1fb7266469
- Introduced Aggregator.sol for Chainlink-compatible oracle functionality, including round-based updates and access control. - Added OracleWithCCIP.sol to extend Aggregator with CCIP cross-chain messaging capabilities. - Created .gitmodules to include OpenZeppelin contracts as a submodule. - Developed a comprehensive deployment guide in NEXT_STEPS_COMPLETE_GUIDE.md for Phase 2 and smart contract deployment. - Implemented Vite configuration for the orchestration portal, supporting both Vue and React frameworks. - Added server-side logic for the Multi-Cloud Orchestration Portal, including API endpoints for environment management and monitoring. - Created scripts for resource import and usage validation across non-US regions. - Added tests for CCIP error handling and integration to ensure robust functionality. - Included various new files and directories for the orchestration portal and deployment scripts.
2.1 KiB
2.1 KiB
NSG Fix Status Report
Configuration Changes ✅
Terraform Configuration Updated
- ✅ Added
subnet_nsg_enabledvariable - ✅ Added
enable_besu_rulesvariable - ✅ Made subnet NSG association conditional
- ✅ Made Besu rules conditional using dynamic blocks
- ✅ Updated
networking_adminmodule configuration
Files Modified
- ✅
terraform/modules/networking-vm/main.tf - ✅
terraform/modules/networking-vm/variables.tf - ✅
terraform/phases/phase1/phase1-main.tf
Deployment Status
Terraform Plan
- Status: ⏳ Needs
ssh_public_keyvariable - Action: Run with
-var-file=terraform.tfvarsor provide variable
Terraform Apply
- Status: ⏳ Pending (requires plan to succeed first)
- Expected Changes:
- Destroy:
module.networking_admin.azurerm_subnet_network_security_group_association.vm - Update: NSG rules (remove Besu rules if NSG still exists)
- Destroy:
Current State
Subnet NSG
- Status: ⚠️ Still attached (needs Terraform apply)
- NSG:
az-p-wst-proxy-vm-nsg - Rules: Has P2P/RPC/Metrics rules (wrong for Nginx)
NIC NSG
- Status: ✅ Attached
- NSG:
az-p-wst-proxy-nginx-nsg - Rules: HTTP (80), HTTPS (443), SSH (22) ✅
Required Actions
1. Complete Terraform Apply
cd terraform/phases/phase1
terraform plan -var-file=terraform.tfvars -out=tfplan
terraform apply tfplan
2. Verify Changes
- Check subnet NSG is detached
- Verify NIC NSG has correct rules
- Test port accessibility
Expected Result After Apply
Subnet NSG
- ✅ Detached from Nginx subnet
- ✅ No longer affects Nginx proxy
NIC NSG
- ✅ Remains attached
- ✅ Has correct rules (HTTP/HTTPS/SSH)
- ✅ No Besu-specific rules
Notes
- The Terraform configuration is correct and ready
- The apply needs to be completed to remove the subnet NSG association
- Once applied, the subnet NSG will be detached and only NIC NSG will apply
Status: ✅ Configuration Complete, Apply Pending
The Terraform configuration has been updated correctly. The changes need to be applied via terraform apply to remove the subnet NSG association.