Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: rename vmseries -> swfw #1

Merged
merged 8 commits into from
Jan 25, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/CODEOWNERS
Validating CODEOWNERS rules …
Original file line number Diff line number Diff line change
@@ -1 +1 @@
* @PaloAltoNetworks/azure-vmseries-modules-codeowners
* @PaloAltoNetworks/azure-swfw-modules-codeowners
4 changes: 2 additions & 2 deletions .github/ISSUE_TEMPLATE/bug_report.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
name: Bug Report
description: Create an issue to help us improve
title: '[Bug Report] <Short title of the bug>'
assignees: aws-vmseries-modules-codeowners
title: "[Bug Report] <Short title of the bug>"
assignees: azure-vmseries-modules-codeowners
body:
- type: textarea
attributes:
Expand Down
2 changes: 1 addition & 1 deletion .github/ISSUE_TEMPLATE/feature_request.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ name: Feature request
description: Suggest an idea for this project
# title: '[Enhancement] <Title>'
labels: enhancement
assignees: aws-vmseries-modules-codeowners
assignees: azure-vmseries-modules-codeowners
body:
- type: textarea
attributes:
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/apply-command.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,12 +20,12 @@ on:
description: ID of the PR that triggered this workflow
type: string
required: true
pr-title:
pr-title:
description: Title of the PR that triggered this workflow
type: string
required: true
comment-id:
description: 'The comment-id of the slash command'
description: "The comment-id of the slash command"
type: string
required: true
branch:
Expand All @@ -40,7 +40,7 @@ jobs:
contents: read
pull-requests: write
id-token: write
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
with:
cloud: azure
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/hub_sync.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,9 @@ jobs:
id: generate-token
uses: tibdex/github-app-token@v1
with:
app_id: ${{ secrets.APP_ID }}
private_key: ${{ secrets.APP_PRIVATE_KEY }}
installation_id: ${{ secrets.APP_INSTALLATION_ID }}
app_id: ${{ secrets.HUB_SYNC_APP_ID }}
private_key: ${{ secrets.HUB_SYNC_APP_PRIVATE_KEY }}
installation_id: ${{ secrets.HUB_SYNC_APP_INSTALLATION_ID }}

- name: Trigger Hub Sync Workflow
uses: benc-uk/workflow-dispatch@v1
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/idempotence-command.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ run-name: "On demand Idempotence test for PR - (#${{ github.event.inputs.pr-id }

permissions:
contents: read

concurrency: chatops-apply

on:
Expand All @@ -20,12 +20,12 @@ on:
description: ID of the PR that triggered this workflow
type: string
required: true
pr-title:
pr-title:
description: Title of the PR that triggered this workflow
type: string
required: true
comment-id:
description: 'The comment-id of the slash command'
description: "The comment-id of the slash command"
type: string
required: true
branch:
Expand All @@ -40,7 +40,7 @@ jobs:
contents: read
pull-requests: write
id-token: write
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
with:
cloud: azure
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/lint_pr_title.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ run-name: "Lint PR - (#${{ github.event.number }}) ${{ github.event.pull_request
permissions:
pull-requests: read

concurrency:
concurrency:
group: lint-${{ github.event.number }}
cancel-in-progress: true

Expand All @@ -22,4 +22,4 @@ on:
jobs:
lint_pr_title:
name: Lint PR
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
6 changes: 3 additions & 3 deletions .github/workflows/plan-command.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,12 +20,12 @@ on:
description: ID of the PR that triggered this workflow
type: string
required: true
pr-title:
pr-title:
description: Title of the PR that triggered this workflow
type: string
required: true
comment-id:
description: 'The comment-id of the slash command'
description: "The comment-id of the slash command"
type: string
required: true
branch:
Expand All @@ -40,7 +40,7 @@ jobs:
contents: read
pull-requests: write
id-token: write
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
with:
cloud: azure
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/pr_ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ permissions:
actions: read
id-token: write

concurrency:
concurrency:
group: pr-${{ github.event.number }}
cancel-in-progress: true

