Skip to content

Add new RDMA_FALCON_POLICY and ULL_POLICY firewall policy types#16256

Merged
ScottSuarez merged 2 commits into
GoogleCloudPlatform:mainfrom
mihhalj:firewall-policy-types
Feb 3, 2026
Merged

Add new RDMA_FALCON_POLICY and ULL_POLICY firewall policy types#16256
ScottSuarez merged 2 commits into
GoogleCloudPlatform:mainfrom
mihhalj:firewall-policy-types

Conversation

@mihhalj
Copy link
Copy Markdown
Contributor

@mihhalj mihhalj commented Jan 29, 2026

The firewall policy type field is used to o define which resources the policy can be associated with (depending on the VPC type), and imposes limitations and validations on the rules in the policy.

We introduce the new policy_types values RDMA_FALCON_POLICY and ULL_POLICY which can be used with Falcon and ULL networks. Please not that new values are available only in Regional Network Firewall Policies.

16256

Release Note Template for Downstream PRs (will be copied)

See Write release notes for guidance.

compute: added new values to `policyType` field in `google_compute_network_firewall_policy`, `google_compute_network_firewall_policy_with_rules`, `google_compute_region_network_firewall_policy`, `google_compute_region_network_firewall_policy_with_rules`.

@github-actions github-actions Bot requested a review from ScottSuarez January 29, 2026 07:52
@github-actions
Copy link
Copy Markdown

Hello! I am a robot. Tests will require approval from a repository maintainer to run.

Googlers: For automatic test runs see go/terraform-auto-test-runs.

@ScottSuarez, a repository maintainer, has been assigned to review your changes. If you have not received review feedback within 2 business days, please leave a comment on this PR asking them to take a look.

You can help make sure that review is quick by doing a self-review and by running impacted tests locally.

@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 8 files changed, 12 insertions(+), 12 deletions(-))
google-beta provider: Diff ( 8 files changed, 12 insertions(+), 12 deletions(-))

Missing test report

Your PR includes resource fields which are not covered by any test.

Resource: google_compute_network_firewall_policy (26 total tests)
Please add an acceptance test which includes these fields. The test should include the following:

resource "google_compute_network_firewall_policy" "primary" {
  policy_type = # value needed
}

Resource: google_compute_network_firewall_policy_with_rules (3 total tests)
Please add an acceptance test which includes these fields. The test should include the following:

resource "google_compute_network_firewall_policy_with_rules" "primary" {
  policy_type = # value needed
}

@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1244
Skipped tests: 86
Affected tests: 0

Click here to see the affected service packages
  • compute

🟢 All tests passed!

View the build log

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 2, 2026

@ScottSuarez This PR has been waiting for review for 3 weekdays. Please take a look! Use the label disable-review-reminders to disable these notifications.

@mihhalj mihhalj force-pushed the firewall-policy-types branch from 870f2f5 to e8d9d99 Compare February 2, 2026 14:15
@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 10 files changed, 16 insertions(+), 12 deletions(-))
google-beta provider: Diff ( 10 files changed, 16 insertions(+), 12 deletions(-))
Open in Cloud Shell: Diff ( 1 file changed, 1 insertion(+))

@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1242
Skipped tests: 86
Affected tests: 2

Click here to see the affected service packages
  • compute

Action taken

Found 2 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit. Click here to see the affected tests
  • TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample
  • TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample

Get to know how VCR tests work

@modular-magician
Copy link
Copy Markdown
Collaborator

🟢 Tests passed during RECORDING mode:
TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample [Debug log]
TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample [Debug log]

🟢 No issues found for passed tests after REPLAYING rerun.


🟢 All tests passed!

View the build log or the debug log for each test

Comment thread mmv1/products/compute/NetworkFirewallPolicy.yaml Outdated
Comment thread mmv1/products/compute/NetworkFirewallPolicyWithRules.yaml Outdated
Copy link
Copy Markdown
Contributor

@cesteve cesteve left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added comments to remove ULL_POLICY from global firewalls policies

@mihhalj mihhalj force-pushed the firewall-policy-types branch 3 times, most recently from 150f7b7 to 727e9e3 Compare February 3, 2026 12:17
@mihhalj mihhalj force-pushed the firewall-policy-types branch from 727e9e3 to 92055d8 Compare February 3, 2026 12:24
@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))
google-beta provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))
Open in Cloud Shell: Diff ( 1 file changed, 1 insertion(+))

