- Home
- Documentation
- Uncategorized
- Data Sources
- xcsh_fleet (Data Source)
xcsh_fleet (Data Source)
Retrieves information about fleet will create a fleet object in ‘system’ namespace of the user in F5 Distributed Cloud. This is a read-only data source.
~> Note: For more information, see the F5 Distributed Cloud API documentation.
Example Usage
Section titled “Example Usage”# Fleet Data Source Example
terraform { required_version = ">= 1.0"
required_providers { xcsh = { source = "f5-sales-demo/xcsh" version = ">= 0.1.0" } }}
# Look up an existing Fleet by namedata "xcsh_fleet" "example" { name = "example-fleet" namespace = "staging"}
output "fleet_id" { value = data.xcsh_fleet.example.id}Argument Reference
Section titled “Argument Reference”-> Syntax Rule: This provider uses OneOf groups for mutually exclusive options. Fields documented as “Optional Block” use block syntax field_name { ... }. Empty OneOf object attributes use field_name = {}; conditional selection uses condition ? {} : null. Boolean attributes (such as add_hsts and http_redirect) use = true or = false.
🔶 High Risk Operations — Some operations on this resource have high danger level. Destructive operations may require confirmation.
Metadata Argument Reference
Section titled “Metadata Argument Reference”• name - Required String
Name of the Fleet
• namespace - Required String
Namespace where the Fleet exists
Attributes Reference
Section titled “Attributes Reference”In addition to all arguments above, the following attributes are exported:
• allow_all_usb - Optional Object
Configuration parameter for allow all usb
• annotations - Optional Map
Annotations applied to this resource
• blocked_services - Optional List
Disable node local services on this site
• bond_device_list - Optional String
Bond Devices List. List of bond devices for this fleet
• dc_cluster_group - Optional String
Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
• dc_cluster_group_inside - Optional String
Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
• default_config - Optional Object
Enable this option
• default_sriov_interface - Optional Object
Configuration parameter for default sriov interface
• default_storage_class - Optional Object
Configuration parameter for default storage class
• deny_all_usb - Optional Object
Configuration parameter for deny all usb
• description - Optional String
Description of the Fleet
• device_list - Optional String
Add device for all interfaces belonging to this fleet
• disable_gpu - Optional Object
Configuration parameter for disable GPU
• disable_log_anonymization - Optional Object
Configuration parameter for disable log anonymization
• disable_vm - Optional Object
Enable this option
• enable_default_fleet_config_download - Optional Bool
Enable default fleet config, It must be set for storage config and GPU config
• enable_gpu - Optional Object
Enable this option
• enable_log_anonymization - Optional Object
Configuration parameter for enable log anonymization
• enable_vgpu - Optional String
Licensing configuration for NVIDIA vGPU
• enable_vm - Optional Object
VM Configuration. VMs support configuration
• fleet_label - Optional String
Fleet_label value is used to create known_label ‘F5 XC/fleet=<fleet_label>’ The known_label is created in the ‘shared’ namespace for the tenant. A virtual_site object with name <fleet_label> is also created in ‘shared’ namespace for tenant. The virtual_site object will select all sites
• id - Optional String
Unique identifier for the resource
• inside_virtual_network - Optional List
Default inside (site local) virtual network for the fleet
• interface_list - Optional String
Add all interfaces belonging to this fleet
• kubernetes_upgrade_drain - Optional String
Specify how worker nodes within a site will be upgraded
• labels - Optional Map
Labels applied to this resource
• log_receiver - Optional String
Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
• logs_streaming_disabled - Optional Object
Enable this option
• network_connectors - Optional List
Network Connector defines connection between two virtual networks in a given site. Fleet defines one or more such network connectors. The network connectors configuration is applied on all sites that are member of the fleet
• network_firewall - Optional List
