Agentless Gateway

This Terraform module provisions a Agentless Gateway on Azure as an Virtual machine.

Sonar versions

4.9 and up

Requirements

• Terraform, refer to versions.tf for supported versions.
• An Azure account.
• SSH access - key and network path to the instance.
• Access to the tarball containing Sonar binaries. To request access, click here.

NOTE: In case you are not yet an Imperva customer, please contact our team.

Resources Provisioned

This Terraform module provisions several resources on Azure to create the Agentless Gateway. These resources include:

• A virtual machine instance for running the Agentless Gateway software.
• A disk for storage.
• A security group to allow the required network access to and from the Agentless Gateway instance.
• An Azure network interface.
• An Azure key vault.

The virtual machine and disk provide the computing and storage resources needed to run the Agentless Gateway software. The security group controls the inbound and outbound traffic to the instance

Inputs

The following input variables are required:

• resource_group: Resource group to provision all the resources into
• subnet_id: The ID of the subnet in which to launch the Agentless Gateway instance
• ssh_key: ssh details
• password: Admin password
• storage_details: Azure disk details
• binaries_location: Tarball DSF installation location
• hub_sonarw_public_key: Public key of the sonarw user taken from the main DSF Hub's output
• sonarw_public_key: Public key of the sonarw user taken from the main Gateway output. This variable must only be defined for the DR Gateway.
• sonarw_private_key: Private key of the sonarw user taken from the main Gateway output. This variable must only be defined for the DR Gateway.

Refer to variables.tf for additional variables with default values and additional info.

Outputs

Refer to outputs or https://registry.terraform.io/modules/imperva/dsf-agentless-gw/aws/latest?tab=outputs

Usage

To use this module, add the following to your Terraform configuration:

provider "azurerm" {
  features {}
}

module "globals" {
  source = "imperva/dsf-globals/azurerm"
}

module "dsf_gw" {
  source                        = "imperva/dsf-agentless-gw/azurerm"
  subnet_id                     = azurerm_subnet.example.id

  ssh_key = {
    ssh_private_key_file_path = var.ssh_key_path
    ssh_public_key            = var.ssh_public_key
  }

  allowed_all_cidrs = [data.aws_vpc.selected.cidr_block]

  password        = random_password.pass.result
  storage_details = {
    disk_size            = 1000
    disk_iops_read_write = 0
    storage_account_type = 125
  }
  binaries_location             = module.globals.tarball_location
  hub_sonarw_public_key         = module.hub.federation_public_key
}

To see a complete example of how to use this module in a DSF deployment with other modules, check out the examples directory.

We recommend using a specific version of the module (and not the latest). See available released versions in the main repo README here.

Specify the module's version by adding the version parameter. For example:

module "dsf_agentless_gw" {
  source  = "imperva/dsf-agentless-gw/azurerm"
  version = "x.y.z"
}

SSH Access

SSH access is required to provision this module. To SSH into the Agentless Gateway instance, you will need to provide the private key associated with the key pair specified in the key_name input variable. If direct SSH access to the Agentless Gateway instance is not possible, you can use a bastion host as a proxy.

Additional Information

For more information about the Agentless Gateway and its features, refer to the official documentation here.

For additional information about DSF deployment using terraform, refer to the main repo README here.