Add httpFilterConfigs and httpFilterMetadata fields to route rules in URL maps. (#14097) (#23071)

[upstream:10a629e9b64c1090b18c9cb5a21eba0acb1db168]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/14097.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+compute: added `httpFilterConfigs` and `httpFilterMetadata` fields to `pathMatchers[].routeRules[]` in `google_compute_url_map` resource (beta)
+```

website/docs/r/compute_url_map.html.markdown

@@ -1081,6 +1081,215 @@ resource "google_storage_bucket" "error" {
   location    = "US"
 }
 ```
+<div class = "oics-button" style="float: right; margin: 0 0 -15px">
+  <a href="https://console.cloud.google.com/cloudshell/open?cloudshell_git_repo=https%3A%2F%2Fgithub.com%2Fterraform-google-modules%2Fdocs-examples.git&cloudshell_image=gcr.io%2Fcloudshell-images%2Fcloudshell%3Alatest&cloudshell_print=.%2Fmotd&cloudshell_tutorial=.%2Ftutorial.md&cloudshell_working_dir=url_map_http_filter_configs&open_in_editor=main.tf" target="_blank">
+    <img alt="Open in Cloud Shell" src="//gstatic.com/cloudssh/images/open-btn.svg" style="max-height: 44px; margin: 32px auto; max-width: 100%;">
+  </a>
+</div>
+## Example Usage - Url Map Http Filter Configs
+
+
+```hcl
+resource "google_compute_url_map" "urlmap" {
+  provider    = google-beta
+  name        = "urlmap"
+  description = "Test for httpFilterConfigs in route rules"
+  default_service = google_compute_backend_service.default.id
+
+  host_rule {
+    hosts        = ["mysite.com"]
+    path_matcher = "allpaths"
+  }
+
+  path_matcher {
+    name = "allpaths"
+    default_service = google_compute_backend_service.default.id
+
+    route_rules {
+      priority = 1
+      service = google_compute_backend_service.service-a.id
+      match_rules {
+        prefix_match = "/"
+        ignore_case = true
+      }
+      http_filter_configs {
+        filter_name = "envoy.wasm"
+        config_type_url = "type.googleapis.com/google.protobuf.Struct"
+        config = jsonencode({
+          name = "my-filter"
+          root_id = "my_root_id"
+          vm_config = {
+            vm_id = "my_vm_id"
+            runtime = "envoy.wasm.runtime.v8"
+            code = {
+              local = {
+                inline_string = "const WASM_BINARY = '...'"
+              }
+            }
+          }
+        })
+      }
+    }
+  }
+
+  test {
+    service = google_compute_backend_service.default.id
+    host    = "mysite.com"
+    path    = "/"
+  }
+}
+
+resource "google_compute_backend_service" "default" {
+  provider    = google-beta
+  name        = "default-backend"
+  port_name   = "http"
+  protocol    = "HTTP"
+  timeout_sec = 10
+  load_balancing_scheme = "INTERNAL_SELF_MANAGED"
+
+  health_checks = [google_compute_health_check.default.id]
+}
+
+resource "google_compute_backend_service" "service-a" {
+  provider    = google-beta
+  name        = "service-a-backend"
+  port_name   = "http"
+  protocol    = "HTTP"
+  timeout_sec = 10
+  load_balancing_scheme = "INTERNAL_SELF_MANAGED"
+
+  health_checks = [google_compute_health_check.default.id]
+}
+
+resource "google_compute_health_check" "default" {
+  provider = google-beta
+  name               = "health-check"
+  http_health_check {
+    port = 80
+  }
+} 
+```
+<div class = "oics-button" style="float: right; margin: 0 0 -15px">
+  <a href="https://console.cloud.google.com/cloudshell/open?cloudshell_git_repo=https%3A%2F%2Fgithub.com%2Fterraform-google-modules%2Fdocs-examples.git&cloudshell_image=gcr.io%2Fcloudshell-images%2Fcloudshell%3Alatest&cloudshell_print=.%2Fmotd&cloudshell_tutorial=.%2Ftutorial.md&cloudshell_working_dir=url_map_http_filter_metadata&open_in_editor=main.tf" target="_blank">
+    <img alt="Open in Cloud Shell" src="//gstatic.com/cloudssh/images/open-btn.svg" style="max-height: 44px; margin: 32px auto; max-width: 100%;">
+  </a>
+</div>
+## Example Usage - Url Map Http Filter Metadata
+
+
+```hcl
+resource "google_compute_url_map" "urlmap" {
+  provider    = google-beta
+  name        = "urlmap"
+  description = "Test for httpFilterMetadata in route rules"
+  default_service = google_compute_backend_service.default.id
+
+  host_rule {
+    hosts        = ["mysite.com"]
+    path_matcher = "allpaths"
+  }
+
+  path_matcher {
+    name = "allpaths"
+    default_service = google_compute_backend_service.default.id
+
+    route_rules {
+      priority = 1
+      service = google_compute_backend_service.service-a.id
+      match_rules {
+        prefix_match = "/"
+        ignore_case = true
+      }
+      http_filter_metadata {
+        filter_name = "envoy.wasm"
+        config_type_url = "type.googleapis.com/google.protobuf.Struct"
+        config = jsonencode({
+          fields = {
+            timeout = {
+              string_value = "30s"
+            }
+            retries = {
+              number_value = 3
+            }
+            debug = {
+              bool_value = true
+            }
+          }
+        })
+      }
+    }
+    route_rules {
+      priority = 2
+      service = google_compute_backend_service.service-b.id
+      match_rules {
+        prefix_match = "/api"
+        ignore_case = true
