zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'GoogleCloudPlatform:master' into ajln-firewall

This commit is contained in:
Antonio Lopez 2023-04-11 22:58:22 +02:00 committed by GitHub
parent 6db1a5f5d3 f41362eb8f
commit b4156eff41
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
92 changed files with 393 additions and 294 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
blueprints/apigee/bigquery-analytics/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/adfs/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/asset-inventory-feed-remediation/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/dns-fine-grained-iam/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/dns-shared-vpc/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/iam-delegated-role-grants/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/onprem-sa-key-management/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/packer-image-builder/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/quota-monitoring/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/cloud-operations/scheduled-asset-inventory-export-bq/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/data-solutions/bq-ml/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/data-solutions/cmek-via-centralized-kms/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/data-solutions/data-playground/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/data-solutions/gcs-to-bq-with-least-privileges/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/factories/net-vpc-firewall-yaml/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

1
blueprints/gke/multitenant-fleet/gke-clusters.tf
View File

@ -24,6 +24,7 @@ module "gke-cluster" {
cluster_autoscaling = each.value.cluster_autoscaling
description = each.value.description
enable_features = each.value.enable_features
enable_addons = each.value.enable_addons
issue_client_certificate = each.value.issue_client_certificate
labels = each.value.labels
location = each.value.location

6
blueprints/networking/__need_fixing/nginx-reverse-proxy-cluster/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/__need_fixing/onprem-google-access-dns/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/decentralized-firewall/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/filtering-proxy-psc/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/filtering-proxy/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/hub-and-spoke-peering/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/hub-and-spoke-vpn/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/ilb-next-hop/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/private-cloud-function-from-onprem/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/networking/shared-vpc-gke/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
blueprints/third-party-solutions/openshift/tf/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

4
default-versions.tf
View File

@ -17,11 +17,11 @@ terraform {
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/__experimental/net-neg/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/api-gateway/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/apigee/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/artifact-registry/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/bigquery-dataset/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/bigtable-instance/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/billing-budget/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/binauthz/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/__need_fixing/onprem/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/coredns/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/cos-generic-metadata/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/envoy-traffic-director/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/mysql/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/nginx-tls/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/nginx/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/simple-nva/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-config-container/squid/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-function/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-identity-group/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloud-run/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/cloudsql-instance/