Expand All @@ -17,12 +17,12 @@ on:
- reopened
- synchronize
- ready_for_review
branches: ['main']
branches: ["main"]

jobs:
pr_ci_wrkflw:
name: Run CI
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
if: github.actor != 'dependabot[bot]'
with:
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/pre-commit-update.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,18 +8,18 @@ permissions:
on:
workflow_dispatch:
schedule:
- cron: 0 1 1 * * # 1am of every 1st day of every month
- cron: 0 1 1 * * # 1am of every 1st day of every month

jobs:
update:
name: "Update Pre-Commit dependencies"
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]

pre-commit:
name: Run Pre-Commit with the udpated config
needs: [update]
if: needs.update.outputs.pr_operation == 'created' || needs.update.outputs.pr_operation == 'updated'
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
with:
pre-commit-hooks: terraform_fmt terraform_docs terraform_tflint checkov
branch: pre-commit-dependencies-update
Expand All @@ -28,7 +28,7 @@ jobs:
name: Give comment on the PR if pre-commit failed
needs: [pre-commit, update]
if: always() && (needs.pre-commit.result == 'failure' || needs.pre-commit.result == 'success')
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
with:
pr_number: ${{ needs.update.outputs.pr_number }}
job_result: ${{ needs.pre-commit.result }}
7 changes: 3 additions & 4 deletions .github/workflows/release_ci.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
name: Release CI
run-name: "Continous Release"


permissions:
contents: write
issues: read
Expand All @@ -10,18 +9,18 @@ permissions:
on:
workflow_dispatch:
schedule:
- cron: '0 1 * * 4' # this means every Thursday @1am UTC
- cron: "0 1 * * 4" # this means every Thursday @1am UTC

concurrency: release

jobs:
release_wrkflw:
name: Do release
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
with:
cloud: azure
validate_max_parallel: 20
test_max_parallel: 5
terratest_action: Idempotence # keep in mind that this has to start with capital letter
apply_timeout: 60
apply_timeout: 60
6 changes: 3 additions & 3 deletions .github/workflows/sca-command.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,12 +11,12 @@ on:
description: ID of the PR that triggered this workflow
type: string
required: true
pr-title:
pr-title:
description: Title of the PR that triggered this workflow
type: string
required: true
comment-id:
description: 'The comment-id of the slash command'
description: "The comment-id of the slash command"
type: string
required: true
branch:
Expand Down Expand Up @@ -53,7 +53,7 @@ jobs:
needs: init
permissions:
contents: read
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
with:
pre-commit-hooks: terraform_fmt terraform_docs terraform_tflint checkov
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/validate-command.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,12 +18,12 @@ on:
description: ID of the PR that triggered this workflow
type: string
required: true
pr-title:
pr-title:
description: Title of the PR that triggered this workflow
type: string
required: true
comment-id:
description: 'The comment-id of the slash command'
description: "The comment-id of the slash command"
type: string
required: true
branch:
Expand All @@ -41,7 +41,7 @@ jobs:
contents: read
pull-requests: write
id-token: write
uses: PaloAltoNetworks/terraform-modules-vmseries-ci-workflows/.github/workflows/[email protected]
uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/[email protected]
secrets: inherit
with:
cloud: azure
Expand Down
2 changes: 1 addition & 1 deletion .releaserc
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@
[
"@semantic-release/github",
{
"successComment": ":tada: This ${issue.pull_request ? 'PR is included' : 'issue has been resolved'} in version ${nextRelease.version} :tada:\n\nThe release is available on [Terraform Registry](https://registry.terraform.io/modules/PaloAltoNetworks/vmseries-modules/azurerm/latest) and [GitHub release](../releases/tag/v${nextRelease.version})\n\n> Posted by [semantic-release](https://github.com/semantic-release/semantic-release) bot"
"successComment": ":tada: This ${issue.pull_request ? 'PR is included' : 'issue has been resolved'} in version ${nextRelease.version} :tada:\n\nThe release is available on [Terraform Registry](https://registry.terraform.io/modules/PaloAltoNetworks/swfw-modules/azurerm/latest) and [GitHub release](../releases/tag/v${nextRelease.version})\n\n> Posted by [semantic-release](https://github.com/semantic-release/semantic-release) bot"
}
]
],
Expand Down
8 changes: 4 additions & 4 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,18 +16,18 @@ Contributions are welcome across the entire project:

### New Contributors

1. Search the [issues](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules.git/issues) to see if there is an existing issue. If not, open an issue (note the issue ID).
1. Search the [issues](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules.git/issues) to see if there is an existing issue. If not, open an issue (note the issue ID).

