google_compute_security_policy.md

google_compute_security_policy

back

Index

• Example Usage
• Variables
• Resource
• Outputs

Terraform

terraform {
  required_providers {
    google-beta = ">= 3.63.0"
  }
}

top

Example Usage

module "google_compute_security_policy" {
  source = "./modules/google-beta/r/google_compute_security_policy"

  # description - (optional) is a type of string
  description = null
  # name - (required) is a type of string
  name = null
  # project - (optional) is a type of string
  project = null

  rule = [{
    action      = null
    description = null
    match = [{
      config = [{
        src_ip_ranges = []
      }]
      expr = [{
        expression = null
      }]
      versioned_expr = null
    }]
    preview  = null
    priority = null
  }]

  timeouts = [{
    create = null
    delete = null
    update = null
  }]
}

top

Variables

variable "description" {
  description = "(optional) - An optional description of this security policy. Max size is 2048."
  type        = string
  default     = null
}

variable "name" {
  description = "(required) - The name of the security policy."
  type        = string
}

variable "project" {
  description = "(optional) - The project in which the resource belongs. If it is not provided, the provider project is used."
  type        = string
  default     = null
}

variable "rule" {
  description = "nested block: NestingSet, min items: 0, max items: 0"
  type = set(object(
    {
      action      = string
      description = string
      match = list(object(
        {
          config = list(object(
            {
              src_ip_ranges = set(string)
            }
          ))
          expr = list(object(
            {
              expression = string
            }
          ))
          versioned_expr = string
        }
      ))
      preview  = bool
      priority = number
    }
  ))
  default = []
}

variable "timeouts" {
  description = "nested block: NestingSingle, min items: 0, max items: 0"
  type = set(object(
    {
      create = string
      delete = string
      update = string
    }
  ))
  default = []
}

top

Resource

resource "google_compute_security_policy" "this" {
  # description - (optional) is a type of string
  description = var.description
  # name - (required) is a type of string
  name = var.name
  # project - (optional) is a type of string
  project = var.project

  dynamic "rule" {
    for_each = var.rule
    content {
      # action - (required) is a type of string
      action = rule.value["action"]
      # description - (optional) is a type of string
      description = rule.value["description"]
      # preview - (optional) is a type of bool
      preview = rule.value["preview"]
      # priority - (required) is a type of number
      priority = rule.value["priority"]

      dynamic "match" {
        for_each = rule.value.match
        content {
          # versioned_expr - (optional) is a type of string
          versioned_expr = match.value["versioned_expr"]

          dynamic "config" {
            for_each = match.value.config
            content {
              # src_ip_ranges - (required) is a type of set of string
              src_ip_ranges = config.value["src_ip_ranges"]
            }
          }

          dynamic "expr" {
            for_each = match.value.expr
            content {
              # expression - (required) is a type of string
              expression = expr.value["expression"]
            }
          }

        }
      }

    }
  }

  dynamic "timeouts" {
    for_each = var.timeouts
    content {
      # create - (optional) is a type of string
      create = timeouts.value["create"]
      # delete - (optional) is a type of string
      delete = timeouts.value["delete"]
      # update - (optional) is a type of string
      update = timeouts.value["update"]
    }
  }

}

top

Outputs

output "fingerprint" {
  description = "returns a string"
  value       = google_compute_security_policy.this.fingerprint
}

output "id" {
  description = "returns a string"
  value       = google_compute_security_policy.this.id
}

output "project" {
  description = "returns a string"
  value       = google_compute_security_policy.this.project
}

output "self_link" {
  description = "returns a string"
  value       = google_compute_security_policy.this.self_link
}

output "this" {
  value = google_compute_security_policy.this
}

top