Create DA

.catalog-onboard-pipeline.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+offerings:
+  - name: deploy-arch-secrets-manager-public-cert-engine
+    kind: solution
+    catalog_id: 7df1e4ca-d54c-4fd0-82ce-3d13247308cd
+    offering_id:
+    variations:
+      - name: fully-configurable
+        mark_ready: true
+        install_type: fullstack
+        scc:
+          instance_id: 1c7d5f78-9262-44c3-b779-b28fe4d88c37
+          region: us-south

.releaserc

@@ -10,6 +10,9 @@
     }],
     ["@semantic-release/exec", {
       "successCmd": "echo \"SEMVER_VERSION=${nextRelease.version}\" >> $GITHUB_ENV"
+    }],
+    ["@semantic-release/exec",{
+      "publishCmd": "./ci/trigger-catalog-onboarding-pipeline.sh --version=v${nextRelease.version}"
     }]
   ]
 }

ibm_catalog.json

@@ -0,0 +1,192 @@
+{
+    "products": [
+      {
+        "name": "deploy-arch-secrets-manager-public-cert-engine",
+        "label": "Cloud automation for secrets manager public certificates engine",
+        "product_kind": "solution",
+        "tags": [
+          "ibm_created",
+          "target_terraform",
+          "terraform",
+          "solution",
+          "security"
+        ],
+        "keywords": [
+          "Public certificates engine",
+          "Secrets Manager",
+          "IaC",
+          "infrastructure as code",
+          "terraform",
+          "solution"
+        ],
+        "short_description": "Creates and configures a Secrets Manager Public Certificates Engine.",
+        "long_description" : "This deployable architecture is used to provision and configure a CIS DNS configuration, authorization between Secrets Manager and Cloud Internet Service and Let's Encrypt certificate authority configuration. This Terraform-based automation is part of a broader suite of IBM-maintained Infrastructure as Code (IaC) asset collection, each following the naming pattern \"Cloud automation for *servicename*\" and focusing on single IBM Cloud service. These deployable architectures can be used on their own to streamline and automate service deployments through an [IaC approach](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects), or assembled together into a broader [automated IaC stack](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-config-stack) to automate the deployment of an end-to-end solution architecture.",
+        "offering_docs_url": "https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/blob/main/README.md",
+        "offering_icon_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/main/images/secrets_manager_public_cert_engine.svg",
+        "provider_name": "IBM",
+        "features": [
+          {
+            "title": "Creates CIS DNS",
+            "description": "Creates and configures Cloud Internet Service DNS"
+          },
+          {
+            "title": "Creates SM CIS authorization",
+            "description": "Creates authorization between Secrets Manager and CIS"
+          },
+          {
+            "title": "Configures Let's Encrypt certificate authority",
+            "description": "Configures Let's Encrypt certificate authority"
+          }
+        ],
+        "support_details": "This product is in the community registry, as such support is handled through the originated repo. If you experience issues please open an issue in that repository [https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/issues](https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/issues). Please note this product is not supported via the IBM Cloud Support Center.",
+        "flavors": [
+          {
+            "label": "Fully configurable",
+            "name": "fully-configurable",
+            "install_type": "fullstack",
+            "working_directory": "solutions/fully-configurable",
+            "architecture": {
+              "descriptions": "This architecture supports creating and configuring a Secrets Manager Public Certificates Engine.",
+              "features": [
+                {
+                  "title": "Provision a CIS DNS configuration",
+                  "description": "Yes"
+                },
+                {
+                  "title": "Authorization between Secrets Manager and Cloud Internet Service",
+                  "description": "Yes"
+                },
+                {
+                  "title": "Provisions a Let's Encrypt certificate authority",
+                  "description": "Yes"
+                }
+              ],
+              "diagrams": [
+                {
+                  "diagram": {
+                    "caption": "Secrets Manager Public Certificates Engine",
+                    "url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager-public-cert-engine/main/reference-architecture/secrets_manager_public_cert_engine.svg",
+                    "type": "image/svg+xml"
+                  },
+                  "description": "This architcture supports creating secrets manager public certificates engine within a secrets manager instance."
+                }
+              ]
+            },
+            "iam_permissions": [
+              {
+                "service_name": "iam-access-groups",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::role:Editor"
+                ]
+              },
+              {
+                "service_name": "iam-identity",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::role:Operator"
+                ]
+              },
+              {
+                "service_name": "resource-group",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::role:Viewer"
+                ]
+              },
+              {
+                "service_name": "secrets-manager",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::serviceRole:Administrator",
+                  "crn:v1:bluemix:public:iam::::serviceRole:Manager"
+                ]
+              },
+              {
+                "service_name": "cloud-object-storage",
+                "notes": "[Optional] Required if you are enabling VPC flow logs",
+                "role_crns": [
+                  "crn:v1:bluemix:public:iam::::serviceRole:Manager",
+                  "crn:v1:bluemix:public:iam::::role:Editor"
+                ]
+              }
+            ],
+            "configuration": [
+              {
+                "key": "ibmcloud_api_key"
+              },
+              {
+                "key": "existing_secrets_manager_crn",
+                "required": true
+              },
+              {
+                "key": "prefix",
+                "required": true
+              },
+              {
+                "key": "ibmcloud_cis_api_key"
+              },
+              {
+                "key": "internet_services_crn"
+              },
+              {
+                "key": "cis_account_id"
+              },
+              {
+                "key": "internet_service_domain_id"
+              },
+              {
+                "key": "dns_config_name"
+              },
+              {
+                "key": "ca_config_name"
+              },
+              {
+                "key": "lets_encrypt_environment"
+              },
+              {
+                "key": "acme_letsencrypt_private_key"
+              },
+              {
+                "key":"private_key_secrets_manager_instance_guid"
+              },
+              {
+                "key":"private_key_secrets_manager_region"
+              },
+              {
+                "key":"private_key_secrets_manager_secret_id"
+              },
+              {
+                "key":"skip_iam_authorization_policy",
+                "options": [
+                  {
+                    "displayname": "true",
+                    "value": "true"
+                  },
+                  {
+                    "displayname": "false",
+                    "value": "false"
+                  }
+                ]
+              }
+            ],
+            "dependencies": [
+              {
+                "name": "deploy-arch-ibm-secrets-manager",
+                "id": "5f149ae6-d781-460a-977d-c8c4171ad0fa-global",
+                "version": "^v1.3.0",
+                "flavors": ["fully-configurable"],
+                "catalog_id": "7a4d68b4-cf8b-40cd-a3d1-f49aff526eb3",
+                "optional": true,
+                "on_by_default": true,
+                "ignore_auto_referencing": ["*"],
+                "input_mapping": [
+                  {
+                    "dependency_output": "secrets_manager_crn",
+                    "version_input": "existing_secrets_manager_crn"
+                  }
+                ]
+              }
+            ],
+            "dependency_version_2": true
+          }
+        ]
+      }
+    ]
+  }