Network Firewall defines firewall to be applied for the virtual networks in the fleet. The network firewall configuration is applied on all sites that are member of the fleet. Constraints The Network Firewall is applied on Virtual Networks of type site local network and site local inside network
• no_bond_devices - Optional Object
Configuration parameter for no bond devices
• no_dc_cluster_group - Optional Object
Enable this option
• no_storage_device - Optional Object
Configuration parameter for no storage device
• no_storage_interfaces - Optional Object
Configuration parameter for no storage interfaces
• no_storage_static_routes - Optional Object
Configuration parameter for no storage static routes
• operating_system_version - Optional String
Desired Operating System version that is applied to all sites that are member of the fleet. Current Operating System version can be overridden via site config
• outside_virtual_network - Optional List
Default outside (site local) virtual network for the fleet
• performance_enhancement_mode - Optional String
Optimize the site for L3 or L7 traffic processing. L7 optimized is the default
• sriov_interfaces - Optional String
List of all custom SR-IOV interfaces configuration
• storage_class_list - Optional String
Add additional custom storage classes in Kubernetes for this fleet
• storage_device_list - Optional String
Add additional custom storage classes in Kubernetes for this fleet
• storage_interface_list - Optional String
Add all interfaces belonging to this fleet
• storage_static_routes - Optional String
Configuration parameter for storage static routes
• usb_policy - Optional String
Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
• volterra_software_version - Optional String
F5XC software version is human readable string matching released set of version components. The given software version is applied to all sites that are member of the fleet. Current software installed can be overridden via site config
• dns - Optional Object
Enable this option
• network_type - Optional String Defaults to VIRTUAL_NETWORK_SITE_LOCAL
Possible values are VIRTUAL_NETWORK_SITE_LOCAL, VIRTUAL_NETWORK_SITE_LOCAL_INSIDE, VIRTUAL_NETWORK_PER_SITE, VIRTUAL_NETWORK_PUBLIC, VIRTUAL_NETWORK_GLOBAL, VIRTUAL_NETWORK_SITE_SERVICE, VIRTUAL_NETWORK_VER_INTERNAL,
VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE, VIRTUAL_NETWORK_IP_AUTO, VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK, VIRTUAL_NETWORK_SRV6_NETWORK, VIRTUAL_NETWORK_IP_FABRIC, VIRTUAL_NETWORK_SEGMENT, VIRTUAL_NETWORK_MANAGEMENT
[Enum:
VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT|VIRTUAL_NETWORK_MANAGEMENT]
Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
• ssh - Optional Object
Enable this option
• web_user_interface - Optional Object
Enable this option
• bond_devices - Optional List
Bond Devices. List of bond devices
• active_backup - Optional Object
Configuration parameter for active backup
• devices - Optional List
Ethernet devices that will make up this bond
• lacp - Optional String
LACP parameters. LACP parameters for the bond device
• link_polling_interval - Optional Number
Link Polling Interval. Link polling interval in milliseconds
• link_up_delay - Optional Number
Milliseconds wait before link is declared up
• name - Optional String
Bond Device Name. Name for the Bond. Ex ‘bond0’
• rate - Optional Number
Interval in seconds to transmit LACP packets
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• devices - Optional List
Configuration for all devices in the fleet. Examples of devices are - network interfaces, cameras, scanners etc. Configuration a device is applied on VER node if the VER node is member of this fleet and has an corresponding interface/device
• name - Optional String
Name of the device including the unit number (e.g. Eth0 or disk1). The name must match name of device in host-OS of node
• network_device - Optional String
Represents physical network interface. The ‘interface’ reference points to a Network Interface object. Attributes such as Labels, MTU from Network Interface must be applied to the device
• owner - Optional String Defaults to DEVICE_OWNER_INVALID
Possible values are DEVICE_OWNER_INVALID, DEVICE_OWNER_VER, DEVICE_OWNER_VK8S_WORK_LOAD, DEVICE_OWNER_HOST
[Enum: DEVICE_OWNER_INVALID|DEVICE_OWNER_VER|DEVICE_OWNER_VK8S_WORK_LOAD|DEVICE_OWNER_HOST] Defines ownership for a device. Device owner is invalid Device is owned by VER pod.
