Elisa Terraform onboarding

GCP Terraform / platform onboarding 14.06.2023 Participants: Miro Salo Henri Kivelä Jaani Nissilä pauli.toivanen@elisa.fi kimmo.laitila@elisa.fi

main.tf nightly/stable contains: - Providers - Project information - State in bucket

Readme: - For every project, unique-ish readme.

Secrets: - VPN secrets come from Github actions - Some passwords come from Google secret manager - Some certificates come from Google secret manager - Default Secret manager settings

Cloud Volumes / NetApps: - Nothing is configured with Terraform!! - Reason may be that it is not possible to do these with Terraform? - Fundamentals outlines the technical restrictions.

Naming: vm- for instance specific lb- for load balancer specific

Firewalling: - Pauli can't tell much about the firewall settings, what you see is what you get. Ask Timo..? for more info. - Terraform configurations opens up these settings more - Trust, NetApp Common-rds-gateway-fw-allow-hc - Elisa: Should only require the top 2 IP ranges, but there are loads more for some reason. - Elisa: Retracting statement, this is old stuff that is replaced in newer terraform configurations.

How to connect to Windows machine after creating it: - Change the Windows password from the console

When running terraform plan/apply on nightly/stable: - A weird replacement happens by Terraform: google_compute_global_forwarding_rule.biztalk must be replaced - This is a known thing, it can be ignored, it does this for X reason but it does not affect the outcome. - It may go away after updatin Terraform providers?