Parameter |
Choices/Defaults |
Comments |
auth_kind
required |
Choices:
- machineaccount
- serviceaccount
- application
|
The type of credential used.
|
description
|
|
An optional description of this resource.
|
ike_version
|
Default:
2
|
IKE protocol version to use when establishing the VPN tunnel with peer VPN gateway.
Acceptable IKE versions are 1 or 2. Default version is 2.
|
labels
|
|
Labels to apply to this VpnTunnel.
|
local_traffic_selector
|
|
Local traffic selector to use when establishing the VPN tunnel with peer VPN gateway. The value should be a CIDR formatted string, for example `192.168.0.0/16`. The ranges should be disjoint.
Only IPv4 is supported.
|
name
required |
|
Name of the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
|
peer_ip
required |
|
IP address of the peer VPN gateway. Only IPv4 is supported.
|
project
|
Default:
None
|
The Google Cloud Platform project to use.
|
region
required |
|
The region where the tunnel is located.
|
remote_traffic_selector
|
|
Remote traffic selector to use when establishing the VPN tunnel with peer VPN gateway. The value should be a CIDR formatted string, for example `192.168.0.0/16`. The ranges should be disjoint.
Only IPv4 is supported.
|
router
|
|
URL of router resource to be used for dynamic routing.
|
scopes
|
|
Array of scopes to be used.
|
service_account_email
|
|
An optional service account email address if machineaccount is selected and the user does not wish to use the default email.
|
service_account_file
|
|
The path of a Service Account JSON file if serviceaccount is selected as type.
|
shared_secret
required |
|
Shared secret used to set the secure session between the Cloud VPN gateway and the peer VPN gateway.
|
state
|
Choices:
present ←
- absent
|
Whether the given object should exist in GCP
|
target_vpn_gateway
required |
|
URL of the Target VPN gateway with which this VPN tunnel is associated.
|