@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (110) hide show
  1. package/dist/docs/data-sources/bgp.md +2 -2
  2. package/dist/docs/data-sources/discovery.md +2 -2
  3. package/dist/docs/data-sources/fast_acl.md +2 -2
  4. package/dist/docs/data-sources/fast_acl_rule.md +2 -2
  5. package/dist/docs/data-sources/irule.md +2 -2
  6. package/dist/docs/data-sources/log_receiver.md +2 -2
  7. package/dist/docs/data-sources/network_policy.md +2 -2
  8. package/dist/docs/data-sources/route.md +2 -2
  9. package/dist/docs/data-sources/site.md +2 -2
  10. package/dist/docs/resources/address_allocator.md +7 -7
  11. package/dist/docs/resources/advertise_policy.md +57 -57
  12. package/dist/docs/resources/alert_policy.md +40 -40
  13. package/dist/docs/resources/alert_receiver.md +57 -57
  14. package/dist/docs/resources/api_crawler.md +13 -13
  15. package/dist/docs/resources/api_definition.md +11 -11
  16. package/dist/docs/resources/api_discovery.md +4 -4
  17. package/dist/docs/resources/api_testing.md +27 -27
  18. package/dist/docs/resources/apm.md +40 -40
  19. package/dist/docs/resources/app_api_group.md +20 -20
  20. package/dist/docs/resources/app_firewall.md +50 -50
  21. package/dist/docs/resources/app_setting.md +19 -19
  22. package/dist/docs/resources/app_type.md +7 -7
  23. package/dist/docs/resources/authentication.md +29 -29
  24. package/dist/docs/resources/aws_tgw_site.md +140 -140
  25. package/dist/docs/resources/aws_vpc_site.md +174 -174
  26. package/dist/docs/resources/azure_vnet_site.md +245 -245
  27. package/dist/docs/resources/bgp.md +37 -205
  28. package/dist/docs/resources/bgp_asn_set.md +1 -1
  29. package/dist/docs/resources/bgp_routing_policy.md +19 -19
  30. package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
  31. package/dist/docs/resources/cdn_cache_rule.md +5 -5
  32. package/dist/docs/resources/cdn_loadbalancer.md +418 -418
  33. package/dist/docs/resources/certificate.md +1 -1
  34. package/dist/docs/resources/certificate_chain.md +1 -1
  35. package/dist/docs/resources/cloud_connect.md +28 -28
  36. package/dist/docs/resources/cloud_credentials.md +35 -35
  37. package/dist/docs/resources/cloud_elastic_ip.md +8 -8
  38. package/dist/docs/resources/cloud_link.md +36 -36
  39. package/dist/docs/resources/cluster.md +86 -86
  40. package/dist/docs/resources/cminstance.md +22 -22
  41. package/dist/docs/resources/code_base_integration.md +24 -24
  42. package/dist/docs/resources/container_registry.md +13 -13
  43. package/dist/docs/resources/crl.md +1 -1
  44. package/dist/docs/resources/data_type.md +16 -16
  45. package/dist/docs/resources/dc_cluster_group.md +4 -4
  46. package/dist/docs/resources/discovery.md +8 -259
  47. package/dist/docs/resources/dns_compliance_checks.md +1 -1
  48. package/dist/docs/resources/dns_domain.md +3 -3
  49. package/dist/docs/resources/endpoint.md +44 -44
  50. package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
  51. package/dist/docs/resources/external_connector.md +42 -42
  52. package/dist/docs/resources/fast_acl.md +60 -166
  53. package/dist/docs/resources/fast_acl_rule.md +28 -28
  54. package/dist/docs/resources/filter_set.md +10 -10
  55. package/dist/docs/resources/fleet.md +160 -160
  56. package/dist/docs/resources/forward_proxy_policy.md +82 -82
  57. package/dist/docs/resources/forwarding_class.md +14 -14
  58. package/dist/docs/resources/gcp_vpc_site.md +152 -152
  59. package/dist/docs/resources/global_log_receiver.md +238 -238
  60. package/dist/docs/resources/healthcheck.md +17 -17
  61. package/dist/docs/resources/http_loadbalancer.md +1003 -1003
  62. package/dist/docs/resources/irule.md +5 -7
  63. package/dist/docs/resources/log_receiver.md +825 -44
  64. package/dist/docs/resources/malicious_user_mitigation.md +10 -10
  65. package/dist/docs/resources/nat_policy.md +86 -86
  66. package/dist/docs/resources/network_connector.md +31 -31
  67. package/dist/docs/resources/network_firewall.md +22 -22
  68. package/dist/docs/resources/network_interface.md +77 -77
  69. package/dist/docs/resources/network_policy.md +38 -217
  70. package/dist/docs/resources/network_policy_rule.md +21 -21
  71. package/dist/docs/resources/network_policy_view.md +65 -65
  72. package/dist/docs/resources/nfv_service.md +76 -76
  73. package/dist/docs/resources/nginx_service_discovery.md +10 -10
  74. package/dist/docs/resources/origin_pool.md +166 -166
  75. package/dist/docs/resources/policer.md +4 -4
  76. package/dist/docs/resources/policy_based_routing.md +28 -28
  77. package/dist/docs/resources/protocol_inspection.md +12 -12
  78. package/dist/docs/resources/protocol_policer.md +14 -14
  79. package/dist/docs/resources/proxy.md +111 -111
  80. package/dist/docs/resources/rate_limiter.md +15 -15
  81. package/dist/docs/resources/rate_limiter_policy.md +56 -56
  82. package/dist/docs/resources/route.md +183 -183
  83. package/dist/docs/resources/secret_management_access.md +68 -68
  84. package/dist/docs/resources/securemesh_site.md +1619 -258
  85. package/dist/docs/resources/segment.md +4 -4
  86. package/dist/docs/resources/sensitive_data_policy.md +9 -9
  87. package/dist/docs/resources/service_policy.md +175 -175
  88. package/dist/docs/resources/service_policy_rule.md +142 -142
  89. package/dist/docs/resources/site.md +381 -303
  90. package/dist/docs/resources/site_mesh_group.md +18 -18
  91. package/dist/docs/resources/subnet.md +17 -17
  92. package/dist/docs/resources/tcp_loadbalancer.md +130 -130
  93. package/dist/docs/resources/tenant_configuration.md +10 -10
  94. package/dist/docs/resources/trusted_ca_list.md +1 -1
  95. package/dist/docs/resources/tunnel.md +36 -36
  96. package/dist/docs/resources/udp_loadbalancer.md +59 -59
  97. package/dist/docs/resources/usb_policy.md +6 -6
  98. package/dist/docs/resources/user_identification.md +16 -16
  99. package/dist/docs/resources/virtual_host.md +225 -225
  100. package/dist/docs/resources/virtual_network.md +14 -14
  101. package/dist/docs/resources/virtual_site.md +3 -3
  102. package/dist/docs/resources/voltstack_site.md +141 -141
  103. package/dist/docs/resources/waf_exclusion_policy.md +17 -17
  104. package/dist/docs/resources/workload.md +327 -327
  105. package/dist/docs/resources/workload_flavor.md +3 -3
  106. package/dist/metadata/resource-metadata.json +1484 -942
  107. package/dist/types.d.ts +11 -0
  108. package/dist/types.d.ts.map +1 -1
  109. package/dist/types.js.map +1 -1
  110. package/package.json +1 -1
@@ -32,15 +32,15 @@ resource "f5xc_endpoint" "example" {
32
32
  }
33
33
 