1. Fork the repository to your personal namespace (only need to do this once).

1. Clone the repo from your personal namespace.

`git clone https://github.com/{username}/terraform-azurerm-vmseries-modules.git`
`git clone https://github.com/{username}/terraform-azurerm-swfw-modules.git`
Ensure that `{username}` is _your_ user name.

1. Add the source repository as an upsteam.

`git remote add upstream https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules.git`
`git remote add upstream https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules.git`

1. Create a branch which corresponds to the issue ID created in step 1.

Expand Down Expand Up @@ -55,7 +55,7 @@ Contributions are welcome across the entire project:

### Existing Contributors

1. Search the [issues](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules.git/issues) to see if there is an existing issue. If not, open an issue (note the issue ID).
1. Search the [issues](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules.git/issues) to see if there is an existing issue. If not, open an issue (note the issue ID).
1. Update from the source repository.

`git pull upstream develop`
Expand Down
24 changes: 12 additions & 12 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
![GitHub release (latest by date)](https://img.shields.io/github/v/release/PaloAltoNetworks/terraform-azurerm-vmseries-modules?style=flat-square)
![GitHub](https://img.shields.io/github/license/PaloAltoNetworks/terraform-modules-vmseries-ci-workflows?style=flat-square)
![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/PaloAltoNetworks/terraform-azurerm-vmseries-modules/release_ci.yml?style=flat-square)
![GitHub issues](https://img.shields.io/github/issues/PaloAltoNetworks/terraform-azurerm-vmseries-modules?style=flat-square)
![GitHub pull requests](https://img.shields.io/github/issues-pr/PaloAltoNetworks/terraform-azurerm-vmseries-modules?style=flat-square)
![Terraform registry downloads total](https://img.shields.io/badge/dynamic/json?color=green&label=downloads%20total&query=data.attributes.total&url=https%3A%2F%2Fregistry.terraform.io%2Fv2%2Fmodules%2FPaloAltoNetworks%2Fvmseries-modules%2Fazurerm%2Fdownloads%2Fsummary&style=flat-square)
![Terraform registry download month](https://img.shields.io/badge/dynamic/json?color=green&label=downloads%20this%20month&query=data.attributes.month&url=https%3A%2F%2Fregistry.terraform.io%2Fv2%2Fmodules%2FPaloAltoNetworks%2Fvmseries-modules%2Fazurerm%2Fdownloads%2Fsummary&style=flat-square)
![GitHub release (latest by date)](https://img.shields.io/github/v/release/PaloAltoNetworks/terraform-azurerm-swfw-modules?style=flat-square)
![GitHub](https://img.shields.io/github/license/PaloAltoNetworks/terraform-modules-swfw-ci-workflows?style=flat-square)
![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/PaloAltoNetworks/terraform-azurerm-swfw-modules/release_ci.yml?style=flat-square)
![GitHub issues](https://img.shields.io/github/issues/PaloAltoNetworks/terraform-azurerm-swfw-modules?style=flat-square)
![GitHub pull requests](https://img.shields.io/github/issues-pr/PaloAltoNetworks/terraform-azurerm-swfw-modules?style=flat-square)
![Terraform registry downloads total](https://img.shields.io/badge/dynamic/json?color=green&label=downloads%20total&query=data.attributes.total&url=https%3A%2F%2Fregistry.terraform.io%2Fv2%2Fmodules%2FPaloAltoNetworks%2Fswfw-modules%2Fazurerm%2Fdownloads%2Fsummary&style=flat-square)
![Terraform registry download month](https://img.shields.io/badge/dynamic/json?color=green&label=downloads%20this%20month&query=data.attributes.month&url=https%3A%2F%2Fregistry.terraform.io%2Fv2%2Fmodules%2FPaloAltoNetworks%2Fswfw-modules%2Fazurerm%2Fdownloads%2Fsummary&style=flat-square)

# Terraform Modules for Palo Alto Networks VM-Series on Azure Cloud
# Terraform Modules for Palo Alto Networks Software Firewalls on Azure Cloud

## Overview

A set of modules for using **Palo Alto Networks VM-Series firewalls** to provide control and protection
to your applications running on Azure Cloud. It deploys VM-Series as virtual machines and it configures
A set of modules for using **Palo Alto Networks Software Firewalls** to provide control and protection
to your applications running on Azure Cloud. It deploys Software Firewalls and it configures
aspects such as virtual networks, subnets, network security groups, storage accounts, service principals,
Panorama virtual machine instances, and more.