+      }
+      http_filter_metadata {
+        filter_name = "envoy.rate_limit"
+        config_type_url = "type.googleapis.com/google.protobuf.Struct"
+        config = jsonencode({
+          fields = {
+            requests_per_unit = {
+              number_value = 100
+            }
+            unit = {
+              string_value = "MINUTE"
+            }
+          }
+        })
+      }
+    }
+  }
+
+  test {
+    service = google_compute_backend_service.default.id
+    host    = "mysite.com"
+    path    = "/"
+  }
+}
+
+resource "google_compute_backend_service" "default" {
+  provider    = google-beta
+  name        = "default-backend"
+  port_name   = "http"
+  protocol    = "HTTP"
+  timeout_sec = 10
+  load_balancing_scheme = "INTERNAL_SELF_MANAGED"
+
+  health_checks = [google_compute_health_check.default.id]
+}
+
+resource "google_compute_backend_service" "service-a" {
+  provider    = google-beta
+  name        = "service-a-backend"
+  port_name   = "http"
+  protocol    = "HTTP"
+  timeout_sec = 10
+  load_balancing_scheme = "INTERNAL_SELF_MANAGED"
+
+  health_checks = [google_compute_health_check.default.id]
+}
+
+resource "google_compute_backend_service" "service-b" {
+  provider    = google-beta
+  name        = "service-b-backend"
+  port_name   = "http"
+  protocol    = "HTTP"
+  timeout_sec = 10
+  load_balancing_scheme = "INTERNAL_SELF_MANAGED"
+
+  health_checks = [google_compute_health_check.default.id]
+}
+
+resource "google_compute_health_check" "default" {
+  provider = google-beta
+  name               = "health-check"
+  http_health_check {
+    port = 80
+  }
+} 
+```
 
 ## Argument Reference
 
@@ -1950,6 +2159,22 @@ The following arguments are supported:
   customErrorResponsePolicy specifies how the Load Balancer returns error responses when BackendService or BackendBucket responds with an error.
   Structure is [documented below](#nested_path_matcher_path_matcher_route_rules_route_rules_custom_error_response_policy).
 
+* `http_filter_configs` -
+  (Optional, [Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html))
+  Outbound route specific configuration for networkservices.HttpFilter resources enabled by Traffic Director.
+  httpFilterConfigs only applies for load balancers with loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+  See ForwardingRule for more details.
+  Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
+  Structure is [documented below](#nested_path_matcher_path_matcher_route_rules_route_rules_http_filter_configs).
+
+* `http_filter_metadata` -
+  (Optional, [Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html))
+  Outbound route specific metadata supplied to networkservices.HttpFilter resources enabled by Traffic Director.
+  httpFilterMetadata only applies for load balancers with loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+  See ForwardingRule for more details.
+  Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
+  Structure is [documented below](#nested_path_matcher_path_matcher_route_rules_route_rules_http_filter_metadata).
+
 
 <a name="nested_path_matcher_path_matcher_route_rules_route_rules_header_action"></a>The `header_action` block supports:
 
@@ -2645,6 +2870,40 @@ The following arguments are supported:
   The HTTP status code returned with the response containing the custom error content.
   If overrideResponseCode is not supplied, the same response code returned by the original backend bucket or backend service is returned to the client.
 
+<a name="nested_path_matcher_path_matcher_route_rules_route_rules_http_filter_configs"></a>The `http_filter_configs` block supports:
+
+* `filter_name` -
+  (Optional)
+  Name of the networkservices.HttpFilter resource this configuration belongs to.
+  This name must be known to the xDS client. Example: envoy.wasm
+
+* `config_type_url` -
+  (Optional)
+  The fully qualified versioned proto3 type url of the protobuf that the filter expects for its contextual settings,
+  for example: type.googleapis.com/google.protobuf.Struct
+
+* `config` -
+  (Optional)
+  The configuration needed to enable the networkservices.HttpFilter resource.
+  The configuration must be YAML formatted and only contain fields defined in the protobuf identified in configTypeUrl
+
+<a name="nested_path_matcher_path_matcher_route_rules_route_rules_http_filter_metadata"></a>The `http_filter_metadata` block supports:
+
+* `filter_name` -
+  (Optional)
+  Name of the networkservices.HttpFilter resource this configuration belongs to.
+  This name must be known to the xDS client. Example: envoy.wasm
+
+* `config_type_url` -
+  (Optional)
+  The fully qualified versioned proto3 type url of the protobuf that the filter expects for its contextual settings,
+  for example: type.googleapis.com/google.protobuf.Struct
+
+* `config` -
+  (Optional)
+  The configuration needed to enable the networkservices.HttpFilter resource.
+  The configuration must be YAML formatted and only contain fields defined in the protobuf identified in configTypeUrl
+
 <a name="nested_path_matcher_path_matcher_default_url_redirect"></a>The `default_url_redirect` block supports:
 
 * `host_redirect` -