Usually it will be network interface device or accelerator like crypto engine
• interface - Optional List
Network Interface attributes for the device. User network interface configuration for this network device. Attributes like labels, MTU from the ‘interface’ are applied to corresponding interface in VER node If network interface refers to a virtual-network, the virtual-netowrk type must be
• use - Optional String Defaults to NETWORK_INTERFACE_USE_REGULAR
Possible values are NETWORK_INTERFACE_USE_REGULAR, NETWORK_INTERFACE_USE_OUTSIDE, NETWORK_INTERFACE_USE_INSIDE
[Enum: NETWORK_INTERFACE_USE_REGULAR|NETWORK_INTERFACE_USE_OUTSIDE|NETWORK_INTERFACE_USE_INSIDE] Defines how the device is used If networking device is owned by VER, it is
available for users to configure as required If networking device is owned by VER, it is included in bootstrap config and member of outside network. If networking device is owned by VER, it is included in bootstrap config
• kind - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object’s kind (e.g. ‘route’)
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• uid - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object’s(e.g. Route’s) uid
• feature_type - Optional String Defaults to UNLICENSED
Possible values are UNLICENSED, VGPU, VWS, VCS
[Enum: UNLICENSED|VGPU|VWS|VCS] Set feature to be enabled Operate with a degraded vGPU performance Enable NVIDIA vGPU Enable NVIDIA RTX Virtual Workstation Enable NVIDIA Virtual Compute Server
• server_address - Optional String
License Server Address. Set License Server Address
• server_port - Optional Number
License Server Port Number. Set License Server port number
• kind - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object’s kind (e.g. ‘route’)
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• uid - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object’s(e.g. Route’s) uid
• interfaces - Optional List
Add all interfaces belonging to this fleet
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• disable_upgrade_drain - Optional Object
Configuration parameter for disable upgrade drain
• enable_upgrade_drain - Optional String
Specify batch upgrade settings for worker nodes within a site
• disable_vega_upgrade_mode - Optional Object
Configuration parameter for disable vega upgrade mode
• drain_max_unavailable_node_count - Optional Number
Node Batch Size Count
• drain_max_unavailable_node_percentage - Optional Number
Maximum percentage of nodes unavailable during upgrade draining
• drain_node_timeout - Optional Number
Seconds to wait before initiating upgrade on the next set of nodes. Setting it to 0 will wait indefinitely for all services on nodes to be upgraded gracefully before proceeding to the next set of nodes. (Warning: It may block upgrade if services on a node cannot be gracefully upgraded. It is
• enable_vega_upgrade_mode - Optional Object
Configuration parameter for enable vega upgrade mode
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• kind - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object’s kind (e.g. ‘route’)
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• uid - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object’s(e.g. Route’s) uid
• kind - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object’s kind (e.g. ‘route’)
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• uid - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object’s(e.g. Route’s) uid
• kind - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object’s kind (e.g. ‘route’)
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• uid - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object’s(e.g. Route’s) uid
• perf_mode_l3_enhanced - Optional String
Configuration parameter for perf mode l3 enhanced
• perf_mode_l7_enhanced - Optional String
Configuration parameter for perf mode l7 enhanced
• jumbo - Optional Object
Enable this option
• no_jumbo - Optional Object
Enable this option
• jumbo_disabled - Optional Object
Enable this option
• jumbo_enabled - Optional Object
Enable this option
• sriov_interface - Optional List
Use custom SR-IOV interfaces Configuration
• interface_name - Optional String
Name of physical interface. Name of SR-IOV physical interface
• number_of_vfio_vfs - Optional Number
Number of virtual functions reserved for VNFs and DPDK-based CNFs
• number_of_vfs - Optional Number
Total number of virtual functions. Total number of virtual functions
• storage_classes - Optional List
List of Storage Classes. List of custom storage classes
• advanced_storage_parameters - Optional Map
Advanced Parameters. Map of parameter name and string value
• allow_volume_expansion - Optional Bool
Allow Volume Expansion. Allow volume expansion
• custom_storage - Optional String
Custom Storage Class allows to insert Kubernetes storageclass definition which will be applied into given site
• default_storage_class - Optional Bool
Make this storage class default storage class for the K8S cluster
• description_spec - Optional String
Storage Class Description. Description for this storage class
• hpe_storage - Optional String
Storage class Device configuration for HPE Storage
• netapp_trident - Optional String
Storage class Device configuration for NetApp Trident
• pure_service_orchestrator - Optional String
