Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

VPN module added #43

Merged
merged 3 commits into from
Feb 29, 2024
Merged

VPN module added #43

merged 3 commits into from
Feb 29, 2024

Conversation

HarshitSF
Copy link
Collaborator

No description provided.

@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented Feb 29, 2024 •
edited
Loading

Terraform plan output for core-infra-pipeline in dev 


Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # module.vpn_module_build_step_role.aws_iam_role.default has changed
  ~ resource "aws_iam_role" "default" {
        id                    = "terraform-vpn-module-build-step-role-arc-saas-dev"
      ~ managed_policy_arns   = [
          + "arn:aws:iam::471112653618:policy/terraform-vpn-module-build-step-policy-arc-saas-dev",
        ]
        name                  = "terraform-vpn-module-build-step-role-arc-saas-dev"
        tags                  = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (9 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.cognito_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-cognito-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-cognito-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.deployment_pipeline.aws_codepipeline.deployment_pipeline will be updated in-place
  ~ resource "aws_codepipeline" "deployment_pipeline" {
        id       = "arc-saas-dev-terraform-pipeline"
        name     = "arc-saas-dev-terraform-pipeline"
        tags     = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (3 unchanged attributes hidden)

      ~ stage {
            name = "Stage-Bootstrap"

          ~ action {
                name             = "Action-Bootstrap"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-Networking"

          ~ action {
                name             = "Action-Networking"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-Database"

          ~ action {
                name             = "Action-Database"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-Elasticache"

          ~ action {
                name             = "Action-Elasticache"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-Opensearch"

          ~ action {
                name             = "Action-Opensearch"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-ClientVPN"

          ~ action {
                name             = "Action-ClientVPN"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-IAMRole"

          ~ action {
                name             = "Action-IAMRole"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-EKS"

          ~ action {
                name             = "Action-EKS"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-EKS-Auth"

          ~ action {
                name             = "Action-EKS-Auth"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }
      ~ stage {
            name = "Stage-TenantCodebuilds"

          ~ action {
                name             = "Action-TenantCodebuilds"
              ~ output_artifacts = [
                  + "",
                ]
                # (7 unchanged attributes hidden)
            }
        }

        # (2 unchanged blocks hidden)
    }

  # module.eks_auth_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-eks-auth-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-eks-auth-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.eks_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-eks-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-eks-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.elasticache_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-elasticache-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-elasticache-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.iam_role_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-iam-role-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-iam-role-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.initial_bootstrap.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/initial-bootstrap-arc-saas-dev"
        name                   = "initial-bootstrap-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.networking_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-networking-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-networking-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.opensearch_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-opensearch-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-opensearch-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.tenant_codebuild_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-tenant-codebuild-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-tenant-codebuild-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

  # module.vpn_module_build_step_codebuild_project.aws_codebuild_project.codebuild_project will be updated in-place
  ~ resource "aws_codebuild_project" "codebuild_project" {
        id                     = "arn:aws:codebuild:us-east-1:471112653618:project/terraform-vpn-module-build-step-code-build-arc-saas-dev"
        name                   = "terraform-vpn-module-build-step-code-build-arc-saas-dev"
        tags                   = {
            "Environment" = "dev"
            "Project"     = "arc-saas"
        }
        # (10 unchanged attributes hidden)

      ~ source {
            # (5 unchanged attributes hidden)

          + git_submodules_config {
              + fetch_submodules = false
            }
        }

      + vpc_config {}

        # (4 unchanged blocks hidden)
    }

Plan: 0 to add, 11 to change, 0 to destroy.

@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@github-actions GitHub Actions
Copy link
Contributor

Terraform plan output for client-vpn in dev 


Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
 <= read (data resources)

Terraform will perform the following actions:

  # data.aws_ssm_parameter.ca_key will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "aws_ssm_parameter" "ca_key" {
      + arn     = (known after apply)
      + id      = (known after apply)
      + name    = "/arc-saas-dev-arc-saas-vpn-self-signed-cert-ca.key"
      + type    = (known after apply)
      + value   = (sensitive value)
      + version = (known after apply)
    }

  # module.self_signed_cert_ca.aws_ssm_parameter.certificate[0] will be created
  + resource "aws_ssm_parameter" "certificate" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/arc-saas-dev-arc-saas-vpn-self-signed-cert-ca.pem"
      + tags           = {
          + "Attributes" = "self-signed-cert-ca"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-ca"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tags_all       = {
          + "Attributes" = "self-signed-cert-ca"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-ca"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + version        = (known after apply)
    }

  # module.self_signed_cert_ca.aws_ssm_parameter.private_key[0] will be created
  + resource "aws_ssm_parameter" "private_key" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/arc-saas-dev-arc-saas-vpn-self-signed-cert-ca.key"
      + tags           = {
          + "Attributes" = "self-signed-cert-ca"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-ca"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tags_all       = {
          + "Attributes" = "self-signed-cert-ca"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-ca"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + version        = (known after apply)
    }

  # module.self_signed_cert_ca.tls_private_key.default[0] will be created
  + resource "tls_private_key" "default" {
      + algorithm                     = "RSA"
      + ecdsa_curve                   = "P224"
      + id                            = (known after apply)
      + private_key_openssh           = (sensitive value)
      + private_key_pem               = (sensitive value)
      + private_key_pem_pkcs8         = (sensitive value)
      + public_key_fingerprint_md5    = (known after apply)
      + public_key_fingerprint_sha256 = (known after apply)
      + public_key_openssh            = (known after apply)
      + public_key_pem                = (known after apply)
      + rsa_bits                      = 2048
    }

