@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +104 -283
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -32,15 +32,15 @@ resource "f5xc_endpoint" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
35
|
+
# Specifies name and TTL used for DNS resolution.
|
|
36
36
|
dns_name_advanced {
|
|
37
37
|
# Configure dns_name_advanced settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
39
|
+
# Specifies whether endpoint service is discovered by name ...
|
|
40
40
|
service_info {
|
|
41
41
|
# Configure service_info settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
43
|
+
# Type can be used to establish a 'selector reference' from...
|
|
44
44
|
service_selector {
|
|
45
45
|
# Configure service_selector settings
|
|
46
46
|
}
|
|
@@ -67,14 +67,14 @@ resource "f5xc_endpoint" "example" {
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
69
|
-> **One of the following:**
|
|
70
|
-
• <a id="dns-name"></a>[`dns_name`](#dns-name) - Optional String<br>Endpoint
|
|
71
|
-
<br><br>• <a id="dns-name-advanced"></a>[`dns_name_advanced`](#dns-name-advanced) - Optional Block<br>
|
|
72
|
-
<br><br>• <a id="ip"></a>[`ip`](#ip) - Optional String<br>Endpoint
|
|
73
|
-
<br><br>• <a id="service-info"></a>[`service_info`](#service-info) - Optional Block<br>
|
|
70
|
+
• <a id="dns-name"></a>[`dns_name`](#dns-name) - Optional String<br>Endpoint's IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
|
|
71
|
+
<br><br>• <a id="dns-name-advanced"></a>[`dns_name_advanced`](#dns-name-advanced) - Optional Block<br>Specifies name and TTL used for DNS resolution<br>See [DNS Name Advanced](#dns-name-advanced) below for details.
|
|
72
|
+
<br><br>• <a id="ip"></a>[`ip`](#ip) - Optional String<br>Endpoint is reachable at the given IPv4/IPv6 address
|
|
73
|
+
<br><br>• <a id="service-info"></a>[`service_info`](#service-info) - Optional Block<br>Specifies whether endpoint service is discovered by name or labels<br>See [Service Info](#service-info) below for details.
|
|
74
74
|
|
|
75
|
-
<a id="health-check-port"></a>• [`health_check_port`](#health-check-port) - Optional Number<br>
|
|
75
|
+
<a id="health-check-port"></a>• [`health_check_port`](#health-check-port) - Optional Number<br>By default the health check port of an endpoint is the same as the endpoint’s port. This option provides an alternative health check port. Setting this with a non-zero value allows an endpoint to have different health check port
|
|
76
76
|
|
|
77
|
-
<a id="port"></a>• [`port`](#port) - Optional Number<br>
|
|
77
|
+
<a id="port"></a>• [`port`](#port) - Optional Number<br>Endpoint service is available on this port
|
|
78
78
|
|
|
79
79
|
<a id="protocol"></a>• [`protocol`](#protocol) - Optional String<br>Protocol. Endpoint protocol. Default is TCP. Both TCP and UDP protocols are supported
|
|
80
80
|
|
|
@@ -82,7 +82,7 @@ resource "f5xc_endpoint" "example" {
|
|
|
82
82
|
|
|
83
83
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
84
84
|
|
|
85
|
-
<a id="where"></a>• [`where`](#where) - Optional Block<br>
|
|
85
|
+
<a id="where"></a>• [`where`](#where) - Optional Block<br>NetworkSiteRefSelector defines a union of reference to site or reference to virtual_network or reference to virtual_site It is used to determine virtual network using following rules \* Direct reference to virtual_network object \* Site local network when refering to site object \* All site local<br>See [Where](#where) below for details.
|
|
86
86
|
|
|
87
87
|
### Attributes Reference
|
|
88
88
|
|
|
@@ -96,39 +96,39 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
96
96
|
|
|
97
97
|
A [`dns_name_advanced`](#dns-name-advanced) block supports the following:
|
|
98
98
|
|
|
99
|
-
<a id="dns-name-advanced-name"></a>• [`name`](#dns-name-advanced-name) - Optional String<br>Endpoint
|
|
99
|
+
<a id="dns-name-advanced-name"></a>• [`name`](#dns-name-advanced-name) - Optional String<br>Endpoint's IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
|
|
100
100
|
|
|
101
|
-
<a id="dns-name-advanced-refresh-interval"></a>• [`refresh_interval`](#dns-name-advanced-refresh-interval) - Optional Number<br>
|
|
101
|
+
<a id="dns-name-advanced-refresh-interval"></a>• [`refresh_interval`](#dns-name-advanced-refresh-interval) - Optional Number<br>Interval for DNS refresh in seconds
|
|
102
102
|
|
|
103
103
|
#### Service Info
|
|
104
104
|
|
|
105
105
|
A [`service_info`](#service-info) block supports the following:
|
|
106
106
|
|
|
107
|
-
<a id="service-info-discovery-type"></a>• [`discovery_type`](#service-info-discovery-type) - Optional String Defaults to `INVALID_DISCOVERY`<br>Possible values are `INVALID_DISCOVERY`, `K8S`, `CONSUL`, `CLASSIC_BIGIP`, `THIRD_PARTY`<br>[Enum: INVALID_DISCOVERY|K8S|CONSUL|CLASSIC_BIGIP|THIRD_PARTY]
|
|
107
|
+
<a id="service-info-discovery-type"></a>• [`discovery_type`](#service-info-discovery-type) - Optional String Defaults to `INVALID_DISCOVERY`<br>Possible values are `INVALID_DISCOVERY`, `K8S`, `CONSUL`, `CLASSIC_BIGIP`, `THIRD_PARTY`<br>[Enum: INVALID_DISCOVERY|K8S|CONSUL|CLASSIC_BIGIP|THIRD_PARTY] Specifies whether the discovery is from Kubernetes or Consul cluster Invalid Discovery mechanism Discover from Kubernetes cluster Discover from Consul service Discover from Classic BIG-IP Clusters Discover for Third Party Application
|
|
108
108
|
|
|
109
|
-
<a id="service-info-service-name"></a>• [`service_name`](#service-info-service-name) - Optional String<br>
|
|
109
|
+
<a id="service-info-service-name"></a>• [`service_name`](#service-info-service-name) - Optional String<br>Name of the service to discover with an optional namespace and cluster identifier. The format is service_name.namespace_name:cluster_identifier for K8S and service_name:cluster_identifier for Consul Endpoint will be discovered in all discovery objects where the
|
|
110
110
|
|
|
111
|
-
<a id="service-info-service-selector"></a>• [`service_selector`](#service-info-service-selector) - Optional Block<br>
|
|
111
|
+
<a id="service-info-service-selector"></a>• [`service_selector`](#service-info-service-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Service Selector](#service-info-service-selector) below.
