Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Check b/256705397 for more details
  • Loading branch information
msampathkumar committed Nov 1, 2022
1 parent b38a446 commit 11b94f1
Show file tree
Hide file tree
Showing 4 changed files with 68 additions and 68 deletions.
32 changes: 16 additions & 16 deletions shared_vpc_http_ilb_with_mig_backend_basic_example/main.tf
Expand Up @@ -28,7 +28,7 @@
resource "google_compute_network" "lb_network" {
name = "lb-network"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
auto_create_subnetworks = false
}
# [END cloudloadbalancing_shared_vpc_http_lb_network]
Expand All @@ -38,7 +38,7 @@ resource "google_compute_network" "lb_network" {
resource "google_compute_subnetwork" "lb_frontend_and_backend_subnet" {
name = "lb-frontend-and-backend-subnet"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
region = "us-west1"
ip_cidr_range = "10.1.2.0/24"
role = "ACTIVE"
Expand All @@ -52,7 +52,7 @@ resource "google_compute_subnetwork" "lb_frontend_and_backend_subnet" {
resource "google_compute_subnetwork" "proxy_only_subnet" {
name = "proxy-only-subnet"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
region = "us-west1"
ip_cidr_range = "10.129.0.0/23"
role = "ACTIVE"
Expand All @@ -66,7 +66,7 @@ resource "google_compute_subnetwork" "proxy_only_subnet" {
resource "google_compute_firewall" "fw_allow_ssh" {
name = "fw-allow-ssh"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
direction = "INGRESS"
network = google_compute_network.lb_network.id
source_ranges = ["0.0.0.0/0"]
Expand All @@ -82,7 +82,7 @@ resource "google_compute_firewall" "fw_allow_ssh" {
resource "google_compute_firewall" "fw_allow_health_check" {
name = "fw-allow-health-check"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
direction = "INGRESS"
network = google_compute_network.lb_network.id
source_ranges = ["130.211.0.0/22", "35.191.0.0/16"]
Expand All @@ -97,7 +97,7 @@ resource "google_compute_firewall" "fw_allow_health_check" {
resource "google_compute_firewall" "fw_allow_proxies" {
name = "fw-allow-proxies"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
direction = "INGRESS"
network = google_compute_network.lb_network.id
source_ranges = ["10.129.0.0/23"]
Expand All @@ -113,11 +113,11 @@ resource "google_compute_firewall" "fw_allow_proxies" {
# Config NetworkUser role to use service project
# https://cloud.google.com/load-balancing/docs/l7-internal/l7-internal-shared-vpc#deploy_load_balancer_and_backends
data "google_project" "service_project" {
project_id = "SERVICE_PROJECT_ID"
project_id = "my-service-project-id"
}

resource "google_project_iam_binding" "default" {
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
role = "roles/compute.networkUser"

members = [
Expand All @@ -131,7 +131,7 @@ resource "google_project_iam_binding" "default" {
resource "google_compute_instance_template" "default" {
name = "l7-ilb-backend-template"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
region = "us-west1"
# For machine type, using small. For more options check https://cloud.google.com/compute/docs/machine-types
machine_type = "e2-small"
Expand Down Expand Up @@ -172,7 +172,7 @@ resource "google_compute_instance_template" "default" {
resource "google_compute_instance_group_manager" "default" {
name = "l7-ilb-backend-example"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
zone = "us-west1-a"
base_instance_name = "vm"
target_size = 2
Expand All @@ -194,7 +194,7 @@ resource "google_compute_instance_group_manager" "default" {
resource "google_compute_health_check" "default" {
name = "l7-ilb-basic-check"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
timeout_sec = 1
check_interval_sec = 1
http_health_check {
Expand All @@ -208,7 +208,7 @@ resource "google_compute_health_check" "default" {
resource "google_compute_region_backend_service" "default" {
name = "l7-ilb-backend-service"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
region = "us-west1"
protocol = "HTTP"
load_balancing_scheme = "INTERNAL_MANAGED"
Expand All @@ -227,7 +227,7 @@ resource "google_compute_region_backend_service" "default" {
resource "google_compute_region_url_map" "default" {
name = "l7-ilb-map"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
region = "us-west1"
default_service = google_compute_region_backend_service.default.id
}
Expand All @@ -238,7 +238,7 @@ resource "google_compute_region_url_map" "default" {
resource "google_compute_region_target_http_proxy" "default" {
name = "l7-ilb-proxy"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
region = "us-west1"
url_map = google_compute_region_url_map.default.id
}
Expand All @@ -249,7 +249,7 @@ resource "google_compute_region_target_http_proxy" "default" {
resource "google_compute_forwarding_rule" "default" {
name = "l7-ilb-forwarding-rule"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
region = "us-west1"
ip_protocol = "TCP"
port_range = "80"
Expand All @@ -268,7 +268,7 @@ resource "google_compute_forwarding_rule" "default" {
resource "google_compute_instance" "vm_test" {
name = "client-vm"
provider = google-beta
project = "SERVICE_PROJECT_ID"
project = "my-service-project-id"
zone = "us-west1-a"
machine_type = "e2-small"
tags = ["allow-ssh"]
Expand Down
Expand Up @@ -28,7 +28,7 @@
resource "google_compute_network" "lb_network" {
name = "lb-network"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
auto_create_subnetworks = false
}
# [END cloudloadbalancing_shared_vpc_cross_ref_http_lb_network]
Expand All @@ -38,7 +38,7 @@ resource "google_compute_network" "lb_network" {
resource "google_compute_subnetwork" "lb_frontend_and_backend_subnet" {
name = "lb-frontend-and-backend-subnet"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
region = "us-west1"
ip_cidr_range = "10.1.2.0/24"
role = "ACTIVE"
Expand All @@ -52,7 +52,7 @@ resource "google_compute_subnetwork" "lb_frontend_and_backend_subnet" {
resource "google_compute_subnetwork" "proxy_only_subnet" {
name = "proxy-only-subnet"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
region = "us-west1"
ip_cidr_range = "10.129.0.0/23"
role = "ACTIVE"
Expand All @@ -66,7 +66,7 @@ resource "google_compute_subnetwork" "proxy_only_subnet" {
resource "google_compute_firewall" "fw_allow_ssh" {
name = "fw-allow-ssh"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
direction = "INGRESS"
network = google_compute_network.lb_network.id
source_ranges = ["0.0.0.0/0"]
Expand All @@ -82,7 +82,7 @@ resource "google_compute_firewall" "fw_allow_ssh" {
resource "google_compute_firewall" "fw_allow_health_check" {
name = "fw-allow-health-check"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
direction = "INGRESS"
network = google_compute_network.lb_network.id
source_ranges = ["130.211.0.0/22", "35.191.0.0/16"]
Expand All @@ -97,7 +97,7 @@ resource "google_compute_firewall" "fw_allow_health_check" {
resource "google_compute_firewall" "fw_allow_proxies" {
name = "fw-allow-proxies"
provider = google-beta
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
direction = "INGRESS"
network = google_compute_network.lb_network.id
source_ranges = ["10.129.0.0/23"]
Expand All @@ -113,11 +113,11 @@ resource "google_compute_firewall" "fw_allow_proxies" {
# Config NetworkUser role to use service project
# https://cloud.google.com/load-balancing/docs/l7-internal/l7-internal-shared-vpc#deploy_load_balancer_and_backends
data "google_project" "service_project" {
project_id = "SERVICE_PROJECT_B_ID"
project_id = "my-service-project-b-id"
}

