@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +104 -283
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -32,15 +32,15 @@ resource "f5xc_network_policy_view" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
35
|
+
# Ordered list of rules applied to connections from policy ...
|
|
36
36
|
egress_rules {
|
|
37
37
|
# Configure egress_rules settings
|
|
38
38
|
}
|
|
39
|
-
# Network Policy Rule Advanced Action
|
|
39
|
+
# Network Policy Rule Advanced Action provides additional O...
|
|
40
40
|
adv_action {
|
|
41
41
|
# Configure adv_action settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
43
|
+
# Can be used for messages where no values are needed.
|
|
44
44
|
all_tcp_traffic {
|
|
45
45
|
# Configure all_tcp_traffic settings
|
|
46
46
|
}
|
|
@@ -66,11 +66,11 @@ resource "f5xc_network_policy_view" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="egress-rules"></a>• [`egress_rules`](#egress-rules) - Optional Block<br>
|
|
69
|
+
<a id="egress-rules"></a>• [`egress_rules`](#egress-rules) - Optional Block<br>Ordered list of rules applied to connections from policy endpoints<br>See [Egress Rules](#egress-rules) below for details.
|
|
70
70
|
|
|
71
|
-
<a id="endpoint"></a>• [`endpoint`](#endpoint) - Optional Block<br>
|
|
71
|
+
<a id="endpoint"></a>• [`endpoint`](#endpoint) - Optional Block<br>Shape of the endpoint choices for a view<br>See [Endpoint](#endpoint) below for details.
|
|
72
72
|
|
|
73
|
-
<a id="ingress-rules"></a>• [`ingress_rules`](#ingress-rules) - Optional Block<br>
|
|
73
|
+
<a id="ingress-rules"></a>• [`ingress_rules`](#ingress-rules) - Optional Block<br>Ordered list of rules applied to connections to policy endpoints<br>See [Ingress Rules](#ingress-rules) below for details.
|
|
74
74
|
|
|
75
75
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
76
76
|
|
|
@@ -86,33 +86,33 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
86
86
|
|
|
87
87
|
An [`egress_rules`](#egress-rules) block supports the following:
|
|
88
88
|
|
|
89
|
-
<a id="egress-rules-action"></a>• [`action`](#egress-rules-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] Network
|
|
89
|
+
<a id="egress-rules-action"></a>• [`action`](#egress-rules-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] Network policy rule action configures the action to be taken on rule match Apply deny action on rule match Apply allow action on rule match
|
|
90
90
|
|
|
91
|
-
<a id="egress-rules-adv-action"></a>• [`adv_action`](#egress-rules-adv-action) - Optional Block<br>Network Policy Rule Advanced Action
|
|
91
|
+
<a id="egress-rules-adv-action"></a>• [`adv_action`](#egress-rules-adv-action) - Optional Block<br>Network Policy Rule Advanced Action provides additional OPTIONS along with RuleAction and PBRRuleAction<br>See [Adv Action](#egress-rules-adv-action) below.
|
|
92
92
|
|
|
93
|
-
<a id="egress-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#egress-rules-all-tcp-traffic) - Optional Block<br>
|
|
93
|
+
<a id="egress-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#egress-rules-all-tcp-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
94
94
|
|
|
95
|
-
<a id="egress-rules-all-traffic"></a>• [`all_traffic`](#egress-rules-all-traffic) - Optional Block<br>
|
|
95
|
+
<a id="egress-rules-all-traffic"></a>• [`all_traffic`](#egress-rules-all-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
96
96
|
|
|
97
|
-
<a id="egress-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#egress-rules-all-udp-traffic) - Optional Block<br>
|
|
97
|
+
<a id="egress-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#egress-rules-all-udp-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
98
98
|
|
|
99
|
-
<a id="egress-rules-any"></a>• [`any`](#egress-rules-any) - Optional Block<br>
|
|
99
|
+
<a id="egress-rules-any"></a>• [`any`](#egress-rules-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
100
100
|
|
|
101
101
|
<a id="egress-rules-applications"></a>• [`applications`](#egress-rules-applications) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#egress-rules-applications) below.
