diff --git a/terraform/environments/production/bi.tf b/terraform/environments/production/bi.tf index 058ec6c74..c4df5ba86 100644 --- a/terraform/environments/production/bi.tf +++ b/terraform/environments/production/bi.tf @@ -190,6 +190,11 @@ resource "google_compute_firewall" "metabase-ssh-ipv4" { ports = [22] } + + log_config { + metadata = "INCLUDE_ALL_METADATA" + } + # Only allows connections using IAP source_ranges = local.iap_ipv4_ranges target_tags = module.metabase.target_tags diff --git a/terraform/environments/production/gateways.tf b/terraform/environments/production/gateways.tf index 12afce7fc..9e0e759b9 100644 --- a/terraform/environments/production/gateways.tf +++ b/terraform/environments/production/gateways.tf @@ -109,6 +109,10 @@ resource "google_compute_firewall" "gateways-ssh-ipv4" { ports = [22] } + log_config { + metadata = "INCLUDE_ALL_METADATA" + } + # Only allows connections using IAP source_ranges = local.iap_ipv4_ranges target_tags = module.gateways[0].target_tags diff --git a/terraform/environments/production/main.tf b/terraform/environments/production/main.tf index 0ec4ebedb..c4567fa19 100644 --- a/terraform/environments/production/main.tf +++ b/terraform/environments/production/main.tf @@ -196,6 +196,10 @@ resource "google_compute_firewall" "ssh-ipv4" { ports = [22] } + log_config { + metadata = "INCLUDE_ALL_METADATA" + } + # Only allows connections using IAP source_ranges = local.iap_ipv4_ranges target_tags = concat( diff --git a/terraform/environments/production/relays.tf b/terraform/environments/production/relays.tf index 40d265300..51846013f 100644 --- a/terraform/environments/production/relays.tf +++ b/terraform/environments/production/relays.tf @@ -146,6 +146,10 @@ resource "google_compute_firewall" "relays-ssh-ipv4" { ports = [22] } + log_config { + metadata = "INCLUDE_ALL_METADATA" + } + # Only allows connections using IAP source_ranges = local.iap_ipv4_ranges target_tags = module.relays[0].target_tags