github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/google/compute/no_public_ip.tf.go (about)

     1  package compute
     2  
     3  var terraformNoPublicIpGoodExamples = []string{
     4  	`
     5   resource "google_compute_instance" "good_example" {
     6     name         = "test"
     7     machine_type = "e2-medium"
     8     zone         = "us-central1-a"
     9   
    10     tags = ["foo", "bar"]
    11   
    12     boot_disk {
    13       initialize_params {
    14         image = "debian-cloud/debian-9"
    15       }
    16     }
    17   
    18     // Local SSD disk
    19     scratch_disk {
    20       interface = "SCSI"
    21     }
    22   
    23     network_interface {
    24       network = "default"
    25     }
    26   }
    27   `,
    28  }
    29  
    30  var terraformNoPublicIpBadExamples = []string{
    31  	`
    32   resource "google_compute_instance" "bad_example" {
    33     name         = "test"
    34     machine_type = "e2-medium"
    35     zone         = "us-central1-a"
    36   
    37     tags = ["foo", "bar"]
    38   
    39     boot_disk {
    40       initialize_params {
    41         image = "debian-cloud/debian-9"
    42       }
    43     }
    44   
    45     // Local SSD disk
    46     scratch_disk {
    47       interface = "SCSI"
    48     }
    49   
    50     network_interface {
    51       network = "default"
    52   
    53       access_config {
    54         // Ephemeral IP
    55       }
    56     }
    57   }
    58   `,
    59  }
    60  
    61  var terraformNoPublicIpLinks = []string{
    62  	`https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_instance#access_config`,
    63  }
    64  
    65  var terraformNoPublicIpRemediationMarkdown = ``