|
|
102
102
|
|
|
103
|
-
<a id="egress-rules-inside-endpoints"></a>• [`inside_endpoints`](#egress-rules-inside-endpoints) - Optional Block<br>
|
|
103
|
+
<a id="egress-rules-inside-endpoints"></a>• [`inside_endpoints`](#egress-rules-inside-endpoints) - Optional Block<br>Can be used for messages where no values are needed
|
|
104
104
|
|
|
105
|
-
<a id="egress-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#egress-rules-ip-prefix-set) - Optional Block<br>
|
|
105
|
+
<a id="egress-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#egress-rules-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#egress-rules-ip-prefix-set) below.
|
|
106
106
|
|
|
107
|
-
<a id="egress-rules-label-matcher"></a>• [`label_matcher`](#egress-rules-label-matcher) - Optional Block<br>Label
|
|
107
|
+
<a id="egress-rules-label-matcher"></a>• [`label_matcher`](#egress-rules-label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#egress-rules-label-matcher) below.
|
|
108
108
|
|
|
109
|
-
<a id="egress-rules-label-selector"></a>• [`label_selector`](#egress-rules-label-selector) - Optional Block<br>
|
|
109
|
+
<a id="egress-rules-label-selector"></a>• [`label_selector`](#egress-rules-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Label Selector](#egress-rules-label-selector) below.
|
|
110
110
|
|
|
111
|
-
<a id="egress-rules-metadata"></a>• [`metadata`](#egress-rules-metadata) - Optional Block<br>
|
|
111
|
+
<a id="egress-rules-metadata"></a>• [`metadata`](#egress-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#egress-rules-metadata) below.
|
|
112
112
|
|
|
113
|
-
<a id="egress-rules-outside-endpoints"></a>• [`outside_endpoints`](#egress-rules-outside-endpoints) - Optional Block<br>
|
|
113
|
+
<a id="egress-rules-outside-endpoints"></a>• [`outside_endpoints`](#egress-rules-outside-endpoints) - Optional Block<br>Can be used for messages where no values are needed
|
|
114
114
|
|
|
115
|
-
<a id="egress-rules-prefix-list"></a>• [`prefix_list`](#egress-rules-prefix-list) - Optional Block<br>
|
|
115
|
+
<a id="egress-rules-prefix-list"></a>• [`prefix_list`](#egress-rules-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#egress-rules-prefix-list) below.
|
|
116
116
|
|
|
117
117
|
<a id="egress-rules-protocol-port-range"></a>• [`protocol_port_range`](#egress-rules-protocol-port-range) - Optional Block<br>Protocol and Port. Protocol and Port ranges<br>See [Protocol Port Range](#egress-rules-protocol-port-range) below.
|
|
118
118
|
|
|
@@ -120,7 +120,7 @@ An [`egress_rules`](#egress-rules) block supports the following:
|
|
|
120
120
|
|
|
121
121
|
An [`adv_action`](#egress-rules-adv-action) block (within [`egress_rules`](#egress-rules)) supports the following:
|
|
122
122
|
|
|
123
|
-
<a id="egress-rules-adv-action-action"></a>• [`action`](#egress-rules-adv-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG]
|
|
123
|
+
<a id="egress-rules-adv-action-action"></a>• [`action`](#egress-rules-adv-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG] Choice to choose logging or no logging This works together with option selected via NetworkPolicyRuleAction or any other action specified x-
|
|
124
124
|
|
|
125
125
|
#### Egress Rules Applications
|
|
126
126
|
|
|
@@ -132,33 +132,33 @@ An [`applications`](#egress-rules-applications) block (within [`egress_rules`](#
|
|
|
132
132
|
|
|
133
133
|
An [`ip_prefix_set`](#egress-rules-ip-prefix-set) block (within [`egress_rules`](#egress-rules)) supports the following:
|
|
134
134
|
|
|
135
|
-
<a id="egress-rules-ip-prefix-set-ref"></a>• [`ref`](#egress-rules-ip-prefix-set-ref) - Optional Block<br>
|
|
135
|
+
<a id="egress-rules-ip-prefix-set-ref"></a>• [`ref`](#egress-rules-ip-prefix-set-ref) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#egress-rules-ip-prefix-set-ref) below.