|
|
112
112
|
|
|
113
113
|
#### Service Info Service Selector
|
|
114
114
|
|
|
115
115
|
A [`service_selector`](#service-info-service-selector) block (within [`service_info`](#service-info)) supports the following:
|
|
116
116
|
|
|
117
|
-
<a id="expressions-954c46"></a>• [`expressions`](#expressions-954c46) - Optional List<br>
|
|
117
|
+
<a id="expressions-954c46"></a>• [`expressions`](#expressions-954c46) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
118
118
|
|
|
119
119
|
#### Snat Pool
|
|
120
120
|
|
|
121
121
|
A [`snat_pool`](#snat-pool) block supports the following:
|
|
122
122
|
|
|
123
|
-
<a id="snat-pool-no-snat-pool"></a>• [`no_snat_pool`](#snat-pool-no-snat-pool) - Optional Block<br>
|
|
123
|
+
<a id="snat-pool-no-snat-pool"></a>• [`no_snat_pool`](#snat-pool-no-snat-pool) - Optional Block<br>Can be used for messages where no values are needed
|
|
124
124
|
|
|
125
|
-
<a id="snat-pool-snat-pool"></a>• [`snat_pool`](#snat-pool-snat-pool) - Optional Block<br>
|
|
125
|
+
<a id="snat-pool-snat-pool"></a>• [`snat_pool`](#snat-pool-snat-pool) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#snat-pool-snat-pool) below.
|
|
126
126
|
|
|
127
127
|
#### Snat Pool Snat Pool
|
|
128
128
|
|
|
129
129
|
A [`snat_pool`](#snat-pool-snat-pool) block (within [`snat_pool`](#snat-pool)) supports the following:
|
|
130
130
|
|
|
131
|
-
<a id="snat-pool-snat-pool-prefixes"></a>• [`prefixes`](#snat-pool-snat-pool-prefixes) - Optional List<br>
|
|
131
|
+
<a id="snat-pool-snat-pool-prefixes"></a>• [`prefixes`](#snat-pool-snat-pool-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
132
132
|
|
|
133
133
|
#### Timeouts
|
|
134
134
|
|
|
@@ -146,9 +146,9 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
146
146
|
|
|
147
147
|
A [`where`](#where) block supports the following:
|
|
148
148
|
|
|
149
|
-
<a id="where-site"></a>• [`site`](#where-site) - Optional Block<br>
|
|
149
|
+
<a id="where-site"></a>• [`site`](#where-site) - Optional Block<br>Specifies a direct reference to a site configuration object<br>See [Site](#where-site) below.
|
|
150
150
|
|
|
151
|
-
<a id="where-virtual-network"></a>• [`virtual_network`](#where-virtual-network) - Optional Block<br>
|
|
151
|
+
<a id="where-virtual-network"></a>• [`virtual_network`](#where-virtual-network) - Optional Block<br>Specifies a direct reference to a network configuration object<br>See [Virtual Network](#where-virtual-network) below.
|
|
152
152
|
|
|
153
153
|
<a id="where-virtual-site"></a>• [`virtual_site`](#where-virtual-site) - Optional Block<br>Virtual Site. A reference to virtual_site object<br>See [Virtual Site](#where-virtual-site) below.
|
|
154
154
|
|
|
@@ -156,11 +156,11 @@ A [`where`](#where) block supports the following:
|
|
|
156
156
|
|
|
157
157
|
A [`site`](#where-site) block (within [`where`](#where)) supports the following:
|
|
158
158
|
|
|
159
|
-
<a id="where-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-site-disable-internet-vip) - Optional Block<br>
|
|
159
|
+
<a id="where-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-site-disable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
|
|
160
160
|
|
|
161
|
-
<a id="where-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-site-enable-internet-vip) - Optional Block<br>
|
|
161
|
+
<a id="where-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-site-enable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
|
|
162
162
|
|
|
163
|
-
<a id="where-site-network-type"></a>• [`network_type`](#where-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT]
|
|
163
|
+
<a id="where-site-network-type"></a>• [`network_type`](#where-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
|
|
164
164
|
|
|
165
165
|
<a id="where-site-ref"></a>• [`ref`](#where-site-ref) - Optional Block<br>Reference. A site direct reference<br>See [Ref](#where-site-ref) below.
