Flexible VPC setup in GCP

The module creates a set of resources and configures a secure multi-region/regional GCP VPC. The configuration includes subnets with Cloud NAT and external static IP address(es) in the specified region(s). Optional Private Google Access can also be enabled.

Once you have a Corewide Solutions Portal account, this one-time action will use your browser session to retrieve credentials:

 shellterraform login solutions.corewide.com

Provision instructions

Initialize mandatory providers:

hashicorp/google

Copy and paste into your Terraform configuration and insert the variables:

 hclmodule "tf_gcp_vpc" {
  source  = "solutions.corewide.com/google-cloud/tf-gcp-vpc/google"
  version = "~> 2.2.0"

  # specify module inputs here or try one of the examples below
  ...
}

Initialize the setup:

 shellterraform init

Define update strategy

Corewide DevOps team strictly follows Semantic Versioning Specification to provide our clients with products that have predictable upgrades between versions. We recommend pinning patch versions of our modules using pessimistic constraint operator (~>) to prevent breaking changes during upgrades.

To get new features during the upgrades (without breaking compatibility), use ~> 2.2 and run terraform init -upgrade

For the safest setup, use strict pinning with version = "2.2.0"

Module 10% off	~~€460~~ €410
TOTAL	€410

BUY

8,122

Corewide Proprietary License

v2.2.0 released 2 months, 1 week ago

New version approx. every 24 weeks

Upgrade Notes

Changelog

From `v1.x` to `v2.x`

Module from v2.0 has changed GCP provider version which isn't compatible with an old version. After the module version is upgraded, re-init module to upgrade GCP provider version.
Upgrade GCP provider version on project level to ~> 7.0:

 hclterraform {
  required_providers {
    google = {
      source  = "hashicorp/google"
      version = "~> 7.0"
    }
  }
}

Upgrade project dependencies:

 bashterraform init --upgrade

In this example, module creates two subnets in different regions using only mandatory values:

 hclmodule "vpc" {
  source  = "solutions.corewide.com/google-cloud/tf-gcp-vpc/google"
  version = "~> 2.2"

  name_prefix = "project-name"

  subnets = {
    database = {
      cidr_block = "10.0.0.0/8"
      region     = "us-west1"
    }

    application = {
      cidr_block = "11.0.0.0/8"
      region     = "us-east1"
    }
  }
}

In this setup, module creates three subnets with configured NAT, private GCP access, regional routes, explicitly specified project ID, and for application subnets, enables dynamic port allocation, router NAT logs, and extra IP addresses for the application gateway:

 hclmodule "vpc" {
  source  = "solutions.corewide.com/google-cloud/tf-gcp-vpc/google"
  version = "~> 2.2"

  name_prefix  = "project-name"
  project_id   = "foo"
  routing_mode = "REGIONAL"

  subnets = {
    database = {
      cidr_block = "11.0.0.0/8"
      region     = "us-west1"
    }

    application = {
      private_access_enabled         = true
      enable_dynamic_port_allocation = true
      cidr_block                     = "12.0.0.0/8"
      region                         = "us-east1"
      nat_ips                        = [google_compute_address.extra_application_nat.self_link]

      router_nat_logs = {
        enable = true
        filter = "ERRORS_ONLY"
      }
    }

    test = {
      private_access_enabled = true
      cidr_block             = "12.0.0.0/8"
      region                 = "us-central1"
    }
  }
}

Variable	Description	Type	Default	Required	Sensitive
`name_prefix`	Naming prefix for all the resources created by the module	`string`		yes	no
`subnets`	The map of specific definitions for the subnets creation	`map(object)`		yes	no
`subnets[<key>]`	subnet name	`string`		yes	no
`project_id`	GCP project ID to manage resources in. If it is not provided, the provider project is used	`string`		no	no
`router_nat_logs_enabled`	Enable logging for NAT structure	`bool`	`true`	no	no
`routing_mode`	Network-wide routing mode to use	`string`	`GLOBAL`	no	no
`subnets.router_nat_logs`	Configure logging for Cloud NAT gateway	`object`		no	no
`subnets.router_nat_logs.enable`	Enable logging for Cloud NAT gateway	`bool`	`false`	no	no
`subnets.router_nat_logs.filter`	Cloud NAT flow logs	`string`	`ALL`	no	no
`subnets[<key>].cidr_block`	The range of internal addresses that are owned by the subnet	`string`		yes	no
`subnets[<key>].enable_dynamic_port_allocation`	Enable dynamic port allocation for VM from this NAT	`bool`	`false`	no	no
`subnets[<key>].nat_ips`	Additional GCP IP addresses `self_link` for the Cloud NAT gateway configuration	`list(string)`	`[]`	no	no
`subnets[<key>].private_access_enabled`	Specifies whether VMs in this subnet can access Google APIs and services by using Private Google Access without external IP addresses	`bool`	`false`	no	no
`subnets[<key>].region`	The GCP region for the subnet and related resources	`string`		yes	no