refactor: rename site bcn01 to BCN01-LAB
- Rename sites/bcn01/ -> sites/BCN01-LAB/ - Update S3 backend key: bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate - Rename Terraform module: bcn01 -> bcn01_lab - Update working-directory in apply.yml and plan.yml - Update job/step names to BCN01-LAB NOTA: mover manualmente en S3 el objeto bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate antes de hacer terraform init en el nuevo directorio. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Jose Martinez
co-authored by
Claude Sonnet 4.6
Claude Sonnet 4.6
parent
ed9ee66972
commit
cb77482368
Generated
+25
@@ -0,0 +1,25 @@
|
||||
# This file is maintained automatically by "terraform init".
|
||||
# Manual edits may be lost in future updates.
|
||||
|
||||
provider "registry.terraform.io/ciscodevnet/meraki" {
|
||||
version = "1.9.0"
|
||||
constraints = "1.9.0"
|
||||
hashes = [
|
||||
"h1:KmWz0JvCHdDd3AtuawxUwmW0VN3fooGw4CRaxiKHT5Y=",
|
||||
"zh:0b9a7d32f331998a2a1531811667be44f799dfc03f6929f1414d2cab69f659f2",
|
||||
"zh:179f791e2aa0ca6353541d90956548033b9ee0c880a096e48ce3ae3fe8a1862e",
|
||||
"zh:2a1a32c6a8068c194e19859a7d88e0b95d0d9cbcf31444454b055ed62ace715a",
|
||||
"zh:491812b74919d131f4ef3ba968d10b678275ed201428e2af7f53df40fd7e8cee",
|
||||
"zh:4f5043f5165ee5199a61e4c15230d9f973ed0211a06600d75638f8369bac73fa",
|
||||
"zh:5679d5a0d5dd370ff5d9321913f293f76be8f7ebc25e5cf1b45ceed9de803348",
|
||||
"zh:58e1faba3d322bca68efb5cdac1ebe4e6d6f92834ebe5ccff8e491685620185c",
|
||||
"zh:861b04ee4a498070cfb581488ddc3e90b25be895d35861c2a03a3b224d28e9b5",
|
||||
"zh:890df766e9b839623b1f0437355032a3c006226a6c200cd911e15ee1a9014e9f",
|
||||
"zh:92ee52e0dd3372e6dc2ed21bf5b21124b646c4c1037477e66eae87614d814036",
|
||||
"zh:a3a851a3ce0c32b17506da0b9370f9d31df8e9d5ed4b422dc09ff5337d4b4192",
|
||||
"zh:cdac168b00fa658ec68862677cb0b00f356095654e6b1d0df823c330492fa753",
|
||||
"zh:dc454d6b1051891c99051b92e61015d244eb320a5a491cbffb770a005e448898",
|
||||
"zh:f14317688e068e40dc11f609c4dc4f81cfa50fbaa43dcbe0117725f1149e9d89",
|
||||
"zh:fe0544ac117d0c643559f042996fa32f243988bc48d4d49875abad6b326f0e2e",
|
||||
]
|
||||
}
|
||||
Executable
+33
@@ -0,0 +1,33 @@
|
||||
# Reglas de firewall L3
|
||||
firewall_rules = [
|
||||
{
|
||||
comment = "Bloqueo temporal switch a 8.8.8.8"
|
||||
policy = "deny"
|
||||
protocol = "any"
|
||||
src_cidr = "192.168.8.50/32"
|
||||
src_port = "any"
|
||||
dest_cidr = "8.8.8.8/32"
|
||||
dest_port = "any"
|
||||
syslog_enabled = false
|
||||
},
|
||||
{
|
||||
comment = "Bloqueo especifico DNS Cloudflare 1.1.1.1 desde VC"
|
||||
policy = "deny"
|
||||
protocol = "any"
|
||||
src_cidr = "10.2.48.0/24" # VLAN 102 - VC
|
||||
src_port = "any"
|
||||
dest_cidr = "1.1.1.1/32"
|
||||
dest_port = "any"
|
||||
syslog_enabled = false
|
||||
},
|
||||
{
|
||||
comment = "Denegar el resto del trafico de salida"
|
||||
policy = "deny"
|
||||
protocol = "any"
|
||||
src_cidr = "any"
|
||||
src_port = "any"
|
||||
dest_cidr = "any"
|
||||
dest_port = "any"
|
||||
syslog_enabled = false
|
||||
}
|
||||
]
|
||||
Executable
+32
@@ -0,0 +1,32 @@
|
||||
# Configuración de Terraform y Provider
|
||||
terraform {
|
||||
required_version = ">= 1.5.0"
