From c45f2b7cd3f216f43e71224e45e2ec356ce5b0ac Mon Sep 17 00:00:00 2001
From: Megan Bang <mbang@hashicorp.com>
Date: Mon, 4 Nov 2019 13:03:20 -0600
Subject: [PATCH 1/3] update examples from 0.11 syntax to 0.12 syntax

---
 examples/cloud-armor/main.tf                  |  40 +++----
 examples/cloud-armor/variables.tf             |   2 +-
 examples/content-based-load-balancing/main.tf |  39 +++----
 .../content-based-load-balancing/output.tf    |   2 +-
 examples/endpoints-on-compute-engine/main.tf  |  49 ++++----
 examples/internal-load-balancing/main.tf      |  72 ++++++------
 examples/internal-load-balancing/output.tf    |   2 +-
 examples/shared-vpc/main.tf                   | 105 +++++++++---------
 examples/shared-vpc/output.tf                 |   2 +-
 examples/two-tier/main.tf                     |  56 +++++++---
 examples/two-tier/output.tf                   |   7 +-
 examples/vpn/vpn.tf                           | 100 +++++++++--------
 12 files changed, 261 insertions(+), 215 deletions(-)

diff --git a/examples/cloud-armor/main.tf b/examples/cloud-armor/main.tf
index 28f47253df..762fde2ea2 100644
--- a/examples/cloud-armor/main.tf
+++ b/examples/cloud-armor/main.tf
@@ -7,10 +7,10 @@ resource "random_id" "instance_id" {
 
 # Configure the Google Cloud provider
 provider "google" {
-  credentials = "${file(var.credentials_file_path)}"
-  project     = "${var.project_name}"
-  region      = "${var.region}"
-  zone        = "${var.region_zone}"
+  credentials = file(var.credentials_file_path)
+  project     = var.project_name
+  region      = var.region
+  zone        = var.region_zone
 }
 
 # Set up a backend to be proxied to:
@@ -26,8 +26,8 @@ resource "google_compute_instance" "cluster1" {
   }
 
   network_interface {
-    network       = "default"
-    access_config = {
+    network = "default"
+    access_config {
       # Ephemeral IP
     }
   }
@@ -50,7 +50,7 @@ resource "google_compute_instance_group" "webservers" {
   description = "An instance group for the single GCE instance"
 
   instances = [
-    "${google_compute_instance.cluster1.self_link}",
+    google_compute_instance.cluster1.self_link,
   ]
 
   named_port {
@@ -63,11 +63,11 @@ resource "google_compute_target_pool" "example" {
   name = "armor-pool"
 
   instances = [
-    "${google_compute_instance.cluster1.self_link}",
+    google_compute_instance.cluster1.self_link,
   ]
 
   health_checks = [
-    "${google_compute_http_health_check.health.name}",
+    google_compute_http_health_check.health.name,
   ]
 }
 
@@ -87,12 +87,12 @@ resource "google_compute_backend_service" "website" {
   enable_cdn  = false
 
   backend {
-    group = "${google_compute_instance_group.webservers.self_link}"
+    group = google_compute_instance_group.webservers.self_link
   }
 
-  security_policy = "${google_compute_security_policy.security-policy-1.self_link}"
+  security_policy = google_compute_security_policy.security-policy-1.self_link
 
-  health_checks = ["${google_compute_http_health_check.health.self_link}"]
+  health_checks = [google_compute_http_health_check.health.self_link]
 }
 
 # Cloud Armor Security policies
@@ -125,7 +125,7 @@ resource "google_compute_security_policy" "security-policy-1" {
       versioned_expr = "SRC_IPS_V1"
 
       config {
-        src_ip_ranges = "${var.ip_white_list}"
+        src_ip_ranges = var.ip_white_list
       }
     }
 
@@ -136,18 +136,18 @@ resource "google_compute_security_policy" "security-policy-1" {
 # Front end of the load balancer
 resource "google_compute_global_forwarding_rule" "default" {
   name       = "armor-rule"
-  target     = "${google_compute_target_http_proxy.default.self_link}"
+  target     = google_compute_target_http_proxy.default.self_link
   port_range = "80"
 }
 
 resource "google_compute_target_http_proxy" "default" {
-  name        = "armor-proxy"
-  url_map     = "${google_compute_url_map.default.self_link}"
+  name    = "armor-proxy"
+  url_map = google_compute_url_map.default.self_link
 }
 
 resource "google_compute_url_map" "default" {
   name            = "armor-url-map"
-  default_service = "${google_compute_backend_service.website.self_link}"
+  default_service = google_compute_backend_service.website.self_link
 
   host_rule {
     hosts        = ["mysite.com"]
@@ -156,15 +156,15 @@ resource "google_compute_url_map" "default" {
 
   path_matcher {
     name            = "allpaths"
-    default_service = "${google_compute_backend_service.website.self_link}"
+    default_service = google_compute_backend_service.website.self_link
 
     path_rule {
       paths   = ["/*"]
-      service = "${google_compute_backend_service.website.self_link}"
+      service = google_compute_backend_service.website.self_link
     }
   }
 }
 
 output "ip" {
-  value = "${google_compute_global_forwarding_rule.default.ip_address}"
+  value = google_compute_global_forwarding_rule.default.ip_address
 }
diff --git a/examples/cloud-armor/variables.tf b/examples/cloud-armor/variables.tf
index d3967d5960..ad5cf47cc9 100644
--- a/examples/cloud-armor/variables.tf
+++ b/examples/cloud-armor/variables.tf
@@ -17,5 +17,5 @@ variable "credentials_file_path" {
 
 variable "ip_white_list" {
   description = "A list of ip addresses that can be white listed through security policies"
-  default = ["192.0.2.0/24"]
+  default     = ["192.0.2.0/24"]
 }
diff --git a/examples/content-based-load-balancing/main.tf b/examples/content-based-load-balancing/main.tf
index 92122e7520..467d892a47 100644
--- a/examples/content-based-load-balancing/main.tf
+++ b/examples/content-based-load-balancing/main.tf
@@ -1,10 +1,10 @@
 # https://cloud.google.com/compute/docs/load-balancing/http/content-based-example
 
 provider "google" {
-  region      = "${var.region}"
-  project     = "${var.project_name}"
-  credentials = "${file("${var.credentials_file_path}")}"
-  zone        = "${var.region_zone}"
+  region      = var.region
+  project     = var.project_name
+  credentials = file(var.credentials_file_path)
+  zone        = var.region_zone
 }
 
 resource "google_compute_instance" "www" {
@@ -26,7 +26,7 @@ resource "google_compute_instance" "www" {
     }
   }
 
