feat: initial DA release - fully-configurable variant (#674)

* update: add CBR DA

* fix: cbr_zones variable definition

* update: add cbr rules creation

* update: add cbr zones to service access group

* fix: remove complex variable usage and add helping docs

* fix: update helper doc

* fix: update required_version

* update: add ibm_catalog.json

* docs: update readme

* fix: add reference architecture and offering icon

* docs: update readme

* tests: add unit test for basic solution

* fixes

* tests: add mocked data from cbr_rules and make enforcement_mode to disabled by default

* SKIP UPGRADE TEST

* addressed review comments

* addressed review comments

* addressed review comments

* addressed review comments

---------

Co-authored-by: Dishank-Kalra1 <[email protected]>
Co-authored-by: Akash Kumar <[email protected]>

Author: 3 people

.catalog-onboard-pipeline.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+offerings:
+  - name: deploy-arch-ibm-context-based-restrictions
+    kind: solution
+    catalog id: 7df1e4ca-d54c-4fd0-82ce-3d13247308cd
+    offering id: dba24f56-79ac-411a-8e3c-08af0171d3dd
+    variations:
+      - name: fully-configurable
+        mark_ready: true
+        install_type: fullstack

.releaserc

@@ -10,6 +10,9 @@
     }],
     ["@semantic-release/exec", {
       "successCmd": "echo \"SEMVER_VERSION=${nextRelease.version}\" >> $GITHUB_ENV"
+    }],
+    ["@semantic-release/exec",{
+      "publishCmd": "./ci/trigger-catalog-onboarding-pipeline.sh --version=v${nextRelease.version}"
     }]
   ]
 }

ibm_catalog.json

@@ -0,0 +1,103 @@
+{
+  "products": [
+    {
+      "name": "deploy-arch-ibm-context-based-restrictions",
+      "label": "Cloud automation for Context Based Restrictions",
+      "product_kind": "solution",
+      "tags": [
+        "ibm_created",
+        "target_terraform",
+        "terraform",
+        "solution",
+        "security"
+      ],
+      "keywords": [
+        "cbr",
+        "context-based-restrictions",
+        "context based restrictions",
+        "zones",
+        "rules",
+        "cbr zones",
+        "cbr rules",
+        "IaC",
+        "infrastructure as code",
+        "terraform",
+        "solution"
+      ],
+      "short_description": "Creates and configures Context Based Restrictions Network Zones and Rules.",
+      "long_description": "This deployable architecture is used to provision and configure [IBM Context Based Restrictions Network Zones](https://cloud.ibm.com/context-based-restrictions/zones) and [IBM Context Based Restrictions Rules](https://cloud.ibm.com/context-based-restrictions/rules).\n\n\n💡 This Terraform-based automation is part of a broader suite of IBM-maintained Infrastructure as Code (IaC) asset collection, each following the naming pattern \"Cloud automation for *servicename*\" and focusing on single IBM Cloud service. These single-service deployable architectures can be used on their own to streamline and automate service deployments through an [IaC approach](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects), or assembled together into a broader [automated IaC stack](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-config-stack) to automate the deployment of an end-to-end solution architecture.",
+      "offering_docs_url": "https://github.com/terraform-ibm-modules/terraform-ibm-cbr/tree/main/solutions/fully-configurable/README.md",
+      "offering_icon_url": "https://github.com/terraform-ibm-modules/terraform-ibm-cbr/tree/main/images/cbr_icon.svg",
+      "provider_name": "IBM",
+      "features": [
+        {
+          "title": "Creates Context Based Restrictions Network Zones",
+          "description": "For more details on an Context Based Restrictions Network Zones, [see here](https://cloud.ibm.com/context-based-restrictions/zones)."
+        },
+        {
+          "title": "Creates Context Based Restrictions Rules",
+          "description": "For more details on an Context Based Restrictions Rules, [see here](https://cloud.ibm.com/docs/account?topic=account-account_setup#how_access)."
+        },
+        {
+          "title": "Creates Access Group Policies",
+          "description": "For more details on an Access Group Polices, [see here](https://cloud.ibm.com/docs/account?topic=account-account_setup#how_access)."
+        }
+      ],
+      "support_details": "This product is in the community registry, as such support is handled through the originated repo. If you experience issues please open an issue in that repository [https://github.com/terraform-ibm-modules/terraform-ibm-cbr/issues](https://github.com/terraform-ibm-modules/terraform-ibm-cbr/issues). Please note this product is not supported via the IBM Cloud Support Center.",
+      "flavors": [
+        {
+          "label": "Fully configurable",
+          "name": "fully-configurable",
+          "index": 1,
+          "install_type": "fullstack",
+          "working_directory": "solutions/fully-configurable",
+          "configuration": [
+            {
+              "key": "ibmcloud_api_key"
+            },
+            {
+              "key": "prefix",
+              "required": true
+            },
+            {
+              "key": "cbr_zones",
+              "required": true
+            },
+            {
+              "key": "cbr_rules",
+              "required": true
+            }
+          ],
+          "iam_permissions": [
+            {
+              "role_crns": [
+                "crn:v1:bluemix:public:iam::::role:Editor"
+              ],
+              "service_name": "context-based-restrictions",
+              "notes": "Required if you are creating Context Based Restrictions Network Zones and Rules."
+            }
+          ],
+          "architecture": {
+            "features": [
+              {
+                "title": " ",
+                "description": "Configured to use IBM secure by default standards, but can be edited to fit your use case."
+              }
+            ],
+            "diagrams": [
+              {
+                "diagram": {
+                  "caption": "Context Based Restrictions",
+                  "url": "https://github.com/terraform-ibm-modules/terraform-ibm-cbr/tree/main/reference-architecture/cbr.svg",
+                  "type": "image/svg+xml"
+                },
+                "description": "This architecture supports creating and configuring Context Based Restrictions rules and network zones."
+              }
+            ]
+          },
+          "terraform_version": "1.10.5"
+        }
+      ]
+    }
+  ]
+}