|
|
136
136
|
|
|
137
137
|
#### Egress Rules IP Prefix Set Ref
|
|
138
138
|
|
|
139
139
|
A [`ref`](#egress-rules-ip-prefix-set-ref) block (within [`egress_rules.ip_prefix_set`](#egress-rules-ip-prefix-set)) supports the following:
|
|
140
140
|
|
|
141
|
-
<a id="egress-rules-ip-prefix-set-ref-kind"></a>• [`kind`](#egress-rules-ip-prefix-set-ref-kind) - Optional String<br>
|
|
141
|
+
<a id="egress-rules-ip-prefix-set-ref-kind"></a>• [`kind`](#egress-rules-ip-prefix-set-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
142
142
|
|
|
143
|
-
<a id="egress-rules-ip-prefix-set-ref-name"></a>• [`name`](#egress-rules-ip-prefix-set-ref-name) - Optional String<br>
|
|
143
|
+
<a id="egress-rules-ip-prefix-set-ref-name"></a>• [`name`](#egress-rules-ip-prefix-set-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
144
144
|
|
|
145
|
-
<a id="namespace-600e0f"></a>• [`namespace`](#namespace-600e0f) - Optional String<br>
|
|
145
|
+
<a id="namespace-600e0f"></a>• [`namespace`](#namespace-600e0f) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
146
146
|
|
|
147
|
-
<a id="egress-rules-ip-prefix-set-ref-tenant"></a>• [`tenant`](#egress-rules-ip-prefix-set-ref-tenant) - Optional String<br>
|
|
147
|
+
<a id="egress-rules-ip-prefix-set-ref-tenant"></a>• [`tenant`](#egress-rules-ip-prefix-set-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
148
148
|
|
|
149
|
-
<a id="egress-rules-ip-prefix-set-ref-uid"></a>• [`uid`](#egress-rules-ip-prefix-set-ref-uid) - Optional String<br>
|
|
149
|
+
<a id="egress-rules-ip-prefix-set-ref-uid"></a>• [`uid`](#egress-rules-ip-prefix-set-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
150
150
|
|
|
151
151
|
#### Egress Rules Label Matcher
|
|
152
152
|
|
|
153
153
|
A [`label_matcher`](#egress-rules-label-matcher) block (within [`egress_rules`](#egress-rules)) supports the following:
|
|
154
154
|
|
|
155
|
-
<a id="egress-rules-label-matcher-keys"></a>• [`keys`](#egress-rules-label-matcher-keys) - Optional List<br>
|
|
155
|
+
<a id="egress-rules-label-matcher-keys"></a>• [`keys`](#egress-rules-label-matcher-keys) - Optional List<br>The list of label key names that have to match
|
|
156
156
|
|
|
157
157
|
#### Egress Rules Label Selector
|
|
158
158
|
|
|
159
159
|
A [`label_selector`](#egress-rules-label-selector) block (within [`egress_rules`](#egress-rules)) supports the following:
|
|
160
160
|
|
|
161
|
-
<a id="egress-rules-label-selector-expressions"></a>• [`expressions`](#egress-rules-label-selector-expressions) - Optional List<br>
|
|
161
|
+
<a id="egress-rules-label-selector-expressions"></a>• [`expressions`](#egress-rules-label-selector-expressions) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
162
162
|
|
|
163
163
|
#### Egress Rules Metadata
|
|
164
164
|
|
|
@@ -166,79 +166,79 @@ A [`metadata`](#egress-rules-metadata) block (within [`egress_rules`](#egress-ru
|
|
|
166
166
|
|
|
167
167
|
<a id="egress-rules-metadata-description-spec"></a>• [`description_spec`](#egress-rules-metadata-description-spec) - Optional String<br>Description. Human readable description
