e52931"></a>&#x2022; [`provider_ref`](#ref-e52931) - Optional String<br>Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
149
+
150
+ <a id="admin-password-clear-secret-info-url"></a>&#x2022; [`url`](#admin-password-clear-secret-info-url) - Optional String<br>URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
151
+
118
152
  #### Blocked Services
119
153
 
120
154
  A [`blocked_services`](#blocked-services) block supports the following:
@@ -133,385 +167,413 @@ A [`blocked_sevice`](#blocked-services-blocked-sevice) block (within [`blocked_s
133
167
 
134
168
  <a id="interface-e57e21"></a>&#x2022; [`web_user_interface`](#interface-e57e21) - Optional Block<br>Enable this option
135
169
 
136
- #### Bond Device List
170
+ #### Cloud Credentials
137
171
 
138
- A [`bond_device_list`](#bond-device-list) block supports the following:
172
+ A [`cloud_credentials`](#cloud-credentials) block supports the following:
139
173
 
140
- <a id="bond-device-list-bond-devices"></a>&#x2022; [`bond_devices`](#bond-device-list-bond-devices) - Optional Block<br>Bond Devices. List of bond devices<br>See [Bond Devices](#bond-device-list-bond-devices) below.
174
+ <a id="cloud-credentials-name"></a>&#x2022; [`name`](#cloud-credentials-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
141
175
 
142
- #### Bond Device List Bond Devices
176
+ <a id="cloud-credentials-namespace"></a>&#x2022; [`namespace`](#cloud-credentials-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
143
177
 
144
- A [`bond_devices`](#bond-device-list-bond-devices) block (within [`bond_device_list`](#bond-device-list)) supports the following:
178
+ <a id="cloud-credentials-tenant"></a>&#x2022; [`tenant`](#cloud-credentials-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
145
179
 
146
- <a id="backup-c22794"></a>&#x2022; [`active_backup`](#backup-c22794) - Optional Block<br>Enable this option
180
+ #### Coordinates
147
181
 
148
- <a id="bond-device-list-bond-devices-devices"></a>&#x2022; [`devices`](#bond-device-list-bond-devices-devices) - Optional List<br>Ethernet devices that will make up this bond
182
+ A [`coordinates`](#coordinates) block supports the following:
149
183
 
150
- <a id="bond-device-list-bond-devices-lacp"></a>&#x2022; [`lacp`](#bond-device-list-bond-devices-lacp) - Optional Block<br>LACP parameters. LACP parameters for the bond device<br>See [Lacp](#bond-device-list-bond-devices-lacp) below.
184
+ <a id="coordinates-latitude"></a>&#x2022; [`latitude`](#coordinates-latitude) - Optional Number<br>Latitude. Latitude of the site location
151
185
 
152
- <a id="interval-0b4c96"></a>&#x2022; [`link_polling_interval`](#interval-0b4c96) - Optional Number<br>Link polling interval in milliseconds
186
+ <a id="coordinates-longitude"></a>&#x2022; [`longitude`](#coordinates-longitude) - Optional Number<br>Longitude. Longitude of site location
153
187
 
154
- <a id="delay-b1200b"></a>&#x2022; [`link_up_delay`](#delay-b1200b) - Optional Number<br>Milliseconds wait before link is declared up
188
+ #### Custom DNS
155
189
 
156
- <a id="bond-device-list-bond-devices-name"></a>&#x2022; [`name`](#bond-device-list-bond-devices-name) - Optional String<br>Name for the Bond. Ex 'bond0'
190
+ A [`custom_dns`](#custom-dns) block supports the following:
157
191
 
158
- #### Bond Device List Bond Devices Lacp
192
+ <a id="custom-dns-inside-nameserver"></a>&#x2022; [`inside_nameserver`](#custom-dns-inside-nameserver) - Optional String<br>Optional DNS server IP to be used for name resolution in inside network
159
193
 
160
- A [`lacp`](#bond-device-list-bond-devices-lacp) block (within [`bond_device_list.bond_devices`](#bond-device-list-bond-devices)) supports the following:
194
+ <a id="custom-dns-outside-nameserver"></a>&#x2022; [`outside_nameserver`](#custom-dns-outside-nameserver) - Optional String<br>Optional DNS server IP to be used for name resolution in outside network
161
195
 
162
- <a id="bond-device-list-bond-devices-lacp-rate"></a>&#x2022; [`rate`](#bond-device-list-bond-devices-lacp-rate) - Optional Number<br>Interval in seconds to transmit LACP packets
196
+ #### Ingress Egress Gw
163
197
 
164
- #### Coordinates
198
+ An [`ingress_egress_gw`](#ingress-egress-gw) block supports the following:
165
199
 
166
- A [`coordinates`](#coordinates) block supports the following:
200
+ <a id="policies-4e1d03"></a>&#x2022; [`active_enhanced_firewall_policies`](#policies-4e1d03) - Optional Block<br>List of Enhanced Firewall Policies These policies use session-based rules and provide all OPTIONS available under firewall policies with an additional option for service insertion<br>See [Active Enhanced Firewall Policies](#policies-4e1d03) below.
167
201
 
168
- <a id="coordinates-latitude"></a>&#x2022; [`latitude`](#coordinates-latitude) - Optional Number<br>Latitude. Latitude of the site location
202
+ <a id="policies-265acf"></a>&#x2022; [`active_forward_proxy_policies`](#policies-265acf) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Active Forward Proxy Policies](#policies-265acf) below.
169
203
 
170
- <a id="coordinates-longitude"></a>&#x2022; [`longitude`](#coordinates-longitude) - Optional Number<br>Longitude. Longitude of site location
204
+ <a id="policies-a2ee20"></a>&#x2022; [`active_network_policies`](#policies-a2ee20) - Optional Block<br>Active Firewall Policies Type. List of firewall policy views<br>See [Active Network Policies](#policies-a2ee20) below.
205
+
206
+ <a id="inside-vn-3ce96a"></a>&#x2022; [`dc_cluster_group_inside_vn`](#inside-vn-3ce96a) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Dc Cluster Group Inside Vn](#inside-vn-3ce96a) below.
207
+
208
+ <a id="outside-vn-3594d6"></a>&#x2022; [`dc_cluster_group_outside_vn`](#outside-vn-3594d6) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Dc Cluster Group Outside Vn](#outside-vn-3594d6) below.
209
+
210
+ <a id="all-8889af"></a>&#x2022; [`forward_proxy_allow_all`](#all-8889af) - Optional Block<br>Enable this option
211
+
212
+ <a id="ingress-egress-gw-gcp-certified-hw"></a>&#x2022; [`gcp_certified_hw`](#ingress-egress-gw-gcp-certified-hw) - Optional String<br>Name for GCP certified hardware
213
+
214
+ <a id="ingress-egress-gw-gcp-zone-names"></a>&#x2022; [`gcp_zone_names`](#ingress-egress-gw-gcp-zone-names) - Optional List<br>X-required List of zones when instances will be created, needs to match with region selected
215
+
216
+ <a id="ingress-egress-gw-global-network-list"></a>&#x2022; [`global_network_list`](#ingress-egress-gw-global-network-list) - Optional Block<br>Global Network Connection List. List of global network connections<br>See [Global Network List](#ingress-egress-gw-global-network-list) below.
217
+
218
+ <a id="ingress-egress-gw-inside-network"></a>&#x2022; [`inside_network`](#ingress-egress-gw-inside-network) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Inside Network](#ingress-egress-gw-inside-network) below.
219
+
220
+ <a id="ingress-egress-gw-inside-static-routes"></a>&#x2022; [`inside_static_routes`](#ingress-egress-gw-inside-static-routes) - Optional Block<br>Static Route List Type. List of static routes<br>See [Inside Static Routes](#ingress-egress-gw-inside-static-routes) below.
221
+
222
+ <a id="ingress-egress-gw-inside-subnet"></a>&#x2022; [`inside_subnet`](#ingress-egress-gw-inside-subnet) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Inside Subnet](#ingress-egress-gw-inside-subnet) below.
171
223
 
172
- #### Custom Network Config
224
+ <a id="ingress-egress-gw-no-dc-cluster-group"></a>&#x2022; [`no_dc_cluster_group`](#ingress-egress-gw-no-dc-cluster-group) - Optional Block<br>Enable this option
173
225
 
174
- A [`custom_network_config`](#custom-network-config) block supports the following:
226
+ <a id="ingress-egress-gw-no-forward-proxy"></a>&#x2022; [`no_forward_proxy`](#ingress-egress-gw-no-forward-proxy) - Optional Block<br>Enable this option
175
227
 
176
- <a id="policies-c4c984"></a>&#x2022; [`active_enhanced_firewall_policies`](#policies-c4c984) - Optional Block<br>List of Enhanced Firewall Policies These policies use session-based rules and provide all OPTIONS available under firewall policies with an additional option for service insertion<br>See [Active Enhanced Firewall Policies](#policies-c4c984) below.
228
+ <a id="ingress-egress-gw-no-global-network"></a>&#x2022; [`no_global_network`](#ingress-egress-gw-no-global-network) - Optional Block<br>Enable this option
177
229
 
178
- <a id="policies-fbbf75"></a>&#x2022; [`active_forward_proxy_policies`](#policies-fbbf75) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Active Forward Proxy Policies](#policies-fbbf75) below.
230
+ <a id="routes-b69a18"></a>&#x2022; [`no_inside_static_routes`](#routes-b69a18) - Optional Block<br>Enable this option
179
231
 