Storage class Device configuration for Pure Service Orchestrator
• reclaim_policy - Optional String
Policy configuration for this feature
• storage_class_name - Optional String
Name of the storage class as it will appear in K8S
• storage_device - Optional String
Storage device that this class will use. The Device name defined at previous step
• yaml - Optional String
Storage Class YAML. K8S YAML for StorageClass
• allow_mutations - Optional String
Mutation can override specified parameters
• allow_overrides - Optional String
AllowOverrides. PVC can override specified parameters
• dedupe_enabled - Optional Bool
Indicates that the volume should enable deduplication
• description_spec - Optional String
The SecretName parameter is used to identify name of secret to identify backend storage’s auth information
• destroy_on_delete - Optional Bool
Indicates the backing Nimble volume (including snapshots) should be destroyed when the PVC is deleted
• encrypted - Optional Bool
Indicates that the volume should be encrypted
• folder - Optional String
The name of the folder in which to place the volume
• limit_iops - Optional String
LimitIops. The IOPS limit of the volume
• limit_mbps - Optional String
LimitMbps. The IOPS limit of the volume
• performance_policy - Optional String
Policy configuration for this feature
• pool - Optional String
The name of the pool in which to place the volume
• protection_template - Optional String
The name of the performance policy to assign to the volume
• secret_name - Optional String
The SecretName parameter is used to identify name of secret to identify backend storage’s auth information
• secret_namespace - Optional String
The SecretNamespace parameter is used to identify name of namespace where secret resides
• sync_on_detach - Optional Bool
Indicates that a snapshot of the volume should be synced to the replication partner each time it is detached from a node
• thick - Optional Bool
Indicates that the volume should be thick provisioned
• selector - Optional String
Using the Selector field, each StorageClass calls out which virtual pool(s) may be used to host a volume. The volume will have the aspects defined in the chosen virtual pool
• storage_pools - Optional String
The storagePools parameter is used to further restrict the set of pools that match any specified attributes
• backend - Optional String
Possible values are block, file
[Enum: block|file] Defines type of Pure storage backend block or file. The volume will have the aspects defined in the chosen virtual pool
• bandwidth_limit - Optional String
It must be between 1 MB/s and 512 GB/s. Enter the size as a number (bytes must be multiple of 512) or number with a single character unit symbol. Valid unit symbols are K, M, G, representing KiB, MiB, and GiB
• iops_limit - Optional Number
Enable IOPS limitation. It must be between 100 and 100 million. If value is 0, IOPS limit is not defined
• storage_devices - Optional List
List of Storage Devices. List of custom storage devices
• advanced_advanced_parameters - Optional Map
Advanced Parameters. Map of parameter name and string value
• custom_storage - Optional Object
Configuration parameter for custom storage
• hpe_storage - Optional String
Configuration parameter for hpe storage
• netapp_trident - Optional String
Device configuration for NetApp Trident Storage
• pure_service_orchestrator - Optional String
Device configuration for Pure Storage Service Orchestrator
• storage_device - Optional String
Storage Device. Storage device and device unit
• api_server_port - Optional Number
Storage server Port. Enter Storage Server Port
• iscsi_chap_password - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• iscsi_chap_user - Optional String
Chap Username to connect to the HPE storage
• password - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• storage_server_ip_address - Optional String
Storage Server IP address. Enter storage server IP address
• storage_server_name - Optional String
Storage Server Name. Enter storage server Name
• username - Optional String
Username to connect to the HPE storage management IP
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• netapp_backend_ontap_nas - Optional String
Configuration of storage backend for NetApp ONTAP NAS
• netapp_backend_ontap_san - Optional String
Configuration of storage backend for NetApp ONTAP SAN
• auto_export_cidrs - Optional String
List of IPv4 prefixes that represent an endpoint
• auto_export_policy - Optional Bool
Policy configuration for this feature
• backend_name - Optional String
Configuration of Backend Name. Driver is name + ’_’ + dataLIF
• client_certificate - Optional String
Please Enter Base64-encoded value of client certificate. Used for certificate-based auth
• client_private_key - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• data_lif_dns_name - Optional String
Backend Data LIF IP Address’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• data_lif_ip - Optional String
Backend Data LIF IP Address is reachable at the given IP address
• labels - Optional Map
List of labels for Storage Device used in NetApp ONTAP. It is used for storage class selection
• limit_aggregate_usage - Optional String
Fail provisioning if usage is above this percentage. Not enforced by default