-  metadata_startup_script = "${file("scripts/install-www.sh")}"
+  metadata_startup_script = file("scripts/install-www.sh")
 
   service_account {
     scopes = ["https://www.googleapis.com/auth/compute.readonly"]
@@ -52,7 +52,7 @@ resource "google_compute_instance" "www-video" {
     }
   }
 
-  metadata_startup_script = "${file("scripts/install-video.sh")}"
+  metadata_startup_script = file("scripts/install-video.sh")
 
   service_account {
     scopes = ["https://www.googleapis.com/auth/compute.readonly"]
@@ -66,7 +66,7 @@ resource "google_compute_global_address" "external-address" {
 resource "google_compute_instance_group" "www-resources" {
   name = "tf-www-resources"
 
-  instances = ["${google_compute_instance.www.self_link}"]
+  instances = [google_compute_instance.www.self_link]
 
   named_port {
     name = "http"
@@ -77,7 +77,7 @@ resource "google_compute_instance_group" "www-resources" {
 resource "google_compute_instance_group" "video-resources" {
   name = "tf-video-resources"
 
-  instances = ["${google_compute_instance.www-video.self_link}"]
+  instances = [google_compute_instance.www-video.self_link]
 
   named_port {
     name = "http"
@@ -88,7 +88,8 @@ resource "google_compute_instance_group" "video-resources" {
 resource "google_compute_health_check" "health-check" {
   name = "tf-health-check"
 
-  http_health_check {}
+  http_health_check {
+  }
 }
 
 resource "google_compute_backend_service" "www-service" {
@@ -96,10 +97,10 @@ resource "google_compute_backend_service" "www-service" {
   protocol = "HTTP"
 
   backend {
-    group = "${google_compute_instance_group.www-resources.self_link}"
+    group = google_compute_instance_group.www-resources.self_link
   }
 
-  health_checks = ["${google_compute_health_check.health-check.self_link}"]
+  health_checks = [google_compute_health_check.health-check.self_link]
 }
 
 resource "google_compute_backend_service" "video-service" {
@@ -107,15 +108,15 @@ resource "google_compute_backend_service" "video-service" {
   protocol = "HTTP"
 
   backend {
-    group = "${google_compute_instance_group.video-resources.self_link}"
+    group = google_compute_instance_group.video-resources.self_link
   }
 
-  health_checks = ["${google_compute_health_check.health-check.self_link}"]
+  health_checks = [google_compute_health_check.health-check.self_link]
 }
 
 resource "google_compute_url_map" "web-map" {
   name            = "tf-web-map"
-  default_service = "${google_compute_backend_service.www-service.self_link}"
+  default_service = google_compute_backend_service.www-service.self_link
 
   host_rule {
     hosts        = ["*"]
@@ -124,24 +125,24 @@ resource "google_compute_url_map" "web-map" {
 
   path_matcher {
     name            = "tf-allpaths"
-    default_service = "${google_compute_backend_service.www-service.self_link}"
+    default_service = google_compute_backend_service.www-service.self_link
 
     path_rule {
       paths   = ["/video", "/video/*"]
-      service = "${google_compute_backend_service.video-service.self_link}"
+      service = google_compute_backend_service.video-service.self_link
     }
   }
 }
 
 resource "google_compute_target_http_proxy" "http-lb-proxy" {
   name    = "tf-http-lb-proxy"
-  url_map = "${google_compute_url_map.web-map.self_link}"
+  url_map = google_compute_url_map.web-map.self_link
 }
 
 resource "google_compute_global_forwarding_rule" "default" {
   name       = "tf-http-content-gfr"
-  target     = "${google_compute_target_http_proxy.http-lb-proxy.self_link}"
-  ip_address = "${google_compute_global_address.external-address.address}"
+  target     = google_compute_target_http_proxy.http-lb-proxy.self_link
+  ip_address = google_compute_global_address.external-address.address
   port_range = "80"
 }
 
diff --git a/examples/content-based-load-balancing/output.tf b/examples/content-based-load-balancing/output.tf
index f9b443672f..5c958ad238 100644
--- a/examples/content-based-load-balancing/output.tf
+++ b/examples/content-based-load-balancing/output.tf
@@ -1,3 +1,3 @@
 output "application_public_ip" {
-  value = "${google_compute_global_forwarding_rule.default.ip_address}"
+  value = google_compute_global_forwarding_rule.default.ip_address
 }
diff --git a/examples/endpoints-on-compute-engine/main.tf b/examples/endpoints-on-compute-engine/main.tf
index 4a27e2aa1b..d38b4618c4 100644
--- a/examples/endpoints-on-compute-engine/main.tf
+++ b/examples/endpoints-on-compute-engine/main.tf
@@ -1,9 +1,10 @@
 provider "google" {
-  region      = "${var.region}"
-  credentials = "${file("${var.credentials_file_path}")}"
+  region      = var.region
+  credentials = file(var.credentials_file_path)
 }
 
-provider "random" {}
+provider "random" {
+}
 
 resource "random_id" "project_name" {
   byte_length = 8
@@ -12,23 +13,23 @@ resource "random_id" "project_name" {
 resource "google_project" "endpoints_project" {
   name            = "Endpoints Project"
   project_id      = "tf-ep-${random_id.project_name.hex}"
-  org_id          = "${var.org_id}"
-  billing_account = "${var.billing_account_id}"
+  org_id          = var.org_id
+  billing_account = var.billing_account_id
 }
 
 resource "google_project_service" "endpoints_project" {
-  project = "${google_project.endpoints_project.project_id}"
+  project = google_project.endpoints_project.project_id
   service = "compute.googleapis.com"
 }
 
 resource "google_project_service" "endpoints_project_sm" {
-  project = "${google_project.endpoints_project.project_id}"
+  project = google_project.endpoints_project.project_id
   service = "servicemanagement.googleapis.com"
 }
 
 resource "google_endpoints_service" "endpoints_service" {
   service_name = "echo-api.endpoints.${google_project.endpoints_project.project_id}.cloud.goog"
-  project      = "${google_project.endpoints_project.project_id}"
+  project      = google_project.endpoints_project.project_id
 
   openapi_config = <<EOF
 swagger: "2.0"
@@ -72,21 +73,22 @@ definitions:
         type: "string"
 EOF
 
-  depends_on = ["google_project_service.endpoints_project_sm"]
+
+  depends_on = [google_project_service.endpoints_project_sm]
 }
 
 resource "google_compute_network" "network" {
   name                    = "ep-network"
   auto_create_subnetworks = "true"
-  project                 = "${google_project.endpoints_project.project_id}"
-  depends_on              = ["google_project_service.endpoints_project"]
+  project                 = google_project.endpoints_project.project_id
+  depends_on              = [google_project_service.endpoints_project]
 }
 
