kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Selectively enable logging in FAST and firewall policy module rules (#2032)

Browse Source 
* use logging in firewall policy module examples

* enable logging for selected hierarchical firewall rules
This commit is contained in:
Ludovico Magnocavallo
2024-01-31 09:50:35 +01:00
committed by GitHub
parent 1e06c35a1f
commit 01c7f806ce
8 changed files with 17 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
fast/stages/2-networking-a-peering/data/hierarchical-ingress-rules.yaml
View File

@@ -22,6 +22,7 @@ allow-healthchecks:
allow-ssh-from-iap: allow-ssh-from-iap:
description: Enable SSH from IAP description: Enable SSH from IAP
enable_logging: true
priority: 1002 priority: 1002
match: match:
source_ranges: source_ranges:

1
fast/stages/2-networking-b-vpn/data/hierarchical-ingress-rules.yaml
View File

@@ -23,6 +23,7 @@ allow-healthchecks:
allow-ssh-from-iap: allow-ssh-from-iap:
description: Enable SSH from IAP description: Enable SSH from IAP
priority: 1002 priority: 1002
enable_logging: true
match: match:
source_ranges: source_ranges:
- 35.235.240.0/20 - 35.235.240.0/20

1
fast/stages/2-networking-c-nva/data/hierarchical-ingress-rules.yaml
View File

@@ -23,6 +23,7 @@ allow-healthchecks:
allow-ssh-from-iap: allow-ssh-from-iap:
description: Enable SSH from IAP description: Enable SSH from IAP
priority: 1002 priority: 1002
enable_logging: true
match: match:
source_ranges: source_ranges:
- 35.235.240.0/20 - 35.235.240.0/20

1
fast/stages/2-networking-d-separate-envs/data/hierarchical-ingress-rules.yaml
View File

@@ -23,6 +23,7 @@ allow-healthchecks:
allow-ssh-from-iap: allow-ssh-from-iap:
description: Enable SSH from IAP description: Enable SSH from IAP
priority: 1002 priority: 1002
enable_logging: true
match: match:
source_ranges: source_ranges:
- 35.235.240.0/20 - 35.235.240.0/20

1
fast/stages/2-networking-e-nva-bgp/data/hierarchical-ingress-rules.yaml
View File

@@ -23,6 +23,7 @@ allow-healthchecks:
allow-ssh-from-iap: allow-ssh-from-iap:
description: Enable SSH from IAP description: Enable SSH from IAP
priority: 1002 priority: 1002
enable_logging: true
match: match:
source_ranges: source_ranges:
- 35.235.240.0/20 - 35.235.240.0/20

12
modules/net-firewall-policy/README.md
View File

@@ -49,13 +49,15 @@ module "firewall-policy" {
} }
} }
mgmt = { mgmt = {
priority = 1001 priority = 1001
enable_logging = true
match = { match = {
source_ranges = ["10.1.1.0/24"] source_ranges = ["10.1.1.0/24"]
} }
} }
ssh = { ssh = {
priority = 1002 priority = 1002
enable_logging = true
match = { match = {
source_ranges = ["10.0.0.0/8"] source_ranges = ["10.0.0.0/8"]
# source_tags = ["tagValues/123456"] # source_tags = ["tagValues/123456"]
@@ -102,13 +104,15 @@ module "firewall-policy" {
} }
} }
mgmt = { mgmt = {
priority = 1001 priority = 1001
enable_logging = true
match = { match = {
source_ranges = ["10.1.1.0/24"] source_ranges = ["10.1.1.0/24"]
} }
} }
ssh = { ssh = {
priority = 1002 priority = 1002
enable_logging = true
match = { match = {
source_ranges = ["10.0.0.0/8"] source_ranges = ["10.0.0.0/8"]
# source_tags = ["tagValues/123456"] # source_tags = ["tagValues/123456"]

4
tests/modules/net_firewall_policy/examples/global-net.yaml
View File

@@ -79,7 +79,7 @@ values:
action: allow action: allow
direction: INGRESS direction: INGRESS
disabled: false disabled: false
enable_logging: null enable_logging: True
firewall_policy: test-1 firewall_policy: test-1
match: match:
- dest_address_groups: null - dest_address_groups: null
@@ -106,7 +106,7 @@ values:
action: allow action: allow
direction: INGRESS direction: INGRESS
disabled: false disabled: false
enable_logging: null enable_logging: True
firewall_policy: test-1 firewall_policy: test-1
match: match:
- dest_address_groups: null - dest_address_groups: null

4
tests/modules/net_firewall_policy/examples/hierarchical.yaml
View File

@@ -74,7 +74,7 @@ values:
description: null description: null
direction: INGRESS direction: INGRESS
disabled: false disabled: false
enable_logging: null enable_logging: True
match: match:
- dest_address_groups: null - dest_address_groups: null
dest_fqdns: null dest_fqdns: null
@@ -98,7 +98,7 @@ values:
description: null description: null
direction: INGRESS direction: INGRESS
disabled: false disabled: false
enable_logging: null enable_logging: True
match: match:
- dest_address_groups: null - dest_address_groups: null
dest_fqdns: null dest_fqdns: null