@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +104 -283
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -67,16 +67,16 @@ resource "f5xc_nfv_service" "example" {
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
69
|
-> **One of the following:**
|
|
70
|
-
• <a id="disable-https-management"></a>[`disable_https_management`](#disable-https-management) - Optional Block<br>
|
|
70
|
+
• <a id="disable-https-management"></a>[`disable_https_management`](#disable-https-management) - Optional Block<br>Can be used for messages where no values are needed
|
|
71
71
|
|
|
72
72
|
-> **One of the following:**
|
|
73
|
-
• <a id="disable-ssh-access"></a>[`disable_ssh_access`](#disable-ssh-access) - Optional Block<br>
|
|
73
|
+
• <a id="disable-ssh-access"></a>[`disable_ssh_access`](#disable-ssh-access) - Optional Block<br>Can be used for messages where no values are needed
|
|
74
74
|
|
|
75
75
|
<a id="enabled-ssh-access"></a>• [`enabled_ssh_access`](#enabled-ssh-access) - Optional Block<br>SSH based management. SSH based configuration<br>See [Enabled SSH Access](#enabled-ssh-access) below for details.
|
|
76
76
|
|
|
77
77
|
-> **One of the following:**
|
|
78
78
|
• <a id="f5-big-ip-aws-service"></a>[`f5_big_ip_aws_service`](#f5-big-ip-aws-service) - Optional Block<br>Virtual BIG-IP AWS. Virtual BIG-IP specification for AWS<br>See [F5 Big IP AWS Service](#f5-big-ip-aws-service) below for details.
|
|
79
|
-
<br><br>• <a id="palo-alto-fw-service"></a>[`palo_alto_fw_service`](#palo-alto-fw-service) - Optional Block<br>Palo Alto Networks VM-Series
|
|
79
|
+
<br><br>• <a id="palo-alto-fw-service"></a>[`palo_alto_fw_service`](#palo-alto-fw-service) - Optional Block<br>Palo Alto Networks VM-Series next-generation firewall configuration
|
|
80
80
|
|
|
81
81
|
<a id="https-management"></a>• [`https_management`](#https-management) - Optional Block<br>HTTPS based management. HTTPS based configuration<br>See [HTTPS Management](#https-management) below for details.
|
|
82
82
|
|
|
@@ -94,21 +94,21 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
94
94
|
|
|
95
95
|
An [`enabled_ssh_access`](#enabled-ssh-access) block supports the following:
|
|
96
96
|
|
|
97
|
-
<a id="enabled-ssh-access-advertise-on-sli"></a>• [`advertise_on_sli`](#enabled-ssh-access-advertise-on-sli) - Optional Block<br>
|
|
97
|
+
<a id="enabled-ssh-access-advertise-on-sli"></a>• [`advertise_on_sli`](#enabled-ssh-access-advertise-on-sli) - Optional Block<br>Can be used for messages where no values are needed
|
|
98
98
|
|
|
99
|
-
<a id="enabled-ssh-access-advertise-on-slo"></a>• [`advertise_on_slo`](#enabled-ssh-access-advertise-on-slo) - Optional Block<br>
|
|
99
|
+
<a id="enabled-ssh-access-advertise-on-slo"></a>• [`advertise_on_slo`](#enabled-ssh-access-advertise-on-slo) - Optional Block<br>Can be used for messages where no values are needed
|
|
100
100
|
|
|
101
|
-
<a id="enabled-ssh-access-advertise-on-slo-sli"></a>• [`advertise_on_slo_sli`](#enabled-ssh-access-advertise-on-slo-sli) - Optional Block<br>
|
|
101
|
+
<a id="enabled-ssh-access-advertise-on-slo-sli"></a>• [`advertise_on_slo_sli`](#enabled-ssh-access-advertise-on-slo-sli) - Optional Block<br>Can be used for messages where no values are needed
|
|
102
102
|
|
|
103
|
-
<a id="enabled-ssh-access-domain-suffix"></a>• [`domain_suffix`](#enabled-ssh-access-domain-suffix) - Optional String<br>Domain
|
|
103
|
+
<a id="enabled-ssh-access-domain-suffix"></a>• [`domain_suffix`](#enabled-ssh-access-domain-suffix) - Optional String<br>Domain suffix will be used along with node name to form the hostname for SSH node management
|
|
104
104
|
|
|
105
|
-
<a id="enabled-ssh-access-node-ssh-ports"></a>• [`node_ssh_ports`](#enabled-ssh-access-node-ssh-ports) - Optional Block<br>
|
|
105
|
+
<a id="enabled-ssh-access-node-ssh-ports"></a>• [`node_ssh_ports`](#enabled-ssh-access-node-ssh-ports) - Optional Block<br>Enter TCP port and node name per node<br>See [Node SSH Ports](#enabled-ssh-access-node-ssh-ports) below.
|
|
106
106
|
|
|
107
107
|
#### Enabled SSH Access Node SSH Ports
|
|
108
108
|
|
|
109
109
|
A [`node_ssh_ports`](#enabled-ssh-access-node-ssh-ports) block (within [`enabled_ssh_access`](#enabled-ssh-access)) supports the following:
|
|
110
110
|
|
|
111
|
-
<a id="name-111dcd"></a>• [`node_name`](#name-111dcd) - Optional String<br>Node
|
|
111
|
+
<a id="name-111dcd"></a>• [`node_name`](#name-111dcd) - Optional String<br>Node name will be used to match a particular node with the desired TCP port
|
|
112
112
|
|
|
113
113
|
<a id="port-0c5575"></a>• [`ssh_port`](#port-0c5575) - Optional Number<br>SSH Port. Enter TCP port per node
|
|
114
114
|
|
|
@@ -116,29 +116,29 @@ A [`node_ssh_ports`](#enabled-ssh-access-node-ssh-ports) block (within [`enabled
|
|
|
116
116
|
|
|
117
117
|
A [`f5_big_ip_aws_service`](#f5-big-ip-aws-service) block supports the following:
|
|
118
118
|
|
|
119
|
-
<a id="f5-big-ip-aws-service-admin-password"></a>• [`admin_password`](#f5-big-ip-aws-service-admin-password) - Optional Block<br>
|
|
119
|
+
<a id="f5-big-ip-aws-service-admin-password"></a>• [`admin_password`](#f5-big-ip-aws-service-admin-password) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Admin Password](#f5-big-ip-aws-service-admin-password) below.
