Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CXF-99867: Integrate Alibaba Terraform Provider with Fabric Connection Examples #155

Merged
merged 10 commits into from
Nov 18, 2024
69 changes: 69 additions & 0 deletions examples/port-2-alibaba2-connection/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
# Fabric Port to Fabric Alibaba Profile Connection
thogarty marked this conversation as resolved.
Show resolved Hide resolved

This is a step-by-step guide for creating a connection using the Equinix Terraform Provider and the Alibaba Terraform Provider.
thogarty marked this conversation as resolved.
Show resolved Hide resolved
By following these steps, you will be able to:

1. Setup a connection through Equinix Fabric.
2. Configure and accept the connection in the Alibaba Portal.
3. Manage resources effectively using Terraform.
4. Perform cleanup operations efficiently

### Step by Step Instructions for Fabric Port to Fabric Alibaba Profile Connection

#### 1. Create Connection from Equinix Terraform Provider
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This header needs to be placed below the standard README.md content we usually have in the header.


This example shows how to leverage the [Fabric Port Connection Module](https://registry.terraform.io/modules/equinix/fabric/equinix/latest/submodules/port-connection)
to create a Fabric Connection from a Fabric Port to Fabric Alibaba Service Profile.

It leverages the Equinix Terraform Provider, the Alibaba Terraform Provider, Fabric Port Connection
Module and various Alibaba resources to setup the connection based on the parameters you have provided to this example; or based on the pattern
you see used in this example it will allow you to create a more specific use case for your own needs.

See the example usage (provided after the steps) for details on how to use this example.

**Note:** The `connection_name` must follow either one of these patterns:

* A unique `connection_name` with atmost 24 characters.
`connection_name = var.connection_name`

* A `connection_name` with atmost 12 characters combined with a random string of 12 characters:
`connection_name = "${var.connection_name}${random_string.random.result}"`

**Result of this step:**
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be sub bullets on the random string bullet, and the random string bullet needs to describe where the random string is coming from. You must put in the random string resource into the documentation.

* A unique `connection_name` is generated by appending a 12-character random string to the provided name.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replace to the provided name with the variable name given by the user.

* A Fabric Port to Alibaba Profile Connection is successfully created and displayed in the Fabric Portal.
* An Express Connect Physical Connection resource is created and becomes visible in the Alibaba Portal.

#### 2. Formulate main.tf and output.tf Files
Use the following resources and data sources from the example (place them as comments initially):
thogarty marked this conversation as resolved.
Show resolved Hide resolved

`data "alicloud_express_connect_physical_connections" {}`
thogarty marked this conversation as resolved.
Show resolved Hide resolved

` resource "alicloud_express_connect_virtual_border_router" {}`

`resource "null_resource" {}`

`output alicloud_express_connect_virtual_border_router {}`

`output alicloud_express_connect_virtual_border_router_id {}`

#### 3. Accept the Connection Request
Manually accept the connection request in the Alibaba Portal for the created physical connection.

#### 4. Create the Virtual Border Router (VBR) Resource
Remove the commented code to create the VBR resource

**Result of this step:**
The VBR resource is created successfully and linked to the physical connection.

#### 5. [Cleanup] Delete Resources
1. Delete the VBR using terraform
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This isn't explaining exactly what will happen and is causing the user to lookup information to understand it. Tell them to:

  1. Run a terraform destroy which will delete the Alibaba VBR and give an error on the Equinix Fabric Connection which matches the one you noted.
  2. Go to Alibaba Portal to manually delete the connection; (You will need to explain if this automatically deletes connection on Equinix side or if there's an additional 3rd step).

2. Terminate and delete the connection manually using the Alibaba Portal

*Note:* If you attempt to delete the Fabric connection directly, you will encounter the following error:
`ERR-UAA-003-00: Deletion for a provisioned connection needs to be initiated from Alibaba Portal.`

<!-- BEGIN_TF_DOCS -->

<!-- END_TF_DOCS -->

65 changes: 65 additions & 0 deletions examples/port-2-alibaba2-connection/main.tf
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
provider "equinix" {
client_id = var.equinix_client_id
client_secret = var.equinix_client_secret
}

provider "alicloud" {
d-bhola marked this conversation as resolved.
Show resolved Hide resolved
access_key = var.access_key
secret_key = var.secret_key
region = var.region
}

resource "random_string" "random" {
d-bhola marked this conversation as resolved.
Show resolved Hide resolved
length = 12
special = false
}

module "create_port_2_alibaba_connection" {
source = "../../modules/port-connection"

connection_name = "${var.connection_name}${random_string.random.result}"
connection_type = var.connection_type
notifications_type = var.notifications_type
notifications_emails = var.notifications_emails
bandwidth = var.bandwidth
purchase_order_number = var.purchase_order_number
project_id = var.project_id

# A-side
aside_port_name = var.aside_port_name
aside_vlan_tag = var.aside_vlan_tag

# Z-side
zside_ap_type = var.zside_ap_type
zside_ap_authentication_key = var.zside_ap_authentication_key
zside_ap_profile_type = var.zside_ap_profile_type
zside_location = var.zside_location
zside_seller_region = var.zside_seller_region
zside_sp_name = var.zside_sp_name
}

data "alicloud_express_connect_physical_connections" "nameRegex" {
d-bhola marked this conversation as resolved.
Show resolved Hide resolved
name_regex = "^${module.create_port_2_alibaba_connection.primary_connection.name}"
}

resource "alicloud_express_connect_virtual_border_router" "vbr" {
local_gateway_ip = var.local_gateway_ip
peer_gateway_ip = var.peer_gateway_ip
peering_subnet_mask = var.peering_subnet_mask
physical_connection_id = data.alicloud_express_connect_physical_connections.nameRegex.connections[0].id
virtual_border_router_name = var.virtual_border_router_name
vlan_id = one(one(one(module.create_port_2_alibaba_connection.primary_connection.z_side).access_point).link_protocol).vlan_tag
min_rx_interval = var.min_rx_interval
min_tx_interval = var.min_tx_interval
detect_multiplier = var.detect_multiplier
}

resource "null_resource" "destroy_warning" {
triggers = {
warning = "WARNING: Destroy process is not complete yet. You need to delete the resource from Alibaba Portal!"
}
}

data "alicloud_express_connect_virtual_border_routers" "nameRegexVbr" {
name_regex = "^${alicloud_express_connect_virtual_border_router.vbr.virtual_border_router_name}"
}
26 changes: 26 additions & 0 deletions examples/port-2-alibaba2-connection/outputs.tf
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
output "alibaba_connection" {
value = module.create_port_2_alibaba_connection.primary_connection
sensitive = true
}

output "alibaba_connection_id" {
value = module.create_port_2_alibaba_connection.primary_connection_id
}

output "connection_name" {
d-bhola marked this conversation as resolved.
Show resolved Hide resolved
value = var.connection_name
description = "The connection name used for this port connection"
}

output "alicloud_express_connect_virtual_border_router" {
value = alicloud_express_connect_virtual_border_router.vbr
sensitive = true
}

output "alicloud_express_connect_virtual_border_router_id" {
value = alicloud_express_connect_virtual_border_router.vbr.id
}

output "express_connect_virtual_border_router_id" {
value = data.alicloud_express_connect_virtual_border_routers.nameRegexVbr.routers.0.id
}
35 changes: 35 additions & 0 deletions examples/port-2-alibaba2-connection/terraform.tfvars.example
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
equinix_client_id = "MyEquinixClientId"
equinix_client_secret = "MyEquinixSecret"

