kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update and fix module net-lb-proxy-int (#4024)

Browse Source 
* Fix net-lb-int-proxy

* WIP update

* Update tests
This commit is contained in:
Luca Prete
2026-06-15 10:08:26 +02:00
committed by GitHub
parent a0987e189d
commit 6dcb19466a
23 changed files with 2387 additions and 157 deletions
Download Patch File Download Diff File Expand all files Collapse all files

154
tests/modules/net_lb_proxy_int/examples/address.yaml Normal file
View File

@@ -0,0 +1,154 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.address.google_compute_address.internal["ilb"]:
address_type: INTERNAL
deletion_policy: DELETE
description: Terraform managed.
effective_labels:
goog-terraform-provisioned: 'true'
ip_collection: null
ip_version: null
ipv6_endpoint_type: null
labels: null
name: ilb
network: null
project: project-id
purpose: INTERNAL
region: europe-west1
subnetwork: subnet_self_link
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west1-a/instanceGroups/my-ig
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: int-tcp-proxy
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_address: 1
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 2
resources: 6
terraform_data: 1
outputs: {}

24
tests/modules/net_lb_proxy_int/examples/context.yaml
View File

@@ -1,10 +1,10 @@
# Copyright 2025 Google LLC
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
@@ -13,15 +13,16 @@
# limitations under the License.
values:
module.tcp-proxy.google_compute_forwarding_rule.default:
module.tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_address: 10.0.0.10
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
@@ -38,6 +39,7 @@ values:
subnetwork: projects/foo-dev-net-spoke-0/regions/europe-west8/subnetworks/gce
timeouts: null
module.tcp-proxy.google_compute_instance_group.default["default"]:
deletion_policy: DELETE
description: Terraform managed.
instances:
- projects/myprj/zones/europe-west1-b/instances/vm-a
@@ -70,6 +72,7 @@ values:
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
@@ -94,6 +97,7 @@ values:
tls_settings: []
module.tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
@@ -116,12 +120,19 @@ values:
timeouts: null
unhealthy_threshold: 2
module.tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: ilb-test
project: foo-test-0
proxy_header: NONE
region: europe-west8
timeouts: null
module.tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
@@ -130,6 +141,7 @@ counts:
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 5
resources: 6
terraform_data: 1
outputs: {}

147
tests/modules/net_lb_proxy_int/examples/group-config.yaml Normal file
View File

@@ -0,0 +1,147 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_instance_group.default["default"]:
deletion_policy: DELETE
description: Terraform managed.
instances:
- projects/myprj/zones/europe-west1-b/instances/vm-a
name: int-tcp-proxy-default
named_port:
- name: http
port: 80
project: project-id
timeouts: null
zone: europe-west1-b
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
port_name: http
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: int-tcp-proxy
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_instance_group: 1
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 6
terraform_data: 1
outputs: {}

134
tests/modules/net_lb_proxy_int/examples/health-check-config.yaml Normal file
View File

@@ -0,0 +1,134 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west1-a/instanceGroups/my-ig
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: int-tcp-proxy
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: 80
port_name: null
port_specification: null
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 5
terraform_data: 1
outputs: {}

111
tests/modules/net_lb_proxy_int/examples/health-check-link.yaml Normal file
View File

@@ -0,0 +1,111 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west1-a/instanceGroups/my-ig
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
health_checks:
- projects/myprj/global/healthChecks/custom
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 4
terraform_data: 1
outputs: {}

155
tests/modules/net_lb_proxy_int/examples/hybrid-neg.yaml Normal file
View File

@@ -0,0 +1,155 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_network_endpoint.default["my-neg-e-0"]:
deletion_policy: DELETE
instance: null
ip_address: 10.0.0.10
network_endpoint_group: int-tcp-proxy-my-neg
port: 80
project: project-id
timeouts: null
zone: europe-west1-b
module.int-tcp-proxy.google_compute_network_endpoint_group.default["my-neg"]:
default_port: null
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy-my-neg
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
network_endpoint_type: NON_GCP_PRIVATE_IP_PORT
project: project-id
subnetwork: null
timeouts: null
zone: europe-west1-b
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: CONNECTION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
max_connections: null
max_connections_per_endpoint: 10
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: int-tcp-proxy
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_network_endpoint: 1
google_compute_network_endpoint_group: 1
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 7
terraform_data: 1
outputs: {}