34
34
  # Resource-specific configuration
35
- # DNS Name Advanced Type. Specifies name and TTL used for D...
35
+ # Specifies name and TTL used for DNS resolution.
36
36
  dns_name_advanced {
37
37
  # Configure dns_name_advanced settings
38
38
  }
39
- # Service Info Type. Specifies whether endpoint service is ...
39
+ # Specifies whether endpoint service is discovered by name ...
40
40
  service_info {
41
41
  # Configure service_info settings
42
42
  }
43
- # Label Selector. This type can be used to establish a 'sel...
43
+ # Type can be used to establish a 'selector reference' from...
44
44
  service_selector {
45
45
  # Configure service_selector settings
46
46
  }
@@ -67,14 +67,14 @@ resource "f5xc_endpoint" "example" {
67
67
  ### Spec Argument Reference
68
68
 
69
69
  -> **One of the following:**
70
- &#x2022; <a id="dns-name"></a>[`dns_name`](#dns-name) - Optional String<br>Endpoint Name. Endpoint's IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
71
- <br><br>&#x2022; <a id="dns-name-advanced"></a>[`dns_name_advanced`](#dns-name-advanced) - Optional Block<br>DNS Name Advanced Type. Specifies name and TTL used for DNS resolution<br>See [DNS Name Advanced](#dns-name-advanced) below for details.
72
- <br><br>&#x2022; <a id="ip"></a>[`ip`](#ip) - Optional String<br>Endpoint IP Address. Endpoint is reachable at the given IPv4/IPv6 address
73
- <br><br>&#x2022; <a id="service-info"></a>[`service_info`](#service-info) - Optional Block<br>Service Info Type. Specifies whether endpoint service is discovered by name or labels<br>See [Service Info](#service-info) below for details.
70
+ &#x2022; <a id="dns-name"></a>[`dns_name`](#dns-name) - Optional String<br>Endpoint's IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
71
+ <br><br>&#x2022; <a id="dns-name-advanced"></a>[`dns_name_advanced`](#dns-name-advanced) - Optional Block<br>Specifies name and TTL used for DNS resolution<br>See [DNS Name Advanced](#dns-name-advanced) below for details.
72
+ <br><br>&#x2022; <a id="ip"></a>[`ip`](#ip) - Optional String<br>Endpoint is reachable at the given IPv4/IPv6 address
73
+ <br><br>&#x2022; <a id="service-info"></a>[`service_info`](#service-info) - Optional Block<br>Specifies whether endpoint service is discovered by name or labels<br>See [Service Info](#service-info) below for details.
74
74
 
75
- <a id="health-check-port"></a>&#x2022; [`health_check_port`](#health-check-port) - Optional Number<br>Port used for health check. By default the health check port of an endpoint is the same as the endpoint’s port. This option provides an alternative health check port. Setting this with a non-zero value allows an endpoint to have different health check port
75
+ <a id="health-check-port"></a>&#x2022; [`health_check_port`](#health-check-port) - Optional Number<br>By default the health check port of an endpoint is the same as the endpoint’s port. This option provides an alternative health check port. Setting this with a non-zero value allows an endpoint to have different health check port
76
76
 
77
- <a id="port"></a>&#x2022; [`port`](#port) - Optional Number<br>Port. Endpoint service is available on this port
77
+ <a id="port"></a>&#x2022; [`port`](#port) - Optional Number<br>Endpoint service is available on this port
78
78
 
79
79
  <a id="protocol"></a>&#x2022; [`protocol`](#protocol) - Optional String<br>Protocol. Endpoint protocol. Default is TCP. Both TCP and UDP protocols are supported
80
80
 
@@ -82,7 +82,7 @@ resource "f5xc_endpoint" "example" {
82
82
 
83
83
  <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
84
84
 
85
- <a id="where"></a>&#x2022; [`where`](#where) - Optional Block<br>Network or Site Reference. NetworkSiteRefSelector defines a union of reference to site or reference to virtual_network or reference to virtual_site It is used to determine virtual network using following rules \* Direct reference to virtual_network object \* Site local network when refering to site object \* All site local networks for sites selected by refering to virtual_site object<br>See [Where](#where) below for details.
85
+ <a id="where"></a>&#x2022; [`where`](#where) - Optional Block<br>NetworkSiteRefSelector defines a union of reference to site or reference to virtual_network or reference to virtual_site It is used to determine virtual network using following rules \* Direct reference to virtual_network object \* Site local network when refering to site object \* All site local<br>See [Where](#where) below for details.
86
86
 
87
87
  ### Attributes Reference
88
88
 
@@ -96,39 +96,39 @@ In addition to all arguments above, the following attributes are exported:
96
96
 
97
97
  A [`dns_name_advanced`](#dns-name-advanced) block supports the following:
98
98
 
99
- <a id="dns-name-advanced-name"></a>&#x2022; [`name`](#dns-name-advanced-name) - Optional String<br>Endpoint DNS Name. Endpoint's IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
99
+ <a id="dns-name-advanced-name"></a>&#x2022; [`name`](#dns-name-advanced-name) - Optional String<br>Endpoint's IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
100
100
 
101
- <a id="dns-name-advanced-refresh-interval"></a>&#x2022; [`refresh_interval`](#dns-name-advanced-refresh-interval) - Optional Number<br>DNS Refresh Interval. Interval for DNS refresh in seconds
101
+ <a id="dns-name-advanced-refresh-interval"></a>&#x2022; [`refresh_interval`](#dns-name-advanced-refresh-interval) - Optional Number<br>Interval for DNS refresh in seconds
102
102
 
103
103
  #### Service Info
104
104
 
105
105
  A [`service_info`](#service-info) block supports the following:
106
106
 
107
- <a id="service-info-discovery-type"></a>&#x2022; [`discovery_type`](#service-info-discovery-type) - Optional String Defaults to `INVALID_DISCOVERY`<br>Possible values are `INVALID_DISCOVERY`, `K8S`, `CONSUL`, `CLASSIC_BIGIP`, `THIRD_PARTY`<br>[Enum: INVALID_DISCOVERY|K8S|CONSUL|CLASSIC_BIGIP|THIRD_PARTY] Discovery Type. Specifies whether the discovery is from Kubernetes or Consul cluster Invalid Discovery mechanism Discover from Kubernetes cluster Discover from Consul service Discover from Classic BIG-IP Clusters Discover for Third Party Application
107
+ <a id="service-info-discovery-type"></a>&#x2022; [`discovery_type`](#service-info-discovery-type) - Optional String Defaults to `INVALID_DISCOVERY`<br>Possible values are `INVALID_DISCOVERY`, `K8S`, `CONSUL`, `CLASSIC_BIGIP`, `THIRD_PARTY`<br>[Enum: INVALID_DISCOVERY|K8S|CONSUL|CLASSIC_BIGIP|THIRD_PARTY] Specifies whether the discovery is from Kubernetes or Consul cluster Invalid Discovery mechanism Discover from Kubernetes cluster Discover from Consul service Discover from Classic BIG-IP Clusters Discover for Third Party Application
108
108
 
