Skip to content
Merged
Show file tree
Hide file tree
Changes from 56 commits
Commits
Show all changes
58 commits
Select commit Hold shift + click to select a range
5a14cb9
refactor: split observability DA in catalog json
vkuma17 Aug 15, 2025
72a349a
fixed dependencies
vkuma17 Aug 15, 2025
48d75ce
fix
vkuma17 Aug 21, 2025
82fdc5b
updated wrapper version
vkuma17 Aug 21, 2025
8ebe635
addressed review comments
vkuma17 Aug 21, 2025
a9a4113
modified testwrapper version
vkuma17 Aug 21, 2025
c0099a7
fix
vkuma17 Aug 21, 2025
d22d641
corrected mapping for cos
vkuma17 Aug 22, 2025
bea74c2
cloud logs on by default set to false
vkuma17 Aug 22, 2025
371a501
addressed review comments
vkuma17 Aug 22, 2025
d0857c7
skip permutation test
vkuma17 Aug 23, 2025
3561323
addressed review comments
vkuma17 Aug 25, 2025
111f1a5
added notes for iam permission
vkuma17 Aug 25, 2025
ffb6f0f
changed cloud logs to on by default
vkuma17 Aug 25, 2025
32012ec
modified diagram with scc wp
vkuma17 Aug 25, 2025
763235f
adding scc wp dependency
vkuma17 Aug 25, 2025
d958ca7
Update ibm_catalog.json
vkuma17 Aug 25, 2025
4c1ecfb
updated scc wp version
vkuma17 Aug 25, 2025
7ab15c0
Merge branch 'split-obs' of github.com:terraform-ibm-modules/terrafor…
vkuma17 Aug 25, 2025
c5a9f27
modified content
vkuma17 Aug 26, 2025
6803d91
addressed review comments
vkuma17 Aug 26, 2025
b087d1a
spell check
vkuma17 Aug 26, 2025
d4c1d1e
small correction in diagram
vkuma17 Aug 27, 2025
e07dce5
Update pr_test.go
vkuma17 Aug 27, 2025
ecec43b
Update pr_test.go
vkuma17 Aug 27, 2025
facc21f
configured batch settings for dependency permutation tests
vkuma17 Aug 27, 2025
fbc583d
retry config modified for project and catalog api calls
vkuma17 Aug 27, 2025
cf431bd
Update pr_test.go
vkuma17 Aug 27, 2025
4616b6c
changed retry logic
vkuma17 Aug 27, 2025
5b0d2e4
changed testwrapper version
vkuma17 Aug 28, 2025
eafb64c
updated go toolchain version
vkuma17 Aug 28, 2025
a5fe210
Update pr_test.go
vkuma17 Aug 28, 2025
d8a9ce3
Update submodule to latest version
vkuma17 Aug 28, 2025
3b7a62b
fixed precommit issues
vkuma17 Aug 28, 2025
4cf2b33
updated batch config
vkuma17 Aug 28, 2025
0813f9e
updated wrapper version
vkuma17 Aug 28, 2025
1d59c6c
running permutation test in paralle
vkuma17 Aug 29, 2025
c7ace61
Update pr_test.go
vkuma17 Aug 29, 2025
4d9bbc8
newer version of wrapper
vkuma17 Aug 29, 2025
3dd66ec
Merge branch 'split-obs' of github.com:terraform-ibm-modules/terrafor…
vkuma17 Aug 29, 2025
e40c4e0
batch config changed
vkuma17 Aug 30, 2025
7459857
Merge branch 'split-obs' of github.com:terraform-ibm-modules/terrafor…
vkuma17 Aug 30, 2025
acbd14e
batch config
vkuma17 Aug 31, 2025
a00320b
Update pr_test.go
vkuma17 Aug 31, 2025
ec8d20f
newer version of wrapper
vkuma17 Sep 1, 2025
7073b64
addressed review comment
vkuma17 Sep 1, 2025
74ac3ac
addressed review comment
vkuma17 Sep 1, 2025
31b45f2
Update ibmcloud-terratest-wrapper to v1.60.3
daniel-butler-irl Sep 1, 2025
5a16cef
modified diagram as per da rally
vkuma17 Sep 1, 2025
30c58be
Merge branch 'split-obs' of github.com:terraform-ibm-modules/terrafor…
vkuma17 Sep 1, 2025
4324e22
modified diagram
vkuma17 Sep 1, 2025
c802db9
modified diagram
vkuma17 Sep 1, 2025
10989b2
Update pr_test.go
vkuma17 Sep 1, 2025
3a63067
Update ibm_catalog.json
maheshwarishikha Sep 2, 2025
bf5a8d9
Update ibm_catalog.json
maheshwarishikha Sep 2, 2025
2607d6c
Update ibm_catalog.json
maheshwarishikha Sep 2, 2025
94c06b1
Update ibm_catalog.json
maheshwarishikha Sep 2, 2025
828ce15
Update ibm_catalog.json
maheshwarishikha Sep 2, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -245,7 +245,7 @@ To attach access management tags to resources in this module, you need the follo
