Wazi as a service VSI on VPC Landing Zone

Summary

This repository contains WaziaaS deployable architecture solutions that help provision VPC landing zones and interconnect them. The below solutions are available and can be deployed with terraform.

Two solutions are offered:

1. Quickstart Variation This pattern deploys the following infrastructure:
   • Workload VPC with Wazi as a service VSI.
   • Uses Floating IP addresses for access through the public internet.
2. Standard Variation This pattern deploys the following infrastructure:
   • Separate VPC for edge.
   • Separate VPC for workloads.
   • Virtual Server Instances for subnet.
   • A resource group for cloud services and for each VPC.
   • Cloud Object Storage instances for flow logs and Activity Tracker.
   • Encryption keys in a Key Protect instance.
   • A edge and workload VPC connected by a transit gateway.
   • All necessary networking rules to allow communication.
   • Virtual Private Endpoint (VPE) for Cloud Object Storage in each VPC.
   • A client-to-site VPN gateway in the edge VPC.
   • A jump server Bastion host VSI in the edge VPC without floating IP.
   • A site-to-site VPN in the workload VPC.
   • Wazi as a Service VSI in the workload VPC.

Overview

• terraform-ibm-zvsi
• Contributing

Reference architectures

• Quickstart Variation
• Standard Variation

Required IAM access policies

You need the following permissions to run this module.

• IAM Access Requirements
  • Quickstart Variation
    • Platform Roles
      • Editor Virtual Private Cloud
  • Standard Variation
    • Platform Roles
      • Editor IAM Identity Service
      • Editor Virtual Private Cloud
    • Service Roles
      • Editor Cloud Object Storage
      • Editor IBM Key Protect

Requirements

No requirements.

Modules

No modules.

Resources

No resources.

Inputs

No inputs.

Outputs

No outputs.

Contributing

You can report issues and request features for this module in GitHub issues in the module repo. See Report an issue or request a feature.

To set up your local development environment, see Local development setup in the project documentation.