ansible-collections / ansible-collections/google.cloud
Add support for google cloud cloudarmor security policies configuration
- Dominant language
- Python
- Stars
- 105
- Forks
- 144
- Avg merge
- 5d 10h
- Merged PRs (30d)
- 4
Description
##### SUMMARY
##### ISSUE TYPE
- Feature Idea
##### COMPONENT NAME
Google supports configuring cloud armor rules. However, ansible does not yet have a module to do so.
##### ADDITIONAL INFORMATION
This feature will allow ansible to provision cloud armor security policies in GCP and link those to backends.
```yaml
description: my description
fingerprint: PWfLGDWQDLY=
id: '123'
name: my-policy
rules:
- action: allow
description: default rule
match:
config:
srcIpRanges:
- '*'
versionedExpr: SRC_IPS_V1
preview: false
priority: 2147483647
selfLink: https://www.googleapis.com/compute/v1/projects/my-project/global/securityPolicies/my-policy
```
For more information, please refer to:
https://cloud.google.com/armor/docs/configure-security-policies
Contributor guide
Research direction
Start with the linked Cloud Armor documentation and the example security-policy fields in the issue. Determine the collection entry point for a new GCP module and review how policy rules and backend links should be represented. Done means Ansible can provision the policy and associate it with backends, with behavior validated against the documented configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- google-cloud, python
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100