• limit_volume_size - Optional String
Fail provisioning if requested volume size is above this value. Not enforced by default
• management_lif_dns_name - Optional String
Backend Management LIF IP Address’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• management_lif_ip - Optional String
Backend Management LIF IP Address is reachable at the given IP address
• nfs_mount_options - Optional String
Comma-separated list of NFS mount OPTIONS. Not enforced by default
• password - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• region - Optional String
Backend Region. Virtual Pool Region
• storage - Optional List
List of Virtual Storage Pool definitions which are referred back by Storage Class label match selection
• storage_driver_name - Optional String
Possible values are ontap-nas, ontap-nas-economy, ontap-nas-flexgroup
[Enum: ontap-nas|ontap-nas-economy|ontap-nas-flexgroup] Storage Backend Driver. Configuration of Backend Name
• storage_prefix - Optional String
Prefix used when provisioning new volumes in the SVM. Once set this cannot be updated
• svm - Optional String
Storage virtual machine to use. Derived if an SVM managementLIF is specified
• trusted_ca_certificate - Optional String
Please Enter Base64-encoded value of trusted CA certificate. Optional. Used for certificate-based auth
• username - Optional String
Username. Username to connect to the cluster/SVM
• volume_defaults - Optional String
It controls how each volume is provisioned by default using these OPTIONS in a special section of the configuration
• prefixes - Optional List
List of IPv4 prefixes that represent an endpoint
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• labels - Optional Map
List of labels for Storage Device used in NetApp ONTAP. It is used for storage class label match selection
• volume_defaults - Optional String
It controls how each volume is provisioned by default using these OPTIONS in a special section of the configuration
• zone - Optional String
Virtual Pool Zone. Virtual Storage Pool zone definition
• adaptive_qos_policy - Optional String
Policy configuration for this feature
• encryption - Optional Bool
Enable Encryption. Enable NetApp volume encryption
• export_policy - Optional String
Policy configuration for this feature
• no_qos - Optional Object
Enable this option
• qos_policy - Optional String
Policy configuration for this feature
• security_style - Optional String
Security Style. Security style for new volumes
• snapshot_dir - Optional Bool
Access to Snapshot Directory. Access to the .snapshot directory
• snapshot_policy - Optional String
Policy configuration for this feature
• snapshot_reserve - Optional String
Percentage of volume reserved for snapshots. ‘0’ if snapshot policy is ‘none’, else ”
• space_reserve - Optional String
Possible values are none, thick
[Enum: none|thick] Space reservation mode; “none” (thin) or “volume” (thick)
• split_on_clone - Optional Bool
Split a clone from its parent upon creation
• tiering_policy - Optional String
Policy configuration for this feature
• unix_permissions - Optional Number
Unix permission mode for new volumes. All allowed 777
• adaptive_qos_policy - Optional String
Policy configuration for this feature
• encryption - Optional Bool
Enable Encryption. Enable NetApp volume encryption
• export_policy - Optional String
Policy configuration for this feature
• no_qos - Optional Object
Enable this option
• qos_policy - Optional String
Policy configuration for this feature
• security_style - Optional String
Security Style. Security style for new volumes
• snapshot_dir - Optional Bool
Access to Snapshot Directory. Access to the .snapshot directory
• snapshot_policy - Optional String
Policy configuration for this feature
• snapshot_reserve - Optional String
Percentage of volume reserved for snapshots. ‘0’ if snapshot policy is ‘none’, else ”
• space_reserve - Optional String
Possible values are none, thick
[Enum: none|thick] Space reservation mode; “none” (thin) or “volume” (thick)
• split_on_clone - Optional Bool
Split a clone from its parent upon creation
• tiering_policy - Optional String
Policy configuration for this feature
• unix_permissions - Optional Number
Unix permission mode for new volumes. All allowed 777
• client_certificate - Optional String
Please Enter Base64-encoded value of client certificate. Used for certificate-based auth
• client_private_key - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• data_lif_dns_name - Optional String
Backend Data LIF IP Address’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• data_lif_ip - Optional String
Backend Data LIF IP Address is reachable at the given IP address
• igroup_name - Optional String
Name of the igroup for SAN volumes to use
• labels - Optional Map
List of labels for Storage Device used in NetApp ONTAP. It is used for storage class selection
• limit_aggregate_usage - Optional Number
Fail provisioning if usage is above this percentage. Not enforced by default
• limit_volume_size - Optional Number
Fail provisioning if requested volume size in GBi is above this value. Not enforced by default
• management_lif_dns_name - Optional String
Backend Management LIF IP Address’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• management_lif_ip - Optional String