109
- <a id="service-info-service-name"></a>&#x2022; [`service_name`](#service-info-service-name) - Optional String<br>Service Name. Name of the service to discover with an optional namespace and cluster identifier. The format is service_name.namespace_name:cluster_identifier for K8S and service_name:cluster_identifier for Consul Endpoint will be discovered in all discovery objects where the cluster identifier matches. If cluster identifier is not specified then discovery will be done in all discovery objects of the site
109
+ <a id="service-info-service-name"></a>&#x2022; [`service_name`](#service-info-service-name) - Optional String<br>Name of the service to discover with an optional namespace and cluster identifier. The format is service_name.namespace_name:cluster_identifier for K8S and service_name:cluster_identifier for Consul Endpoint will be discovered in all discovery objects where the
110
110
 
111
- <a id="service-info-service-selector"></a>&#x2022; [`service_selector`](#service-info-service-selector) - Optional Block<br>Label Selector. This type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects. A null label selector matches no objects. Label selector is immutable. Expressions is a list of strings of label selection expression. Each string has ',' separated values which are 'AND' and all strings are logically 'OR'. BNF for expression string `<selector-syntax>` ::= `<requirement>` | `<requirement>` ',' `<selector-syntax>` `<requirement>` ::= [!] KEY [ `<set-based-restriction>` | `<exact-match-restriction>` ] `<set-based-restriction>` ::= '' | `<inclusion-exclusion>` `<value-set>` `<inclusion-exclusion>` ::= `<inclusion>` | `<exclusion>` `<exclusion>` ::= 'notin' `<inclusion>` ::= 'in' `<value-set>` ::= '(' `<values>` ')' `<values>` ::= VALUE | VALUE ',' `<values>` `<exact-match-restriction>` ::= ['='|'=='|'!='] VALUE<br>See [Service Selector](#service-info-service-selector) below.
111
+ <a id="service-info-service-selector"></a>&#x2022; [`service_selector`](#service-info-service-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Service Selector](#service-info-service-selector) below.
112
112
 
113
113
  #### Service Info Service Selector
114
114
 
115
115
  A [`service_selector`](#service-info-service-selector) block (within [`service_info`](#service-info)) supports the following:
116
116
 
117
- <a id="expressions-954c46"></a>&#x2022; [`expressions`](#expressions-954c46) - Optional List<br>Selector Expression. Expressions contains the Kubernetes style label expression for selections
117
+ <a id="expressions-954c46"></a>&#x2022; [`expressions`](#expressions-954c46) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
118
118
 
119
119
  #### Snat Pool
120
120
 
121
121
  A [`snat_pool`](#snat-pool) block supports the following:
122
122
 
123
- <a id="snat-pool-no-snat-pool"></a>&#x2022; [`no_snat_pool`](#snat-pool-no-snat-pool) - Optional Block<br>Enable this option
123
+ <a id="snat-pool-no-snat-pool"></a>&#x2022; [`no_snat_pool`](#snat-pool-no-snat-pool) - Optional Block<br>Can be used for messages where no values are needed
124
124
 
125
- <a id="snat-pool-snat-pool"></a>&#x2022; [`snat_pool`](#snat-pool-snat-pool) - Optional Block<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#snat-pool-snat-pool) below.
125
+ <a id="snat-pool-snat-pool"></a>&#x2022; [`snat_pool`](#snat-pool-snat-pool) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#snat-pool-snat-pool) below.
126
126
 
127
127
  #### Snat Pool Snat Pool
128
128
 
129
129
  A [`snat_pool`](#snat-pool-snat-pool) block (within [`snat_pool`](#snat-pool)) supports the following:
130
130
 
131
- <a id="snat-pool-snat-pool-prefixes"></a>&#x2022; [`prefixes`](#snat-pool-snat-pool-prefixes) - Optional List<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint
131
+ <a id="snat-pool-snat-pool-prefixes"></a>&#x2022; [`prefixes`](#snat-pool-snat-pool-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
132
132
 
133
133
  #### Timeouts
134
134
 
@@ -146,9 +146,9 @@ A [`timeouts`](#timeouts) block supports the following:
146
146
 
147
147
  A [`where`](#where) block supports the following:
148
148
 
149
- <a id="where-site"></a>&#x2022; [`site`](#where-site) - Optional Block<br>Site Reference. This specifies a direct reference to a site configuration object<br>See [Site](#where-site) below.
149
+ <a id="where-site"></a>&#x2022; [`site`](#where-site) - Optional Block<br>Specifies a direct reference to a site configuration object<br>See [Site](#where-site) below.
150
150
 
151
- <a id="where-virtual-network"></a>&#x2022; [`virtual_network`](#where-virtual-network) - Optional Block<br>Network Reference. This specifies a direct reference to a network configuration object<br>See [Virtual Network](#where-virtual-network) below.
151
+ <a id="where-virtual-network"></a>&#x2022; [`virtual_network`](#where-virtual-network) - Optional Block<br>Specifies a direct reference to a network configuration object<br>See [Virtual Network](#where-virtual-network) below.
152
152
 
153
153
  <a id="where-virtual-site"></a>&#x2022; [`virtual_site`](#where-virtual-site) - Optional Block<br>Virtual Site. A reference to virtual_site object<br>See [Virtual Site](#where-virtual-site) below.
154
154
 
@@ -156,11 +156,11 @@ A [`where`](#where) block supports the following:
156
156
 
157
157
  A [`site`](#where-site) block (within [`where`](#where)) supports the following:
158
158
 
159
- <a id="where-site-disable-internet-vip"></a>&#x2022; [`disable_internet_vip`](#where-site-disable-internet-vip) - Optional Block<br>Enable this option
159
+ <a id="where-site-disable-internet-vip"></a>&#x2022; [`disable_internet_vip`](#where-site-disable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
160
160
 
161
- <a id="where-site-enable-internet-vip"></a>&#x2022; [`enable_internet_vip`](#where-site-enable-internet-vip) - Optional Block<br>Enable this option
161
+ <a id="where-site-enable-internet-vip"></a>&#x2022; [`enable_internet_vip`](#where-site-enable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
162
162
 
163
- <a id="where-site-network-type"></a>&#x2022; [`network_type`](#where-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Virtual Network Type. Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on CE sites. This network is created automatically and present on all sites Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL_INSIDE is a private network inside site. It is a secure network and is not connected to public network. Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on CE sites. This network is created during provisioning of site User defined per-site virtual network. Scope of this virtual network is limited to the site. This is not yet supported Virtual-network of type VIRTUAL_NETWORK_PUBLIC directly conects to the public internet. Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on RE sites only It is an internally created by the system. They must not be created by user Virtual Neworks with global scope across different sites in F5XC domain. An example global virtual-network called 'AIN Network' is created for every tenant. For F5 Distributed Cloud fabric Constraints: It is currently only supported as internally created by the system. VK8s service network for a given tenant. Used to advertise a virtual host only to vk8s pods for that tenant Constraints: It is an internally created by the system. Must not be created by user VER internal network for the site. It can only be used for virtual hosts with SMA_PROXY type proxy Constraints: It is an internally created by the system. Must not be created by user Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE represents both VIRTUAL_NETWORK_SITE_LOCAL and VIRTUAL_NETWORK_SITE_LOCAL_INSIDE Constraints: This network type is only meaningful in an advertise policy When virtual-network of type VIRTUAL_NETWORK_IP_AUTO is selected for an endpoint, VER will try to determine the network based on the provided IP address Constraints: This network type is only meaningful in an endpoint VoltADN Private Network is used on F5 Distributed Cloud RE(s) to connect to customer private networks This network is created by opening a support ticket This network is per site srv6 network VER IP Fabric network for the site. This Virtual network type is used for exposing virtual host on IP Fabric network on the VER site or for endpoint in IP Fabric network Constraints: It is an internally created by the system. Must not be created by user Network internally created for a segment Constraints: It is an internally created by the system. Must not be created by user
163
+ <a id="where-site-network-type"></a>&#x2022; [`network_type`](#where-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
164
164
 