180
- <a id="policies-e8cb6b"></a>&#x2022; [`active_network_policies`](#policies-e8cb6b) - Optional Block<br>Active Firewall Policies Type. List of firewall policy views<br>See [Active Network Policies](#policies-e8cb6b) below.
232
+ <a id="ingress-egress-gw-no-network-policy"></a>&#x2022; [`no_network_policy`](#ingress-egress-gw-no-network-policy) - Optional Block<br>Enable this option
181
233
 
182
- <a id="custom-network-config-default-config"></a>&#x2022; [`default_config`](#custom-network-config-default-config) - Optional Block<br>Enable this option
234
+ <a id="routes-630976"></a>&#x2022; [`no_outside_static_routes`](#routes-630976) - Optional Block<br>Enable this option
183
235
 
184
- <a id="config-226341"></a>&#x2022; [`default_interface_config`](#config-226341) - Optional Block<br>Enable this option
236
+ <a id="ingress-egress-gw-node-number"></a>&#x2022; [`node_number`](#ingress-egress-gw-node-number) - Optional Number<br>Number of main nodes to create, either 1 or 3
185
237
 
186
- <a id="config-ac20e7"></a>&#x2022; [`default_sli_config`](#config-ac20e7) - Optional Block<br>Enable this option
238
+ <a id="ingress-egress-gw-outside-network"></a>&#x2022; [`outside_network`](#ingress-egress-gw-outside-network) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Outside Network](#ingress-egress-gw-outside-network) below.
187
239
 
188
- <a id="all-1d28e8"></a>&#x2022; [`forward_proxy_allow_all`](#all-1d28e8) - Optional Block<br>Enable this option
240
+ <a id="ingress-egress-gw-outside-static-routes"></a>&#x2022; [`outside_static_routes`](#ingress-egress-gw-outside-static-routes) - Optional Block<br>Static Route List Type. List of static routes<br>See [Outside Static Routes](#ingress-egress-gw-outside-static-routes) below.
189
241
 
190
- <a id="list-452116"></a>&#x2022; [`global_network_list`](#list-452116) - Optional Block<br>Global Network Connection List. List of global network connections<br>See [Global Network List](#list-452116) below.
242
+ <a id="ingress-egress-gw-outside-subnet"></a>&#x2022; [`outside_subnet`](#ingress-egress-gw-outside-subnet) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Outside Subnet](#ingress-egress-gw-outside-subnet) below.
191
243
 
192
- <a id="custom-network-config-interface-list"></a>&#x2022; [`interface_list`](#custom-network-config-interface-list) - Optional Block<br>Configure network interfaces for this Secure Mesh site<br>See [Interface List](#custom-network-config-interface-list) below.
244
+ <a id="mode-4d23c2"></a>&#x2022; [`performance_enhancement_mode`](#mode-4d23c2) - Optional Block<br>Optimize the site for L3 or L7 traffic processing. L7 optimized is the default<br>See [Performance Enhancement Mode](#mode-4d23c2) below.
193
245
 
194
- <a id="custom-network-config-no-forward-proxy"></a>&#x2022; [`no_forward_proxy`](#custom-network-config-no-forward-proxy) - Optional Block<br>Enable this option
246
+ <a id="public-ip-5f6604"></a>&#x2022; [`sm_connection_public_ip`](#public-ip-5f6604) - Optional Block<br>Enable this option
195
247
 
196
- <a id="custom-network-config-no-global-network"></a>&#x2022; [`no_global_network`](#custom-network-config-no-global-network) - Optional Block<br>Enable this option
248
+ <a id="ingress-egress-gw-sm-connection-pvt-ip"></a>&#x2022; [`sm_connection_pvt_ip`](#ingress-egress-gw-sm-connection-pvt-ip) - Optional Block<br>Enable this option
197
249
 
198
- <a id="custom-network-config-no-network-policy"></a>&#x2022; [`no_network_policy`](#custom-network-config-no-network-policy) - Optional Block<br>Enable this option
250
+ #### Ingress Egress Gw Active Enhanced Firewall Policies
199
251
 
200
- <a id="custom-network-config-sli-config"></a>&#x2022; [`sli_config`](#custom-network-config-sli-config) - Optional Block<br>Site Local Network Configuration. Site local network configuration<br>See [SLI Config](#custom-network-config-sli-config) below.
252
+ An [`active_enhanced_firewall_policies`](#policies-4e1d03) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
201
253
 
202
- <a id="custom-network-config-slo-config"></a>&#x2022; [`slo_config`](#custom-network-config-slo-config) - Optional Block<br>Site Local Network Configuration. Site local network configuration<br>See [Slo Config](#custom-network-config-slo-config) below.
254
+ <a id="policies-b74f29"></a>&#x2022; [`enhanced_firewall_policies`](#policies-b74f29) - Optional Block<br>Ordered List of Enhanced Firewall Policies active<br>See [Enhanced Firewall Policies](#policies-b74f29) below.
203
255
 
204
- <a id="public-ip-5fd49f"></a>&#x2022; [`sm_connection_public_ip`](#public-ip-5fd49f) - Optional Block<br>Enable this option
256
+ #### Ingress Egress Gw Active Enhanced Firewall Policies Enhanced Firewall Policies
205
257
 
206
- <a id="pvt-ip-892ce0"></a>&#x2022; [`sm_connection_pvt_ip`](#pvt-ip-892ce0) - Optional Block<br>Enable this option
258
+ <a id="deep-3cb2d1"></a>Deeply nested **Policies** block collapsed for readability.
207
259
 
208
- <a id="timeout-1607a1"></a>&#x2022; [`tunnel_dead_timeout`](#timeout-1607a1) - Optional Number<br>Time interval, in millisec, within which any IPsec / SSL connection from the site going down is detected. When not set (== 0), a default value of 10000 msec will be used
260
+ #### Ingress Egress Gw Active Forward Proxy Policies
209
261
 
210
- <a id="custom-network-config-vip-vrrp-mode"></a>&#x2022; [`vip_vrrp_mode`](#custom-network-config-vip-vrrp-mode) - Optional String Defaults to `VIP_VRRP_INVALID`<br>Possible values are `VIP_VRRP_INVALID`, `VIP_VRRP_ENABLE`, `VIP_VRRP_DISABLE`<br>[Enum: VIP_VRRP_INVALID|VIP_VRRP_ENABLE|VIP_VRRP_DISABLE] VRRP advertisement mode for VIP Invalid VRRP mode
262
+ An [`active_forward_proxy_policies`](#policies-265acf) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
211
263
 
212
- #### Custom Network Config Active Enhanced Firewall Policies
264
+ <a id="policies-ae49bd"></a>&#x2022; [`forward_proxy_policies`](#policies-ae49bd) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Forward Proxy Policies](#policies-ae49bd) below.
213
265
 
214
- An [`active_enhanced_firewall_policies`](#policies-c4c984) block (within [`custom_network_config`](#custom-network-config)) supports the following:
266
+ #### Ingress Egress Gw Active Forward Proxy Policies Forward Proxy Policies
215
267
 
216
- <a id="policies-d28848"></a>&#x2022; [`enhanced_firewall_policies`](#policies-d28848) - Optional Block<br>Ordered List of Enhanced Firewall Policies active<br>See [Enhanced Firewall Policies](#policies-d28848) below.
268
+ <a id="deep-54c023"></a>Deeply nested **Policies** block collapsed for readability.
217
269
 
218
- #### Custom Network Config Active Enhanced Firewall Policies Enhanced Firewall Policies
270
+ #### Ingress Egress Gw Active Network Policies
219
271
 
220
- <a id="deep-d2a5f1"></a>Deeply nested **Policies** block collapsed for readability.
272
+ An [`active_network_policies`](#policies-a2ee20) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
221
273
 
222
- #### Custom Network Config Active Forward Proxy Policies
274
+ <a id="policies-e07db8"></a>&#x2022; [`network_policies`](#policies-e07db8) - Optional Block<br>Ordered List of Firewall Policies active for this network firewall<br>See [Network Policies](#policies-e07db8) below.
223
275
 
224
- An [`active_forward_proxy_policies`](#policies-fbbf75) block (within [`custom_network_config`](#custom-network-config)) supports the following:
276
+ #### Ingress Egress Gw Active Network Policies Network Policies
225
277
 
226
- <a id="policies-3c82d8"></a>&#x2022; [`forward_proxy_policies`](#policies-3c82d8) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Forward Proxy Policies](#policies-3c82d8) below.
278
+ <a id="deep-18bd39"></a>Deeply nested **Policies** block collapsed for readability.
227
279
 
228
- #### Custom Network Config Active Forward Proxy Policies Forward Proxy Policies
280
+ #### Ingress Egress Gw Dc Cluster Group Inside Vn
229
281
 
230
- <a id="deep-2a9750"></a>Deeply nested **Policies** block collapsed for readability.
282
+ <a id="deep-23860c"></a>Deeply nested **Vn** block collapsed for readability.
231
283
 
232
- #### Custom Network Config Active Network Policies
284
+ #### Ingress Egress Gw Dc Cluster Group Outside Vn
233
285
 
234
- An [`active_network_policies`](#policies-e8cb6b) block (within [`custom_network_config`](#custom-network-config)) supports the following:
286
+ <a id="deep-53ac3b"></a>Deeply nested **Vn** block collapsed for readability.
235
287
 
