-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.tf
103 lines (88 loc) · 4.1 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
/**
* Copyright 2018 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/******************************************
VPC configuration
*****************************************/
resource "google_compute_network" "network" {
name = "${var.network_name}"
auto_create_subnetworks = "false"
routing_mode = "${var.routing_mode}"
project = "${var.project_id}"
}
/******************************************
Shared VPC
*****************************************/
resource "google_compute_shared_vpc_host_project" "shared_vpc_host" {
count = "${var.shared_vpc_host == "true" ? 1 : 0}"
project = "${var.project_id}"
depends_on = ["google_compute_network.network"]
}
/******************************************
Subnet configuration
*****************************************/
resource "google_compute_subnetwork" "subnetwork" {
count = "${length(var.subnets)}"
name = "${lookup(var.subnets[count.index], "subnet_name")}"
ip_cidr_range = "${lookup(var.subnets[count.index], "subnet_ip")}"
region = "${lookup(var.subnets[count.index], "subnet_region")}"
private_ip_google_access = "${lookup(var.subnets[count.index], "subnet_private_access", "false")}"
enable_flow_logs = "${lookup(var.subnets[count.index], "subnet_flow_logs", "false")}"
network = "${google_compute_network.network.name}"
project = "${var.project_id}"
secondary_ip_range = "${var.secondary_ranges[lookup(var.subnets[count.index], "subnet_name")]}"
}
data "google_compute_subnetwork" "created_subnets" {
count = "${length(var.subnets)}"
name = "${element(google_compute_subnetwork.subnetwork.*.name, count.index)}"
region = "${element(google_compute_subnetwork.subnetwork.*.region, count.index)}"
project = "${var.project_id}"
}
/******************************************
Routes
*****************************************/
resource "google_compute_route" "route" {
count = "${length(var.routes)}"
project = "${var.project_id}"
network = "${var.network_name}"
name = "${lookup(var.routes[count.index], "name", format("%s-%s-%d", lower(var.network_name), "route",count.index))}"
description = "${lookup(var.routes[count.index], "description","")}"
tags = "${compact(split(",",lookup(var.routes[count.index], "tags","")))}"
dest_range = "${lookup(var.routes[count.index], "destination_range","")}"
next_hop_gateway = "${lookup(var.routes[count.index], "next_hop_internet","") == "true" ? "default-internet-gateway":""}"
next_hop_ip = "${lookup(var.routes[count.index], "next_hop_ip","")}"
next_hop_instance = "${lookup(var.routes[count.index], "next_hop_instance","")}"
next_hop_instance_zone = "${lookup(var.routes[count.index], "next_hop_instance_zone","")}"
next_hop_vpn_tunnel = "${lookup(var.routes[count.index], "next_hop_vpn_tunnel","")}"
priority = "${lookup(var.routes[count.index], "priority", "1000")}"
depends_on = [
"google_compute_network.network",
"google_compute_subnetwork.subnetwork",
]
}
resource "null_resource" "delete_default_internet_gateway_routes" {
count = "${var.delete_default_internet_gateway_routes ? 1 : 0}"
provisioner "local-exec" {
command = "${path.module}/scripts/delete-default-gateway-routes.sh ${var.project_id} ${var.network_name}"
}
triggers {
number_of_routes = "${length(var.routes)}"
}
depends_on = [
"google_compute_network.network",
"google_compute_subnetwork.subnetwork",
"google_compute_route.route",
]
}