Add SPA fields to beyondcorp_security_gateway_application (#15233) (#1125)

[upstream:e65793c98130935137c75aa4dd1c9b9aa8bbd521]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

beyondcorp_security_gateway_application_spa_api/backing_file.tf

@@ -0,0 +1,15 @@
+# This file has some scaffolding to make sure that names are unique and that
+# a region and zone are selected when you try to create your Terraform resources.
+
+locals {
+  name_suffix = "${random_pet.suffix.id}"
+}
+
+resource "random_pet" "suffix" {
+  length = 2
+}
+
+provider "google" {
+  region = "us-central1"
+  zone   = "us-central1-c"
+}

beyondcorp_security_gateway_application_spa_api/main.tf

@@ -0,0 +1,21 @@
+resource "google_beyondcorp_security_gateway" "default" {
+  security_gateway_id = "default-sg-spa-api-${local.name_suffix}"
+  display_name = "My SPA Security Gateway resource"
+}
+
+resource "google_beyondcorp_security_gateway_application" "example-spa" {
+  security_gateway_id = google_beyondcorp_security_gateway.default.security_gateway_id
+  application_id = "app-discovery-${local.name_suffix}"
+  upstreams {
+    external {
+      endpoints {
+        hostname = "my.discovery.service.com"
+        port = 443
+      }
+    }
+    proxy_protocol {
+      allowed_client_headers= ["header"]
+    }
+  }
+  schema = "API_GATEWAY"
+}

beyondcorp_security_gateway_application_spa_api/motd

@@ -0,0 +1,7 @@
+===
+
+These examples use real resources that will be billed to the
+Google Cloud Platform project you use - so make sure that you
+run "terraform destroy" before quitting!
+
+===

beyondcorp_security_gateway_application_spa_api/tutorial.md

@@ -0,0 +1,79 @@
+# Beyondcorp Security Gateway Application Spa Api - Terraform
+
+## Setup
+
+<walkthrough-author name="[email protected]" analyticsId="UA-125550242-1" tutorialName="beyondcorp_security_gateway_application_spa_api" repositoryUrl="https://github.com/terraform-google-modules/docs-examples"></walkthrough-author>
+
+Welcome to Terraform in Google Cloud Shell! We need you to let us know what project you'd like to use with Terraform.
+
+<walkthrough-project-billing-setup></walkthrough-project-billing-setup>
+
+Terraform provisions real GCP resources, so anything you create in this session will be billed against this project.
+
+## Terraforming!
+
+Let's use {{project-id}} with Terraform! Click the Cloud Shell icon below to copy the command
+to your shell, and then run it from the shell by pressing Enter/Return. Terraform will pick up
+the project name from the environment variable.
+
+```bash
+export GOOGLE_CLOUD_PROJECT={{project-id}}
+```
+
+After that, let's get Terraform started. Run the following to pull in the providers.
+
+```bash
+terraform init
+```
+
+With the providers downloaded and a project set, you're ready to use Terraform. Go ahead!
+
+```bash
+terraform apply
+```
+
+Terraform will show you what it plans to do, and prompt you to accept. Type "yes" to accept the plan.
+
+```bash
+yes
+```
+
+
+## Post-Apply
+
+### Editing your config
+
+Now you've provisioned your resources in GCP! If you run a "plan", you should see no changes needed.
+
+```bash
+terraform plan
+```
+
+So let's make a change! Try editing a number, or appending a value to the name in the editor. Then,
+run a 'plan' again.
+
+```bash
+terraform plan
+```
+
+Afterwards you can run an apply, which implicitly does a plan and shows you the intended changes
+at the 'yes' prompt.
+
+```bash
+terraform apply
+```
+
+```bash
+yes
+```
+
+## Cleanup
+
+Run the following to remove the resources Terraform provisioned:
+
+```bash
+terraform destroy
+```
+```bash
+yes
+```