236
- <a id="policies-461fea"></a>&#x2022; [`network_policies`](#policies-461fea) - Optional Block<br>Ordered List of Firewall Policies active for this network firewall<br>See [Network Policies](#policies-461fea) below.
288
+ #### Ingress Egress Gw Global Network List
237
289
 
238
- #### Custom Network Config Active Network Policies Network Policies
290
+ A [`global_network_list`](#ingress-egress-gw-global-network-list) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
239
291
 
240
- <a id="deep-6de48c"></a>Deeply nested **Policies** block collapsed for readability.
292
+ <a id="connections-bde45c"></a>&#x2022; [`global_network_connections`](#connections-bde45c) - Optional Block<br>Global network connections<br>See [Global Network Connections](#connections-bde45c) below.
241
293
 
242
- #### Custom Network Config Global Network List
294
+ #### Ingress Egress Gw Global Network List Global Network Connections
243
295
 
244
- A [`global_network_list`](#list-452116) block (within [`custom_network_config`](#custom-network-config)) supports the following:
296
+ <a id="deep-88f40a"></a>Deeply nested **Connections** block collapsed for readability.
245
297
 
246
- <a id="connections-1d58e6"></a>&#x2022; [`global_network_connections`](#connections-1d58e6) - Optional Block<br>Global network connections<br>See [Global Network Connections](#connections-1d58e6) below.
298
+ #### Ingress Egress Gw Global Network List Global Network Connections SLI To Global DR
247
299
 
248
- #### Custom Network Config Global Network List Global Network Connections
300
+ <a id="deep-c2be4c"></a>Deeply nested **DR** block collapsed for readability.
249
301
 
250
- <a id="deep-be6603"></a>Deeply nested **Connections** block collapsed for readability.
302
+ #### Ingress Egress Gw Global Network List Global Network Connections SLI To Global DR Global Vn
251
303
 
252
- #### Custom Network Config Global Network List Global Network Connections SLI To Global DR
304
+ <a id="deep-60d106"></a>Deeply nested **Vn** block collapsed for readability.
253
305
 
254
- <a id="deep-9b64ff"></a>Deeply nested **DR** block collapsed for readability.
306
+ #### Ingress Egress Gw Global Network List Global Network Connections Slo To Global DR
255
307
 
256
- #### Custom Network Config Global Network List Global Network Connections SLI To Global DR Global Vn
308
+ <a id="deep-c00d54"></a>Deeply nested **DR** block collapsed for readability.
257
309
 
258
- <a id="deep-811bd6"></a>Deeply nested **Vn** block collapsed for readability.
310
+ #### Ingress Egress Gw Global Network List Global Network Connections Slo To Global DR Global Vn
259
311
 
260
- #### Custom Network Config Global Network List Global Network Connections Slo To Global DR
312
+ <a id="deep-184e24"></a>Deeply nested **Vn** block collapsed for readability.
261
313
 
262
- <a id="deep-32aa3f"></a>Deeply nested **DR** block collapsed for readability.
314
+ #### Ingress Egress Gw Inside Network
263
315
 
264
- #### Custom Network Config Global Network List Global Network Connections Slo To Global DR Global Vn
316
+ An [`inside_network`](#ingress-egress-gw-inside-network) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
265
317
 
266
- <a id="deep-e7b054"></a>Deeply nested **Vn** block collapsed for readability.
318
+ <a id="network-9ee4a6"></a>&#x2022; [`existing_network`](#network-9ee4a6) - Optional Block<br>GCP existing VPC network Type. Name of existing VPC network<br>See [Existing Network](#network-9ee4a6) below.
267
319
 
268
- #### Custom Network Config Interface List
320
+ <a id="network-6793f9"></a>&#x2022; [`new_network`](#network-6793f9) - Optional Block<br>Parameters to create a new GCP VPC Network<br>See [New Network](#network-6793f9) below.
269
321
 
270
- An [`interface_list`](#custom-network-config-interface-list) block (within [`custom_network_config`](#custom-network-config)) supports the following:
322
+ <a id="autogenerate-1169b7"></a>&#x2022; [`new_network_autogenerate`](#autogenerate-1169b7) - Optional Block<br>Create a new GCP VPC Network with autogenerated name
271
323
 
272
- <a id="interfaces-e1b75d"></a>&#x2022; [`interfaces`](#interfaces-e1b75d) - Optional Block<br>Configure network interfaces for this Secure Mesh site<br>See [Interfaces](#interfaces-e1b75d) below.
324
+ #### Ingress Egress Gw Inside Network Existing Network
273
325
 
274
- #### Custom Network Config Interface List Interfaces
326
+ An [`existing_network`](#network-9ee4a6) block (within [`ingress_egress_gw.inside_network`](#ingress-egress-gw-inside-network)) supports the following:
275
327
 
276
- An [`interfaces`](#interfaces-e1b75d) block (within [`custom_network_config.interface_list`](#custom-network-config-interface-list)) supports the following:
328
+ <a id="name-27b371"></a>&#x2022; [`name`](#name-27b371) - Optional String<br>Name for your GCP VPC Network
277
329
 
278
- <a id="disabled-8e6c58"></a>&#x2022; [`dc_cluster_group_connectivity_interface_disabled`](#disabled-8e6c58) - Optional Block<br>Enable this option
330
+ #### Ingress Egress Gw Inside Network New Network
279
331
 
280
- <a id="enabled-976919"></a>&#x2022; [`dc_cluster_group_connectivity_interface_enabled`](#enabled-976919) - Optional Block<br>Enable this option
332
+ A [`new_network`](#network-6793f9) block (within [`ingress_egress_gw.inside_network`](#ingress-egress-gw-inside-network)) supports the following:
281
333
 
282
- <a id="interface-5e9f68"></a>&#x2022; [`dedicated_interface`](#interface-5e9f68) - Optional Block<br>Dedicated Interface. Dedicated Interface Configuration<br>See [Dedicated Interface](#interface-5e9f68) below.
334
+ <a id="name-10e7e2"></a>&#x2022; [`name`](#name-10e7e2) - Optional String<br>Name for your GCP VPC Network
283
335
 
284
- <a id="interface-a7c718"></a>&#x2022; [`dedicated_management_interface`](#interface-a7c718) - Optional Block<br>Dedicated Management Interface. Dedicated Interface Configuration<br>See [Dedicated Management Interface](#interface-a7c718) below.
336
+ #### Ingress Egress Gw Inside Static Routes
285
337
 
286
- <a id="spec-5c5d10"></a>&#x2022; [`description_spec`](#spec-5c5d10) - Optional String<br>Interface Description. Description for this Interface
338
+ An [`inside_static_routes`](#ingress-egress-gw-inside-static-routes) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
287
339
 
288
- <a id="interface-40e35f"></a>&#x2022; [`ethernet_interface`](#interface-40e35f) - Optional Block<br>Ethernet Interface. Ethernet Interface Configuration<br>See [Ethernet Interface](#interface-40e35f) below.
340
+ <a id="list-ed095e"></a>&#x2022; [`static_route_list`](#list-ed095e) - Optional Block<br>List of Static Routes. List of Static routes<br>See [Static Route List](#list-ed095e) below.
289
341
 
290
- <a id="labels-eb9e14"></a>&#x2022; [`labels`](#labels-eb9e14) - Optional Block<br>Add Labels for this Interface, these labels can be used in firewall policy
342
+ #### Ingress Egress Gw Inside Static Routes Static Route List
291
343
 
292
- #### Custom Network Config Interface List Interfaces Dedicated Interface
344
+ <a id="deep-922a6f"></a>Deeply nested **List** block collapsed for readability.
293
345
 
294
- <a id="deep-e9e120"></a>Deeply nested **Interface** block collapsed for readability.
346
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route
295
347
 
296
- #### Custom Network Config Interface List Interfaces Dedicated Management Interface
348
+ <a id="deep-3b67c8"></a>Deeply nested **Route** block collapsed for readability.
297
349
 
298
- <a id="deep-fe54f2"></a>Deeply nested **Interface** block collapsed for readability.
350
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Nexthop
299
351
 
300
- #### Custom Network Config Interface List Interfaces Ethernet Interface
352
+ <a id="deep-373011"></a>Deeply nested **Nexthop** block collapsed for readability.
301
353
 
302
- <a id="deep-155d07"></a>Deeply nested **Interface** block collapsed for readability.
354
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Nexthop Interface
303
355
 
304
- #### Custom Network Config Interface List Interfaces Ethernet Interface DHCP Server
356
+ <a id="deep-a58927"></a>Deeply nested **Interface** block collapsed for readability.
305
357
 
306
- <a id="deep-c00b69"></a>Deeply nested **Server** block collapsed for readability.
358
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address
307
359
 
308
- #### Custom Network Config Interface List Interfaces Ethernet Interface DHCP Server DHCP Networks
360
+ <a id="deep-6b64ce"></a>Deeply nested **Address** block collapsed for readability.
309
361
 
310
- <a id="deep-bf31a8"></a>Deeply nested **Networks** block collapsed for readability.
362
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address IPv4
311
363
 
312
- #### Custom Network Config Interface List Interfaces Ethernet Interface DHCP Server DHCP Networks Pools
364
+ <a id="deep-3b45f1"></a>Deeply nested **IPv4** block collapsed for readability.
313
365
 
314
- <a id="deep-904e69"></a>Deeply nested **Pools** block collapsed for readability.
366
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address IPv6
315
367
 