|
|
120
120
|
|
|
121
|
-
<a id="f5-big-ip-aws-service-admin-username"></a>• [`admin_username`](#f5-big-ip-aws-service-admin-username) - Optional String<br>Admin Username
|
|
121
|
+
<a id="f5-big-ip-aws-service-admin-username"></a>• [`admin_username`](#f5-big-ip-aws-service-admin-username) - Optional String<br>Admin Username for BIG-IP
|
|
122
122
|
|
|
123
123
|
<a id="params-7322b1"></a>• [`aws_tgw_site_params`](#params-7322b1) - Optional Block<br>BIG-IP AWS TGW Site. BIG-IP AWS TGW site specification<br>See [AWS TGW Site Params](#params-7322b1) below.
|
|
124
124
|
|
|
125
|
-
<a id="f5-big-ip-aws-service-endpoint-service"></a>• [`endpoint_service`](#f5-big-ip-aws-service-endpoint-service) - Optional Block<br>Endpoint Service
|
|
125
|
+
<a id="f5-big-ip-aws-service-endpoint-service"></a>• [`endpoint_service`](#f5-big-ip-aws-service-endpoint-service) - Optional Block<br>Endpoint Service is a type of NFV service where the packets are destined to NFV and service modifies the destination with a new destination address<br>See [Endpoint Service](#f5-big-ip-aws-service-endpoint-service) below.
|
|
126
126
|
|
|
127
|
-
<a id="image-4d64b2"></a>• [`market_place_image`](#image-4d64b2) - Optional Block<br>BIG-IP AWS Pay as You Go Image
|
|
127
|
+
<a id="image-4d64b2"></a>• [`market_place_image`](#image-4d64b2) - Optional Block<br>BIG-IP AWS Pay as You Go Image Selection<br>See [Market Place Image](#image-4d64b2) below.
|
|
128
128
|
|
|
129
|
-
<a id="f5-big-ip-aws-service-nodes"></a>• [`nodes`](#f5-big-ip-aws-service-nodes) - Optional Block<br>
|
|
129
|
+
<a id="f5-big-ip-aws-service-nodes"></a>• [`nodes`](#f5-big-ip-aws-service-nodes) - Optional Block<br>Specify how and where the service nodes are spawned<br>See [Nodes](#f5-big-ip-aws-service-nodes) below.
|
|
130
130
|
|
|
131
|
-
<a id="f5-big-ip-aws-service-ssh-key"></a>• [`ssh_key`](#f5-big-ip-aws-service-ssh-key) - Optional String<br>Public SSH key
|
|
131
|
+
<a id="f5-big-ip-aws-service-ssh-key"></a>• [`ssh_key`](#f5-big-ip-aws-service-ssh-key) - Optional String<br>Public SSH key for accessing the Big IP nodes
|
|
132
132
|
|
|
133
|
-
<a id="f5-big-ip-aws-service-tags"></a>• [`tags`](#f5-big-ip-aws-service-tags) - Optional Block<br>AWS Tags
|
|
133
|
+
<a id="f5-big-ip-aws-service-tags"></a>• [`tags`](#f5-big-ip-aws-service-tags) - Optional Block<br>AWS Tags is a label consisting of a user-defined key and value. It helps to manage, identify, organize, search for, and filter resources in AWS console
|
|
134
134
|
|
|
135
135
|
#### F5 Big IP AWS Service Admin Password
|
|
136
136
|
|
|
137
137
|
An [`admin_password`](#f5-big-ip-aws-service-admin-password) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
138
138
|
|
|
139
|
-
<a id="info-937ada"></a>• [`blindfold_secret_info`](#info-937ada) - Optional Block<br>
|
|
139
|
+
<a id="info-937ada"></a>• [`blindfold_secret_info`](#info-937ada) - Optional Block<br>BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-937ada) below.
|
|
140
140
|
|
|
141
|
-
<a id="info-a3c75d"></a>• [`clear_secret_info`](#info-a3c75d) - Optional Block<br>
|
|
141
|
+
<a id="info-a3c75d"></a>• [`clear_secret_info`](#info-a3c75d) - Optional Block<br>ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-a3c75d) below.
|
|
142
142
|
|
|
143
143
|
#### F5 Big IP AWS Service Admin Password Blindfold Secret Info
|
|
144
144
|
|
|
@@ -160,29 +160,29 @@ An [`admin_password`](#f5-big-ip-aws-service-admin-password) block (within [`f5_
|
|
|
160
160
|
|
|
161
161
|
An [`endpoint_service`](#f5-big-ip-aws-service-endpoint-service) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
162
162
|
|
|
163
|
-
<a id="slo-ip-6fccc9"></a>• [`advertise_on_slo_ip`](#slo-ip-6fccc9) - Optional Block<br>
|
|
163
|
+
<a id="slo-ip-6fccc9"></a>• [`advertise_on_slo_ip`](#slo-ip-6fccc9) - Optional Block<br>Can be used for messages where no values are needed
|
|
164
164
|
|
|
165
|
-
<a id="external-c6878c"></a>• [`advertise_on_slo_ip_external`](#external-c6878c) - Optional Block<br>
|
|
165
|
+
<a id="external-c6878c"></a>• [`advertise_on_slo_ip_external`](#external-c6878c) - Optional Block<br>Can be used for messages where no values are needed
|
|
166
166
|
|
|
167
|
-
<a id="vip-bf0a34"></a>• [`automatic_vip`](#vip-bf0a34) - Optional Block<br>
|
|
167
|
+
<a id="vip-bf0a34"></a>• [`automatic_vip`](#vip-bf0a34) - Optional Block<br>Can be used for messages where no values are needed
|
|
168
168
|
|
|
169
|
-
<a id="vip-39201b"></a>• [`configured_vip`](#vip-39201b) - Optional String<br>
|
|
169
|
+
<a id="vip-39201b"></a>• [`configured_vip`](#vip-39201b) - Optional String<br>Enter IP address for the default VIP
|
|
170
170
|
|
|
171
171
|
<a id="ports-afbd6c"></a>• [`custom_tcp_ports`](#ports-afbd6c) - Optional Block<br>Port Range List. List of port ranges<br>See [Custom TCP Ports](#ports-afbd6c) below.
