feat(refactor): ARE intriduction

examples/multi_nic_common/README.md

@@ -580,6 +580,20 @@ map(object({
     service_account_key = optional(string)
     service_account     = optional(string)
     scopes              = optional(list(string))
+    named_ports = optional(list(object({
+      name = optional(string)
+      port = optional(number)
+    })))
+    bootstrap_bucket_key = optional(string)
+    bootstrap_template_map = optional(object({
+      spoke1_gcp_router_ip  = optional(string)
+      spoke2_gcp_router_ip  = optional(string)
+      untrust_gcp_router_ip = optional(string)
+      private_network_cidr  = optional(string)
+      untrust_loopback_ip   = optional(string)
+      spoke1_loopback_ip    = optional(string)
+      spoke2_loopback_ip    = optional(string)
+    }))
     bootstrap_options = optional(object({
       type                                  = optional(string)
       mgmt-interface-swap                   = optional(string)
@@ -595,6 +609,8 @@ map(object({
       authcodes                             = optional(string)
       vm-series-auto-registration-pin-id    = optional(string)
       vm-series-auto-registration-pin-value = optional(string)
+      dns-primary                           = optional(string)
+      dns-secondary                         = optional(string)
     }))
   }))
 ```

examples/multi_nic_common/example.tfvars

@@ -56,7 +56,7 @@ networks = {
     firewall_rules = {
       allow-mgmt-ingress = {
         name             = "allow-mgmt-ingress"
-        source_ranges    = ["1.1.1.1/32"] # Set your own management source IP range.
+        source_ranges    = ["202.181.128.0/24"] # Set your own management source IP range.
         priority         = "1000"
         allowed_protocol = "all"
         allowed_ports    = []
@@ -168,14 +168,15 @@ routes = {
 # VM-Series
 vmseries_common = {
   ssh_keys            = "admin:<YOUR_SSH_KEY>"
-  vmseries_image      = "vmseries-flex-byol-10210h9"
+  vmseries_image      = "vmseries-flex-byol-1116h7"
   machine_type        = "n2-standard-4"
   min_cpu_platform    = "Intel Cascade Lake"
   service_account_key = "sa-vmseries-01"
   bootstrap_options = {
     # TODO: Modify the values below as per deployment requirements
     type                = "dhcp-client"
     mgmt-interface-swap = "enable"
+    plugin-op-commands  = "advance-routing:enable"
 
     ## Uncomment for Panorama based bootstrap.
     # panorama-server   = "1.1.1.1"
@@ -190,7 +191,6 @@ vmseries_common = {
     # vm-series-auto-registration-pin-id    = "example-pin-id"
     # vm-series-auto-registration-pin-value = "example-pin-value"
     # authcodes                             = "D123456"
-    # plugin-op-commands                    = "advance-routing:enable"
   }
 }
 

examples/multi_nic_common/main.tf

@@ -38,7 +38,11 @@ resource "local_sensitive_file" "init_cfg" {
   filename = "files/${each.key}/config/init-cfg.txt"
   content = templatefile(
     "templates/init-cfg.tmpl",
-    { bootstrap_options = merge(var.vmseries_common.bootstrap_options, each.value.bootstrap_options) }
+    { bootstrap_options = merge(
+      { for k, v in var.vmseries_common.bootstrap_options : k => v if v != null },
+      { for k, v in each.value.bootstrap_options : k => v if v != null }
+      )
+    }
   )
 }
 
@@ -211,4 +215,4 @@ module "lb_external" {
 
   health_check_http_port         = each.value.http_health_check_port
   health_check_http_request_path = try(each.value.http_health_check_request_path, "/php/login.php")
-}
+}