Set the vpc_connector_egress_settings attribute to PRIVATE_RANGES_ONLY in google_cloudfunctions_function resource.

Set the service_config[_].vpc_connector_egress_settings attribute to PRIVATE_RANGES_ONLY in google_cloudfunctions2_function resource.

Example Configuration

resource "google_cloudfunctions_function" "allow" {
  name        = "function-test1"
  description = "My function"
  runtime     = "nodejs20"
  available_memory_mb   = 128
  source_archive_bucket = google_storage_bucket.bucket.name
  source_archive_object = google_storage_bucket_object.object.name
  trigger_http          = true
  entry_point           = "helloWorld"
  depends_on            = [ google_vpc_access_connector.vpc_connector ]
  vpc_connector         = "projects/zelarsoft-snyk/locations/us-central1/connectors/vpc-con"
  vpc_connector_egress_settings = "PRIVATE_RANGES_ONLY"
  }
  
resource "google_cloudfunctions2_function" "allow2" {
  name = "gen2function-test"
  location = "us-central1"
  description = "a new function"
  depends_on            = [ google_vpc_access_connector.vpc_connector ]

  build_config {
    runtime = "nodejs20"
    entry_point = "helloHttp"
    source {
      storage_source {
        bucket = google_storage_bucket.bucket2.name
        object = google_storage_bucket_object.object2.name
      }
    }
  }

  service_config {
    max_instance_count  = 1
    available_memory    = "256M"
    vpc_connector         = "projects/zelarsoft-snyk/locations/us-central1/connectors/vpc-con"
    vpc_connector_egress_settings = "PRIVATE_RANGES_ONLY"
  }
}