|
|
172
172
|
|
|
173
173
|
<a id="ports-775f61"></a>• [`custom_udp_ports`](#ports-775f61) - Optional Block<br>Port Range List. List of port ranges<br>See [Custom UDP Ports](#ports-775f61) below.
|
|
174
174
|
|
|
175
|
-
<a id="ports-4442b0"></a>• [`default_tcp_ports`](#ports-4442b0) - Optional Block<br>
|
|
175
|
+
<a id="ports-4442b0"></a>• [`default_tcp_ports`](#ports-4442b0) - Optional Block<br>Can be used for messages where no values are needed
|
|
176
176
|
|
|
177
|
-
<a id="slo-ip-47bf10"></a>• [`disable_advertise_on_slo_ip`](#slo-ip-47bf10) - Optional Block<br>
|
|
177
|
+
<a id="slo-ip-47bf10"></a>• [`disable_advertise_on_slo_ip`](#slo-ip-47bf10) - Optional Block<br>Can be used for messages where no values are needed
|
|
178
178
|
|
|
179
|
-
<a id="port-926fe7"></a>• [`http_port`](#port-926fe7) - Optional Block<br>
|
|
179
|
+
<a id="port-926fe7"></a>• [`http_port`](#port-926fe7) - Optional Block<br>Can be used for messages where no values are needed
|
|
180
180
|
|
|
181
|
-
<a id="port-440dce"></a>• [`https_port`](#port-440dce) - Optional Block<br>
|
|
181
|
+
<a id="port-440dce"></a>• [`https_port`](#port-440dce) - Optional Block<br>Can be used for messages where no values are needed
|
|
182
182
|
|
|
183
|
-
<a id="ports-4d510f"></a>• [`no_tcp_ports`](#ports-4d510f) - Optional Block<br>
|
|
183
|
+
<a id="ports-4d510f"></a>• [`no_tcp_ports`](#ports-4d510f) - Optional Block<br>Can be used for messages where no values are needed
|
|
184
184
|
|
|
185
|
-
<a id="ports-abc1e4"></a>• [`no_udp_ports`](#ports-abc1e4) - Optional Block<br>
|
|
185
|
+
<a id="ports-abc1e4"></a>• [`no_udp_ports`](#ports-abc1e4) - Optional Block<br>Can be used for messages where no values are needed
|
|
186
186
|
|
|
187
187
|
#### F5 Big IP AWS Service Endpoint Service Custom TCP Ports
|
|
188
188
|
|
|
@@ -200,17 +200,17 @@ An [`endpoint_service`](#f5-big-ip-aws-service-endpoint-service) block (within [
|
|
|
200
200
|
|
|
201
201
|
A [`nodes`](#f5-big-ip-aws-service-nodes) block (within [`f5_big_ip_aws_service`](#f5-big-ip-aws-service)) supports the following:
|
|
202
202
|
|
|
203
|
-
<a id="prefix-e8faa8"></a>• [`automatic_prefix`](#prefix-e8faa8) - Optional Block<br>
|
|
203
|
+
<a id="prefix-e8faa8"></a>• [`automatic_prefix`](#prefix-e8faa8) - Optional Block<br>Can be used for messages where no values are needed
|
|
204
204
|
|
|
205
|
-
<a id="f5-big-ip-aws-service-nodes-aws-az-name"></a>• [`aws_az_name`](#f5-big-ip-aws-service-nodes-aws-az-name) - Optional String<br>
|
|
205
|
+
<a id="f5-big-ip-aws-service-nodes-aws-az-name"></a>• [`aws_az_name`](#f5-big-ip-aws-service-nodes-aws-az-name) - Optional String<br>The AWS Availability Zone must be consistent with the AWS Region chosen. Please select an AZ in the same Region as your TGW Site
|
|
206
206
|
|
|
207
207
|
<a id="f5-big-ip-aws-service-nodes-mgmt-subnet"></a>• [`mgmt_subnet`](#f5-big-ip-aws-service-nodes-mgmt-subnet) - Optional Block<br>AWS Subnet. Parameters for AWS subnet<br>See [Mgmt Subnet](#f5-big-ip-aws-service-nodes-mgmt-subnet) below.