 # Allow the hosted network to be hit over ICMP, SSH, and HTTP.
 resource "google_compute_firewall" "network" {
   name    = "allow-ssh-and-icmp"
-  network = "${google_compute_network.network.self_link}"
-  project = "${google_compute_network.network.project}"
+  network = google_compute_network.network.self_link
+  project = google_compute_network.network.project
 
   allow {
     protocol = "icmp"
@@ -100,9 +102,9 @@ resource "google_compute_firewall" "network" {
 
 resource "google_compute_instance" "project_1_vm" {
   name         = "tf-ep-vm"
-  project      = "${google_project.endpoints_project.project_id}"
+  project      = google_project.endpoints_project.project_id
   machine_type = "f1-micro"
-  zone         = "${var.region_zone}"
+  zone         = var.region_zone
 
   boot_disk {
     initialize_params {
@@ -110,14 +112,14 @@ resource "google_compute_instance" "project_1_vm" {
     }
   }
 
-  metadata {
-    endpoints-service-name      = "${google_endpoints_service.endpoints_service.service_name}"
-    endpoints-service-config-id = "${google_endpoints_service.endpoints_service.config_id}"
-    startup-script              = "${file("scripts/install-vm.sh")}"
+  metadata = {
+    endpoints-service-name      = google_endpoints_service.endpoints_service.service_name
+    endpoints-service-config-id = google_endpoints_service.endpoints_service.config_id
+    startup-script              = file("scripts/install-vm.sh")
   }
 
   network_interface {
-    network = "${google_compute_firewall.network.network}"
+    network = google_compute_firewall.network.network
 
     access_config {
       // Ephemeral IP
@@ -128,9 +130,12 @@ resource "google_compute_instance" "project_1_vm" {
     scopes = ["https://www.googleapis.com/auth/cloud-platform"]
   }
 
-  depends_on = ["google_project_service.endpoints_project_sm", "google_project_service.endpoints_project"]
+  depends_on = [
+    google_project_service.endpoints_project_sm,
+    google_project_service.endpoints_project,
+  ]
 }
 
 output "ip" {
-  value = "${google_compute_instance.project_1_vm.network_interface.0.access_config.0.nat_ip}"
+  value = google_compute_instance.project_1_vm.network_interface[0].access_config[0].nat_ip
 }
diff --git a/examples/internal-load-balancing/main.tf b/examples/internal-load-balancing/main.tf
index ee5169203c..94e0b914a7 100644
--- a/examples/internal-load-balancing/main.tf
+++ b/examples/internal-load-balancing/main.tf
@@ -1,6 +1,6 @@
 provider "google" {
-  region  = "${var.region}"
-  project = "${var.project_name}"
+  region  = var.region
+  project = var.project_name
 }
 
 resource "google_compute_network" "my-custom-network" {
@@ -10,13 +10,13 @@ resource "google_compute_network" "my-custom-network" {
 resource "google_compute_subnetwork" "my-custom-subnet" {
   name          = "my-custom-subnet"
   ip_cidr_range = "10.128.0.0/20"
-  network       = "${google_compute_network.my-custom-network.self_link}"
-  region        = "${var.region}"
+  network       = google_compute_network.my-custom-network.self_link
+  region        = var.region
 }
 
 resource "google_compute_firewall" "allow-all-internal" {
   name    = "allow-all-10-128-0-0-20"
-  network = "${google_compute_network.my-custom-network.name}"
+  network = google_compute_network.my-custom-network.name
 
   allow {
     protocol = "tcp"
@@ -35,7 +35,7 @@ resource "google_compute_firewall" "allow-all-internal" {
 
 resource "google_compute_firewall" "allow-ssh-rdp-icmp" {
   name    = "allow-tcp22-tcp3389-icmp"
-  network = "${google_compute_network.my-custom-network.name}"
+  network = google_compute_network.my-custom-network.name
 
   allow {
     protocol = "tcp"
@@ -50,7 +50,7 @@ resource "google_compute_firewall" "allow-ssh-rdp-icmp" {
 resource "google_compute_instance" "ilb-instance-1" {
   name         = "ilb-instance-1"
   machine_type = "n1-standard-1"
-  zone         = "${var.region_zone}"
+  zone         = var.region_zone
 
   tags = ["int-lb"]
 
@@ -61,7 +61,7 @@ resource "google_compute_instance" "ilb-instance-1" {
   }
 
   network_interface {
-    subnetwork = "${google_compute_subnetwork.my-custom-subnet.name}"
+    subnetwork = google_compute_subnetwork.my-custom-subnet.name
 
     access_config {
       // Ephemeral IP
@@ -72,13 +72,13 @@ resource "google_compute_instance" "ilb-instance-1" {
     scopes = ["compute-rw"]
   }
 
-  metadata_startup_script = "${file("startup.sh")}"
+  metadata_startup_script = file("startup.sh")
 }
 
 resource "google_compute_instance" "ilb-instance-2" {
   name         = "ilb-instance-2"
   machine_type = "n1-standard-1"
-  zone         = "${var.region_zone}"
+  zone         = var.region_zone
 
   tags = ["int-lb"]
 
@@ -89,7 +89,7 @@ resource "google_compute_instance" "ilb-instance-2" {
   }
 
   network_interface {
-    subnetwork = "${google_compute_subnetwork.my-custom-subnet.name}"
+    subnetwork = google_compute_subnetwork.my-custom-subnet.name
 
     access_config {
       // Ephemeral IP
@@ -100,13 +100,13 @@ resource "google_compute_instance" "ilb-instance-2" {
     scopes = ["compute-rw"]
   }
 
-  metadata_startup_script = "${file("startup.sh")}"
+  metadata_startup_script = file("startup.sh")
 }
 
 resource "google_compute_instance" "ilb-instance-3" {
   name         = "ilb-instance-3"
   machine_type = "n1-standard-1"
-  zone         = "${var.region_zone_2}"
+  zone         = var.region_zone_2
 
   tags = ["int-lb"]
 
@@ -117,7 +117,7 @@ resource "google_compute_instance" "ilb-instance-3" {
   }
 
   network_interface {
-    subnetwork = "${google_compute_subnetwork.my-custom-subnet.name}"
+    subnetwork = google_compute_subnetwork.my-custom-subnet.name
 
     access_config {
       // Ephemeral IP
@@ -128,13 +128,13 @@ resource "google_compute_instance" "ilb-instance-3" {
     scopes = ["compute-rw"]
   }
 
-  metadata_startup_script = "${file("startup.sh")}"
+  metadata_startup_script = file("startup.sh")
 }
 
 resource "google_compute_instance" "ilb-instance-4" {
   name         = "ilb-instance-4"
   machine_type = "n1-standard-1"
-  zone         = "${var.region_zone_2}"
+  zone         = var.region_zone_2
 
   tags = ["int-lb"]
 
