Create DA

.catalog-onboard-pipeline.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+offerings:
+  - name: deploy-arch-secrets-manager-public-cert-engine
+    kind: solution
+    catalog_id: 7df1e4ca-d54c-4fd0-82ce-3d13247308cd
+    offering_id:
+    variations:
+      - name: fully-configurable
+        mark_ready: true
+        install_type: fullstack
+        scc:
+          instance_id: 1c7d5f78-9262-44c3-b779-b28fe4d88c37
+          region: us-south

.releaserc

@@ -10,6 +10,9 @@
     }],
     ["@semantic-release/exec", {
       "successCmd": "echo \"SEMVER_VERSION=${nextRelease.version}\" >> $GITHUB_ENV"
+    }],
+    ["@semantic-release/exec",{
+      "publishCmd": "./ci/trigger-catalog-onboarding-pipeline.sh --version=v${nextRelease.version}"
     }]
   ]
 }

README.md

@@ -163,7 +163,7 @@ You need the following permissions to run this module.
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.9.0 |
-| <a name="requirement_ibm"></a> [ibm](#requirement\_ibm) | >= 1.76.0, < 2.0.0 |
+| <a name="requirement_ibm"></a> [ibm](#requirement\_ibm) | >= 1.79.0, < 2.0.0 |
 | <a name="requirement_time"></a> [time](#requirement\_time) | >= 0.9.1, < 1.0.0 |
 
 ### Modules
@@ -192,7 +192,7 @@ No modules.
 | <a name="input_ibmcloud_cis_api_key"></a> [ibmcloud\_cis\_api\_key](#input\_ibmcloud\_cis\_api\_key) | Optional, when not using IAM authorization, use an API key for CIS DNS configuration | `string` | `null` | no |
 | <a name="input_internet_service_domain_id"></a> [internet\_service\_domain\_id](#input\_internet\_service\_domain\_id) | (optional) Specific domain in the CIS to authorize Secrets Manager access to. | `string` | `null` | no |
 | <a name="input_internet_services_crn"></a> [internet\_services\_crn](#input\_internet\_services\_crn) | CRN of the CIS instance to authorize Secrets Manager against | `string` | `null` | no |
-| <a name="input_lets_encrypt_environment"></a> [lets\_encrypt\_environment](#input\_lets\_encrypt\_environment) | Let's Encrtyp environment (staging, production) | `string` | `"production"` | no |
+| <a name="input_lets_encrypt_environment"></a> [lets\_encrypt\_environment](#input\_lets\_encrypt\_environment) | Let's Encrypt environment (staging, production) | `string` | `"production"` | no |
 | <a name="input_private_key_secrets_manager_instance_guid"></a> [private\_key\_secrets\_manager\_instance\_guid](#input\_private\_key\_secrets\_manager\_instance\_guid) | The Secrets Manager instance GUID of the Secrets Manager containing your ACME private key. Required if acme\_letsencrypt\_private\_key is not set. | `string` | `null` | no |
 | <a name="input_private_key_secrets_manager_region"></a> [private\_key\_secrets\_manager\_region](#input\_private\_key\_secrets\_manager\_region) | The region of the Secrets Manager instance containing your ACME private key. (Only needed if different from the region variable) | `string` | `null` | no |
 | <a name="input_private_key_secrets_manager_secret_id"></a> [private\_key\_secrets\_manager\_secret\_id](#input\_private\_key\_secrets\_manager\_secret\_id) | The secret ID of your ACME private key. Required if acme\_letsencrypt\_private\_key is not set. If both are set, this value will be used as the private key. | `string` | `null` | no |

examples/api_key_auth/version.tf

@@ -4,7 +4,7 @@ terraform {
     # Pin to the lowest provider version of the range defined in the main module to ensure lowest version still works
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.76.0"
+      version = "1.79.0"
     }
   }
 }

examples/iam_auth/version.tf

@@ -4,7 +4,7 @@ terraform {
     # Pin to the lowest provider version of the range defined in the main module to ensure lowest version still works
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = ">= 1.76.0"
+      version = ">= 1.79.0"
     }
   }
 }

ibm_catalog.json

@@ -0,0 +1,181 @@
+{
+    "products": [
+      {
+        "name": "deploy-arch-secrets-manager-public-cert-engine",
+        "label": "Cloud automation for secrets manager public certificates engine",
+        "product_kind": "solution",
+        "tags": [
+          "ibm_created",
+          "target_terraform",
+          "terraform",
+          "solution",
+          "security"
+        ],
+        "keywords": [
+          "Public certificates engine",
+          "Secrets Manager",
+          "IaC",
+          "infrastructure as code",
+          "terraform",
+          "solution"
+        ],
+        "short_description": "Creates and configures a Secrets Manager Public Certificates Engine.",
+        "long_description" : "This deployable architecture is used to configure an Internet Service DNS configuration, authorization between Secrets Manager and Internet Service and Let's Encrypt certificate authority configuration. This Terraform-based automation is part of a broader suite of IBM-maintained Infrastructure as Code (IaC) asset collection, each following the naming pattern \"Cloud automation for *servicename*\" and focusing on single IBM Cloud service. These deployable architectures can be used on their own to streamline and automate service deployments through an [IaC approach](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects), or assembled together into a broader [automated IaC stack](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-config-stack) to automate the deployment of an end-to-end solution architecture.",
+        "offering_docs_url": "https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/blob/main/README.md",
+        "offering_icon_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/main/images/secrets_manager_public_cert_engine.svg",
+        "provider_name": "IBM",
+        "features": [
+          {
+            "title": "Configures Internet Service DNS",
+            "description": "Configures Internet Service DNS"
+          },
+          {
+            "title": "Creates Secrets Manager Internet Service authorization",
+            "description": "Creates authorization between Secrets Manager and Internet Service"
+          },
+          {
+            "title": "Configures Let's Encrypt certificate authority",
+            "description": "Configures Let's Encrypt certificate authority"
+          }
+        ],
+        "support_details": "This product is in the community registry, as such support is handled through the originated repo. If you experience issues please open an issue in that repository [https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/issues](https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/issues). Please note this product is not supported via the IBM Cloud Support Center.",
+        "flavors": [
+          {
+            "label": "Fully configurable",
+            "name": "fully-configurable",
+            "install_type": "fullstack",
+            "working_directory": "solutions/fully-configurable",
+            "architecture": {
+              "descriptions": "This architecture supports creating and configuring a Secrets Manager Public Certificates Engine.",
+              "features": [
+                {
+                  "title": "Configuring an Internet Service DNS configuration",
+                  "description": "Yes"
+                },
+                {
+                  "title": "Authorization between Secrets Manager and Internet Service",
+                  "description": "Yes"
+                },
+                {
+                  "title": "Provisions a Let's Encrypt certificate authority",
+                  "description": "Yes"
+                }
+              ],
+              "diagrams": [
+                {
+                  "diagram": {
+                    "caption": "Secrets Manager Public Certificates Engine",
+                    "url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/main/reference-architecture/secrets_manager_public_cert_engine.svg",
+                    "type": "image/svg+xml"
+                  },
+                  "description": "This architcture supports creating secrets manager public certificates engine within a secrets manager instance."
+                }
+              ]
+            },
+            "iam_permissions": [
+              {
+                "service_name": "iam-access-groups",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::role:Editor"
+                ]
+              },
+              {
+                "service_name": "iam-identity",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::role:Operator"
+                ]
+              },
+              {
+                "service_name": "resource-group",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::role:Viewer"
+                ]
+              },
+              {
+                "service_name": "secrets-manager",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::serviceRole:Administrator",
+                  "crn:v1:bluemix:public:iam::::serviceRole:Manager"
+                ]
+              }
+            ],
+            "configuration": [
+              {
+                "key": "ibmcloud_api_key"
+              },
+              {
+                "key": "existing_secrets_manager_crn",
+                "required": true
+              },
+              {
+                "key": "prefix",
+                "required": true
+              },
+              {
+                "key": "ibmcloud_cis_api_key"
+              },
+              {
+                "key": "internet_services_crn"
+              },
+              {
+                "key": "internet_services_account_id"
+              },
+              {
+                "key": "internet_service_domain_id"
+              },
+              {
+                "key": "dns_config_name"
+              },
+              {
+                "key": "ca_config_name"
+              },
+              {
+                "key": "lets_encrypt_environment",
+                "options": [
+                  {
+                    "displayname": "staging",
+                    "value": "staging"
+                  },
+                  {
+                    "displayname": "production",
+                    "value": "production"
+                  }
+                ]
+              },
+              {
+                "key": "acme_letsencrypt_private_key"
+              },
+              {
+                "key":"private_key_secrets_manager_secret_crn"
+              },
+              {
+                "key":"skip_iam_authorization_policy"
+              }
+            ],
+            "dependencies": [
+              {
+                "name": "deploy-arch-ibm-secrets-manager",
+                "description":"Configures secrets manager instance for the public certificates engine to be provisioned in.",
+                "id": "6d6ebc76-7bbd-42f5-8bc7-78f4fabd5944-global",
+                "version": "v2.4.0",
+                "flavors": [
+                "fully-configurable"
+                ],
+                "catalog_id": "7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3",
+                "optional": true,
+                "on_by_default": true,
+                "ignore_auto_referencing": ["*"],
+                "input_mapping": [
+                  {
+                    "dependency_output": "secrets_manager_crn",
+                    "version_input": "existing_secrets_manager_crn"
+                  }
+                ]
+              }
+            ],
+            "dependency_version_2": true
+          }
+        ]
+      }
+    ]
+  }