/azure-test-gateway-vnet

snippet for deploying a gateway and the s2s vpn

Primary LanguageHCL

DR network creation

Deploys a Azure Network Gateway in the DR region.

Usage

Populate the variables.auto.tfvars with the values and complete

Secret values

The repos will ignore any variables file with the name *.local.auto.tfvars. You can use this to create a file containing the IP and the preshared key. They won't be commited to the repo.

onpremises_gw_address = "XXX.XXX.XXX.XXX"
onpremises_shared_key = "thisIsSuperSecurePSK23!"

To-DO

run TF docs, integrate the git-hook (fmt, validate,...) maybe some testing

Deployed resources

VNET

  • resource_group_name = DR-RG-Manual
  • location = switzerlandnorth
  • virtual_network_name = helbnetzvnethubprod22
  • address_space = 10.40.128.0/19
  • gateway_subnet = 10.40.128.0/27
  • vnet_dns_servers = 192.168.123.110, 192.168.123.111

Network Gateway

  • gateway_name = helbnetzvnetgwprod22
  • gateway_public_ip = 20.250.36.118
  • onpremises_address_space = 10.0.0.0/16, 172.16.0.0/12, 192.168.96.0/20, 192.168.123.0/24

Documentation

Requirements

Name Version
azurerm ~>3.47.0

Providers

Name Version
azurerm 3.47.0
local 2.4.0

Modules

Name Source Version
gateway ./gateway n/a
vnet ./vnet n/a

Resources

Name Type
local_file.output_md resource
azurerm_resource_group.hub-rg data source

Inputs

Name Description Type Default Required
azure-client-id Azure Client ID string "" no
azure-client-secret Azure Client Secret string "" no
azure-subscription-id Azure Subscription ID string "" no
azure-tenant-id Azure Tenant ID string "" no
gateway_subnet_address_space hub vnet adress space (/27) string "10.0.0.0/27" no
hub_nameservers ip of the custom DNS servers to be applied on the vnet list(string) n/a yes
hub_resource_group_name Name of the RG for the hub VNET string n/a yes
hub_vnet_address_space hub vnet adress space (greater than /27) string "10.0.0.0/16" no
onpremises_address_space list of ip ranges for on premises list(string) n/a yes
onpremises_gateway_name name of the local gateway string "onpremises" no
onpremises_gw_address IP of the onpremises gateway string n/a yes
onpremises_shared_key IPSEK shared key string n/a yes
output_md_file location of the file where this cloud foundation kit module generates its documentation output string "./README.md" no
resources_prefixe prefixe for resources (zB: testdr) string n/a yes
resources_sufixe sufixe for resources (zB: prod21) string n/a yes
tags list of tags to be applied on resources map(any) n/a yes

Outputs

No outputs.