Backend Management LIF IP Address is reachable at the given IP address
• no_chap - Optional Object
Enable this option
• password - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• region - Optional String
Backend Region. Virtual Pool Region
• storage - Optional List
List of Virtual Storage Pool definitions which are referred back by Storage Class label match selection
• storage_driver_name - Optional String
Possible values are ontap-san, ontap-san-economy, ontap-nas-flexgroup
[Enum: ontap-san|ontap-san-economy|ontap-nas-flexgroup] Storage Backend Driver. Configuration of Backend Name
• storage_prefix - Optional String
Prefix used when provisioning new volumes in the SVM. Once set this cannot be updated
• svm - Optional String
Storage virtual machine to use. Derived if an SVM managementLIF is specified
• trusted_ca_certificate - Optional String
Please Enter Base64-encoded value of trusted CA certificate. Optional. Used for certificate-based auth
• use_chap - Optional String
Device NetApp Backend ONTAP SAN CHAP configuration OPTIONS for enabled CHAP
• username - Optional String
Username. Username to connect to the cluster/SVM
• volume_defaults - Optional String
It controls how each volume is provisioned by default using these OPTIONS in a special section of the configuration
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• labels - Optional Map
List of labels for Storage Device used in NetApp ONTAP. It is used for storage class label match selection
• volume_defaults - Optional String
It controls how each volume is provisioned by default using these OPTIONS in a special section of the configuration
• zone - Optional String
Virtual Pool Zone. Virtual Storage Pool zone definition
• adaptive_qos_policy - Optional String
Policy configuration for this feature
• encryption - Optional Bool
Enable Encryption. Enable NetApp volume encryption
• export_policy - Optional String
Policy configuration for this feature
• no_qos - Optional Object
Enable this option
• qos_policy - Optional String
Policy configuration for this feature
• security_style - Optional String
Security Style. Security style for new volumes
• snapshot_dir - Optional Bool
Access to Snapshot Directory. Access to the .snapshot directory
• snapshot_policy - Optional String
Policy configuration for this feature
• snapshot_reserve - Optional String
Percentage of volume reserved for snapshots. ‘0’ if snapshot policy is ‘none’, else ”
• space_reserve - Optional String
Possible values are none, thick
[Enum: none|thick] Space reservation mode; “none” (thin) or “volume” (thick)
• split_on_clone - Optional Bool
Split a clone from its parent upon creation
• tiering_policy - Optional String
Policy configuration for this feature
• unix_permissions - Optional Number
Unix permission mode for new volumes. All allowed 777
• chap_initiator_secret - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• chap_target_initiator_secret - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• chap_target_username - Optional String
Target username. Required if useCHAP=true
• chap_username - Optional String
Inbound username. Required if useCHAP=true
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• adaptive_qos_policy - Optional String
Policy configuration for this feature
• encryption - Optional Bool
Enable Encryption. Enable NetApp volume encryption
• export_policy - Optional String
Policy configuration for this feature
• no_qos - Optional Object
Enable this option
• qos_policy - Optional String
Policy configuration for this feature
• security_style - Optional String
Security Style. Security style for new volumes
• snapshot_dir - Optional Bool
Access to Snapshot Directory. Access to the .snapshot directory
• snapshot_policy - Optional String
Policy configuration for this feature
• snapshot_reserve - Optional String
Percentage of volume reserved for snapshots. ‘0’ if snapshot policy is ‘none’, else ”
• space_reserve - Optional String
Possible values are none, thick
[Enum: none|thick] Space reservation mode; “none” (thin) or “volume” (thick)
• split_on_clone - Optional Bool
Split a clone from its parent upon creation
• tiering_policy - Optional String
Policy configuration for this feature
• unix_permissions - Optional Number
Unix permission mode for new volumes. All allowed 777
• arrays - Optional String
Arrays Configuration. Device configuration for PSO Arrays
• cluster_id - Optional String
ClusterID is added as a prefix for all volumes created by this PSO installation. ClusterID is also used to identify the volumes used by the datastore, pso-db. ClusterID MUST BE UNIQUE for multiple K8S clusters running on top of the same storage arrays
• enable_storage_topology - Optional Bool
Option is to enable/disable the csi topology feature for pso-csi
• enable_strict_topology - Optional Bool
Option is to enable/disable the strict csi topology feature for pso-csi
• flash_array - Optional String
Specify what storage flash arrays should be managed the plugin
• flash_blade - Optional String
Specify what storage flash blades should be managed the plugin
• default_fs_opt - Optional String
Block volume default mkfs OPTIONS. Not recommended to change!
• default_fs_type - Optional String
Possible values are xfs, ext4
[Enum: xfs|ext4] Block volume default filesystem type. Not recommended to change!
