From f6f5b6c38f0011d70c70ce2d6581aa8c7d34eb5f Mon Sep 17 00:00:00 2001 From: Joaquin <91717108+joaquinza@users.noreply.github.com> Date: Thu, 14 Dec 2023 16:22:16 +0900 Subject: [PATCH 1/2] Update variables.tf src_threat_intelligences is missing from the variable object definition. --- modules/network-firewall-policy/variables.tf | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/network-firewall-policy/variables.tf b/modules/network-firewall-policy/variables.tf index f8fd67c8..ca74e753 100644 --- a/modules/network-firewall-policy/variables.tf +++ b/modules/network-firewall-policy/variables.tf @@ -63,6 +63,7 @@ variable "rules" { src_fqdns = optional(list(string), []) src_region_codes = optional(list(string), []) src_secure_tags = optional(list(string), []) + src_threat_intelligences = optional(list(string), []) src_address_groups = optional(list(string), []) dest_ip_ranges = optional(list(string), []) dest_fqdns = optional(list(string), []) From 54afb60e14a2571943438dab68701fa0c149dd64 Mon Sep 17 00:00:00 2001 From: Joaquin Date: Wed, 20 Dec 2023 15:06:38 +0900 Subject: [PATCH 2/2] Executed make generate_docs --- modules/network-firewall-policy/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/network-firewall-policy/README.md b/modules/network-firewall-policy/README.md index 40f996d5..35a464a2 100644 --- a/modules/network-firewall-policy/README.md +++ b/modules/network-firewall-policy/README.md @@ -135,7 +135,7 @@ module "firewall_rules" { | policy\_name | User-provided name of the Network firewall policy | `string` | n/a | yes | | policy\_region | Location of the firewall policy. Needed for regional firewall policies. Default is null (Global firewall policy) | `string` | `null` | no | | project\_id | Project ID of the Network firewall policy | `string` | n/a | yes | -| rules | List of Ingress/Egress rules |
list(object({
priority = number
direction = string
action = string
rule_name = optional(string)
disabled = optional(bool)
description = optional(string)
enable_logging = optional(bool)
target_secure_tags = optional(list(string))
target_service_accounts = optional(list(string))
match = object({
src_ip_ranges = optional(list(string), [])
src_fqdns = optional(list(string), [])
src_region_codes = optional(list(string), [])
src_secure_tags = optional(list(string), [])
src_address_groups = optional(list(string), [])
dest_ip_ranges = optional(list(string), [])
dest_fqdns = optional(list(string), [])
dest_region_codes = optional(list(string), [])
dest_threat_intelligences = optional(list(string), [])
dest_address_groups = optional(list(string), [])
layer4_configs = optional(list(object({
ip_protocol = optional(string, "all")
ports = optional(list(string), [])
})), [{}])
})
}))
| `[]` | no | +| rules | List of Ingress/Egress rules |
list(object({
priority = number
direction = string
action = string
rule_name = optional(string)
disabled = optional(bool)
description = optional(string)
enable_logging = optional(bool)
target_secure_tags = optional(list(string))
target_service_accounts = optional(list(string))
match = object({
src_ip_ranges = optional(list(string), [])
src_fqdns = optional(list(string), [])
src_region_codes = optional(list(string), [])
src_secure_tags = optional(list(string), [])
src_threat_intelligences = optional(list(string), [])
src_address_groups = optional(list(string), [])
dest_ip_ranges = optional(list(string), [])
dest_fqdns = optional(list(string), [])
dest_region_codes = optional(list(string), [])
dest_threat_intelligences = optional(list(string), [])
dest_address_groups = optional(list(string), [])
layer4_configs = optional(list(object({
ip_protocol = optional(string, "all")
ports = optional(list(string), [])
})), [{}])
})
}))
| `[]` | no | | target\_vpcs | List of target VPC IDs that the firewall policy will be attached to | `list(string)` | `[]` | no | ## Outputs