beyondcorp_security_gateway_application_spa_proxy/backing_file.tf

@@ -0,0 +1,15 @@
+# This file has some scaffolding to make sure that names are unique and that
+# a region and zone are selected when you try to create your Terraform resources.
+
+locals {
+  name_suffix = "${random_pet.suffix.id}"
+}
+
+resource "random_pet" "suffix" {
+  length = 2
+}
+
+provider "google" {
+  region = "us-central1"
+  zone   = "us-central1-c"
+}

beyondcorp_security_gateway_application_spa_proxy/main.tf

@@ -0,0 +1,43 @@
+resource "google_beyondcorp_security_gateway" "default" {
+  security_gateway_id = "default-sg-spa-proxy-${local.name_suffix}"
+  display_name = "My SPA Security Gateway resource"
+}
+
+resource "google_beyondcorp_security_gateway_application" "example-spa" {
+  security_gateway_id = google_beyondcorp_security_gateway.default.security_gateway_id
+  application_id = "app-proxy-${local.name_suffix}"
+  endpoint_matchers {
+    hostname = "a.site.com"
+    ports = [443]
+  }
+  upstreams {
+    external {
+      endpoints {
+        hostname = "my.proxy.service.com"
+        port = 443
+      }
+    }
+    proxy_protocol {
+      allowed_client_headers = ["header1", "header2"]
+      contextual_headers {
+        user_info {
+          output_type = "PROTOBUF"
+        }
+        group_info {
+          output_type = "JSON"
+        }
+        device_info {
+          output_type = "NONE"
+        }
+        output_type = "JSON"
+      }
+      metadata_headers = {
+        metadata-header1 = "value1"
+        metadata-header2 = "value2"
+      }
+      gateway_identity = "RESOURCE_NAME"
+      client_ip = true
+    }
+  }
+  schema = "PROXY_GATEWAY"
+}

beyondcorp_security_gateway_application_spa_proxy/motd

@@ -0,0 +1,7 @@
+===
+
+These examples use real resources that will be billed to the
+Google Cloud Platform project you use - so make sure that you
+run "terraform destroy" before quitting!
+
+===

beyondcorp_security_gateway_application_spa_proxy/tutorial.md

@@ -0,0 +1,79 @@
+# Beyondcorp Security Gateway Application Spa Proxy - Terraform
+
+## Setup
+
+<walkthrough-author name="[email protected]" analyticsId="UA-125550242-1" tutorialName="beyondcorp_security_gateway_application_spa_proxy" repositoryUrl="https://github.com/terraform-google-modules/docs-examples"></walkthrough-author>
+
+Welcome to Terraform in Google Cloud Shell! We need you to let us know what project you'd like to use with Terraform.
+
+<walkthrough-project-billing-setup></walkthrough-project-billing-setup>
+
+Terraform provisions real GCP resources, so anything you create in this session will be billed against this project.
+
+## Terraforming!
+
+Let's use {{project-id}} with Terraform! Click the Cloud Shell icon below to copy the command
+to your shell, and then run it from the shell by pressing Enter/Return. Terraform will pick up
+the project name from the environment variable.
+
+```bash
+export GOOGLE_CLOUD_PROJECT={{project-id}}
+```
+
+After that, let's get Terraform started. Run the following to pull in the providers.
+
+```bash
+terraform init
+```
+
+With the providers downloaded and a project set, you're ready to use Terraform. Go ahead!
+
+```bash
+terraform apply
+```
+
+Terraform will show you what it plans to do, and prompt you to accept. Type "yes" to accept the plan.
+
+```bash
+yes
+```
+
+
+## Post-Apply
+
+### Editing your config
+
+Now you've provisioned your resources in GCP! If you run a "plan", you should see no changes needed.
+
+```bash
+terraform plan
+```
+
+So let's make a change! Try editing a number, or appending a value to the name in the editor. Then,
+run a 'plan' again.
+
+```bash
+terraform plan
+```
+
+Afterwards you can run an apply, which implicitly does a plan and shows you the intended changes
+at the 'yes' prompt.
+
+```bash
+terraform apply
+```
+
+```bash
+yes
+```
+
+## Cleanup
+
+Run the following to remove the resources Terraform provisioned:
+
+```bash
+terraform destroy
+```
+```bash
+yes
+```