109
tests/modules/net_lb_proxy_int/examples/internet-neg.yaml
View File

@@ -1,10 +1,10 @@
# Copyright 2024 Google LLC
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
@@ -12,51 +12,139 @@
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.ilb-l7.google_compute_forwarding_rule.default:
module.ilb-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: ilb-test
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west8
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
module.ilb-l7.google_compute_region_backend_service.default:
timeouts: null
module.ilb-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: ilb-test
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west8
security_policy: null
session_affinity: NONE
module.ilb-l7.google_compute_region_network_endpoint.internet["neg-0-e-0"]:
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.ilb-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: ilb-test
project: project-id
region: europe-west8
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.ilb-tcp-proxy.google_compute_region_network_endpoint.internet["neg-0-e-0"]:
client_destination_port: null
deletion_policy: DELETE
fqdn: www.example.org
instance: null
ip_address: null
port: 80
project: project-id
region: europe-west8
region_network_endpoint_group: ilb-test-neg-0
module.ilb-l7.google_compute_region_network_endpoint_group.internet["neg-0"]:
timeouts: null
module.ilb-tcp-proxy.google_compute_region_network_endpoint_group.internet["neg-0"]:
app_engine: []
cloud_function: []
cloud_run: []
deletion_policy: DELETE
description: null
name: ilb-test-neg-0
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
network_endpoint_type: INTERNET_FQDN_PORT
project: project-id
psc_target_service: null
region: europe-west8
subnetwork: null
module.ilb-l7.google_compute_region_target_tcp_proxy.default:
timeouts: null
module.ilb-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: ilb-test
project: project-id
proxy_header: NONE
region: europe-west8
timeouts: null
module.ilb-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
@@ -66,4 +154,7 @@ counts:
google_compute_region_network_endpoint_group: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 6
resources: 7
terraform_data: 1
outputs: {}

134
tests/modules/net_lb_proxy_int/examples/minimal.yaml Normal file
View File

@@ -0,0 +1,134 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: ilb-test
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west1-a/instanceGroups/my-ig
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: ilb-test
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: ilb-test
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: ilb-test
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 5
terraform_data: 1
outputs: {}

134
tests/modules/net_lb_proxy_int/examples/neg-link.yaml Normal file
View File

@@ -0,0 +1,134 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west1-a/networkEndpointGroups/my-neg
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: int-tcp-proxy
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 5
terraform_data: 1
outputs: {}

179
tests/modules/net_lb_proxy_int/examples/ports.yaml Normal file
View File

@@ -0,0 +1,179 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.address.google_compute_address.internal["ilb"]:
address_type: INTERNAL
deletion_policy: DELETE
description: Terraform managed.
effective_labels:
goog-terraform-provisioned: 'true'
ip_collection: null
ip_version: null
ipv6_endpoint_type: null
labels: null
name: ilb
network: null
project: project-id
purpose: SHARED_LOADBALANCER_VIP
region: europe-west1
subnetwork: subnet_self_link
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
module.int-tcp-proxy.google_compute_forwarding_rule.default["http"]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy-http
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_forwarding_rule.default["https"]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy-https
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
no_automate_dns_zone: null
port_range: '443'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: null
source_ip_ranges: null
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west1-a/instanceGroups/my-ig
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: int-tcp-proxy
project: project-id
region: europe-west1
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_address: 1
google_compute_forwarding_rule: 2
google_compute_region_backend_service: 1
google_compute_region_health_check: 1
google_compute_region_target_tcp_proxy: 1
modules: 2
resources: 7
terraform_data: 1
outputs: {}

