Allow using existing boot disk in compute-vm module (#1241)

* allow using existing boot disk in compute-vm module * allow setting initialize params to null * tests * fast * blueprints
2023-03-12 10:53:59 +01:00
parent 6aa0fde85b
commit 112d9a8d9c
12 changed files with 97 additions and 104 deletions
--- a/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/onprem.tf
+++ b/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/onprem.tf
@@ -83,9 +83,9 @@ module "instance_template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  create_template = true
  metadata = {
--- a/blueprints/networking/filtering-proxy-psc/consumer.tf
+++ b/blueprints/networking/filtering-proxy-psc/consumer.tf
@@ -48,11 +48,6 @@ module "test-vm-consumer" {
    nat        = false
    addresses  = null
  }]
-  boot_disk = {
-    image = "debian-cloud/debian-10"
-    type  = "pd-standard"
-    size  = 10
-  }
  service_account_create = true
  metadata = {
    startup-script = templatefile("${path.module}/startup.sh", { proxy_url = "http://proxy.internal:3128" })
@@ -60,7 +55,7 @@ module "test-vm-consumer" {
 }

 ###############################################################################
-#                                 PSC Consuner                                #
+#                                 PSC Consumer                                #
 ###############################################################################

 resource "google_compute_address" "psc_endpoint_address" {
--- a/blueprints/networking/filtering-proxy-psc/main.tf
+++ b/blueprints/networking/filtering-proxy-psc/main.tf
@@ -147,7 +147,9 @@ module "squid-vm" {
    subnetwork = module.vpc.subnet_self_links["${var.region}/proxy"]
  }]
  boot_disk = {
-    image = "cos-cloud/cos-stable"
+    initialize_params = {
+      image = "cos-cloud/cos-stable"
+    }
  }
  service_account        = module.service-account-squid.email
  service_account_scopes = ["https://www.googleapis.com/auth/cloud-platform"]
--- a/blueprints/networking/filtering-proxy/main.tf
+++ b/blueprints/networking/filtering-proxy/main.tf
@@ -156,7 +156,9 @@ module "squid-vm" {
    subnetwork = module.vpc.subnet_self_links["${var.region}/proxy"]
  }]
  boot_disk = {
-    image = "cos-cloud/cos-stable"
+    initialize_params = {
+      image = "cos-cloud/cos-stable"
+    }
  }
  service_account        = module.service-account-squid.email
  service_account_scopes = ["https://www.googleapis.com/auth/cloud-platform"]
@@ -261,10 +263,5 @@ module "test-vm" {
    nat        = false
    addresses  = null
  }]
-  boot_disk = {
-    image = "debian-cloud/debian-10"
-    type  = "pd-standard"
-    size  = 10
-  }
  service_account_create = true
 }
--- a/blueprints/networking/glb-and-armor/main.tf
+++ b/blueprints/networking/glb-and-armor/main.tf
@@ -92,9 +92,6 @@ module "instance_template_ew1" {
    network    = module.vpc.self_link
    subnetwork = module.vpc.subnet_self_links["europe-west1/subnet-ew1"]
  }]
-  boot_disk = {
-    image = "projects/debian-cloud/global/images/family/debian-11"
-  }
  metadata = {
    startup-script-url = "gs://cloud-training/gcpnet/httplb/startup.sh"
  }
@@ -113,9 +110,6 @@ module "instance_template_ue1" {
    network    = module.vpc.self_link
    subnetwork = module.vpc.subnet_self_links["us-east1/subnet-ue1"]
  }]
-  boot_disk = {
-    image = "projects/debian-cloud/global/images/family/debian-11"
-  }
  metadata = {
    startup-script-url = "gs://cloud-training/gcpnet/httplb/startup.sh"
  }
@@ -136,9 +130,6 @@ module "vm_siege" {
    subnetwork = module.vpc.subnet_self_links["us-west1/subnet-uw1"]
    nat        = true
  }]
-  boot_disk = {
-    image = "projects/debian-cloud/global/images/family/debian-11"
-  }
  metadata = {
    startup-script = <<EOT
    #!/bin/bash
--- a/fast/stages/2-networking-c-nva/nva.tf
+++ b/fast/stages/2-networking-c-nva/nva.tf
@@ -81,9 +81,9 @@ module "nva-template" {
    }
  ]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    size  = 10
