feat(networksecurity): Add examples for creating consumer and producer mirroring

.github/CODEOWNERS

@@ -1,25 +1,26 @@
 # Overall sample owners
 
-*                       @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers
-/*                      @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers @terraform-google-modules/cloud-samples-infra
-/.github/               @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cloud-samples-infra
-/test/                  @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
-/build/                 @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
+*                             @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers
+/*                            @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers @terraform-google-modules/cloud-samples-infra
+/.github/                     @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cloud-samples-infra
+/test/                        @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
+/build/                       @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
 
-/bigquery/              @terraform-google-modules/bigquery-terraform-swe @terraform-google-modules/terraform-samples-reviewers
-/cloud_sql/             @terraform-google-modules/terraform-samples-reviewers
-/cloudvpn/              @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/composer/              @terraform-google-modules/cloud-dpes-composer @terraform-google-modules/terraform-samples-reviewers
-/compute/               @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/dns/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/gke/                   @terraform-google-modules/eks-team @terraform-google-modules/terraform-samples-reviewers
-/lb/                    @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/looker/		@terraform-google-modules/cloud-looker-docs @terraform-google-modules/terraform-samples-reviewers
-/media_cdn/             @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/network_connectivity/  @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/privateca/             @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/storage/               @terraform-google-modules/cloud-storage-dpe @terraform-google-modules/terraform-samples-reviewers
-/traffic_director/      @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/vpc/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/managedkafka/          @terraform-google-modules/managedkafka-dev-team @terraform-google-modules/terraform-samples-reviewers
-/backupdr/              @terraform-google-modules/gcbdr-samples-team @terraform-google-modules/terraform-samples-reviewers
+/bigquery/                    @terraform-google-modules/bigquery-terraform-swe @terraform-google-modules/terraform-samples-reviewers
+/cloud_sql/                   @terraform-google-modules/terraform-samples-reviewers
+/cloudvpn/                    @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/composer/                    @terraform-google-modules/cloud-dpes-composer @terraform-google-modules/terraform-samples-reviewers
+/compute/                     @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/dns/                         @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/gke/                         @terraform-google-modules/eks-team @terraform-google-modules/terraform-samples-reviewers
+/lb/                          @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/looker/		              @terraform-google-modules/cloud-looker-docs @terraform-google-modules/terraform-samples-reviewers
+/media_cdn/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/network_connectivity/        @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/network_security/mirroring/  @terraform-google-modules/pm2-team @terraform-google-modules/terraform-samples-reviewers
+/privateca/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/storage/                     @terraform-google-modules/cloud-storage-dpe @terraform-google-modules/terraform-samples-reviewers
+/traffic_director/            @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/vpc/                         @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/managedkafka/                @terraform-google-modules/managedkafka-dev-team @terraform-google-modules/terraform-samples-reviewers
+/backupdr/                    @terraform-google-modules/gcbdr-samples-team @terraform-google-modules/terraform-samples-reviewers

network_security/mirroring/basic/consumer/main.tf

@@ -0,0 +1,51 @@
+/**
+* Copyright 2025 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+# [START networksecurity_mirroring_basic_consumer]
+resource "google_compute_network" "producer_network" {
+  provider                = google-beta
+  name                    = "producer-network"
+  auto_create_subnetworks = false
+}
+
+resource "google_compute_network" "consumer_network" {
+  provider                = google-beta
+  name                    = "consumer-network"
+  auto_create_subnetworks = false
+}
+
+resource "google_network_security_mirroring_deployment_group" "deployment_group" {
+  provider                      = google-beta
+  mirroring_deployment_group_id = "mirroring-deployment-group"
+  location                      = "global"
+  network                       = google_compute_network.producer_network.id
+}
+
+resource "google_network_security_mirroring_endpoint_group" "endpoint_group" {
+  provider                    = google-beta
+  mirroring_endpoint_group_id = "mirroring-endpoint-group"
+  location                    = "global"
+  mirroring_deployment_group  = google_network_security_mirroring_deployment_group.deployment_group.id
+}
+
+resource "google_network_security_mirroring_endpoint_group_association" "endpoint_group_association" {
+  provider                                = google-beta
+  mirroring_endpoint_group_association_id = "mirroring-endpoint-group-association"
+  location                                = "global"
+  network                                 = google_compute_network.consumer_network.id
+  mirroring_endpoint_group                = google_network_security_mirroring_endpoint_group.endpoint_group.id
+}
+# [END networksecurity_mirroring_basic_consumer]

network_security/mirroring/basic/producer/main.tf

@@ -0,0 +1,77 @@
+/**
+* Copyright 2025 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+# [START networksecurity_mirroring_basic_producer]
+resource "google_compute_network" "network" {
+  provider                = google-beta
+  name                    = "producer-network"
+  auto_create_subnetworks = false
+}
+
+resource "google_compute_subnetwork" "subnetwork" {
+  provider      = google-beta
+  name          = "producer-subnet"
+  region        = "us-central1"
+  ip_cidr_range = "10.1.0.0/16"
+  network       = google_compute_network.network.name
+}
+
+resource "google_compute_region_health_check" "health_check" {
+  provider = google-beta
+  name     = "deploymnet-hc"
+  region   = "us-central1"
+  http_health_check {
+    port = 80
+  }
+}
+
+resource "google_compute_region_backend_service" "backend_service" {
+  provider              = google-beta
+  name                  = "deployment-svc"
+  region                = "us-central1"
+  health_checks         = [google_compute_region_health_check.health_check.id]
+  protocol              = "UDP"
+  load_balancing_scheme = "INTERNAL"
+}
+
+resource "google_compute_forwarding_rule" "forwarding_rule" {
+  provider               = google-beta
+  name                   = "deployment-fr"
+  region                 = "us-central1"
+  network                = google_compute_network.network.name
+  subnetwork             = google_compute_subnetwork.subnetwork.name
+  backend_service        = google_compute_region_backend_service.backend_service.id
+  load_balancing_scheme  = "INTERNAL"
+  ports                  = [6081]
+  ip_protocol            = "UDP"
+  is_mirroring_collector = true
+}
+
+resource "google_network_security_mirroring_deployment_group" "deployment_group" {
+  provider                      = google-beta
+  mirroring_deployment_group_id = "mirroring-deployment-group"
+  location                      = "global"
+  network                       = google_compute_network.network.id
+}
+
+resource "google_network_security_mirroring_deployment" "deployment" {
+  provider                   = google-beta
+  mirroring_deployment_id    = "mirroring-deployment"
+  location                   = "us-central1-a"
+  forwarding_rule            = google_compute_forwarding_rule.forwarding_rule.id
+  mirroring_deployment_group = google_network_security_mirroring_deployment_group.deployment_group.id
+}
+# [END networksecurity_mirroring_basic_producer]

test/setup/main.tf

@@ -64,6 +64,7 @@ module "projects" {
     "looker.googleapis.com",
     "networkconnectivity.googleapis.com",
     "networkmanagement.googleapis.com",
+    "networksecurity.googleapis.com",
     "notebooks.googleapis.com",
     "privateca.googleapis.com",
     "pubsub.googleapis.com",