chore: Upgrade Terraform version for examples, fix links for diagrams…

… and sources for modules (#23)
PaloAltoNetworks · Mar 6, 2024 · 18545ec · 18545ec
1 parent d8df2b8
commit 18545ec
Show file tree

Hide file tree

Showing 52 changed files with 436 additions and 133 deletions.
diff --git a/examples/appgw/README.md b/examples/appgw/README.md
@@ -31,7 +31,7 @@ Name | Type | Description
 
 Requirements needed by this module:
 
-- `terraform`, version: >= 1.2, < 2.0
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/appgw/versions.tf b/examples/appgw/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/common_vmseries/.header.md b/examples/common_vmseries/.header.md
@@ -16,7 +16,7 @@ common VM-Series for all traffic; for a discussion of other options, please see
 
 ## Reference Architecture Design
 
-![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6574404/a7c2452d-f926-49da-bf21-9d840282a0a2)
+![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)
 
 This code implements:
 
@@ -39,7 +39,7 @@ and may present scale limitations with all traffic flowing through a single set
 that occurs when traffic crosses virtual routers. This option is suitable for proof-of-concepts and smaller scale deployments
 because the number of firewalls low. However, the technical integration complexity is high.
 
-![Detailed Topology Diagram](https://user-images.githubusercontent.com/2110772/234920647-c7dc77c1-d86c-42ac-ba5a-59a95439ef23.png)
+![Detailed Topology Diagram](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/8e8da6e0-afba-4bb5-b2c7-a95c7250dab3)
 
 This reference architecture consists of:
 

diff --git a/examples/common_vmseries/README.md b/examples/common_vmseries/README.md
@@ -19,7 +19,6 @@ common VM-Series for all traffic; for a discussion of other options, please see
 
 ![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)
 
-
 This code implements:
 
 - a *centralized design*, a hub-and-spoke topology with a Transit VNet containing VM-Series to inspect all inbound, outbound,
@@ -43,7 +42,6 @@ because the number of firewalls low. However, the technical integration complexi
 
 ![Detailed Topology Diagram](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/8e8da6e0-afba-4bb5-b2c7-a95c7250dab3)
 
-
 This reference architecture consists of:
 
 - a VNET containing:
@@ -212,7 +210,7 @@ Name |  Description
 
 Requirements needed by this module:
 
-- `terraform`, version: >= 1.2, < 2.0
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/common_vmseries/versions.tf b/examples/common_vmseries/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/common_vmseries_and_autoscale/.header.md b/examples/common_vmseries_and_autoscale/.header.md
@@ -22,7 +22,7 @@ but a [dedicated one exists](../standalone\_panorama/README.md).
 
 ## Reference Architecture Design
 
-![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6574404/a7c2452d-f926-49da-bf21-9d840282a0a2)
+![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)
 
 This code implements:
 
@@ -47,7 +47,7 @@ and may present scale limitations with all traffic flowing through a single set
 that occurs when traffic crosses virtual routers. This option is suitable for smaller scale deployments because inbound and
 outbound traffic flows occur on the same set of firewalls. However, the technical integration complexity is high.
 
-![Common-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6500664/b10403f9-795a-4501-a189-3c21d44fc9e7)
+![Common-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/7d363d6a-b394-4851-99b9-03ce8abf379a)
 
 This reference architecture consists of:
 

diff --git a/examples/common_vmseries_and_autoscale/README.md b/examples/common_vmseries_and_autoscale/README.md
@@ -50,7 +50,6 @@ outbound traffic flows occur on the same set of firewalls. However, the technica
 
 ![Common-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/7d363d6a-b394-4851-99b9-03ce8abf379a)
 
-
 This reference architecture consists of:
 
 - a VNET containing:
@@ -235,6 +234,9 @@ Name |  Description
 ## Module's Nameplate
 
 
+Requirements needed by this module:
+
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/common_vmseries_and_autoscale/versions.tf b/examples/common_vmseries_and_autoscale/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  # required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/dedicated_vmseries/.header.md b/examples/dedicated_vmseries/.header.md
@@ -16,7 +16,7 @@ dedicated-inbound VM-Series; for a discussion of other options, please see the d
 
 ## Reference Architecture Design
 
-![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6574404/a7c2452d-f926-49da-bf21-9d840282a0a2)
+![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)
 
 This code implements:
 
@@ -40,7 +40,7 @@ The second set of VM-Series firewalls services all outbound, east-west, and ente
 choice offers increased scale and operational resiliency and reduces the chances of high bandwidth use from the inbound traffic
 flows affecting other traffic flows within the deployment.
 