| <a name="input_security_group_rules"></a> [security\_group\_rules](#input\_security\_group\_rules) | A list of security group rules to be added to the default vpc security group (default empty) | <pre>list(<br/> object({<br/> name = string<br/> direction = string<br/> remote = optional(string)<br/> tcp = optional(<br/> object({<br/> port_max = optional(number)<br/> port_min = optional(number)<br/> })<br/> )<br/> udp = optional(<br/> object({<br/> port_max = optional(number)<br/> port_min = optional(number)<br/> })<br/> )<br/> icmp = optional(<br/> object({<br/> type = optional(number)<br/> code = optional(number)<br/> })<br/> )<br/> })<br/> )</pre> | `[]` | no |
| <a name="input_skip_custom_resolver_hub_creation"></a> [skip\_custom\_resolver\_hub\_creation](#input\_skip\_custom\_resolver\_hub\_creation) | Indicates whether to skip the configuration of a custom resolver in the hub VPC. Only relevant if enable\_hub is set to true. | `bool` | `false` | no |
| <a name="input_skip_spoke_auth_policy"></a> [skip\_spoke\_auth\_policy](#input\_skip\_spoke\_auth\_policy) | Set to true to skip the creation of an authorization policy between the DNS resolution spoke and hub, only enable this if a policy already exists between these two VPCs. See https://cloud.ibm.com/docs/vpc?topic=vpc-vpe-dns-sharing-s2s-auth&interface=ui for more details. | `bool` | `false` | no |
| <a name="input_subnets"></a> [subnets](#input\_subnets) | List of subnets for the vpc. For each item in each array, a subnet will be created. Items can be either CIDR blocks or total ipv4 addressess. Public gateways will be enabled only in zones where a gateway has been created | <pre>object({<br/> zone-1 = list(object({<br/> name = string<br/> cidr = string<br/> public_gateway = optional(bool)<br/> acl_name = string<br/> no_addr_prefix = optional(bool, false) # do not automatically add address prefix for subnet, overrides other conditions if set to true<br/> subnet_tags = optional(list(string), [])<br/> }))<br/> zone-2 = optional(list(object({<br/> name = string<br/> cidr = string<br/> public_gateway = optional(bool)<br/> acl_name = string<br/> no_addr_prefix = optional(bool, false) # do not automatically add address prefix for subnet, overrides other conditions if set to true<br/> subnet_tags = optional(list(string), [])<br/> })))<br/> zone-3 = optional(list(object({<br/> name = string<br/> cidr = string<br/> public_gateway = optional(bool)<br/> acl_name = string<br/> no_addr_prefix = optional(bool, false) # do not automatically add address prefix for subnet, overrides other conditions if set to true<br/> subnet_tags = optional(list(string), [])<br/> })))<br/> })</pre> | <pre>{<br/> "zone-1": [<br/> {<br/> "acl_name": "vpc-acl",<br/> "cidr": "10.10.10.0/24",<br/> "name": "subnet-a",<br/> "no_addr_prefix": false,<br/> "public_gateway": true<br/> }<br/> ],<br/> "zone-2": [<br/> {<br/> "acl_name": "vpc-acl",<br/> "cidr": "10.20.10.0/24",<br/> "name": "subnet-b",<br/> "no_addr_prefix": false,<br/> "public_gateway": true<br/> }<br/> ],<br/> "zone-3": [<br/> {<br/> "acl_name": "vpc-acl",<br/> "cidr": "10.30.10.0/24",<br/> "name": "subnet-c",<br/> "no_addr_prefix": false,<br/> "public_gateway": false<br/> }<br/> ]<br/>}</pre> | no |
| <a name="input_subnets"></a> [subnets](#input\_subnets) | List of subnets for the vpc. For each item in each array, a subnet will be created. Items can be either CIDR blocks or total ipv4 addresses. Public gateways will be enabled only in zones where a gateway has been created | <pre>object({<br/> zone-1 = list(object({<br/> name = string<br/> cidr = string<br/> public_gateway = optional(bool)<br/> acl_name = string<br/> no_addr_prefix = optional(bool, false) # do not automatically add address prefix for subnet, overrides other conditions if set to true<br/> subnet_tags = optional(list(string), [])<br/> }))<br/> zone-2 = optional(list(object({<br/> name = string<br/> cidr = string<br/> public_gateway = optional(bool)<br/> acl_name = string<br/> no_addr_prefix = optional(bool, false) # do not automatically add address prefix for subnet, overrides other conditions if set to true<br/> subnet_tags = optional(list(string), [])<br/> })))<br/> zone-3 = optional(list(object({<br/> name = string<br/> cidr = string<br/> public_gateway = optional(bool)<br/> acl_name = string<br/> no_addr_prefix = optional(bool, false) # do not automatically add address prefix for subnet, overrides other conditions if set to true<br/> subnet_tags = optional(list(string), [])<br/> })))<br/> })</pre> | <pre>{<br/> "zone-1": [<br/> {<br/> "acl_name": "vpc-acl",<br/> "cidr": "10.10.10.0/24",<br/> "name": "subnet-a",<br/> "no_addr_prefix": false,<br/> "public_gateway": true<br/> }<br/> ],<br/> "zone-2": [<br/> {<br/> "acl_name": "vpc-acl",<br/> "cidr": "10.20.10.0/24",<br/> "name": "subnet-b",<br/> "no_addr_prefix": false,<br/> "public_gateway": true<br/> }<br/> ],<br/> "zone-3": [<br/> {<br/> "acl_name": "vpc-acl",<br/> "cidr": "10.30.10.0/24",<br/> "name": "subnet-c",<br/> "no_addr_prefix": false,<br/> "public_gateway": false<br/> }<br/> ]<br/>}</pre> | no |
| <a name="input_tags"></a> [tags](#input\_tags) | List of Tags for the resource created | `list(string)` | `null` | no |
| <a name="input_update_delegated_resolver"></a> [update\_delegated\_resolver](#input\_update\_delegated\_resolver) | If set to true, and if the vpc is configured to be a spoke for DNS resolution (enable\_hub\_vpc\_crn or enable\_hub\_vpc\_id set), then the spoke VPC resolver will be updated to a delegated resolver. | `bool` | `false` | no |
| <a name="input_use_existing_dns_instance"></a> [use\_existing\_dns\_instance](#input\_use\_existing\_dns\_instance) | Whether to use an existing dns instance. If true, existing\_dns\_instance\_id must be set. | `bool` | `false` | no |
Expand Down
2 changes: 1 addition & 1 deletion dynamic_values/network_acls.tf
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ locals {
network_acl.name => {
rules = flatten([
[
# These rules cannot be added in a conditional operator due to inconsistant typing
# These rules cannot be added in a conditional operator due to inconsistent typing
# This will add all cluster_rules if the acl object contains prepend_ibm_rules as true
for rule in local.rules :
rule if network_acl.prepend_ibm_rules == true
Expand Down
2 changes: 1 addition & 1 deletion examples/hub-spoke-manual-resolver/README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Hub and Spoke VPC with manual DNS resolver Example

This example demostrates how to deploy hub and spoke VPCs, inclusive of enabling DNS-sharing using a manual DNS resolver in the spoke VPC (as opposed to a delegated resolver).
This example demonstrates how to deploy hub and spoke VPCs, inclusive of enabling DNS-sharing using a manual DNS resolver in the spoke VPC (as opposed to a delegated resolver).

Caveat: Using a manual resolver, as opposed to a delegated resolver requires to ensure that the custom resolver IPs in the hub VPC do not change outside the terraform lifecycle (which should be the case if you follow a proper IaC approach).

Expand Down
Loading