85b0871085
* feat(fast/0-org-setup): integrate net-vpc-factory into stage 0 * initial starter dataset * starter pack * fix(fast/0-org-setup): correct factory vpcs paths definition and update test inventory * feat(fast/0-org-setup): add VPC and subnet outputs and update stage tfvars * test(fast/0-org-setup): update gcd starter defaults and regenerate inventory * fix(modules/net-vpc-factory): remove internal defaults logic and pass context correctly * fix typo in dataset fw rule, add missing boilerplate, set sane defaults for net vpc factory * terraform fmt * tfdoc, copyright year * schema docs * yamllint
122 lines
3.7 KiB
YAML
122 lines
3.7 KiB
YAML
# Copyright 2024 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
values:
|
|
module.net-vpc-factory.module.firewall["data-vpc-0"].google_compute_firewall.custom-rules["allow-iap"]:
|
|
allow:
|
|
- ports:
|
|
- '22'
|
|
protocol: tcp
|
|
deny: []
|
|
description: Allow IAP for SSH
|
|
direction: INGRESS
|
|
disabled: false
|
|
log_config: []
|
|
name: allow-iap
|
|
network: data-vpc-0
|
|
params: []
|
|
priority: 1000
|
|
project: my-host-project-id
|
|
source_ranges:
|
|
- 35.235.240.0/20
|
|
source_service_accounts: null
|
|
source_tags: null
|
|
target_service_accounts: null
|
|
target_tags:
|
|
- ssh
|
|
timeouts: null
|
|
module.net-vpc-factory.module.vpcs["data-vpc-0"].google_compute_network.network[0]:
|
|
auto_create_subnetworks: false
|
|
delete_bgp_always_compare_med: false
|
|
delete_default_routes_on_create: true
|
|
description: Terraform managed
|
|
enable_ula_internal_ipv6: null
|
|
mtu: 1500
|
|
name: data-vpc-0
|
|
network_firewall_policy_enforcement_order: AFTER_CLASSIC_FIREWALL
|
|
network_profile: null
|
|
params: []
|
|
project: my-host-project-id
|
|
routing_mode: GLOBAL
|
|
timeouts: null
|
|
module.net-vpc-factory.module.vpcs["data-vpc-0"].google_compute_route.gateway["directpath-googleapis"]:
|
|
description: Terraform-managed.
|
|
dest_range: 34.126.0.0/18
|
|
name: data-vpc-0-directpath-googleapis
|
|
network: data-vpc-0
|
|
next_hop_gateway: default-internet-gateway
|
|
next_hop_ilb: null
|
|
next_hop_instance: null
|
|
next_hop_vpn_tunnel: null
|
|
params: []
|
|
priority: 1000
|
|
project: my-host-project-id
|
|
tags: null
|
|
timeouts: null
|
|
module.net-vpc-factory.module.vpcs["data-vpc-0"].google_compute_route.gateway["private-googleapis"]:
|
|
description: Terraform-managed.
|
|
dest_range: 199.36.153.8/30
|
|
name: data-vpc-0-private-googleapis
|
|
network: data-vpc-0
|
|
next_hop_gateway: default-internet-gateway
|
|
next_hop_ilb: null
|
|
next_hop_instance: null
|
|
next_hop_vpn_tunnel: null
|
|
params: []
|
|
priority: 1000
|
|
project: my-host-project-id
|
|
tags: null
|
|
timeouts: null
|
|
module.net-vpc-factory.module.vpcs["data-vpc-0"].google_compute_route.gateway["restricted-googleapis"]:
|
|
description: Terraform-managed.
|
|
dest_range: 199.36.153.4/30
|
|
name: data-vpc-0-restricted-googleapis
|
|
network: data-vpc-0
|
|
next_hop_gateway: default-internet-gateway
|
|
next_hop_ilb: null
|
|
next_hop_instance: null
|
|
next_hop_vpn_tunnel: null
|
|
params: []
|
|
priority: 1000
|
|
project: my-host-project-id
|
|
tags: null
|
|
timeouts: null
|
|
module.net-vpc-factory.module.vpcs["data-vpc-0"].google_compute_subnetwork.subnetwork["europe-west1/primary-subnet"]:
|
|
description: Primary subnet for data-vpc-0
|
|
ip_cidr_range: 10.10.0.0/24
|
|
ip_collection: null
|
|
ipv6_access_type: null
|
|
log_config: []
|
|
name: primary-subnet
|
|
network: data-vpc-0
|
|
params: []
|
|
private_ip_google_access: true
|
|
project: my-host-project-id
|
|
region: europe-west1
|
|
reserved_internal_range: null
|
|
resolve_subnet_mask: null
|
|
role: null
|
|
send_secondary_ip_range_if_empty: true
|
|
timeouts: null
|
|
|
|
counts:
|
|
google_compute_firewall: 1
|
|
google_compute_network: 1
|
|
google_compute_route: 3
|
|
google_compute_subnetwork: 1
|
|
modules: 3
|
|
resources: 6
|
|
|
|
outputs: {}
|