terraform-volterra-web-app-security

This is a terraform module to create Volterra's Web Application Security usecase. Read the Web Appplication Security usecase guide to learn more.

Overview

Prerequisites

Volterra Account

Signup For Volterra Account

If you don't have a Volterra account. Please follow this link to signup
Download Volterra API credentials file

Follow how to generate API Certificate to create API credentials
Setup domain delegation

Follow steps from this link to create domain delegation

Command Line Tools

Install terraform

For homebrew installed on macos, run below command to install terraform. For rest of the os follow the instructions from this link to install terraform
```
$ brew tap hashicorp/tap
$ brew install hashicorp/tap/terraform

# to update
$ brew upgrade hashicorp/tap/terraform
```

Export the API certificate password, path to your local p12 file and your api url as environment variables, this is needed for volterra provider to work

export VES_P12_PASSWORD=<your credential password>
export VOLT_API_P12_FILE=<path to your local p12 file>
export VOLT_API_URL=<team or org tenant api url>

Usage Example

terraform {
  required_providers {
    volterra = {
      source = "volterraedge/volterra"
      version = "0.11.5"
    }
  }
}

variable "api_url" {
  #--- UNCOMMENT FOR TEAM OR ORG TENANTS
  # default = "https://<TENANT-NAME>.console.ves.volterra.io/api"
  #--- UNCOMMENT FOR INDIVIDUAL/FREEMIUM
  # default = "https://console.ves.volterra.io/api"
}

# This points the absolute path of the api credentials file you downloaded from Volterra
variable "api_p12_file" {
  default = "path/to/your/api-creds.p12"
}

variable "app_fqdn" {}

variable "namespace" {
  default = ""
}

variable "name" {}

locals{
  namespace = var.namespace != "" ? var.namespace : var.name
}

module "web-app-security" {
  source             = "volterraedge/web-app-security/volterra"
  web_app_name       = var.name
  volterra_namespace = local.namespace
  app_domain         = var.app_fqdn
}

output "web_app_url" {
  value = module.web-app-security.app_url
}

Requirements

Name	Version
terraform	>= 0.13.1
volterra	>= 0.11.5

Providers

Name	Version
volterra	>= 0.11.5

Modules

No modules.

Resources

Name	Type
volterra_app_firewall.this	resource
volterra_http_loadbalancer.this	resource
volterra_namespace.this	resource
volterra_origin_pool.this	resource
volterra_namespace.this	data source

Inputs

Name	Description	Type	Default	Required
app_domain	FQDN for the app. If you have delegated domain `prod.example.com`, then your app_domain can be `<app_name>.prod.example.com`	`string`	n/a	yes
enable_hsts	Flag to enable hsts for HTTPS loadbalancer	`bool`	`false`	no
enable_redirect	Flag to enable http redirect to HTTPS loadbalancer	`bool`	`true`	no
js_cookie_expiry	Javascript cookie expiry time in seconds	`number`	`3600`	no
js_script_delay	Javascript challenge delay in miliseconds	`number`	`5000`	no
origin_server_dns_name	Origin server's publicly resolvable dns name	`string`	`"www.f5.com"`	no
origin_server_sni	Origin server's SNI value	`string`	`""`	no
volterra_namespace	Volterra app namespace where the object will be created. This cannot be system or shared ns.	`string`	n/a	yes
volterra_namespace_exists	Flag to create or use existing volterra namespace	`string`	`false`	no
web_app_name	Web App Name. Also used as a prefix in names of related resources.	`string`	n/a	yes

Outputs

Name	Description
app_url	Domain VIP to access the web app

volterraedge/terraform-volterra-web-app-security