Add DNS Armor support (#3874)

* add dns armor module

* add dns armor to pf

* added missing/optional attributes

* Update project schemas

* Set version file copyright year to 2025

* replace module with single resource

* moved into it's own file

* Added tests and defaulting enabled to false

* Add optional name parameter and updated schemas

* make dns_threat_detector.enabled optional in project schemas

---------

Co-authored-by: Luca Prete <preteluca@gmail.com>

fast/stages/0-org-setup/schemas/project.schema.json

@@ -481,6 +481,36 @@
     "descriptive_name": {
       "type": "string"
     },
+    "dns_threat_detector": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "excluded_networks": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "labels": {
+          "type": "object"
+        },
+        "location": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "threat_detector_provider": {
+          "type": "string",
+          "enum": [
+            "INFOBLOX"
+          ]
+        }
+      }
+    },
     "org_policies": {
       "type": "object",
       "additionalProperties": false,

fast/stages/0-org-setup/schemas/project.schema.md

@@ -149,6 +149,16 @@
   - items: *string*
 - **name**: *string*
 - **descriptive_name**: *string*
+- **dns_threat_detector**: *object*
+  <br>*additional properties: false*
+  - **enabled**: *boolean*
+  - **excluded_networks**: *array*
+    - items: *string*
+  - **labels**: *object*
+  - **location**: *string*
+  - **name**: *string*
+  - **threat_detector_provider**: *string*
+    <br>*enum: ['INFOBLOX']*
 - **org_policies**: *object*
   <br>*additional properties: false*
   - **`^[a-z]+\.`**: *object*

fast/stages/2-networking/schemas/project.schema.json

@@ -481,6 +481,36 @@
     "descriptive_name": {
       "type": "string"
     },
+    "dns_threat_detector": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "excluded_networks": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "labels": {
+          "type": "object"
+        },
+        "location": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "threat_detector_provider": {
+          "type": "string",
+          "enum": [
+            "INFOBLOX"
+          ]
+        }
+      }
+    },
     "org_policies": {
       "type": "object",
       "additionalProperties": false,

fast/stages/2-networking/schemas/project.schema.md

@@ -149,6 +149,16 @@
   - items: *string*
 - **name**: *string*
 - **descriptive_name**: *string*
+- **dns_threat_detector**: *object*
+  <br>*additional properties: false*
+  - **enabled**: *boolean*
+  - **excluded_networks**: *array*
+    - items: *string*
+  - **labels**: *object*
+  - **location**: *string*
+  - **name**: *string*
+  - **threat_detector_provider**: *string*
+    <br>*enum: ['INFOBLOX']*
 - **org_policies**: *object*
   <br>*additional properties: false*
   - **`^[a-z]+\.`**: *object*

fast/stages/2-project-factory/schemas/project.schema.json

@@ -481,6 +481,36 @@
     "descriptive_name": {
       "type": "string"
     },
+    "dns_threat_detector": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "excluded_networks": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "labels": {
+          "type": "object"
+        },
+        "location": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "threat_detector_provider": {
+          "type": "string",
+          "enum": [
+            "INFOBLOX"
+          ]
+        }
+      }
+    },
     "org_policies": {
       "type": "object",
       "additionalProperties": false,

fast/stages/2-project-factory/schemas/project.schema.md

@@ -149,6 +149,16 @@
   - items: *string*
 - **name**: *string*
 - **descriptive_name**: *string*
+- **dns_threat_detector**: *object*
+  <br>*additional properties: false*
+  - **enabled**: *boolean*
+  - **excluded_networks**: *array*
+    - items: *string*
+  - **labels**: *object*
+  - **location**: *string*
+  - **name**: *string*
+  - **threat_detector_provider**: *string*
+    <br>*enum: ['INFOBLOX']*
 - **org_policies**: *object*
   <br>*additional properties: false*
   - **`^[a-z]+\.`**: *object*

fast/stages/2-security/schemas/project.schema.json

@@ -481,6 +481,36 @@
     "descriptive_name": {
       "type": "string"
     },
+    "dns_threat_detector": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean"
+        },
+        "excluded_networks": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "labels": {
+          "type": "object"
+        },
+        "location": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "threat_detector_provider": {
+          "type": "string",
+          "enum": [
+            "INFOBLOX"
+          ]
+        }
+      }
+    },
     "org_policies": {
       "type": "object",
       "additionalProperties": false,

fast/stages/2-security/schemas/project.schema.md

@@ -149,6 +149,16 @@
   - items: *string*
 - **name**: *string*
 - **descriptive_name**: *string*
+- **dns_threat_detector**: *object*
+  <br>*additional properties: false*
+  - **enabled**: *boolean*
+  - **excluded_networks**: *array*
+    - items: *string*
+  - **labels**: *object*
+  - **location**: *string*
+  - **name**: *string*
+  - **threat_detector_provider**: *string*
+    <br>*enum: ['INFOBLOX']*
 - **org_policies**: *object*
   <br>*additional properties: false*
   - **`^[a-z]+\.`**: *object*