  # module.self_signed_cert_ca.tls_self_signed_cert.default[0] will be created
  + resource "tls_self_signed_cert" "default" {
      + allowed_uses          = [
          + "crl_signing",
          + "cert_signing",
        ]
      + cert_pem              = (known after apply)
      + early_renewal_hours   = 0
      + id                    = (known after apply)
      + is_ca_certificate     = true
      + key_algorithm         = (known after apply)
      + private_key_pem       = (sensitive value)
      + ready_for_renewal     = false
      + set_authority_key_id  = false
      + set_subject_key_id    = false
      + validity_end_time     = (known after apply)
      + validity_period_hours = 87600
      + validity_start_time   = (known after apply)

      + subject {
          + common_name  = "*.arc-saas.net"
          + organization = "arc-saas"
        }
    }

  # module.self_signed_cert_root.aws_acm_certificate.default[0] will be created
  + resource "aws_acm_certificate" "default" {
      + arn                       = (known after apply)
      + certificate_body          = (known after apply)
      + certificate_chain         = (known after apply)
      + domain_name               = (known after apply)
      + domain_validation_options = (known after apply)
      + id                        = (known after apply)
      + key_algorithm             = (known after apply)
      + not_after                 = (known after apply)
      + not_before                = (known after apply)
      + pending_renewal           = (known after apply)
      + private_key               = (sensitive value)
      + renewal_eligibility       = (known after apply)
      + renewal_summary           = (known after apply)
      + status                    = (known after apply)
      + subject_alternative_names = (known after apply)
      + tags_all                  = (known after apply)
      + type                      = (known after apply)
      + validation_emails         = (known after apply)
      + validation_method         = (known after apply)
    }

  # module.self_signed_cert_root.aws_ssm_parameter.certificate[0] will be created
  + resource "aws_ssm_parameter" "certificate" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/arc-saas-dev-arc-saas-vpn-self-signed-cert-root.pem"
      + tags           = {
          + "Attributes" = "self-signed-cert-root"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-root"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tags_all       = {
          + "Attributes" = "self-signed-cert-root"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-root"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + version        = (known after apply)
    }

  # module.self_signed_cert_root.aws_ssm_parameter.private_key[0] will be created
  + resource "aws_ssm_parameter" "private_key" {
      + arn            = (known after apply)
      + data_type      = (known after apply)
      + id             = (known after apply)
      + insecure_value = (known after apply)
      + key_id         = (known after apply)
      + name           = "/arc-saas-dev-arc-saas-vpn-self-signed-cert-root.key"
      + tags           = {
          + "Attributes" = "self-signed-cert-root"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-root"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tags_all       = {
          + "Attributes" = "self-signed-cert-root"
          + "Name"       = "arc-saas-dev-arc-saas-vpn-self-signed-cert-root"
          + "Namespace"  = "arc-saas"
          + "Stage"      = "dev"
        }
      + tier           = (known after apply)
      + type           = "SecureString"
      + value          = (sensitive value)
      + version        = (known after apply)
    }

  # module.self_signed_cert_root.tls_cert_request.default[0] will be created
  + resource "tls_cert_request" "default" {
      + cert_request_pem = (known after apply)
      + id               = (known after apply)
      + key_algorithm    = (known after apply)
      + private_key_pem  = (sensitive value)

      + subject {
          + common_name  = "*.arc-saas.net"
          + organization = "arc-saas"
        }
    }

  # module.self_signed_cert_root.tls_locally_signed_cert.default[0] will be created
  + resource "tls_locally_signed_cert" "default" {
      + allowed_uses          = [
          + "key_encipherment",
          + "digital_signature",
          + "client_auth",
        ]
      + ca_cert_pem           = (known after apply)
      + ca_key_algorithm      = (known after apply)
      + ca_private_key_pem    = (sensitive value)
      + cert_pem              = (known after apply)
      + cert_request_pem      = (known after apply)
      + early_renewal_hours   = 0
      + id                    = (known after apply)
      + is_ca_certificate     = false
      + ready_for_renewal     = false
      + set_subject_key_id    = false
      + validity_end_time     = (known after apply)
      + validity_period_hours = 87600
      + validity_start_time   = (known after apply)
    }

  # module.self_signed_cert_root.tls_private_key.default[0] will be created
  + resource "tls_private_key" "default" {
      + algorithm                     = "RSA"
      + ecdsa_curve                   = "P224"
      + id                            = (known after apply)
      + private_key_openssh           = (sensitive value)
      + private_key_pem               = (sensitive value)
      + private_key_pem_pkcs8         = (sensitive value)
      + public_key_fingerprint_md5    = (known after apply)
      + public_key_fingerprint_sha256 = (known after apply)
      + public_key_openssh            = (known after apply)
      + public_key_pem                = (known after apply)
      + rsa_bits                      = 2048
    }

Plan: 10 to add, 0 to change, 0 to destroy.

@HarshitSF HarshitSF merged commit 0a37115 into dev Feb 29, 2024
5 checks passed
@HarshitSF HarshitSF deleted the feature/client-vpn branch June 4, 2024 04:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@HarshitSF