mekaufman / customized-deployable-architecture

An example of customizing secure landing zone

Customized deployable architecture

This repo provides an example of a customization of the IBM deployable architecture VSI on VPC landing zone. This customization is a minor customization but illustrates how easy it is accomoplish making a change that is suited to a particular need. The customized deployable architecture still deploys a base networking layer with a Virtual Private Cloud but is now limited to the 'us-east' IBM Cloud region.

In addition to that example, this repo also contains an example of a deployable architecture that extends the base deployment by deploying a workload. The workload is a virtual server that is deployed within the VPC created by the base and it runs an Apache web server. There are two implementations of this deployable architecture, an 'extension' and a 'fullstack'. A deployable architecture that is an 'extension' requires that another offering be deployed prior to its own deployment. It has a dependency. A deployable architecture that is a 'fullstack' does not have any dependencies and will deploy the entire solution.

Also provided are examples of automation that perform the tasks to onboard, validate and publish to an IBM Cloud catalog. One is implemented as scripts that execute as part of a Github action which triggers on the creation of a release, the other is an IBM Cloud toolchain.

The customization process

This example shows how:

1. Create a custom deployable architecture and deploy it as a custom tile to the IBM cloud catalog.
2. Create a custom extension that extends the custom deployable architecture (based on the IBM VSI module) to deploy an Apache server.
3. create a pipeline that will publish the custom architecture and apache server as private solutions on the IBM public catalog.

Catalog tiles:

• custom-deployable-arch is a generic deployable architecture for the network landscape.
• custom-apache is a deployable architecture as a workload which runs a secure apache server.

The Apache workload tile has both an extension and a fullstack implemenation as variations of the deployable architecture.