diff --git a/4-projects/BU_NAME/development/example_peering_project.tf b/4-projects/BU_NAME/development/example_peering_project.tf index 4584262..dc2a00d 100644 --- a/4-projects/BU_NAME/development/example_peering_project.tf +++ b/4-projects/BU_NAME/development/example_peering_project.tf @@ -254,3 +254,14 @@ resource "google_compute_firewall" "allow_lb" { target_tags = ["allow-lb"] } + +##enable dns policy on Peering vpc +resource "google_dns_policy" "default_policy" { + project = module.peering_project.project_id + name = "dp-peering-policy" + enable_inbound_forwarding = "true" + enable_logging = "true" + networks { + network_url = module.peering_network.network_self_link + } +} diff --git a/4-projects/BU_NAME/production/example_peering_project.tf b/4-projects/BU_NAME/production/example_peering_project.tf index 689418e..964ec34 100644 --- a/4-projects/BU_NAME/production/example_peering_project.tf +++ b/4-projects/BU_NAME/production/example_peering_project.tf @@ -254,3 +254,14 @@ resource "google_compute_firewall" "allow_lb" { target_tags = ["allow-lb"] } + +##enable dns policy on Peering vpc +resource "google_dns_policy" "default_policy" { + project = module.peering_project.project_id + name = "dp-peering-policy" + enable_inbound_forwarding = "true" + enable_logging = "true" + networks { + network_url = module.peering_network.network_self_link + } +} \ No newline at end of file diff --git a/4-projects/BU_NAME/staging/example_peering_project.tf b/4-projects/BU_NAME/staging/example_peering_project.tf index f58ad86..70f4b1d 100644 --- a/4-projects/BU_NAME/staging/example_peering_project.tf +++ b/4-projects/BU_NAME/staging/example_peering_project.tf @@ -254,3 +254,14 @@ resource "google_compute_firewall" "allow_lb" { target_tags = ["allow-lb"] } + +##enable dns policy on Peering vpc +resource "google_dns_policy" "default_policy" { + project = module.peering_project.project_id + name = "dp-peering-policy" + enable_inbound_forwarding = "true" + enable_logging = "true" + networks { + network_url = module.peering_network.network_self_link + } +} \ No newline at end of file diff --git a/modules/terraform-google-github-actions-runners/modules/gh-runner-mig-vm/main.tf b/modules/terraform-google-github-actions-runners/modules/gh-runner-mig-vm/main.tf index 9ca20f5..276a143 100644 --- a/modules/terraform-google-github-actions-runners/modules/gh-runner-mig-vm/main.tf +++ b/modules/terraform-google-github-actions-runners/modules/gh-runner-mig-vm/main.tf @@ -145,6 +145,9 @@ module "mig_template" { source_image_project = var.source_image_project startup_script = local.startup_script source_image = var.source_image + shielded_instance_config = { + enable_secure_boot = true + } metadata = merge({ "secret-id" = google_secret_manager_secret_version.gh-secret-version.name }, {