|
|
208
208
|
|
|
209
|
-
<a id="f5-big-ip-aws-service-nodes-node-name"></a>• [`node_name`](#f5-big-ip-aws-service-nodes-node-name) - Optional String<br>Node Name
|
|
209
|
+
<a id="f5-big-ip-aws-service-nodes-node-name"></a>• [`node_name`](#f5-big-ip-aws-service-nodes-node-name) - Optional String<br>Node Name will be used to assign as hostname to the service
|
|
210
210
|
|
|
211
|
-
<a id="subnet-2782dc"></a>• [`reserved_mgmt_subnet`](#subnet-2782dc) - Optional Block<br>
|
|
211
|
+
<a id="subnet-2782dc"></a>• [`reserved_mgmt_subnet`](#subnet-2782dc) - Optional Block<br>Can be used for messages where no values are needed
|
|
212
212
|
|
|
213
|
-
<a id="prefix-53b238"></a>• [`tunnel_prefix`](#prefix-53b238) - Optional String<br>
|
|
213
|
+
<a id="prefix-53b238"></a>• [`tunnel_prefix`](#prefix-53b238) - Optional String<br>Enter IP prefix for the tunnel, it has to be /30
|
|
214
214
|
|
|
215
215
|
#### F5 Big IP AWS Service Nodes Mgmt Subnet
|
|
216
216
|
|
|
@@ -224,9 +224,9 @@ A [`nodes`](#f5-big-ip-aws-service-nodes) block (within [`f5_big_ip_aws_service`
|
|
|
224
224
|
|
|
225
225
|
A [`https_management`](#https-management) block supports the following:
|
|
226
226
|
|
|
227
|
-
<a id="https-management-advertise-on-internet"></a>• [`advertise_on_internet`](#https-management-advertise-on-internet) - Optional Block<br>
|
|
227
|
+
<a id="https-management-advertise-on-internet"></a>• [`advertise_on_internet`](#https-management-advertise-on-internet) - Optional Block<br>Defines a way to advertise a load balancer on public. If optional public_ip is provided, it will only be advertised on RE sites where that public_ip is available<br>See [Advertise On Internet](#https-management-advertise-on-internet) below.
|
|
228
228
|
|
|
229
|
-
<a id="vip-00de2c"></a>• [`advertise_on_internet_default_vip`](#vip-00de2c) - Optional Block<br>
|
|
229
|
+
<a id="vip-00de2c"></a>• [`advertise_on_internet_default_vip`](#vip-00de2c) - Optional Block<br>Can be used for messages where no values are needed
|
|
230
230
|
|
|
231
231
|
<a id="https-management-advertise-on-sli-vip"></a>• [`advertise_on_sli_vip`](#https-management-advertise-on-sli-vip) - Optional Block<br>Inline TLS Parameters. Inline TLS parameters<br>See [Advertise On SLI VIP](#https-management-advertise-on-sli-vip) below.
|
|
232
232
|
|
|
@@ -236,39 +236,39 @@ A [`https_management`](#https-management) block supports the following:
|
|
|
236
236
|
|
|
237
237
|
<a id="https-management-advertise-on-slo-vip"></a>• [`advertise_on_slo_vip`](#https-management-advertise-on-slo-vip) - Optional Block<br>Inline TLS Parameters. Inline TLS parameters<br>See [Advertise On Slo VIP](#https-management-advertise-on-slo-vip) below.
|
|
238
238
|
|
|
239
|
-
<a id="https-management-default-https-port"></a>• [`default_https_port`](#https-management-default-https-port) - Optional Block<br>
|
|
239
|
+
<a id="https-management-default-https-port"></a>• [`default_https_port`](#https-management-default-https-port) - Optional Block<br>Can be used for messages where no values are needed
|
|
240
240
|
|
|
241
|
-
<a id="https-management-domain-suffix"></a>• [`domain_suffix`](#https-management-domain-suffix) - Optional String<br>Domain
|
|
241
|
+
<a id="https-management-domain-suffix"></a>• [`domain_suffix`](#https-management-domain-suffix) - Optional String<br>Domain suffix will be used along with node name to form URL to access node management
|
|
242
242
|
|
|
243
|
-
<a id="https-management-https-port"></a>• [`https_port`](#https-management-https-port) - Optional Number<br>
|
|
243
|
+
<a id="https-management-https-port"></a>• [`https_port`](#https-management-https-port) - Optional Number<br>Enter TCP port number
|
|
244
244
|
|
|
245
245
|
#### HTTPS Management Advertise On Internet
|
|
246
246
|
|
|
247
247
|
An [`advertise_on_internet`](#https-management-advertise-on-internet) block (within [`https_management`](#https-management)) supports the following:
|
|
248
248
|
|
|
249
|
-
<a id="public-ip-e501cc"></a>• [`public_ip`](#public-ip-e501cc) - Optional Block<br>
|
|
249
|
+
<a id="public-ip-e501cc"></a>• [`public_ip`](#public-ip-e501cc) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Public IP](#public-ip-e501cc) below.
|
|
250
250
|
|
|
251
251
|
#### HTTPS Management Advertise On Internet Public IP
|
|
252
252
|
|
|
253
253
|
A [`public_ip`](#public-ip-e501cc) block (within [`https_management.advertise_on_internet`](#https-management-advertise-on-internet)) supports the following:
|
|
254
254
|
|
|
255
|
-
<a id="name-c549a1"></a>• [`name`](#name-c549a1) - Optional String<br>
|
|
255
|
+
<a id="name-c549a1"></a>• [`name`](#name-c549a1) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
256
256
|
|
|
257
|
-
<a id="namespace-8fcb5e"></a>• [`namespace`](#namespace-8fcb5e) - Optional String<br>
|
|
257
|
+
<a id="namespace-8fcb5e"></a>• [`namespace`](#namespace-8fcb5e) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
258
258
|
|
|
259
|
-
<a id="tenant-5cb820"></a>• [`tenant`](#tenant-5cb820) - Optional String<br>
|
|
259
|
+
<a id="tenant-5cb820"></a>• [`tenant`](#tenant-5cb820) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
260
260
|
|
|
261
261
|
#### HTTPS Management Advertise On SLI VIP
|
|
262
262
|
|
|
263
263
|
An [`advertise_on_sli_vip`](#https-management-advertise-on-sli-vip) block (within [`https_management`](#https-management)) supports the following:
|
|
264
264
|
|
|
265
|
-
<a id="mtls-1bd8e3"></a>• [`no_mtls`](#mtls-1bd8e3) - Optional Block<br>
|
|
265
|
+
<a id="mtls-1bd8e3"></a>• [`no_mtls`](#mtls-1bd8e3) - Optional Block<br>Can be used for messages where no values are needed
|
|
266
266
|
|
|
267
|
-
<a id="certificates-5355d7"></a>• [`tls_certificates`](#certificates-5355d7) - Optional Block<br>
|
|
267
|
+
<a id="certificates-5355d7"></a>• [`tls_certificates`](#certificates-5355d7) - Optional Block<br>Users can add one or more certificates that share the same set of domains. For example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#certificates-5355d7) below.