471
tests/modules/net_lb_proxy_int/examples/psc-neg.yaml Normal file
View File

@@ -0,0 +1,471 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.address-ilb.google_compute_address.internal["ilb-01"]:
address_type: INTERNAL
deletion_policy: DELETE
description: Terraform managed.
effective_labels:
goog-terraform-provisioned: 'true'
ip_collection: null
ip_version: null
ipv6_endpoint_type: null
labels: null
name: ilb-01
network: null
project: project-id
purpose: SHARED_LOADBALANCER_VIP
region: europe-west8
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
module.ilb-producer.google_compute_forwarding_rule.default["default"]:
all_ports: true
allow_global_access: true
allow_psc_global_access: null
deletion_policy: DELETE
description: null
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL
name: ilb-producer-default
no_automate_dns_zone: null
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west1
service_label: ilb-producer
source_ip_ranges: null
target: null
timeouts: null
module.ilb-producer.google_compute_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
https_health_check: []
name: ilb-producer
project: project-id
source_regions: null
ssl_health_check: []
tcp_health_check:
- port: null
port_name: null
port_specification: USE_SERVING_PORT
proxy_header: NONE
request: null
response: null
timeout_sec: 5
timeouts: null
unhealthy_threshold: 2
module.ilb-producer.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend: []
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
iap:
- enabled: false
oauth2_client_id: null
oauth2_client_secret: null
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL
locality_lb_policy: null
name: ilb-producer
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: UNSPECIFIED
region: europe-west1
security_policy: null
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.ilb-producer.google_compute_service_attachment.default["default"]:
connection_preference: ACCEPT_AUTOMATIC
consumer_accept_lists: []
consumer_reject_lists: null
deletion_policy: DELETE
description: Terraform managed.
domain_names: null
enable_proxy_protocol: false
name: ilb-producer-default
project: project-id
region: europe-west1
send_propagated_connection_limit_if_zero: false
show_nat_ips: null
timeouts: null
module.int-tcp-proxy.google_compute_forwarding_rule.default["http"]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy-http
no_automate_dns_zone: null
port_range: '80'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west8
service_label: null
source_ip_ranges: null
timeouts: null
module.int-tcp-proxy.google_compute_forwarding_rule.default["https"]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: int-tcp-proxy-https
no_automate_dns_zone: null
port_range: '443'
ports: null
project: project-id
recreate_closed_psc: false
region: europe-west8
service_label: null
source_ip_ranges: null
timeouts: null
module.int-tcp-proxy.google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
health_checks: null
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west8
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_network_endpoint_group.psc["my-neg"]:
app_engine: []
cloud_function: []
cloud_run: []
deletion_policy: DELETE
description: null
name: int-tcp-proxy-my-neg
network_endpoint_type: PRIVATE_SERVICE_CONNECT
project: project-id
psc_data:
- producer_port: '80'
region: europe-west8
timeouts: null
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west8
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
module.vpc-producer.google_compute_network.network[0]:
auto_create_subnetworks: false
delete_bgp_always_compare_med: false
delete_default_routes_on_create: false
deletion_policy: DELETE
description: Terraform-managed.
enable_ula_internal_ipv6: null
name: net-producer-0
network_firewall_policy_enforcement_order: AFTER_CLASSIC_FIREWALL
network_profile: null
params: []
project: project-id
routing_mode: GLOBAL
timeouts: null
module.vpc-producer.google_compute_route.gateway["directpath-googleapis"]:
deletion_policy: DELETE
description: Terraform-managed.
dest_range: 34.126.0.0/18
name: net-producer-0-directpath-googleapis
network: net-producer-0
next_hop_gateway: default-internet-gateway
next_hop_ilb: null
next_hop_instance: null
next_hop_vpn_tunnel: null
params: []
priority: 1000
project: project-id
tags: null
timeouts: null
module.vpc-producer.google_compute_route.gateway["private-googleapis"]:
deletion_policy: DELETE
description: Terraform-managed.
dest_range: 199.36.153.8/30
name: net-producer-0-private-googleapis
network: net-producer-0
next_hop_gateway: default-internet-gateway
next_hop_ilb: null
next_hop_instance: null
next_hop_vpn_tunnel: null
params: []
priority: 1000
project: project-id
tags: null
timeouts: null
module.vpc-producer.google_compute_route.gateway["restricted-googleapis"]:
deletion_policy: DELETE
description: Terraform-managed.
dest_range: 199.36.153.4/30