@@ -145,7 +145,7 @@ resource "google_compute_instance" "ilb-instance-4" {
   }
 
   network_interface {
-    subnetwork = "${google_compute_subnetwork.my-custom-subnet.name}"
+    subnetwork = google_compute_subnetwork.my-custom-subnet.name
 
     access_config {
       // Ephemeral IP
@@ -156,29 +156,29 @@ resource "google_compute_instance" "ilb-instance-4" {
     scopes = ["compute-rw"]
   }
 
-  metadata_startup_script = "${file("startup.sh")}"
+  metadata_startup_script = file("startup.sh")
 }
 
 resource "google_compute_instance_group" "us-ig1" {
   name = "us-ig1"
 
   instances = [
-    "${google_compute_instance.ilb-instance-1.self_link}",
-    "${google_compute_instance.ilb-instance-2.self_link}",
+    google_compute_instance.ilb-instance-1.self_link,
+    google_compute_instance.ilb-instance-2.self_link,
   ]
 
-  zone = "${var.region_zone}"
+  zone = var.region_zone
 }
 
 resource "google_compute_instance_group" "us-ig2" {
   name = "us-ig2"
 
   instances = [
-    "${google_compute_instance.ilb-instance-3.self_link}",
-    "${google_compute_instance.ilb-instance-4.self_link}",
+    google_compute_instance.ilb-instance-3.self_link,
+    google_compute_instance.ilb-instance-4.self_link,
   ]
 
-  zone = "${var.region_zone_2}"
+  zone = var.region_zone_2
 }
 
 resource "google_compute_health_check" "my-tcp-health-check" {
@@ -191,15 +191,15 @@ resource "google_compute_health_check" "my-tcp-health-check" {
 
 resource "google_compute_region_backend_service" "my-int-lb" {
   name          = "my-int-lb"
-  health_checks = ["${google_compute_health_check.my-tcp-health-check.self_link}"]
-  region        = "${var.region}"
+  health_checks = [google_compute_health_check.my-tcp-health-check.self_link]
+  region        = var.region
 
   backend {
-    group = "${google_compute_instance_group.us-ig1.self_link}"
+    group = google_compute_instance_group.us-ig1.self_link
   }
 
   backend {
-    group = "${google_compute_instance_group.us-ig2.self_link}"
+    group = google_compute_instance_group.us-ig2.self_link
   }
 }
 
@@ -207,14 +207,14 @@ resource "google_compute_forwarding_rule" "my-int-lb-forwarding-rule" {
   name                  = "my-int-lb-forwarding-rule"
   load_balancing_scheme = "INTERNAL"
   ports                 = ["80"]
-  network               = "${google_compute_network.my-custom-network.self_link}"
-  subnetwork            = "${google_compute_subnetwork.my-custom-subnet.self_link}"
-  backend_service       = "${google_compute_region_backend_service.my-int-lb.self_link}"
+  network               = google_compute_network.my-custom-network.self_link
+  subnetwork            = google_compute_subnetwork.my-custom-subnet.self_link
+  backend_service       = google_compute_region_backend_service.my-int-lb.self_link
 }
 
 resource "google_compute_firewall" "allow-internal-lb" {
   name    = "allow-internal-lb"
-  network = "${google_compute_network.my-custom-network.name}"
+  network = google_compute_network.my-custom-network.name
 
   allow {
     protocol = "tcp"
@@ -227,7 +227,7 @@ resource "google_compute_firewall" "allow-internal-lb" {
 
 resource "google_compute_firewall" "allow-health-check" {
   name    = "allow-health-check"
-  network = "${google_compute_network.my-custom-network.name}"
+  network = google_compute_network.my-custom-network.name
 
   allow {
     protocol = "tcp"
@@ -240,7 +240,7 @@ resource "google_compute_firewall" "allow-health-check" {
 resource "google_compute_instance" "standalone-instance-1" {
   name         = "standalone-instance-1"
   machine_type = "n1-standard-1"
-  zone         = "${var.region_zone}"
+  zone         = var.region_zone
 
   tags = ["standalone"]
 
@@ -251,7 +251,7 @@ resource "google_compute_instance" "standalone-instance-1" {
   }
 
   network_interface {
-    subnetwork = "${google_compute_subnetwork.my-custom-subnet.name}"
+    subnetwork = google_compute_subnetwork.my-custom-subnet.name
 
     access_config {
       // Ephemeral IP
@@ -261,7 +261,7 @@ resource "google_compute_instance" "standalone-instance-1" {
 
 resource "google_compute_firewall" "allow-ssh-to-standalone" {
   name    = "allow-ssh-to-standalone"
-  network = "${google_compute_network.my-custom-network.name}"
+  network = google_compute_network.my-custom-network.name
 
   allow {
     protocol = "tcp"
diff --git a/examples/internal-load-balancing/output.tf b/examples/internal-load-balancing/output.tf
index 97d64fbd58..07cf95184c 100644
--- a/examples/internal-load-balancing/output.tf
+++ b/examples/internal-load-balancing/output.tf
@@ -1,3 +1,3 @@
 output "internal_load_balancer_ip" {
-  value = "${google_compute_forwarding_rule.my-int-lb-forwarding-rule.ip_address}"
+  value = google_compute_forwarding_rule.my-int-lb-forwarding-rule.ip_address
 }
diff --git a/examples/shared-vpc/main.tf b/examples/shared-vpc/main.tf
index 3bf882d9e7..b324fb1f1c 100644
--- a/examples/shared-vpc/main.tf
+++ b/examples/shared-vpc/main.tf
@@ -1,11 +1,12 @@
 # https://cloud.google.com/vpc/docs/shared-vpc
 
 provider "google" {
-  region      = "${var.region}"
-  credentials = "${file("${var.credentials_file_path}")}"
+  region      = var.region
+  credentials = file(var.credentials_file_path)
 }
 
-provider "random" {}
+provider "random" {
+}
 
 resource "random_id" "host_project_name" {
   byte_length = 8
@@ -27,79 +28,81 @@ resource "random_id" "standalone_project_name" {
 resource "google_project" "host_project" {
   name            = "Host Project"
   project_id      = "tf-vpc-${random_id.host_project_name.hex}"
-  org_id          = "${var.org_id}"
-  billing_account = "${var.billing_account_id}"
+  org_id          = var.org_id
+  billing_account = var.billing_account_id
 }
 
