Add direct VPC egress

LibOps · Jul 10, 2024 · 01f81f5 · 01f81f5
1 parent fe6b781
commit 01f81f5
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/modules/cloudrun/main.tf b/modules/cloudrun/main.tf
@@ -11,6 +11,20 @@ terraform {
   }
 }
 
+locals
+  direct_vpc  = <<EOT
+        [
+          {
+            "network": "default",
+            "subnetwork" : "default",
+            "tags": [
+              "lnmp"
+            ]
+          }
+        ]
+EOT
+}
+
 data "google_service_account" "service_account" {
   account_id = "cr-microservices"
 }
@@ -46,6 +60,8 @@ resource "google_cloud_run_service" "cloudrun" {
         "autoscaling.knative.dev/minScale" : var.min_instances,
         "autoscaling.knative.dev/maxScale" : var.max_instances,
         "run.googleapis.com/cpu-throttling" : true,
+        "run.googleapis.com/network-interfaces" : local.direct_vpc,
+        "run.googleapis.com/vpc-access-egress" : "all-traffic",
       }
     }
     spec {