Expand Down Expand Up @@ -44,11 +44,11 @@ Terraform version to be 1.0.0 across most of the modules.
## Versioning

These modules follow the principles of [Semantic Versioning](http://semver.org/). You can find each new release,
along with the changelog, on the GitHub [Releases](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/releases) page.
along with the changelog, on the GitHub [Releases](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/releases) page.

## Getting Help

If you have found a bug, please report it. The preferred way is to create a new issue on the [GitHub issue page](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/issues).
If you have found a bug, please report it. The preferred way is to create a new issue on the [GitHub issue page](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/issues).

For consulting support, please contact [email protected] or your Palo Alto Networks account manager.

Expand Down
6 changes: 4 additions & 2 deletions examples/common_vmseries/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,8 @@ The Terraform code presented here will deploy Palo Alto Networks VM-Series firew

## Reference Architecture Design

![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6574404/a7c2452d-f926-49da-bf21-9d840282a0a2)
![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)


This code implements:
- a _centralized design_, a hub-and-spoke topology with a Transit VNet containing VM-Series to inspect all inbound, outbound, east-west, and enterprise traffic
Expand All @@ -26,7 +27,8 @@ This design uses a Transit VNet. Application functions and resources are deploye

The common firewall option leverages a single set of VM-Series firewalls. The sole set of firewalls operates as a shared resource and may present scale limitations with all traffic flowing through a single set of firewalls due to the performance degradation that occurs when traffic crosses virtual routers. This option is suitable for proof-of-concepts and smaller scale deployments because the number of firewalls low. However, the technical integration complexity is high.

![Detailed Topology Diagram](https://user-images.githubusercontent.com/2110772/234920647-c7dc77c1-d86c-42ac-ba5a-59a95439ef23.png)
![Detailed Topology Diagram](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/8e8da6e0-afba-4bb5-b2c7-a95c7250dab3)


This reference architecture consists of:

Expand Down
2 changes: 1 addition & 1 deletion examples/common_vmseries/main_test.go
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ import (
"github.com/gruntwork-io/terratest/modules/logger"
"github.com/gruntwork-io/terratest/modules/terraform"

"github.com/PaloAltoNetworks/terraform-modules-vmseries-tests-skeleton/pkg/testskeleton"
"github.com/PaloAltoNetworks/terraform-modules-swfw-tests-skeleton/pkg/testskeleton"
)

func CreateTerraformOptions(t *testing.T) *terraform.Options {
Expand Down
5 changes: 3 additions & 2 deletions examples/common_vmseries_and_autoscale/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ Virtual Machine Scale Sets (VMSS) are used for autoscaling to run the Next Gener

## Reference Architecture Design

![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6574404/a7c2452d-f926-49da-bf21-9d840282a0a2)
![simple](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/aa2ae33a-fb46-4a1c-9811-98ea3b132297)

This code implements:
- a _centralized design_, a hub-and-spoke topology with a Transit VNet containing VM-Series to inspect all inbound, outbound, east-west, and enterprise traffic
Expand All @@ -29,7 +29,8 @@ This design uses a Transit VNet. Application functions and resources are deploye

The common firewall option leverages a single set of VM-Series firewalls. The sole set of firewalls operates as a shared resource and may present scale limitations with all traffic flowing through a single set of firewalls due to the performance degradation that occurs when traffic crosses virtual routers. This option is suitable for smaller scale deployments because inbound and outbound traffic flows occur on the same set of firewalls. However, the technical integration complexity is high.

![Common-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/assets/6500664/b10403f9-795a-4501-a189-3c21d44fc9e7)
![Common-VMSeries-with-autoscaling](https://github.com/PaloAltoNetworks/terraform-azurerm-swfw-modules/assets/2110772/7d363d6a-b394-4851-99b9-03ce8abf379a)


This reference architecture consists of:

Expand Down
Loading