|
|
268
268
|
|
|
269
|
-
<a id="config-9f094b"></a>• [`tls_config`](#config-9f094b) - Optional Block<br>
|
|
269
|
+
<a id="config-9f094b"></a>• [`tls_config`](#config-9f094b) - Optional Block<br>Defines various OPTIONS to configure TLS configuration parameters<br>See [TLS Config](#config-9f094b) below.
|
|
270
270
|
|
|
271
|
-
<a id="mtls-c1dce4"></a>• [`use_mtls`](#mtls-c1dce4) - Optional Block<br>
|
|
271
|
+
<a id="mtls-c1dce4"></a>• [`use_mtls`](#mtls-c1dce4) - Optional Block<br>Validation context for downstream client TLS connections<br>See [Use mTLS](#mtls-c1dce4) below.
|
|
272
272
|
|
|
273
273
|
#### HTTPS Management Advertise On SLI VIP TLS Certificates
|
|
274
274
|
|
|
@@ -318,13 +318,13 @@ An [`advertise_on_sli_vip`](#https-management-advertise-on-sli-vip) block (withi
|
|
|
318
318
|
|
|
319
319
|
An [`advertise_on_slo_internet_vip`](#vip-6dd6e5) block (within [`https_management`](#https-management)) supports the following:
|
|
320
320
|
|
|
321
|
-
<a id="mtls-65c4ed"></a>• [`no_mtls`](#mtls-65c4ed) - Optional Block<br>
|
|
321
|
+
<a id="mtls-65c4ed"></a>• [`no_mtls`](#mtls-65c4ed) - Optional Block<br>Can be used for messages where no values are needed
|
|
322
322
|
|
|
323
|
-
<a id="certificates-748bff"></a>• [`tls_certificates`](#certificates-748bff) - Optional Block<br>
|
|
323
|
+
<a id="certificates-748bff"></a>• [`tls_certificates`](#certificates-748bff) - Optional Block<br>Users can add one or more certificates that share the same set of domains. For example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#certificates-748bff) below.
|
|
324
324
|
|
|
325
|
-
<a id="config-3dcb79"></a>• [`tls_config`](#config-3dcb79) - Optional Block<br>
|
|
325
|
+
<a id="config-3dcb79"></a>• [`tls_config`](#config-3dcb79) - Optional Block<br>Defines various OPTIONS to configure TLS configuration parameters<br>See [TLS Config](#config-3dcb79) below.
|
|
326
326
|
|
|
327
|
-
<a id="mtls-2fcd89"></a>• [`use_mtls`](#mtls-2fcd89) - Optional Block<br>
|
|
327
|
+
<a id="mtls-2fcd89"></a>• [`use_mtls`](#mtls-2fcd89) - Optional Block<br>Validation context for downstream client TLS connections<br>See [Use mTLS](#mtls-2fcd89) below.
|
|
328
328
|
|
|
329
329
|
#### HTTPS Management Advertise On Slo Internet VIP TLS Certificates
|
|
330
330
|
|
|
@@ -374,13 +374,13 @@ An [`advertise_on_slo_internet_vip`](#vip-6dd6e5) block (within [`https_manageme
|
|
|
374
374
|
|
|
375
375
|
An [`advertise_on_slo_sli`](#https-management-advertise-on-slo-sli) block (within [`https_management`](#https-management)) supports the following:
|
|
376
376
|
|
|
377
|
-
<a id="mtls-e2f684"></a>• [`no_mtls`](#mtls-e2f684) - Optional Block<br>
|
|
377
|
+
<a id="mtls-e2f684"></a>• [`no_mtls`](#mtls-e2f684) - Optional Block<br>Can be used for messages where no values are needed
|
|
378
378
|
|
|
379
|
-
<a id="certificates-b923c1"></a>• [`tls_certificates`](#certificates-b923c1) - Optional Block<br>
|
|
379
|
+
<a id="certificates-b923c1"></a>• [`tls_certificates`](#certificates-b923c1) - Optional Block<br>Users can add one or more certificates that share the same set of domains. For example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#certificates-b923c1) below.
|
|
380
380
|
|
|
381
|
-
<a id="config-2cd93f"></a>• [`tls_config`](#config-2cd93f) - Optional Block<br>
|
|
381
|
+
<a id="config-2cd93f"></a>• [`tls_config`](#config-2cd93f) - Optional Block<br>Defines various OPTIONS to configure TLS configuration parameters<br>See [TLS Config](#config-2cd93f) below.
|
|
382
382
|
|
|
383
|
-
<a id="mtls-b8036a"></a>• [`use_mtls`](#mtls-b8036a) - Optional Block<br>
|
|
383
|
+
<a id="mtls-b8036a"></a>• [`use_mtls`](#mtls-b8036a) - Optional Block<br>Validation context for downstream client TLS connections<br>See [Use mTLS](#mtls-b8036a) below.
|
|
384
384
|
|
|
385
385
|
#### HTTPS Management Advertise On Slo SLI TLS Certificates
|
|
386
386
|
|
|
@@ -430,13 +430,13 @@ An [`advertise_on_slo_sli`](#https-management-advertise-on-slo-sli) block (withi
|
|
|
430
430
|
|
|
431
431
|
An [`advertise_on_slo_vip`](#https-management-advertise-on-slo-vip) block (within [`https_management`](#https-management)) supports the following:
|
|
432
432
|
|
|
433
|
-
<a id="mtls-476751"></a>• [`no_mtls`](#mtls-476751) - Optional Block<br>
|
|
433
|
+
<a id="mtls-476751"></a>• [`no_mtls`](#mtls-476751) - Optional Block<br>Can be used for messages where no values are needed
|
|
434
434
|
|
|
435
|
-
<a id="certificates-49cf23"></a>• [`tls_certificates`](#certificates-49cf23) - Optional Block<br>
|
|
435
|
+
<a id="certificates-49cf23"></a>• [`tls_certificates`](#certificates-49cf23) - Optional Block<br>Users can add one or more certificates that share the same set of domains. For example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#certificates-49cf23) below.