316
- #### Custom Network Config Interface List Interfaces Ethernet Interface DHCP Server Interface IP Map
368
+ <a id="deep-976e31"></a>Deeply nested **IPv6** block collapsed for readability.
317
369
 
318
- <a id="deep-ff4e59"></a>Deeply nested **Map** block collapsed for readability.
370
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Subnets
319
371
 
320
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config
372
+ <a id="deep-7e5beb"></a>Deeply nested **Subnets** block collapsed for readability.
321
373
 
322
- <a id="deep-606ad3"></a>Deeply nested **Config** block collapsed for readability.
374
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Subnets IPv4
323
375
 
324
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router
376
+ <a id="deep-4bd73c"></a>Deeply nested **IPv4** block collapsed for readability.
325
377
 
326
- <a id="deep-b3aca4"></a>Deeply nested **Router** block collapsed for readability.
378
+ #### Ingress Egress Gw Inside Static Routes Static Route List Custom Static Route Subnets IPv6
327
379
 
328
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router DNS Config
380
+ <a id="deep-5dec85"></a>Deeply nested **IPv6** block collapsed for readability.
329
381
 
330
- <a id="deep-305937"></a>Deeply nested **Config** block collapsed for readability.
382
+ #### Ingress Egress Gw Inside Subnet
331
383
 
332
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router DNS Config Configured List
384
+ An [`inside_subnet`](#ingress-egress-gw-inside-subnet) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
333
385
 
334
- <a id="deep-de36d1"></a>Deeply nested **List** block collapsed for readability.
386
+ <a id="subnet-d874b8"></a>&#x2022; [`existing_subnet`](#subnet-d874b8) - Optional Block<br>GCP existing subnet Type. Name of existing GCP subnet<br>See [Existing Subnet](#subnet-d874b8) below.
335
387
 
336
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router DNS Config Local DNS
388
+ <a id="subnet-b1adf6"></a>&#x2022; [`new_subnet`](#subnet-b1adf6) - Optional Block<br>GCP subnet parameters Type. Parameters for GCP subnet<br>See [New Subnet](#subnet-b1adf6) below.
337
389
 
338
- <a id="deep-33d01b"></a>Deeply nested **DNS** block collapsed for readability.
390
+ #### Ingress Egress Gw Inside Subnet Existing Subnet
339
391
 
340
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router Stateful
392
+ An [`existing_subnet`](#subnet-d874b8) block (within [`ingress_egress_gw.inside_subnet`](#ingress-egress-gw-inside-subnet)) supports the following:
341
393
 
342
- <a id="deep-52248e"></a>Deeply nested **Stateful** block collapsed for readability.
394
+ <a id="name-2f0d2c"></a>&#x2022; [`subnet_name`](#name-2f0d2c) - Optional String<br>Name of your subnet in VPC network
343
395
 
344
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router Stateful DHCP Networks
396
+ #### Ingress Egress Gw Inside Subnet New Subnet
345
397
 
346
- <a id="deep-e99cbf"></a>Deeply nested **Networks** block collapsed for readability.
398
+ A [`new_subnet`](#subnet-b1adf6) block (within [`ingress_egress_gw.inside_subnet`](#ingress-egress-gw-inside-subnet)) supports the following:
347
399
 
348
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router Stateful DHCP Networks Pools
400
+ <a id="ipv4-135b73"></a>&#x2022; [`primary_ipv4`](#ipv4-135b73) - Optional String<br>IPv4 prefix for this Subnet. It has to be private address space
349
401
 
350
- <a id="deep-fd529f"></a>Deeply nested **Pools** block collapsed for readability.
402
+ <a id="name-7a1f7c"></a>&#x2022; [`subnet_name`](#name-7a1f7c) - Optional String<br>Name of new VPC Subnet, will be autogenerated if empty
351
403
 
352
- #### Custom Network Config Interface List Interfaces Ethernet Interface IPv6 Auto Config Router Stateful Interface IP Map
404
+ #### Ingress Egress Gw Outside Network
353
405
 
354
- <a id="deep-15168d"></a>Deeply nested **Map** block collapsed for readability.
406
+ An [`outside_network`](#ingress-egress-gw-outside-network) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
355
407
 
356
- #### Custom Network Config Interface List Interfaces Ethernet Interface Static IP
408
+ <a id="network-7bcebe"></a>&#x2022; [`existing_network`](#network-7bcebe) - Optional Block<br>GCP existing VPC network Type. Name of existing VPC network<br>See [Existing Network](#network-7bcebe) below.
357
409
 
358
- <a id="deep-0f1737"></a>Deeply nested **IP** block collapsed for readability.
410
+ <a id="network-958024"></a>&#x2022; [`new_network`](#network-958024) - Optional Block<br>Parameters to create a new GCP VPC Network<br>See [New Network](#network-958024) below.
359
411
 
360
- #### Custom Network Config Interface List Interfaces Ethernet Interface Static IP Cluster Static IP
412
+ <a id="autogenerate-74de44"></a>&#x2022; [`new_network_autogenerate`](#autogenerate-74de44) - Optional Block<br>Create a new GCP VPC Network with autogenerated name
361
413
 
362
- <a id="deep-34de63"></a>Deeply nested **IP** block collapsed for readability.
414
+ #### Ingress Egress Gw Outside Network Existing Network
363
415
 
364
- #### Custom Network Config Interface List Interfaces Ethernet Interface Static IP Node Static IP
416
+ An [`existing_network`](#network-7bcebe) block (within [`ingress_egress_gw.outside_network`](#ingress-egress-gw-outside-network)) supports the following:
365
417
 
366
- <a id="deep-99b20e"></a>Deeply nested **IP** block collapsed for readability.
418
+ <a id="name-b3e497"></a>&#x2022; [`name`](#name-b3e497) - Optional String<br>Name for your GCP VPC Network
367
419
 
368
- #### Custom Network Config Interface List Interfaces Ethernet Interface Static IPv6 Address
420
+ #### Ingress Egress Gw Outside Network New Network
369
421
 
370
- <a id="deep-7525c4"></a>Deeply nested **Address** block collapsed for readability.
422
+ A [`new_network`](#network-958024) block (within [`ingress_egress_gw.outside_network`](#ingress-egress-gw-outside-network)) supports the following:
371
423
 
372
- #### Custom Network Config Interface List Interfaces Ethernet Interface Static IPv6 Address Cluster Static IP
424
+ <a id="name-732274"></a>&#x2022; [`name`](#name-732274) - Optional String<br>Name for your GCP VPC Network
373
425
 
374
- <a id="deep-fbb4ee"></a>Deeply nested **IP** block collapsed for readability.
426
+ #### Ingress Egress Gw Outside Static Routes
375
427
 
376
- #### Custom Network Config Interface List Interfaces Ethernet Interface Static IPv6 Address Node Static IP
428
+ An [`outside_static_routes`](#ingress-egress-gw-outside-static-routes) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
377
429
 
378
- <a id="deep-be6bf5"></a>Deeply nested **IP** block collapsed for readability.
430
+ <a id="list-445efb"></a>&#x2022; [`static_route_list`](#list-445efb) - Optional Block<br>List of Static Routes. List of Static routes<br>See [Static Route List](#list-445efb) below.
379
431
 
380
- #### Custom Network Config SLI Config
432
+ #### Ingress Egress Gw Outside Static Routes Static Route List
381
433
 
382
- A [`sli_config`](#custom-network-config-sli-config) block (within [`custom_network_config`](#custom-network-config)) supports the following:
434
+ <a id="deep-fdf27e"></a>Deeply nested **List** block collapsed for readability.
383
435
 
384
- <a id="group-c050c8"></a>&#x2022; [`dc_cluster_group`](#group-c050c8) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Dc Cluster Group](#group-c050c8) below.
436
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route
385
437
 
386
- <a id="custom-network-config-sli-config-labels"></a>&#x2022; [`labels`](#custom-network-config-sli-config-labels) - Optional Block<br>Add Labels for this network, these labels can be used in firewall policy
438
+ <a id="deep-025383"></a>Deeply nested **Route** block collapsed for readability.
387
439
 
388
- <a id="nameserver-b7700f"></a>&#x2022; [`nameserver`](#nameserver-b7700f) - Optional String<br>Optional DNS V4 server IP to be used for name resolution
440
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Nexthop
389
441
 
390
- <a id="group-4a0820"></a>&#x2022; [`no_dc_cluster_group`](#group-4a0820) - Optional Block<br>Enable this option
442
+ <a id="deep-390b03"></a>Deeply nested **Nexthop** block collapsed for readability.
391
443
 
392
- <a id="routes-ece448"></a>&#x2022; [`no_static_routes`](#routes-ece448) - Optional Block<br>Enable this option
444
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Nexthop Interface
393
445
 
394
- <a id="routes-ef5627"></a>&#x2022; [`no_v6_static_routes`](#routes-ef5627) - Optional Block<br>Enable this option
446
+ <a id="deep-214d2f"></a>Deeply nested **Interface** block collapsed for readability.
395
447
 
396
- <a id="routes-766a73"></a>&#x2022; [`static_routes`](#routes-766a73) - Optional Block<br>Static Routes List. List of static routes<br>See [Static Routes](#routes-766a73) below.
448
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address
397
449
 