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/compute-mig/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/compute-vm/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/container-registry/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/data-catalog-policy-tag/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/datafusion/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/dataproc/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/dns-response-policy/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/dns/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/endpoints/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/folder/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/gcs/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/gke-cluster/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/gke-hub/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/gke-nodepool/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/iam-service-account/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/kms/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/logging-bucket/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-address/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-cloudnat/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-glb/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-ilb-l7/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-ilb/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-interconnect-attachment-direct/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-vpc-firewall-policy/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-vpc-firewall/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-vpc-peering/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

86
modules/net-vpc/README.md
View File

@ -4,17 +4,22 @@ This module allows creation and management of VPC networks including subnetworks
## Examples
- [Simple VPC](#simple-vpc)
- [Subnet Options](#subnet-options)
- [Subnet IAM](#subnet-iam)
- [Peering](#peering)
- [Shared VPC](#shared-vpc)
- [Private Service Networking](#private-service-networking)
- [Private Service Networking with Peering Routes](#private-service-networking-with-peering-routes)
- [Subnets for Private Service Connect, Proxy-only subnets](#subnets-for-private-service-connect-proxy-only-subnets)
- [DNS Policies](#dns-policies)
- [Subnet Factory](#subnet-factory)
- [Custom Routes](#custom-routes)
- [VPC module](#vpc-module)
- [Examples](#examples)
- [Simple VPC](#simple-vpc)
- [Subnet Options](#subnet-options)
- [Subnet IAM](#subnet-iam)
- [Peering](#peering)
- [Shared VPC](#shared-vpc)
- [Private Service Networking](#private-service-networking)
- [Private Service Networking with peering routes](#private-service-networking-with-peering-routes)
- [Subnets for Private Service Connect, Proxy-only subnets](#subnets-for-private-service-connect-proxy-only-subnets)
- [DNS Policies](#dns-policies)
- [Subnet Factory](#subnet-factory)
- [Custom Routes](#custom-routes)
- [Allow Firewall Policy to be evaluated before Firewall Rules](#allow-firewall-policy-to-be-evaluated-before-firewall-rules)
- [Variables](#variables)
- [Outputs](#outputs)
### Simple VPC
@ -418,32 +423,61 @@ module "vpc" {
}
# tftest modules=5 resources=15 inventory=routes.yaml
```
### Allow Firewall Policy to be evaluated before Firewall Rules
```hcl
module "vpc" {
source = "./fabric/modules/net-vpc"
project_id = "my-project"
name = "my-network"
firewall_policy_enforcement_order = "BEFORE_CLASSIC_FIREWALL"
subnets = [
{
ip_cidr_range = "10.0.0.0/24"
name = "production"
region = "europe-west1"
secondary_ip_ranges = {
pods = "172.16.0.0/20"
services = "192.168.0.0/24"
}
},
{
ip_cidr_range = "10.0.16.0/24"
name = "production"
region = "europe-west2"
}
]
}
# tftest modules=1 resources=3 inventory=firewall_policy_enforcement_order.yaml
```
<!-- BEGIN TFDOC -->
## Variables
| name | description | type | required | default |
|---|---|:---:|:---:|:---:|
| [name](variables.tf#L60) | The name of the network being created. | <code>string</code> | ✓ | |
| [project_id](variables.tf#L76) | The ID of the project where this VPC will be created. | <code>string</code> | ✓ | |
| [name](variables.tf#L72) | The name of the network being created. | <code>string</code> | ✓ | |
| [project_id](variables.tf#L88) | The ID of the project where this VPC will be created. | <code>string</code> | ✓ | |
