Cloud NAT for shared VPC

cloud-nat-shared-vpc.tf

resource "google_compute_router" "vpc_router" {
  project = var.project_id

  name    = "${local.vpc_name}-${var.region}-nat-router"
  region  = var.region
  network = module.vpc.network_self_link
}

resource "google_compute_address" "vpc_nat_ip" {
  project = var.project_id

  name   = "${local.vpc_name}-${var.region}-egress-nat-ip"
  region = var.region
}

resource "google_compute_router_nat" "vpc_nat" {
  project = var.project_id

  name   = "${local.vpc_name}-${var.region}-egress-nat"
  region = var.region
  router = google_compute_router.vpc_router.name

  nat_ip_allocate_option = "MANUAL_ONLY"
  nat_ips                = google_compute_address.vpc_nat_ip.*.self_link

  source_subnetwork_ip_ranges_to_nat = "LIST_OF_SUBNETWORKS"

  subnetwork {
    name                    = module.vpc.subnets["${var.region}/${local.vpc_name}-${var.region}-private"].self_link
    source_ip_ranges_to_nat = ["ALL_IP_RANGES"]
  }

  log_config {
    filter = "TRANSLATIONS_ONLY"
    enable = true
  }
}