|
|
166
166
|
|
|
@@ -168,61 +168,61 @@ A [`site`](#where-site) block (within [`where`](#where)) supports the following:
|
|
|
168
168
|
|
|
169
169
|
A [`ref`](#where-site-ref) block (within [`where.site`](#where-site)) supports the following:
|
|
170
170
|
|
|
171
|
-
<a id="where-site-ref-kind"></a>• [`kind`](#where-site-ref-kind) - Optional String<br>
|
|
171
|
+
<a id="where-site-ref-kind"></a>• [`kind`](#where-site-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
172
172
|
|
|
173
|
-
<a id="where-site-ref-name"></a>• [`name`](#where-site-ref-name) - Optional String<br>
|
|
173
|
+
<a id="where-site-ref-name"></a>• [`name`](#where-site-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
174
174
|
|
|
175
|
-
<a id="where-site-ref-namespace"></a>• [`namespace`](#where-site-ref-namespace) - Optional String<br>
|
|
175
|
+
<a id="where-site-ref-namespace"></a>• [`namespace`](#where-site-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
176
176
|
|
|
177
|
-
<a id="where-site-ref-tenant"></a>• [`tenant`](#where-site-ref-tenant) - Optional String<br>
|
|
177
|
+
<a id="where-site-ref-tenant"></a>• [`tenant`](#where-site-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
178
178
|
|
|
179
|
-
<a id="where-site-ref-uid"></a>• [`uid`](#where-site-ref-uid) - Optional String<br>
|
|
179
|
+
<a id="where-site-ref-uid"></a>• [`uid`](#where-site-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
180
180
|
|
|
181
181
|
#### Where Virtual Network
|
|
182
182
|
|
|
183
183
|
A [`virtual_network`](#where-virtual-network) block (within [`where`](#where)) supports the following:
|
|
184
184
|
|
|
185
|
-
<a id="where-virtual-network-ref"></a>• [`ref`](#where-virtual-network-ref) - Optional Block<br>
|
|
185
|
+
<a id="where-virtual-network-ref"></a>• [`ref`](#where-virtual-network-ref) - Optional Block<br>Virtual network direct reference<br>See [Ref](#where-virtual-network-ref) below.
|
|
186
186
|
|
|
187
187
|
#### Where Virtual Network Ref
|
|
188
188
|
|
|
189
189
|
A [`ref`](#where-virtual-network-ref) block (within [`where.virtual_network`](#where-virtual-network)) supports the following:
|
|
190
190
|
|
|
191
|
-
<a id="where-virtual-network-ref-kind"></a>• [`kind`](#where-virtual-network-ref-kind) - Optional String<br>
|
|
191
|
+
<a id="where-virtual-network-ref-kind"></a>• [`kind`](#where-virtual-network-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
192
192
|
|
|
193
|
-
<a id="where-virtual-network-ref-name"></a>• [`name`](#where-virtual-network-ref-name) - Optional String<br>
|
|
193
|
+
<a id="where-virtual-network-ref-name"></a>• [`name`](#where-virtual-network-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
194
194
|
|
|
195
|
-
<a id="where-virtual-network-ref-namespace"></a>• [`namespace`](#where-virtual-network-ref-namespace) - Optional String<br>
|
|
195
|
+
<a id="where-virtual-network-ref-namespace"></a>• [`namespace`](#where-virtual-network-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
196
196
|
|
|
197
|
-
<a id="where-virtual-network-ref-tenant"></a>• [`tenant`](#where-virtual-network-ref-tenant) - Optional String<br>
|
|
197
|
+
<a id="where-virtual-network-ref-tenant"></a>• [`tenant`](#where-virtual-network-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
198
198
|
|
|
199
|
-
<a id="where-virtual-network-ref-uid"></a>• [`uid`](#where-virtual-network-ref-uid) - Optional String<br>
|
|
199
|
+
<a id="where-virtual-network-ref-uid"></a>• [`uid`](#where-virtual-network-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
200
200
|
|
|
201
201
|
#### Where Virtual Site
|
|
202
202
|
|
|
203
203
|
A [`virtual_site`](#where-virtual-site) block (within [`where`](#where)) supports the following:
|
|
204
204
|
|
|
205
|
-
<a id="where-virtual-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-virtual-site-disable-internet-vip) - Optional Block<br>
|
|
205
|
+
<a id="where-virtual-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-virtual-site-disable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
|
|
206
206
|
|
|
207
|
-
<a id="where-virtual-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-virtual-site-enable-internet-vip) - Optional Block<br>
|
|
207
|
+
<a id="where-virtual-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-virtual-site-enable-internet-vip) - Optional Block<br>Can be used for messages where no values are needed
|
|
208
208
|
|
|
209
|
-
<a id="where-virtual-site-network-type"></a>• [`network_type`](#where-virtual-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT]
|
|
209
|
+
<a id="where-virtual-site-network-type"></a>• [`network_type`](#where-virtual-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
|
|
210
210
|
|
|
211
|
-
<a id="where-virtual-site-ref"></a>• [`ref`](#where-virtual-site-ref) - Optional Block<br>
|
|
211
|
+
<a id="where-virtual-site-ref"></a>• [`ref`](#where-virtual-site-ref) - Optional Block<br>Virtual_site direct reference<br>See [Ref](#where-virtual-site-ref) below.