-![Detailed Topology Diagram](https://user-images.githubusercontent.com/2110772/234920818-44e4082d-b445-4ffc-b0cb-174ef1e3c2ae.png)
+![Detailed Topology Diagram](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/3644469f-5f0f-44f9-8990-010c8bcf1cec)
 
 This reference architecture consists of:
 

diff --git a/examples/dedicated_vmseries/README.md b/examples/dedicated_vmseries/README.md
@@ -43,7 +43,6 @@ flows affecting other traffic flows within the deployment.
 
 ![Detailed Topology Diagram](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/3644469f-5f0f-44f9-8990-010c8bcf1cec)
 
-
 This reference architecture consists of:
 
 - a VNET containing:
@@ -215,7 +214,7 @@ Name |  Description
 
 Requirements needed by this module:
 
-- `terraform`, version: >= 1.2, < 2.0
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/dedicated_vmseries/versions.tf b/examples/dedicated_vmseries/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/dedicated_vmseries_and_autoscale/.header.md b/examples/dedicated_vmseries_and_autoscale/.header.md
@@ -22,7 +22,7 @@ Panorama instance is not covered in this example, but a [dedicated one exists](.
 
 ## Reference Architecture Design
 
-![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6574404/a7c2452d-f926-49da-bf21-9d840282a0a2)
+![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)
 
 This code implements:
 
@@ -48,7 +48,7 @@ set of VM-Series firewalls services all outbound, east-west, and enterprise netw
 increased scale and operational resiliency and reduces the chances of high bandwidth use from the inbound traffic flows affecting
 other traffic flows within the deployment.
 
-![Dedicated-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/2110772/be84d4cb-c4c0-4e62-8bd7-8f5050215876)
+![Dedicated-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/757005dc-3e24-4b39-8a69-7b3fbf9819cb)
 
 This reference architecture consists of:
 

diff --git a/examples/dedicated_vmseries_and_autoscale/README.md b/examples/dedicated_vmseries_and_autoscale/README.md
@@ -51,7 +51,6 @@ other traffic flows within the deployment.
 
 ![Dedicated-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/757005dc-3e24-4b39-8a69-7b3fbf9819cb)
 
-
 This reference architecture consists of:
 
 - a VNET containing:
@@ -231,6 +230,9 @@ Name |  Description
 ## Module's Nameplate
 
 
+Requirements needed by this module:
+
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/dedicated_vmseries_and_autoscale/versions.tf b/examples/dedicated_vmseries_and_autoscale/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  # required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/standalone_panorama/.header.md b/examples/standalone_panorama/.header.md
@@ -23,7 +23,7 @@ This is a non zonal deployment. The deployed infrastructure consists of:
   - a Network Security Group to give access to Panorama's public interface
 - a Panorama appliance with a public IP assigned to the management interface
 
-![standalone-panorama](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/2110772/a2394f73-c0a8-4878-8693-825356abbd23)
+![standalone-panorama](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/b2dadd69-f5b5-4ac4-b356-467ef79cbb0b)
 
 ## Prerequisites
 

diff --git a/examples/standalone_panorama/README.md b/examples/standalone_panorama/README.md
@@ -26,7 +26,6 @@ This is a non zonal deployment. The deployed infrastructure consists of:
 
 ![standalone-panorama](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/b2dadd69-f5b5-4ac4-b356-467ef79cbb0b)
 
-
 ## Prerequisites
 
 A list of requirements might vary depending on the platform used to deploy the infrastructure but a minimum one includes:
@@ -156,7 +155,7 @@ Name |  Description
 
 Requirements needed by this module:
 
-- `terraform`, version: >= 1.2, < 2.0
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/standalone_panorama/versions.tf b/examples/standalone_panorama/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/standalone_vmseries/README.md b/examples/standalone_vmseries/README.md
@@ -154,7 +154,7 @@ Name |  Description
 
 Requirements needed by this module:
 
-- `terraform`, version: >= 1.2, < 2.0
+- `terraform`, version: >= 1.5, < 2.0
 
 
 Providers used in this module:

diff --git a/examples/standalone_vmseries/versions.tf b/examples/standalone_vmseries/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = ">= 1.2, < 2.0"
+  required_version = ">= 1.5, < 2.0"
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"

diff --git a/examples/test_infrastructure/.header.md b/examples/test_infrastructure/.header.md
@@ -0,0 +1,16 @@
+# Test Infrastructure code
+
+Terraform code to deploy a test infrastructure consisting of:
+
+* two VNETs that can be peered with the transit VNET deployed in any of the examples, each contains:
+  * a Linux-based VM running NGINX server to mock a web application
+  * an Azure Bastion (enables SSH access to the VM)
+  * UDRs forcing the traffic to flow through the NVA deployed by any of NGFW examples.
+
+## Usage
+
+To use this code, please deploy one of the examples first. Then copy the [`examples.tfvars`](./example.tfvars) to `terraform.tfvars` and edit it to your needs.
+
+Please correct the values marked with `TODO` markers at minimum.
+
+## Reference