feat(alb-waf): Onboard WAF managed rule set

docs/stackit_beta.md

@@ -42,6 +42,7 @@ stackit beta [flags]
 
 * [stackit](./stackit.md)	 - Manage STACKIT resources using the command line
 * [stackit beta alb](./stackit_beta_alb.md)	 - Manages application loadbalancers
+* [stackit beta alb-waf](./stackit_beta_alb-waf.md)	 - Manages the Web Application Firewall (WAF) for application loadbalancers
 * [stackit beta cdn](./stackit_beta_cdn.md)	 - Manage CDN resources
 * [stackit beta edge-cloud](./stackit_beta_edge-cloud.md)	 - Provides functionality for Edge Cloud services.
 * [stackit beta intake](./stackit_beta_intake.md)	 - Provides functionality for intake

docs/stackit_beta_alb-waf.md

@@ -0,0 +1,34 @@
+## stackit beta alb-waf
+
+Manages the Web Application Firewall (WAF) for application loadbalancers
+
+### Synopsis
+
+Manage the lifecycle of Web Application Firewall (WAF) configurations for application loadbalancers.
+
+```
+stackit beta alb-waf [flags]
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit beta alb-waf"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta](./stackit_beta.md)	 - Contains beta STACKIT CLI commands
+* [stackit beta alb-waf managed-rule-set](./stackit_beta_alb-waf_managed-rule-set.md)	 - Provides functionality for managed rule sets of the ALB WAF
+

docs/stackit_beta_alb-waf_managed-rule-set.md

@@ -0,0 +1,38 @@
+## stackit beta alb-waf managed-rule-set
+
+Provides functionality for managed rule sets of the ALB WAF
+
+### Synopsis
+
+Provides functionality for managed rule sets (MRS) of the Web Application Firewall (WAF) for application loadbalancers.
+
+```
+stackit beta alb-waf managed-rule-set [flags]
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit beta alb-waf managed-rule-set"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta alb-waf](./stackit_beta_alb-waf.md)	 - Manages the Web Application Firewall (WAF) for application loadbalancers
+* [stackit beta alb-waf managed-rule-set create](./stackit_beta_alb-waf_managed-rule-set_create.md)	 - Creates a managed rule set for the ALB WAF
+* [stackit beta alb-waf managed-rule-set delete](./stackit_beta_alb-waf_managed-rule-set_delete.md)	 - Deletes a managed rule set of the ALB WAF
+* [stackit beta alb-waf managed-rule-set describe](./stackit_beta_alb-waf_managed-rule-set_describe.md)	 - Describes a managed rule set of the ALB WAF
+* [stackit beta alb-waf managed-rule-set list](./stackit_beta_alb-waf_managed-rule-set_list.md)	 - Lists all managed rule sets of the ALB WAF
+* [stackit beta alb-waf managed-rule-set update](./stackit_beta_alb-waf_managed-rule-set_update.md)	 - Updates a managed rule set of the ALB WAF
+

docs/stackit_beta_alb-waf_managed-rule-set_create.md

@@ -0,0 +1,42 @@
+## stackit beta alb-waf managed-rule-set create
+
+Creates a managed rule set for the ALB WAF
+
+### Synopsis
+
+Creates a managed rule set (MRS) for the Web Application Firewall (WAF) of application loadbalancers.
+
+```
+stackit beta alb-waf managed-rule-set create [flags]
+```
+
+### Examples
+
+```
+  Create a managed rule set with name "my-managed-rule-set"
+  $ stackit beta alb-waf managed-rule-set create --name my-managed-rule-set
+```
+
+### Options
+
+```
+  -h, --help          Help for "stackit beta alb-waf managed-rule-set create"
+      --name string   Name of the managed rule set
+      --type string   Managed rule set type (one of: [TYPE_OWASP_CRS]) (default "TYPE_OWASP_CRS")
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta alb-waf managed-rule-set](./stackit_beta_alb-waf_managed-rule-set.md)	 - Provides functionality for managed rule sets of the ALB WAF
+