|
||||
required_providers {
|
||||
meraki = {
|
||||
source = "CiscoDevNet/meraki"
|
||||
version = "1.9.0"
|
||||
}
|
||||
}
|
||||
|
||||
backend "s3" {
|
||||
bucket = "eqt-terraform-state-629066559706-us-east-1-an"
|
||||
key = "BCN01-LAB/terraform.tfstate"
|
||||
region = "us-east-1"
|
||||
dynamodb_table = "terraform-locks"
|
||||
encrypt = true
|
||||
}
|
||||
}
|
||||
|
||||
provider "meraki" {}
|
||||
|
||||
# Llamada al módulo meraki-site
|
||||
module "bcn01_lab" {
|
||||
source = "../../modules/meraki-site"
|
||||
|
||||
organization_name = var.organization_name
|
||||
network_name = var.network_name
|
||||
switch_vlans = var.switch_vlans
|
||||
firewall_rules = var.firewall_rules
|
||||
wireless_ssids = var.wireless_ssids
|
||||
radius_secret = var.radius_secret
|
||||
}
|
||||
@@ -0,0 +1,23 @@
|
||||
# SSIDs wireless - BCN01
|
||||
# NOTA: El shared secret de RADIUS NO está aquí.
|
||||
# Se pasa como variable de entorno TF_VAR_radius_secret (GitHub secret: RADIUS_SECRET)
|
||||
|
||||
wireless_ssids = [
|
||||
{
|
||||
number = 0
|
||||
name = "EQT-CORPO"
|
||||
enabled = true
|
||||
auth_mode = "open"
|
||||
splash_page = "Password-protected with custom RADIUS"
|
||||
ip_assignment_mode = "Bridge mode"
|
||||
use_vlan_tagging = true
|
||||
default_vlan_id = 100
|
||||
redirect_url = "https://www.adevinta.com"
|
||||
radius_servers = [
|
||||
{
|
||||
host = "15.15.15.15"
|
||||
port = 1912
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
Executable
+76
@@ -0,0 +1,76 @@
|
||||
# Definición de la Organización
|
||||
variable "organization_name" {
|
||||
type = string
|
||||
description = "Nombre exacto de tu organización en el Dashboard de Meraki"
|
||||
}
|
||||
|
||||
# Definición de la Red
|
||||
variable "network_name" {
|
||||
type = string
|
||||
description = "Nombre de la red (Network) donde reside el switch"
|
||||
}
|
||||
|
||||
|
||||
# Reglas de firewall L3
|
||||
variable "firewall_rules" {
|
||||
type = list(object({
|
||||
comment = string
|
||||
policy = string
|
||||
protocol = string
|
||||
src_cidr = string
|
||||
src_port = string
|
||||
dest_cidr = string
|
||||
dest_port = string
|
||||
syslog_enabled = optional(bool, false)
|
||||
}))
|
||||
default = []
|
||||
description = "Lista de reglas de firewall L3 para el site"
|
||||
}
|
||||
|
||||
# SSIDs wireless
|
||||
variable "wireless_ssids" {
|
||||
type = list(object({
|
||||
number = number
|
||||
name = string
|
||||
enabled = optional(bool, true)
|
||||
auth_mode = string
|
||||
splash_page = optional(string, "None")
|
||||
wpa_encryption_mode = optional(string, "WPA3 only")
|
||||
ip_assignment_mode = optional(string, "Bridge mode")
|
||||
use_vlan_tagging = optional(bool, false)
|
||||
default_vlan_id = optional(number, null)
|
||||
redirect_url = optional(string, "")
|
||||
radius_servers = optional(list(object({
|
||||
host = string
|
||||
port = number
|
||||
})), [])
|
||||
}))
|
||||
default = []
|
||||
description = "Lista de SSIDs wireless a configurar en el site"
|
||||
}
|
||||
|
||||
# Shared secret para servidores RADIUS (sensible, no incluir en tfvars)
|
||||
variable "radius_secret" {
|
||||
type = string
|
||||
sensitive = true
|
||||
