The instructions in this article enable you to use Terraform to install Cequence Bridge as an Azure Serverless Container app.

Prerequisites

• Azure subscription ID
• Terraform
• Access to the Azure CLI
• Credentials for the Cequence image repository on Gitlab. Your Cequence sales team or customer success team can provide these credentials.

Generating a traffic client and secret

Several Cequence components must authenticate to the Cequence UAP platform in order to transmit and receive data. Create authentication credentials in the Cequence UAP platform to enable this authentication.

1. Log in to the UAP management portal UI.
   The URL for the management portal is typically of the form https://ui.<your-tenant-name>.<domain>. Replace <your-tenant-name> with the name of your Cequence tenant organization. Replace <domain> with your domain name.
2. Select General Settings > User Management.
   The User Management pane appears.
3. Click the Clients tab.
4. Click Add New Client.
   The new client dialog box appears.
5. Type the client name in the Client Name field.
   This name is the client ID. Note the client ID for later use.
6. Enable the Traffic Management toggle.
7. (Optional) To change the token lifespan from the default of 1800 seconds, type a whole number of seconds in Token Lifespan.
8. Click Save.
   A dialog box with the client secret appears.
9. Click the blue Copy icon to copy the secret to the clipboard, then click Close.
   The client is now set up. Note the client name for future use.
   The client list appears.
10. Note the value of the client secret for later use. This value will not be shown again later on the UI for security reasons.

Installation

Installing Cequence Bridge on Azure requires updating Terraform templates.

1. Run the following command to log in to the Azure CLI.

   az login

   A list of tenants and subscription IDs appears.

2. Select a subscription and tenant from the list.
   The terminal session returns to the shell environment. Note the selected subscription ID and tenant ID for later use.

3. Set the required environment variables. In a bash shell, run the following commands.

   export ARM_SUBSCRIPTION_ID="your-subscription-id"
   export ARM_TENANT_ID="your-tenant-id"

   In Powershell, run the following commands.

   $env:ARM_SUBSCRIPTION_ID = "your-subscription-id"
   $env:ARM_TENANT_ID = "your-tenant-id"

4. Download the compressed file that contains the Terraform templates.

5. Extract the files by running the following command, then navigate to the directory that contains the extracted files.

   tar -xvzf serverless-cequence-bridge-azure-<VERSION>.tar.gz
   cd serverless-cequence-bridge-azure

6. Create a file named terraform.tfvars and type the configurations, as in the following example.
   Detailed configuration information is available later in this article.

   azure_region = "westus2"
   azure_resource_group_name = "apimproject" -- If left blank a new resource group will be created
   
   container_env = {
      APIEDGE_CLIENT_ID = "azureclient"
      APIEDGE_CLIENT_SECRET = "<fTjZd34GuT3LG5bjIiCezL6bwzzMa9ja>"
      UAP_SUB_DOMAIN = "acme.1.cequence.cloud"
   }
   image_configuration = {
      image   = "registry.gitlab.com/cequence/releases/dataplane/cequence-bridge:5.2.1"
      registry = "registry.gitlab.com"
      username = "acme"
      password = "gldt-Ds2M6X1WHqxFT6GaJ9TC"
   }

7. Run the following command to register the namespace,then confirm results in your portal in Subscriptions > Settings > Resource Providers.

   az provider register --namespace Microsoft.App

8. Initialize Terraform.

   terraform init

   Confirm successful initialization by checking the output for the string Terraform has been successfully initalized!.

9. Run the following commands to apply the Terraform changes.

   terraform apply

   Confirm successful application by checking the output for an HTTPS URL.

Verification

A successful installation of Cequence Bridge produces the following output.

url = "https://cequence-bridge-app-<NAME>.azurecontainerapps.io/api-transactions"

Note: The "NAME" attribute in the URL above is auto-assigned by Terraform, not configured by any configuration listed on this page.

Traffic sent to the above URL with the appropriate JSON body is visible in the Cequence UAP. Browse to the Sitemap Discovery page under "Threat Detection" to see if the requests you are sending via Cequence Bridge are making it to the UAP Platform.

Terraform configuration variables

The following table lists the primary Terraform configuration variables.

container_env variables

The variables in this table refer to the client ID, secret, and UAP subdomain for the Cequence instance. This represents the auth configuration for the Bridge. Using these credentials, the Bridge authenticates itself to UAP.

container_limits variables

The variables in this table apply to the container_limits object.

scaling_configuration variables