Skip to main content

google_compute_ssl_policy resource

Syntax

A google_compute_ssl_policy is used to test a Google SslPolicy resource

Beta Resource

This resource has beta fields available. To retrieve these fields, include beta: true in the constructor for the resource

Examples

describe google_compute_ssl_policy(project: 'chef-gcp-inspec', name: 'inspec-gcp-ssl-policy') do
  it { should exist }
  its('min_tls_version') { should eq 'TLS_1_2' }
  its('profile') { should eq 'CUSTOM' }
  its('custom_features') { should include 'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384' }
  its('custom_features') { should include 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384' }
end

describe google_compute_ssl_policy(project: 'chef-gcp-inspec', name: 'nonexistent') do
  it { should_not exist }
end

Properties

Properties that can be accessed from the google_compute_ssl_policy resource:

creation_timestamp
Creation timestamp in RFC3339 text format.
description
An optional description of this resource.
id
The unique identifier for the resource.
name
Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
profile
Profile specifies the set of SSL features that can be used by the load balancer when negotiating SSL with clients. If using CUSTOM, the set of SSL features to enable must be specified in the customFeatures field.

Possible values:

  • COMPATIBLE
  • MODERN
  • RESTRICTED
  • CUSTOM
min_tls_version
The minimum version of SSL protocol that can be used by the clients to establish a connection with the load balancer.

Possible values:

  • TLS_1_0
  • TLS_1_1
  • TLS_1_2
enabled_features
The list of features enabled in the SSL policy.
custom_features
A list of features enabled when the selected profile is CUSTOM. The method returns the set of features that can be specified in this list. This field must be empty if the profile is not CUSTOM.
fingerprint
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking.
warnings
If potential misconfigurations are detected for this SSL policy, this field will be populated with warning messages.
code
A warning code, if applicable.
message
A human-readable description of the warning code.

GCP Permissions

Ensure the Compute Engine API is enabled for the current project.

Edit this page on GitHub

Thank you for your feedback!

×









Search Results