|
|
436
436
|
|
|
437
|
-
<a id="config-eb7c38"></a>• [`tls_config`](#config-eb7c38) - Optional Block<br>
|
|
437
|
+
<a id="config-eb7c38"></a>• [`tls_config`](#config-eb7c38) - Optional Block<br>Defines various OPTIONS to configure TLS configuration parameters<br>See [TLS Config](#config-eb7c38) below.
|
|
438
438
|
|
|
439
|
-
<a id="mtls-85e7e5"></a>• [`use_mtls`](#mtls-85e7e5) - Optional Block<br>
|
|
439
|
+
<a id="mtls-85e7e5"></a>• [`use_mtls`](#mtls-85e7e5) - Optional Block<br>Validation context for downstream client TLS connections<br>See [Use mTLS](#mtls-85e7e5) below.
|
|
440
440
|
|
|
441
441
|
#### HTTPS Management Advertise On Slo VIP TLS Certificates
|
|
442
442
|
|
|
@@ -486,25 +486,25 @@ An [`advertise_on_slo_vip`](#https-management-advertise-on-slo-vip) block (withi
|
|
|
486
486
|
|
|
487
487
|
A [`palo_alto_fw_service`](#palo-alto-fw-service) block supports the following:
|
|
488
488
|
|
|
489
|
-
<a id="palo-alto-fw-service-auto-setup"></a>• [`auto_setup`](#palo-alto-fw-service-auto-setup) - Optional Block<br>
|
|
489
|
+
<a id="palo-alto-fw-service-auto-setup"></a>• [`auto_setup`](#palo-alto-fw-service-auto-setup) - Optional Block<br>For auto-setup, SSH public and pvt keys are needed. Using the given config user, SSH and API access will be configured<br>See [Auto Setup](#palo-alto-fw-service-auto-setup) below.
|
|
490
490
|
|
|
491
|
-
<a id="palo-alto-fw-service-aws-tgw-site"></a>• [`aws_tgw_site`](#palo-alto-fw-service-aws-tgw-site) - Optional Block<br>
|
|
491
|
+
<a id="palo-alto-fw-service-aws-tgw-site"></a>• [`aws_tgw_site`](#palo-alto-fw-service-aws-tgw-site) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [AWS TGW Site](#palo-alto-fw-service-aws-tgw-site) below.
|
|
492
492
|
|
|
493
|
-
<a id="palo-alto-fw-service-disable-panaroma"></a>• [`disable_panaroma`](#palo-alto-fw-service-disable-panaroma) - Optional Block<br>
|
|
493
|
+
<a id="palo-alto-fw-service-disable-panaroma"></a>• [`disable_panaroma`](#palo-alto-fw-service-disable-panaroma) - Optional Block<br>Can be used for messages where no values are needed
|
|
494
494
|
|
|
495
|
-
<a id="palo-alto-fw-service-instance-type"></a>• [`instance_type`](#palo-alto-fw-service-instance-type) - Optional String Defaults to `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE`<br>Possible values are `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE`<br>[Enum: PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE]
|
|
495
|
+
<a id="palo-alto-fw-service-instance-type"></a>• [`instance_type`](#palo-alto-fw-service-instance-type) - Optional String Defaults to `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE`<br>Possible values are `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE`, `PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE`<br>[Enum: PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_12XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5N_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C4_8XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_9XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5_18XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_LARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_2XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_4XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_9XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_C5N_18XLARGE|PALO_ALTO_FW_AWS_INSTANCE_TYPE_R5_2XLARGE] - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_XLARGE: m4.xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_2XLARGE: m4.2xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M4_4XLARGE: m4.4xlarge - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_LARGE: m5.large - PALO_ALTO_FW_AWS_INSTANCE_TYPE_M5_XLARGE: m5.xlarge
|
|
496
496
|
|
|
497
|
-
<a id="palo-alto-fw-service-pan-ami-bundle1"></a>• [`pan_ami_bundle1`](#palo-alto-fw-service-pan-ami-bundle1) - Optional Block<br>
|
|
497
|
+
<a id="palo-alto-fw-service-pan-ami-bundle1"></a>• [`pan_ami_bundle1`](#palo-alto-fw-service-pan-ami-bundle1) - Optional Block<br>Can be used for messages where no values are needed
|
|
498
498
|
|
|
499
|
-
<a id="palo-alto-fw-service-pan-ami-bundle2"></a>• [`pan_ami_bundle2`](#palo-alto-fw-service-pan-ami-bundle2) - Optional Block<br>
|
|
499
|
+
<a id="palo-alto-fw-service-pan-ami-bundle2"></a>• [`pan_ami_bundle2`](#palo-alto-fw-service-pan-ami-bundle2) - Optional Block<br>Can be used for messages where no values are needed
|
|
500
500
|
|
|
501
501
|
<a id="palo-alto-fw-service-panorama-server"></a>• [`panorama_server`](#palo-alto-fw-service-panorama-server) - Optional Block<br>Panorama Server Type. Panorama Server Type<br>See [Panorama Server](#palo-alto-fw-service-panorama-server) below.
|
|
502
502
|
|
|
503
503
|
<a id="palo-alto-fw-service-service-nodes"></a>• [`service_nodes`](#palo-alto-fw-service-service-nodes) - Optional Block<br>Palo Alto Networks VM-Series AZ Nodes<br>See [Service Nodes](#palo-alto-fw-service-service-nodes) below.
|
|
504
504
|
|
|
505
|
-
<a id="palo-alto-fw-service-ssh-key"></a>• [`ssh_key`](#palo-alto-fw-service-ssh-key) - Optional String<br>Setup Authorized Public SSH key.
|
|
505
|
+
<a id="palo-alto-fw-service-ssh-key"></a>• [`ssh_key`](#palo-alto-fw-service-ssh-key) - Optional String<br>Setup Authorized Public SSH key. User will be able to SSH to the vmseries nodes using its corresponding SSH private key
|
|
506
506
|
|
|
507
|
-
<a id="palo-alto-fw-service-tags"></a>• [`tags`](#palo-alto-fw-service-tags) - Optional Block<br>AWS Tags
|
|
507
|
+
<a id="palo-alto-fw-service-tags"></a>• [`tags`](#palo-alto-fw-service-tags) - Optional Block<br>AWS Tags is a label consisting of a user-defined key and value. It helps to manage, identify, organize, search for, and filter resources in AWS console
|
|
508
508
|
|
|
509
509
|
<a id="palo-alto-fw-service-version"></a>• [`version`](#palo-alto-fw-service-version) - Optional String<br>PAN VM-Series version. PAN-OS version
|
|
510
510
|
|
|
@@ -512,11 +512,11 @@ A [`palo_alto_fw_service`](#palo-alto-fw-service) block supports the following:
|
|
|
512
512
|
|
|
513
513
|
An [`auto_setup`](#palo-alto-fw-service-auto-setup) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
514
514
|
|
|
515
|
-
<a id="password-aba55b"></a>• [`admin_password`](#password-aba55b) - Optional Block<br>
|
|
515
|
+
<a id="password-aba55b"></a>• [`admin_password`](#password-aba55b) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Admin Password](#password-aba55b) below.
|
|
516
516
|
|
|
517
517
|
<a id="username-441b03"></a>• [`admin_username`](#username-441b03) - Optional String<br>Firewall Admin Username. Firewall Admin Username
|
|
518
518
|
|
|
519
|
-
<a id="keys-dcb1f4"></a>• [`manual_ssh_keys`](#keys-dcb1f4) - Optional Block<br>SSH
|
|
519
|
+
<a id="keys-dcb1f4"></a>• [`manual_ssh_keys`](#keys-dcb1f4) - Optional Block<br>SSH Key includes both public and private key<br>See [Manual SSH Keys](#keys-dcb1f4) below.
|
|
520
520
|
|
|
521
521
|
#### Palo Alto Fw Service Auto Setup Admin Password
|
|
522
522
|
|
|
@@ -550,21 +550,21 @@ An [`auto_setup`](#palo-alto-fw-service-auto-setup) block (within [`palo_alto_fw
|
|
|
550
550
|
|
|
551
551
|
An [`aws_tgw_site`](#palo-alto-fw-service-aws-tgw-site) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
552
552
|
|
|
553
|
-
<a id="palo-alto-fw-service-aws-tgw-site-name"></a>• [`name`](#palo-alto-fw-service-aws-tgw-site-name) - Optional String<br>
|
|
553
|
+
<a id="palo-alto-fw-service-aws-tgw-site-name"></a>• [`name`](#palo-alto-fw-service-aws-tgw-site-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
554
554
|
|
|
555
|
-
<a id="namespace-4bee71"></a>• [`namespace`](#namespace-4bee71) - Optional String<br>
|
|
555
|
+
<a id="namespace-4bee71"></a>• [`namespace`](#namespace-4bee71) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
556
556
|
|
|
557
|
-
<a id="tenant-f4683d"></a>• [`tenant`](#tenant-f4683d) - Optional String<br>
|
|
557
|
+
<a id="tenant-f4683d"></a>• [`tenant`](#tenant-f4683d) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
558
558
|
|
|
559
559
|
#### Palo Alto Fw Service Panorama Server
|
|
560
560
|
|
|
561
561
|
A [`panorama_server`](#palo-alto-fw-service-panorama-server) block (within [`palo_alto_fw_service`](#palo-alto-fw-service)) supports the following:
|
|
562
562
|
|
|
563
|
-
<a id="key-d798d1"></a>• [`authorization_key`](#key-d798d1) - Optional Block<br>
|
|
563
|
+
<a id="key-d798d1"></a>• [`authorization_key`](#key-d798d1) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Authorization Key](#key-d798d1) below.
|
|
564
564
|
|
|
565
565
|
<a id="name-9cae98"></a>• [`device_group_name`](#name-9cae98) - Optional String<br>Device Group Name. Device Group Name
|
|
566
566
|
|
|
567
|
-
<a id="server-6bc226"></a>• [`server`](#server-6bc226) - Optional String<br>
|
|
567
|
+
<a id="server-6bc226"></a>• [`server`](#server-6bc226) - Optional String<br>Panorama Server Address to which the firewall should connect to
|
|
568
568
|
|
|
569
569
|
<a id="name-852ba5"></a>• [`template_stack_name`](#name-852ba5) - Optional String<br>Template stack name. Template Stack Name
|
|
570
570
|
|
|
@@ -590,13 +590,13 @@ A [`service_nodes`](#palo-alto-fw-service-service-nodes) block (within [`palo_al
|
|
|
590
590
|
|
|
591
591
|
A [`nodes`](#nodes-b8137e) block (within [`palo_alto_fw_service.service_nodes`](#palo-alto-fw-service-service-nodes)) supports the following:
|
|
592
592
|
|
|
593
|
-
<a id="name-d0302b"></a>• [`aws_az_name`](#name-d0302b) - Optional String<br>AWS
|
|
593
|
+
<a id="name-d0302b"></a>• [`aws_az_name`](#name-d0302b) - Optional String<br>AWS availability zone, must be consistent with the selected AWS region. It is recommended that AZ is one of the AZ for sites
|
|
594
594
|
|
|
595
595
|
<a id="subnet-0f55cf"></a>• [`mgmt_subnet`](#subnet-0f55cf) - Optional Block<br>AWS Subnet. Parameters for AWS subnet<br>See [Mgmt Subnet](#subnet-0f55cf) below.