name: net-producer-0-restricted-googleapis
network: net-producer-0
next_hop_gateway: default-internet-gateway
next_hop_ilb: null
next_hop_instance: null
next_hop_vpn_tunnel: null
params: []
priority: 1000
project: project-id
tags: null
timeouts: null
module.vpc-producer.google_compute_subnetwork.proxy_only["europe-west8/sub-proxy-producer-0"]:
deletion_policy: DELETE
description: Terraform-managed proxy-only subnet for Regional HTTPS, Internal
HTTPS or Cross-Regional HTTPS Internal LB.
ip_cidr_range: 10.0.1.0/26
ip_collection: null
ipv6_access_type: null
log_config: []
name: sub-proxy-producer-0
network: net-producer-0
params: []
project: project-id
purpose: REGIONAL_MANAGED_PROXY
region: europe-west8
reserved_internal_range: null
resolve_subnet_mask: null
role: ACTIVE
send_secondary_ip_range_if_empty: null
timeouts: null
module.vpc-producer.google_compute_subnetwork.psc["europe-west8/sub-psc-producer-0"]:
deletion_policy: DELETE
description: Terraform-managed subnet for Private Service Connect (PSC NAT).
ip_cidr_range: 10.0.2.0/26
ip_collection: null
ipv6_access_type: null
log_config: []
name: sub-psc-producer-0
network: net-producer-0
params: []
project: project-id
purpose: PRIVATE_SERVICE_CONNECT
region: europe-west8
reserved_internal_range: null
resolve_subnet_mask: null
role: null
send_secondary_ip_range_if_empty: null
timeouts: null
module.vpc-producer.google_compute_subnetwork.subnetwork["europe-west8/sub-producer-0"]:
deletion_policy: DELETE
description: Terraform-managed.
ip_cidr_range: 10.0.0.0/24
ip_collection: null
ipv6_access_type: null
log_config: []
name: sub-producer-0
network: net-producer-0
params: []
private_ip_google_access: true
project: project-id
region: europe-west8
reserved_internal_range: null
resolve_subnet_mask: null
role: null
send_secondary_ip_range_if_empty: true
timeouts: null
module.vpc.google_compute_network.network[0]:
auto_create_subnetworks: false
delete_bgp_always_compare_med: false
delete_default_routes_on_create: false
deletion_policy: DELETE
description: Terraform-managed.
enable_ula_internal_ipv6: null
name: net-consumer-0
network_firewall_policy_enforcement_order: AFTER_CLASSIC_FIREWALL
network_profile: null
params: []
project: project-id
routing_mode: GLOBAL
timeouts: null
module.vpc.google_compute_route.gateway["directpath-googleapis"]:
deletion_policy: DELETE
description: Terraform-managed.
dest_range: 34.126.0.0/18
name: net-consumer-0-directpath-googleapis
network: net-consumer-0
next_hop_gateway: default-internet-gateway
next_hop_ilb: null
next_hop_instance: null
next_hop_vpn_tunnel: null
params: []
priority: 1000
project: project-id
tags: null
timeouts: null
module.vpc.google_compute_route.gateway["private-googleapis"]:
deletion_policy: DELETE
description: Terraform-managed.
dest_range: 199.36.153.8/30
name: net-consumer-0-private-googleapis
network: net-consumer-0
next_hop_gateway: default-internet-gateway
next_hop_ilb: null
next_hop_instance: null
next_hop_vpn_tunnel: null
params: []
priority: 1000
project: project-id
tags: null
timeouts: null
module.vpc.google_compute_route.gateway["restricted-googleapis"]:
deletion_policy: DELETE
description: Terraform-managed.
dest_range: 199.36.153.4/30
name: net-consumer-0-restricted-googleapis
network: net-consumer-0
next_hop_gateway: default-internet-gateway
next_hop_ilb: null
next_hop_instance: null
next_hop_vpn_tunnel: null
params: []
priority: 1000
project: project-id
tags: null
timeouts: null
module.vpc.google_compute_subnetwork.proxy_only["europe-west8/sub-proxy-consumer-0"]:
deletion_policy: DELETE
description: Terraform-managed proxy-only subnet for Regional HTTPS, Internal
HTTPS or Cross-Regional HTTPS Internal LB.
ip_cidr_range: 10.0.1.0/26
ip_collection: null
ipv6_access_type: null
log_config: []
name: sub-proxy-consumer-0
network: net-consumer-0
params: []
project: project-id
purpose: REGIONAL_MANAGED_PROXY
region: europe-west8
reserved_internal_range: null
resolve_subnet_mask: null
role: ACTIVE
send_secondary_ip_range_if_empty: null
timeouts: null
module.vpc.google_compute_subnetwork.subnetwork["europe-west8/sub-consumer-0"]:
deletion_policy: DELETE
description: Terraform-managed.
ip_cidr_range: 10.0.0.0/24
ip_collection: null
ipv6_access_type: null
log_config: []
name: sub-consumer-0
network: net-consumer-0
params: []
private_ip_google_access: true
project: project-id
region: europe-west8
reserved_internal_range: null
resolve_subnet_mask: null
role: null
send_secondary_ip_range_if_empty: true
timeouts: null
counts:
google_compute_address: 1
google_compute_forwarding_rule: 3
google_compute_health_check: 1
google_compute_network: 2
google_compute_region_backend_service: 2
google_compute_region_network_endpoint_group: 1
google_compute_region_target_tcp_proxy: 1
google_compute_route: 6
google_compute_service_attachment: 1
google_compute_subnetwork: 5
modules: 5
resources: 24
terraform_data: 1
outputs: {}

