243 lines
6.8 KiB
HCL
243 lines
6.8 KiB
HCL
/**
|
|
* Copyright 2022 Google LLC
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
variable "billing_account_id" {
|
|
# tfdoc:variable:source 00-bootstrap
|
|
description = "Billing account id."
|
|
type = string
|
|
}
|
|
|
|
variable "custom_adv" {
|
|
description = "Custom advertisement definitions in name => range format."
|
|
type = map(string)
|
|
default = {
|
|
cloud_dns = "35.199.192.0/19"
|
|
gcp_all = "10.128.0.0/16"
|
|
gcp_dev_ew1 = "10.128.128.0/19"
|
|
gcp_dev_ew4 = "10.128.160.0/19"
|
|
gcp_landing_trusted_ew1 = "10.128.64.0/19"
|
|
gcp_landing_trusted_ew4 = "10.128.96.0/19"
|
|
gcp_landing_untrusted_ew1 = "10.128.0.0/19"
|
|
gcp_landing_untrusted_ew4 = "10.128.32.0/19"
|
|
gcp_prod_ew1 = "10.128.192.0/19"
|
|
gcp_prod_ew4 = "10.128.224.0/19"
|
|
googleapis_private = "199.36.153.8/30"
|
|
googleapis_restricted = "199.36.153.4/30"
|
|
rfc_1918_10 = "10.0.0.0/8"
|
|
rfc_1918_172 = "172.16.0.0/12"
|
|
rfc_1918_192 = "192.168.0.0/16"
|
|
}
|
|
}
|
|
|
|
variable "data_dir" {
|
|
description = "Relative path for the folder storing configuration data for network resources."
|
|
type = string
|
|
default = "data"
|
|
}
|
|
|
|
variable "dns" {
|
|
description = "Onprem DNS resolvers"
|
|
type = map(list(string))
|
|
default = {
|
|
onprem = ["10.0.200.3"]
|
|
}
|
|
}
|
|
|
|
variable "folder_ids" {
|
|
# tfdoc:variable:source 01-resman
|
|
description = "Folders to be used for the networking resources in folders/nnnnnnnnnnn format. If null, folder will be created."
|
|
type = map(string)
|
|
}
|
|
|
|
variable "l7ilb_subnets" {
|
|
description = "Subnets used for L7 ILBs."
|
|
type = map(list(object({
|
|
ip_cidr_range = string
|
|
region = string
|
|
})))
|
|
default = {
|
|
prod = [
|
|
{ ip_cidr_range = "10.128.92.0/24", region = "europe-west1" },
|
|
{ ip_cidr_range = "10.128.93.0/24", region = "europe-west4" }
|
|
]
|
|
dev = [
|
|
{ ip_cidr_range = "10.128.60.0/24", region = "europe-west1" },
|
|
{ ip_cidr_range = "10.128.61.0/24", region = "europe-west4" }
|
|
]
|
|
}
|
|
}
|
|
|
|
variable "onprem_cidr" {
|
|
description = "Onprem addresses in name => range format."
|
|
type = map(string)
|
|
default = {
|
|
main = "10.0.0.0/24"
|
|
}
|
|
}
|
|
|
|
variable "organization" {
|
|
# tfdoc:variable:source 00-bootstrap
|
|
description = "Organization details."
|
|
type = object({
|
|
domain = string
|
|
id = number
|
|
customer_id = string
|
|
})
|
|
}
|
|
|
|
variable "outputs_location" {
|
|
description = "Path where providers and tfvars files for the following stages are written. Leave empty to disable."