-    type  = "pd-balanced"
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  options = {
    allow_stopping_for_update = true
--- a/modules/compute-mig/README.md
+++ b/modules/compute-mig/README.md
@@ -28,9 +28,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  create_template = true
  metadata = {
@@ -71,9 +71,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  create_template = true
  metadata = {
@@ -122,9 +122,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  create_template = true
  metadata = {
@@ -174,9 +174,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  create_template = true
  metadata = {
@@ -225,9 +225,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  create_template = true
  metadata = {
@@ -282,9 +282,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  attached_disks = [{
    name        = "repd-1"
@@ -352,9 +352,9 @@ module "nginx-template" {
    addresses  = null
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
-    type  = "pd-ssd"
-    size  = 10
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  attached_disks = [{
    name        = "repd-1"
--- a/modules/compute-vm/README.md
+++ b/modules/compute-vm/README.md
@@ -8,6 +8,7 @@ This module can operate in two distinct modes:
 In both modes, an optional service account can be created and assigned to either instances or template. If you need a managed instance group when using the module in template mode, refer to the [`compute-mig`](../compute-mig) module.

 ## Examples
+
 - [Instance using defaults](#instance-using-defaults)
 - [Service account management](#service-account-management)
 - [Disk management](#disk-management)
@@ -25,7 +26,6 @@ In both modes, an optional service account can be created and assigned to either
 - [Instance template](#instance-template)
 - [Instance group](#instance-group)

-
 ### Instance using defaults

 The simplest example leverages defaults for the boot disk image and size, and uses a service account created by the module. Multiple instances can be managed via the `instance_count` variable.
@@ -48,6 +48,7 @@ module "simple-vm-example" {
 ### Service account management

 VM service accounts can be managed in three different ways:
+
 - You can let the module create a service account for you by settting `service_account_create = true`
 - You can use an existing service account by setting `service_account_create = false` (the default value) and passing the full email address of the service account to the `service_account` variable. This is useful, for example, if you want to reuse the service account from another previously created instance, or if you want to create the service account manually with the `iam-service-account` module. In this case, you probably also want to set `service_account_scopes` to `cloud-platform`.
 - Lastly, you can use the default compute service account by setting `service_account_crate = false`. Please note that using the default compute service account is not recommended.
@@ -285,8 +286,10 @@ module "vm-with-gvnic" {
  zone       = "europe-west1-b"
  name       = "test"
  boot_disk = {
-    image = google_compute_image.cos-gvnic.self_link
-    type  = "pd-ssd"
+    initialize_params = {
+      image = google_compute_image.cos-gvnic.self_link
+      type  = "pd-ssd"
+    }
  }
  network_interfaces = [{
    network    = var.vpc.self_link
@@ -428,9 +431,6 @@ module "kms-vm-example" {
    size = 10
  }]
  service_account_create = true
-  boot_disk = {
-    image = "projects/debian-cloud/global/images/family/debian-10"
-  }
  encryption = {
    encrypt_boot      = true
    kms_key_self_link = var.kms_key.self_link
@@ -439,7 +439,6 @@ module "kms-vm-example" {
 # tftest modules=1 resources=3 inventory=cmek.yaml
 ```

-
 ### Instance template

 This example shows how to use the module to manage an instance template that defines an additional attached disk for each instance, and overrides defaults for the boot disk image and service account.