165
165
  <a id="where-site-ref"></a>&#x2022; [`ref`](#where-site-ref) - Optional Block<br>Reference. A site direct reference<br>See [Ref](#where-site-ref) below.
166
166
 
@@ -168,61 +168,61 @@ A [`site`](#where-site) block (within [`where`](#where)) supports the following:
168
168
 
169
169
  A [`ref`](#where-site-ref) block (within [`where.site`](#where-site)) supports the following:
170
170
 
171
- <a id="where-site-ref-kind"></a>&#x2022; [`kind`](#where-site-ref-kind) - Optional String<br>Kind. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
171
+ <a id="where-site-ref-kind"></a>&#x2022; [`kind`](#where-site-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
172
172
 
173
- <a id="where-site-ref-name"></a>&#x2022; [`name`](#where-site-ref-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
173
+ <a id="where-site-ref-name"></a>&#x2022; [`name`](#where-site-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
174
174
 
175
- <a id="where-site-ref-namespace"></a>&#x2022; [`namespace`](#where-site-ref-namespace) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
175
+ <a id="where-site-ref-namespace"></a>&#x2022; [`namespace`](#where-site-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
176
176
 
177
- <a id="where-site-ref-tenant"></a>&#x2022; [`tenant`](#where-site-ref-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
177
+ <a id="where-site-ref-tenant"></a>&#x2022; [`tenant`](#where-site-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
178
178
 
179
- <a id="where-site-ref-uid"></a>&#x2022; [`uid`](#where-site-ref-uid) - Optional String<br>UID. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
179
+ <a id="where-site-ref-uid"></a>&#x2022; [`uid`](#where-site-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
180
180
 
181
181
  #### Where Virtual Network
182
182
 
183
183
  A [`virtual_network`](#where-virtual-network) block (within [`where`](#where)) supports the following:
184
184
 
185
- <a id="where-virtual-network-ref"></a>&#x2022; [`ref`](#where-virtual-network-ref) - Optional Block<br>Reference. A virtual network direct reference<br>See [Ref](#where-virtual-network-ref) below.
185
+ <a id="where-virtual-network-ref"></a>&#x2022; [`ref`](#where-virtual-network-ref) - Optional Block<br>Virtual network direct reference<br>See [Ref](#where-virtual-network-ref) below.
186
186
 
187
187
  #### Where Virtual Network Ref
188
188
 
189
189
  A [`ref`](#where-virtual-network-ref) block (within [`where.virtual_network`](#where-virtual-network)) supports the following:
190
190
 
191
- <a id="where-virtual-network-ref-kind"></a>&#x2022; [`kind`](#where-virtual-network-ref-kind) - Optional String<br>Kind. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
191
+ <a id="where-virtual-network-ref-kind"></a>&#x2022; [`kind`](#where-virtual-network-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
192
192
 
193
- <a id="where-virtual-network-ref-name"></a>&#x2022; [`name`](#where-virtual-network-ref-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
193
+ <a id="where-virtual-network-ref-name"></a>&#x2022; [`name`](#where-virtual-network-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
194
194
 
195
- <a id="where-virtual-network-ref-namespace"></a>&#x2022; [`namespace`](#where-virtual-network-ref-namespace) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
195
+ <a id="where-virtual-network-ref-namespace"></a>&#x2022; [`namespace`](#where-virtual-network-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
196
196
 
197
- <a id="where-virtual-network-ref-tenant"></a>&#x2022; [`tenant`](#where-virtual-network-ref-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
197
+ <a id="where-virtual-network-ref-tenant"></a>&#x2022; [`tenant`](#where-virtual-network-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
198
198
 
199
- <a id="where-virtual-network-ref-uid"></a>&#x2022; [`uid`](#where-virtual-network-ref-uid) - Optional String<br>UID. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
199
+ <a id="where-virtual-network-ref-uid"></a>&#x2022; [`uid`](#where-virtual-network-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
200
200
 
201
201
  #### Where Virtual Site
202
202
 
203
203
  A [`virtual_site`](#where-virtual-site) block (within [`where`](#where)) supports the following:
204
204
 
205
- <a id="where-virtual-site-disable-internet-vip"></a>&#x2022; [`disable_internet_vip`](#where-virtual-site-disable-internet-vip) - Optional Block<br>Enable this option
205
+ <a id="where-virtual-site-disable-internet-vip"></a>&#x2022; [`disable_internet_vip`](#where-virtual-site-disable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
206
206
 
207
- <a id="where-virtual-site-enable-internet-vip"></a>&#x2022; [`enable_internet_vip`](#where-virtual-site-enable-internet-vip) - Optional Block<br>Enable this option
207
+ <a id="where-virtual-site-enable-internet-vip"></a>&#x2022; [`enable_internet_vip`](#where-virtual-site-enable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
208
208
 
209
- <a id="where-virtual-site-network-type"></a>&#x2022; [`network_type`](#where-virtual-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Virtual Network Type. Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on CE sites. This network is created automatically and present on all sites Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL_INSIDE is a private network inside site. It is a secure network and is not connected to public network. Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on CE sites. This network is created during provisioning of site User defined per-site virtual network. Scope of this virtual network is limited to the site. This is not yet supported Virtual-network of type VIRTUAL_NETWORK_PUBLIC directly conects to the public internet. Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on RE sites only It is an internally created by the system. They must not be created by user Virtual Neworks with global scope across different sites in F5XC domain. An example global virtual-network called 'AIN Network' is created for every tenant. For F5 Distributed Cloud fabric Constraints: It is currently only supported as internally created by the system. VK8s service network for a given tenant. Used to advertise a virtual host only to vk8s pods for that tenant Constraints: It is an internally created by the system. Must not be created by user VER internal network for the site. It can only be used for virtual hosts with SMA_PROXY type proxy Constraints: It is an internally created by the system. Must not be created by user Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE represents both VIRTUAL_NETWORK_SITE_LOCAL and VIRTUAL_NETWORK_SITE_LOCAL_INSIDE Constraints: This network type is only meaningful in an advertise policy When virtual-network of type VIRTUAL_NETWORK_IP_AUTO is selected for an endpoint, VER will try to determine the network based on the provided IP address Constraints: This network type is only meaningful in an endpoint VoltADN Private Network is used on F5 Distributed Cloud RE(s) to connect to customer private networks This network is created by opening a support ticket This network is per site srv6 network VER IP Fabric network for the site. This Virtual network type is used for exposing virtual host on IP Fabric network on the VER site or for endpoint in IP Fabric network Constraints: It is an internally created by the system. Must not be created by user Network internally created for a segment Constraints: It is an internally created by the system. Must not be created by user
209
+ <a id="where-virtual-site-network-type"></a>&#x2022; [`network_type`](#where-virtual-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
210
210
 