|
|
212
212
|
|
|
213
213
|
#### Where Virtual Site Ref
|
|
214
214
|
|
|
215
215
|
A [`ref`](#where-virtual-site-ref) block (within [`where.virtual_site`](#where-virtual-site)) supports the following:
|
|
216
216
|
|
|
217
|
-
<a id="where-virtual-site-ref-kind"></a>• [`kind`](#where-virtual-site-ref-kind) - Optional String<br>
|
|
217
|
+
<a id="where-virtual-site-ref-kind"></a>• [`kind`](#where-virtual-site-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
218
218
|
|
|
219
|
-
<a id="where-virtual-site-ref-name"></a>• [`name`](#where-virtual-site-ref-name) - Optional String<br>
|
|
219
|
+
<a id="where-virtual-site-ref-name"></a>• [`name`](#where-virtual-site-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
220
220
|
|
|
221
|
-
<a id="where-virtual-site-ref-namespace"></a>• [`namespace`](#where-virtual-site-ref-namespace) - Optional String<br>
|
|
221
|
+
<a id="where-virtual-site-ref-namespace"></a>• [`namespace`](#where-virtual-site-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
222
222
|
|
|
223
|
-
<a id="where-virtual-site-ref-tenant"></a>• [`tenant`](#where-virtual-site-ref-tenant) - Optional String<br>
|
|
223
|
+
<a id="where-virtual-site-ref-tenant"></a>• [`tenant`](#where-virtual-site-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
224
224
|
|
|
225
|
-
<a id="where-virtual-site-ref-uid"></a>• [`uid`](#where-virtual-site-ref-uid) - Optional String<br>
|
|
225
|
+
<a id="where-virtual-site-ref-uid"></a>• [`uid`](#where-virtual-site-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
226
226
|
|
|
227
227
|
---
|
|
228
228
|
|
|
@@ -73,12 +73,12 @@ resource "f5xc_enhanced_firewall_policy" "example" {
|
|
|
73
73
|
### Spec Argument Reference
|
|
74
74
|
|
|
75
75
|
-> **One of the following:**
|
|
76
|
-
• <a id="allow-all"></a>[`allow_all`](#allow-all) - Optional Block<br>
|
|
77
|
-
<br><br>• <a id="allowed-destinations"></a>[`allowed_destinations`](#allowed-destinations) - Optional Block<br>
|
|
78
|
-
<br><br>• <a id="allowed-sources"></a>[`allowed_sources`](#allowed-sources) - Optional Block<br>
|
|
79
|
-
<br><br>• <a id="denied-destinations"></a>[`denied_destinations`](#denied-destinations) - Optional Block<br>
|
|
80
|
-
<br><br>• <a id="denied-sources"></a>[`denied_sources`](#denied-sources) - Optional Block<br>
|
|
81
|
-
<br><br>• <a id="deny-all"></a>[`deny_all`](#deny-all) - Optional Block<br>
|
|
76
|
+
• <a id="allow-all"></a>[`allow_all`](#allow-all) - Optional Block<br>Can be used for messages where no values are needed
|
|
77
|
+
<br><br>• <a id="allowed-destinations"></a>[`allowed_destinations`](#allowed-destinations) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Destinations](#allowed-destinations) below for details.
|
|
78
|
+
<br><br>• <a id="allowed-sources"></a>[`allowed_sources`](#allowed-sources) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Sources](#allowed-sources) below for details.
|
|
79
|
+
<br><br>• <a id="denied-destinations"></a>[`denied_destinations`](#denied-destinations) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Destinations](#denied-destinations) below for details.
|
|
80
|
+
<br><br>• <a id="denied-sources"></a>[`denied_sources`](#denied-sources) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Sources](#denied-sources) below for details.
|
|
81
|
+
<br><br>• <a id="deny-all"></a>[`deny_all`](#deny-all) - Optional Block<br>Can be used for messages where no values are needed
|
|
82
82
|
<br><br>• <a id="rule-list"></a>[`rule_list`](#rule-list) - Optional Block<br>Custom Enhanced Firewall Policy Rules. Custom Enhanced Firewall Policy Rules<br>See [Rule List](#rule-list) below for details.