|
|
168
168
|
|
|
169
|
-
<a id="egress-rules-metadata-name"></a>• [`name`](#egress-rules-metadata-name) - Optional String<br>Name
|
|
169
|
+
<a id="egress-rules-metadata-name"></a>• [`name`](#egress-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
170
170
|
|
|
171
171
|
#### Egress Rules Prefix List
|
|
172
172
|
|
|
173
173
|
A [`prefix_list`](#egress-rules-prefix-list) block (within [`egress_rules`](#egress-rules)) supports the following:
|
|
174
174
|
|
|
175
|
-
<a id="egress-rules-prefix-list-prefixes"></a>• [`prefixes`](#egress-rules-prefix-list-prefixes) - Optional List<br>
|
|
175
|
+
<a id="egress-rules-prefix-list-prefixes"></a>• [`prefixes`](#egress-rules-prefix-list-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
176
176
|
|
|
177
177
|
#### Egress Rules Protocol Port Range
|
|
178
178
|
|
|
179
179
|
A [`protocol_port_range`](#egress-rules-protocol-port-range) block (within [`egress_rules`](#egress-rules)) supports the following:
|
|
180
180
|
|
|
181
|
-
<a id="ranges-45e9df"></a>• [`port_ranges`](#ranges-45e9df) - Optional List<br>List of
|
|
181
|
+
<a id="ranges-45e9df"></a>• [`port_ranges`](#ranges-45e9df) - Optional List<br>List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
|
|
182
182
|
|
|
183
|
-
<a id="protocol-02e63d"></a>• [`protocol`](#protocol-02e63d) - Optional String<br>Protocol
|
|
183
|
+
<a id="protocol-02e63d"></a>• [`protocol`](#protocol-02e63d) - Optional String<br>Protocol in IP packet to be used as match criteria Values are TCP, UDP, and ICMP
|
|
184
184
|
|
|
185
185
|
#### Endpoint
|
|
186
186
|
|
|
187
187
|
An [`endpoint`](#endpoint) block supports the following:
|
|
188
188
|
|
|
189
|
-
<a id="endpoint-any"></a>• [`any`](#endpoint-any) - Optional Block<br>
|
|
189
|
+
<a id="endpoint-any"></a>• [`any`](#endpoint-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
190
190
|
|
|
191
|
-
<a id="endpoint-inside-endpoints"></a>• [`inside_endpoints`](#endpoint-inside-endpoints) - Optional Block<br>
|
|
191
|
+
<a id="endpoint-inside-endpoints"></a>• [`inside_endpoints`](#endpoint-inside-endpoints) - Optional Block<br>Can be used for messages where no values are needed
|
|
192
192
|
|
|
193
|
-
<a id="endpoint-label-selector"></a>• [`label_selector`](#endpoint-label-selector) - Optional Block<br>
|
|
193
|
+
<a id="endpoint-label-selector"></a>• [`label_selector`](#endpoint-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Label Selector](#endpoint-label-selector) below.
|
|
194
194
|
|
|
195
|
-
<a id="endpoint-outside-endpoints"></a>• [`outside_endpoints`](#endpoint-outside-endpoints) - Optional Block<br>
|
|
195
|
+
<a id="endpoint-outside-endpoints"></a>• [`outside_endpoints`](#endpoint-outside-endpoints) - Optional Block<br>Can be used for messages where no values are needed
|
|
196
196
|
|
|
197
|
-
<a id="endpoint-prefix-list"></a>• [`prefix_list`](#endpoint-prefix-list) - Optional Block<br>
|
|
197
|
+
<a id="endpoint-prefix-list"></a>• [`prefix_list`](#endpoint-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#endpoint-prefix-list) below.