211
- <a id="where-virtual-site-ref"></a>&#x2022; [`ref`](#where-virtual-site-ref) - Optional Block<br>Reference. A virtual_site direct reference<br>See [Ref](#where-virtual-site-ref) below.
211
+ <a id="where-virtual-site-ref"></a>&#x2022; [`ref`](#where-virtual-site-ref) - Optional Block<br>Virtual_site direct reference<br>See [Ref](#where-virtual-site-ref) below.
212
212
 
213
213
  #### Where Virtual Site Ref
214
214
 
215
215
  A [`ref`](#where-virtual-site-ref) block (within [`where.virtual_site`](#where-virtual-site)) supports the following:
216
216
 
217
- <a id="where-virtual-site-ref-kind"></a>&#x2022; [`kind`](#where-virtual-site-ref-kind) - Optional String<br>Kind. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
217
+ <a id="where-virtual-site-ref-kind"></a>&#x2022; [`kind`](#where-virtual-site-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
218
218
 
219
- <a id="where-virtual-site-ref-name"></a>&#x2022; [`name`](#where-virtual-site-ref-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
219
+ <a id="where-virtual-site-ref-name"></a>&#x2022; [`name`](#where-virtual-site-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
220
220
 
221
- <a id="where-virtual-site-ref-namespace"></a>&#x2022; [`namespace`](#where-virtual-site-ref-namespace) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
221
+ <a id="where-virtual-site-ref-namespace"></a>&#x2022; [`namespace`](#where-virtual-site-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
222
222
 
223
- <a id="where-virtual-site-ref-tenant"></a>&#x2022; [`tenant`](#where-virtual-site-ref-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
223
+ <a id="where-virtual-site-ref-tenant"></a>&#x2022; [`tenant`](#where-virtual-site-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
224
224
 
225
- <a id="where-virtual-site-ref-uid"></a>&#x2022; [`uid`](#where-virtual-site-ref-uid) - Optional String<br>UID. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
225
+ <a id="where-virtual-site-ref-uid"></a>&#x2022; [`uid`](#where-virtual-site-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
226
226
 
227
227
  ---
228
228
 
@@ -73,12 +73,12 @@ resource "f5xc_enhanced_firewall_policy" "example" {
73
73
  ### Spec Argument Reference
74
74
 
75
75
  -> **One of the following:**
76
- &#x2022; <a id="allow-all"></a>[`allow_all`](#allow-all) - Optional Block<br>Enable this option
77
- <br><br>&#x2022; <a id="allowed-destinations"></a>[`allowed_destinations`](#allowed-destinations) - Optional Block<br>IP Prefix List. List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Destinations](#allowed-destinations) below for details.
78
- <br><br>&#x2022; <a id="allowed-sources"></a>[`allowed_sources`](#allowed-sources) - Optional Block<br>IP Prefix List. List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Sources](#allowed-sources) below for details.
79
- <br><br>&#x2022; <a id="denied-destinations"></a>[`denied_destinations`](#denied-destinations) - Optional Block<br>IP Prefix List. List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Destinations](#denied-destinations) below for details.
80
- <br><br>&#x2022; <a id="denied-sources"></a>[`denied_sources`](#denied-sources) - Optional Block<br>IP Prefix List. List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Sources](#denied-sources) below for details.
81
- <br><br>&#x2022; <a id="deny-all"></a>[`deny_all`](#deny-all) - Optional Block<br>Enable this option
76
+ &#x2022; <a id="allow-all"></a>[`allow_all`](#allow-all) - Optional Block<br>Can be used for messages where no values are needed
77
+ <br><br>&#x2022; <a id="allowed-destinations"></a>[`allowed_destinations`](#allowed-destinations) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Destinations](#allowed-destinations) below for details.
78
+ <br><br>&#x2022; <a id="allowed-sources"></a>[`allowed_sources`](#allowed-sources) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Sources](#allowed-sources) below for details.
79
+ <br><br>&#x2022; <a id="denied-destinations"></a>[`denied_destinations`](#denied-destinations) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Destinations](#denied-destinations) below for details.
80
+ <br><br>&#x2022; <a id="denied-sources"></a>[`denied_sources`](#denied-sources) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Sources](#denied-sources) below for details.
81
+ <br><br>&#x2022; <a id="deny-all"></a>[`deny_all`](#deny-all) - Optional Block<br>Can be used for messages where no values are needed
82
82
  <br><br>&#x2022; <a id="rule-list"></a>[`rule_list`](#rule-list) - Optional Block<br>Custom Enhanced Firewall Policy Rules. Custom Enhanced Firewall Policy Rules<br>See [Rule List](#rule-list) below for details.
83
83
 
84
84
  <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
@@ -95,95 +95,95 @@ In addition to all arguments above, the following attributes are exported:
95
95
 
96
96
  An [`allowed_destinations`](#allowed-destinations) block supports the following:
97
97
 
98
- <a id="allowed-destinations-prefix"></a>&#x2022; [`prefix`](#allowed-destinations-prefix) - Optional List<br>Prefix. IP Address prefix in string format. String must contain both prefix and prefix-length
98
+ <a id="allowed-destinations-prefix"></a>&#x2022; [`prefix`](#allowed-destinations-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
99
99
 
100
100
  #### Allowed Sources
101
101
 
102
102
  An [`allowed_sources`](#allowed-sources) block supports the following:
103
103
 
104
- <a id="allowed-sources-prefix"></a>&#x2022; [`prefix`](#allowed-sources-prefix) - Optional List<br>Prefix. IP Address prefix in string format. String must contain both prefix and prefix-length
104
+ <a id="allowed-sources-prefix"></a>&#x2022; [`prefix`](#allowed-sources-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
105
105
 
106
106
  #### Denied Destinations
107
107
 
108
108
  A [`denied_destinations`](#denied-destinations) block supports the following:
109
109
 
110
- <a id="denied-destinations-prefix"></a>&#x2022; [`prefix`](#denied-destinations-prefix) - Optional List<br>Prefix. IP Address prefix in string format. String must contain both prefix and prefix-length
110
+ <a id="denied-destinations-prefix"></a>&#x2022; [`prefix`](#denied-destinations-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
111
111
 
112
112
  #### Denied Sources
113
113
 
114
114
  A [`denied_sources`](#denied-sources) block supports the following:
115
115
 
116
- <a id="denied-sources-prefix"></a>&#x2022; [`prefix`](#denied-sources-prefix) - Optional List<br>Prefix. IP Address prefix in string format. String must contain both prefix and prefix-length
116
+ <a id="denied-sources-prefix"></a>&#x2022; [`prefix`](#denied-sources-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
117
117
 
118
118
  #### Rule List
119
119
 
120
120
  A [`rule_list`](#rule-list) block supports the following:
121
121
 
122
- <a id="rule-list-rules"></a>&#x2022; [`rules`](#rule-list-rules) - Optional Block<br>List of Enhanced Firewall Policy Rules. Ordered List of Enhanced Firewall Policy Rules<br>See [Rules](#rule-list-rules) below.
122
+ <a id="rule-list-rules"></a>&#x2022; [`rules`](#rule-list-rules) - Optional Block<br>Ordered List of Enhanced Firewall Policy Rules<br>See [Rules](#rule-list-rules) below.
123
123
 
