Skip to content

Latest commit

 

History

History
55 lines (35 loc) · 2.68 KB

google_compute_ssl_policy.md

File metadata and controls

55 lines (35 loc) · 2.68 KB
Raw
title platform
About the google_compute_ssl_policy resource
gcp

Syntax

A google_compute_ssl_policy is used to test a Google SslPolicy resource

Examples

describe google_compute_ssl_policy(project: 'chef-gcp-inspec', name: 'inspec-gcp-ssl-policy') do
  it { should exist }
  its('min_tls_version') { should eq 'TLS_1_2' }
  its('profile') { should eq 'CUSTOM' }
  its('custom_features') { should include 'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384' }
  its('custom_features') { should include 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384' }
end

describe google_compute_ssl_policy(project: 'chef-gcp-inspec', name: 'nonexistent') do
  it { should_not exist }
end

Properties

Properties that can be accessed from the google_compute_ssl_policy resource:

  • creation_timestamp: Creation timestamp in RFC3339 text format.

  • description: An optional description of this resource.

  • id: The unique identifier for the resource.

  • name: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.

  • profile: Profile specifies the set of SSL features that can be used by the load balancer when negotiating SSL with clients. This can be one of COMPATIBLE, MODERN, RESTRICTED, or CUSTOM. If using CUSTOM, the set of SSL features to enable must be specified in the customFeatures field.

  • min_tls_version: The minimum version of SSL protocol that can be used by the clients to establish a connection with the load balancer. This can be one of TLS_1_0, TLS_1_1, TLS_1_2.

  • enabled_features: The list of features enabled in the SSL policy.

  • custom_features: A list of features enabled when the selected profile is CUSTOM. The method returns the set of features that can be specified in this list. This field must be empty if the profile is not CUSTOM.

  • fingerprint: Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking.

  • warnings: If potential misconfigurations are detected for this SSL policy, this field will be populated with warning messages.

    • code: A warning code, if applicable.

    • message: A human-readable description of the warning code.

GCP Permissions

Ensure the Compute Engine API is enabled for the current project.