@@ -455,7 +454,9 @@ module "cos-test" {
    subnetwork = var.subnet.self_link
  }]
  boot_disk = {
-    image = "projects/cos-cloud/global/images/family/cos-stable"
+    initialize_params = {
+      image = "projects/cos-cloud/global/images/family/cos-stable"
+    }
  }
  attached_disks = [
    {
@@ -505,34 +506,34 @@ module "instance-group" {

 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [name](variables.tf#L181) | Instance name. | <code>string</code> | ✓ |  |
-| [network_interfaces](variables.tf#L186) | Network interfaces configuration. Use self links for Shared VPC, set addresses to null if not needed. | <code title="list&#40;object&#40;&#123;&#10;  nat        &#61; optional&#40;bool, false&#41;&#10;  network    &#61; string&#10;  subnetwork &#61; string&#10;  addresses &#61; optional&#40;object&#40;&#123;&#10;    internal &#61; string&#10;    external &#61; string&#10;  &#125;&#41;, null&#41;&#10;  alias_ips &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  nic_type  &#61; optional&#40;string&#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | ✓ |  |
-| [project_id](variables.tf#L223) | Project id. | <code>string</code> | ✓ |  |
-| [zone](variables.tf#L282) | Compute zone. | <code>string</code> | ✓ |  |
+| [name](variables.tf#L182) | Instance name. | <code>string</code> | ✓ |  |
+| [network_interfaces](variables.tf#L187) | Network interfaces configuration. Use self links for Shared VPC, set addresses to null if not needed. | <code title="list&#40;object&#40;&#123;&#10;  nat        &#61; optional&#40;bool, false&#41;&#10;  network    &#61; string&#10;  subnetwork &#61; string&#10;  addresses &#61; optional&#40;object&#40;&#123;&#10;    internal &#61; string&#10;    external &#61; string&#10;  &#125;&#41;, null&#41;&#10;  alias_ips &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  nic_type  &#61; optional&#40;string&#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | ✓ |  |
+| [project_id](variables.tf#L224) | Project id. | <code>string</code> | ✓ |  |
+| [zone](variables.tf#L283) | Compute zone. | <code>string</code> | ✓ |  |
 | [attached_disk_defaults](variables.tf#L17) | Defaults for attached disks options. | <code title="object&#40;&#123;&#10;  auto_delete  &#61; optional&#40;bool, false&#41;&#10;  mode         &#61; string&#10;  replica_zone &#61; string&#10;  type         &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  auto_delete  &#61; true&#10;  mode         &#61; &#34;READ_WRITE&#34;&#10;  replica_zone &#61; null&#10;  type         &#61; &#34;pd-balanced&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [attached_disks](variables.tf#L38) | Additional disks, if options is null defaults will be used in its place. Source type is one of 'image' (zonal disks in vms and template), 'snapshot' (vm), 'existing', and null. | <code title="list&#40;object&#40;&#123;&#10;  name        &#61; string&#10;  device_name &#61; optional&#40;string&#41;&#10;  size        &#61; string&#10;  source      &#61; optional&#40;string&#41;&#10;  source_type &#61; optional&#40;string&#41;&#10;  options &#61; optional&#40;&#10;    object&#40;&#123;&#10;      auto_delete  &#61; optional&#40;bool, false&#41;&#10;      mode         &#61; optional&#40;string, &#34;READ_WRITE&#34;&#41;&#10;      replica_zone &#61; optional&#40;string&#41;&#10;      type         &#61; optional&#40;string, &#34;pd-balanced&#34;&#41;&#10;    &#125;&#41;,&#10;    &#123;&#10;      auto_delete  &#61; true&#10;      mode         &#61; &#34;READ_WRITE&#34;&#10;      replica_zone &#61; null&#10;      type         &#61; &#34;pd-balanced&#34;&#10;    &#125;&#10;  &#41;&#10;&#125;&#41;&#41;">list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>&#91;&#93;</code> |
-| [boot_disk](variables.tf#L82) | Boot disk properties. | <code title="object&#40;&#123;&#10;  auto_delete &#61; optional&#40;bool, true&#41;&#10;  image       &#61; optional&#40;string, &#34;projects&#47;debian-cloud&#47;global&#47;images&#47;family&#47;debian-11&#34;&#41;&#10;  size        &#61; optional&#40;number, 10&#41;&#10;  type        &#61; optional&#40;string, &#34;pd-balanced&#34;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  auto_delete &#61; true&#10;  image       &#61; &#34;projects&#47;debian-cloud&#47;global&#47;images&#47;family&#47;debian-11&#34;&#10;  type        &#61; &#34;pd-balanced&#34;&#10;  size        &#61; 10&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [can_ip_forward](variables.tf#L98) | Enable IP forwarding. | <code>bool</code> |  | <code>false</code> |
