|
| 1 | + |
| 2 | +# Configuring Landing Zone with Cloud automation for account configuration to create CBR VPC Zone |
| 3 | + |
| 4 | +This tutorial provides step-by-step instructions for using the [Cloud automation for account configuration](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-account-infra-base-63641cec-6093-4b4f-b7b0-98d2f4185cd6-global?kind=terraform&format=terraform&version=93c7f855-881d-459b-8999-4567a4883f57-global) to provision a [Context-Based Restriction (CBR)](https://cloud.ibm.com/docs/account?topic=account-context-restrictions-whatis) VPC network [zone](https://cloud.ibm.com/docs/account?topic=account-context-restrictions-whatis#network-zones-whatis) and to configure `existing_vpc_cbr_zone_id` to add VPCs created by [Red Hat OpenShift Container Platform on VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-ocp-95fccffc-ae3b-42df-b6d9-80be5914d852-global), a [VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vpc-9fc0fa64-27af-4fed-9dce-47b3640ba739-global), or a [VSI on VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vsi-ef663980-4c71-4fac-af4f-4a510a9bcf68-global) to the [CBR VPC network zone](https://cloud.ibm.com/docs/account?topic=account-context-restrictions-whatis#vpc-attribute). The Cloud automation for account configuration creates a predefined network zones (a zone for each [service](https://github.com/terraform-ibm-modules/terraform-ibm-cbr/blob/main/modules/fscloud/README.md#input_zone_service_ref_list)) and a [VPC zone](https://github.com/terraform-ibm-modules/terraform-ibm-cbr/blob/main/modules/fscloud/README.md#input_zone_vpc_crn_list), and the objective of this tutorial is to add the VPCs created and managed by landing zone automation to the predefined [CBR VPC zone]((https://github.com/terraform-ibm-modules/terraform-ibm-cbr/blob/main/modules/fscloud/README.md#input_zone_vpc_crn_list)). |
| 5 | + |
| 6 | +## Prerequisites |
| 7 | +- The Editor role on the [Projects]((https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects)) service |
| 8 | +- The Editor and Manager role on the [Schematics](https://cloud.ibm.com/docs/schematics) service |
| 9 | +- The Viewer role on the resource group for the project |
| 10 | + |
| 11 | +For more information, see [Assigning users access to projects](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-access-project). |
| 12 | + |
| 13 | +## Step 1: Deploy the Cloud automation for account configuration |
| 14 | + |
| 15 | +1. Navigate to the IBM Cloud Catalog using this URL: |
| 16 | + [Cloud automation for account configuration](https://cloud.ibm.com/catalog/7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3/architecture/deploy-arch-ibm-account-infra-base-63641cec-6093-4b4f-b7b0-98d2f4185cd6-global?kind=terraform&format=terraform&version=93c7f855-881d-459b-8999-4567a4883f57-global) |
| 17 | + |
| 18 | +2. Click on **Add to [project](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects)** to start the deployment process |
| 19 | + |
| 20 | +3. Configure the deployment parameters: |
| 21 | + - Enter the name for the project |
| 22 | + - Enter the description (optional) |
| 23 | + - Enter the configuration name |
| 24 | + - Select the region |
| 25 | + - Select the resource group |
| 26 | + |
| 27 | +4. Review your configuration and click **Create** |
| 28 | + |
| 29 | +5. Configure the required variables present under **security**, **required** and **optional** sections. |
| 30 | + |
| 31 | +6. Click on deploy. |
| 32 | + |
| 33 | +## Step 2: Retrieve the CBR VPC Zone ID |
| 34 | + |
| 35 | +To access the **CBR VPC Zone ID**, which becomes available as an output after the Account Base DA deployment completes - |
| 36 | + |
| 37 | +1. Navigate to **Account Infrastructure Base** deployment and select the configuration as shown in the reference image below. |
| 38 | + |
| 39 | +  |
| 40 | + |
| 41 | +2. In the **outputs** section, locate the output variable named `cbr_map_vpc_zoneid` and copy the `zone_id` value as illustrated below. |
| 42 | + |
| 43 | +  |
| 44 | + |
| 45 | +## Step 3: Configure Landing Zone with the CBR Zone ID |
| 46 | + |
| 47 | +To properly configure landing zone with the retrieved CBR Zone ID - |
| 48 | + |
| 49 | +1. Select the appropriate landing zone automation from one of the following options: |
| 50 | + - [Red Hat OpenShift Container Platform on VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-ocp-95fccffc-ae3b-42df-b6d9-80be5914d852-global) |
| 51 | + - [VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vpc-9fc0fa64-27af-4fed-9dce-47b3640ba739-global) |
| 52 | + - [VSI on VPC landing zone](https://cloud.ibm.com/catalog/architecture/deploy-arch-ibm-slz-vsi-ef663980-4c71-4fac-af4f-4a510a9bcf68-global) |
| 53 | + |
| 54 | +2. Configure the required variables present under **security**, **required** and **optional** sections. |
| 55 | + |
| 56 | +3. Within the **optional** section, locate the field labeled `existing_vpc_cbr_zone_id` and paste the `zone_id` value copied in step 2, as shown below. |
| 57 | + |
| 58 | +  |
| 59 | + |
| 60 | +4. Click on deploy. |
| 61 | + |
| 62 | +5. Once deployed, CBR VPC zone will contain the required VPCs IDs as shown below. |
| 63 | + |
| 64 | +  |
0 commit comments