|
|
83
83
|
|
|
84
84
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
@@ -95,95 +95,95 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
95
95
|
|
|
96
96
|
An [`allowed_destinations`](#allowed-destinations) block supports the following:
|
|
97
97
|
|
|
98
|
-
<a id="allowed-destinations-prefix"></a>• [`prefix`](#allowed-destinations-prefix) - Optional List<br>
|
|
98
|
+
<a id="allowed-destinations-prefix"></a>• [`prefix`](#allowed-destinations-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
99
99
|
|
|
100
100
|
#### Allowed Sources
|
|
101
101
|
|
|
102
102
|
An [`allowed_sources`](#allowed-sources) block supports the following:
|
|
103
103
|
|
|
104
|
-
<a id="allowed-sources-prefix"></a>• [`prefix`](#allowed-sources-prefix) - Optional List<br>
|
|
104
|
+
<a id="allowed-sources-prefix"></a>• [`prefix`](#allowed-sources-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
105
105
|
|
|
106
106
|
#### Denied Destinations
|
|
107
107
|
|
|
108
108
|
A [`denied_destinations`](#denied-destinations) block supports the following:
|
|
109
109
|
|
|
110
|
-
<a id="denied-destinations-prefix"></a>• [`prefix`](#denied-destinations-prefix) - Optional List<br>
|
|
110
|
+
<a id="denied-destinations-prefix"></a>• [`prefix`](#denied-destinations-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
111
111
|
|
|
112
112
|
#### Denied Sources
|
|
113
113
|
|
|
114
114
|
A [`denied_sources`](#denied-sources) block supports the following:
|
|
115
115
|
|
|
116
|
-
<a id="denied-sources-prefix"></a>• [`prefix`](#denied-sources-prefix) - Optional List<br>
|
|
116
|
+
<a id="denied-sources-prefix"></a>• [`prefix`](#denied-sources-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
117
117
|
|
|
118
118
|
#### Rule List
|
|
119
119
|
|
|
120
120
|
A [`rule_list`](#rule-list) block supports the following:
|
|
121
121
|
|
|
122
|
-
<a id="rule-list-rules"></a>• [`rules`](#rule-list-rules) - Optional Block<br>
|
|
122
|
+
<a id="rule-list-rules"></a>• [`rules`](#rule-list-rules) - Optional Block<br>Ordered List of Enhanced Firewall Policy Rules<br>See [Rules](#rule-list-rules) below.
|
|
123
123
|
|
|
124
124
|
#### Rule List Rules
|
|
125
125
|
|
|
126
126
|
A [`rules`](#rule-list-rules) block (within [`rule_list`](#rule-list)) supports the following:
|
|
127
127
|
|
|
128
|
-
<a id="rule-list-rules-advanced-action"></a>• [`advanced_action`](#rule-list-rules-advanced-action) - Optional Block<br>Network Policy Rule Advanced Action
|
|
128
|
+
<a id="rule-list-rules-advanced-action"></a>• [`advanced_action`](#rule-list-rules-advanced-action) - Optional Block<br>Network Policy Rule Advanced Action provides additional OPTIONS along with RuleAction and PBRRuleAction<br>See [Advanced Action](#rule-list-rules-advanced-action) below.
|
|
129
129
|
|
|
130
|
-
<a id="rule-list-rules-all-destinations"></a>• [`all_destinations`](#rule-list-rules-all-destinations) - Optional Block<br>
|
|
130
|
+
<a id="rule-list-rules-all-destinations"></a>• [`all_destinations`](#rule-list-rules-all-destinations) - Optional Block<br>Can be used for messages where no values are needed
|
|
131
131
|
|
|
132
|
-
<a id="rule-list-rules-all-sli-vips"></a>• [`all_sli_vips`](#rule-list-rules-all-sli-vips) - Optional Block<br>
|
|
132
|
+
<a id="rule-list-rules-all-sli-vips"></a>• [`all_sli_vips`](#rule-list-rules-all-sli-vips) - Optional Block<br>Can be used for messages where no values are needed
|
|
133
133
|
|
|
134
|
-
<a id="rule-list-rules-all-slo-vips"></a>• [`all_slo_vips`](#rule-list-rules-all-slo-vips) - Optional Block<br>
|
|
134
|
+
<a id="rule-list-rules-all-slo-vips"></a>• [`all_slo_vips`](#rule-list-rules-all-slo-vips) - Optional Block<br>Can be used for messages where no values are needed
|
|
135
135
|
|
|
136
|
-
<a id="rule-list-rules-all-sources"></a>• [`all_sources`](#rule-list-rules-all-sources) - Optional Block<br>
|
|
136
|
+
<a id="rule-list-rules-all-sources"></a>• [`all_sources`](#rule-list-rules-all-sources) - Optional Block<br>Can be used for messages where no values are needed
|
|
137
137
|
|
|
138
|
-
<a id="rule-list-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#rule-list-rules-all-tcp-traffic) - Optional Block<br>
|
|
138
|
+
<a id="rule-list-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#rule-list-rules-all-tcp-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
139
139
|
|
|
140
|
-
<a id="rule-list-rules-all-traffic"></a>• [`all_traffic`](#rule-list-rules-all-traffic) - Optional Block<br>
|
|
140
|
+
<a id="rule-list-rules-all-traffic"></a>• [`all_traffic`](#rule-list-rules-all-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
141
141
|
|
|
142
|
-
<a id="rule-list-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#rule-list-rules-all-udp-traffic) - Optional Block<br>
|
|
142
|
+
<a id="rule-list-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#rule-list-rules-all-udp-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
143
143
|
|
|
144
|
-
<a id="rule-list-rules-allow"></a>• [`allow`](#rule-list-rules-allow) - Optional Block<br>
|
|
144
|
+
<a id="rule-list-rules-allow"></a>• [`allow`](#rule-list-rules-allow) - Optional Block<br>Can be used for messages where no values are needed
|
|
145
145
|
|
|
146
146
|
<a id="rule-list-rules-applications"></a>• [`applications`](#rule-list-rules-applications) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#rule-list-rules-applications) below.
