Merge pull request #906 from F5Networks/devel_20112023_vendorsync

vendorsync
F5Networks · Nov 20, 2023 · 05f985e · 05f985e
2 parents 28e382b + 9f61618
commit 05f985e
Show file tree

Hide file tree

Showing 7 changed files with 28 additions and 1,480 deletions.
diff --git a/bigip/resource_bigip_ltm_profile_http.go b/bigip/resource_bigip_ltm_profile_http.go
@@ -244,21 +244,21 @@ func resourceBigipLtmProfileHttp() *schema.Resource {
 							Description: "Specifies which HTTP methods count as being known. Removing RFC-defined methods from this list will cause the HTTP filter to not recognize them.",
 						},
 						"max_header_count": {
-							Type:     schema.TypeInt,
-							Optional: true,
-							Computed: true,
+							Type:        schema.TypeInt,
+							Optional:    true,
+							Computed:    true,
 							Description: "Specifies the maximum number of headers allowed in HTTP request/response.",
 						},
 						"max_header_size": {
-							Type:     schema.TypeInt,
-							Optional: true,
-							Computed: true,
+							Type:        schema.TypeInt,
+							Optional:    true,
+							Computed:    true,
 							Description: "Specifies the maximum header size.",
 						},
 						"unknown_method": {
-							Type:     schema.TypeString,
-							Optional: true,
-							Computed: true,
+							Type:        schema.TypeString,
+							Optional:    true,
+							Computed:    true,
 							Description: "Specifies whether to allow, reject or switch to pass-through mode when an unknown HTTP method is parsed.",
 						},
 					},

diff --git a/bigip/resource_bigip_ltm_profile_http_test.go b/bigip/resource_bigip_ltm_profile_http_test.go
@@ -7,12 +7,13 @@ package bigip
 
 import (
 	"fmt"
-	bigip "github.com/f5devcentral/go-bigip"
-	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
-	"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
 	"regexp"
 	"strings"
 	"testing"
+
+	bigip "github.com/f5devcentral/go-bigip"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/terraform"
 )
 
 var TestHttpName = fmt.Sprintf("/%s/test-http", TestPartition)

diff --git a/bigip/resource_bigip_ltm_profile_ssl_client.go b/bigip/resource_bigip_ltm_profile_ssl_client.go
@@ -118,7 +118,7 @@ func resourceBigipLtmProfileClientSsl() *schema.Resource {
 				Type:        schema.TypeString,
 				Optional:    true,
 				Computed:    true,
-				Description: "Client certificate file path.  Default None.",
+				Description: "(Trusted Certificate Authorities)Specifies a client CA that the system trusts. The default is `None`",
 			},
 			"cache_size": {
 				Type:        schema.TypeInt,
@@ -276,7 +276,7 @@ func resourceBigipLtmProfileClientSsl() *schema.Resource {
 				Type:        schema.TypeString,
 				Optional:    true,
 				Computed:    true,
-				Description: "client certificate name",
+				Description: "(Advertised Certificate Authorities)Specifies that the CAs that the system advertises to clients is being trusted by the profile. The default is `None`",
 			},
 
 			"crl_file": {

diff --git a/docs/resources/bigip_ltm_profile_client_ssl.md b/docs/resources/bigip_ltm_profile_client_ssl.md
@@ -53,6 +53,10 @@ Don't insert empty fragments and No TLSv1.3 are listed as Enabled Options. `Usag
 
 * `peer_cert_mode` - (Optional) Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
 
+* `ca_file` - (Optional) (Trusted Certificate Authorities)Specifies a client CA that the system trusts. The default is `None`.
+
+* `client_cert_ca` - (Optional)(Advertised Certificate Authorities)Specifies that the CAs that the system advertises to clients is being trusted by the profile. The default is `None`.
+
 * `renegotiation` - (Optional) Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
 
 * `retain_certificate` - (Optional) When `true`, client certificate is retained in SSL session.

diff --git a/go.mod b/go.mod
@@ -10,8 +10,8 @@ require (
 	github.com/Azure/azure-storage-blob-go v0.13.0
 	github.com/Azure/go-autorest/autorest v0.11.18
 	github.com/Azure/go-autorest/autorest/adal v0.9.13
-	github.com/f5devcentral/go-bigip v0.0.0-20231106055810-6ff3de737dbe
-	github.com/f5devcentral/go-bigip/f5teem v0.0.0-20231106055810-6ff3de737dbe
+	github.com/f5devcentral/go-bigip v0.0.0-20231120063103-95f22f4d262c
+	github.com/f5devcentral/go-bigip/f5teem v0.0.0-20231120063103-95f22f4d262c
 	github.com/google/uuid v1.3.0
 	github.com/hashicorp/terraform-plugin-sdk/v2 v2.25.0
 	github.com/stretchr/testify v1.8.4
@@ -77,4 +77,4 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
-go 1.17
+go 1.21.3