-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: Updated all modules to new Zscaler RHEL9 Images (#18)
* feat: Updated modules to use new RHEL9 * doc: Updated README with new instructions * doc: Updated README and support statement * fix: Removed local_file depends_on for compatibility issues * fix: Changed path to output files * doc: Updated README format
- Loading branch information
Showing
57 changed files
with
517 additions
and
497 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,89 +1,95 @@ | ||
|
|
||
| --- | ||
| name: CI/CD | ||
| on: | ||
| push: | ||
| branches: | ||
| - master | ||
| - develop | ||
| pull_request: | ||
| schedule: | ||
| - cron: '0 0 1 * *' | ||
| name: Terraform checks | ||
| on: [push, pull_request] | ||
|
|
||
| jobs: | ||
| pre-commit: | ||
| name: Verify the pre-commit framework was used properly by developers | ||
| terraform-linter: | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - name: Check out source | ||
| uses: actions/checkout@v2 | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v3 | ||
|
|
||
| - name: Set up Python | ||
| uses: actions/setup-python@v2 | ||
| with: | ||
| # Semantic version range syntax (like 3.x) or the exact Python version | ||
| python-version: '3.11.0' | ||
| - name: Setup Terraform | ||
| uses: hashicorp/setup-terraform@v3 | ||
|
|
||
| - name: Run pre-commit framework as the developer should run it | ||
| run: sudo ./scripts/install.sh && sudo ./scripts/run.sh | ||
| - name: Terraform Format | ||
| id: fmt | ||
| run: terraform fmt -check -recursive | ||
|
|
||
| - name: The `git diff` showing whether the pre-commit mandated extra changes to the repository files | ||
| if: failure() | ||
| run: git diff | ||
| - name: Terraform Init | ||
| id: init-bastion | ||
| run: | | ||
| cd modules/terraform-zsac-bastion-aws | ||
| terraform init | ||
| validate: | ||
| name: Validate | ||
| runs-on: ubuntu-latest | ||
| - name: Terraform Validate | ||
| id: validate-bastion | ||
| run: | | ||
| cd modules/terraform-zsac-bastion-aws | ||
| terraform validate -no-color | ||
| steps: | ||
| - name: Check out source | ||
| uses: actions/checkout@v2 | ||
| - name: Terraform Init | ||
| id: init-zsac-acvm | ||
| run: | | ||
| cd modules/terraform-zsac-acvm-aws | ||
| terraform init | ||
| - name: Set up Terraform | ||
| uses: hashicorp/setup-terraform@v1 | ||
| with: | ||
| terraform_version: 0.15.3 | ||
| - name: Terraform Validate | ||
| id: validate-zsac-acvm | ||
| run: | | ||
| cd modules/terraform-zsac-acvm-aws | ||
| terraform validate -no-color | ||
| - name: terraform validate | ||
| env: | ||
| AWS_DEFAULT_REGION: us-west-2 | ||
| - name: Terraform Init | ||
| id: init-zsac-asg-aws | ||
| run: | | ||
| cd "$GITHUB_WORKSPACE" | ||
| for dir in $(find modules examples -type d -not \( -name ".?*" \) -maxdepth 1 -mindepth 1); | ||
| do | ||
| if [[ "$dir" == "modules/transit_gateway_peering" ]]; | ||
| then | ||
| echo "Skipping directory: $dir" | ||
| echo "Terraform does not support validating a module which uses an aliased provider (module-specific; validating an entire configuration works fine)." | ||
| continue | ||
| fi | ||
| cd modules/terraform-zsac-asg-aws | ||
| terraform init | ||
| echo "Processing directory: $dir" | ||
| cd "$GITHUB_WORKSPACE/$dir" | ||
| terraform init -backend=false | ||
| terraform validate | ||
| done | ||
| - name: Terraform Validate | ||
| id: validate-zsac-asg-aws | ||
| run: | | ||
| cd modules/terraform-zsac-asg-aws | ||
| terraform validate -no-color | ||
| zscaler-iac-scan: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Code Checkout | ||
| uses: actions/checkout@v2 | ||
| - name: Terraform Init | ||
| id: init-zsac-iam-aws | ||
| run: | | ||
| cd modules/terraform-zsac-iam-aws | ||
| terraform init | ||
| - name: Terraform Validate | ||
| id: validate-zsac-iam-aws | ||
| run: | | ||
| cd modules/terraform-zsac-iam-aws | ||
| terraform validate -no-color | ||
| - name : Zscaler IAC Scan | ||
| uses : ZscalerCWP/Zscaler-IaC-Action@v1.4.0 | ||
| id: zscaler-iac-scan | ||
| with: | ||
| client_id : ${{ secrets.ZSCANNER_CLIENT_ID }} | ||
| client_secret : ${{ secrets.ZSCANNER_CLIENT_SECRET }} | ||
| region : 'US' | ||
| iac_dir : '../../' | ||
| iac_file : '../../' | ||
| output_format : 'human+github-sarif' | ||
| fail_build : 'false' | ||
| - name: Upload SARIF file | ||
| if: ${{ success() || failure() && (steps.zscaler-iac-scan.outputs.sarif_file_path != '') }} | ||
| uses: github/codeql-action/upload-sarif@v2 | ||
| with: | ||
| sarif_file: ${{ steps.zscaler-iac-scan.outputs.sarif_file_path }} | ||
| - name: Terraform Init | ||
| id: init-zsac-network-aws | ||
| run: | | ||
| cd modules/terraform-zsac-network-aws | ||
| terraform init | ||
| - name: Terraform Validate | ||
| id: validate-zpa-app-connector-group | ||
| run: | | ||
| cd modules/terraform-zpa-app-connector-group | ||
| terraform validate -no-color | ||
| - name: Terraform Init | ||
| id: init-zpa-app-connector-group | ||
| run: | | ||
| cd modules/terraform-zpa-app-connector-group | ||
| terraform init | ||
| - name: Terraform Validate | ||
| id: validate-zpa-provisioning-key | ||
| run: | | ||
| cd modules/terraform-zpa-provisioning-key | ||
| terraform validate -no-color | ||
| - name: Terraform Init | ||
| id: init-zpa-provisioning-key | ||
| run: | | ||
| cd modules/terraform-zpa-provisioning-key | ||
| terraform init | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| --- | ||
| page_title: "Support Guide" | ||
| --- | ||
|
|
||
| # General Support Statement | ||
|
|
||
| This Terraform AWS ZPA App Connector Module is supported and maintained by the Zscaler Technology Alliances team in partnership with our global support team. | ||
|
|
||
| ## Support Ticket Severity | ||
|
|
||
| Support tickets related to the Terraform Modules can be opened with [Zscaler Support](https://help.zscaler.com/#-tickets), however since the provider is just a client of the underlying product API, we will **NOT** be able to treat terraform module related support requests as a Severity-1 (Immediate time frame). | ||
|
|
||
| When reporting bugs, please provide the Terraform script that demonstrates the bug and the command output. Stack traces will also be helpful. | ||
|
|
||
| Notice that we will **NOT**, however, fix bugs upon customer demand, as we have to prioritize all pending bugs and features, as part of the product's backlog and release cycles. | ||
|
|
||
| If you have an urgent escalation, please contact your local Zscaler account team (RSM/SE/CSM/TAM) for assistance. | ||
|
|
||
| ## Contact | ||
|
|
||
| For questions or requests that cannot be submitted via GitHub Issues, please contact [Zscaler Support](https://help.zscaler.com/submit-ticket-links) |
Oops, something went wrong.