resource "google_project_iam_binding" "default" {
project = "HOST_PROJECT_ID"
project = "my-host-project-id"
role = "roles/compute.networkUser"

members = [
Expand All @@ -129,7 +129,7 @@ resource "google_project_iam_binding" "default" {
# https://cloud.google.com/load-balancing/docs/l7-internal/l7-internal-shared-vpc#grant-bs-user

resource "google_project_iam_binding" "project_level_iam_lb_access" {
project = "SERVICE_PROJECT_B_ID"
project = "my-service-project-b-id"
role = "roles/compute.loadBalancerServiceUser"

members = [
Expand All @@ -143,7 +143,7 @@ resource "google_project_iam_binding" "project_level_iam_lb_access" {
resource "google_compute_instance_template" "default" {
name = "l7-ilb-backend-template"
provider = google-beta
project = "SERVICE_PROJECT_B_ID"
project = "my-service-project-b-id"
region = "us-west1"
# For machine type, using small. For more options check https://cloud.google.com/compute/docs/machine-types
machine_type = "e2-small"
Expand Down Expand Up @@ -184,7 +184,7 @@ resource "google_compute_instance_template" "default" {
resource "google_compute_instance_group_manager" "default" {
name = "l7-ilb-backend-example"
provider = google-beta
project = "SERVICE_PROJECT_B_ID"
project = "my-service-project-b-id"
zone = "us-west1-a"
base_instance_name = "vm"
target_size = 2
Expand All @@ -206,7 +206,7 @@ resource "google_compute_instance_group_manager" "default" {
resource "google_compute_health_check" "default" {
name = "l7-ilb-basic-check"
provider = google-beta
project = "SERVICE_PROJECT_B_ID"
project = "my-service-project-b-id"
timeout_sec = 1
check_interval_sec = 1
http_health_check {
Expand All @@ -220,7 +220,7 @@ resource "google_compute_health_check" "default" {
resource "google_compute_region_backend_service" "default" {
name = "l7-ilb-backend-service"
provider = google-beta
project = "SERVICE_PROJECT_B_ID"
project = "my-service-project-b-id"
region = "us-west1"
protocol = "HTTP"
load_balancing_scheme = "INTERNAL_MANAGED"
Expand All @@ -239,7 +239,7 @@ resource "google_compute_region_backend_service" "default" {
resource "google_compute_region_url_map" "default" {
name = "l7-ilb-map"
provider = google-beta
project = "SERVICE_PROJECT_A_ID"
project = "my-service-project-a-id"
region = "us-west1"
default_service = google_compute_region_backend_service.default.id
}
Expand All @@ -250,7 +250,7 @@ resource "google_compute_region_url_map" "default" {
resource "google_compute_region_target_http_proxy" "default" {
name = "l7-ilb-proxy"
provider = google-beta
project = "SERVICE_PROJECT_A_ID"
project = "my-service-project-a-id"
region = "us-west1"
url_map = google_compute_region_url_map.default.id
}
Expand All @@ -261,7 +261,7 @@ resource "google_compute_region_target_http_proxy" "default" {
resource "google_compute_forwarding_rule" "default" {
name = "l7-ilb-forwarding-rule"
provider = google-beta
project = "SERVICE_PROJECT_A_ID"
project = "my-service-project-a-id"
region = "us-west1"
ip_protocol = "TCP"
port_range = "80"
Expand All @@ -280,7 +280,7 @@ resource "google_compute_forwarding_rule" "default" {
resource "google_compute_instance" "vm_test" {
name = "client-vm"
provider = google-beta
project = "SERVICE_PROJECT_A_ID"
project = "my-service-project-a-id"
zone = "us-west1-a"
machine_type = "e2-small"
tags = ["allow-ssh"]
Expand Down

0 comments on commit 11b94f1

Please sign in to comment.