|
|
198
198
|
|
|
199
199
|
#### Endpoint Label Selector
|
|
200
200
|
|
|
201
201
|
A [`label_selector`](#endpoint-label-selector) block (within [`endpoint`](#endpoint)) supports the following:
|
|
202
202
|
|
|
203
|
-
<a id="endpoint-label-selector-expressions"></a>• [`expressions`](#endpoint-label-selector-expressions) - Optional List<br>
|
|
203
|
+
<a id="endpoint-label-selector-expressions"></a>• [`expressions`](#endpoint-label-selector-expressions) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
204
204
|
|
|
205
205
|
#### Endpoint Prefix List
|
|
206
206
|
|
|
207
207
|
A [`prefix_list`](#endpoint-prefix-list) block (within [`endpoint`](#endpoint)) supports the following:
|
|
208
208
|
|
|
209
|
-
<a id="endpoint-prefix-list-prefixes"></a>• [`prefixes`](#endpoint-prefix-list-prefixes) - Optional List<br>
|
|
209
|
+
<a id="endpoint-prefix-list-prefixes"></a>• [`prefixes`](#endpoint-prefix-list-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
210
210
|
|
|
211
211
|
#### Ingress Rules
|
|
212
212
|
|
|
213
213
|
An [`ingress_rules`](#ingress-rules) block supports the following:
|
|
214
214
|
|
|
215
|
-
<a id="ingress-rules-action"></a>• [`action`](#ingress-rules-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] Network
|
|
215
|
+
<a id="ingress-rules-action"></a>• [`action`](#ingress-rules-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] Network policy rule action configures the action to be taken on rule match Apply deny action on rule match Apply allow action on rule match
|
|
216
216
|
|
|
217
|
-
<a id="ingress-rules-adv-action"></a>• [`adv_action`](#ingress-rules-adv-action) - Optional Block<br>Network Policy Rule Advanced Action
|
|
217
|
+
<a id="ingress-rules-adv-action"></a>• [`adv_action`](#ingress-rules-adv-action) - Optional Block<br>Network Policy Rule Advanced Action provides additional OPTIONS along with RuleAction and PBRRuleAction<br>See [Adv Action](#ingress-rules-adv-action) below.
|
|
218
218
|
|
|
219
|
-
<a id="ingress-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#ingress-rules-all-tcp-traffic) - Optional Block<br>
|
|
219
|
+
<a id="ingress-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#ingress-rules-all-tcp-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
220
220
|
|
|
221
|
-
<a id="ingress-rules-all-traffic"></a>• [`all_traffic`](#ingress-rules-all-traffic) - Optional Block<br>
|
|
221
|
+
<a id="ingress-rules-all-traffic"></a>• [`all_traffic`](#ingress-rules-all-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
222
222
|
|
|
223
|
-
<a id="ingress-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#ingress-rules-all-udp-traffic) - Optional Block<br>
|
|
223
|
+
<a id="ingress-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#ingress-rules-all-udp-traffic) - Optional Block<br>Can be used for messages where no values are needed
|
|
224
224
|
|
|
225
|
-
<a id="ingress-rules-any"></a>• [`any`](#ingress-rules-any) - Optional Block<br>
|
|
225
|
+
<a id="ingress-rules-any"></a>• [`any`](#ingress-rules-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
226
226
|
|
|
227
227
|
<a id="ingress-rules-applications"></a>• [`applications`](#ingress-rules-applications) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#ingress-rules-applications) below.
|
|
228
228
|
|
|
229
|
-
<a id="ingress-rules-inside-endpoints"></a>• [`inside_endpoints`](#ingress-rules-inside-endpoints) - Optional Block<br>
|
|
229
|
+
<a id="ingress-rules-inside-endpoints"></a>• [`inside_endpoints`](#ingress-rules-inside-endpoints) - Optional Block<br>Can be used for messages where no values are needed
|
|
230
230
|
|
|
231
|
-
<a id="ingress-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#ingress-rules-ip-prefix-set) - Optional Block<br>
|
|
231
|
+
<a id="ingress-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#ingress-rules-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#ingress-rules-ip-prefix-set) below.
|
|
232
232
|
|
|
233
|
-
<a id="ingress-rules-label-matcher"></a>• [`label_matcher`](#ingress-rules-label-matcher) - Optional Block<br>Label
|
|
233
|
+
<a id="ingress-rules-label-matcher"></a>• [`label_matcher`](#ingress-rules-label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#ingress-rules-label-matcher) below.
|
|
234
234
|
|
|
235
|
-
<a id="ingress-rules-label-selector"></a>• [`label_selector`](#ingress-rules-label-selector) - Optional Block<br>
|
|
235
|
+
<a id="ingress-rules-label-selector"></a>• [`label_selector`](#ingress-rules-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Label Selector](#ingress-rules-label-selector) below.
|
|
236
236
|
|
|
237
|
-
<a id="ingress-rules-metadata"></a>• [`metadata`](#ingress-rules-metadata) - Optional Block<br>
|
|
237
|
+
<a id="ingress-rules-metadata"></a>• [`metadata`](#ingress-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#ingress-rules-metadata) below.
