Add vpc flow logs option to subnets

README.md

@@ -23,12 +23,14 @@ module "vpc" {
             subnet_ip             = "10.10.10.0/24"
             subnet_region         = "us-west1"
             subnet_private_access = false
+            subnet_flow_logs      = true
         },
         {
             subnet_name           = "subnet-02"
             subnet_ip             = "10.10.20.0/24"
             subnet_region         = "us-west1"
             subnet_private_access = false
+            subnet_flow_logs      = true
         },
     ]
 
@@ -73,6 +75,7 @@ Then perform the following commands on the root folder:
 | subnets_ips | The IP and cidrs of the subnets being created |
 | subnets_names | The names of the subnets being created |
 | subnets_private_access | Whether the subnets will have access to Google API's without a public IP |
+| subnet_flow_logs | Whether the subnets will have VPC flow logs enabled |
 | subnets_regions | The region where the subnets will be created |
 | subnets_secondary_ranges | The secondary ranges associated with these subnets |
 

examples/multi_vpc/main.tf

@@ -25,18 +25,21 @@ module "test-vpc-module-01" {
       subnet_ip             = "10.10.10.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
     {
       subnet_name           = "test-network-01-subnet-02"
       subnet_ip             = "10.10.20.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
     {
       subnet_name           = "test-network-01-subnet-03"
       subnet_ip             = "10.10.30.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
   ]
 
@@ -74,12 +77,14 @@ module "test-vpc-module-02" {
       subnet_ip             = "10.10.40.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
     {
       subnet_name           = "test-network-02-subnet-02"
       subnet_ip             = "10.10.50.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
   ]
 

examples/simple_project/main.tf

@@ -25,12 +25,14 @@ module "test-vpc-module" {
       subnet_ip             = "10.10.10.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
     {
       subnet_name           = "subnet-02"
       subnet_ip             = "10.10.20.0/24"
       subnet_region         = "us-west1"
       subnet_private_access = false
+      subnet_flow_logs      = true 
     },
   ]
 

main.tf

@@ -34,6 +34,7 @@ resource "google_compute_subnetwork" "subnetwork" {
   ip_cidr_range            = "${lookup(var.subnets[count.index], "subnet_ip")}"
   region                   = "${lookup(var.subnets[count.index], "subnet_region")}"
   private_ip_google_access = "${lookup(var.subnets[count.index], "subnet_private_access")}"
+  enable_flow_logs         = "${lookup(var.subnets[count.index], "subnet_flow_logs")}"
   network                  = "${google_compute_network.network.name}"
   project                  = "${var.project_id}"
 

outputs.tf

@@ -39,6 +39,11 @@ output "subnets_private_access" {
   description = "Whether the subnets will have access to Google API's without a public IP"
 }
 
+output "subnets_flow_logs" {
+  value       = "${google_compute_subnetwork.subnetwork.*.enable_flow_logs}"
+  description = "Whether the subnets will have VPC flow logs enabled"
+}
+
 output "subnets_secondary_ranges" {
   value       = "${google_compute_subnetwork.subnetwork.*.secondary_ip_range}"
   description = "The secondary ranges associated with these subnets"