-| [confidential_compute](variables.tf#L104) | Enable Confidential Compute for these instances. | <code>bool</code> |  | <code>false</code> |
-| [create_template](variables.tf#L110) | Create instance template instead of instances. | <code>bool</code> |  | <code>false</code> |
-| [description](variables.tf#L115) | Description of a Compute Instance. | <code>string</code> |  | <code>&#34;Managed by the compute-vm Terraform module.&#34;</code> |
-| [enable_display](variables.tf#L121) | Enable virtual display on the instances. | <code>bool</code> |  | <code>false</code> |
-| [encryption](variables.tf#L127) | Encryption options. Only one of kms_key_self_link and disk_encryption_key_raw may be set. If needed, you can specify to encrypt or not the boot disk. | <code title="object&#40;&#123;&#10;  encrypt_boot            &#61; optional&#40;bool, false&#41;&#10;  disk_encryption_key_raw &#61; optional&#40;string&#41;&#10;  kms_key_self_link       &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [group](variables.tf#L137) | Define this variable to create an instance group for instances. Disabled for template use. | <code title="object&#40;&#123;&#10;  named_ports &#61; map&#40;number&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [hostname](variables.tf#L145) | Instance FQDN name. | <code>string</code> |  | <code>null</code> |
-| [iam](variables.tf#L151) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
-| [instance_type](variables.tf#L157) | Instance type. | <code>string</code> |  | <code>&#34;f1-micro&#34;</code> |
-| [labels](variables.tf#L163) | Instance labels. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |
-| [metadata](variables.tf#L169) | Instance metadata. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |
-| [min_cpu_platform](variables.tf#L175) | Minimum CPU platform. | <code>string</code> |  | <code>null</code> |
-| [options](variables.tf#L201) | Instance options. | <code title="object&#40;&#123;&#10;  allow_stopping_for_update &#61; optional&#40;bool, true&#41;&#10;  deletion_protection       &#61; optional&#40;bool, false&#41;&#10;  spot                      &#61; optional&#40;bool, false&#41;&#10;  termination_action        &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  allow_stopping_for_update &#61; true&#10;  deletion_protection       &#61; false&#10;  spot                      &#61; false&#10;  termination_action        &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [scratch_disks](variables.tf#L228) | Scratch disks configuration. | <code title="object&#40;&#123;&#10;  count     &#61; number&#10;  interface &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  count     &#61; 0&#10;  interface &#61; &#34;NVME&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [service_account](variables.tf#L240) | Service account email. Unused if service account is auto-created. | <code>string</code> |  | <code>null</code> |
-| [service_account_create](variables.tf#L246) | Auto-create service account. | <code>bool</code> |  | <code>false</code> |
-| [service_account_scopes](variables.tf#L254) | Scopes applied to service account. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
-| [shielded_config](variables.tf#L260) | Shielded VM configuration of the instances. | <code title="object&#40;&#123;&#10;  enable_secure_boot          &#61; bool&#10;  enable_vtpm                 &#61; bool&#10;  enable_integrity_monitoring &#61; bool&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [tag_bindings](variables.tf#L270) | Tag bindings for this instance, in key => tag value id format. | <code>map&#40;string&#41;</code> |  | <code>null</code> |
-| [tags](variables.tf#L276) | Instance network tags for firewall rule targets. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