docs/stackit_beta_alb-waf_managed-rule-set_delete.md

@@ -0,0 +1,40 @@
+## stackit beta alb-waf managed-rule-set delete
+
+Deletes a managed rule set of the ALB WAF
+
+### Synopsis
+
+Deletes a managed rule set (MRS) of the Web Application Firewall (WAF) for application loadbalancers.
+
+```
+stackit beta alb-waf managed-rule-set delete NAME [flags]
+```
+
+### Examples
+
+```
+  Delete a managed rule set with name "my-managed-rule-set"
+  $ stackit beta alb-waf managed-rule-set delete my-managed-rule-set
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit beta alb-waf managed-rule-set delete"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta alb-waf managed-rule-set](./stackit_beta_alb-waf_managed-rule-set.md)	 - Provides functionality for managed rule sets of the ALB WAF
+

docs/stackit_beta_alb-waf_managed-rule-set_describe.md

@@ -0,0 +1,40 @@
+## stackit beta alb-waf managed-rule-set describe
+
+Describes a managed rule set of the ALB WAF
+
+### Synopsis
+
+Describes a managed rule set (MRS) of the Web Application Firewall (WAF) for application loadbalancers.
+
+```
+stackit beta alb-waf managed-rule-set describe NAME [flags]
+```
+
+### Examples
+
+```
+  Get details about a managed rule set with name "my-managed-rule-set"
+  $ stackit beta alb-waf managed-rule-set describe my-managed-rule-set
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit beta alb-waf managed-rule-set describe"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta alb-waf managed-rule-set](./stackit_beta_alb-waf_managed-rule-set.md)	 - Provides functionality for managed rule sets of the ALB WAF
+

docs/stackit_beta_alb-waf_managed-rule-set_list.md

@@ -0,0 +1,47 @@
+## stackit beta alb-waf managed-rule-set list
+
+Lists all managed rule sets of the ALB WAF
+
+### Synopsis
+
+Lists all managed rule sets (MRS) of the Web Application Firewall (WAF) for application loadbalancers.
+
+```
+stackit beta alb-waf managed-rule-set list [flags]
+```
+
+### Examples
+
+```
+  List all managed rule sets
+  $ stackit beta alb-waf managed-rule-set list
+
+  List all managed rule sets in JSON format
+  $ stackit beta alb-waf managed-rule-set list --output-format json
+
+  List up to 10 managed rule sets
+  $ stackit beta alb-waf managed-rule-set list --limit 10
+```
+
+### Options
+
+```
+  -h, --help        Help for "stackit beta alb-waf managed-rule-set list"
+      --limit int   Number of managed rule sets to list
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta alb-waf managed-rule-set](./stackit_beta_alb-waf_managed-rule-set.md)	 - Provides functionality for managed rule sets of the ALB WAF
+

docs/stackit_beta_alb-waf_managed-rule-set_update.md

@@ -0,0 +1,41 @@
+## stackit beta alb-waf managed-rule-set update
+
+Updates a managed rule set of the ALB WAF
+
+### Synopsis
+
+Updates the rules of a managed rule set (MRS) of the Web Application Firewall (WAF) for application loadbalancers. Only the rules provided in the configuration file are updated, all other rules remain unchanged.
+
+```
+stackit beta alb-waf managed-rule-set update NAME [flags]
+```
+
+### Examples
+
+```
+  Update the rules of a managed rule set with name "my-managed-rule-set" from a configuration file
+  $ stackit beta alb-waf managed-rule-set update my-managed-rule-set --configuration my-rules.json
+```
+
+### Options
+
+```
+  -c, --configuration string   Filename of the input configuration file
+  -h, --help                   Help for "stackit beta alb-waf managed-rule-set update"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit beta alb-waf managed-rule-set](./stackit_beta_alb-waf_managed-rule-set.md)	 - Provides functionality for managed rule sets of the ALB WAF
+

docs/stackit_config_set.md

@@ -29,6 +29,7 @@ stackit config set [flags]
 ### Options
 
 ```
+      --alb-waf-custom-endpoint string                             ALB WAF API base URL, used in calls to this API
       --allowed-url-domain string                                  Domain name, used for the verification of the URLs that are given in the custom identity provider endpoint and "STACKIT curl" command
       --authorization-custom-endpoint string                       Authorization API base URL, used in calls to this API
       --cdn-custom-endpoint string                                 CDN API base URL, used in calls to this API

docs/stackit_config_unset.md

@@ -26,6 +26,7 @@ stackit config unset [flags]
 ### Options
 
