Maidenhead Bridge

1. Creating the CSC PriCPA for Google Cloud

As a replacement, Google recommends using Terraform. Terraform doesn't provide a "nice GUI", but it is straightforward and powerful when the templates (.tf files) are correct. In this section, we will provide the templates and instructions for deploying the CSC PriCPA on GCP using the Terraform CLI.

1.1 Prerequisites

Before launching the CSC PriCPA for Google Cloud, you need to have these elements ready:

1. Terraform & gcloud cli: Install Terraform and "gcloud cli" on a Computer.

2. GCP General Values: Project Name, Instance Name, Region, Zone and Machine Type.

3. CSC Values: SSH Key, VPC/Subnet for External Services, VPC/Subnet for Internal, VPC/Subnet for PriCPA and OutboundFW. See following picture: 

1.2 Getting the Terraform template from GCP Marketplace

Go to: CLICK HERE to GCP Marketplace offer. 

→ Click "Get Started"

→ Accept (select) Terms and agreements and Click "Agree". The following screen will appear:

→ Click "Deploy". In the next screen, go to the bottom to download the Terraform file.

→ Click "Download". Download the .zip file and extract the files inside a directory.

The Zip file contains the following files:

1.3 Deploying the CSC PriCPA using Terraform

1.3.1 What is Terraform?

Terraform is a tool that lets you define and build your cloud infrastructure using code, so you can manage it in a safe, consistent, and repeatable way.

The key benefits of Terraform are:

• Automation and Speed.

• Consistency and Repeatability.

• Version Control.

• Multi-Cloud Management.

• State Management.

5.3.2Terraform, Providers, API and Target

Terraform helps you write your infrastructure as code using a specific Provider, and finally, the API executes the commands to apply the changes to the target.

In short, what Terraform does is to run the "gcloud cli" commands required to create the resources you want.

1.3.3 Using a PC or Google Cloud Shell

Depending your circumstances, you can use a PC or the Google Cloud Shell. The Google Cloud Shell has installed Terraform and "gcloud cli". If you want to use a PC, you need to install Terraform and "gcloud cli" in the PC.

Instructions to install Terraform: https://developer.hashicorp.com/terraform/install

Instruction to install "gcloud cli": https://cloud.google.com/sdk/docs/install (and run "gcloud auth login" after the installation)

1.3.4 Deploy the CSC PriCPA

For each CSC you want to deploy, the steps are the same.

1. Create a new directory. Example: csc-pricpa-a

2. Unzip the template downloaded into the new directory created.

3. Edit the file " csc_terraform_auto.tfvars" and complete all values. See example below

4. (optional) If you want to pass configuration values to the CSC, fill the file: "configUserData.json"

5. Open CMD or Console in the directory, and run the following commands:

   1. terraform init (initializes the directory for Terraform)

   2. terraform plan --var-file csc_terraform_auto.tfvars (Checks the install before deploy).

   3. terraform deploy --var-file csc_terraform_auto.tfvars (Deploy)

6. Done! Your CSC is deploy. As output you will receive the values of the "instance_name", "instance_machine_type ", etc.

Example:

5.3.4.1 csc_terraform_auto.tfvars file

1.3.4.2 configUserdata.json file

Via configUserData.json file, you can pass values to parameters during the installation of the CSC. You can setup:

1. AWS SSM agent registration values.

2. DNS servers

3. Syslog servers and traffic log configuration.

4. Outbound FW configuration. Enable and JSON URL.

5. PriCPA Local configuration values, Peers URL and Remote Management Networks.

6. SSH Restrictions via eth1 and wg0.

7. Admin Management: Enable csccli user and SSH Key.

configUserData.json (blank)

The fields in bold are not configurable. So please, do not modify.

1.3.5 Removing the CSC PriCPA

In the case you need to remove the CSC PriCPA, do the following:

1. Open CMD or Console in the directory, and run the following commands:

   1. terraform destroy --var-file csc_terraform_auto.tfvars (removes all resources creates previously.)