|
|
596
596
|
|
|
597
|
-
<a id="name-6e2eb6"></a>• [`node_name`](#name-6e2eb6) - Optional String<br>Node Name
|
|
597
|
+
<a id="name-6e2eb6"></a>• [`node_name`](#name-6e2eb6) - Optional String<br>Node Name will be used to assign as hostname to the service
|
|
598
598
|
|
|
599
|
-
<a id="subnet-52b5ce"></a>• [`reserved_mgmt_subnet`](#subnet-52b5ce) - Optional Block<br>
|
|
599
|
+
<a id="subnet-52b5ce"></a>• [`reserved_mgmt_subnet`](#subnet-52b5ce) - Optional Block<br>Can be used for messages where no values are needed
|
|
600
600
|
|
|
601
601
|
#### Palo Alto Fw Service Service Nodes Nodes Mgmt Subnet
|
|
602
602
|
|
|
@@ -68,7 +68,7 @@ resource "f5xc_nginx_service_discovery" "example" {
|
|
|
68
68
|
|
|
69
69
|
<a id="discovery-target"></a>• [`discovery_target`](#discovery-target) - Optional Block<br>Discovery Target<br>See [Discovery Target](#discovery-target) below for details.
|
|
70
70
|
|
|
71
|
-
<a id="server-block-filters"></a>• [`server_block_filters`](#server-block-filters) - Optional Block<br>
|
|
71
|
+
<a id="server-block-filters"></a>• [`server_block_filters`](#server-block-filters) - Optional Block<br>Filters discovered server blocks based on server name, domain and ports. Atleast, one field should be populated for each filter. X-textBlockContent: If no filters are specified, all server blocks will be discovered by default<br>See [Server Block Filters](#server-block-filters) below for details.
|
|
72
72
|
|
|
73
73
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
74
74
|
|
|
@@ -92,7 +92,7 @@ A [`discovery_target`](#discovery-target) block supports the following:
|
|
|
92
92
|
|
|
93
93
|
A [`config_sync_group`](#discovery-target-config-sync-group) block (within [`discovery_target`](#discovery-target)) supports the following:
|
|
94
94
|
|
|
95
|
-
<a id="group-141170"></a>• [`config_sync_group`](#group-141170) - Optional Block<br>
|
|
95
|
+
<a id="group-141170"></a>• [`config_sync_group`](#group-141170) - Optional Block<br>Select new ConfigSyncGroup<br>See [Config Sync Group](#group-141170) below.
|
|
96
96
|
|
|
97
97
|
#### Discovery Target Config Sync Group Config Sync Group
|
|
98
98
|
|
|
@@ -102,29 +102,29 @@ A [`config_sync_group`](#discovery-target-config-sync-group) block (within [`dis
|
|
|
102
102
|
|
|
103
103
|
A [`nginx_instance`](#discovery-target-nginx-instance) block (within [`discovery_target`](#discovery-target)) supports the following:
|
|
104
104
|
|
|
105
|
-
<a id="instance-164b57"></a>• [`nginx_instance`](#instance-164b57) - Optional Block<br>
|
|
105
|
+
<a id="instance-164b57"></a>• [`nginx_instance`](#instance-164b57) - Optional Block<br>Select new NGINX Instance<br>See [Nginx Instance](#instance-164b57) below.
|
|
106
106
|
|
|
107
107
|
#### Discovery Target Nginx Instance Nginx Instance
|
|
108
108
|
|
|
109
109
|
A [`nginx_instance`](#instance-164b57) block (within [`discovery_target.nginx_instance`](#discovery-target-nginx-instance)) supports the following:
|
|
110
110
|
|
|
111
|
-
<a id="kind-c34cb7"></a>• [`kind`](#kind-c34cb7) - Optional String<br>
|
|
111
|
+
<a id="kind-c34cb7"></a>• [`kind`](#kind-c34cb7) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
112
112
|
|
|
113
|
-
<a id="name-e24512"></a>• [`name`](#name-e24512) - Optional String<br>
|
|
113
|
+
<a id="name-e24512"></a>• [`name`](#name-e24512) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
114
114
|
|
|
115
|
-
<a id="namespace-b0329a"></a>• [`namespace`](#namespace-b0329a) - Optional String<br>
|
|
115
|
+
<a id="namespace-b0329a"></a>• [`namespace`](#namespace-b0329a) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
116
116
|
|
|
117
|
-
<a id="tenant-a0725b"></a>• [`tenant`](#tenant-a0725b) - Optional String<br>
|
|
117
|
+
<a id="tenant-a0725b"></a>• [`tenant`](#tenant-a0725b) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
118
118
|
|
|
119
|
-
<a id="uid-3b24ab"></a>• [`uid`](#uid-3b24ab) - Optional String<br>
|
|
119
|
+
<a id="uid-3b24ab"></a>• [`uid`](#uid-3b24ab) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
120
120
|
|
|
121
121
|
#### Server Block Filters
|
|
122
122
|
|
|
123
123
|
A [`server_block_filters`](#server-block-filters) block supports the following:
|
|
124
124
|
|
|
125
|
-
<a id="server-block-filters-name-regex"></a>• [`name_regex`](#server-block-filters-name-regex) - Optional String<br>
|
|
125
|
+
<a id="server-block-filters-name-regex"></a>• [`name_regex`](#server-block-filters-name-regex) - Optional String<br>Regular expression to match the server name or domain that must be discovered
|
|
126
126
|
|
|
127
|
-
<a id="server-block-filters-port-ranges"></a>• [`port_ranges`](#server-block-filters-port-ranges) - Optional String<br>
|
|
127
|
+
<a id="server-block-filters-port-ranges"></a>• [`port_ranges`](#server-block-filters-port-ranges) - Optional String<br>String containing a comma separated list of individual service ports or port ranges. Each port range consists of a single port or two ports separated by '-'. For example, 8000-8191
|
|
128
128
|
|
|
129
129
|
#### Timeouts
|
|
130
130
|
|