From 866835c28ca06fe8de3b6dc3a8ff21fcf7096233 Mon Sep 17 00:00:00 2001 From: shont Date: Tue, 30 Dec 2025 14:56:49 +0000 Subject: [PATCH] feat(VSECPC-12631): Added support for R82.10 --- modules/autoscale/README.md | 2 +- modules/cluster/README.md | 2 +- modules/common/common/variables.tf | 4 ++-- modules/network-security-integration/README.md | 8 +++++--- modules/network-security-integration/variables.tf | 2 +- modules/single/README.md | 2 +- 6 files changed, 11 insertions(+), 9 deletions(-) diff --git a/modules/autoscale/README.md b/modules/autoscale/README.md index 18ce4ce..44aa23f 100755 --- a/modules/autoscale/README.md +++ b/modules/autoscale/README.md @@ -150,7 +150,7 @@ If you want to deploy with a specific image you can checkout this section to get | prefix | The prefix to use for resource naming
Note: resource name must not contain reserved words based on: sk40179. | string | N/A | "chkp-tf-mig" | No | | license | Checkpoint license (BYOL or PAYG). Required only if you choose to get the latest image. | string | BYOL;
PAYG;
| "BYOL" | No | | source_image | The autoscaling (MIG) image name.
Leave empty or set to "latest" in order to deploy with the latest image. | string | N/A | "" | No | -| os_version | GAIA OS Version. Required only if you choose to get the latest image. | string | R8110;
R8120;
R82; | "R82" | No | +| os_version | GAIA OS Version. Required only if you choose to get the latest image. | string | R8110;
R8120;
R82;
R8210; | "R82" | No | | management_nic | Management Interface - Autoscaling Security Gateways in GCP can be managed by an ephemeral public IP or using the private IP of the internal interface (eth1). | string | Ephemeral Public IP (eth0);
Private IP (eth1); | "Ephemeral Public IP (eth0)" | No | | management_name | The name of the Security Management Server as appears in autoprovisioning configuration. (Please enter a valid Security Management name including lowercase letters, digits and hyphens only). | string | N/A | "checkpoint-management" | No | | configuration_template_name | Specify the provisioning configuration template name (for autoprovisioning). (Please enter a valid autoprovisioing configuration template name including lowercase letters, digits and hyphens only). | string | N/A | "gcp-asg-autoprov-tmplt" | No | diff --git a/modules/cluster/README.md b/modules/cluster/README.md index 6280cb2..fbc193f 100755 --- a/modules/cluster/README.md +++ b/modules/cluster/README.md @@ -171,7 +171,7 @@ If you want to deploy with a specific image you can checkout this section to get | prefix | The prefix to use for resource naming | string | N/A | "chkp-tf-ha" | No | | license | Checkpoint license (BYOL or PAYG). Required only if you choose to get the latest image. | string | BYOL;
PAYG;
| "BYOL" | No | | source_image | The High Availability (cluster) image name.
Leave empty or set to "latest" in order to deploy with the latest image. | string | N/A | "" | No | -| os_version | GAIA OS Version. Required only if you choose to get the latest image. | string | R8110;
R8120;
R82; | "R82" | No | +| os_version | GAIA OS Version. Required only if you choose to get the latest image. | string | R8110;
R8120;
R82;
R8210; | "R82" | No | | zone_a | Member A Zone. The zone determines what computing resources are available and where your data is stored and used. | string | N/A | "us-central1-a" | No | | zone_b | Member B Zone. | string | N/A | "us-central1-a" | No | | machine_type | Machine types determine the specifications of your machines, such as the amount of memory, virtual cores, and persistent disk limits an instance will have. | string | N/A | "n1-standard-4" | No | diff --git a/modules/common/common/variables.tf b/modules/common/common/variables.tf index 2a9de48..dd1c070 100644 --- a/modules/common/common/variables.tf +++ b/modules/common/common/variables.tf @@ -9,8 +9,8 @@ variable "os_version" { description = "GAIA OS version" default = "R8120" validation { - condition = contains(["R8110", "R8120" , "R82"], var.os_version) - error_message = "Allowed values for os_version are 'R8110' , 'R8120', 'R82'" + condition = contains(["R8110", "R8120" , "R82", "R8210"], var.os_version) + error_message = "Allowed values for os_version are 'R8110' , 'R8120', 'R82', 'R8210'" } } diff --git a/modules/network-security-integration/README.md b/modules/network-security-integration/README.md index a0cdef9..e8571dd 100644 --- a/modules/network-security-integration/README.md +++ b/modules/network-security-integration/README.md @@ -118,6 +118,8 @@ This module supports deployment with the following Check Point CloudGuard gatewa | Version | Image Name | License | |---------|------------|-------------| +| R82.10 | `check-point-r8210-gw-byol-nsi-464-991001970-v20251229` | BYOL | +| R82.10 | `check-point-r8210-gw-payg-nsi-464-991001970-v20251229` | PAYG | | R82 | `check-point-r82-gw-byol-nsi-777-991001897-v20250904` | BYOL | | R82 | `check-point-r82-gw-payg-nsi-777-991001897-v20250904` | PAYG | | R81.20 | `check-point-r8120-gw-byol-nsi-631-991001896-v20250903` | BYOL | @@ -145,8 +147,8 @@ module "nsi-test" { # --- Check Point--- prefix = "chkp-tf-nsi" license = "BYOL" - image_name = "check-point-r8120-gw-byol-nsi-631-991001896-v20250903" - os_version = "R8120" + image_name = "check-point-r82-gw-byol-nsi-777-991001897-v20250904" + os_version = "R82" management_nic = "Ephemeral Public IP (eth0)" management_name = "tf-checkpoint-management" configuration_template_name = "tf-checkpoint-template" @@ -224,7 +226,7 @@ Leave an empty list for a protocol if you want to disable traffic for it. | prefix | (Optional) Resources name prefix.
