using System.Collections.Generic;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var cloudflare = Cloudflare.GetIpRanges.Invoke();

    var allowCloudflareIngress = new Gcp.Compute.Firewall("allowCloudflareIngress", new()
    {
        Network = "default",
        SourceRanges = cloudflare.Apply(getIpRangesResult => getIpRangesResult.Ipv4CidrBlocks),
        Allows = new[]
        {
            new Gcp.Compute.Inputs.FirewallAllowArgs
            {
                Ports = "443",
                Protocol = "tcp",
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v4/go/cloudflare"
	"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/compute"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cloudflare, err := cloudflare.GetIpRanges(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = compute.NewFirewall(ctx, "allowCloudflareIngress", &compute.FirewallArgs{
			Network:      pulumi.String("default"),
			SourceRanges: interface{}(cloudflare.Ipv4CidrBlocks),
			Allows: compute.FirewallAllowArray{
				&compute.FirewallAllowArgs{
					Ports:    pulumi.StringArray("443"),
					Protocol: pulumi.String("tcp"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.gcp.compute.Firewall;
import com.pulumi.gcp.compute.FirewallArgs;
import com.pulumi.gcp.compute.inputs.FirewallAllowArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var cloudflare = CloudflareFunctions.getIpRanges();

        var allowCloudflareIngress = new Firewall("allowCloudflareIngress", FirewallArgs.builder()        
            .network("default")
            .sourceRanges(cloudflare.applyValue(getIpRangesResult -> getIpRangesResult.ipv4CidrBlocks()))
            .allows(FirewallAllowArgs.builder()
                .ports("443")
                .protocol("tcp")
                .build())
            .build());

    }
}

import pulumi
import pulumi_cloudflare as cloudflare
import pulumi_gcp as gcp

cloudflare = cloudflare.get_ip_ranges()
allow_cloudflare_ingress = gcp.compute.Firewall("allowCloudflareIngress",
    network="default",
    source_ranges=cloudflare.ipv4_cidr_blocks,
    allows=[gcp.compute.FirewallAllowArgs(
        ports="443",
        protocol="tcp",
    )])

import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";
import * as gcp from "@pulumi/gcp";

const cloudflare = cloudflare.getIpRanges({});
const allowCloudflareIngress = new gcp.compute.Firewall("allowCloudflareIngress", {
    network: "default",
    sourceRanges: cloudflare.then(cloudflare => cloudflare.ipv4CidrBlocks),
    allows: [{
        ports: "443",
        protocol: "tcp",
    }],
});

resources:
  allowCloudflareIngress:
    type: gcp:compute:Firewall
    properties:
      network: default
      sourceRanges: ${cloudflare.ipv4CidrBlocks}
      allows:
        - ports: '443'
          protocol: tcp
variables:
  cloudflare:
    fn::invoke:
      Function: cloudflare:getIpRanges
      Arguments: {}