-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Azure flow logs from storage accounts (#21)
Add module to onboard azure flow storage accounts, and example on how to use it. Fix links in readme to submodules in terraform module page (now showing 404). Add outputs to the `azure_subscription` module with its variable values.
- Loading branch information
1 parent
0c6a5d1
commit 2f31be9
Showing
21 changed files
with
383 additions
and
21 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,38 @@ | ||
| <!-- BEGIN_TF_DOCS --> | ||
| ## Requirements | ||
|
|
||
| | Name | Version | | ||
| |------|---------| | ||
| | <a name="requirement_azurerm"></a> [azurerm](#requirement\_azurerm) | >= 4.0 | | ||
| | <a name="requirement_illumio-cloudsecure"></a> [illumio-cloudsecure](#requirement\_illumio-cloudsecure) | >= 1.2.0 | | ||
|
|
||
| ## Providers | ||
|
|
||
| No providers. | ||
|
|
||
| ## Modules | ||
|
|
||
| | Name | Source | Version | | ||
| |------|--------|---------| | ||
| | <a name="module_azure_flow_logs_storage_accounts"></a> [azure\_flow\_logs\_storage\_accounts](#module\_azure\_flow\_logs\_storage\_accounts) | illumio/cloudsecure/illumio//modules/azure_flow_logs_storage_accounts | 1.4.0 | | ||
| | <a name="module_azure_subscription_dev"></a> [azure\_subscription\_dev](#module\_azure\_subscription\_dev) | illumio/cloudsecure/illumio//modules/azure_subscription | 1.4.0 | | ||
|
|
||
| ## Resources | ||
|
|
||
| No resources. | ||
|
|
||
| ## Inputs | ||
|
|
||
| | Name | Description | Type | Default | Required | | ||
| |------|-------------|------|---------|:--------:| | ||
| | <a name="input_azure_client_id"></a> [azure\_client\_id](#input\_azure\_client\_id) | The Azure Client ID. | `string` | n/a | yes | | ||
| | <a name="input_azure_client_secret"></a> [azure\_client\_secret](#input\_azure\_client\_secret) | The Azure Client Secret. | `string` | n/a | yes | | ||
| | <a name="input_azure_subscription_id"></a> [azure\_subscription\_id](#input\_azure\_subscription\_id) | The Azure Subscription ID. | `string` | n/a | yes | | ||
| | <a name="input_azure_tenant_id"></a> [azure\_tenant\_id](#input\_azure\_tenant\_id) | The Azure Tenant ID. | `string` | n/a | yes | | ||
| | <a name="input_illumio_cloudsecure_client_id"></a> [illumio\_cloudsecure\_client\_id](#input\_illumio\_cloudsecure\_client\_id) | The OAuth 2 client identifier used to authenticate against the CloudSecure Config API. | `string` | n/a | yes | | ||
| | <a name="input_illumio_cloudsecure_client_secret"></a> [illumio\_cloudsecure\_client\_secret](#input\_illumio\_cloudsecure\_client\_secret) | The OAuth 2 client secret used to authenticate against the CloudSecure Config API. | `string` | n/a | yes | | ||
|
|
||
| ## Outputs | ||
|
|
||
| No outputs. | ||
| <!-- END_TF_DOCS --> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,54 @@ | ||
| provider "azurerm" { | ||
| features {} | ||
| client_id = var.azure_client_id | ||
| client_secret = var.azure_client_secret | ||
| tenant_id = var.azure_tenant_id | ||
| subscription_id = var.azure_subscription_id | ||
| } | ||
|
|
||
| provider "azuread" { | ||
| client_id = var.azure_client_id | ||
| client_secret = var.azure_client_secret | ||
| tenant_id = var.azure_tenant_id | ||
| } | ||
|
|
||
| provider "illumio-cloudsecure" { | ||
| client_id = var.illumio_cloudsecure_client_id | ||
| client_secret = var.illumio_cloudsecure_client_secret | ||
| } | ||
|
|
||
| module "azure_subscription_dev" { | ||
| source = "illumio/cloudsecure/illumio//modules/azure_subscription" | ||
| version = "1.4.0" | ||
| name = "Test Azure Subscription" | ||
| mode = "ReadWrite" | ||
| secret_expiration_days = 365 | ||
| subscription_id = "1681e851-ba2d-410b-a66a-9511887e1c1a" # Azure Subscription ID | ||
| tenant_id = "b563cc25-a007-4837-981a-cbe2017228a4" # Azure Tenant ID | ||
|
|
||
| tags = [ | ||
| "Environment=Dev", | ||
| "Owner=John Doe" | ||
| ] | ||
| } | ||
|
|
||
| module "azure_flow_logs_storage_accounts" { | ||
| source = "illumio/cloudsecure/illumio//modules/azure_flow_logs_storage_accounts" | ||
| version = "1.4.0" | ||
| service_principal_client_id = module.azure_subscription_dev.service_principal_client_id | ||
|
|
||
| storage_accounts = [ | ||
| { | ||
| name = "welcomegsk" | ||
| resource_group_name = "demo1" | ||
| }, | ||
| { | ||
| name = "secondstorage" | ||
| resource_group_name = "demo2" | ||
| }, | ||
| { | ||
| name = "thirdstorage" | ||
| resource_group_name = "demo3" | ||
| } | ||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| variable "illumio_cloudsecure_client_id" { | ||
| type = string | ||
| description = "The OAuth 2 client identifier used to authenticate against the CloudSecure Config API." | ||
| validation { | ||
| condition = length(var.illumio_cloudsecure_client_id) > 0 | ||
| error_message = "The illumio_cloudsecure_client_id value must not be empty." | ||
| } | ||
| } | ||
|
|
||
| variable "illumio_cloudsecure_client_secret" { | ||
| type = string | ||
| sensitive = true | ||
| description = "The OAuth 2 client secret used to authenticate against the CloudSecure Config API." | ||
| validation { | ||
| condition = length(var.illumio_cloudsecure_client_secret) > 0 | ||
| error_message = "The illumio_cloudsecure_client_secret value must not be empty." | ||
| } | ||
| } | ||
|
|
||
|
|
||
| variable "azure_subscription_id" { | ||
| type = string | ||
| description = "The Azure Subscription ID." | ||
| validation { | ||
| condition = length(var.azure_subscription_id) > 0 | ||
| error_message = "The azure_subscription_id value must not be empty." | ||
| } | ||
| } | ||
|
|
||
| variable "azure_client_id" { | ||
| type = string | ||
| description = "The Azure Client ID." | ||
| validation { | ||
| condition = length(var.azure_client_id) > 0 | ||
| error_message = "The azure_client_id value must not be empty." | ||
| } | ||
| } | ||
|
|
||
| variable "azure_client_secret" { | ||
| type = string | ||
| sensitive = true | ||
| description = "The Azure Client Secret." | ||
| validation { | ||
| condition = length(var.azure_client_secret) > 0 | ||
| error_message = "The azure_client_secret value must not be empty." | ||
| } | ||
| } | ||
|
|
||
| variable "azure_tenant_id" { | ||
| type = string | ||
| description = "The Azure Tenant ID." | ||
| validation { | ||
| condition = length(var.azure_tenant_id) > 0 | ||
| error_message = "The azure_tenant_id value must not be empty." | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,12 @@ | ||
| terraform { | ||
| required_providers { | ||
| illumio-cloudsecure = { | ||
| source = "illumio/illumio-cloudsecure" | ||
| version = ">= 1.2.0" | ||
| } | ||
| azurerm = { | ||
| source = "hashicorp/azurerm" | ||
| version = ">= 4.0" | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.