398
- <a id="routes-3c3781"></a>&#x2022; [`static_v6_routes`](#routes-3c3781) - Optional Block<br>Static IPv6 Routes List. List of IPv6 static routes<br>See [Static V6 Routes](#routes-3c3781) below.
450
+ <a id="deep-f33e18"></a>Deeply nested **Address** block collapsed for readability.
399
451
 
400
- <a id="custom-network-config-sli-config-vip"></a>&#x2022; [`vip`](#custom-network-config-sli-config-vip) - Optional String<br>Optional common virtual V4 IP across all nodes to be used as automatic VIP
452
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address IPv4
401
453
 
402
- #### Custom Network Config SLI Config Dc Cluster Group
454
+ <a id="deep-f90bc5"></a>Deeply nested **IPv4** block collapsed for readability.
403
455
 
404
- <a id="deep-d8cb49"></a>Deeply nested **Group** block collapsed for readability.
456
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address IPv6
405
457
 
406
- #### Custom Network Config SLI Config Static Routes
458
+ <a id="deep-23b94d"></a>Deeply nested **IPv6** block collapsed for readability.
407
459
 
408
- A [`static_routes`](#routes-766a73) block (within [`custom_network_config.sli_config`](#custom-network-config-sli-config)) supports the following:
460
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Subnets
409
461
 
410
- <a id="routes-75c512"></a>&#x2022; [`static_routes`](#routes-75c512) - Optional Block<br>Static Routes. List of static routes<br>See [Static Routes](#routes-75c512) below.
462
+ <a id="deep-5d8217"></a>Deeply nested **Subnets** block collapsed for readability.
411
463
 
412
- #### Custom Network Config SLI Config Static Routes Static Routes
464
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Subnets IPv4
413
465
 
414
- <a id="deep-418fe7"></a>Deeply nested **Routes** block collapsed for readability.
466
+ <a id="deep-f9fb39"></a>Deeply nested **IPv4** block collapsed for readability.
415
467
 
416
- #### Custom Network Config SLI Config Static Routes Static Routes Node Interface
468
+ #### Ingress Egress Gw Outside Static Routes Static Route List Custom Static Route Subnets IPv6
417
469
 
418
- <a id="deep-845177"></a>Deeply nested **Interface** block collapsed for readability.
470
+ <a id="deep-21fa47"></a>Deeply nested **IPv6** block collapsed for readability.
419
471
 
420
- #### Custom Network Config SLI Config Static Routes Static Routes Node Interface List
472
+ #### Ingress Egress Gw Outside Subnet
421
473
 
422
- <a id="deep-346157"></a>Deeply nested **List** block collapsed for readability.
474
+ An [`outside_subnet`](#ingress-egress-gw-outside-subnet) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
423
475
 
424
- #### Custom Network Config SLI Config Static Routes Static Routes Node Interface List Interface
476
+ <a id="subnet-34a158"></a>&#x2022; [`existing_subnet`](#subnet-34a158) - Optional Block<br>GCP existing subnet Type. Name of existing GCP subnet<br>See [Existing Subnet](#subnet-34a158) below.
425
477
 
426
- <a id="deep-460da1"></a>Deeply nested **Interface** block collapsed for readability.
478
+ <a id="subnet-8ff867"></a>&#x2022; [`new_subnet`](#subnet-8ff867) - Optional Block<br>GCP subnet parameters Type. Parameters for GCP subnet<br>See [New Subnet](#subnet-8ff867) below.
427
479
 
428
- #### Custom Network Config SLI Config Static V6 Routes
480
+ #### Ingress Egress Gw Outside Subnet Existing Subnet
429
481
 
430
- <a id="deep-a62933"></a>Deeply nested **Routes** block collapsed for readability.
482
+ An [`existing_subnet`](#subnet-34a158) block (within [`ingress_egress_gw.outside_subnet`](#ingress-egress-gw-outside-subnet)) supports the following:
431
483
 
432
- #### Custom Network Config SLI Config Static V6 Routes Static Routes
484
+ <a id="name-091b0d"></a>&#x2022; [`subnet_name`](#name-091b0d) - Optional String<br>Name of your subnet in VPC network
433
485
 
434
- <a id="deep-b94fe3"></a>Deeply nested **Routes** block collapsed for readability.
486
+ #### Ingress Egress Gw Outside Subnet New Subnet
435
487
 
436
- #### Custom Network Config SLI Config Static V6 Routes Static Routes Node Interface
488
+ A [`new_subnet`](#subnet-8ff867) block (within [`ingress_egress_gw.outside_subnet`](#ingress-egress-gw-outside-subnet)) supports the following:
437
489
 
438
- <a id="deep-85506f"></a>Deeply nested **Interface** block collapsed for readability.
490
+ <a id="ipv4-91f9e5"></a>&#x2022; [`primary_ipv4`](#ipv4-91f9e5) - Optional String<br>IPv4 prefix for this Subnet. It has to be private address space
439
491
 
440
- #### Custom Network Config SLI Config Static V6 Routes Static Routes Node Interface List
492
+ <a id="name-aba138"></a>&#x2022; [`subnet_name`](#name-aba138) - Optional String<br>Name of new VPC Subnet, will be autogenerated if empty
441
493
 
442
- <a id="deep-0405fc"></a>Deeply nested **List** block collapsed for readability.
494
+ #### Ingress Egress Gw Performance Enhancement Mode
443
495
 
444
- #### Custom Network Config SLI Config Static V6 Routes Static Routes Node Interface List Interface
496
+ A [`performance_enhancement_mode`](#mode-4d23c2) block (within [`ingress_egress_gw`](#ingress-egress-gw)) supports the following:
445
497
 
446
- <a id="deep-48ce07"></a>Deeply nested **Interface** block collapsed for readability.
498
+ <a id="enhanced-410f18"></a>&#x2022; [`perf_mode_l3_enhanced`](#enhanced-410f18) - Optional Block<br>L3 Mode Enhanced Performance. L3 enhanced performance mode OPTIONS<br>See [Perf Mode L3 Enhanced](#enhanced-410f18) below.
447
499
 
448
- #### Custom Network Config Slo Config
500
+ <a id="enhanced-90e2b5"></a>&#x2022; [`perf_mode_l7_enhanced`](#enhanced-90e2b5) - Optional Block<br>Enable this option
449
501
 
450
- A [`slo_config`](#custom-network-config-slo-config) block (within [`custom_network_config`](#custom-network-config)) supports the following:
502
+ #### Ingress Egress Gw Performance Enhancement Mode Perf Mode L3 Enhanced
451
503
 
452
- <a id="group-4f2dd5"></a>&#x2022; [`dc_cluster_group`](#group-4f2dd5) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Dc Cluster Group](#group-4f2dd5) below.
504
+ <a id="deep-4a39a0"></a>Deeply nested **Enhanced** block collapsed for readability.
453
505
 
454
- <a id="custom-network-config-slo-config-labels"></a>&#x2022; [`labels`](#custom-network-config-slo-config-labels) - Optional Block<br>Add Labels for this network, these labels can be used in firewall policy
506
+ #### Ingress Gw
455
507
 
456
- <a id="nameserver-21f3ed"></a>&#x2022; [`nameserver`](#nameserver-21f3ed) - Optional String<br>Optional DNS V4 server IP to be used for name resolution
508
+ An [`ingress_gw`](#ingress-gw) block supports the following:
457
509
 
458
- <a id="group-babd4e"></a>&#x2022; [`no_dc_cluster_group`](#group-babd4e) - Optional Block<br>Enable this option
510
+ <a id="ingress-gw-gcp-certified-hw"></a>&#x2022; [`gcp_certified_hw`](#ingress-gw-gcp-certified-hw) - Optional String<br>Name for GCP certified hardware
459
511
 
460
- <a id="routes-9a2e74"></a>&#x2022; [`no_static_routes`](#routes-9a2e74) - Optional Block<br>Enable this option
512
+ <a id="ingress-gw-gcp-zone-names"></a>&#x2022; [`gcp_zone_names`](#ingress-gw-gcp-zone-names) - Optional List<br>X-required List of zones when instances will be created, needs to match with region selected
461
513
 
462
- <a id="routes-5253c9"></a>&#x2022; [`no_v6_static_routes`](#routes-5253c9) - Optional Block<br>Enable this option
514
+ <a id="ingress-gw-local-network"></a>&#x2022; [`local_network`](#ingress-gw-local-network) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Local Network](#ingress-gw-local-network) below.
463
515
 
464
- <a id="routes-f61105"></a>&#x2022; [`static_routes`](#routes-f61105) - Optional Block<br>Static Routes List. List of static routes<br>See [Static Routes](#routes-f61105) below.
516
+ <a id="ingress-gw-local-subnet"></a>&#x2022; [`local_subnet`](#ingress-gw-local-subnet) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Local Subnet](#ingress-gw-local-subnet) below.
465
517
 
466
- <a id="routes-c7512d"></a>&#x2022; [`static_v6_routes`](#routes-c7512d) - Optional Block<br>Static IPv6 Routes List. List of IPv6 static routes<br>See [Static V6 Routes](#routes-c7512d) below.
518
+ <a id="ingress-gw-node-number"></a>&#x2022; [`node_number`](#ingress-gw-node-number) - Optional Number<br>Number of main nodes to create, either 1 or 3
467
519
 
