diff --git a/.docs/vpc-module.png b/.docs/vpc-module.png index 7ebae5fb..e46c6f99 100644 Binary files a/.docs/vpc-module.png and b/.docs/vpc-module.png differ diff --git a/.docs/vpc-module.svg b/.docs/vpc-module.svg new file mode 100644 index 00000000..686c2b24 --- /dev/null +++ b/.docs/vpc-module.svg @@ -0,0 +1,4 @@ + + + +
IBM Cloud
Resource Group
VPC
Zone 1
Subnet
gateway--public Public Gateway (Optional)
Zone 2
Subnet
ACL
gateway--public Public Gateway (Optional)
Zone 3
Subnet
gateway--public Public Gateway (Optional)
\ No newline at end of file diff --git a/README.md b/README.md index c78ad649..899fd111 100644 --- a/README.md +++ b/README.md @@ -12,9 +12,7 @@ This module creates the following IBM Cloud® Virtual Private Cloud (VPC) net - Public gateways: Optionally create public gateways in the VPC in each of the three zones of the VPC's region. - Subnets: Create one to three zones in the [subnet.tf](subnet.tf) file. - Network ACLs: Create network ACLs with multiple rules. By default, VPC network ACLs can have no more than 25 rules. -- VPN gateways: Create VPN gateways on your subnets by using the `vpn_gateways` variable. For more information about VPN gateways on VPC, see [About site-to-site VPN gateways](https://cloud.ibm.com/docs/vpc?topic=vpc-using-vpn) in the IBM Cloud docs. -- VPN gateway connections: Add connections to a VPN gateway. -- Hub and spoke DNS-sharing model: Optionally create a hub or spoke VPC, with associated custom resolver and DNS resolution binding, as well as a service-to-service authorization policy which supports the hub and spoke VPCs to be in separate accounts. See [About DNS sharing for VPE gateways](https://cloud.ibm.com/docs/vpc?topic=vpc-hub-spoke-model) in the IBM Cloud docs for details. +- Hub and spoke DNS-sharing model: Optionally create a hub or spoke VPC, with associated custom resolver and DNS resolution binding, as well as a service-to-service authorization policy which supports the hub and spoke VPCs to be in separate accounts. See [About DNS sharing for VPE gateways](https://cloud.ibm.com/docs/vpc?topic=vpc-vpe-dns-sharing) and [hub and spoke communication](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-transit1) in the IBM Cloud docs for details. ![vpc-module](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/main/.docs/vpc-module.png) diff --git a/examples/hub-spoke-delegated-resolver/main.tf b/examples/hub-spoke-delegated-resolver/main.tf index 06f2a7d5..b59a3d34 100644 --- a/examples/hub-spoke-delegated-resolver/main.tf +++ b/examples/hub-spoke-delegated-resolver/main.tf @@ -29,14 +29,14 @@ resource "time_sleep" "delay_between_hub_spoke" { ############################################################################# module "hub_vpc" { - source = "../../" - resource_group_id = module.resource_group.resource_group_id - region = var.region - name = "hub" - prefix = "${var.prefix}-hub" - tags = var.resource_tags - enable_hub = true - skip_custom_resolver_hub_creation = true + source = "../../" + resource_group_id = module.resource_group.resource_group_id + region = var.region + name = "hub" + prefix = "${var.prefix}-hub" + tags = var.resource_tags + enable_hub = true + dns_zone_name = "example.com" subnets = { zone-1 = [ { @@ -121,6 +121,6 @@ module "tg_gateway_connection" { global_routing = false resource_tags = var.resource_tags resource_group_id = module.resource_group.resource_group_id - vpc_connections = [module.hub_vpc.vpc_crn, module.spoke_vpc.vpc_crn] + vpc_connections = [{ vpc_crn = module.hub_vpc.vpc_crn }, { vpc_crn = module.spoke_vpc.vpc_crn }] classic_connections_count = 0 }