|
|
238
238
|
|
|
239
|
-
<a id="ingress-rules-outside-endpoints"></a>• [`outside_endpoints`](#ingress-rules-outside-endpoints) - Optional Block<br>
|
|
239
|
+
<a id="ingress-rules-outside-endpoints"></a>• [`outside_endpoints`](#ingress-rules-outside-endpoints) - Optional Block<br>Can be used for messages where no values are needed
|
|
240
240
|
|
|
241
|
-
<a id="ingress-rules-prefix-list"></a>• [`prefix_list`](#ingress-rules-prefix-list) - Optional Block<br>
|
|
241
|
+
<a id="ingress-rules-prefix-list"></a>• [`prefix_list`](#ingress-rules-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#ingress-rules-prefix-list) below.
|
|
242
242
|
|
|
243
243
|
<a id="ingress-rules-protocol-port-range"></a>• [`protocol_port_range`](#ingress-rules-protocol-port-range) - Optional Block<br>Protocol and Port. Protocol and Port ranges<br>See [Protocol Port Range](#ingress-rules-protocol-port-range) below.
|
|
244
244
|
|
|
@@ -246,7 +246,7 @@ An [`ingress_rules`](#ingress-rules) block supports the following:
|
|
|
246
246
|
|
|
247
247
|
An [`adv_action`](#ingress-rules-adv-action) block (within [`ingress_rules`](#ingress-rules)) supports the following:
|
|
248
248
|
|
|
249
|
-
<a id="ingress-rules-adv-action-action"></a>• [`action`](#ingress-rules-adv-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG]
|
|
249
|
+
<a id="ingress-rules-adv-action-action"></a>• [`action`](#ingress-rules-adv-action-action) - Optional String Defaults to `NOLOG`<br>Possible values are `NOLOG`, `LOG`<br>[Enum: NOLOG|LOG] Choice to choose logging or no logging This works together with option selected via NetworkPolicyRuleAction or any other action specified x-
|
|
250
250
|
|
|
251
251
|
#### Ingress Rules Applications
|
|
252
252
|
|
|
@@ -258,33 +258,33 @@ An [`applications`](#ingress-rules-applications) block (within [`ingress_rules`]
|
|
|
258
258
|
|
|
259
259
|
An [`ip_prefix_set`](#ingress-rules-ip-prefix-set) block (within [`ingress_rules`](#ingress-rules)) supports the following:
|
|
260
260
|
|
|
261
|
-
<a id="ingress-rules-ip-prefix-set-ref"></a>• [`ref`](#ingress-rules-ip-prefix-set-ref) - Optional Block<br>
|
|
261
|
+
<a id="ingress-rules-ip-prefix-set-ref"></a>• [`ref`](#ingress-rules-ip-prefix-set-ref) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#ingress-rules-ip-prefix-set-ref) below.
|
|
262
262
|
|
|
263
263
|
#### Ingress Rules IP Prefix Set Ref
|
|
264
264
|
|
|
265
265
|
A [`ref`](#ingress-rules-ip-prefix-set-ref) block (within [`ingress_rules.ip_prefix_set`](#ingress-rules-ip-prefix-set)) supports the following:
|
|
266
266
|
|
|
267
|
-
<a id="ingress-rules-ip-prefix-set-ref-kind"></a>• [`kind`](#ingress-rules-ip-prefix-set-ref-kind) - Optional String<br>
|
|
267
|
+
<a id="ingress-rules-ip-prefix-set-ref-kind"></a>• [`kind`](#ingress-rules-ip-prefix-set-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
268
268
|
|
|
269
|
-
<a id="ingress-rules-ip-prefix-set-ref-name"></a>• [`name`](#ingress-rules-ip-prefix-set-ref-name) - Optional String<br>
|
|
269
|
+
<a id="ingress-rules-ip-prefix-set-ref-name"></a>• [`name`](#ingress-rules-ip-prefix-set-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
270
270
|
|
|
271
|
-
<a id="namespace-3e666e"></a>• [`namespace`](#namespace-3e666e) - Optional String<br>
|
|
271
|
+
<a id="namespace-3e666e"></a>• [`namespace`](#namespace-3e666e) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
272
272
|
|
|
273
|
-
<a id="ingress-rules-ip-prefix-set-ref-tenant"></a>• [`tenant`](#ingress-rules-ip-prefix-set-ref-tenant) - Optional String<br>
|
|
273
|
+
<a id="ingress-rules-ip-prefix-set-ref-tenant"></a>• [`tenant`](#ingress-rules-ip-prefix-set-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
274
274
|
|
|
275
|
-
<a id="ingress-rules-ip-prefix-set-ref-uid"></a>• [`uid`](#ingress-rules-ip-prefix-set-ref-uid) - Optional String<br>
|
|
275
|
+
<a id="ingress-rules-ip-prefix-set-ref-uid"></a>• [`uid`](#ingress-rules-ip-prefix-set-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
276
276
|
|
|
277
277
|
#### Ingress Rules Label Matcher
|
|
278
278
|
|
|
279
279
|
A [`label_matcher`](#ingress-rules-label-matcher) block (within [`ingress_rules`](#ingress-rules)) supports the following:
|
|
280
280
|
|
|
281
|
-
<a id="ingress-rules-label-matcher-keys"></a>• [`keys`](#ingress-rules-label-matcher-keys) - Optional List<br>
|
|
281
|
+
<a id="ingress-rules-label-matcher-keys"></a>• [`keys`](#ingress-rules-label-matcher-keys) - Optional List<br>The list of label key names that have to match
|
|
282
282
|
|
|
283
283
|
#### Ingress Rules Label Selector
|
|
284
284
|
|
|
285
285
|
A [`label_selector`](#ingress-rules-label-selector) block (within [`ingress_rules`](#ingress-rules)) supports the following:
|
|
286
286
|
|
|
287
|
-
<a id="expressions-ec199c"></a>• [`expressions`](#expressions-ec199c) - Optional List<br>
|
|
287
|
+
<a id="expressions-ec199c"></a>• [`expressions`](#expressions-ec199c) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
288
288
|
|
|
289
289
|
#### Ingress Rules Metadata
|
|
290
290
|
|
|
@@ -292,21 +292,21 @@ A [`metadata`](#ingress-rules-metadata) block (within [`ingress_rules`](#ingress
|
|
|
292
292
|
|
|
293
293
|
<a id="ingress-rules-metadata-description-spec"></a>• [`description_spec`](#ingress-rules-metadata-description-spec) - Optional String<br>Description. Human readable description
|
|
294
294
|
|
|
295
|
-
<a id="ingress-rules-metadata-name"></a>• [`name`](#ingress-rules-metadata-name) - Optional String<br>Name
|
|
295
|
+
<a id="ingress-rules-metadata-name"></a>• [`name`](#ingress-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
296
296
|
|
|
297
297
|
#### Ingress Rules Prefix List
|
|
298
298
|
|
|
299
299
|
A [`prefix_list`](#ingress-rules-prefix-list) block (within [`ingress_rules`](#ingress-rules)) supports the following:
|
|
300
300
|
|
|
301
|
-
<a id="ingress-rules-prefix-list-prefixes"></a>• [`prefixes`](#ingress-rules-prefix-list-prefixes) - Optional List<br>
|
|
301
|
+
<a id="ingress-rules-prefix-list-prefixes"></a>• [`prefixes`](#ingress-rules-prefix-list-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
302
302
|
|
|
303
303
|
#### Ingress Rules Protocol Port Range
|
|
304
304
|
|
|
305
305
|
A [`protocol_port_range`](#ingress-rules-protocol-port-range) block (within [`ingress_rules`](#ingress-rules)) supports the following:
|
|
306
306
|
|
|
307
|
-
<a id="ranges-a44d5c"></a>• [`port_ranges`](#ranges-a44d5c) - Optional List<br>List of
|
|
307
|
+
<a id="ranges-a44d5c"></a>• [`port_ranges`](#ranges-a44d5c) - Optional List<br>List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
|
|
308
308
|
|
|
309
|
-
<a id="protocol-0bf619"></a>• [`protocol`](#protocol-0bf619) - Optional String<br>Protocol
|
|
309
|
+
<a id="protocol-0bf619"></a>• [`protocol`](#protocol-0bf619) - Optional String<br>Protocol in IP packet to be used as match criteria Values are TCP, UDP, and ICMP
|
|
310
310
|
|
|
311
311
|
#### Timeouts
|
|
312
312
|
|