Skip to content

Commit c9f7d94

Browse files
alkobi-googlealkobi-google
committed
Fix all of the demo files to create every resource needed for the vpc flow logs.
1 parent 04a8fc1 commit c9f7d94

File tree

4 files changed

+220
-21
lines changed
  • network_management/vpcflowlogs

4 files changed

+220
-21
lines changed

‎network_management/vpcflowlogs/interconnect_attachment_basic/main.tf‎

Lines changed: 33 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,40 @@
1515
*/
1616

1717
# [START vpcflowlogs_interconnect_attachment_basic]
18-
resource "google_network_management_vpc_flow_logs_config" "vpc_fl_config" {
18+
resource "google_network_management_vpc_flow_logs_config" "vpc_flow_logs_config" {
1919
provider = google-beta
20-
interconnect_attachment = "projects/example_project/regions/us-central1/interconnectAttachments/example_interconnect"
20+
interconnect_attachment = "projects/${data.google_project.project.project_id}/regions/us-east4/interconnectAttachments/${google_compute_interconnect_attachment.attachment.name}"
2121
location = "global"
22-
project = "example_project"
23-
vpc_flow_logs_config_id = "example-config-id"
22+
project = data.google_project.project.project_id
23+
vpc_flow_logs_config_id = "vpcflowlogs-config"
24+
}
25+
26+
data "google_project" "project" {
27+
provider = google-beta
28+
}
29+
30+
#Create an Interconnect Attachment
31+
resource "google_compute_network" "network" {
32+
provider = google-beta
33+
name = "vpcflowlogs-network"
34+
}
35+
36+
resource "google_compute_router" "router" {
37+
provider = google-beta
38+
name = "vpcflowlogs-router"
39+
network = google_compute_network.network.name
40+
bgp {
41+
asn = 16550
42+
}
43+
}
44+
45+
resource "google_compute_interconnect_attachment" "attachment" {
46+
provider = google-beta
47+
name = "vpcflowlogs-attachment"
48+
project = data.google_project.project.project_id
49+
router = google_compute_router.router.id
50+
edge_availability_domain = "AVAILABILITY_DOMAIN_1"
51+
type = "PARTNER"
52+
mtu = 1500
2453
}
2554
# [END vpcflowlogs_interconnect_attachment_basic]

‎network_management/vpcflowlogs/interconnect_attachment_full/main.tf‎

Lines changed: 36 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,16 +15,46 @@
1515
*/
1616

1717
# [START vpcflowlogs_interconnect_attachment_full]
18-
resource "google_network_management_vpc_flow_logs_config" "vpc_fl_config" {
18+
resource "google_network_management_vpc_flow_logs_config" "vpc_flow_logs_config" {
19+
provider = google-beta
20+
interconnect_attachment = "projects/${data.google_project.project.project_id}/regions/us-east4/interconnectAttachments/${google_compute_interconnect_attachment.attachment.name}"
21+
location = "global"
22+
project = data.google_project.project.project_id
23+
vpc_flow_logs_config_id = "vpcflowlogs-config"
1924
aggregation_interval = "INTERVAL_10_MIN"
2025
description = "VPC Flow Logs over an Interconnect Attachment."
2126
flow_sampling = 0.7
22-
interconnect_attachment = "projects/example_project/regions/us-central1/interconnectAttachments/example_interconnect"
23-
location = "global"
2427
metadata = "INCLUDE_ALL_METADATA"
25-
project = "example_project"
26-
provider = google-beta
2728
state = "ENABLED"
28-
vpc_flow_logs_config_id = "example-config-id"
29+
30+
}
31+
32+
data "google_project" "project" {
33+
provider = google-beta
34+
}
35+
36+
#Create an Interconnect Attachment
37+
resource "google_compute_network" "network" {
38+
provider = google-beta
39+
name = "vpcflowlogs-network"
40+
}
41+
42+
resource "google_compute_router" "router" {
43+
provider = google-beta
44+
name = "vpcflowlogs-router"
45+
network = google_compute_network.network.name
46+
bgp {
47+
asn = 16550
48+
}
49+
}
50+
51+
resource "google_compute_interconnect_attachment" "attachment" {
52+
provider = google-beta
53+
name = "vpcflowlogs-attachment"
54+
project = data.google_project.project.project_id
55+
router = google_compute_router.router.id
56+
edge_availability_domain = "AVAILABILITY_DOMAIN_1"
57+
type = "PARTNER"
58+
mtu = 1500
2959
}
3060
# [END vpcflowlogs_interconnect_attachment_full]