 # One project which will use the VPC.
 resource "google_project" "service_project_1" {
   name            = "Service Project 1"
   project_id      = "tf-vpc-${random_id.service_project_1_name.hex}"
-  org_id          = "${var.org_id}"
-  billing_account = "${var.billing_account_id}"
+  org_id          = var.org_id
+  billing_account = var.billing_account_id
 }
 
 # The other project which will use the VPC.
 resource "google_project" "service_project_2" {
   name            = "Service Project 2"
   project_id      = "tf-vpc-${random_id.service_project_2_name.hex}"
-  org_id          = "${var.org_id}"
-  billing_account = "${var.billing_account_id}"
+  org_id          = var.org_id
+  billing_account = var.billing_account_id
 }
 
 # A project which will not use the VPC, for the sake of demonstration.
 resource "google_project" "standalone_project" {
   name            = "Standalone Project"
   project_id      = "tf-vpc-${random_id.standalone_project_name.hex}"
-  org_id          = "${var.org_id}"
-  billing_account = "${var.billing_account_id}"
+  org_id          = var.org_id
+  billing_account = var.billing_account_id
 }
 
 # Compute service needs to be enabled for all four new projects.
 resource "google_project_service" "host_project" {
-  project = "${google_project.host_project.project_id}"
+  project = google_project.host_project.project_id
   service = "compute.googleapis.com"
 }
 
 resource "google_project_service" "service_project_1" {
-  project = "${google_project.service_project_1.project_id}"
+  project = google_project.service_project_1.project_id
   service = "compute.googleapis.com"
 }
 
 resource "google_project_service" "service_project_2" {
-  project = "${google_project.service_project_2.project_id}"
+  project = google_project.service_project_2.project_id
   service = "compute.googleapis.com"
 }
 
 resource "google_project_service" "standalone_project" {
-  project = "${google_project.standalone_project.project_id}"
+  project = google_project.standalone_project.project_id
   service = "compute.googleapis.com"
 }
 
 # Enable shared VPC hosting in the host project.
 resource "google_compute_shared_vpc_host_project" "host_project" {
-  project    = "${google_project.host_project.project_id}"
-  depends_on = ["google_project_service.host_project"]
+  project    = google_project.host_project.project_id
+  depends_on = [google_project_service.host_project]
 }
 
 # Enable shared VPC in the two service projects - explicitly depend on the host
 # project enabling it, because enabling shared VPC will fail if the host project
 # is not yet hosting.
 resource "google_compute_shared_vpc_service_project" "service_project_1" {
-  host_project    = "${google_project.host_project.project_id}"
-  service_project = "${google_project.service_project_1.project_id}"
+  host_project    = google_project.host_project.project_id
+  service_project = google_project.service_project_1.project_id
 
-  depends_on = ["google_compute_shared_vpc_host_project.host_project",
-    "google_project_service.service_project_1",
+  depends_on = [
+    google_compute_shared_vpc_host_project.host_project,
+    google_project_service.service_project_1,
   ]
 }
 
 resource "google_compute_shared_vpc_service_project" "service_project_2" {
-  host_project    = "${google_project.host_project.project_id}"
-  service_project = "${google_project.service_project_2.project_id}"
+  host_project    = google_project.host_project.project_id
+  service_project = google_project.service_project_2.project_id
 
-  depends_on = ["google_compute_shared_vpc_host_project.host_project",
-    "google_project_service.service_project_2",
+  depends_on = [
+    google_compute_shared_vpc_host_project.host_project,
+    google_project_service.service_project_2,
   ]
 }
 
@@ -107,18 +110,19 @@ resource "google_compute_shared_vpc_service_project" "service_project_2" {
 resource "google_compute_network" "shared_network" {
   name                    = "shared-network"
   auto_create_subnetworks = "true"
-  project                 = "${google_compute_shared_vpc_host_project.host_project.project}"
+  project                 = google_compute_shared_vpc_host_project.host_project.project
 
-  depends_on = ["google_compute_shared_vpc_service_project.service_project_1",
-    "google_compute_shared_vpc_service_project.service_project_2",
+  depends_on = [
+    google_compute_shared_vpc_service_project.service_project_1,
+    google_compute_shared_vpc_service_project.service_project_2,
   ]
 }
 
 # Allow the hosted network to be hit over ICMP, SSH, and HTTP.
 resource "google_compute_firewall" "shared_network" {
   name    = "allow-ssh-and-icmp"
-  network = "${google_compute_network.shared_network.self_link}"
-  project = "${google_compute_network.shared_network.project}"
+  network = google_compute_network.shared_network.self_link
+  project = google_compute_network.shared_network.project
 
   allow {
     protocol = "icmp"
@@ -134,13 +138,13 @@ resource "google_compute_firewall" "shared_network" {
 resource "google_compute_network" "standalone_network" {
   name                    = "standalone-network"
   auto_create_subnetworks = "true"
-  project                 = "${google_project.standalone_project.project_id}"
-  depends_on              = ["google_project_service.standalone_project"]
+  project                 = google_project.standalone_project.project_id
+  depends_on              = [google_project_service.standalone_project]
 }
 
 resource "google_compute_firewall" "standalone_network" {
   name    = "allow-ssh-and-icmp"
-  network = "${google_compute_network.standalone_network.self_link}"
+  network = google_compute_network.standalone_network.self_link
 
   allow {
     protocol = "icmp"
@@ -151,15 +155,15 @@ resource "google_compute_firewall" "standalone_network" {
     ports    = ["22", "80"]
   }
 
-  project = "${google_project.standalone_project.project_id}"
+  project = google_project.standalone_project.project_id
 }
 
 # Create a VM which hosts a web page stating its identity ("VM1")
 resource "google_compute_instance" "project_1_vm" {
   name         = "tf-project-1-vm"
-  project      = "${google_project.service_project_1.project_id}"
+  project      = google_project.service_project_1.project_id
   machine_type = "f1-micro"
-  zone         = "${var.region_zone}"
+  zone         = var.region_zone
 
   boot_disk {
     initialize_params {
@@ -170,7 +174,7 @@ resource "google_compute_instance" "project_1_vm" {
   metadata_startup_script = "VM_NAME=VM1\n${file("scripts/install-vm.sh")}"
 
   network_interface {
-    network = "${google_compute_network.shared_network.self_link}"
+    network = google_compute_network.shared_network.self_link
 
     access_config {
       // Ephemeral IP
@@ -181,15 +185,15 @@ resource "google_compute_instance" "project_1_vm" {
     scopes = ["https://www.googleapis.com/auth/compute.readonly"]
   }
 
-  depends_on = ["google_project_service.service_project_1"]
+  depends_on = [google_project_service.service_project_1]
 }
 