468
- <a id="custom-network-config-slo-config-vip"></a>&#x2022; [`vip`](#custom-network-config-slo-config-vip) - Optional String<br>Optional common virtual V4 IP across all nodes to be used as automatic VIP
520
+ <a id="ingress-gw-performance-enhancement-mode"></a>&#x2022; [`performance_enhancement_mode`](#ingress-gw-performance-enhancement-mode) - Optional Block<br>Optimize the site for L3 or L7 traffic processing. L7 optimized is the default<br>See [Performance Enhancement Mode](#ingress-gw-performance-enhancement-mode) below.
469
521
 
470
- #### Custom Network Config Slo Config Dc Cluster Group
522
+ #### Ingress Gw Local Network
471
523
 
472
- <a id="deep-e1ed68"></a>Deeply nested **Group** block collapsed for readability.
524
+ A [`local_network`](#ingress-gw-local-network) block (within [`ingress_gw`](#ingress-gw)) supports the following:
473
525
 
474
- #### Custom Network Config Slo Config Static Routes
526
+ <a id="network-16c1d3"></a>&#x2022; [`existing_network`](#network-16c1d3) - Optional Block<br>GCP existing VPC network Type. Name of existing VPC network<br>See [Existing Network](#network-16c1d3) below.
475
527
 
476
- A [`static_routes`](#routes-f61105) block (within [`custom_network_config.slo_config`](#custom-network-config-slo-config)) supports the following:
528
+ <a id="ingress-gw-local-network-new-network"></a>&#x2022; [`new_network`](#ingress-gw-local-network-new-network) - Optional Block<br>Parameters to create a new GCP VPC Network<br>See [New Network](#ingress-gw-local-network-new-network) below.
477
529
 
478
- <a id="routes-5ecd87"></a>&#x2022; [`static_routes`](#routes-5ecd87) - Optional Block<br>Static Routes. List of static routes<br>See [Static Routes](#routes-5ecd87) below.
530
+ <a id="autogenerate-3c23a7"></a>&#x2022; [`new_network_autogenerate`](#autogenerate-3c23a7) - Optional Block<br>Create a new GCP VPC Network with autogenerated name
479
531
 
480
- #### Custom Network Config Slo Config Static Routes Static Routes
532
+ #### Ingress Gw Local Network Existing Network
481
533
 
482
- <a id="deep-f8a4c7"></a>Deeply nested **Routes** block collapsed for readability.
534
+ An [`existing_network`](#network-16c1d3) block (within [`ingress_gw.local_network`](#ingress-gw-local-network)) supports the following:
483
535
 
484
- #### Custom Network Config Slo Config Static Routes Static Routes Node Interface
536
+ <a id="name-03ee92"></a>&#x2022; [`name`](#name-03ee92) - Optional String<br>Name for your GCP VPC Network
485
537
 
486
- <a id="deep-05f4a8"></a>Deeply nested **Interface** block collapsed for readability.
538
+ #### Ingress Gw Local Network New Network
487
539
 
488
- #### Custom Network Config Slo Config Static Routes Static Routes Node Interface List
540
+ A [`new_network`](#ingress-gw-local-network-new-network) block (within [`ingress_gw.local_network`](#ingress-gw-local-network)) supports the following:
489
541
 
490
- <a id="deep-2bd0bf"></a>Deeply nested **List** block collapsed for readability.
542
+ <a id="name-a157ec"></a>&#x2022; [`name`](#name-a157ec) - Optional String<br>Name for your GCP VPC Network
491
543
 
492
- #### Custom Network Config Slo Config Static Routes Static Routes Node Interface List Interface
544
+ #### Ingress Gw Local Subnet
493
545
 
494
- <a id="deep-e969af"></a>Deeply nested **Interface** block collapsed for readability.
546
+ A [`local_subnet`](#ingress-gw-local-subnet) block (within [`ingress_gw`](#ingress-gw)) supports the following:
495
547
 
496
- #### Custom Network Config Slo Config Static V6 Routes
548
+ <a id="ingress-gw-local-subnet-existing-subnet"></a>&#x2022; [`existing_subnet`](#ingress-gw-local-subnet-existing-subnet) - Optional Block<br>GCP existing subnet Type. Name of existing GCP subnet<br>See [Existing Subnet](#ingress-gw-local-subnet-existing-subnet) below.
497
549
 
498
- <a id="deep-b07bb8"></a>Deeply nested **Routes** block collapsed for readability.
550
+ <a id="ingress-gw-local-subnet-new-subnet"></a>&#x2022; [`new_subnet`](#ingress-gw-local-subnet-new-subnet) - Optional Block<br>GCP subnet parameters Type. Parameters for GCP subnet<br>See [New Subnet](#ingress-gw-local-subnet-new-subnet) below.
499
551
 
500
- #### Custom Network Config Slo Config Static V6 Routes Static Routes
552
+ #### Ingress Gw Local Subnet Existing Subnet
501
553
 
502
- <a id="deep-0e185b"></a>Deeply nested **Routes** block collapsed for readability.
554
+ An [`existing_subnet`](#ingress-gw-local-subnet-existing-subnet) block (within [`ingress_gw.local_subnet`](#ingress-gw-local-subnet)) supports the following:
503
555
 
504
- #### Custom Network Config Slo Config Static V6 Routes Static Routes Node Interface
556
+ <a id="name-a79c96"></a>&#x2022; [`subnet_name`](#name-a79c96) - Optional String<br>Name of your subnet in VPC network
505
557
 
506
- <a id="deep-e2b2f3"></a>Deeply nested **Interface** block collapsed for readability.
558
+ #### Ingress Gw Local Subnet New Subnet
507
559
 
508
- #### Custom Network Config Slo Config Static V6 Routes Static Routes Node Interface List
560
+ A [`new_subnet`](#ingress-gw-local-subnet-new-subnet) block (within [`ingress_gw.local_subnet`](#ingress-gw-local-subnet)) supports the following:
509
561
 
510
- <a id="deep-cac034"></a>Deeply nested **List** block collapsed for readability.
562
+ <a id="ipv4-a6bd10"></a>&#x2022; [`primary_ipv4`](#ipv4-a6bd10) - Optional String<br>IPv4 prefix for this Subnet. It has to be private address space
511
563
 
512
- #### Custom Network Config Slo Config Static V6 Routes Static Routes Node Interface List Interface
564
+ <a id="name-e9b491"></a>&#x2022; [`subnet_name`](#name-e9b491) - Optional String<br>Name of new VPC Subnet, will be autogenerated if empty
513
565
 
514
- <a id="deep-5ea460"></a>Deeply nested **Interface** block collapsed for readability.
566
+ #### Ingress Gw Performance Enhancement Mode
567
+
568
+ A [`performance_enhancement_mode`](#ingress-gw-performance-enhancement-mode) block (within [`ingress_gw`](#ingress-gw)) supports the following:
569
+
570
+ <a id="enhanced-5a06c8"></a>&#x2022; [`perf_mode_l3_enhanced`](#enhanced-5a06c8) - Optional Block<br>L3 Mode Enhanced Performance. L3 enhanced performance mode OPTIONS<br>See [Perf Mode L3 Enhanced](#enhanced-5a06c8) below.
571
+
572
+ <a id="enhanced-6fdd43"></a>&#x2022; [`perf_mode_l7_enhanced`](#enhanced-6fdd43) - Optional Block<br>Enable this option
573
+
574
+ #### Ingress Gw Performance Enhancement Mode Perf Mode L3 Enhanced
575
+
576
+ <a id="deep-690f7e"></a>Deeply nested **Enhanced** block collapsed for readability.
515
577
 
516
578
  #### Kubernetes Upgrade Drain
517
579
 
@@ -543,14 +605,6 @@ A [`log_receiver`](#log-receiver) block supports the following:
543
605
 
544
606
  <a id="log-receiver-tenant"></a>&#x2022; [`tenant`](#log-receiver-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
545
607
 
546
- #### Master Node Configuration
547
-
548
- A [`master_node_configuration`](#master-node-configuration) block supports the following:
549
-
550
- <a id="master-node-configuration-name"></a>&#x2022; [`name`](#master-node-configuration-name) - Optional String<br>Name. Names of master node
551
-
552
- <a id="master-node-configuration-public-ip"></a>&#x2022; [`public_ip`](#master-node-configuration-public-ip) - Optional String<br>IP Address of the master node. This IP will be used when other sites connect via Site Mesh Group
553
-
554
608
  #### Offline Survivability Mode
555
609
 
556
610
  An [`offline_survivability_mode`](#offline-survivability-mode) block supports the following:
@@ -567,21 +621,25 @@ An [`os`](#os) block supports the following:
567
621
 
568
622
  <a id="os-operating-system-version"></a>&#x2022; [`operating_system_version`](#os-operating-system-version) - Optional String<br>Specify a OS version to be used e.g. 9.2024.6
569
623
 
570
- #### Performance Enhancement Mode
624
+ #### Private Connectivity
625
+
626
+ A [`private_connectivity`](#private-connectivity) block supports the following:
627
+
628
+ <a id="private-connectivity-cloud-link"></a>&#x2022; [`cloud_link`](#private-connectivity-cloud-link) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Cloud Link](#private-connectivity-cloud-link) below.
571
629
 
572
- A [`performance_enhancement_mode`](#performance-enhancement-mode) block supports the following:
630
+ <a id="private-connectivity-inside"></a>&#x2022; [`inside`](#private-connectivity-inside) - Optional Block<br>Enable this option
573
631
 