• default_mount_opts - Optional List
Block volume default filesystem mount OPTIONS. Not recommended to change!
• disable_preempt_attachments - Optional Bool
Disable Preempt Attachments. Enable/Disable attachment preemption!
• flash_arrays - Optional List
For FlashArrays you must set the ‘mgmt_endpoint’ and ‘api_token’
• iscsi_login_timeout - Optional Number
iSCSI login timeout in seconds. Not recommended to change!
• san_type - Optional String
Possible values are iSCSI, FC
[Enum: iSCSI|FC] Block volume access protocol, either iSCSI or FC
• api_token - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• labels - Optional Map
Specifies labels optional, and can be any key-value pair for use with the PSO ‘fleet’ provisioner
• mgmt_dns_name - Optional String
Management Endpoint’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• mgmt_ip - Optional String
Management Endpoint is reachable at the given IP address
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• enable_snapshot_directory - Optional Bool
Enable Snapshot Directory. Enable/Disable FlashBlade snapshots
• export_rules - Optional String
NFS Export Rules. NFS Export rules
• flash_blades - Optional List
For FlashBlades you must set the ‘mgmt_endpoint’, ‘api_token’ and nfs_endpoint
• api_token - Optional String
SecretType is used in an object to indicate a sensitive/confidential field
• labels - Optional Map
Specifies labels optional, and can be any key-value pair for use with the PSO ‘fleet’ provisioner
• mgmt_dns_name - Optional String
Management Endpoint’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• mgmt_ip - Optional String
Management Endpoint is reachable at the given IP address
• nfs_endpoint_dns_name - Optional String
Endpoint’s IP address is discovered using DNS name resolution. The name given here is fully qualified domain name
• nfs_endpoint_ip - Optional String
Endpoint is reachable at the given IP address
• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management
• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted
• decryption_provider - Optional String
Name of the Secret Management Access object that contains information about the backend Secret Management service
• location - Optional String
Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
• store_provider - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• provider_ref - Optional String
Name of the Secret Management Access object that contains information about the store to GET encrypted bytes This field needs to be provided only if the URL scheme is not string:///
• url - Optional String
URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will GET Secret bytes after Base64 decoding
• interfaces - Optional List
Add all interfaces belonging to this fleet
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• storage_routes - Optional List
List of Static Routes. List of storage static routes
• attrs - Optional List Defaults to ROUTE_ATTR_NO_OP
Possible values are ROUTE_ATTR_NO_OP, ROUTE_ATTR_ADVERTISE, ROUTE_ATTR_INSTALL_HOST, ROUTE_ATTR_INSTALL_FORWARDING, ROUTE_ATTR_MERGE_ONLY
[Enum: ROUTE_ATTR_NO_OP|ROUTE_ATTR_ADVERTISE|ROUTE_ATTR_INSTALL_HOST|ROUTE_ATTR_INSTALL_FORWARDING|ROUTE_ATTR_MERGE_ONLY] List of route attributes
associated with the static route
• labels - Optional String
Add Labels for this Static Route, these labels can be used in network policy
• nexthop - Optional String
Nexthop. Identifies the next-hop for a route
• subnets - Optional List
Subnets. List of route prefixes
• interface - Optional List
Nexthop is network interface when type is ‘Network-Interface’
• nexthop_address - Optional String
IP Address used to specify an IPv4 or IPv6 address
• type - Optional String Defaults to NEXT_HOP_DEFAULT_GATEWAY
Possible values are NEXT_HOP_DEFAULT_GATEWAY, NEXT_HOP_USE_CONFIGURED, NEXT_HOP_NETWORK_INTERFACE
[Enum: NEXT_HOP_DEFAULT_GATEWAY|NEXT_HOP_USE_CONFIGURED|NEXT_HOP_NETWORK_INTERFACE] Defines types of next-hop Use default gateway on the local interface as gateway for route. Assumes there
is only one local interface on the virtual network. Use the specified address as nexthop Use the network interface as nexthop Discard nexthop, used when attr type is Advertise Used in VoltADN
• kind - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object’s kind (e.g. ‘route’)
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
