Skip to content

azure: support Hub/Spoke network architecture and add Fortinet deployment#763

Draft
yeoldegrove wants to merge 162 commits intoSUSE:developfrom
Project-Mayerhofen:mayerhofen
Draft

azure: support Hub/Spoke network architecture and add Fortinet deployment#763
yeoldegrove wants to merge 162 commits intoSUSE:developfrom
Project-Mayerhofen:mayerhofen

Conversation

@yeoldegrove
Copy link
Collaborator

@yeoldegrove yeoldegrove commented Sep 29, 2021

Hub/Spoke Architecture

This adds support for Microsoft Azure's Hub/Spoke Architecture.
It does so by implementing a new variable network_topologywhich is set to plain(current setup) by default.
The new variable executes different terraform modules called network_{plain,hub,spoke} which implement the different network scenarios.
If network_topology="hub_spoke" is set, the new hub/spoke scenario is deployed.

A refernce to "Use Hub/Spoke network architecture" is in README.md and examples (to just uncomment) are in terraform.tfvars.

e.g.

plain network (default/current setup)

The plain network is still the default.

# no need to set this, as this is already the default.
network_topology = "plain" 

create hub + spoke network

To create both Hub/Spoke networks and a bastion host, set this in terraform.tfvars:

network_topology = "hub_spoke"                        # set network topology
vnet_hub_create = true                                # create hub vnet
bastion_enabled = true                                # deployment of bastion host
spoke_name = "sap-1"                                  # name for spoke to create

existing hub + create spoke network

To use an existing Hub network and bastion host and only deploy the Spoke network, set this in terraform.tfvars:

network_topology = "hub_spoke"                        # set network topology
vnet_hub_create = false                               # do not create hub vnet
vnet_hub_name = "myhubnet"                            # name of existing hub vnet
bastion_enabled = false                               # disable deployment of bastion host
bastion_host = "X.X.X.X"                              # public IP of existing bastion host in hub network
spoke_name = "sap-2"                                  # name for spoke to create

Fortinet Deployment

Copy link
Collaborator

@arbulu89 arbulu89 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Many many comments.
I just checked the logic of the new code. I didn't check whether the terraform usage of the new components is correct or not, as it is pretty complex.

In any case, I miss some documentation in the terraform.tfvars.example file. This is the file most people use rather than the README file

@yeoldegrove yeoldegrove marked this pull request as draft October 12, 2021 15:00
@yeoldegrove yeoldegrove force-pushed the mayerhofen branch 2 times, most recently from cab6969 to da84d5c Compare November 11, 2021 12:49
yeoldegrove and others added 30 commits February 9, 2022 13:55
…fen/ha-sap-terraform-deployments into mayerhofen
…fen/ha-sap-terraform-deployments into develop-mayerhofen
…terraform-deployments into develop-mayerhofen
…fen/ha-sap-terraform-deployments into mayerhofen
…terraform-deployments into develop-mayerhofen
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants