Initial commit

Author: johan3141592

.gitignore

@@ -0,0 +1,2 @@
+# Prevent accidental commit of service accounts or service principals
+*.json

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021 Rubrik
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,3 @@
+# Terraform Provider Polaris Examples 
+
+This repository contains examples of how to use the [Polaris](https://registry.terraform.io/providers/rubrikinc/polaris/latest) provider with [Terraform](https://www.terraform.io/).

aws/main.tf

@@ -0,0 +1,35 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to the Polaris service account file."
+}
+
+variable "profile" {
+  type        = string
+  description = "AWS profile."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the AWS account to Polaris. Access key and secret key are read from
+# ~/.aws/credentials. The default region is read from ~/.aws/config. Polaris
+# will authenticate to AWS using an IAM role setup in a CloudFormation stack.
+resource "polaris_aws_account" "default" {
+  profile = var.profile
+
+  regions = [
+    "us-east-2",
+  ]
+}

aws_exocompute/main.tf

@@ -0,0 +1,66 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to the Polaris service account file."
+}
+
+variable "profile" {
+  type        = string
+  description = "AWS profile."
+}
+
+variable "vpc_id" {
+  type        = string
+  description = "AWS VPC ID."
+}
+
+variable "subnet1" {
+  type        = string
+  description = "AWS subnet 1."
+}
+
+variable "subnet2" {
+  type        = string
+  description = "AWS subnet 2."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the AWS account to Polaris.
+resource "polaris_aws_account" "default" {
+  profile = var.profile
+
+  regions = [
+    "us-east-2",
+  ]
+  
+  exocompute {
+    regions = [
+      "us-east-2",
+    ]
+  }
+}
+
+# Create an excompute configuration using the specified VPC and subnets.
+resource "polaris_aws_exocompute" "default" {
+  account_id = polaris_aws_account.default.id
+  region     = "us-east-2"
+  vpc_id     = var.vpc_id
+
+  subnets = [
+    var.subnet1,
+    var.subnet2,
+  ]
+}

azure/main.tf

@@ -0,0 +1,61 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to Polaris service account file."
+}
+
+variable "azure_credentials" {
+  type        = string
+  description = "Path to the Azure service principal file."
+}
+
+variable "subscription_id" {
+  type        = string
+  description = "Azure subscription id."
+}
+
+variable "subscription_name" {
+  type        = string
+  description = "Azure subscription name."
+}
+
+variable "tenant_domain" {
+  type        = string
+  description = "Azure tenant domain."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the Azure service principal to Polaris. See the main README for an
+# explanation of this file.
+resource "polaris_azure_service_principal" "default" {
+  credentials = var.azure_credentials
+}
+
+# Add the Azure subscription to Polaris. This resource depends on the service
+# principal resource.
+resource "polaris_azure_subscription" "default" {
+  subscription_id   = var.subscription_id
+  subscription_name = var.subscription_name
+  tenant_domain     = var.tenant_domain
+
+  regions = [
+    "eastus2"
+  ]
+
+  depends_on = [
+    polaris_azure_service_principal.default
+  ]
+}

azure_exocompute/main.tf

@@ -0,0 +1,78 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to Polaris service account file."
+}
+
+variable "azure_credentials" {
+  type        = string
+  description = "Path to the Azure service principal file."
+}
+
+variable "subscription_id" {
+  type        = string
+  description = "Azure subscription id."
+}
+
+variable "subscription_name" {
+  type        = string
+  description = "Azure subscription name."
+}
+
+variable "tenant_domain" {
+  type        = string
+  description = "Azure tenant domain."
+}
+
+variable "subnet" {
+  type        = string
+  description = "Azure subnet."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the Azure service principal to Polaris. See the main README for an
+# explanation of this file.
+resource "polaris_azure_service_principal" "default" {
+  credentials = var.azure_credentials
+}
+
+# Add the Azure subscription to Polaris.
+resource "polaris_azure_subscription" "default" {
+  subscription_id   = var.subscription_id
+  subscription_name = var.subscription_name
+  tenant_domain     = var.tenant_domain
+
+  regions = [
+    "eastus2",
+  ]
+  
+  exocompute {
+    regions = [
+      "eastus2",
+    ]
+  }
+
+  depends_on = [
+    polaris_azure_service_principal.default
+  ]
+}
+
+# Create an excompute configuration using the specified subnet.
+resource "polaris_azure_exocompute" "default" {
+  subscription_id = polaris_azure_subscription.default.id
+  region          = "eastus2"
+  subnet          = var.subnet
+}

azure_two_teams/operations_team/main.tf

@@ -0,0 +1,46 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to Polaris service account file."
+}
+
+variable "subscription_id" {
+  type        = string
+  description = "Azure subscription id."
+}
+
+variable "subscription_name" {
+  type        = string
+  description = "Azure subscription name."
+}
+
+variable "tenant_domain" {
+  type        = string
+  description = "Azure tenant domain."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the Azure subscription to Polaris. This resource depends on the service
+# principal resource.
+resource "polaris_azure_subscription" "default" {
+  subscription_id   = var.subscription_id
+  subscription_name = var.subscription_name
+  tenant_domain     = var.tenant_domain
+
+  regions = [
+    "eastus2"
+  ]
+}

azure_two_teams/security_team/main.tf

@@ -0,0 +1,30 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to Polaris service account file."
+}
+
+variable "azure_credentials" {
+  type        = string
+  description = "Path to the Azure service principal file."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the Azure service principal to Polaris. See the main README for an
+# explanation of this file.
+resource "polaris_azure_service_principal" "default" {
+  credentials = var.azure_credentials
+}

gcp/main.tf

@@ -0,0 +1,35 @@
+# Point Terraform to the Polaris provider.
+terraform {
+  required_providers {
+    polaris = {
+      source  = "rubrikinc/polaris"
+      version = "~>0.2.0"
+    }
+  }
+}
+
+variable "polaris_credentials" {
+  type        = string
+  description = "Account name or path to the Polaris service account file."
+}
+
+variable "gcp_credentials" {
+  type        = string
+  description = "Path to the GCP service account key file."
+}
+
+variable "project" {
+  type        = string
+  description = "GCP project id."
+}
+
+# Point the provider to the Polaris service account to use.
+provider "polaris" {
+  credentials = var.polaris_credentials
+}
+
+# Add the GCP project to Polaris.
+resource "polaris_gcp_project" "default" {
+  credentials = var.gcp_credentials
+  project     = var.project
+}