• uid - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object’s(e.g. Route’s) uid
• ipv4 - Optional String
IPv4 address in dotted decimal notation (e.g., 192.0.2.1)
• ipv6 - Optional String
IPv6 Address specified as hexadecimal numbers separated by ’:’
• addr - Optional String
IPv4 Address in string form with dot-decimal notation
• addr - Optional String
IPv6 Address in form of string. IPv6 address must be specified as hexadecimal numbers separated by ’:’ The address can be compacted by suppressing zeros e.g. ‘2001:db8:0:0:0:0:2:1’ becomes ‘2001:db8::2:1’ or ‘2001:db8:0:0:0:2:0:0’ becomes ‘2001:db8::2::’
• ipv4 - Optional String
IPv4 subnets specified as prefix and prefix-length. Prefix length must be <= 32
• ipv6 - Optional String
IPv6 subnets specified as prefix and prefix-length. Prefix-legnth must be <= 128
• plen - Optional Number
Prefix-length of the IPv4 subnet. Must be <= 32
• prefix - Optional String
Prefix part of the IPv4 subnet in string form with dot-decimal notation
• plen - Optional Number
Prefix length of the IPv6 subnet. Must be <= 128
• prefix - Optional String
Prefix part of the IPv6 subnet given in form of string. IPv6 address must be specified as hexadecimal numbers separated by ’:’ e.g. ‘2001:db8:0:0:0:2:0:0’ The address can be compacted by suppressing zeros e.g. ‘2001:db8::2::’
• name - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object’s(e.g. Route’s) name
• namespace - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object’s(e.g. Route’s) namespace
• tenant - Optional String
When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object’s(e.g. Route’s) tenant
Common Types
Section titled “Common Types”The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
Object Reference {#common-object-reference}
Section titled “Object Reference {#common-object-reference}”Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format tenant/namespace/name.
| Field | Type | Description |
|---|---|---|
name | String | Name of the referenced object |
namespace | String | Namespace containing the referenced object |
tenant | String | Tenant of the referenced object (system-managed) |
Transformers {#common-transformers}
Section titled “Transformers {#common-transformers}”Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
| Value | Description |
|---|---|
LOWER_CASE | Convert to lowercase |
UPPER_CASE | Convert to uppercase |
BASE64_DECODE | Decodebase64 content |
NORMALIZE_PATH | Normalize URL path |
REMOVE_WHITESPACE | Remove whitespace characters |
URL_DECODE | Decode URL-encoded characters |
TRIM_LEFT | Trim leading whitespace |
TRIM_RIGHT | Trim trailing whitespace |
TRIM | Trim both leading and trailing whitespace |
HTTP Methods {#common-http-methods}
Section titled “HTTP Methods {#common-http-methods}”HTTP methods used for request matching.
| Value | Description |
|---|---|
ANY | Match any HTTP method |
GET | HTTP GET request |
HEAD | HTTP HEAD request |
POST | HTTP POST request |
PUT | HTTP PUT request |
DELETE | HTTP DELETE request |
CONNECT | HTTP CONNECT request |
OPTIONS | HTTP OPTIONS request |
TRACE | HTTP TRACE request |
PATCH | HTTP PATCH request |
COPY | HTTP COPY request (WebDAV) |
TLS Fingerprints {#common-tls-fingerprints}
Section titled “TLS Fingerprints {#common-tls-fingerprints}”TLS fingerprint categories for malicious client detection.
| Value | Description |
|---|---|
TLS_FINGERPRINT_NONE | No fingerprint matching |
ANY_MALICIOUS_FINGERPRINT | Match any known malicious fingerprint |
ADWARE | Adware-associated fingerprints |
DRIDEX | Dridex malware fingerprints |
GOOTKIT | Gootkit malware fingerprints |
RANSOMWARE | Ransomware-associated fingerprints |
TRICKBOT | Trickbot malware fingerprints |
IP Threat Categories {#common-ip-threat-categories}
Section titled “IP Threat Categories {#common-ip-threat-categories}”IP address threat categories for security filtering.
| Value | Description |
|---|---|
SPAM_SOURCES | Known spam sources |
WINDOWS_EXPLOITS | Windows exploit sources |
WEB_ATTACKS | Web attack sources |
BOTNETS | Known botnet IPs |
SCANNERS | Network scanner IPs |
REPUTATION | Poor reputation IPs |
PHISHING | Phishing-related IPs |
PROXY | Anonymous proxy IPs |
MOBILE_THREATS | Mobile threat sources |
TOR_PROXY | Tor exit nodes |
DENIAL_OF_SERVICE | DoS attack sources |
NETWORK | Known bad network ranges |