|
|
147
147
|
|
|
148
|
-
<a id="rule-list-rules-deny"></a>• [`deny`](#rule-list-rules-deny) - Optional Block<br>
|
|
148
|
+
<a id="rule-list-rules-deny"></a>• [`deny`](#rule-list-rules-deny) - Optional Block<br>Can be used for messages where no values are needed
|
|
149
149
|
|
|
150
150
|
<a id="rule-list-rules-destination-aws-vpc-ids"></a>• [`destination_aws_vpc_ids`](#rule-list-rules-destination-aws-vpc-ids) - Optional Block<br>AWS VPC List. List of VPC Identifiers in AWS<br>See [Destination AWS VPC Ids](#rule-list-rules-destination-aws-vpc-ids) below.
|
|
151
151
|
|
|
152
|
-
<a id="set-c1c996"></a>• [`destination_ip_prefix_set`](#set-c1c996) - Optional Block<br>
|
|
152
|
+
<a id="set-c1c996"></a>• [`destination_ip_prefix_set`](#set-c1c996) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Destination IP Prefix Set](#set-c1c996) below.
|
|
153
153
|
|
|
154
|
-
<a id="selector-f5569f"></a>• [`destination_label_selector`](#selector-f5569f) - Optional Block<br>
|
|
154
|
+
<a id="selector-f5569f"></a>• [`destination_label_selector`](#selector-f5569f) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Destination Label Selector](#selector-f5569f) below.
|
|
155
155
|
|
|
156
|
-
<a id="rule-list-rules-destination-prefix-list"></a>• [`destination_prefix_list`](#rule-list-rules-destination-prefix-list) - Optional Block<br>
|
|
156
|
+
<a id="rule-list-rules-destination-prefix-list"></a>• [`destination_prefix_list`](#rule-list-rules-destination-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Destination Prefix List](#rule-list-rules-destination-prefix-list) below.
|
|
157
157
|
|
|
158
|
-
<a id="rule-list-rules-insert-service"></a>• [`insert_service`](#rule-list-rules-insert-service) - Optional Block<br>
|
|
158
|
+
<a id="rule-list-rules-insert-service"></a>• [`insert_service`](#rule-list-rules-insert-service) - Optional Block<br>Action to forward traffic to external service<br>See [Insert Service](#rule-list-rules-insert-service) below.
|
|
159
159
|
|
|
160
|
-
<a id="rule-list-rules-inside-destinations"></a>• [`inside_destinations`](#rule-list-rules-inside-destinations) - Optional Block<br>
|
|
160
|
+
<a id="rule-list-rules-inside-destinations"></a>• [`inside_destinations`](#rule-list-rules-inside-destinations) - Optional Block<br>Can be used for messages where no values are needed
|
|
161
161
|
|
|
162
|
-
<a id="rule-list-rules-inside-sources"></a>• [`inside_sources`](#rule-list-rules-inside-sources) - Optional Block<br>
|
|
162
|
+
<a id="rule-list-rules-inside-sources"></a>• [`inside_sources`](#rule-list-rules-inside-sources) - Optional Block<br>Can be used for messages where no values are needed
|
|
163
163
|
|
|
164
|
-
<a id="rule-list-rules-label-matcher"></a>• [`label_matcher`](#rule-list-rules-label-matcher) - Optional Block<br>Label
|
|
164
|
+
<a id="rule-list-rules-label-matcher"></a>• [`label_matcher`](#rule-list-rules-label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#rule-list-rules-label-matcher) below.
|
|
165
165
|
|
|
166
|
-
<a id="rule-list-rules-metadata"></a>• [`metadata`](#rule-list-rules-metadata) - Optional Block<br>
|
|
166
|
+
<a id="rule-list-rules-metadata"></a>• [`metadata`](#rule-list-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#rule-list-rules-metadata) below.
|
|
167
167
|
|
|
168
|
-
<a id="rule-list-rules-outside-destinations"></a>• [`outside_destinations`](#rule-list-rules-outside-destinations) - Optional Block<br>
|
|
168
|
+
<a id="rule-list-rules-outside-destinations"></a>• [`outside_destinations`](#rule-list-rules-outside-destinations) - Optional Block<br>Can be used for messages where no values are needed
|
|
169
169
|
|
|
170
|
-
<a id="rule-list-rules-outside-sources"></a>• [`outside_sources`](#rule-list-rules-outside-sources) - Optional Block<br>
|
|
170
|
+
<a id="rule-list-rules-outside-sources"></a>• [`outside_sources`](#rule-list-rules-outside-sources) - Optional Block<br>Can be used for messages where no values are needed
|
|
171
171
|
|
|
172
172
|
<a id="rule-list-rules-protocol-port-range"></a>• [`protocol_port_range`](#rule-list-rules-protocol-port-range) - Optional Block<br>Protocol and Port. Protocol and Port ranges<br>See [Protocol Port Range](#rule-list-rules-protocol-port-range) below.