124
124
  #### Rule List Rules
125
125
 
126
126
  A [`rules`](#rule-list-rules) block (within [`rule_list`](#rule-list)) supports the following:
127
127
 
128
- <a id="rule-list-rules-advanced-action"></a>&#x2022; [`advanced_action`](#rule-list-rules-advanced-action) - Optional Block<br>Network Policy Rule Advanced Action. Network Policy Rule Advanced Action provides additional OPTIONS along with RuleAction and PBRRuleAction<br>See [Advanced Action](#rule-list-rules-advanced-action) below.
128
+ <a id="rule-list-rules-advanced-action"></a>&#x2022; [`advanced_action`](#rule-list-rules-advanced-action) - Optional Block<br>Network Policy Rule Advanced Action provides additional OPTIONS along with RuleAction and PBRRuleAction<br>See [Advanced Action](#rule-list-rules-advanced-action) below.
129
129
 
130
- <a id="rule-list-rules-all-destinations"></a>&#x2022; [`all_destinations`](#rule-list-rules-all-destinations) - Optional Block<br>Enable this option
130
+ <a id="rule-list-rules-all-destinations"></a>&#x2022; [`all_destinations`](#rule-list-rules-all-destinations) - Optional Block<br>Can be used for messages where no values are needed
131
131
 
132
- <a id="rule-list-rules-all-sli-vips"></a>&#x2022; [`all_sli_vips`](#rule-list-rules-all-sli-vips) - Optional Block<br>Enable this option
132
+ <a id="rule-list-rules-all-sli-vips"></a>&#x2022; [`all_sli_vips`](#rule-list-rules-all-sli-vips) - Optional Block<br>Can be used for messages where no values are needed
133
133
 
134
- <a id="rule-list-rules-all-slo-vips"></a>&#x2022; [`all_slo_vips`](#rule-list-rules-all-slo-vips) - Optional Block<br>Enable this option
134
+ <a id="rule-list-rules-all-slo-vips"></a>&#x2022; [`all_slo_vips`](#rule-list-rules-all-slo-vips) - Optional Block<br>Can be used for messages where no values are needed
135
135
 
136
- <a id="rule-list-rules-all-sources"></a>&#x2022; [`all_sources`](#rule-list-rules-all-sources) - Optional Block<br>Enable this option
136
+ <a id="rule-list-rules-all-sources"></a>&#x2022; [`all_sources`](#rule-list-rules-all-sources) - Optional Block<br>Can be used for messages where no values are needed
137
137
 
138
- <a id="rule-list-rules-all-tcp-traffic"></a>&#x2022; [`all_tcp_traffic`](#rule-list-rules-all-tcp-traffic) - Optional Block<br>Enable this option
138
+ <a id="rule-list-rules-all-tcp-traffic"></a>&#x2022; [`all_tcp_traffic`](#rule-list-rules-all-tcp-traffic) - Optional Block<br>Can be used for messages where no values are needed
139
139
 
140
- <a id="rule-list-rules-all-traffic"></a>&#x2022; [`all_traffic`](#rule-list-rules-all-traffic) - Optional Block<br>Enable this option
140
+ <a id="rule-list-rules-all-traffic"></a>&#x2022; [`all_traffic`](#rule-list-rules-all-traffic) - Optional Block<br>Can be used for messages where no values are needed
141
141
 
142
- <a id="rule-list-rules-all-udp-traffic"></a>&#x2022; [`all_udp_traffic`](#rule-list-rules-all-udp-traffic) - Optional Block<br>Enable this option
142
+ <a id="rule-list-rules-all-udp-traffic"></a>&#x2022; [`all_udp_traffic`](#rule-list-rules-all-udp-traffic) - Optional Block<br>Can be used for messages where no values are needed
143
143
 
144
- <a id="rule-list-rules-allow"></a>&#x2022; [`allow`](#rule-list-rules-allow) - Optional Block<br>Enable this option
144
+ <a id="rule-list-rules-allow"></a>&#x2022; [`allow`](#rule-list-rules-allow) - Optional Block<br>Can be used for messages where no values are needed
145
145
 
146
146
  <a id="rule-list-rules-applications"></a>&#x2022; [`applications`](#rule-list-rules-applications) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#rule-list-rules-applications) below.
147
147
 
148
- <a id="rule-list-rules-deny"></a>&#x2022; [`deny`](#rule-list-rules-deny) - Optional Block<br>Enable this option
148
+ <a id="rule-list-rules-deny"></a>&#x2022; [`deny`](#rule-list-rules-deny) - Optional Block<br>Can be used for messages where no values are needed
149
149
 
150
150
  <a id="rule-list-rules-destination-aws-vpc-ids"></a>&#x2022; [`destination_aws_vpc_ids`](#rule-list-rules-destination-aws-vpc-ids) - Optional Block<br>AWS VPC List. List of VPC Identifiers in AWS<br>See [Destination AWS VPC Ids](#rule-list-rules-destination-aws-vpc-ids) below.
151
151
 
152
- <a id="set-c1c996"></a>&#x2022; [`destination_ip_prefix_set`](#set-c1c996) - Optional Block<br>IP Prefix Set Reference. A list of references to ip_prefix_set objects<br>See [Destination IP Prefix Set](#set-c1c996) below.
152
+ <a id="set-c1c996"></a>&#x2022; [`destination_ip_prefix_set`](#set-c1c996) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Destination IP Prefix Set](#set-c1c996) below.
153
153
 
154
- <a id="selector-f5569f"></a>&#x2022; [`destination_label_selector`](#selector-f5569f) - Optional Block<br>Label Selector. This type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects. A null label selector matches no objects. Label selector is immutable. Expressions is a list of strings of label selection expression. Each string has ',' separated values which are 'AND' and all strings are logically 'OR'. BNF for expression string `<selector-syntax>` ::= `<requirement>` | `<requirement>` ',' `<selector-syntax>` `<requirement>` ::= [!] KEY [ `<set-based-restriction>` | `<exact-match-restriction>` ] `<set-based-restriction>` ::= '' | `<inclusion-exclusion>` `<value-set>` `<inclusion-exclusion>` ::= `<inclusion>` | `<exclusion>` `<exclusion>` ::= 'notin' `<inclusion>` ::= 'in' `<value-set>` ::= '(' `<values>` ')' `<values>` ::= VALUE | VALUE ',' `<values>` `<exact-match-restriction>` ::= ['='|'=='|'!='] VALUE<br>See [Destination Label Selector](#selector-f5569f) below.
154
+ <a id="selector-f5569f"></a>&#x2022; [`destination_label_selector`](#selector-f5569f) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Destination Label Selector](#selector-f5569f) below.
155
155
 
156
- <a id="rule-list-rules-destination-prefix-list"></a>&#x2022; [`destination_prefix_list`](#rule-list-rules-destination-prefix-list) - Optional Block<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint<br>See [Destination Prefix List](#rule-list-rules-destination-prefix-list) below.
156
+ <a id="rule-list-rules-destination-prefix-list"></a>&#x2022; [`destination_prefix_list`](#rule-list-rules-destination-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Destination Prefix List](#rule-list-rules-destination-prefix-list) below.
157
157
 
158
- <a id="rule-list-rules-insert-service"></a>&#x2022; [`insert_service`](#rule-list-rules-insert-service) - Optional Block<br>Policy Action to Forward Traffic to External Service. Action to forward traffic to external service<br>See [Insert Service](#rule-list-rules-insert-service) below.
158
+ <a id="rule-list-rules-insert-service"></a>&#x2022; [`insert_service`](#rule-list-rules-insert-service) - Optional Block<br>Action to forward traffic to external service<br>See [Insert Service](#rule-list-rules-insert-service) below.
159
159
 
160
- <a id="rule-list-rules-inside-destinations"></a>&#x2022; [`inside_destinations`](#rule-list-rules-inside-destinations) - Optional Block<br>Enable this option
160
+ <a id="rule-list-rules-inside-destinations"></a>&#x2022; [`inside_destinations`](#rule-list-rules-inside-destinations) - Optional Block<br>Can be used for messages where no values are needed
161
161
 
162
- <a id="rule-list-rules-inside-sources"></a>&#x2022; [`inside_sources`](#rule-list-rules-inside-sources) - Optional Block<br>Enable this option
162
+ <a id="rule-list-rules-inside-sources"></a>&#x2022; [`inside_sources`](#rule-list-rules-inside-sources) - Optional Block<br>Can be used for messages where no values are needed
163
163
 
164
- <a id="rule-list-rules-label-matcher"></a>&#x2022; [`label_matcher`](#rule-list-rules-label-matcher) - Optional Block<br>Label Matcher. A label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#rule-list-rules-label-matcher) below.
164
+ <a id="rule-list-rules-label-matcher"></a>&#x2022; [`label_matcher`](#rule-list-rules-label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#rule-list-rules-label-matcher) below.
165
165
 
166
- <a id="rule-list-rules-metadata"></a>&#x2022; [`metadata`](#rule-list-rules-metadata) - Optional Block<br>Message Metadata. MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create and replace APIs<br>See [Metadata](#rule-list-rules-metadata) below.
166
+ <a id="rule-list-rules-metadata"></a>&#x2022; [`metadata`](#rule-list-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#rule-list-rules-metadata) below.
167
167
 
168
- <a id="rule-list-rules-outside-destinations"></a>&#x2022; [`outside_destinations`](#rule-list-rules-outside-destinations) - Optional Block<br>Enable this option
168
+ <a id="rule-list-rules-outside-destinations"></a>&#x2022; [`outside_destinations`](#rule-list-rules-outside-destinations) - Optional Block<br>Can be used for messages where no values are needed
169
169
 
170
- <a id="rule-list-rules-outside-sources"></a>&#x2022; [`outside_sources`](#rule-list-rules-outside-sources) - Optional Block<br>Enable this option
170
+ <a id="rule-list-rules-outside-sources"></a>&#x2022; [`outside_sources`](#rule-list-rules-outside-sources) - Optional Block<br>Can be used for messages where no values are needed
171
171
 
172
172
  <a id="rule-list-rules-protocol-port-range"></a>&#x2022; [`protocol_port_range`](#rule-list-rules-protocol-port-range) - Optional Block<br>Protocol and Port. Protocol and Port ranges<br>See [Protocol Port Range](#rule-list-rules-protocol-port-range) below.
173
173
 
174
174
  <a id="rule-list-rules-source-aws-vpc-ids"></a>&#x2022; [`source_aws_vpc_ids`](#rule-list-rules-source-aws-vpc-ids) - Optional Block<br>AWS VPC List. List of VPC Identifiers in AWS<br>See [Source AWS VPC Ids](#rule-list-rules-source-aws-vpc-ids) below.
175
175
 
176
- <a id="rule-list-rules-source-ip-prefix-set"></a>&#x2022; [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) - Optional Block<br>IP Prefix Set Reference. A list of references to ip_prefix_set objects<br>See [Source IP Prefix Set](#rule-list-rules-source-ip-prefix-set) below.
176
+ <a id="rule-list-rules-source-ip-prefix-set"></a>&#x2022; [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Source IP Prefix Set](#rule-list-rules-source-ip-prefix-set) below.
177
177
 
178
- <a id="rule-list-rules-source-label-selector"></a>&#x2022; [`source_label_selector`](#rule-list-rules-source-label-selector) - Optional Block<br>Label Selector. This type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects. A null label selector matches no objects. Label selector is immutable. Expressions is a list of strings of label selection expression. Each string has ',' separated values which are 'AND' and all strings are logically 'OR'. BNF for expression string `<selector-syntax>` ::= `<requirement>` | `<requirement>` ',' `<selector-syntax>` `<requirement>` ::= [!] KEY [ `<set-based-restriction>` | `<exact-match-restriction>` ] `<set-based-restriction>` ::= '' | `<inclusion-exclusion>` `<value-set>` `<inclusion-exclusion>` ::= `<inclusion>` | `<exclusion>` `<exclusion>` ::= 'notin' `<inclusion>` ::= 'in' `<value-set>` ::= '(' `<values>` ')' `<values>` ::= VALUE | VALUE ',' `<values>` `<exact-match-restriction>` ::= ['='|'=='|'!='] VALUE<br>See [Source Label Selector](#rule-list-rules-source-label-selector) below.
178
+ <a id="rule-list-rules-source-label-selector"></a>&#x2022; [`source_label_selector`](#rule-list-rules-source-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Source Label Selector](#rule-list-rules-source-label-selector) below.
179
179
 
180
- <a id="rule-list-rules-source-prefix-list"></a>&#x2022; [`source_prefix_list`](#rule-list-rules-source-prefix-list) - Optional Block<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint<br>See [Source Prefix List](#rule-list-rules-source-prefix-list) below.
180
+ <a id="rule-list-rules-source-prefix-list"></a>&#x2022; [`source_prefix_list`](#rule-list-rules-source-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Source Prefix List](#rule-list-rules-source-prefix-list) below.
181
181
 
182
182
  #### Rule List Rules Advanced Action
183
183
 
184
184
  An [`advanced_action`](#rule-list-rules-advanced-action) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
185
185
 
186
- <a id="rule-list-rules-advanced-action-action"></a>&#x2022; [`action`](#rule-list-rules-advanced-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG] Log Action. Choice to choose logging or no logging This works together with option selected via NetworkPolicyRuleAction or any other action specified Don't sample the traffic hitting the rule Sample the traffic hitting the rule
186
+ <a id="rule-list-rules-advanced-action-action"></a>&#x2022; [`action`](#rule-list-rules-advanced-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG] Choice to choose logging or no logging This works together with option selected via NetworkPolicyRuleAction or any other action specified x-
187
187
 
188
188
  #### Rule List Rules Applications
189
189
 
@@ -195,13 +195,13 @@ An [`applications`](#rule-list-rules-applications) block (within [`rule_list.rul
195
195
 
196
196
  A [`destination_aws_vpc_ids`](#rule-list-rules-destination-aws-vpc-ids) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
197
197
 
198
- <a id="vpc-id-5f1d03"></a>&#x2022; [`vpc_id`](#vpc-id-5f1d03) - Optional List<br>AWS VPC List. List of VPC Identifiers in AWS
198
+ <a id="vpc-id-5f1d03"></a>&#x2022; [`vpc_id`](#vpc-id-5f1d03) - Optional List<br>List of VPC Identifiers in AWS
199
199
 
200
200
  #### Rule List Rules Destination IP Prefix Set
201
201
 
202
202
  A [`destination_ip_prefix_set`](#set-c1c996) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
203
203
 