54
tests/modules/net_lb_proxy_int/examples/zonal-neg.yaml
View File

@@ -1,10 +1,10 @@
# Copyright 2024 Google LLC
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
@@ -13,30 +13,16 @@
# limitations under the License.
values:
google_compute_address.test:
address: 10.0.0.10
address_type: INTERNAL
description: null
effective_labels:
goog-terraform-provisioned: 'true'
ip_version: null
ipv6_endpoint_type: null
labels: null
name: neg-test
network: null
project: project-id
region: europe-west1
subnetwork: subnet_self_link
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
module.int-tcp-proxy.google_compute_forwarding_rule.default:
module.int-tcp-proxy.google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
@@ -53,6 +39,7 @@ values:
subnetwork: subnet_self_link
timeouts: null
module.int-tcp-proxy.google_compute_network_endpoint.default["my-neg-e-0"]:
deletion_policy: DELETE
instance: test-1
ip_address: 10.0.0.10
network_endpoint_group: int-tcp-proxy-my-neg
@@ -62,6 +49,7 @@ values:
zone: europe-west1-b
module.int-tcp-proxy.google_compute_network_endpoint_group.default["my-neg"]:
default_port: null
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy-my-neg
network: https://www.googleapis.com/compute/v1/projects/xxx/global/networks/aaa
@@ -75,6 +63,7 @@ values:
backend:
- balancing_mode: CONNECTION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
max_connections: null
@@ -84,29 +73,41 @@ values:
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: int-tcp-proxy
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: project-id
protocol: TCP
region: europe-west1
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
module.int-tcp-proxy.google_compute_region_health_check.default[0]:
check_interval_sec: 5
deletion_policy: DELETE
description: Terraform managed.
grpc_health_check: []
grpc_tls_health_check: []
healthy_threshold: 2
http2_health_check: []
http_health_check: []
@@ -126,15 +127,21 @@ values:
timeouts: null
unhealthy_threshold: 2
module.int-tcp-proxy.google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: int-tcp-proxy
project: project-id
proxy_header: NONE
region: europe-west1
timeouts: null
module.int-tcp-proxy.terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_address: 1
google_compute_forwarding_rule: 1
google_compute_network_endpoint: 1
google_compute_network_endpoint_group: 1
@@ -143,3 +150,6 @@ counts:
google_compute_region_target_tcp_proxy: 1
modules: 1
resources: 7
terraform_data: 1
outputs: {}

1
tests/modules/net_lb_proxy_int/health-checks-none.tfvars Normal file
View File

@@ -0,0 +1 @@
health_check_config = null

123
tests/modules/net_lb_proxy_int/health-checks-none.yaml Normal file
View File

@@ -0,0 +1,123 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: hc-test-0
network: network
no_automate_dns_zone: null
port_range: '80'
ports: null
project: my-project
recreate_closed_psc: false
region: europe-west4
service_label: null
source_ip_ranges: null
subnetwork: subnet
timeouts: null
google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
group: projects/myprj/zones/europe-west4-a/instanceGroups/my-ig
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
health_checks: null
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: hc-test-0
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: my-project
protocol: TCP
region: europe-west4
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: hc-test-0
project: my-project
proxy_header: NONE
region: europe-west4
timeouts: null
terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_target_tcp_proxy: 1
modules: 0
resources: 4
terraform_data: 1
outputs:
address: __missing__
backend_service: __missing__
backend_service_id: __missing__
backend_service_self_link: __missing__
forwarding_rules: __missing__
group_self_links: {}
groups: {}
health_check: null
health_check_id: null
health_check_self_link: null
ids: __missing__
neg_ids: {}
service_attachment_id: null

