ansible-collections / ansible-collections/google.cloud

Add support for google cloud cloudarmor security policies configuration

Open
#467 1 comment 0 reactions 0 assignees View on GitHub
stale
Dominant language
Python
Stars
105
Forks
144
Avg merge
5d 10h
Merged PRs (30d)
4

Description

##### SUMMARY

##### ISSUE TYPE
- Feature Idea

##### COMPONENT NAME
Google supports configuring cloud armor rules. However, ansible does not yet have a module to do so.

##### ADDITIONAL INFORMATION
This feature will allow ansible to provision cloud armor security policies in GCP and link those to backends.

```yaml
description: my description
fingerprint: PWfLGDWQDLY=
id: '123'
name: my-policy
rules:
- action: allow
description: default rule
match:
config:
srcIpRanges:
- '*'
versionedExpr: SRC_IPS_V1
preview: false
priority: 2147483647
selfLink: https://www.googleapis.com/compute/v1/projects/my-project/global/securityPolicies/my-policy
```
For more information, please refer to:
https://cloud.google.com/armor/docs/configure-security-policies

Contributor guide

Open the contributing guide

Research direction

Start with the linked Cloud Armor documentation and the example security-policy fields in the issue. Determine the collection entry point for a new GCP module and review how policy rules and backend links should be represented. Done means Ansible can provision the policy and associate it with backends, with behavior validated against the documented configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
google-cloud, python
Domain
cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.