| [auto_create_subnetworks](variables.tf#L17) | Set to true to create an auto mode subnet, defaults to custom mode. | <code>bool</code> | | <code>false</code> |
| [data_folder](variables.tf#L23) | An optional folder containing the subnet configurations in YaML format. | <code>string</code> | | <code>null</code> |
| [delete_default_routes_on_create](variables.tf#L29) | Set to true to delete the default routes at creation time. | <code>bool</code> | | <code>false</code> |
| [description](variables.tf#L35) | An optional description of this resource (triggers recreation on change). | <code>string</code> | | <code>&#34;Terraform-managed.&#34;</code> |
| [dns_policy](variables.tf#L41) | DNS policy setup for the VPC. | <code title="object&#40;&#123;&#10; inbound &#61; optional&#40;bool&#41;&#10; logging &#61; optional&#40;bool&#41;&#10; outbound &#61; optional&#40;object&#40;&#123;&#10; private_ns &#61; list&#40;string&#41;&#10; public_ns &#61; list&#40;string&#41;&#10; &#125;&#41;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>null</code> |
| [mtu](variables.tf#L54) | Maximum Transmission Unit in bytes. The minimum value for this field is 1460 (the default) and the maximum value is 1500 bytes. | <code>number</code> | | <code>null</code> |
| [peering_config](variables.tf#L65) | VPC peering configuration. | <code title="object&#40;&#123;&#10; peer_vpc_self_link &#61; string&#10; create_remote_peer &#61; optional&#40;bool, true&#41;&#10; export_routes &#61; optional&#40;bool&#41;&#10; import_routes &#61; optional&#40;bool&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>null</code> |
| [psa_config](variables.tf#L81) | The Private Service Access configuration for Service Networking. | <code title="object&#40;&#123;&#10; ranges &#61; map&#40;string&#41;&#10; export_routes &#61; optional&#40;bool, false&#41;&#10; import_routes &#61; optional&#40;bool, false&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>null</code> |
| [routes](variables.tf#L91) | Network routes, keyed by name. | <code title="map&#40;object&#40;&#123;&#10; dest_range &#61; string&#10; next_hop_type &#61; string &#35; gateway, instance, ip, vpn_tunnel, ilb&#10; next_hop &#61; string&#10; priority &#61; optional&#40;number&#41;&#10; tags &#61; optional&#40;list&#40;string&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#123;&#125;</code> |
| [routing_mode](variables.tf#L111) | The network routing mode (default 'GLOBAL'). | <code>string</code> | | <code>&#34;GLOBAL&#34;</code> |
| [shared_vpc_host](variables.tf#L121) | Enable shared VPC for this project. | <code>bool</code> | | <code>false</code> |
| [shared_vpc_service_projects](variables.tf#L127) | Shared VPC service projects to register with this host. | <code>list&#40;string&#41;</code> | | <code>&#91;&#93;</code> |
| [subnet_iam](variables.tf#L133) | Subnet IAM bindings in {REGION/NAME => {ROLE => [MEMBERS]} format. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> | | <code>&#123;&#125;</code> |
| [subnet_iam_additive](variables.tf#L139) | Subnet IAM additive bindings in {REGION/NAME => {ROLE => [MEMBERS]}} format. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> | | <code>&#123;&#125;</code> |
| [subnets](variables.tf#L146) | Subnet configuration. | <code title="list&#40;object&#40;&#123;&#10; name &#61; string&#10; ip_cidr_range &#61; string&#10; region &#61; string&#10; description &#61; optional&#40;string&#41;&#10; enable_private_access &#61; optional&#40;bool, true&#41;&#10; flow_logs_config &#61; optional&#40;object&#40;&#123;&#10; aggregation_interval &#61; optional&#40;string&#41;&#10; filter_expression &#61; optional&#40;string&#41;&#10; flow_sampling &#61; optional&#40;number&#41;&#10; metadata &#61; optional&#40;string&#41;&#10; metadata_fields &#61; optional&#40;list&#40;string&#41;&#41;&#10; &#125;&#41;&#41;&#10; ipv6 &#61; optional&#40;object&#40;&#123;&#10; access_type &#61; optional&#40;string&#41;&#10; enable_private_access &#61; optional&#40;bool, true&#41;&#10; &#125;&#41;&#41;&#10; secondary_ip_ranges &#61; optional&#40;map&#40;string&#41;&#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#91;&#93;</code> |
| [subnets_proxy_only](variables.tf#L171) | List of proxy-only subnets for Regional HTTPS or Internal HTTPS load balancers. Note: Only one proxy-only subnet for each VPC network in each region can be active. | <code title="list&#40;object&#40;&#123;&#10; name &#61; string&#10; ip_cidr_range &#61; string&#10; region &#61; string&#10; description &#61; optional&#40;string&#41;&#10; active &#61; bool&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#91;&#93;</code> |