 # Create a VM which hosts a web page demonstrating the example networking.
 resource "google_compute_instance" "project_2_vm" {
   name         = "tf-project-2-vm"
   machine_type = "f1-micro"
-  project      = "${google_project.service_project_2.project_id}"
-  zone         = "${var.region_zone}"
+  project      = google_project.service_project_2.project_id
+  zone         = var.region_zone
 
   boot_disk {
     initialize_params {
@@ -198,15 +202,16 @@ resource "google_compute_instance" "project_2_vm" {
   }
 
   metadata_startup_script = <<EOF
-VM1_EXT_IP=${google_compute_instance.project_1_vm.network_interface.0.access_config.0.nat_ip}
-ST_VM_EXT_IP=${google_compute_instance.standalone_project_vm.network_interface.0.access_config.0.nat_ip}
-VM1_INT_IP=${google_compute_instance.project_1_vm.network_interface.0.address}
-ST_VM_INT_IP=${google_compute_instance.standalone_project_vm.network_interface.0.address}
+VM1_EXT_IP=${google_compute_instance.project_1_vm.network_interface[0].access_config[0].nat_ip}
+ST_VM_EXT_IP=${google_compute_instance.standalone_project_vm.network_interface[0].access_config[0].nat_ip}
+VM1_INT_IP=${google_compute_instance.project_1_vm.network_interface[0].address}
+ST_VM_INT_IP=${google_compute_instance.standalone_project_vm.network_interface[0].address}
 ${file("scripts/install-network-page.sh")}
 EOF
 
+
   network_interface {
-    network = "${google_compute_network.shared_network.self_link}"
+    network = google_compute_network.shared_network.self_link
 
     access_config {
       // Ephemeral IP
@@ -217,15 +222,15 @@ EOF
     scopes = ["https://www.googleapis.com/auth/compute.readonly"]
   }
 
-  depends_on = ["google_project_service.service_project_2"]
+  depends_on = [google_project_service.service_project_2]
 }
 
 # Create a VM which hosts a web page stating its identity ("standalone").
 resource "google_compute_instance" "standalone_project_vm" {
   name         = "tf-standalone-vm"
   machine_type = "f1-micro"
-  project      = "${google_project.standalone_project.project_id}"
-  zone         = "${var.region_zone}"
+  project      = google_project.standalone_project.project_id
+  zone         = var.region_zone
 
   boot_disk {
     initialize_params {
@@ -236,7 +241,7 @@ resource "google_compute_instance" "standalone_project_vm" {
   metadata_startup_script = "VM_NAME=standalone\n${file("scripts/install-vm.sh")}"
 
   network_interface {
-    network = "${google_compute_network.standalone_network.self_link}"
+    network = google_compute_network.standalone_network.self_link
 
     access_config {
       // Ephemeral IP
@@ -247,5 +252,5 @@ resource "google_compute_instance" "standalone_project_vm" {
     scopes = ["https://www.googleapis.com/auth/compute.readonly"]
   }
 
-  depends_on = ["google_project_service.standalone_project"]
+  depends_on = [google_project_service.standalone_project]
 }
diff --git a/examples/shared-vpc/output.tf b/examples/shared-vpc/output.tf
index e1806810f2..79e47e9056 100644
--- a/examples/shared-vpc/output.tf
+++ b/examples/shared-vpc/output.tf
@@ -1,3 +1,3 @@
 output "status_page_public_ip" {
-  value = "${google_compute_instance.project_2_vm.network_interface.0.access_config.0.nat_ip}"
+  value = google_compute_instance.project_2_vm.network_interface[0].access_config[0].nat_ip
 }
diff --git a/examples/two-tier/main.tf b/examples/two-tier/main.tf
index 9edbd8ff13..4e15371e10 100644
--- a/examples/two-tier/main.tf
+++ b/examples/two-tier/main.tf
@@ -1,9 +1,9 @@
 # See https://cloud.google.com/compute/docs/load-balancing/network/example
 
 provider "google" {
-  region      = "${var.region}"
-  project     = "${var.project_name}"
-  credentials = "${file("${var.credentials_file_path}")}"
+  region      = var.region
+  project     = var.project_name
+  credentials = file(var.credentials_file_path)
 }
 
 resource "google_compute_http_health_check" "default" {
@@ -17,13 +17,13 @@ resource "google_compute_http_health_check" "default" {
 
 resource "google_compute_target_pool" "default" {
   name          = "tf-www-target-pool"
-  instances     = ["${google_compute_instance.www.*.self_link}"]
-  health_checks = ["${google_compute_http_health_check.default.name}"]
+  instances     = google_compute_instance.www.*.self_link
+  health_checks = [google_compute_http_health_check.default.name]
 }
 
 resource "google_compute_forwarding_rule" "default" {
   name       = "tf-www-forwarding-rule"
-  target     = "${google_compute_target_pool.default.self_link}"
+  target     = google_compute_target_pool.default.self_link
   port_range = "80"
 }
 
@@ -32,7 +32,7 @@ resource "google_compute_instance" "www" {
 
   name         = "tf-www-${count.index}"
   machine_type = "f1-micro"
-  zone         = "${var.region_zone}"
+  zone         = var.region_zone
   tags         = ["www-node"]
 
   boot_disk {
@@ -49,27 +49,57 @@ resource "google_compute_instance" "www" {
     }
   }
 
-  metadata {
-    ssh-keys = "root:${file("${var.public_key_path}")}"
+  metadata = {
+    ssh-keys = "root:${file(var.public_key_path)}"
   }
 
   provisioner "file" {
-    source      = "${var.install_script_src_path}"
-    destination = "${var.install_script_dest_path}"
+    source      = var.install_script_src_path
+    destination = var.install_script_dest_path
 
     connection {
+      host = coalesce( # Simplify this to reference a specific desired IP address, if possible.
+        concat(
+          # Prefer any available NAT IP address
+          flatten([
+            for ni in self.network_interface : [
+              for ac in ni.access_config : ac.nat_ip
+            ]
+          ]),
+
+          # Otherwise, use the first available LAN IP address
+          [
+            for ni in self.network_interface : ni.network_ip
+          ],
+        )...
+      )
       type        = "ssh"
       user        = "root"
-      private_key = "${file("${var.private_key_path}")}"
+      private_key = file(var.private_key_path)
       agent       = false
     }
   }
 
   provisioner "remote-exec" {
     connection {
+      host = coalesce( # Simplify this to reference a specific desired IP address, if possible.
+        concat(
+          # Prefer any available NAT IP address
+          flatten([
+            for ni in self.network_interface : [
+              for ac in ni.access_config : ac.nat_ip
+            ]
+          ]),
+
+          # Otherwise, use the first available LAN IP address
+          [
+            for ni in self.network_interface : ni.network_ip
+          ],
+        )...
+      )
       type        = "ssh"
       user        = "root"
-      private_key = "${file("${var.private_key_path}")}"
+      private_key = file(var.private_key_path)
       agent       = false
     }
 