default = ""
|
||||
description = "Shared secret para autenticación RADIUS. Pasar via TF_VAR_radius_secret"
|
||||
}
|
||||
|
||||
# Definición de VLANs
|
||||
variable "switch_vlans" {
|
||||
type = map(object({
|
||||
name = string
|
||||
subnet = string
|
||||
appliance_ip = string
|
||||
dhcp_handling = optional(string, "Run a DHCP server")
|
||||
reserved_ip_ranges = optional(list(object({
|
||||
comment = string
|
||||
id = string
|
||||
start = string
|
||||
end = string
|
||||
})), [])
|
||||
}))
|
||||
description = "Mapa de configuraciones de VLAN. La clave del mapa será el ID de la VLAN"
|
||||
}
|
||||
|
||||
Executable
+92
@@ -0,0 +1,92 @@
|
||||
# Nombre exacto que aparece en tu Dashboard de Meraki
|
||||
organization_name = "Adevinta Information Services SLU"
|
||||
network_name = "BCN01-LAB"
|
||||
|
||||
# Configuración de las VLANs (L3)
|
||||
# La clave (ej. "10") es el ID de la VLAN
|
||||
switch_vlans = {
|
||||
"100" = {
|
||||
name = "ACCESS"
|
||||
subnet = "10.2.32.0/21"
|
||||
appliance_ip = "10.2.32.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.32.1", end = "10.2.32.49" }
|
||||
]
|
||||
}
|
||||
"101" = {
|
||||
name = "GUEST"
|
||||
subnet = "10.2.40.0/21"
|
||||
appliance_ip = "10.2.40.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.40.1", end = "10.2.40.49" }
|
||||
]
|
||||
}
|
||||
"102" = {
|
||||
name = "VC"
|
||||
subnet = "10.2.48.0/24"
|
||||
appliance_ip = "10.2.48.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.48.1", end = "10.2.48.49" }
|
||||
]
|
||||
}
|
||||
"103" = {
|
||||
name = "PRINTERS"
|
||||
subnet = "10.2.49.0/24"
|
||||
appliance_ip = "10.2.49.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.49.1", end = "10.2.49.49" }
|
||||
]
|
||||
}
|
||||
"104" = {
|
||||
name = "DISPLAYS"
|
||||
subnet = "10.2.50.0/24"
|
||||
appliance_ip = "10.2.50.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.50.1", end = "10.2.50.49" }
|
||||
]
|
||||
}
|
||||
"105" = {
|
||||
name = "BOOKING"
|
||||
subnet = "10.2.51.0/24"
|
||||
appliance_ip = "10.2.51.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.51.1", end = "10.2.51.49" }
|
||||
]
|
||||
}
|
||||
"106" = {
|
||||
name = "BADGE_READERS"
|
||||
subnet = "10.2.52.0/24"
|
||||
appliance_ip = "10.2.52.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.52.1", end = "10.2.52.49" }
|
||||
]
|
||||
}
|
||||
"107" = {
|
||||
name = "CCTV"
|
||||
subnet = "10.2.53.0/24"
|
||||
appliance_ip = "10.2.53.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.53.1", end = "10.2.53.49" }
|
||||
]
|
||||
}
|
||||
"108" = {
|
||||
name = "APs"
|
||||
subnet = "10.2.54.0/24"
|
||||
appliance_ip = "10.2.54.1"
|
||||
reserved_ip_ranges = [
|
||||
{ comment = "Estáticas reservadas", id = "static", start = "10.2.54.1", end = "10.2.54.49" }
|
||||
]
|
||||
}
|
||||
"109" = {
|
||||
name = "MANAGEMENT"
|
||||
subnet = "10.2.55.0/24"
|
||||
appliance_ip = "10.2.55.1"
|
||||
dhcp_handling = "Do not respond to DHCP requests"
|
||||
}
|
||||
"110" = {
|
||||
name = "SERVERS"
|
||||
subnet = "10.2.56.0/24"
|
||||
appliance_ip = "10.2.56.1"
|
||||
dhcp_handling = "Do not respond to DHCP requests"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user