feat: add WAF v2 support (#64)

Adds WafV2Config (enabled-only, ServiceKey WAFV2), FlociBuilder.WithWafV2,
unit tests, and an integration round-trip (CreateWebACL -> ListWebACLs ->
DeleteWebACL) via AmazonWAFV2Client. Env key WAFV2 confirmed against the
running 1.5.25 image.

Author: hughesjs

src/Testcontainers.Floci/FlociBuilder.cs

@@ -509,6 +509,13 @@ public FlociBuilder WithAvailabilityZone(string availabilityZone)
     /// <returns>A configured instance of <see cref="FlociBuilder" />.</returns>
     public FlociBuilder WithStepFunctions(StepFunctionsConfig config) => WithServiceConfig(config);
 
+    /// <summary>
+    /// Configures Floci's WAF v2 emulation.
+    /// </summary>
+    /// <param name="config">The WAF v2 configuration.</param>
+    /// <returns>A configured instance of <see cref="FlociBuilder" />.</returns>
+    public FlociBuilder WithWafV2(WafV2Config config) => WithServiceConfig(config);
+
     /// <summary>
     /// Configures Floci's SQS emulation.
     /// </summary>

src/Testcontainers.Floci/WafV2Config.cs

@@ -0,0 +1,28 @@
+using System.Collections.Generic;
+using JetBrains.Annotations;
+
+namespace Testcontainers.Floci;
+
+/// <summary>
+/// Configuration for Floci's WAF v2 emulation.
+/// </summary>
+/// <remarks>
+/// Apply via <see cref="FlociBuilder.WithWafV2(WafV2Config)" />:
+/// <code>
+/// await using var floci = new FlociBuilder(TestImages.Floci)
+///     .WithWafV2(new WafV2Config())
+///     .Build();
+/// </code>
+/// </remarks>
+[PublicAPI]
+public sealed record WafV2Config : FlociServiceConfig
+{
+    /// <inheritdoc />
+    protected override string ServiceKey => "WAFV2";
+
+    /// <inheritdoc />
+    protected override void AddSettings(IDictionary<string, string> env, string prefix)
+    {
+        // WAF v2 is an enabled-only service; there are no additional settings beyond the enabled flag.
+    }
+}

tests/Testcontainers.Floci.IntegrationTests/Testcontainers.Floci.IntegrationTests.csproj

@@ -61,6 +61,7 @@
     <PackageReference Include="AWSSDK.SimpleNotificationService" Version="4.0.3.3" />
     <PackageReference Include="AWSSDK.TranscribeService" Version="4.0.7.3" />
     <PackageReference Include="AWSSDK.Transfer" Version="4.0.10.3" />
+    <PackageReference Include="AWSSDK.WAFV2" Version="4.0.9.5" />
     <PackageReference Include="AWSSDK.StepFunctions" Version="4.0.4.3" />
     <PackageReference Include="AWSSDK.Textract" Version="4.0.4.6" />
     <PackageReference Include="AWSSDK.SimpleSystemsManagement" Version="4.0.8.3" />

tests/Testcontainers.Floci.IntegrationTests/WafV2ServiceTest.cs

@@ -0,0 +1,89 @@
+using System.Linq;
+using System.Net;
+using System.Threading.Tasks;
+using Amazon.WAFV2;
+using Amazon.WAFV2.Model;
+using Testcontainers.Floci;
+using Xunit;
+
+namespace Testcontainers.Floci.Tests;
+
+public sealed class WafV2ServiceTest : IAsyncLifetime
+{
+    private readonly FlociContainer _floci = new FlociBuilder(TestImages.Floci)
+        .WithWafV2(new WafV2Config())
+        .Build();
+
+    public Task InitializeAsync() => _floci.StartAsync();
+
+    public Task DisposeAsync() => _floci.DisposeAsync().AsTask();
+
+    private AmazonWAFV2Client CreateClient()
+    {
+        return new AmazonWAFV2Client(
+            _floci.AccessKey,
+            _floci.SecretKey,
+            new AmazonWAFV2Config
+            {
+                ServiceURL = _floci.GetEndpoint(),
+                AuthenticationRegion = _floci.Region,
+            });
+    }
+
+    [Fact]
+    public async Task CreatesAndListsWebAcl()
+    {
+        using var waf = CreateClient();
+        const string name = "test-web-acl";
+        string? id = null;
+        string? lockToken = null;
+
+        try
+        {
+            var createResponse = await waf.CreateWebACLAsync(new CreateWebACLRequest
+            {
+                Name = name,
+                Scope = Scope.REGIONAL,
+                DefaultAction = new DefaultAction { Allow = new AllowAction() },
+                VisibilityConfig = new VisibilityConfig
+                {
+                    SampledRequestsEnabled = false,
+                    CloudWatchMetricsEnabled = false,
+                    MetricName = "test",
+                },
+            });
+
+            Assert.Equal(HttpStatusCode.OK, createResponse.HttpStatusCode);
+            id = createResponse.Summary.Id;
+            lockToken = createResponse.Summary.LockToken;
+
+            var listResponse = await waf.ListWebACLsAsync(new ListWebACLsRequest
+            {
+                Scope = Scope.REGIONAL,
+            });
+
+            Assert.Equal(HttpStatusCode.OK, listResponse.HttpStatusCode);
+            Assert.Contains(listResponse.WebACLs, acl => acl.Name == name && acl.Id == id);
+        }
+        finally
+        {
+            if (id != null && lockToken != null)
+            {
+                try
+                {
+                    await waf.DeleteWebACLAsync(new DeleteWebACLRequest
+                    {
+                        Name = name,
+                        Id = id,
+                        LockToken = lockToken,
+                        Scope = Scope.REGIONAL,
+                    });
+                }
+                catch (AmazonWAFV2Exception)
+                {
+                    // Best-effort cleanup.
+                }
+            }
+        }
+    }
+}

tests/Testcontainers.Floci.Tests/WafV2ConfigTest.cs

@@ -0,0 +1,35 @@
+using Testcontainers.Floci;
+using Xunit;
+
+namespace Testcontainers.Floci.Tests;
+
+public sealed class WafV2ConfigTest
+{
+    [Fact]
+    public void DefaultsMatchUpstream()
+    {
+        var config = new WafV2Config();
+
+        Assert.True(config.Enabled);
+    }
+
+    [Fact]
+    public void DefaultConfigEmitsEnabledFlag()
+    {
+        var env = new WafV2Config().BuildEnvironment();
+
+        Assert.Equal("true", env["FLOCI_SERVICES_WAFV2_ENABLED"]);
+        var key = Assert.Single(env.Keys);
+        Assert.Equal("FLOCI_SERVICES_WAFV2_ENABLED", key);
+    }
+
+    [Fact]
+    public void DisabledConfigEmitsDisabledFlag()
+    {
+        var env = new WafV2Config { Enabled = false }.BuildEnvironment();
+
+        Assert.Equal("false", env["FLOCI_SERVICES_WAFV2_ENABLED"]);
+        var key = Assert.Single(env.Keys);
+        Assert.Equal("FLOCI_SERVICES_WAFV2_ENABLED", key);
+    }
+}