topic Re: Public Cloud Sample Terraform Labs in Cloud Firewall

Public Cloud Sample Terraform Labs

Gustavo_Coronel — Wed, 17 Jan 2024 03:51:42 GMT

I will be placing my collection of terraform labs in this space for anyone that wishes to download and use them.

Azure and AWS labs will be uploaded first. GCP and OCI will be coming a bit later.

Feel free to check the space from time to time for newer updated versions, as I may add new functionality, correct issues, or upload updated instructions on how to use the labs over time.

NOTE: These are NOT "official" Check Point Labs and are NOT supported by TAC. These are not meant to be used as part of a production environment. They are meant for practicing and learning to use, patch, upgrade and connect CloudGuard solutions in Public Cloud.

I will be the primary point of support. Please let me know about any errors or issues you find as the code may run a bit different depending on the environment and the limitations of the credentials being used.

Gustavo (Gus) Coronel

Re: Public Cloud Sample Terraform Labs

Sunny_Gill — Wed, 17 Jan 2024 10:55:41 GMT

Looking forward to it! Do you happen to know how in terraform we can get the gateway to automatically connect to a Smart-1 Cloud tenant? Stuggling to find any reference

Re: Public Cloud Sample Terraform Labs

Rivka-Strilitz — Sun, 21 Jan 2024 07:56:47 GMT

You can input the S1C token to enable S1C functionality, but it won't automatically establish a connection to a gateway in the Infinity Portal.
If you're interested in autoscaling gateways, you can utilize CME for that purpose

Re: Public Cloud Sample Terraform Labs

Antonio_Opromol — Thu, 29 Feb 2024 15:19:51 GMT

Hi Gustavo, when I deploy the CloudGuard Cluster HA solution with Terraform in manner identical to yours, the GWs don't respond to internal and external LB probes because the parameter cloud_balancer_port=8117" is not present in default $FWDIR/boot/modules/fwkern.conf.

I suppose that the Azure image for Cluster HA has already this parameter by default.

Is it possible to install from the Azure image for Cluster HA also from Terraform or I can only use the single gateway templates and the adjust the parameter? Is there a way to automate in Terraform this change during provisioning of the two GWs?

Re: Public Cloud Sample Terraform Labs

Gustavo_Coronel — Mon, 04 Mar 2024 23:37:33 GMT

Hi Antonio,

The single gateway terraform playbooks do Not configure port 8117 on the gateways.

Only the HA cluster and VMSS playbooks do.

Yes. There is a terraform playbook that deploys HA clusters.

The health check parameter is not built into the image, it is configured by the cloud init part of the deployment.

Do not try to build a cluster by deploying single gateways. Use the HA cluster playbooks instead.

I know I am a bit late in uploading my labs, but you do not need my "lab" playbooks if all you are doing is deploying an HA cluster. The official Check Point Terraform playbooks are here: https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/azure

Gus

Re: Public Cloud Sample Terraform Labs

Antonio_Opromol — Tue, 05 Mar 2024 08:55:10 GMT

Thanks Gustavo for your answer, but my code is identical to the HA cluster playbook (I've copied the code from the public github repository) and installation_type is "cluster" and not single gateway, the only difference is that I'm using version r81.20 and not 81.10. The cluster goes up and after the deployment, if I loog on the two cluster members at the file $FWDIR/boot/modules/fwkern.conf , there is only the entry cloud_balancer_ip1=0xa83f8110 and is missing the entry cloud_balancer_port=8117.

Than I've found a solution sk171584 that is not recently but give an answer that I've follow, but if in you case works well, probally is the version of the images?

Thanks for your precious time.

Re: Public Cloud Sample Terraform Labs

cdav — Thu, 28 Mar 2024 12:51:28 GMT

I am also interested in the answer to this - assuming its for auto scaled gateways connecting to infinity/smart1