feat(edge_services): add multi-waf pipeline support

cmd/scw/testdata/test-all-usage-edge-services-route-rules-add-usage.golden

@@ -11,6 +11,7 @@ ARGS:
   [route-rules.{index}.rule-http-match.path-filter.path-filter-type]   Type of filter to match for the HTTP URL path. For now, all path filters must be written in regex and use the `regex` type (unknown_path_filter | regex)
   [route-rules.{index}.rule-http-match.path-filter.value]              Value to be matched for the HTTP URL path
   [route-rules.{index}.backend-stage-id]                               ID of the backend stage that requests matching the rule should be forwarded to
+  [route-rules.{index}.waf-stage-id]                                   
   [after-position]                                                     Add rules after the given position
   [before-position]                                                    Add rules before the given position
 

cmd/scw/testdata/test-all-usage-edge-services-route-rules-set-usage.golden

@@ -11,6 +11,7 @@ ARGS:
   [route-rules.{index}.rule-http-match.path-filter.path-filter-type]   Type of filter to match for the HTTP URL path. For now, all path filters must be written in regex and use the `regex` type (unknown_path_filter | regex)
   [route-rules.{index}.rule-http-match.path-filter.value]              Value to be matched for the HTTP URL path
   [route-rules.{index}.backend-stage-id]                               ID of the backend stage that requests matching the rule should be forwarded to
+  [route-rules.{index}.waf-stage-id]                                   
 
 FLAGS:
   -h, --help                help for set

docs/commands/edge-services.md

@@ -643,6 +643,7 @@ scw edge-services route-rules add <route-stage-id ...> [arg=value ...]
 | route-rules.{index}.rule-http-match.path-filter.path-filter-type | One of: `unknown_path_filter`, `regex` | Type of filter to match for the HTTP URL path. For now, all path filters must be written in regex and use the `regex` type |
 | route-rules.{index}.rule-http-match.path-filter.value |  | Value to be matched for the HTTP URL path |
 | route-rules.{index}.backend-stage-id |  | ID of the backend stage that requests matching the rule should be forwarded to |
+| route-rules.{index}.waf-stage-id |  |  |
 | after-position |  | Add rules after the given position |
 | before-position |  | Add rules before the given position |
 
@@ -711,6 +712,7 @@ scw edge-services route-rules set <route-stage-id ...> [arg=value ...]
 | route-rules.{index}.rule-http-match.path-filter.path-filter-type | One of: `unknown_path_filter`, `regex` | Type of filter to match for the HTTP URL path. For now, all path filters must be written in regex and use the `regex` type |
 | route-rules.{index}.rule-http-match.path-filter.value |  | Value to be matched for the HTTP URL path |
 | route-rules.{index}.backend-stage-id |  | ID of the backend stage that requests matching the rule should be forwarded to |
+| route-rules.{index}.waf-stage-id |  |  |
 
 
 

go.mod

@@ -24,7 +24,7 @@ require (
 	github.com/moby/buildkit v0.28.0
 	github.com/moby/go-archive v0.2.0
 	github.com/opencontainers/go-digest v1.0.0
-	github.com/scaleway/scaleway-sdk-go v1.0.0-beta.36.0.20260304184440-b3f5e72aea5e
+	github.com/scaleway/scaleway-sdk-go v1.0.0-beta.36.0.20260305131804-040897b1dc59
 	github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10

go.sum

@@ -476,8 +476,8 @@ github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 h1:OkMGxebDjyw0ULyrTYWeN0UNCCkmCWfjPnIA2W6oviI=
 github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06/go.mod h1:+ePHsJ1keEjQtpvf9HHw0f4ZeJ0TLRsxhunSI2hYJSs=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.36.0.20260304184440-b3f5e72aea5e h1:K2g3Hro99UX5Ji/m5ziNYJs9UsaSbhgrN96LRkWJpug=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.36.0.20260304184440-b3f5e72aea5e/go.mod h1:EG4RjSWH4YiEB6bPmLxzkDm7GsEqLcXNTCwigMNapxQ=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.36.0.20260305131804-040897b1dc59 h1:LihhZcC1EBGMXecl4wjuozsII2pKtsxPHkO8P5VXyA4=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.36.0.20260305131804-040897b1dc59/go.mod h1:EG4RjSWH4YiEB6bPmLxzkDm7GsEqLcXNTCwigMNapxQ=
 github.com/sclevine/spec v1.4.0 h1:z/Q9idDcay5m5irkZ28M7PtQM4aOISzOpj4bUPkDee8=
 github.com/sclevine/spec v1.4.0/go.mod h1:LvpgJaFyvQzRvc1kaDs0bulYwzC70PbiYjC4QnFHkOM=
 github.com/secure-systems-lab/go-securesystemslib v0.10.0 h1:l+H5ErcW0PAehBNrBxoGv1jjNpGYdZ9RcheFkB2WI14=

internal/namespaces/edge_services/v1beta1/edge_services_cli.go

@@ -2020,6 +2020,12 @@ func edgeServicesRouteRulesSet() *core.Command {
 				Deprecated: false,
 				Positional: false,
 			},
+			{
+				Name:       "route-rules.{index}.waf-stage-id",
+				Required:   false,
+				Deprecated: false,
+				Positional: false,
+			},
 		},
 		Run: func(ctx context.Context, args any) (i any, e error) {
 			request := args.(*edge_services.SetRouteRulesRequest)
@@ -2091,6 +2097,12 @@ func edgeServicesRouteRulesAdd() *core.Command {
 				Deprecated: false,
 				Positional: false,
 			},
+			{
+				Name:       "route-rules.{index}.waf-stage-id",
+				Required:   false,
+				Deprecated: false,
+				Positional: false,
+			},
 			{
 				Name:       "after-position",
 				Short:      `Add rules after the given position`,