{"id":21669428,"url":"https://github.com/flexibleenginecloud/fe-landingzone","last_synced_at":"2025-08-11T00:03:47.179Z","repository":{"id":212652267,"uuid":"604545247","full_name":"FlexibleEngineCloud/FE-landingzone","owner":"FlexibleEngineCloud","description":"Flexible Engine landingzone Accelerator","archived":false,"fork":false,"pushed_at":"2023-12-15T15:12:25.000Z","size":2888,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-03-20T07:35:56.958Z","etag":null,"topics":["fe","fe-landingzone","flexibleengine","landingzone","landingzone-accelerator","terraform"],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FlexibleEngineCloud.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-02-21T09:35:39.000Z","updated_at":"2024-01-08T11:28:21.000Z","dependencies_parsed_at":null,"dependency_job_id":"84df534a-0f76-4e45-8537-4550356d52c1","html_url":"https://github.com/FlexibleEngineCloud/FE-landingzone","commit_stats":null,"previous_names":["flexibleenginecloud/fe-landingzone"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/FlexibleEngineCloud/FE-landingzone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FlexibleEngineCloud%2FFE-landingzone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FlexibleEngineCloud%2FFE-landingzone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FlexibleEngineCloud%2FFE-landingzone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FlexibleEngineCloud%2FFE-landingzone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FlexibleEngineCloud","download_url":"https://codeload.github.com/FlexibleEngineCloud/FE-landingzone/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FlexibleEngineCloud%2FFE-landingzone/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269809447,"owners_count":24478537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-10T02:00:08.965Z","response_time":71,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["fe","fe-landingzone","flexibleengine","landingzone","landingzone-accelerator","terraform"],"created_at":"2024-11-25T12:22:03.157Z","updated_at":"2025-08-11T00:03:47.168Z","avatar_url":"https://github.com/FlexibleEngineCloud.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Flexible Engine landingzone Accelerator\n\n**Landing Zones** refers to the pre-configured and secure cloud environments that organizations use to host their applications and workloads. A **landing zone** is essentially the foundation of a cloud architecture that provides a framework for deploying and managing resources in a secure, scalable, and compliant manner.\n\nThis repository contains the Terraform code and related resources necessary to deploy a Landing Zone in **Flexible Engine**.\n\n## Diagram Blueprint\n![Alt text](https://github.com/FlexibleEngineCloud/FE-landingzone/blob/main/docs/designs/landingzone-all-in-one.png)\n\n\n## Prerequisites\nBefore you can deploy the Landing Zone in FE, you'll need to have the following:\n\n- A FE account\n- Terraform installation\n\n## Repository Contents\nThis repository contains the following resources:\n\n- docs/ - Documentation for setting up and managing a **Landing Zone** in **FE**.\n- terraform/\n   - modules/ - Terraform modules of landing zone components\n   - config/ - Main landing zone terraform code\n   - scenario/ - Networking landing zone scenarios\n- scripts/ - Python and Bash scripts\n\n## Deployment\nTo get started with this repository, clone it to your local machine:\n```\n$ git clone https://github.com/FlexibleEngineCloud/FE-landingzone.git\n```\n\nProjects must be created manually and update **projects.json** with project names and IDs already created.\n```\n{\n    \"eu-west-0\": \"PROJECT ID HERE\",\n    \"eu-west-0_Shared_Services\": \"PROJECT ID HERE\",\n    \"eu-west-0_Dev\": \"PROJECT ID HERE\",\n    \"eu-west-0_PreProd\": \"PROJECT ID HERE\",\n    \"eu-west-0_Prod\": \"PROJECT ID HERE\"\n}\n```\n\nAfter setting authentication credentials, it could be either, **username/password, AK/SK, Token**.\nYou should be able to provision resources on your **Flexible Engine domain**.\n\u003cbr/\u003e\nSee [SECURITY.md](https://github.com/FlexibleEngineCloud/FE-landingzone/blob/main/SECURITY.md) for best practices managing terraform secrets.\n\u003cbr/\u003e\n\u003cbr/\u003e\n**secrets.tfvars**:\n```\nak=\"ACCESS KEY HERE\"\nsk=\"SECRET KEY HERE\"\n```\n\nYou should also adapt groups.json to your IAM hierarchy:\n```\nThis JSON file defines various user groups with associated project permissions and users, such as super_admin, domain_admin, network_admin, and security_admin, dev_admin, preprod_admin, prod_admin. \nUser IDs could be retrieved from FE Console -\u003e IAM -\u003e users.