diff --git a/examples/two-tier/output.tf b/examples/two-tier/output.tf
index 1774c3bb89..849cfff1e1 100644
--- a/examples/two-tier/output.tf
+++ b/examples/two-tier/output.tf
@@ -1,7 +1,10 @@
 output "pool_public_ip" {
-  value = "${google_compute_forwarding_rule.default.ip_address}"
+  value = google_compute_forwarding_rule.default.ip_address
 }
 
 output "instance_ips" {
-  value = "${join(" ", google_compute_instance.www.*.network_interface.0.access_config.0.nat_ip)}"
+  value = join(
+    " ",
+    google_compute_instance.www.*.network_interface.0.access_config.0.nat_ip,
+  )
 }
diff --git a/examples/vpn/vpn.tf b/examples/vpn/vpn.tf
index c780a1a64f..36c6cc62cf 100644
--- a/examples/vpn/vpn.tf
+++ b/examples/vpn/vpn.tf
@@ -1,8 +1,8 @@
 # An example of how to connect two GCE networks with a VPN
 provider "google" {
-  credentials = "${file("~/gce/account.json")}"
-  project     = "${var.project}"
-  region      = "${var.region1}"
+  credentials = file("~/gce/account.json")
+  project     = var.project
+  region      = var.region1
 }
 
 # Create the two networks we want to join. They must have separate, internal
@@ -20,108 +20,110 @@ resource "google_compute_network" "network2" {
 # Attach a VPN gateway to each network.
 resource "google_compute_vpn_gateway" "target_gateway1" {
   name    = "vpn1"
-  network = "${google_compute_network.network1.self_link}"
-  region  = "${var.region1}"
+  network = google_compute_network.network1.self_link
+  region  = var.region1
 }
 
 resource "google_compute_vpn_gateway" "target_gateway2" {
   name    = "vpn2"
-  network = "${google_compute_network.network2.self_link}"
-  region  = "${var.region2}"
+  network = google_compute_network.network2.self_link
+  region  = var.region2
 }
 
 # Create an outward facing static IP for each VPN that will be used by the
 # other VPN to connect.
 resource "google_compute_address" "vpn_static_ip1" {
   name   = "vpn-static-ip1"
-  region = "${var.region1}"
+  region = var.region1
 }
 
 resource "google_compute_address" "vpn_static_ip2" {
   name   = "vpn-static-ip2"
-  region = "${var.region2}"
+  region = var.region2
 }
 
 # Forward IPSec traffic coming into our static IP to our VPN gateway.
 resource "google_compute_forwarding_rule" "fr1_esp" {
   name        = "fr1-esp"
-  region      = "${var.region1}"
+  region      = var.region1
   ip_protocol = "ESP"
-  ip_address  = "${google_compute_address.vpn_static_ip1.address}"
-  target      = "${google_compute_vpn_gateway.target_gateway1.self_link}"
+  ip_address  = google_compute_address.vpn_static_ip1.address
+  target      = google_compute_vpn_gateway.target_gateway1.self_link
 }
 
 resource "google_compute_forwarding_rule" "fr2_esp" {
   name        = "fr2-esp"
-  region      = "${var.region2}"
+  region      = var.region2
   ip_protocol = "ESP"
-  ip_address  = "${google_compute_address.vpn_static_ip2.address}"
-  target      = "${google_compute_vpn_gateway.target_gateway2.self_link}"
+  ip_address  = google_compute_address.vpn_static_ip2.address
+  target      = google_compute_vpn_gateway.target_gateway2.self_link
 }
 
 # The following two sets of forwarding rules are used as a part of the IPSec
 # protocol
 resource "google_compute_forwarding_rule" "fr1_udp500" {
   name        = "fr1-udp500"
-  region      = "${var.region1}"
+  region      = var.region1
   ip_protocol = "UDP"
   port_range  = "500"
-  ip_address  = "${google_compute_address.vpn_static_ip1.address}"
-  target      = "${google_compute_vpn_gateway.target_gateway1.self_link}"
+  ip_address  = google_compute_address.vpn_static_ip1.address
+  target      = google_compute_vpn_gateway.target_gateway1.self_link
 }
 
 resource "google_compute_forwarding_rule" "fr2_udp500" {
   name        = "fr2-udp500"
-  region      = "${var.region2}"
+  region      = var.region2
   ip_protocol = "UDP"
   port_range  = "500"
-  ip_address  = "${google_compute_address.vpn_static_ip2.address}"
-  target      = "${google_compute_vpn_gateway.target_gateway2.self_link}"
+  ip_address  = google_compute_address.vpn_static_ip2.address
+  target      = google_compute_vpn_gateway.target_gateway2.self_link
 }
 
 resource "google_compute_forwarding_rule" "fr1_udp4500" {
   name        = "fr1-udp4500"
-  region      = "${var.region1}"
+  region      = var.region1
   ip_protocol = "UDP"
   port_range  = "4500"
-  ip_address  = "${google_compute_address.vpn_static_ip1.address}"
-  target      = "${google_compute_vpn_gateway.target_gateway1.self_link}"
+  ip_address  = google_compute_address.vpn_static_ip1.address
+  target      = google_compute_vpn_gateway.target_gateway1.self_link
 }
 
 resource "google_compute_forwarding_rule" "fr2_udp4500" {
   name        = "fr2-udp4500"
-  region      = "${var.region2}"
+  region      = var.region2
   ip_protocol = "UDP"
   port_range  = "4500"
-  ip_address  = "${google_compute_address.vpn_static_ip2.address}"
-  target      = "${google_compute_vpn_gateway.target_gateway2.self_link}"
+  ip_address  = google_compute_address.vpn_static_ip2.address
+  target      = google_compute_vpn_gateway.target_gateway2.self_link
 }
 
 # Each tunnel is responsible for encrypting and decrypting traffic exiting
 # and leaving its associated gateway
 resource "google_compute_vpn_tunnel" "tunnel1" {
   name               = "tunnel1"
-  region             = "${var.region1}"
-  peer_ip            = "${google_compute_address.vpn_static_ip2.address}"
+  region             = var.region1
+  peer_ip            = google_compute_address.vpn_static_ip2.address
   shared_secret      = "a secret message"
-  target_vpn_gateway = "${google_compute_vpn_gateway.target_gateway1.self_link}"
+  target_vpn_gateway = google_compute_vpn_gateway.target_gateway1.self_link
 