@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))
google-beta provider: Diff ( 6 files changed, 8 insertions(+), 6 deletions(-))
Open in Cloud Shell: Diff ( 1 file changed, 1 insertion(+))

@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 6 files changed, 8 insertions(+), 6 deletions(-))
google-beta provider: Diff ( 6 files changed, 8 insertions(+), 6 deletions(-))
Open in Cloud Shell: Diff ( 1 file changed, 1 insertion(+))

@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))
google-beta provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))

@modular-magician
Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes:

Diff report

Your PR generated some diffs in downstreams - here they are.

google provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))
google-beta provider: Diff ( 4 files changed, 6 insertions(+), 6 deletions(-))

@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1242
Skipped tests: 86
Affected tests: 2

Click here to see the affected service packages
  • compute

Action taken

Found 2 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit. Click here to see the affected tests
  • TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample
  • TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample

Get to know how VCR tests work

2 similar comments
@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1242
Skipped tests: 86
Affected tests: 2

Click here to see the affected service packages
  • compute

Action taken

Found 2 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit. Click here to see the affected tests
  • TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample
  • TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample

Get to know how VCR tests work

@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1242
Skipped tests: 86
Affected tests: 2

Click here to see the affected service packages
  • compute

Action taken

Found 2 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit. Click here to see the affected tests
  • TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample
  • TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample

Get to know how VCR tests work

@modular-magician
Copy link
Copy Markdown
Collaborator

🟢 Tests passed during RECORDING mode:
TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample [Debug log]
TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample [Debug log]

🟢 No issues found for passed tests after REPLAYING rerun.


🟢 All tests passed!

View the build log or the debug log for each test

@modular-magician
Copy link
Copy Markdown
Collaborator

🟢 Tests passed during RECORDING mode:
TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample [Debug log]
TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample [Debug log]

🟢 No issues found for passed tests after REPLAYING rerun.


🟢 All tests passed!

View the build log or the debug log for each test

@modular-magician
Copy link
Copy Markdown
Collaborator

🟢 Tests passed during RECORDING mode:
TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample [Debug log]
TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample [Debug log]

🟢 No issues found for passed tests after REPLAYING rerun.


🟢 All tests passed!

View the build log or the debug log for each test

@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1242
Skipped tests: 86
Affected tests: 2

Click here to see the affected service packages
  • compute

Action taken

Found 2 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit. Click here to see the affected tests
  • TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample
  • TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample

Get to know how VCR tests work

1 similar comment
@modular-magician
Copy link
Copy Markdown
Collaborator

Tests analytics

Total tests: 1330
Passed tests: 1242
Skipped tests: 86
Affected tests: 2

Click here to see the affected service packages
  • compute

Action taken

Found 2 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit. Click here to see the affected tests
  • TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample
  • TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample

Get to know how VCR tests work

@modular-magician
Copy link
Copy Markdown
Collaborator

🟢 Tests passed during RECORDING mode:
TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample [Debug log]
TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample [Debug log]

🟢 No issues found for passed tests after REPLAYING rerun.


🟢 All tests passed!

View the build log or the debug log for each test

@modular-magician
Copy link
Copy Markdown
Collaborator

🟢 Tests passed during RECORDING mode:
TestAccComputeNetworkFirewallPolicyWithRules_computeNetworkFirewallPolicyWithRulesFullExample [Debug log]
TestAccComputeNetworkFirewallPolicy_networkFirewallPolicyFullExample [Debug log]

🟢 No issues found for passed tests after REPLAYING rerun.


🟢 All tests passed!

View the build log or the debug log for each test

@ScottSuarez ScottSuarez added this pull request to the merge queue Feb 3, 2026
Merged via the queue into GoogleCloudPlatform:main with commit eb8a77b Feb 3, 2026
25 checks passed
NandiniAgrawal15 pushed a commit to NandiniAgrawal15/magic-modules that referenced this pull request Feb 5, 2026
aditikumarii-google pushed a commit to aditikumarii-google/magic-modules that referenced this pull request Mar 10, 2026
ChuAmberZhang pushed a commit to ChuAmberZhang/magic-modules that referenced this pull request Apr 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants