Solved: Publish changes done by terraform - Check Point CheckMates

Publish changes done by terraform

Hello

We would like for our futur architecture to build pour policies via terraform.

So I installed a lab but I have an issue when I try to publish the new change.

I followed this documentation :

As of right now, Terraform does not provide native support for publish and install-policy, so both of them are handled out-of-band.

In order to use post Apply/Destroy commands, the authentication method must be via environment variables.

Publish

Please use the following for publish:

$ cd $GOPATH/src/github.com/terraform-providers/terraform-provider-checkpoint/commands/publish
$ go build publish.go
$ mv publish $GOPATH/src/github.com/terraform-providers/terraform-provider-checkpoint
$ terraform apply && publish

But when i try it i have the following message :

➜ publish git:(master) go build publish.go

go: github.com/terraform-providers/terraform-provider-checkpoint/commands: github.com/terraform-providers/terraform-provider-checkpoint@v1.1.0: parsing go.mod:

module declares its path as: github.com/CheckPointSW/terraform-provider-checkpoint

but was required as: github.com/terraform-providers/terraform-provider-checkpoint

Idem to install policy

➜ install_policy git:(master) go build install_policy.go

go: github.com/terraform-providers/terraform-provider-checkpoint/commands: github.com/terraform-providers/terraform-provider-checkpoint@v1.1.0: parsing go.mod:

module declares its path as: github.com/CheckPointSW/terraform-provider-checkpoint

but was required as: github.com/terraform-providers/terraform-provider-checkpoint

Do you have a fix for me ?

How do you do in order to publish or install policy ?

Thanks for your help 🙂

Regards

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

1 Solution

Accepted Solutions

GBrembati

Employee

‎2021-02-2105:03 PM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

Jump to solution

Hello,

When you are working with Terraform you can handle the installation as well as the publish of the changes made by Terraform.

I would simply use the resources you can find inside "checkpoint" provider in the registry, my suggestion would also be to use the latest version (as per today 1.3.0) of the provider. So you would set your provider like this:

terraform {

required_providers {

checkpoint = {

source = "CheckPointSW/checkpoint"

version = ">= 1.3.0"

}

Then in the main you would just need to add the resources to publish the changes at the end, be careful to use the right dependency for that one since you want to be executed after all the changes.

So the policy install would be something like

And the publish would be something like, with some "depends_on" statement inside,

These examples are the ones in the public documentation of our provider that you can find here: https://registry.terraform.io/providers/CheckPointSW/checkpoint/latest/docs

If you want to see a real example here is a Terraform that I have created to make few action: such as creating few objects, a policy package, connect a datacenter object, install the CME, patch to a certain Jumbo Hotfix, etc https://github.com/gbrembati/terraform/blob/master/azure/mgmt-configuration/mgmtcfg-main.tf

Hope it helps,

Giorgio

View solution in original post

1\ \ \ Kudo

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5