‎network_management/vpcflowlogs/vpn_tunnel_basic/main.tf‎

Lines changed: 75 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,81 @@
1515
*/
1616

1717
# [START vpcflowlogs_vpn_tunnel_basic]
18-
resource "google_network_management_vpc_flow_logs_config" "vpc_fl_config" {
19-
location = "global"
20-
project = "example_project"
18+
resource "google_network_management_vpc_flow_logs_config" "vpc_flow_logs_config" {
2119
provider = google-beta
22-
vpc_flow_logs_config_id = "example-config-id"
23-
vpn_tunnel = "projects/example_project/regions/us-central1/vpnTunnels/example_vpn_tunnel"
20+
vpn_tunnel = "projects/${data.google_project.project.project_id}/regions/us-east4/vpnTunnels/${google_compute_vpn_tunnel.tunnel.name}"
21+
location = "global"
22+
project = data.google_project.project.project_id
23+
vpc_flow_logs_config_id = "vpcflowlogs-config"
24+
}
25+
26+
data "google_project" "project" {
27+
provider = google-beta
28+
}
29+
30+
# Create a VPN Tunnel
31+
resource "google_compute_vpn_tunnel" "tunnel" {
32+
provider = google-beta
33+
name = "vpcflowlogs-tunnel"
34+
peer_ip = "15.0.0.120"
35+
shared_secret = "a secret message"
36+
target_vpn_gateway = google_compute_vpn_gateway.gatway.id
37+
38+
depends_on = [
39+
google_compute_forwarding_rule.fr_esp,
40+
google_compute_forwarding_rule.fr_udp500,
41+
google_compute_forwarding_rule.fr_udp4500,
42+
]
43+
}
44+
45+
resource "google_compute_vpn_gateway" "gatway" {
46+
provider = google-beta
47+
name = "vpcflowlogs-gateway"
48+
network = google_compute_network.network.id
49+
}
50+
51+
resource "google_compute_network" "network" {
52+
provider = google-beta
53+
name = "vpcflowlogs-network"
54+
}
55+
56+
resource "google_compute_address" "vpn_static_ip" {
57+
provider = google-beta
58+
name = "vpcflowlogs-vpn-static-ip"
59+
}
60+
61+
resource "google_compute_forwarding_rule" "fr_esp" {
62+
provider = google-beta
63+
name = "vpcflowlogs-fr-esp"
64+
ip_protocol = "ESP"
65+
ip_address = google_compute_address.vpn_static_ip.address
66+
target = google_compute_vpn_gateway.gatway.id
67+
}
68+
69+
resource "google_compute_forwarding_rule" "fr_udp500" {
70+
provider = google-beta
71+
name = "vpcflowlogs-fr-udp500"
72+
ip_protocol = "UDP"
73+
port_range = "500"
74+
ip_address = google_compute_address.vpn_static_ip.address
75+
target = google_compute_vpn_gateway.gatway.id
76+
}
77+
78+
resource "google_compute_forwarding_rule" "fr_udp4500" {
79+
provider = google-beta
80+
name = "vpcflowlogs-fr-udp4500"
81+
ip_protocol = "UDP"
82+
port_range = "4500"
83+
ip_address = google_compute_address.vpn_static_ip.address
84+
target = google_compute_vpn_gateway.gatway.id
85+
}
86+
87+
resource "google_compute_route" "route" {
88+
provider = google-beta
89+
name = "vpcflowlogs-route"
90+
network = google_compute_network.network.name
91+
dest_range = "15.0.0.0/24"
92+
priority = 1000
93+
next_hop_vpn_tunnel = google_compute_vpn_tunnel.tunnel.id
2494
}
2595
# [END vpcflowlogs_vpn_tunnel_basic]

‎network_management/vpcflowlogs/vpn_tunnel_full/main.tf‎

Lines changed: 76 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,16 +15,86 @@
1515
*/
1616

1717
# [START vpcflowlogs_vpn_tunnel_full]
18-
resource "google_network_management_vpc_flow_logs_config" "vpc_fl_config" {
18+
resource "google_network_management_vpc_flow_logs_config" "vpc_flow_logs_config" {
19+
provider = google-beta
20+
vpn_tunnel = "projects/${data.google_project.project.project_id}/regions/us-east4/vpnTunnels/${google_compute_vpn_tunnel.tunnel.name}"
21+
location = "global"
22+
project = data.google_project.project.project_id
23+
vpc_flow_logs_config_id = "vpcflowlogs-config"
1924
aggregation_interval = "INTERVAL_10_MIN"
2025
description = "VPC Flow Logs over a VPN Gateway."
2126
flow_sampling = 0.7
22-
location = "global"
2327
metadata = "INCLUDE_ALL_METADATA"
24-
project = "example_project"
25-
provider = google-beta
2628
state = "ENABLED"
27-
vpc_flow_logs_config_id = "example-config-id"
28-
vpn_tunnel = "projects/example_project/regions/us-central1/vpnTunnels/example_vpn_tunnel"
29+
}
30+
31+
data "google_project" "project" {
32+
provider = google-beta
33+
}
34+
35+
# Create a VPN Tunnel
36+
resource "google_compute_vpn_tunnel" "tunnel" {
37+
provider = google-beta
38+
name = "vpcflowlogs-tunnel"
39+
peer_ip = "15.0.0.120"
40+
shared_secret = "a secret message"
41+
target_vpn_gateway = google_compute_vpn_gateway.gatway.id
42+
43+
depends_on = [
44+
google_compute_forwarding_rule.fr_esp,
45+
google_compute_forwarding_rule.fr_udp500,
46+
google_compute_forwarding_rule.fr_udp4500,
47+
]
48+
}
49+
50+
resource "google_compute_vpn_gateway" "gatway" {
51+
provider = google-beta
52+
name = "vpcflowlogs-gateway"
53+
network = google_compute_network.network.id
54+
}
55+
56+
resource "google_compute_network" "network" {
57+
provider = google-beta
58+
name = "vpcflowlogs-network"
59+
}
60+
61+
resource "google_compute_address" "vpn_static_ip" {
62+
provider = google-beta
63+
name = "vpcflowlogs-vpn-static-ip"
64+
}
65+
66+
resource "google_compute_forwarding_rule" "fr_esp" {
67+
provider = google-beta
68+
name = "vpcflowlogs-fr-esp"
69+
ip_protocol = "ESP"
70+
ip_address = google_compute_address.vpn_static_ip.address
71+
target = google_compute_vpn_gateway.gatway.id
72+
}
73+
74+
resource "google_compute_forwarding_rule" "fr_udp500" {
75+
provider = google-beta
76+
name = "vpcflowlogs-fr-udp500"
77+
ip_protocol = "UDP"
78+
port_range = "500"
79+
ip_address = google_compute_address.vpn_static_ip.address
80+
target = google_compute_vpn_gateway.gatway.id
81+
}
82+
83+
resource "google_compute_forwarding_rule" "fr_udp4500" {
84+
provider = google-beta
85+
name = "vpcflowlogs-fr-udp4500"
86+
ip_protocol = "UDP"
87+
port_range = "4500"
88+
ip_address = google_compute_address.vpn_static_ip.address
89+
target = google_compute_vpn_gateway.gatway.id
90+
}
91+
92+
resource "google_compute_route" "route" {
93+
provider = google-beta
94+
name = "vpcflowlogs-route"
95+
network = google_compute_network.network.name
96+
dest_range = "15.0.0.0/24"
97+
priority = 1000
98+
next_hop_vpn_tunnel = google_compute_vpn_tunnel.tunnel.id
2999
}
30100
# [END vpcflowlogs_vpn_tunnel_full]

0 commit comments

Comments
 (0)