574
- <a id="enhanced-31b8ac"></a>&#x2022; [`perf_mode_l3_enhanced`](#enhanced-31b8ac) - Optional Block<br>L3 Mode Enhanced Performance. L3 enhanced performance mode OPTIONS<br>See [Perf Mode L3 Enhanced](#enhanced-31b8ac) below.
632
+ <a id="private-connectivity-outside"></a>&#x2022; [`outside`](#private-connectivity-outside) - Optional Block<br>Enable this option
575
633
 
576
- <a id="enhanced-38f174"></a>&#x2022; [`perf_mode_l7_enhanced`](#enhanced-38f174) - Optional Block<br>Enable this option
634
+ #### Private Connectivity Cloud Link
577
635
 
578
- #### Performance Enhancement Mode Perf Mode L3 Enhanced
636
+ A [`cloud_link`](#private-connectivity-cloud-link) block (within [`private_connectivity`](#private-connectivity)) supports the following:
579
637
 
580
- A [`perf_mode_l3_enhanced`](#enhanced-31b8ac) block (within [`performance_enhancement_mode`](#performance-enhancement-mode)) supports the following:
638
+ <a id="private-connectivity-cloud-link-name"></a>&#x2022; [`name`](#private-connectivity-cloud-link-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
581
639
 
582
- <a id="jumbo-7ba5b8"></a>&#x2022; [`jumbo`](#jumbo-7ba5b8) - Optional Block<br>Enable this option
640
+ <a id="namespace-73cbe6"></a>&#x2022; [`namespace`](#namespace-73cbe6) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
583
641
 
584
- <a id="jumbo-95338e"></a>&#x2022; [`no_jumbo`](#jumbo-95338e) - Optional Block<br>Enable this option
642
+ <a id="private-connectivity-cloud-link-tenant"></a>&#x2022; [`tenant`](#private-connectivity-cloud-link-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
585
643
 
586
644
  #### Sw
587
645
 
@@ -603,6 +661,242 @@ A [`timeouts`](#timeouts) block supports the following:
603
661
 
604
662
  <a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
605
663
 
664
+ #### Voltstack Cluster
665
+
666
+ A [`voltstack_cluster`](#voltstack-cluster) block supports the following:
667
+
668
+ <a id="policies-a80edf"></a>&#x2022; [`active_enhanced_firewall_policies`](#policies-a80edf) - Optional Block<br>List of Enhanced Firewall Policies These policies use session-based rules and provide all OPTIONS available under firewall policies with an additional option for service insertion<br>See [Active Enhanced Firewall Policies](#policies-a80edf) below.
669
+
670
+ <a id="policies-91541d"></a>&#x2022; [`active_forward_proxy_policies`](#policies-91541d) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Active Forward Proxy Policies](#policies-91541d) below.
671
+
672
+ <a id="policies-704e06"></a>&#x2022; [`active_network_policies`](#policies-704e06) - Optional Block<br>Active Firewall Policies Type. List of firewall policy views<br>See [Active Network Policies](#policies-704e06) below.
673
+
674
+ <a id="voltstack-cluster-dc-cluster-group"></a>&#x2022; [`dc_cluster_group`](#voltstack-cluster-dc-cluster-group) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Dc Cluster Group](#voltstack-cluster-dc-cluster-group) below.
675
+
676
+ <a id="voltstack-cluster-default-storage"></a>&#x2022; [`default_storage`](#voltstack-cluster-default-storage) - Optional Block<br>Enable this option
677
+
678
+ <a id="all-48d905"></a>&#x2022; [`forward_proxy_allow_all`](#all-48d905) - Optional Block<br>Enable this option
679
+
680
+ <a id="voltstack-cluster-gcp-certified-hw"></a>&#x2022; [`gcp_certified_hw`](#voltstack-cluster-gcp-certified-hw) - Optional String<br>Name for GCP certified hardware
681
+
682
+ <a id="voltstack-cluster-gcp-zone-names"></a>&#x2022; [`gcp_zone_names`](#voltstack-cluster-gcp-zone-names) - Optional List<br>X-required List of zones when instances will be created, needs to match with region selected
683
+
684
+ <a id="voltstack-cluster-global-network-list"></a>&#x2022; [`global_network_list`](#voltstack-cluster-global-network-list) - Optional Block<br>Global Network Connection List. List of global network connections<br>See [Global Network List](#voltstack-cluster-global-network-list) below.
685
+
686
+ <a id="voltstack-cluster-k8s-cluster"></a>&#x2022; [`k8s_cluster`](#voltstack-cluster-k8s-cluster) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [K8S Cluster](#voltstack-cluster-k8s-cluster) below.
687
+
688
+ <a id="voltstack-cluster-no-dc-cluster-group"></a>&#x2022; [`no_dc_cluster_group`](#voltstack-cluster-no-dc-cluster-group) - Optional Block<br>Enable this option
689
+
690
+ <a id="voltstack-cluster-no-forward-proxy"></a>&#x2022; [`no_forward_proxy`](#voltstack-cluster-no-forward-proxy) - Optional Block<br>Enable this option
691
+
692
+ <a id="voltstack-cluster-no-global-network"></a>&#x2022; [`no_global_network`](#voltstack-cluster-no-global-network) - Optional Block<br>Enable this option
693
+
694
+ <a id="voltstack-cluster-no-k8s-cluster"></a>&#x2022; [`no_k8s_cluster`](#voltstack-cluster-no-k8s-cluster) - Optional Block<br>Enable this option
695
+
696
+ <a id="voltstack-cluster-no-network-policy"></a>&#x2022; [`no_network_policy`](#voltstack-cluster-no-network-policy) - Optional Block<br>Enable this option
697
+
698
+ <a id="routes-3cc7bc"></a>&#x2022; [`no_outside_static_routes`](#routes-3cc7bc) - Optional Block<br>Enable this option
699
+
700
+ <a id="voltstack-cluster-node-number"></a>&#x2022; [`node_number`](#voltstack-cluster-node-number) - Optional Number<br>Number of main nodes to create, either 1 or 3
701
+
702
+ <a id="voltstack-cluster-outside-static-routes"></a>&#x2022; [`outside_static_routes`](#voltstack-cluster-outside-static-routes) - Optional Block<br>Static Route List Type. List of static routes<br>See [Outside Static Routes](#voltstack-cluster-outside-static-routes) below.
703
+
704
+ <a id="voltstack-cluster-site-local-network"></a>&#x2022; [`site_local_network`](#voltstack-cluster-site-local-network) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Site Local Network](#voltstack-cluster-site-local-network) below.
705
+
706
+ <a id="voltstack-cluster-site-local-subnet"></a>&#x2022; [`site_local_subnet`](#voltstack-cluster-site-local-subnet) - Optional Block<br>Defines choice about GCP VPC network for a view<br>See [Site Local Subnet](#voltstack-cluster-site-local-subnet) below.
707
+
708
+ <a id="public-ip-8ed01a"></a>&#x2022; [`sm_connection_public_ip`](#public-ip-8ed01a) - Optional Block<br>Enable this option
709
+
710
+ <a id="voltstack-cluster-sm-connection-pvt-ip"></a>&#x2022; [`sm_connection_pvt_ip`](#voltstack-cluster-sm-connection-pvt-ip) - Optional Block<br>Enable this option
711
+
712
+ <a id="voltstack-cluster-storage-class-list"></a>&#x2022; [`storage_class_list`](#voltstack-cluster-storage-class-list) - Optional Block<br>Add additional custom storage classes in Kubernetes for this site<br>See [Storage Class List](#voltstack-cluster-storage-class-list) below.
713
+
714
+ #### Voltstack Cluster Active Enhanced Firewall Policies
715
+
716
+ An [`active_enhanced_firewall_policies`](#policies-a80edf) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
717
+
718
+ <a id="policies-49239d"></a>&#x2022; [`enhanced_firewall_policies`](#policies-49239d) - Optional Block<br>Ordered List of Enhanced Firewall Policies active<br>See [Enhanced Firewall Policies](#policies-49239d) below.
719
+
720
+ #### Voltstack Cluster Active Enhanced Firewall Policies Enhanced Firewall Policies
721
+
722
+ <a id="deep-bf6f5b"></a>Deeply nested **Policies** block collapsed for readability.
723
+
724
+ #### Voltstack Cluster Active Forward Proxy Policies
725
+
726
+ An [`active_forward_proxy_policies`](#policies-91541d) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
727
+
728
+ <a id="policies-e4aa24"></a>&#x2022; [`forward_proxy_policies`](#policies-e4aa24) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Forward Proxy Policies](#policies-e4aa24) below.
729
+
730
+ #### Voltstack Cluster Active Forward Proxy Policies Forward Proxy Policies
731
+
732
+ <a id="deep-73e925"></a>Deeply nested **Policies** block collapsed for readability.
733
+
734
+ #### Voltstack Cluster Active Network Policies
735
+
736
+ An [`active_network_policies`](#policies-704e06) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
737
+
738
+ <a id="policies-0d13f8"></a>&#x2022; [`network_policies`](#policies-0d13f8) - Optional Block<br>Ordered List of Firewall Policies active for this network firewall<br>See [Network Policies](#policies-0d13f8) below.
739
+
740
+ #### Voltstack Cluster Active Network Policies Network Policies
741
+
742
+ A [`network_policies`](#policies-0d13f8) block (within [`voltstack_cluster.active_network_policies`](#policies-704e06)) supports the following:
743
+
744
+ <a id="name-77e23a"></a>&#x2022; [`name`](#name-77e23a) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
745
+
746
+ <a id="namespace-a545c4"></a>&#x2022; [`namespace`](#namespace-a545c4) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
747
+
748
+ <a id="tenant-fa44e1"></a>&#x2022; [`tenant`](#tenant-fa44e1) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
749
+
750
+ #### Voltstack Cluster Dc Cluster Group
751
+
752
+ A [`dc_cluster_group`](#voltstack-cluster-dc-cluster-group) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
753
+
754
+ <a id="voltstack-cluster-dc-cluster-group-name"></a>&#x2022; [`name`](#voltstack-cluster-dc-cluster-group-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
755
+
756
+ <a id="namespace-e43a60"></a>&#x2022; [`namespace`](#namespace-e43a60) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
757
+
758
+ <a id="tenant-597aab"></a>&#x2022; [`tenant`](#tenant-597aab) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
759
+
760
+ #### Voltstack Cluster Global Network List
761
+
762
+ A [`global_network_list`](#voltstack-cluster-global-network-list) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
763
+
764
+ <a id="connections-8e8842"></a>&#x2022; [`global_network_connections`](#connections-8e8842) - Optional Block<br>Global network connections<br>See [Global Network Connections](#connections-8e8842) below.
765
+
766
+ #### Voltstack Cluster Global Network List Global Network Connections
767
+
768
+ <a id="deep-974094"></a>Deeply nested **Connections** block collapsed for readability.
769
+
770
+ #### Voltstack Cluster Global Network List Global Network Connections SLI To Global DR
771
+
772
+ <a id="deep-8abeaa"></a>Deeply nested **DR** block collapsed for readability.
773
+
774
+ #### Voltstack Cluster Global Network List Global Network Connections SLI To Global DR Global Vn
775
+
776
+ <a id="deep-44dfa7"></a>Deeply nested **Vn** block collapsed for readability.
777
+
778
+ #### Voltstack Cluster Global Network List Global Network Connections Slo To Global DR
779
+
780
+ <a id="deep-a8283c"></a>Deeply nested **DR** block collapsed for readability.
781
+
782
+ #### Voltstack Cluster Global Network List Global Network Connections Slo To Global DR Global Vn
783
+
784
+ <a id="deep-3168f1"></a>Deeply nested **Vn** block collapsed for readability.
785
+
786
+ #### Voltstack Cluster K8S Cluster
787
+
788
+ A [`k8s_cluster`](#voltstack-cluster-k8s-cluster) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
789
+
790
+ <a id="voltstack-cluster-k8s-cluster-name"></a>&#x2022; [`name`](#voltstack-cluster-k8s-cluster-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
791
+
792
+ <a id="voltstack-cluster-k8s-cluster-namespace"></a>&#x2022; [`namespace`](#voltstack-cluster-k8s-cluster-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
793
+
794
+ <a id="voltstack-cluster-k8s-cluster-tenant"></a>&#x2022; [`tenant`](#voltstack-cluster-k8s-cluster-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
795
+
796
+ #### Voltstack Cluster Outside Static Routes
797
+
798
+ An [`outside_static_routes`](#voltstack-cluster-outside-static-routes) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
799
+
800
+ <a id="list-72d88b"></a>&#x2022; [`static_route_list`](#list-72d88b) - Optional Block<br>List of Static Routes. List of Static routes<br>See [Static Route List](#list-72d88b) below.
801
+
802
+ #### Voltstack Cluster Outside Static Routes Static Route List
803
+
804
+ <a id="deep-8327ca"></a>Deeply nested **List** block collapsed for readability.
805
+
806
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route
807
+
808
+ <a id="deep-a60273"></a>Deeply nested **Route** block collapsed for readability.
809
+
810
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Nexthop
811
+
812
+ <a id="deep-9cbea6"></a>Deeply nested **Nexthop** block collapsed for readability.
813
+
814
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Nexthop Interface
815
+
816
+ <a id="deep-81201b"></a>Deeply nested **Interface** block collapsed for readability.
817
+
818
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address
819
+
820
+ <a id="deep-fe330c"></a>Deeply nested **Address** block collapsed for readability.
821
+
822
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address IPv4
823
+
824
+ <a id="deep-f7834a"></a>Deeply nested **IPv4** block collapsed for readability.
825
+
826
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Nexthop Nexthop Address IPv6
827
+
828
+ <a id="deep-0d1284"></a>Deeply nested **IPv6** block collapsed for readability.
829
+
830
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Subnets
831
+
832
+ <a id="deep-626be0"></a>Deeply nested **Subnets** block collapsed for readability.
833
+
834
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Subnets IPv4
835
+
836
+ <a id="deep-a073ef"></a>Deeply nested **IPv4** block collapsed for readability.
837
+
838
+ #### Voltstack Cluster Outside Static Routes Static Route List Custom Static Route Subnets IPv6
839
+
840
+ <a id="deep-85f420"></a>Deeply nested **IPv6** block collapsed for readability.
841
+
842
+ #### Voltstack Cluster Site Local Network
843
+
844
+ A [`site_local_network`](#voltstack-cluster-site-local-network) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
845
+
846
+ <a id="network-231a12"></a>&#x2022; [`existing_network`](#network-231a12) - Optional Block<br>GCP existing VPC network Type. Name of existing VPC network<br>See [Existing Network](#network-231a12) below.
847
+
848
+ <a id="network-c03c21"></a>&#x2022; [`new_network`](#network-c03c21) - Optional Block<br>Parameters to create a new GCP VPC Network<br>See [New Network](#network-c03c21) below.
849
+
850
+ <a id="autogenerate-cd8fd8"></a>&#x2022; [`new_network_autogenerate`](#autogenerate-cd8fd8) - Optional Block<br>Create a new GCP VPC Network with autogenerated name
851
+
852
+ #### Voltstack Cluster Site Local Network Existing Network
853
+
854
+ An [`existing_network`](#network-231a12) block (within [`voltstack_cluster.site_local_network`](#voltstack-cluster-site-local-network)) supports the following:
855
+
856
+ <a id="name-27b5d6"></a>&#x2022; [`name`](#name-27b5d6) - Optional String<br>Name for your GCP VPC Network
857
+
858
+ #### Voltstack Cluster Site Local Network New Network
859
+
860
+ A [`new_network`](#network-c03c21) block (within [`voltstack_cluster.site_local_network`](#voltstack-cluster-site-local-network)) supports the following:
861
+
862
+ <a id="name-52047a"></a>&#x2022; [`name`](#name-52047a) - Optional String<br>Name for your GCP VPC Network
863
+
864
+ #### Voltstack Cluster Site Local Subnet
865
+
866
+ A [`site_local_subnet`](#voltstack-cluster-site-local-subnet) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
867
+
868
+ <a id="subnet-73ee4c"></a>&#x2022; [`existing_subnet`](#subnet-73ee4c) - Optional Block<br>GCP existing subnet Type. Name of existing GCP subnet<br>See [Existing Subnet](#subnet-73ee4c) below.
869
+
870
+ <a id="subnet-52ff72"></a>&#x2022; [`new_subnet`](#subnet-52ff72) - Optional Block<br>GCP subnet parameters Type. Parameters for GCP subnet<br>See [New Subnet](#subnet-52ff72) below.
871
+
872
+ #### Voltstack Cluster Site Local Subnet Existing Subnet
873
+
874
+ An [`existing_subnet`](#subnet-73ee4c) block (within [`voltstack_cluster.site_local_subnet`](#voltstack-cluster-site-local-subnet)) supports the following:
875
+
876
+ <a id="name-c7b494"></a>&#x2022; [`subnet_name`](#name-c7b494) - Optional String<br>Name of your subnet in VPC network
877
+
878
+ #### Voltstack Cluster Site Local Subnet New Subnet
879
+
880
+ A [`new_subnet`](#subnet-52ff72) block (within [`voltstack_cluster.site_local_subnet`](#voltstack-cluster-site-local-subnet)) supports the following:
881
+
882
+ <a id="ipv4-ac69f3"></a>&#x2022; [`primary_ipv4`](#ipv4-ac69f3) - Optional String<br>IPv4 prefix for this Subnet. It has to be private address space
883
+
884
+ <a id="name-8b6d0c"></a>&#x2022; [`subnet_name`](#name-8b6d0c) - Optional String<br>Name of new VPC Subnet, will be autogenerated if empty
885
+
886
+ #### Voltstack Cluster Storage Class List
887
+
888
+ A [`storage_class_list`](#voltstack-cluster-storage-class-list) block (within [`voltstack_cluster`](#voltstack-cluster)) supports the following:
889
+
890
+ <a id="classes-3dd6e4"></a>&#x2022; [`storage_classes`](#classes-3dd6e4) - Optional Block<br>List of Storage Classes. List of custom storage classes<br>See [Storage Classes](#classes-3dd6e4) below.
891
+
892
+ #### Voltstack Cluster Storage Class List Storage Classes
893
+
894
+ A [`storage_classes`](#classes-3dd6e4) block (within [`voltstack_cluster.storage_class_list`](#voltstack-cluster-storage-class-list)) supports the following:
895
+
896
+ <a id="class-f2125d"></a>&#x2022; [`default_storage_class`](#class-f2125d) - Optional Bool<br>Make this storage class default storage class for the K8S cluster
897
+
898
+ <a id="name-ca3ca7"></a>&#x2022; [`storage_class_name`](#name-ca3ca7) - Optional String<br>Name of the storage class as it will appear in K8S
899
+
606
900
  ---
607
901
 
608
902
  ## Common Types