|
|
173
173
|
|
|
174
174
|
<a id="rule-list-rules-source-aws-vpc-ids"></a>• [`source_aws_vpc_ids`](#rule-list-rules-source-aws-vpc-ids) - Optional Block<br>AWS VPC List. List of VPC Identifiers in AWS<br>See [Source AWS VPC Ids](#rule-list-rules-source-aws-vpc-ids) below.
|
|
175
175
|
|
|
176
|
-
<a id="rule-list-rules-source-ip-prefix-set"></a>• [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) - Optional Block<br>
|
|
176
|
+
<a id="rule-list-rules-source-ip-prefix-set"></a>• [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Source IP Prefix Set](#rule-list-rules-source-ip-prefix-set) below.
|
|
177
177
|
|
|
178
|
-
<a id="rule-list-rules-source-label-selector"></a>• [`source_label_selector`](#rule-list-rules-source-label-selector) - Optional Block<br>
|
|
178
|
+
<a id="rule-list-rules-source-label-selector"></a>• [`source_label_selector`](#rule-list-rules-source-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Source Label Selector](#rule-list-rules-source-label-selector) below.
|
|
179
179
|
|
|
180
|
-
<a id="rule-list-rules-source-prefix-list"></a>• [`source_prefix_list`](#rule-list-rules-source-prefix-list) - Optional Block<br>
|
|
180
|
+
<a id="rule-list-rules-source-prefix-list"></a>• [`source_prefix_list`](#rule-list-rules-source-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Source Prefix List](#rule-list-rules-source-prefix-list) below.
|
|
181
181
|
|
|
182
182
|
#### Rule List Rules Advanced Action
|
|
183
183
|
|
|
184
184
|
An [`advanced_action`](#rule-list-rules-advanced-action) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
185
185
|
|
|
186
|
-
<a id="rule-list-rules-advanced-action-action"></a>• [`action`](#rule-list-rules-advanced-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG]
|
|
186
|
+
<a id="rule-list-rules-advanced-action-action"></a>• [`action`](#rule-list-rules-advanced-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG] Choice to choose logging or no logging This works together with option selected via NetworkPolicyRuleAction or any other action specified x-
|
|
187
187
|
|
|
188
188
|
#### Rule List Rules Applications
|
|
189
189
|
|
|
@@ -195,13 +195,13 @@ An [`applications`](#rule-list-rules-applications) block (within [`rule_list.rul
|
|
|
195
195
|
|
|
196
196
|
A [`destination_aws_vpc_ids`](#rule-list-rules-destination-aws-vpc-ids) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
197
197
|
|
|
198
|
-
<a id="vpc-id-5f1d03"></a>• [`vpc_id`](#vpc-id-5f1d03) - Optional List<br>
|
|
198
|
+
<a id="vpc-id-5f1d03"></a>• [`vpc_id`](#vpc-id-5f1d03) - Optional List<br>List of VPC Identifiers in AWS
|
|
199
199
|
|
|
200
200
|
#### Rule List Rules Destination IP Prefix Set
|
|
201
201
|
|
|
202
202
|
A [`destination_ip_prefix_set`](#set-c1c996) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
203
203
|
|
|
204
|
-
<a id="ref-f1c1ed"></a>• [`ref`](#ref-f1c1ed) - Optional Block<br>
|
|
204
|
+
<a id="ref-f1c1ed"></a>• [`ref`](#ref-f1c1ed) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#ref-f1c1ed) below.
|
|
205
205
|
|
|
206
206
|
#### Rule List Rules Destination IP Prefix Set Ref
|
|
207
207
|
|
|
@@ -211,35 +211,35 @@ A [`destination_ip_prefix_set`](#set-c1c996) block (within [`rule_list.rules`](#
|
|
|
211
211
|
|
|
212
212
|
A [`destination_label_selector`](#selector-f5569f) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
213
213
|
|
|
214
|
-
<a id="expressions-047a07"></a>• [`expressions`](#expressions-047a07) - Optional List<br>
|
|
214
|
+
<a id="expressions-047a07"></a>• [`expressions`](#expressions-047a07) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
215
215
|
|
|
216
216
|
#### Rule List Rules Destination Prefix List
|
|
217
217
|
|
|
218
218
|
A [`destination_prefix_list`](#rule-list-rules-destination-prefix-list) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
219
219
|
|
|
220
|
-
<a id="prefixes-4dff5c"></a>• [`prefixes`](#prefixes-4dff5c) - Optional List<br>
|
|
220
|
+
<a id="prefixes-4dff5c"></a>• [`prefixes`](#prefixes-4dff5c) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
221
221
|
|
|
222
222
|
#### Rule List Rules Insert Service
|
|
223
223
|
|
|
224
224
|
An [`insert_service`](#rule-list-rules-insert-service) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
225
225
|
|
|
226
|
-
<a id="service-b8915d"></a>• [`nfv_service`](#service-b8915d) - Optional Block<br>
|
|
226
|
+
<a id="service-b8915d"></a>• [`nfv_service`](#service-b8915d) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Nfv Service](#service-b8915d) below.
