102 lines
3.9 KiB
YAML
102 lines
3.9 KiB
YAML
# Copyright 2023 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# file: tests/modules/net_swp/examples/rules.yaml
|
|
values:
|
|
module.secure-web-proxy.google_network_security_gateway_security_policy.policy:
|
|
name: "secure-web-proxy"
|
|
project: "my-project"
|
|
location: "europe-west4"
|
|
module.secure-web-proxy.google_network_services_gateway.gateway:
|
|
project: "my-project"
|
|
name: "secure-web-proxy"
|
|
location: "europe-west4"
|
|
type: "SECURE_WEB_GATEWAY"
|
|
addresses:
|
|
- "10.142.68.3"
|
|
ports: [80, 443]
|
|
certificate_urls: ["projects/my-project/locations/europe-west4/certificates/secure-web-proxy-cert"]
|
|
network: "projects/my-project/global/networks/my-network"
|
|
subnetwork: "projects/my-project/regions/europe-west4/subnetworks/my-subnetwork"
|
|
delete_swg_autogen_router_on_destroy: true
|
|
description: "Managed by Terraform."
|
|
module.secure-web-proxy.google_network_security_gateway_security_policy_rule.secure_tag_rules["secure-tag-1"]:
|
|
project: "my-project"
|
|
name: "secure-tag-1"
|
|
location: "europe-west4"
|
|
enabled: true
|
|
priority: 1000
|
|
session_matcher: "source.matchTag('tagValues/281484836404786')"
|
|
application_matcher: null
|
|
tls_inspection_enabled: false
|
|
basic_profile: "ALLOW"
|
|
description: "Managed by Terraform."
|
|
module.secure-web-proxy.google_network_security_gateway_security_policy_rule.secure_tag_rules["secure-tag-2"]:
|
|
project: "my-project"
|
|
name: "secure-tag-2"
|
|
location: "europe-west4"
|
|
enabled: true
|
|
priority: 1001
|
|
session_matcher: "source.matchTag('tagValues/281484836404786') && (host() != 'google.com')"
|
|
application_matcher: null
|
|
tls_inspection_enabled: false
|
|
basic_profile: "ALLOW"
|
|
description: "Managed by Terraform."
|
|
module.secure-web-proxy.google_network_security_gateway_security_policy_rule.url_list_rules["url-list-1"]:
|
|
project: "my-project"
|
|
name: "url-list-1"
|
|
location: "europe-west4"
|
|
enabled: true
|
|
priority: 1002
|
|
application_matcher: null
|
|
tls_inspection_enabled: false
|
|
basic_profile: "ALLOW"
|
|
description: "Managed by Terraform."
|
|
module.secure-web-proxy.google_network_security_gateway_security_policy_rule.url_list_rules["url-list-2"]:
|
|
project: "my-project"
|
|
name: "url-list-2"
|
|
location: "europe-west4"
|
|
enabled: false
|
|
priority: 1003
|
|
session_matcher: "inUrlList(host(), 'projects/my-project/locations/europe-west4/urlLists/my-url-list') && (source.matchServiceAccount('my-sa@my-project.iam.gserviceaccount.com'))"
|
|
application_matcher: null
|
|
tls_inspection_enabled: false
|
|
basic_profile: "ALLOW"
|
|
description: "Managed by Terraform."
|
|
module.secure-web-proxy.google_network_security_gateway_security_policy_rule.custom_rules["custom-rule-1"]:
|
|
project: "my-project"
|
|
name: "custom-rule-1"
|
|
location: "europe-west4"
|
|
enabled: true
|
|
priority: 1004
|
|
session_matcher: "host() == 'google.com'"
|
|
application_matcher: null
|
|
tls_inspection_enabled: false
|
|
basic_profile: "DENY"
|
|
description: "Managed by Terraform."
|
|
module.secure-web-proxy.google_network_security_url_lists.url_lists["my-url-list"]:
|
|
project: "my-project"
|
|
name: "my-url-list"
|
|
location: "europe-west4"
|
|
values:
|
|
- "www.google.com"
|
|
- "google.com"
|
|
description: "Managed by Terraform."
|
|
|
|
counts:
|
|
google_network_security_gateway_security_policy: 1
|
|
google_network_services_gateway: 1
|
|
google_network_security_gateway_security_policy_rule: 5
|
|
google_network_security_url_lists: 1
|