-  depends_on = ["google_compute_forwarding_rule.fr1_udp500",
-    "google_compute_forwarding_rule.fr1_udp4500",
-    "google_compute_forwarding_rule.fr1_esp",
+  depends_on = [
+    google_compute_forwarding_rule.fr1_udp500,
+    google_compute_forwarding_rule.fr1_udp4500,
+    google_compute_forwarding_rule.fr1_esp,
   ]
 }
 
 resource "google_compute_vpn_tunnel" "tunnel2" {
   name               = "tunnel2"
-  region             = "${var.region2}"
-  peer_ip            = "${google_compute_address.vpn_static_ip1.address}"
+  region             = var.region2
+  peer_ip            = google_compute_address.vpn_static_ip1.address
   shared_secret      = "a secret message"
-  target_vpn_gateway = "${google_compute_vpn_gateway.target_gateway2.self_link}"
+  target_vpn_gateway = google_compute_vpn_gateway.target_gateway2.self_link
 
-  depends_on = ["google_compute_forwarding_rule.fr2_udp500",
-    "google_compute_forwarding_rule.fr2_udp4500",
-    "google_compute_forwarding_rule.fr2_esp",
+  depends_on = [
+    google_compute_forwarding_rule.fr2_udp500,
+    google_compute_forwarding_rule.fr2_udp4500,
+    google_compute_forwarding_rule.fr2_esp,
   ]
 }
 
@@ -129,17 +131,17 @@ resource "google_compute_vpn_tunnel" "tunnel2" {
 # through the VPN tunnel
 resource "google_compute_route" "route1" {
   name                = "route1"
-  network             = "${google_compute_network.network1.name}"
-  next_hop_vpn_tunnel = "${google_compute_vpn_tunnel.tunnel1.self_link}"
-  dest_range          = "${google_compute_network.network2.ipv4_range}"
+  network             = google_compute_network.network1.name
+  next_hop_vpn_tunnel = google_compute_vpn_tunnel.tunnel1.self_link
+  dest_range          = google_compute_network.network2.ipv4_range
   priority            = 1000
 }
 
 resource "google_compute_route" "route2" {
   name                = "route2"
-  network             = "${google_compute_network.network2.name}"
-  next_hop_vpn_tunnel = "${google_compute_vpn_tunnel.tunnel2.self_link}"
-  dest_range          = "${google_compute_network.network1.ipv4_range}"
+  network             = google_compute_network.network2.name
+  next_hop_vpn_tunnel = google_compute_vpn_tunnel.tunnel2.self_link
+  dest_range          = google_compute_network.network1.ipv4_range
   priority            = 1000
 }
 
@@ -147,8 +149,8 @@ resource "google_compute_route" "route2" {
 # them in the firewall
 resource "google_compute_firewall" "network1-allow-network1" {
   name          = "network1-allow-network1"
-  network       = "${google_compute_network.network1.name}"
-  source_ranges = ["${google_compute_network.network1.ipv4_range}"]
+  network       = google_compute_network.network1.name
+  source_ranges = [google_compute_network.network1.ipv4_range]
 
   allow {
     protocol = "tcp"
@@ -165,8 +167,8 @@ resource "google_compute_firewall" "network1-allow-network1" {
 
 resource "google_compute_firewall" "network1-allow-network2" {
   name          = "network1-allow-network2"
-  network       = "${google_compute_network.network1.name}"
-  source_ranges = ["${google_compute_network.network2.ipv4_range}"]
+  network       = google_compute_network.network1.name
+  source_ranges = [google_compute_network.network2.ipv4_range]
 
   allow {
     protocol = "tcp"

From 1e9c28f7fe06ed31f8d3e08d5d13d4a66c75ce75 Mon Sep 17 00:00:00 2001
From: Megan Bang <mbang@hashicorp.com>
Date: Mon, 4 Nov 2019 15:34:52 -0600
Subject: [PATCH 2/3] update host

---
 examples/two-tier/main.tf | 32 ++------------------------------
 1 file changed, 2 insertions(+), 30 deletions(-)

diff --git a/examples/two-tier/main.tf b/examples/two-tier/main.tf
index 4e15371e10..2f0262020f 100644
--- a/examples/two-tier/main.tf
+++ b/examples/two-tier/main.tf
@@ -58,21 +58,7 @@ resource "google_compute_instance" "www" {
     destination = var.install_script_dest_path
 
     connection {
-      host = coalesce( # Simplify this to reference a specific desired IP address, if possible.
-        concat(
-          # Prefer any available NAT IP address
-          flatten([
-            for ni in self.network_interface : [
-              for ac in ni.access_config : ac.nat_ip
-            ]
-          ]),
-
-          # Otherwise, use the first available LAN IP address
-          [
-            for ni in self.network_interface : ni.network_ip
-          ],
-        )...
-      )
+      host = self.network_interface.0.access_config.0.nat_ip
       type        = "ssh"
       user        = "root"
       private_key = file(var.private_key_path)
@@ -82,21 +68,7 @@ resource "google_compute_instance" "www" {
 
   provisioner "remote-exec" {
     connection {
-      host = coalesce( # Simplify this to reference a specific desired IP address, if possible.
-        concat(
-          # Prefer any available NAT IP address
-          flatten([
-            for ni in self.network_interface : [
-              for ac in ni.access_config : ac.nat_ip
-            ]
-          ]),
-
-          # Otherwise, use the first available LAN IP address
-          [
-            for ni in self.network_interface : ni.network_ip
-          ],
-        )...
-      )
+      host = self.network_interface.0.access_config.0.nat_ip
       type        = "ssh"
       user        = "root"
       private_key = file(var.private_key_path)

From dcd40807635a6c251b2b2515308e2183dd4a9215 Mon Sep 17 00:00:00 2001
From: Megan Bang <mbang@hashicorp.com>
Date: Mon, 4 Nov 2019 15:38:57 -0600
Subject: [PATCH 3/3] update spacing

---
 examples/two-tier/main.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/two-tier/main.tf b/examples/two-tier/main.tf
index 2f0262020f..19a3097392 100644
--- a/examples/two-tier/main.tf
+++ b/examples/two-tier/main.tf
@@ -58,7 +58,7 @@ resource "google_compute_instance" "www" {
     destination = var.install_script_dest_path
 
     connection {
-      host = self.network_interface.0.access_config.0.nat_ip
+      host        = self.network_interface.0.access_config.0.nat_ip
       type        = "ssh"
       user        = "root"
       private_key = file(var.private_key_path)
@@ -68,7 +68,7 @@ resource "google_compute_instance" "www" {
 
   provisioner "remote-exec" {
     connection {
-      host = self.network_interface.0.access_config.0.nat_ip
+      host        = self.network_interface.0.access_config.0.nat_ip
       type        = "ssh"
       user        = "root"
       private_key = file(var.private_key_path)