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "prefix" {
|
|
# tfdoc:variable:source 00-bootstrap
|
|
description = "Prefix used for resources that need unique names."
|
|
type = string
|
|
}
|
|
|
|
variable "project_factory_sa" {
|
|
# tfdoc:variable:source 01-resman
|
|
description = "IAM emails for project factory service accounts"
|
|
type = map(string)
|
|
default = {}
|
|
}
|
|
|
|
variable "psa_ranges" {
|
|
description = "IP ranges used for Private Service Access (e.g. CloudSQL)."
|
|
type = map(map(string))
|
|
default = {
|
|
prod = {
|
|
cloudsql-mysql = "10.128.94.0/24"
|
|
cloudsql-sqlserver = "10.128.95.0/24"
|
|
}
|
|
dev = {
|
|
cloudsql-mysql = "10.128.62.0/24"
|
|
cloudsql-sqlserver = "10.128.63.0/24"
|
|
}
|
|
}
|
|
}
|
|
|
|
variable "router_configs" {
|
|
description = "Configurations for CRs and onprem routers."
|
|
type = map(object({
|
|
adv = object({
|
|
custom = list(string)
|
|
default = bool
|
|
})
|
|
asn = number
|
|
}))
|
|
default = {
|
|
landing-trusted-ew1 = {
|
|
asn = "65534"
|
|
adv = null
|
|
# adv = { default = false, custom = [] }
|
|
}
|
|
landing-trusted-ew4 = {
|
|
asn = "65534"
|
|
adv = null
|
|
# adv = { default = false, custom = [] }
|
|
}
|
|
}
|
|
}
|
|
|
|
variable "vpn_onprem_configs" {
|
|
description = "VPN gateway configuration for onprem interconnection."
|
|
type = map(object({
|
|
adv = object({
|
|
default = bool
|
|
custom = list(string)
|
|
})
|
|
peer_external_gateway = object({
|
|
redundancy_type = string
|
|
interfaces = list(object({
|
|
id = number
|
|
ip_address = string
|
|
}))
|
|
})
|
|
tunnels = list(object({
|
|
peer_asn = number
|
|
peer_external_gateway_interface = number
|
|
secret = string
|
|
session_range = string
|
|
vpn_gateway_interface = number
|
|
}))
|
|
}))
|
|
default = {
|
|
landing-trusted-ew1 = {
|
|
adv = {
|
|
default = false
|
|
custom = [
|
|
"cloud_dns", "googleapis_private", "googleapis_restricted", "gcp_all"
|
|
]
|
|
}
|
|
peer_external_gateway = {
|
|
redundancy_type = "SINGLE_IP_INTERNALLY_REDUNDANT"
|
|
interfaces = [
|
|
{ id = 0, ip_address = "8.8.8.8" },
|
|
]
|
|
}
|
|
tunnels = [
|
|
{
|
|
peer_asn = 65534
|
|
peer_external_gateway_interface = 0
|
|
secret = "foobar"
|
|
session_range = "169.254.1.0/30"
|
|
vpn_gateway_interface = 0
|
|
},
|
|
{
|
|
peer_asn = 65534
|
|
peer_external_gateway_interface = 0
|
|
secret = "foobar"
|
|
session_range = "169.254.1.4/30"
|
|
vpn_gateway_interface = 1
|
|
}
|
|
]
|
|
}
|
|
landing-trusted-ew4 = {
|
|
adv = {
|
|
default = false
|
|
custom = [
|
|
"cloud_dns", "googleapis_private", "googleapis_restricted", "gcp_all"
|
|
]
|
|
}
|
|
peer_external_gateway = {
|
|
redundancy_type = "SINGLE_IP_INTERNALLY_REDUNDANT"
|
|
interfaces = [
|
|
{ id = 0, ip_address = "8.8.8.8" },
|
|
]
|
|
}
|
|
tunnels = [
|
|
{
|
|
peer_asn = 65534
|
|
peer_external_gateway_interface = 0
|
|
secret = "foobar"
|
|
session_range = "169.254.1.0/30"
|
|
vpn_gateway_interface = 0
|
|
},
|
|
{
|
|
peer_asn = 65534
|
|
peer_external_gateway_interface = 0
|
|
secret = "foobar"
|
|
session_range = "169.254.1.4/30"
|
|
vpn_gateway_interface = 1
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|