Note: resource name must not contain reserved words based on [sk40179](https://support.checkpoint.com/results/sk/sk40179). | string | N/A | "chkp-tf-nsi" | no | | license | Check Point license (BYOL or PAYG). | string | BYOL
PAYG
| "BYOL" | no | | image_name | The NSI image name (for example, check-point-r8120-gw-byol-nsi-631-991001896-v20250903). | string | N/A | N/A | yes | -| os_version | Gaia OS Version | string | R8110;
R8120;
R82; | "R8120" | yes +| os_version | Gaia OS Version | string | R8110;
R8120;
R82;
R8210; | "R82" | yes | management_nic | Management Interface - Autoscaling Security Gateways in GCP can be managed by the ephemeral public IP or by the private IP of the Management interface (eth0). | string | Ephemeral Public IP (eth0)
Private IP (eth0) | "Ephemeral Public IP (eth0)" | no | | management_name | The name of the Security Management Server as it appears in the autoprovisioning configuration. (Enter a valid Security Management name including lowercase letters, digits and hyphens only). | string | N/A | "checkpoint-management" | no | | configuration_template_name | Specify the provisioning configuration template name (for autoprovisioning). (Enter a valid autoprovisioning configuration template name including lowercase letters, digits, and hyphens only). | string | N/A | "gcp-asg-autoprov-tmplt" | no | diff --git a/modules/network-security-integration/variables.tf b/modules/network-security-integration/variables.tf index dd6cbf8..6c335c4 100644 --- a/modules/network-security-integration/variables.tf +++ b/modules/network-security-integration/variables.tf @@ -39,7 +39,7 @@ variable "image_name" { variable "os_version" { type = string description = "GAIA OS version" - default = "R8120" + default = "R82" } variable "management_nic" { type = string diff --git a/modules/single/README.md b/modules/single/README.md index 808570f..c017d67 100755 --- a/modules/single/README.md +++ b/modules/single/README.md @@ -156,7 +156,7 @@ If you want to deploy with a specific image you can checkout this section to get | project_id | Personal project ID. The project indicates the default GCP project all of your resources will be created in. The project ID must be 6-30 characters long, start with a letter, and can only include lowercase letters, numbers, hyphenst and cannot end with a hyphen. | string | N/A | "" | Yes | | zone | The zone determines what computing resources are available and where your data is stored and used. | string | List of allowed [Regions and Zones](https://cloud.google.com/compute/docs/regions-zones?_ga=2.31926582.-962483654.1585043745) | us-central1-a | Yes | | source_image | The single gateway or management image name.
Leave empty or set to "latest" in order to deploy with the latest image. | string | "" | N/A | No | -| os_version | GAIA OS Version. Required only if you choose to get the latest image. | string | R8110;
R8120;
R82; | "R82" | No | +| os_version | GAIA OS Version. Required only if you choose to get the latest image. | string | R8110;
R8120;
R82;
R8210; | "R82" | No | | installation_type | Installation type. Required only if you choose to get the latest image. | string | Gateway only;
Management only;
Manual Configuration;
Gateway and Management (Standalone); | Gateway only | No | | license | Checkpoint license (BYOL or PAYG). Required only if you choose to get the latest image. | string | BYOL;
PAYG; | BYOL | No | | prefix | The prefix to use for resource naming | string | N/A | chkp-single-tf | No |