feat: added support for multiple forwarding rule creation based on subnets

Author: pawan1210

modules/frontend/main.tf

@@ -23,8 +23,8 @@ locals {
   create_http_forward = var.http_forward || var.https_redirect
 
 
-  is_internal      = var.load_balancing_scheme == "INTERNAL_SELF_MANAGED"
-  internal_network = local.is_internal ? var.network : null
+  is_internal         = var.load_balancing_scheme == "INTERNAL_SELF_MANAGED" || var.load_balancing_scheme == "INTERNAL_MANAGED"
+  internal_network    = local.is_internal ? var.network : null
 
   # Create a map with hosts as keys and empty lists as initial values
   hosts = toset([for service in var.url_map_input : service.host])
@@ -46,7 +46,7 @@ locals {
 resource "google_compute_global_forwarding_rule" "http" {
   provider              = google-beta
   project               = var.project_id
-  count                 = local.create_http_forward ? 1 : 0
+  count                 = local.create_http_forward && !local.is_internal ? 1 : 0
   name                  = var.name
   target                = google_compute_target_http_proxy.default[0].self_link
   ip_address            = local.address
@@ -56,10 +56,24 @@ resource "google_compute_global_forwarding_rule" "http" {
   network               = local.internal_network
 }
 
+resource "google_compute_global_forwarding_rule" "http_internal" {
+  count = local.create_http_forward && local.is_internal ? length(var.internal_forwarding_rule_subnetworks) : 0
+
+  provider              = google-beta
+  project               = var.project_id
+  name                  = "${var.name}-http-internal-${count.index}"
+  target                = google_compute_target_http_proxy.default[0].self_link
+  port_range            = var.http_port
+  labels                = var.labels
+  load_balancing_scheme = var.load_balancing_scheme
+  network               = local.internal_network
+  subnetwork = var.internal_forwarding_rule_subnetworks[count.index]
+}
+
 resource "google_compute_global_forwarding_rule" "https" {
   provider              = google-beta
   project               = var.project_id
-  count                 = var.ssl ? 1 : 0
+  count                 = var.ssl && !local.is_internal ? 1 : 0
   name                  = "${var.name}-https"
   target                = google_compute_target_https_proxy.default[0].self_link
   ip_address            = local.address
@@ -69,6 +83,20 @@ resource "google_compute_global_forwarding_rule" "https" {
   network               = local.internal_network
 }
 
+resource "google_compute_global_forwarding_rule" "https_internal" {
+  count = var.ssl && local.is_internal ? length(var.internal_forwarding_rule_subnetworks) : 0
+
+  provider              = google-beta
+  project               = var.project_id
+  name                  = "${var.name}-https-internal-${count.index}"
+  target                = google_compute_target_https_proxy.default[0].self_link
+  port_range            = var.https_port
+  labels                = var.labels
+  load_balancing_scheme = var.load_balancing_scheme
+  network               = local.internal_network
+  subnetwork = var.internal_forwarding_rule_subnetworks[count.index]
+}
+
 resource "google_compute_global_address" "default" {
   provider   = google-beta
   count      = local.is_internal ? 0 : var.create_address ? 1 : 0
@@ -83,7 +111,7 @@ resource "google_compute_global_address" "default" {
 resource "google_compute_global_forwarding_rule" "http_ipv6" {
   provider              = google-beta
   project               = var.project_id
-  count                 = (var.enable_ipv6 && local.create_http_forward) ? 1 : 0
+  count                 = (var.enable_ipv6 && local.create_http_forward && !local.is_internal) ? 1 : 0
   name                  = "${var.name}-ipv6-http"
   target                = google_compute_target_http_proxy.default[0].self_link
   ip_address            = local.ipv6_address
@@ -93,10 +121,24 @@ resource "google_compute_global_forwarding_rule" "http_ipv6" {
   network               = local.internal_network
 }
 
+resource "google_compute_global_forwarding_rule" "http_ipv6_internal" {
+  count = var.enable_ipv6 && local.create_http_forward && local.is_internal ? length(var.internal_forwarding_rule_subnetworks) : 0
+
+  provider              = google-beta
+  project               = var.project_id
+  name                  = "${var.name}-ipv6-http-internal"
+  target                = google_compute_target_http_proxy.default[0].self_link
+  port_range            = "80"
+  labels                = var.labels
+  load_balancing_scheme = var.load_balancing_scheme
+  network               = local.internal_network
+  subnetwork = var.internal_forwarding_rule_subnetworks[count.index]
+}
+
 resource "google_compute_global_forwarding_rule" "https_ipv6" {
   provider              = google-beta
   project               = var.project_id
-  count                 = var.enable_ipv6 && var.ssl ? 1 : 0
+  count                 = var.enable_ipv6 && var.ssl && !local.is_internal ? 1 : 0
   name                  = "${var.name}-ipv6-https"
   target                = google_compute_target_https_proxy.default[0].self_link
   ip_address            = local.ipv6_address
@@ -106,6 +148,20 @@ resource "google_compute_global_forwarding_rule" "https_ipv6" {
   network               = local.internal_network
 }
 
+resource "google_compute_global_forwarding_rule" "https_ipv6_internal" {
+  count = var.enable_ipv6 && var.ssl && local.is_internal ? length(var.internal_forwarding_rule_subnetworks) : 0
+
+  provider              = google-beta
+  project               = var.project_id
+  name                  = "${var.name}-ipv6-https-internal-${count.index}"
+  target                = google_compute_target_https_proxy.default[0].self_link
+  port_range            = "443"
+  labels                = var.labels
+  load_balancing_scheme = var.load_balancing_scheme
+  network               = local.internal_network
+  subnetwork            = var.internal_forwarding_rule_subnetworks[count.index]
+}
+
 resource "google_compute_global_address" "default_ipv6" {
   provider   = google-beta
   count      = local.is_internal ? 0 : (var.enable_ipv6 && var.create_ipv6_address) ? 1 : 0