13
tests/modules/net_lb_proxy_int/health-checks-psc.tfvars Normal file
View File

@@ -0,0 +1,13 @@
neg_configs = {
my-psc = {
psc = {
region = "europe-west4"
target_service = "projects/my-prod-project/regions/europe-west4/serviceAttachments/my-attachment"
}
}
}
backend_service_config = {
backends = [{
group = "my-psc"
}]
}

138
tests/modules/net_lb_proxy_int/health-checks-psc.yaml Normal file
View File

@@ -0,0 +1,138 @@
# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
google_compute_forwarding_rule.default[""]:
all_ports: null
allow_global_access: true
allow_psc_global_access: null
backend_service: null
deletion_policy: DELETE
description: Terraform managed.
ip_collection: null
ip_protocol: TCP
ip_version: IPV4
is_mirroring_collector: null
labels: null
load_balancing_scheme: INTERNAL_MANAGED
name: hc-test-0
network: network
no_automate_dns_zone: null
port_range: '80'
ports: null
project: my-project
recreate_closed_psc: false
region: europe-west4
service_label: null
source_ip_ranges: null
subnetwork: subnet
timeouts: null
google_compute_region_backend_service.default:
affinity_cookie_ttl_sec: null
backend:
- balancing_mode: UTILIZATION
capacity_scaler: 1
custom_metrics: []
description: Terraform managed.
failover: false
max_connections: null
max_connections_per_endpoint: null
max_connections_per_instance: null
max_rate: null
max_rate_per_endpoint: null
max_rate_per_instance: null
max_utilization: null
traffic_duration: ''
circuit_breakers: []
connection_draining_timeout_sec: 300
connection_tracking_policy: []
consistent_hash: []
custom_metrics: []
deletion_policy: DELETE
description: Terraform managed.
dynamic_forwarding: []
enable_cdn: null
failover_policy: []
ha_policy: []
health_checks: null
ip_address_selection_policy: null
load_balancing_scheme: INTERNAL_MANAGED
locality_lb_policy: null
name: hc-test-0
network: null
network_pass_through_lb_traffic_policy: []
outlier_detection: []
params: []
project: my-project
protocol: TCP
region: europe-west4
security_policy: null
session_affinity: NONE
strong_session_affinity_cookie: []
subsetting: []
timeouts: null
tls_settings: []
google_compute_region_network_endpoint_group.psc["my-psc"]:
app_engine: []
cloud_function: []
cloud_run: []
deletion_policy: DELETE
description: null
name: hc-test-0-my-psc
network_endpoint_type: PRIVATE_SERVICE_CONNECT
project: my-project
psc_data:
- producer_port: null
psc_target_service: projects/my-prod-project/regions/europe-west4/serviceAttachments/my-attachment
region: europe-west4
subnetwork: null
timeouts: null
google_compute_region_target_tcp_proxy.default:
deletion_policy: DELETE
description: Terraform managed.
name: hc-test-0
project: my-project
proxy_header: NONE
region: europe-west4
timeouts: null
terraform_data.neg_trigger:
input:
internet: {}
psc: {}
zonal: {}
triggers_replace: null
counts:
google_compute_forwarding_rule: 1
google_compute_region_backend_service: 1
google_compute_region_network_endpoint_group: 1
google_compute_region_target_tcp_proxy: 1
modules: 0
resources: 5
terraform_data: 1
outputs:
address: __missing__
backend_service: __missing__
backend_service_id: __missing__
backend_service_self_link: __missing__
forwarding_rules: __missing__
group_self_links: {}
groups: {}
health_check: null
health_check_id: null
health_check_self_link: null
ids: __missing__
neg_ids: {}
service_attachment_id: null

2
tests/modules/net_lb_proxy_int/tftest.yaml
View File

@@ -20,5 +20,7 @@ tests:
health-checks-http:
health-checks-http2:
health-checks-https:
health-checks-none:
health-checks-psc:
health-checks-ssl:
health-checks-tcp: