Skip to content
Merged
Show file tree
Hide file tree
Changes from 8 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
57 changes: 57 additions & 0 deletions patterns/DA-cbr-tutorial.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@

# Configuring Landing Zone with Account Base DA to create CBR VPC Zone

This tutorial provides step-by-step instructions for using the IBM Cloud Account Infrastructure Base Deployment Architecture to provision a Context-Based Restriction (CBR) VPC zone and configure it with Landing Zone.

## Prerequisites

- IBM Cloud account with administrative permissions

## Step 1: Deploy the Account Infrastructure Base Deployment Architecture

1. Navigate to the IBM Cloud Catalog using this URL:
[Cloud automation for account configuration](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-account-infra-base-63641cec-6093-4b4f-b7b0-98d2f4185cd6-global?kind=terraform&format=terraform&version=93c7f855-881d-459b-8999-4567a4883f57-global)

2. Click on **Add to project** to start the deployment process

3. Configure the deployment parameters:
- Enter the name for the project
- Enter the description (optional)
- Enter the configuration name
- Select the region
- Select the resource group

4. Review your configuration and click **Create**

5. Configure the required variables present under **security**, **required** and **optional** sections.

6. Click on deploy.

## Step 2: Retrieve the CBR VPC Zone ID

To access the CBR Zone ID, which becomes available as an output after the Account Base DA deployment completes -

1. Navigate to Account Infrastructure Base deployment and select the configuration as shown in the reference image below.
![Projects Account Infrastructure Base Deployment](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/infra-base-deployed.png)

2.In the outputs section, locate the output variable named `cbr_map_vpc_zoneid` and copy the `zone_id` value as illustrated below.
![Projects Account Infrastructure Base Deployment CBR Zone VPC ID Output](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/infra-base-cbr-vpc-zone-id.png)

## Step 3: Configure Landing Zone with the CBR Zone ID

To properly configure landing zone with the retrieved CBR Zone ID -

1. Select the appropriate landing zone configuration from one of the following options:
- [Red Hat OpenShift Container Platform on VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-ocp-95fccffc-ae3b-42df-b6d9-80be5914d852-global)
- [VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vpc-9fc0fa64-27af-4fed-9dce-47b3640ba739-global)
- [VSI on VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vsi-ef663980-4c71-4fac-af4f-4a510a9bcf68-global)

2. Configure the required variables present under **security**, **required** and **optional** sections.

3. Within the **optional** section, locate the field labeled `existing_vpc_cbr_zone_id` and paste the `zone_id` value copied in step 2, as shown below.
![Adding CBR VPC Zone ID](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/existing_vpc_cbr_zone_id.png)

4. Click on deploy.

5. Once deployed, CBR VPC zone will contain the required VPCs IDs as shown below.
![CBR VPC zone containing required VPC IDs](https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-landing-zone/main/reference-architectures/cbr-vpc-zone.png)
Binary file added reference-architectures/cbr-vpc-zone.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 1 addition & 1 deletion reference-architectures/roks.drawio.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 1 addition & 1 deletion reference-architectures/vpc.drawio.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 1 addition & 1 deletion reference-architectures/vsi-vsi.drawio.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.