 ```
+      --alb-waf-custom-endpoint                             ALB WAF API base URL. If unset, uses the default base URL
       --allowed-url-domain                                  Domain name, used for the verification of the URLs that are given in the IDP endpoint and curl commands. If unset, defaults to stackit.cloud
       --assume-yes                                          If set, skips all confirmation prompts
       --async                                               Configuration option to run commands asynchronously

go.mod

@@ -17,6 +17,7 @@ require (
 	github.com/spf13/viper v1.21.0
 	github.com/stackitcloud/stackit-sdk-go/core v0.26.0
 	github.com/stackitcloud/stackit-sdk-go/services/alb v0.14.2
+	github.com/stackitcloud/stackit-sdk-go/services/albwaf v0.13.0
 	github.com/stackitcloud/stackit-sdk-go/services/authorization v0.15.2
 	github.com/stackitcloud/stackit-sdk-go/services/cdn v1.16.0
 	github.com/stackitcloud/stackit-sdk-go/services/dns v0.21.0

go.sum

@@ -594,6 +594,8 @@ github.com/stackitcloud/stackit-sdk-go/core v0.26.0 h1:jQEb9gkehfp6VCP6TcYk7BI10
 github.com/stackitcloud/stackit-sdk-go/core v0.26.0/go.mod h1:WU1hhxnjXw2EV7CYa1nlEvNpMiRY6CvmIOaHuL3pOaA=
 github.com/stackitcloud/stackit-sdk-go/services/alb v0.14.2 h1:hGzfOJjlCRoFpri5eYIiwhE27qu02pKZLprKvbsTC/w=
 github.com/stackitcloud/stackit-sdk-go/services/alb v0.14.2/go.mod h1:eK6oRB5Tmpt6KbXQ4UYBGg2LgW5bPtVoncL9E8JSRww=
+github.com/stackitcloud/stackit-sdk-go/services/albwaf v0.13.0 h1:uuQDV7Q3ndFJhlBbE2SX9ft+AtBJIck8rEcPr1lIqVE=
+github.com/stackitcloud/stackit-sdk-go/services/albwaf v0.13.0/go.mod h1:4M9G1I64kZwlXO32ZoIpt0GAN4SpZ1SYerwCVVIBGoE=
 github.com/stackitcloud/stackit-sdk-go/services/authorization v0.15.2 h1:b7WJ/vwxlVmNNX91kI3obqGcuoPAyaCbDL5aCMQ/sNg=
 github.com/stackitcloud/stackit-sdk-go/services/authorization v0.15.2/go.mod h1:T/JF25XGJ3GqER/1L2N//DgY8x5tY7gA3N+/0nvmOWY=
 github.com/stackitcloud/stackit-sdk-go/services/cdn v1.16.0 h1:Wqxx0PDTL2F5gqI5jjznuJY0TdqECltjA0aa/rHY63U=

internal/cmd/beta/alb-waf/alb-waf.go

@@ -0,0 +1,29 @@
+package albwaf
+
+import (
+	managedruleset "github.com/stackitcloud/stackit-cli/internal/cmd/beta/alb-waf/managed-rule-set"
+	"github.com/stackitcloud/stackit-cli/internal/pkg/args"
+	"github.com/stackitcloud/stackit-cli/internal/pkg/types"
+
+	"github.com/stackitcloud/stackit-cli/internal/pkg/utils"
+
+	"github.com/spf13/cobra"
+)
+
+func NewCmd(params *types.CmdParams) *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "alb-waf",
+		Short: "Manages the Web Application Firewall (WAF) for application loadbalancers",
+		Long:  "Manage the lifecycle of Web Application Firewall (WAF) configurations for application loadbalancers.",
+		Args:  args.NoArgs,
+		Run:   utils.CmdHelp,
+	}
+	addSubcommands(cmd, params)
+	return cmd
+}
+
+func addSubcommands(cmd *cobra.Command, params *types.CmdParams) {
+	cmd.AddCommand(
+		managedruleset.NewCmd(params),
+	)
+}