|
|
227
227
|
|
|
228
228
|
#### Rule List Rules Insert Service Nfv Service
|
|
229
229
|
|
|
230
230
|
A [`nfv_service`](#service-b8915d) block (within [`rule_list.rules.insert_service`](#rule-list-rules-insert-service)) supports the following:
|
|
231
231
|
|
|
232
|
-
<a id="name-d47ddb"></a>• [`name`](#name-d47ddb) - Optional String<br>
|
|
232
|
+
<a id="name-d47ddb"></a>• [`name`](#name-d47ddb) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
233
233
|
|
|
234
|
-
<a id="namespace-d44c62"></a>• [`namespace`](#namespace-d44c62) - Optional String<br>
|
|
234
|
+
<a id="namespace-d44c62"></a>• [`namespace`](#namespace-d44c62) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
235
235
|
|
|
236
|
-
<a id="tenant-0d7aca"></a>• [`tenant`](#tenant-0d7aca) - Optional String<br>
|
|
236
|
+
<a id="tenant-0d7aca"></a>• [`tenant`](#tenant-0d7aca) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
237
237
|
|
|
238
238
|
#### Rule List Rules Label Matcher
|
|
239
239
|
|
|
240
240
|
A [`label_matcher`](#rule-list-rules-label-matcher) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
241
241
|
|
|
242
|
-
<a id="rule-list-rules-label-matcher-keys"></a>• [`keys`](#rule-list-rules-label-matcher-keys) - Optional List<br>
|
|
242
|
+
<a id="rule-list-rules-label-matcher-keys"></a>• [`keys`](#rule-list-rules-label-matcher-keys) - Optional List<br>The list of label key names that have to match
|
|
243
243
|
|
|
244
244
|
#### Rule List Rules Metadata
|
|
245
245
|
|
|
@@ -247,27 +247,27 @@ A [`metadata`](#rule-list-rules-metadata) block (within [`rule_list.rules`](#rul
|
|
|
247
247
|
|
|
248
248
|
<a id="spec-118a99"></a>• [`description_spec`](#spec-118a99) - Optional String<br>Description. Human readable description
|
|
249
249
|
|
|
250
|
-
<a id="rule-list-rules-metadata-name"></a>• [`name`](#rule-list-rules-metadata-name) - Optional String<br>Name
|
|
250
|
+
<a id="rule-list-rules-metadata-name"></a>• [`name`](#rule-list-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
251
251
|
|
|
252
252
|
#### Rule List Rules Protocol Port Range
|
|
253
253
|
|
|
254
254
|
A [`protocol_port_range`](#rule-list-rules-protocol-port-range) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
255
255
|
|
|
256
|
-
<a id="ranges-73bb0a"></a>• [`port_ranges`](#ranges-73bb0a) - Optional List<br>List of
|
|
256
|
+
<a id="ranges-73bb0a"></a>• [`port_ranges`](#ranges-73bb0a) - Optional List<br>List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
|
|
257
257
|
|
|
258
|
-
<a id="protocol-9dade8"></a>• [`protocol`](#protocol-9dade8) - Optional String<br>Protocol
|
|
258
|
+
<a id="protocol-9dade8"></a>• [`protocol`](#protocol-9dade8) - Optional String<br>Protocol in IP packet to be used as match criteria Values are TCP, UDP, and ICMP
|
|
259
259
|
|
|
260
260
|
#### Rule List Rules Source AWS VPC Ids
|
|
261
261
|
|
|
262
262
|
A [`source_aws_vpc_ids`](#rule-list-rules-source-aws-vpc-ids) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
263
263
|
|
|
264
|
-
<a id="vpc-id-a05612"></a>• [`vpc_id`](#vpc-id-a05612) - Optional List<br>
|
|
264
|
+
<a id="vpc-id-a05612"></a>• [`vpc_id`](#vpc-id-a05612) - Optional List<br>List of VPC Identifiers in AWS
|
|
265
265
|
|
|
266
266
|
#### Rule List Rules Source IP Prefix Set
|
|
267
267
|
|
|
268
268
|
A [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
269
269
|
|
|
270
|
-
<a id="ref-f78649"></a>• [`ref`](#ref-f78649) - Optional Block<br>
|
|
270
|
+
<a id="ref-f78649"></a>• [`ref`](#ref-f78649) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#ref-f78649) below.
|
|
271
271
|
|
|
272
272
|
#### Rule List Rules Source IP Prefix Set Ref
|
|
273
273
|
|
|
@@ -277,13 +277,13 @@ A [`source_ip_prefix_set`](#rule-list-rules-source-ip-prefix-set) block (within
|
|
|
277
277
|
|
|
278
278
|
A [`source_label_selector`](#rule-list-rules-source-label-selector) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
279
279
|
|
|
280
|
-
<a id="expressions-eab55f"></a>• [`expressions`](#expressions-eab55f) - Optional List<br>
|
|
280
|
+
<a id="expressions-eab55f"></a>• [`expressions`](#expressions-eab55f) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
281
281
|
|
|
282
282
|
#### Rule List Rules Source Prefix List
|
|
283
283
|
|
|
284
284
|
A [`source_prefix_list`](#rule-list-rules-source-prefix-list) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
285
285
|
|
|
286
|
-
<a id="prefixes-58916b"></a>• [`prefixes`](#prefixes-58916b) - Optional List<br>
|
|
286
|
+
<a id="prefixes-58916b"></a>• [`prefixes`](#prefixes-58916b) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
287
287
|
|
|
288
288
|
#### Timeouts
|
|
289
289
|
|