| [subnets_psc](variables.tf#L183) | List of subnets for Private Service Connect service producers. | <code title="list&#40;object&#40;&#123;&#10; name &#61; string&#10; ip_cidr_range &#61; string&#10; region &#61; string&#10; description &#61; optional&#40;string&#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#91;&#93;</code> |
| [vpc_create](variables.tf#L194) | Create VPC. When set to false, uses a data source to reference existing VPC. | <code>bool</code> | | <code>true</code> |
| [firewall_policy_enforcement_order](variables.tf#L54) | Order that Firewall Rules and Firewall Policies are evaluated. Can be either 'BEFORE_CLASSIC_FIREWALL' or 'AFTER_CLASSIC_FIREWALL'. | <code>string</code> | | <code>&#34;AFTER_CLASSIC_FIREWALL&#34;</code> |
| [mtu](variables.tf#L66) | Maximum Transmission Unit in bytes. The minimum value for this field is 1460 (the default) and the maximum value is 1500 bytes. | <code>number</code> | | <code>null</code> |
| [peering_config](variables.tf#L77) | VPC peering configuration. | <code title="object&#40;&#123;&#10; peer_vpc_self_link &#61; string&#10; create_remote_peer &#61; optional&#40;bool, true&#41;&#10; export_routes &#61; optional&#40;bool&#41;&#10; import_routes &#61; optional&#40;bool&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>null</code> |
| [psa_config](variables.tf#L93) | The Private Service Access configuration for Service Networking. | <code title="object&#40;&#123;&#10; ranges &#61; map&#40;string&#41;&#10; export_routes &#61; optional&#40;bool, false&#41;&#10; import_routes &#61; optional&#40;bool, false&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>null</code> |
| [routes](variables.tf#L103) | Network routes, keyed by name. | <code title="map&#40;object&#40;&#123;&#10; dest_range &#61; string&#10; next_hop_type &#61; string &#35; gateway, instance, ip, vpn_tunnel, ilb&#10; next_hop &#61; string&#10; priority &#61; optional&#40;number&#41;&#10; tags &#61; optional&#40;list&#40;string&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#123;&#125;</code> |
| [routing_mode](variables.tf#L123) | The network routing mode (default 'GLOBAL'). | <code>string</code> | | <code>&#34;GLOBAL&#34;</code> |
| [shared_vpc_host](variables.tf#L133) | Enable shared VPC for this project. | <code>bool</code> | | <code>false</code> |
| [shared_vpc_service_projects](variables.tf#L139) | Shared VPC service projects to register with this host. | <code>list&#40;string&#41;</code> | | <code>&#91;&#93;</code> |
| [subnet_iam](variables.tf#L145) | Subnet IAM bindings in {REGION/NAME => {ROLE => [MEMBERS]} format. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> | | <code>&#123;&#125;</code> |
| [subnet_iam_additive](variables.tf#L151) | Subnet IAM additive bindings in {REGION/NAME => {ROLE => [MEMBERS]}} format. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> | | <code>&#123;&#125;</code> |
| [subnets](variables.tf#L158) | Subnet configuration. | <code title="list&#40;object&#40;&#123;&#10; name &#61; string&#10; ip_cidr_range &#61; string&#10; region &#61; string&#10; description &#61; optional&#40;string&#41;&#10; enable_private_access &#61; optional&#40;bool, true&#41;&#10; flow_logs_config &#61; optional&#40;object&#40;&#123;&#10; aggregation_interval &#61; optional&#40;string&#41;&#10; filter_expression &#61; optional&#40;string&#41;&#10; flow_sampling &#61; optional&#40;number&#41;&#10; metadata &#61; optional&#40;string&#41;&#10; metadata_fields &#61; optional&#40;list&#40;string&#41;&#41;&#10; &#125;&#41;&#41;&#10; ipv6 &#61; optional&#40;object&#40;&#123;&#10; access_type &#61; optional&#40;string&#41;&#10; enable_private_access &#61; optional&#40;bool, true&#41;&#10; &#125;&#41;&#41;&#10; secondary_ip_ranges &#61; optional&#40;map&#40;string&#41;&#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#91;&#93;</code> |
| [subnets_proxy_only](variables.tf#L183) | List of proxy-only subnets for Regional HTTPS or Internal HTTPS load balancers. Note: Only one proxy-only subnet for each VPC network in each region can be active. | <code title="list&#40;object&#40;&#123;&#10; name &#61; string&#10; ip_cidr_range &#61; string&#10; region &#61; string&#10; description &#61; optional&#40;string&#41;&#10; active &#61; bool&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#91;&#93;</code> |