204
- <a id="ref-f1c1ed"></a>&#x2022; [`ref`](#ref-f1c1ed) - Optional Block<br>Reference. A list of references to ip_prefix_set objects<br>See [Ref](#ref-f1c1ed) below.
204
+ <a id="ref-f1c1ed"></a>&#x2022; [`ref`](#ref-f1c1ed) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#ref-f1c1ed) below.
205
205
 
206
206
  #### Rule List Rules Destination IP Prefix Set Ref
207
207
 
@@ -211,35 +211,35 @@ A [`destination_ip_prefix_set`](#set-c1c996) block (within [`rule_list.rules`](#
211
211
 
212
212
  A [`destination_label_selector`](#selector-f5569f) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
213
213
 
214
- <a id="expressions-047a07"></a>&#x2022; [`expressions`](#expressions-047a07) - Optional List<br>Selector Expression. Expressions contains the Kubernetes style label expression for selections
214
+ <a id="expressions-047a07"></a>&#x2022; [`expressions`](#expressions-047a07) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
215
215
 
216
216
  #### Rule List Rules Destination Prefix List
217
217
 
218
218
  A [`destination_prefix_list`](#rule-list-rules-destination-prefix-list) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
219
219
 
220
- <a id="prefixes-4dff5c"></a>&#x2022; [`prefixes`](#prefixes-4dff5c) - Optional List<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint
220
+ <a id="prefixes-4dff5c"></a>&#x2022; [`prefixes`](#prefixes-4dff5c) - Optional List<br>List of IPv4 prefixes that represent an endpoint
221
221
 
222
222
  #### Rule List Rules Insert Service
223
223
 
224
224
  An [`insert_service`](#rule-list-rules-insert-service) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
225
225
 
226
- <a id="service-b8915d"></a>&#x2022; [`nfv_service`](#service-b8915d) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Nfv Service](#service-b8915d) below.
226
+ <a id="service-b8915d"></a>&#x2022; [`nfv_service`](#service-b8915d) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Nfv Service](#service-b8915d) below.
227
227
 
228
228
  #### Rule List Rules Insert Service Nfv Service
229
229
 
230
230
  A [`nfv_service`](#service-b8915d) block (within [`rule_list.rules.insert_service`](#rule-list-rules-insert-service)) supports the following:
231
231
 
232
- <a id="name-d47ddb"></a>&#x2022; [`name`](#name-d47ddb) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
232
+ <a id="name-d47ddb"></a>&#x2022; [`name`](#name-d47ddb) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
233
233
 
234
- <a id="namespace-d44c62"></a>&#x2022; [`namespace`](#namespace-d44c62) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
234
+ <a id="namespace-d44c62"></a>&#x2022; [`namespace`](#namespace-d44c62) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
235
235
 
236
- <a id="tenant-0d7aca"></a>&#x2022; [`tenant`](#tenant-0d7aca) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
236
+ <a id="tenant-0d7aca"></a>&#x2022; [`tenant`](#tenant-0d7aca) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
237
237
 
238
238
  #### Rule List Rules Label Matcher
239
239
 
240
240
  A [`label_matcher`](#rule-list-rules-label-matcher) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
241
241
 
242
- <a id="rule-list-rules-label-matcher-keys"></a>&#x2022; [`keys`](#rule-list-rules-label-matcher-keys) - Optional List<br>Keys. The list of label key names that have to match
242
+ <a id="rule-list-rules-label-matcher-keys"></a>&#x2022; [`keys`](#rule-list-rules-label-matcher-keys) - Optional List<br>The list of label key names that have to match
243
243
 
244
244
  #### Rule List Rules Metadata
245
245
 
@@ -247,27 +247,27 @@ A [`metadata`](#rule-list-rules-metadata) block (within [`rule_list.rules`](#rul
247
247
 
248
248
  <a id="spec-118a99"></a>&#x2022; [`description_spec`](#spec-118a99) - Optional String<br>Description. Human readable description
249
249
 
250
- <a id="rule-list-rules-metadata-name"></a>&#x2022; [`name`](#rule-list-rules-metadata-name) - Optional String<br>Name. This is the name of the message. The value of name has to follow DNS-1035 format
250
+ <a id="rule-list-rules-metadata-name"></a>&#x2022; [`name`](#rule-list-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
251
251
 
252
252
  #### Rule List Rules Protocol Port Range
253
253
 
254
254
  A [`protocol_port_range`](#rule-list-rules-protocol-port-range) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
255
255
 
256
- <a id="ranges-73bb0a"></a>&#x2022; [`port_ranges`](#ranges-73bb0a) - Optional List<br>List of Port Ranges. List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
256
+ <a id="ranges-73bb0a"></a>&#x2022; [`port_ranges`](#ranges-73bb0a) - Optional List<br>List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
257
257
 
258
- <a id="protocol-9dade8"></a>&#x2022; [`protocol`](#protocol-9dade8) - Optional String<br>Protocol. Protocol in IP packet to be used as match criteria Values are TCP, UDP, and ICMP
258
+ <a id="protocol-9dade8"></a>&#x2022; [`protocol`](#protocol-9dade8) - Optional String<br>Protocol in IP packet to be used as match criteria Values are TCP, UDP, and ICMP
259
259
 
260
260
  #### Rule List Rules Source AWS VPC Ids
261
261
 
262
262
  A [`source_aws_vpc_ids`](#rule-list-rules-source-aws-vpc-ids) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
263
263
 
264
- <a id="vpc-id-a05612"></a>&#x2022; [`vpc_id`](#vpc-id-a05612) - Optional List<br>AWS VPC List. List of VPC Identifiers in AWS
264
+ <a id="vpc-id-a05612"></a>&#x2022; [`vpc_id`](#vpc-id-a05612) - Optional List<br>List of VPC Identifiers in AWS
265
265
 
266
266
  #### Rule List Rules Source IP Prefix Set
267
267
 
268
268
  A [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
269
269
 
270
- <a id="ref-f78649"></a>&#x2022; [`ref`](#ref-f78649) - Optional Block<br>Reference. A list of references to ip_prefix_set objects<br>See [Ref](#ref-f78649) below.
270
+ <a id="ref-f78649"></a>&#x2022; [`ref`](#ref-f78649) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#ref-f78649) below.
271
271
 
272
272
  #### Rule List Rules Source IP Prefix Set Ref
273
273
 
@@ -277,13 +277,13 @@ A [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) block (within
277
277
 
278
278
  A [`source_label_selector`](#rule-list-rules-source-label-selector) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
279
279
 
280
- <a id="expressions-eab55f"></a>&#x2022; [`expressions`](#expressions-eab55f) - Optional List<br>Selector Expression. Expressions contains the Kubernetes style label expression for selections
280
+ <a id="expressions-eab55f"></a>&#x2022; [`expressions`](#expressions-eab55f) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
281
281
 
282
282
  #### Rule List Rules Source Prefix List
283
283
 
284
284
  A [`source_prefix_list`](#rule-list-rules-source-prefix-list) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
285
285
 
286
- <a id="prefixes-58916b"></a>&#x2022; [`prefixes`](#prefixes-58916b) - Optional List<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint
286
+ <a id="prefixes-58916b"></a>&#x2022; [`prefixes`](#prefixes-58916b) - Optional List<br>List of IPv4 prefixes that represent an endpoint
287
287
 
288
288
  #### Timeouts
289
289