Skip to content

Commit

Permalink
Merge pull request #361 from chkp-meravbe/mb-versions
Browse files Browse the repository at this point in the history
AWS | TF | Remove R80.40 and R81 versions from qs-autoscale
  • Loading branch information
chkp-romanka authored Apr 25, 2024
2 parents 412eb56 + 7b3a9ca commit 2c83279
Show file tree
Hide file tree
Showing 8 changed files with 58 additions and 58 deletions.
15 changes: 8 additions & 7 deletions terraform/aws/qs-autoscale-master/README.md

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions terraform/aws/qs-autoscale-master/terraform.tfvars
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ gateways_min_group_size = 2
gateways_max_group_size = 8
gateway_version = "R81.20-BYOL"
gateway_password_hash = ""
gateway_maintenance_mode_password_hash = "" # For R81.10 and below the gateway_password_hash is used also as maintenance-mode password.
gateway_maintenance_mode_password_hash = "" # For R81.10 the gateway_password_hash is used also as maintenance-mode password.
gateway_SICKey = "12345678"
enable_cloudwatch = true

Expand All @@ -44,7 +44,7 @@ management_deploy = true
management_instance_type = "m5.xlarge"
management_version = "R81.20-BYOL"
management_password_hash = ""
management_maintenance_mode_password_hash = "" # For R81.10 and below the management_password_hash is used also as maintenance-mode password.
management_maintenance_mode_password_hash = "" # For R81.10 the management_password_hash is used also as maintenance-mode password.
gateways_policy = "Standard"
gateways_blades = true
admin_cidr = "0.0.0.0/0"
Expand Down
4 changes: 2 additions & 2 deletions terraform/aws/qs-autoscale-master/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -141,7 +141,7 @@ variable "gateway_password_hash" {
default = ""
}
variable "gateway_maintenance_mode_password_hash" {
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 and below the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
type = string
default = ""
}
Expand Down Expand Up @@ -189,7 +189,7 @@ variable "management_password_hash" {
default = ""
}
variable "management_maintenance_mode_password_hash" {
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 and below the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
type = string
default = ""
}
Expand Down
79 changes: 40 additions & 39 deletions terraform/aws/qs-autoscale/README.md

Large diffs are not rendered by default.

2 changes: 0 additions & 2 deletions terraform/aws/qs-autoscale/locals.tf
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,4 @@ locals {
encrypted_protocol_condition = (local.alb_condition && var.load_balancer_protocol == "HTTPS") || (local.nlb_condition && var.load_balancer_protocol == "TLS") ? true : false
deploy_management_condition = var.management_deploy == true
deploy_servers_condition = var.servers_deploy == true
r81_below_gw_versions = ["R80.40-BYOL", "R80.40-PAYG-NGTP", "R80.40-PAYG-NGTX", "R81-BYOL", "R81-PAYG-NGTP", "R81-PAYG-NGTX"]
is_gw_version_r81_below = contains(local.r81_below_gw_versions, var.gateway_version)
}
4 changes: 2 additions & 2 deletions terraform/aws/qs-autoscale/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -37,8 +37,8 @@ module "external_load_balancer" {
target_group_port = local.encrypted_protocol_condition ? 9443 : 9080
listener_port = local.provided_port_condition ? var.service_port : local.encrypted_protocol_condition ? "443" : "80"
certificate_arn = local.encrypted_protocol_condition ? var.certificate : ""
health_check_port = var.load_balancers_type == "Network Load Balancer" && !local.is_gw_version_r81_below ? 8117 : null
health_check_protocol = var.load_balancers_type == "Network Load Balancer" && !local.is_gw_version_r81_below ? "TCP" : null
health_check_port = var.load_balancers_type == "Network Load Balancer" ? 8117 : null
health_check_protocol = var.load_balancers_type == "Network Load Balancer" ? "TCP" : null
}

module "autoscale" {
Expand Down
4 changes: 2 additions & 2 deletions terraform/aws/qs-autoscale/terraform.tfvars
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ gateways_min_group_size = 2
gateways_max_group_size = 8
gateway_version = "R81.20-BYOL"
gateway_password_hash = ""
gateway_maintenance_mode_password_hash = "" # For R81.10 and below the gateway_password_hash is used also as maintenance-mode password.
gateway_maintenance_mode_password_hash = "" # For R81.10 the gateway_password_hash is used also as maintenance-mode password.
gateway_SICKey = "12345678"
enable_cloudwatch = true

Expand All @@ -34,7 +34,7 @@ management_deploy = true
management_instance_type = "m5.xlarge"
management_version = "R81.20-BYOL"
management_password_hash = ""
management_maintenance_mode_password_hash = "" # For R81.10 and below the management_password_hash is used also as maintenance-mode password.
management_maintenance_mode_password_hash = "" # For R81.10 the management_password_hash is used also as maintenance-mode password.
gateways_policy = "Standard"
gateways_blades = true
admin_cidr = "0.0.0.0/0"
Expand Down
4 changes: 2 additions & 2 deletions terraform/aws/qs-autoscale/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -128,7 +128,7 @@ variable "gateway_password_hash" {
default = ""
}
variable "gateway_maintenance_mode_password_hash" {
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 and below the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
type = string
default = ""
}
Expand Down Expand Up @@ -176,7 +176,7 @@ variable "management_password_hash" {
default = ""
}
variable "management_maintenance_mode_password_hash" {
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 and below the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
description = "(optional) Check Point recommends setting Admin user's password and maintenance-mode password for recovery purposes. For R81.10 the Admin user's password is used also as maintenance-mode password. (To generate a password hash use the command 'grub2-mkpasswd-pbkdf2' on Linux and paste it here)."
type = string
default = ""
}
Expand Down

0 comments on commit 2c83279

Please sign in to comment.