enable logging by deafult

Author: umairidris

nat.tf

@@ -34,6 +34,11 @@ resource "google_compute_router_nat" "nats" {
   tcp_established_idle_timeout_sec = lookup(each.value, "tcp_established_idle_timeout_sec", 1200)
   tcp_transitory_idle_timeout_sec  = lookup(each.value, "tcp_transitory_idle_timeout_sec", 30)
 
+  log_config {
+    enable = true
+    filter = lookup(lookup(each.value, "log_config", {}), "filter", "ALL")
+  }
+
   dynamic "subnetwork" {
     for_each = lookup(each.value, "subnetworks", [])
     content {

variables.tf

@@ -60,6 +60,8 @@ variable "bgp" {
 # - icmp_idle_timeout_sec (number, optional): Timeout (in seconds) for ICMP connections. Defaults to 30s if not set.
 # - tcp_established_idle_timeout_sec (number, optional): Timeout (in seconds) for TCP established connections. Defaults to 1200s if not set.
 # - tcp_transitory_idle_timeout_sec (number, optional): Timeout (in seconds) for TCP transitory connections. Defaults to 30s if not set.
+# - log_config (object, optional):
+#    - filter: Specifies the desired filtering of logs on this NAT. Defaults to "ALL".
 # - subnetworks (list(objects), optional):
 #   - name (string, required): Self-link of subnetwork to NAT.
 #   - source_ip_ranges_to_nat (string, required): List of options for which source IPs in the subnetwork should have NAT enabled.