Skip to content

Latest commit

 

History

History
20 lines (16 loc) · 5.81 KB

File metadata and controls

20 lines (16 loc) · 5.81 KB

Inputs

Name Description Type Default Required
private_worker_pool name: Name of the worker pool. A name with a random suffix is generated if not set.
region: The private worker pool region. See https://cloud.google.com/build/docs/locations for available locations.
disk_size_gb: Size of the disk attached to the worker, in GB.
machine_type: Machine type of a worker.
no_external_ip: If true, workers are created without any public address, which prevents network egress to public IPs.
enable_network_peering: Set to true to enable configuration of networking peering for the private worker pool.
create_peered_network: If true a network will be created to stablish the network peering.
peered_network_id: The ID of the existing network to configure peering for the private worker pool if create_peered_network false. The project containing the network must have Service Networking API (servicenetworking.googleapis.com) enabled.
peered_network_subnet_ip: The IP range to be used for the subnet that a will created in the peered network if create_peered_network true.
peering_address: The IP address or beginning of the peering address range. This can be supplied as an input to reserve a specific address or omitted to allow GCP to choose a valid one.
peering_prefix_length: The prefix length of the IP peering range. If not present, it means the address field is a single IP address.
object({
name = optional(string, "")
region = optional(string, "us-central1")
disk_size_gb = optional(number, 100)
machine_type = optional(string, "e2-medium")
no_external_ip = optional(bool, false)
enable_network_peering = optional(bool, false)
create_peered_network = optional(bool, false)
peered_network_id = optional(string, "")
peered_network_subnet_ip = optional(string, "")
peering_address = optional(string, null)
peering_prefix_length = optional(number, 24)
})
{} no
project_id ID of the project where the private pool will be created string n/a yes
vpc_flow_logs aggregation_interval: Toggles the aggregation interval for collecting flow logs. Increasing the interval time will reduce the amount of generated flow logs for long lasting connections. Possible values are: INTERVAL_5_SEC, INTERVAL_30_SEC, INTERVAL_1_MIN, INTERVAL_5_MIN, INTERVAL_10_MIN, INTERVAL_15_MIN.
flow_sampling: Set the sampling rate of VPC flow logs within the subnetwork where 1.0 means all collected logs are reported and 0.0 means no logs are reported. The value of the field must be in [0, 1].
metadata: Configures whether metadata fields should be added to the reported VPC flow logs. Possible values are: EXCLUDE_ALL_METADATA, INCLUDE_ALL_METADATA, CUSTOM_METADATA.
metadata_fields: ist of metadata fields that should be added to reported logs. Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" is set to CUSTOM_METADATA.
filter_expr: Export filter used to define which VPC flow logs should be logged, as as CEL expression. See https://cloud.google.com/vpc/docs/flow-logs#filtering for details on how to format this field.
object({
aggregation_interval = optional(string, "INTERVAL_5_SEC")
flow_sampling = optional(string, "0.5")
metadata = optional(string, "INCLUDE_ALL_METADATA")
metadata_fields = optional(list(string), [])
filter_expr = optional(string, "true")
})
{} no
vpn_configuration enable_vpn: set to true to create VPN connection to on prem. If true, the following values must be valid.
on_prem_public_ip_address0: The first public IP address for on prem VPN connection.
on_prem_public_ip_address1: The second public IP address for on prem VPN connection.
router_asn: Border Gateway Protocol (BGP) Autonomous System Number (ASN) for cloud routes.
bgp_peer_asn: Border Gateway Protocol (BGP) Autonomous System Number (ASN) for peer cloud routes.
shared_secret: The shared secret used in the VPN.
psk_secret_project_id: The ID of the project that contains the secret from secret manager that holds the VPN pre-shared key.
psk_secret_name: The name of the secret to retrieve from secret manager that holds the VPN pre-shared key.
tunnel0_bgp_peer_address: BGP peer address for tunnel 0.
tunnel0_bgp_session_range: BGP session range for tunnel 0.
tunnel1_bgp_peer_address: BGP peer address for tunnel 1.
tunnel1_bgp_session_range: BGP session range for tunnel 1.
object({
enable_vpn = optional(bool, false)
on_prem_public_ip_address0 = optional(string, "")
on_prem_public_ip_address1 = optional(string, "")
router_asn = optional(number, 64515)
bgp_peer_asn = optional(number, 64513)
psk_secret_project_id = optional(string, "")
psk_secret_name = optional(string, "")
tunnel0_bgp_peer_address = optional(string, "")
tunnel0_bgp_session_range = optional(string, "")
tunnel1_bgp_peer_address = optional(string, "")
tunnel1_bgp_session_range = optional(string, "")
})
{} no

Outputs

Name Description
peered_network_id The ID of the peered network.
private_worker_pool_id Private worker pool ID.
worker_peered_ip_range The IP range of the peered service network.
worker_range_id The worker IP range ID.