| [subnets_psc](variables.tf#L195) | List of subnets for Private Service Connect service producers. | <code title="list&#40;object&#40;&#123;&#10; name &#61; string&#10; ip_cidr_range &#61; string&#10; region &#61; string&#10; description &#61; optional&#40;string&#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>&#91;&#93;</code> |
| [vpc_create](variables.tf#L206) | Create VPC. When set to false, uses a data source to reference existing VPC. | <code>bool</code> | | <code>true</code> |
## Outputs

17
modules/net-vpc/main.tf
View File

@ -34,14 +34,15 @@ data "google_compute_network" "network" {
}
resource "google_compute_network" "network" {
count = var.vpc_create ? 1 : 0
project = var.project_id
name = var.name
description = var.description
auto_create_subnetworks = var.auto_create_subnetworks
delete_default_routes_on_create = var.delete_default_routes_on_create
mtu = var.mtu
routing_mode = var.routing_mode
count = var.vpc_create ? 1 : 0
project = var.project_id
name = var.name
description = var.description
auto_create_subnetworks = var.auto_create_subnetworks
delete_default_routes_on_create = var.delete_default_routes_on_create
mtu = var.mtu
routing_mode = var.routing_mode
network_firewall_policy_enforcement_order = var.firewall_policy_enforcement_order
}
resource "google_compute_network_peering" "local" {

12
modules/net-vpc/variables.tf
View File

@ -51,6 +51,18 @@ variable "dns_policy" {
default = null
}
variable "firewall_policy_enforcement_order" {
description = "Order that Firewall Rules and Firewall Policies are evaluated. Can be either 'BEFORE_CLASSIC_FIREWALL' or 'AFTER_CLASSIC_FIREWALL'."
type = string
nullable = false
default = "AFTER_CLASSIC_FIREWALL"
validation {
condition = var.firewall_policy_enforcement_order == "BEFORE_CLASSIC_FIREWALL" || var.firewall_policy_enforcement_order == "AFTER_CLASSIC_FIREWALL"
error_message = "Enforcement order must be BEFORE_CLASSIC_FIREWALL or AFTER_CLASSIC_FIREWALL."
}
}
variable "mtu" {
description = "Maximum Transmission Unit in bytes. The minimum value for this field is 1460 (the default) and the maximum value is 1500 bytes."
type = number

6
modules/net-vpc/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-vpn-dynamic/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-vpn-ha/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/net-vpn-static/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/organization/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/project/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/projects-data-source/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/pubsub/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/secret-manager/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/service-directory/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/source-repository/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

6
modules/vpc-sc/versions.tf
View File

@ -13,15 +13,15 @@
# limitations under the License.
terraform {
required_version = ">= 1.3.1"
required_version = ">= 1.4.4"
required_providers {
google = {
source = "hashicorp/google"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
google-beta = {
source = "hashicorp/google-beta"
version = ">= 4.59.0" # tftest
version = ">= 4.60.0" # tftest
}
}
}

51
tests/modules/net_vpc/examples/firewall_policy_enforcement_order.yaml Normal file
View File

@ -0,0 +1,51 @@
# Copyright 2023 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.vpc.google_compute_network.network[0]:
auto_create_subnetworks: false
delete_default_routes_on_create: false
description: Terraform-managed.
name: my-network
project: my-project
routing_mode: GLOBAL
network_firewall_policy_enforcement_order: BEFORE_CLASSIC_FIREWALL
module.vpc.google_compute_subnetwork.subnetwork["europe-west1/production"]:
description: Terraform-managed.
ip_cidr_range: 10.0.0.0/24
log_config: []
name: production
private_ip_google_access: true
project: my-project
region: europe-west1
role: null
secondary_ip_range:
- ip_cidr_range: 172.16.0.0/20
range_name: pods
- ip_cidr_range: 192.168.0.0/24
range_name: services
module.vpc.google_compute_subnetwork.subnetwork["europe-west2/production"]:
description: Terraform-managed.
ip_cidr_range: 10.0.16.0/24
log_config: []
name: production
private_ip_google_access: true
project: my-project
region: europe-west2
role: null
secondary_ip_range: []
counts:
google_compute_network: 1
google_compute_subnetwork: 2