\n```\n\u003cbr/\u003e\n\n**tms-tags.json** This JSON data represents a set of key-value pairs describing cloud tags related to environments, applications, regions, availability zones, components, confidentiality levels, creators, data classifications, and departments:\n\n```\n[\n  {\n    \"key\": \"Environment\",\n    \"value\": \"development\"\n  },\n  {\n    \"key\": \"Environment\",\n    \"value\": \"preproduction\"\n  },\n  {\n    \"key\": \"Environment\",\n    \"value\": \"production\"\n  },\n  ...etc\n]\n```\n\n**vars.tf** and **terraform.tfvars** also need to be adapted, to match your landing zone requirements.\n\n```\nvariable \"ak\" {\n  type        = string\n  description = \"The access key of the FlexibleEngine cloud\"\n  sensitive   = true\n}\nvariable \"sk\" {\n  type        = string\n  description = \"The secret key of the FlexibleEngine cloud\"\n  sensitive   = true\n}\nvariable \"domain_name\" {\n  type        = string\n  description = \"The Name of the Domain to scope to\"\n}\nvariable \"domain_id\" {\n  type        = string\n  description = \"The ID of the Domain to scope to\"\n}\nvariable \"tenant_name\" {\n  type        = string\n  description = \"The Name of the Project to login with\"\n}\nvariable \"region\" {\n  type        = string\n  description = \"Region of the FlexibleEngine cloud\"\n  default     = \"eu-west-0\"\n}\n...etc\n```\n\nIn a terminal, go into the scenario that fits your requirements, and run the **terraform init** command:\n\n```\n$ terraform init -var-file=\"/path/to/secrets.tfvars\"\nInitializing the backend...\n\nInitializing provider plugins...\n- Finding latest version of hashicorp/tls...\n- Finding latest version of hashicorp/random...\n- Finding latest version of flexibleenginecloud/flexibleengine...\n- Installing flexibleenginecloud/flexibleengine v1.36.0...\n- Installed flexibleenginecloud/flexibleengine v1.36.0 \n- Installing hashicorp/tls v4.0.4...\n- Installed hashicorp/tls v4.0.4 (signed by HashiCorp)\n- Installing hashicorp/random v3.4.3...\n- Installed hashicorp/random v3.4.3 (signed by HashiCorp)\n\nPartner and community providers are signed by their developers.\nIf you'd like to know more about provider signing, you can read about it here:\nhttps://www.terraform.io/docs/cli/plugins/signing.html\n\nTerraform has created a lock file .terraform.lock.hcl to record the provider\nselections it made above. Include this file in your version control repository\nso that Terraform can guarantee to make the same selections by default when\nyou run \"terraform init\" in the future.\n\nTerraform has been successfully initialized!\n```\n\nNow, run the **terraform plan** command:\n```\n$ terraform plan -var-file=\"/path/to/secrets.tfvars\"\nTerraform will perform the following actions:\n...\n```\nThe plan command lets you see what Terraform will do before actually making any changes.\nTo actually provision the resources, run the terraform apply command:\n```\n$ terraform apply -var-file=\"/path/to/secrets.tfvars\"\nTerraform will perform the following actions:\n...\n```\nTap **\"yes\"**, to confirm.\n```\nApply complete! Resources: 172 added, 0 changed, 0 destroyed.\n```\nCongrats, you’ve just deployed a landing zone in your FlexibleEngine account using Terraform! To verify this, head over to the FlexibleEngine console, and you should see your awesome infrastructure ready to go.\n\n### See Also \n- [Automating Flexible Engine Deployments with Terraform and GitHub Actions](https://cloud.orange-business.com/en/how-to/automating-flexible-engine-deployments-with-terraform-and-github-actions).\n- [Terraform on Flexible Engine](https://cloud.orange-business.com/en/how-to/terraform-on-flexible-engine).\n- [IAM and multi tenancy best practices on Flexible Engine](https://cloud.orange-business.com/en/best-practices-and-how-to/iam-multi-tenancy).\n\n## Contributing\nWe welcome contributions to this repository! If you would like to contribute, please see our contributing guidelines for more information.\n\n## License\nThis repository is licensed under the **Apache 2.0** License. See the **LICENSE** file for more information.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflexibleenginecloud%2Ffe-landingzone","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fflexibleenginecloud%2Ffe-landingzone","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fflexibleenginecloud%2Ffe-landingzone/lists"}