connection_name = "Port_2_alibaba"
connection_type = "EVPL_VC"
notifications_type = "ALL"
notifications_emails = ["[email protected]"]
bandwidth = 50
purchase_order_number = "1-323292"
aside_port_name = "sit-tb1-dc-e5.tlab,10GSMF,A,001,201257, 21951980"
aside_vlan_tag = 2019
zside_ap_type = "SP"
zside_ap_authentication_key = "<Alibaba Auth Key>"
zside_ap_profile_type = "L2_PROFILE"
zside_location = "SY"
zside_sp_name = "Alibaba Cloud Express Connect"
zside_seller_region = "ap-southeast-2"
zside_ap_profile_type = "L2_PROFILE"
zside_ap_type = "SP"
zside_location = "SV"
zside_seller_region = "us-west-1"
zside_sp_name = "Alibaba Cloud Express Connect"
region = "us-west-1"
local_gateway_ip = "10.0.0.1"
peer_gateway_ip = "10.0.0.2"
peering_subnet_mask = "255.255.255.252"
virtual_border_router_name = "Port_2_Alibaba_VBR"
min_rx_interval = 1000
min_tx_interval = 1000
detect_multiplier = 10
access_key = "<Alibaba_Cloud_Access_Key>"
secret_key = "<Alibaba_Cloud_Secret_Key>"
project_id = "<Fabric_Project_ID>"
physical_connection_id = "<Physical_Connection_ID>"
thogarty marked this conversation as resolved.
Show resolved Hide resolved
vlan_id = 2019
thogarty marked this conversation as resolved.
Show resolved Hide resolved
138 changes: 138 additions & 0 deletions examples/port-2-alibaba2-connection/variables.tf
Original file line number Diff line number Diff line change
@@ -0,0 +1,138 @@
variable "equinix_client_id" {
description = "Equinix client ID (consumer key), obtained after registering app in the developer platform"
type = string
sensitive = true
}
variable "equinix_client_secret" {
description = "Equinix client secret ID (consumer secret), obtained after registering app in the developer platform"
type = string
sensitive = true
}
variable "connection_name" {
description = "Connection name. An alpha-numeric 24 characters string which can include only hyphens and underscores"
type = string
}
variable "project_id" {
description = "Subscriber-assigned project ID"
type = string
default = ""
}
variable "connection_type" {
description = "Defines the connection type like VG_VC, EVPL_VC, EPL_VC, EC_VC, IP_VC, ACCESS_EPL_VC"
type = string
}
variable "notifications_type" {
description = "Notification Type - ALL is the only type currently supported"
type = string
default = "ALL"
}
variable "notifications_emails" {
description = "Array of contact emails"
type = list(string)
}
variable "bandwidth" {
description = "Connection bandwidth in Mbps"
type = number
}
variable "purchase_order_number" {
description = "Purchase order number"
type = string
default = ""
}
variable "aside_port_name" {
description = "Equinix A-Side Port Name"
type = string
}
variable "aside_vlan_tag" {
description = "Vlan Tag information, outer vlanSTag for QINQ connections"
type = string
}
variable "aside_vlan_inner_tag" {
description = "Vlan Inner Tag information, inner vlanCTag for QINQ connections"
type = string
default = ""
}
variable "zside_ap_type" {
description = "Access point type - COLO, VD, VG, SP, IGW, SUBNET, GW"
type = string
}
variable "zside_ap_authentication_key" {
description = "Authentication key for provider based connections"
type = string
sensitive = true
}
variable "zside_ap_profile_type" {
description = "Service profile type - L2_PROFILE, L3_PROFILE, ECIA_PROFILE, ECMC_PROFILE"
type = string
}
variable "zside_location" {
description = "Access point metro code"
type = string
}
variable "zside_sp_name" {
description = "Equinix Service Profile Name"
type = string
}
variable "zside_seller_region" {
description = "Access point seller region"
type = string
}
variable "region" {
description = "Region"
type = string
}
variable "access_point_id" {
description = "Access Point ID"
type = string
default = ""
}
variable "local_gateway_ip" {
description = "Local Gateway IP"
type = string
default = ""
}
variable "peer_gateway_ip" {
description = "Peer Gateway IP"
type = string
default = ""
}
variable "peering_subnet_mask" {
description = "Peering Subnet Mask"
type = string
default = ""
}
variable "vlan_id" {
thogarty marked this conversation as resolved.
Show resolved Hide resolved
description = "Vlan ID"
type = string
default = ""
}
variable "min_rx_interval" {
description = "Minimum RX Interval"
type = string
default = ""
}
variable "min_tx_interval" {
description = "Minimum TX Interval"
type = string
default = ""
}
variable "detect_multiplier" {
description = "Detect Multiplier"
type = string
default = ""
}
variable "virtual_border_router_name" {
description = "Virtual Border Router Name"
type = string
default = ""
}
variable "access_key" {
description = "Access Key"
type = string
sensitive = true
}
variable "secret_key" {
description = "Secret Key"
type = string
sensitive = true
}
9 changes: 9 additions & 0 deletions examples/port-2-alibaba2-connection/versions.tf
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
terraform {
required_version = ">= 1.5.4"
required_providers {
equinix = {
source = "equinix/equinix"
version = ">= 2.9.0"
}
}
}
Loading