Google Cloud Platform Secure Cloud Architecture

Overview

Secure Cloud Architecture in Google Cloud Platform using F5 technologies

• High avaliabilty pair of BIG-IP
  • Failover via API
  • LTM,ASM,AFM
• Nginx Plus
  • App Protect
• Nginx Controller
• Consul
  • service discovery
  • nginx templating
• NGINX KIC
  • ingress
• GKE

  Setup

Requirements

• storage bucket with controller tarball

  eg: controller-installer-3.7.0.tar.gz

• Controller

  • license file

  trial license

• Nginx plus

  • cert
  • key

  trial keys

Prep

copy admin tfvars example to your own and update with your license keys

mv admin.auto.tfvars.example admin.auto.tfvars

update:

• project
  • prefix
  • gcpProjectId
  • adminSourceAddress
  • gceSshPublicKey
• nginx
  • nginxKey
  • nginxCert
  • controllerBucket
  • controllerLicense
• bigip
  • bigipSecret
  • dnsSuffix
  • serviceAccount

Getting Started

Provide a quick example of how to use your code. This should provide the user with a launch point to quickly see what the project can offer them.

Installation

Outline the requirements and steps to install this project.

Usage

Outline how the user can use your project and the various features the project offers.

Variables

Requirements

Providers

Inputs

Outputs

Running

• login to terraform cloud account if using remote state https://www.terraform.io/docs/commands/login.html

  terraform login

• login to google account

  gcloud auth application-default login
  project="my-project"
  gcloud config set project $project

• run with script or manual

  . demo.sh

  Development

  Outline any requirements to setup a development environment if someone would like to contribute. You may also link to another file for this information.

  # test pre commit manually
  pre-commit run -a -v

  Support

  For support, please open a GitHub issue. Note, the code in this repository is community supported and is not supported by F5 Networks. For a complete list of supported projects please reference SUPPORT.md.

Community Code of Conduct

Please refer to the F5 DevCentral Community Code of Conduct.

License

Apache License 2.0

Copyright

Copyright 2014-2020 F5 Networks Inc.

F5 Networks Contributor License Agreement

Before you start contributing to any project sponsored by F5 Networks, Inc. (F5) on GitHub, you will need to sign a Contributor License Agreement (CLA).

If you are signing as an individual, we recommend that you talk to your employer (if applicable) before signing the CLA since some employment agreements may have restrictions on your contributions to other projects. Otherwise by submitting a CLA you represent that you are legally entitled to grant the licenses recited therein.

If your employer has rights to intellectual property that you create, such as your contributions, you represent that you have received permission to make contributions on behalf of that employer, that your employer has waived such rights for your contributions, or that your employer has executed a separate CLA with F5.

If you are signing on behalf of a company, you represent that you are legally entitled to grant the license recited therein. You represent further that each employee of the entity that submits contributions is authorized to submit such contributions on behalf of the entity pursuant to the CLA.