Generates a firewalld ipset from the current list of GCP IPs

gcp_firewalld_ipset.py

#!/usr/bin/env python3

import xml.etree.ElementTree as ET

from urllib.request import urlopen
from json import loads as json_loads
from xml.dom import minidom


def main():
    ipset = ET.Element("ipset", attrib={"type": "hash:net"})
    ipset_short = ET.SubElement(ipset, "short")
    ipset_short.text = "Google Cloud Platform IP ranges"

    with urlopen("https://www.gstatic.com/ipranges/cloud.json") as url:
        gcp_ipsets = json_loads(url.read().decode("utf-8"))

    for gcp_ipset in gcp_ipsets["prefixes"]:
        if "ipv4Prefix" not in gcp_ipset.keys():
            continue
       
        subnet = gcp_ipset["ipv4Prefix"]
        current_entry = ET.SubElement(ipset, "entry")
        current_entry.text = subnet


    dom = minidom.parseString(ET.tostring(ipset, encoding="unicode"))
    print(dom.toprettyxml())


if __name__ == "__main__":
    main()