https://github.com/kickin6/terraform-google-firewall-rule

Modular Network Firewall Rule on Google Compute Engine for Terraform. Includes sub-modules for every allowed variable combination in both INGRESS and EGRESS directions.
https://github.com/kickin6/terraform-google-firewall-rule

firewall-rules hcl terraform terraform-modules

Last synced: 9 months ago
JSON representation

Modular Network Firewall Rule on Google Compute Engine for Terraform. Includes sub-modules for every allowed variable combination in both INGRESS and EGRESS directions.

• Host: GitHub
• URL: https://github.com/kickin6/terraform-google-firewall-rule
• Owner: kickin6
• License: mit
• Created: 2018-06-19T20:21:56.000Z (about 8 years ago)
• Default Branch: master
• Last Pushed: 2018-06-19T20:47:45.000Z (about 8 years ago)
• Last Synced: 2023-10-20T01:05:16.729Z (over 2 years ago)
• Topics: firewall-rules, hcl, terraform, terraform-modules
• Language: HCL
• Homepage:
• Size: 6.84 KB
• Stars: 6
• Watchers: 1
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Network Firewall Rule Module 

Modular Network Firewall Rule on Google Compute Engine for Terraform.

# Ingress Allow Firewall Rule using Target Tags

## Usage

```

module "firewall-1" {

    source                  = "github.com/kickin6/terraform-google-firewall-rule"

    name                    = "default-ingress-deny-tcp-80"

    project                 = "${var.project}"

    network                 = "default"

    priority                = "1000"

    protocol                = "${var.protocol}"

    ports                   = "${var.ports}"

    target_tags             = "${var.target_tags}"

}

```

# Sub-Modules

Because some variables will not work when combined with certain other variables, these sub-modules are pre-configured to use compatible variables.

Here is a list of incompatible variables.

## direction = INGRESS

- `destination_ranges`

## direction = EGRESS

- `source_ranges`

- `source_tags`

## source_service_accounts

- `source_tags`

- `target_tags`

## target_service_accounts

- `source_tags`

- `target_tags`