+| [boot_disk](variables.tf#L82) | Boot disk properties. | <code title="object&#40;&#123;&#10;  auto_delete &#61; optional&#40;bool, true&#41;&#10;  source      &#61; optional&#40;string&#41;&#10;  initialize_params &#61; optional&#40;object&#40;&#123;&#10;    image &#61; optional&#40;string, &#34;projects&#47;debian-cloud&#47;global&#47;images&#47;family&#47;debian-11&#34;&#41;&#10;    size  &#61; optional&#40;number, 10&#41;&#10;    type  &#61; optional&#40;string, &#34;pd-balanced&#34;&#41;&#10;  &#125;&#41;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  initialize_params &#61; &#123;&#125;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [can_ip_forward](variables.tf#L99) | Enable IP forwarding. | <code>bool</code> |  | <code>false</code> |
+| [confidential_compute](variables.tf#L105) | Enable Confidential Compute for these instances. | <code>bool</code> |  | <code>false</code> |
+| [create_template](variables.tf#L111) | Create instance template instead of instances. | <code>bool</code> |  | <code>false</code> |
+| [description](variables.tf#L116) | Description of a Compute Instance. | <code>string</code> |  | <code>&#34;Managed by the compute-vm Terraform module.&#34;</code> |
+| [enable_display](variables.tf#L122) | Enable virtual display on the instances. | <code>bool</code> |  | <code>false</code> |
+| [encryption](variables.tf#L128) | Encryption options. Only one of kms_key_self_link and disk_encryption_key_raw may be set. If needed, you can specify to encrypt or not the boot disk. | <code title="object&#40;&#123;&#10;  encrypt_boot            &#61; optional&#40;bool, false&#41;&#10;  disk_encryption_key_raw &#61; optional&#40;string&#41;&#10;  kms_key_self_link       &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [group](variables.tf#L138) | Define this variable to create an instance group for instances. Disabled for template use. | <code title="object&#40;&#123;&#10;  named_ports &#61; map&#40;number&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [hostname](variables.tf#L146) | Instance FQDN name. | <code>string</code> |  | <code>null</code> |
+| [iam](variables.tf#L152) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
+| [instance_type](variables.tf#L158) | Instance type. | <code>string</code> |  | <code>&#34;f1-micro&#34;</code> |
+| [labels](variables.tf#L164) | Instance labels. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |
+| [metadata](variables.tf#L170) | Instance metadata. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |
+| [min_cpu_platform](variables.tf#L176) | Minimum CPU platform. | <code>string</code> |  | <code>null</code> |
+| [options](variables.tf#L202) | Instance options. | <code title="object&#40;&#123;&#10;  allow_stopping_for_update &#61; optional&#40;bool, true&#41;&#10;  deletion_protection       &#61; optional&#40;bool, false&#41;&#10;  spot                      &#61; optional&#40;bool, false&#41;&#10;  termination_action        &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  allow_stopping_for_update &#61; true&#10;  deletion_protection       &#61; false&#10;  spot                      &#61; false&#10;  termination_action        &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [scratch_disks](variables.tf#L229) | Scratch disks configuration. | <code title="object&#40;&#123;&#10;  count     &#61; number&#10;  interface &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  count     &#61; 0&#10;  interface &#61; &#34;NVME&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [service_account](variables.tf#L241) | Service account email. Unused if service account is auto-created. | <code>string</code> |  | <code>null</code> |
+| [service_account_create](variables.tf#L247) | Auto-create service account. | <code>bool</code> |  | <code>false</code> |
+| [service_account_scopes](variables.tf#L255) | Scopes applied to service account. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
