Skip to content
This repository has been archived by the owner on Dec 1, 2023. It is now read-only.

Terraform module to configure a new Rubrik CloudOn deployment in AWS

License

Notifications You must be signed in to change notification settings

rubrikinc/terraform-aws-rubrik-cloudon

Repository files navigation

Terraform Module - AWS Rubrik CloudOn

Terraform module that adds Cloud Compute Settings to an existing archive location. The following steps are completed by the module:

  • Create a new IAM Policy with the correct permissions for CloudOn and attach it to the specified user.
  • Create a new IAM Role with the correct permissions for CloudOn to use the AWS VMImport service.
  • Create a new Security Group to allow the Rubrik Cluster to talk to the Rubrik Storm instances.
  • Create S3 and KMS endpoint so that Rubrik Storm can keep data on the AWS network.
  • Configures Cloud Compute Settings on Rubrik cluster.

Documentation

Here are some resources to get you started! If you find any challenges from this project are not properly documented or are unclear, please raise an issue and let us know! This is a fun, safe environment - don't worry if you're a GitHub newbie!

Usage

module "rubrik_aws_cloudon" {
  source = "rubrikinc/rubrik-cloudon/aws"

  iam_user_name  = "rubrik"
  archive_name = "S3:ArchiveLocation"
  vpc_id = "vpc-12345678901234567"
  subnet_id = "subnet-12345678901234567"
  security_group_id = "sg-12345678901234567"
}

Inputs

The following are the variables accepted by the module.

Name Description Type Default Required
aws_region The AWS region to configure Rubrik Storm instances to run in. string yes
aws_vpc_security_group_name_storm Name of the security group to create for Rubrik Storm instances to use. string Rubrik Storm Instances yes
rubrik_cluster_cidr The CIDR range of the Rubrik Cluster. (Used to allow ingress to Storm from the Rubrik Cluster). Format x.x.x.x/y string yes
iam_user_name The name of the IAM currently used for CloudOut to create. string yes
iam_policy_name The name of the IAM Policy to be created with the correct CloudOut permissions. string rubrik-cloud-out no
iam_vmimport_policy_name The name of the IAM Policy configured with the correct permissions for the VM Import service. string rubrik-vmimport-role yes
bucket_name The name of the S3 bucket used for CloudOn from the Archival Location. string yes
vpc_id The id of the vpc used to run bolt. string yes
subnet_id The id of the subnet used to run bolt. string yes
timeout Timeout value to be used when making Rubrik API call. number 60 no

Prerequisites

There are a few services you'll need in order to get this project off the ground:

  • Terraform v0.15.4 or greater
  • Rubrik Provider for Terraform - provides Terraform functions for Rubrik
    • Only required to run the sample Rubrik command to update the Cloud Compute settings for the Archival Location.

How You Can Help

We glady welcome contributions from the community. From updating the documentation to adding more functions for Python, all ideas are welcome. Thank you in advance for all of your issues, pull requests, and comments! ⭐

License

About Rubrik Build

We encourage all contributors to become members. We aim to grow an active, healthy community of contributors, reviewers, and code owners. Learn more in our Welcome to the Rubrik Build Community page.

We'd love to hear from you! Email us: build@rubrik.com