+| [shielded_config](variables.tf#L261) | Shielded VM configuration of the instances. | <code title="object&#40;&#123;&#10;  enable_secure_boot          &#61; bool&#10;  enable_vtpm                 &#61; bool&#10;  enable_integrity_monitoring &#61; bool&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [tag_bindings](variables.tf#L271) | Tag bindings for this instance, in key => tag value id format. | <code>map&#40;string&#41;</code> |  | <code>null</code> |
+| [tags](variables.tf#L277) | Instance network tags for firewall rule targets. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |

 ## Outputs

--- a/modules/compute-vm/main.tf
+++ b/modules/compute-vm/main.tf
@@ -163,14 +163,18 @@ resource "google_compute_instance" "default" {
  }

  boot_disk {
-    auto_delete = var.boot_disk.auto_delete
-    initialize_params {
-      type  = var.boot_disk.type
-      image = var.boot_disk.image
-      size  = var.boot_disk.size
-    }
+    auto_delete             = var.boot_disk.auto_delete
+    source                  = var.boot_disk.source
    disk_encryption_key_raw = var.encryption != null ? var.encryption.disk_encryption_key_raw : null
    kms_key_self_link       = var.encryption != null ? var.encryption.kms_key_self_link : null
+    dynamic "initialize_params" {
+      for_each = var.boot_disk.initialize_params == null ? [] : [""]
+      content {
+        image = var.boot_disk.initialize_params.image
+        size  = var.boot_disk.initialize_params.size
+        type  = var.boot_disk.initialize_params.type
+      }
+    }
  }

  dynamic "confidential_instance_config" {
@@ -268,9 +272,9 @@ resource "google_compute_instance_template" "default" {
  disk {
    auto_delete  = var.boot_disk.auto_delete
    boot         = true
-    disk_size_gb = var.boot_disk.size
-    disk_type    = var.boot_disk.type
-    source_image = var.boot_disk.image
+    disk_size_gb = var.boot_disk.initialize_params.size
+    disk_type    = var.boot_disk.initialize_params.type
+    source_image = var.boot_disk.initialize_params.image
  }

  dynamic "confidential_instance_config" {
--- a/modules/compute-vm/variables.tf
+++ b/modules/compute-vm/variables.tf
@@ -83,16 +83,17 @@ variable "boot_disk" {
  description = "Boot disk properties."
  type = object({
    auto_delete = optional(bool, true)
-    image       = optional(string, "projects/debian-cloud/global/images/family/debian-11")
-    size        = optional(number, 10)
-    type        = optional(string, "pd-balanced")
+    source      = optional(string)
+    initialize_params = optional(object({
+      image = optional(string, "projects/debian-cloud/global/images/family/debian-11")
+      size  = optional(number, 10)
+      type  = optional(string, "pd-balanced")
+    }))
  })
  default = {
-    auto_delete = true
-    image       = "projects/debian-cloud/global/images/family/debian-11"
-    type        = "pd-balanced"
-    size        = 10
+    initialize_params = {}
  }
+  nullable = false
 }

 variable "can_ip_forward" {
--- a/modules/net-glb/README.md
+++ b/modules/net-glb/README.md
@@ -214,9 +214,10 @@ module "glb-0" {
 }
 # tftest modules=1 resources=6
 ```
+
 #### Managed Instance Groups

-This example shows how to use the module with a manage instance group as backend: 
+This example shows how to use the module with a manage instance group as backend:

 ```hcl
 module "win-template" {
@@ -227,9 +228,10 @@ module "win-template" {
  instance_type   = "n2d-standard-2"
  create_template = true
  boot_disk = {
-    image = "projects/windows-cloud/global/images/windows-server-2019-dc-v20221214"
-    type  = "pd-balanced"
-    size  = 70
+    initialize_params = {
+      image = "projects/windows-cloud/global/images/windows-server-2019-dc-v20221214"
+      size  = 70
+    }
  }
  network_interfaces = [{
    network    = var.vpc.self_link
--- a/tests/modules/compute_vm/examples/cmek.yaml
+++ b/tests/modules/compute_vm/examples/cmek.yaml
@@ -37,7 +37,7 @@ values:
    - auto_delete: true
      disk_encryption_key_raw: null
      initialize_params:
-      - image: projects/debian-cloud/global/images/family/debian-10
+      - image: projects/debian-cloud/global/images/family/debian-11
        size: 10
        type: pd-balanced
      kms_key_self_link: kms_key_self_link