Compute VM module refactor (#3805)
* add ad for compute-vm refactor * Exclue nic_type from validated fields, add split of main.tf and template.tf * boot disk * fix examples and fixtures * attached disks * fix further examples and module-level tests * remove extra file * fix mig examples * finish refactoring variables * align fast and other modules * refactor(compute-vm): align examples and ADR with the newly implemented interface This commit addresses the remaining references of the `instance_type` and `confidential_compute` parameters in the testing environment and updates the ADR. * feat(compute-vm): add network_performance_config to instance and templates This change implements the usage of the `network_performance_tier` variable we added earlier into the actual Terraform resources. --------- Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
This commit is contained in:
Ludovico Magnocavallo
committed by
GitHub
GitHub
parent
2c39df6453
commit
a4eb4d24fd
@@ -151,12 +151,12 @@ module "vm-managed-sa-example2" {
|
||||
|
||||
#### Disk sources
|
||||
|
||||
Attached disks can be created and optionally initialized from a pre-existing source, or attached to VMs when pre-existing. The `source` and `source_type` attributes of the `attached_disks` variable allows several modes of operation:
|
||||
Attached disks can be created and optionally initialized from a pre-existing source, or attached to VMs when pre-existing. The `source` attribute of the `attached_disks` variable allows several modes of operation:
|
||||
|
||||
- `source_type = "image"` can be used with zonal disks in instances and templates, set `source` to the image name or self link
|
||||
- `source_type = "snapshot"` can be used with instances only, set `source` to the snapshot name or self link
|
||||
- `source_type = "attach"` can be used for both instances and templates to attach an existing disk, set source to the name (for zonal disks) or self link (for regional disks) of the existing disk to attach; no disk will be created
|
||||
- `source_type = null` can be used where an empty disk is needed, `source` becomes irrelevant and can be left null
|
||||
- `source.image` can be used with zonal disks in instances and templates, set to the image name or self link
|
||||
- `source.snapshot` can be used with instances only, set to the snapshot name or self link
|
||||
- `source.attach` can be used for both instances and templates to attach an existing disk, set to the name (for zonal disks) or self link (for regional disks) of the existing disk to attach; no disk will be created
|
||||
- `source = null` can be used where an empty disk is needed
|
||||
|
||||
This is an example of attaching a pre-existing regional PD to a new instance:
|
||||
|
||||
@@ -170,15 +170,16 @@ module "vm-disks-example" {
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
attached_disks = [{
|
||||
name = "repd-1"
|
||||
size = 10
|
||||
source_type = "attach"
|
||||
source = "regions/${var.region}/disks/repd-test-1"
|
||||
options = {
|
||||
replica_zone = "${var.region}-c"
|
||||
attached_disks = {
|
||||
repd-1 = {
|
||||
initialize_params = {
|
||||
replica_zone = "${var.region}-c"
|
||||
}
|
||||
source = {
|
||||
attach = "regions/${var.region}/disks/repd-test-1"
|
||||
}
|
||||
}
|
||||
}]
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -198,15 +199,17 @@ module "vm-disks-example" {
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
attached_disks = [{
|
||||
name = "repd"
|
||||
size = 10
|
||||
source_type = "attach"
|
||||
source = "https://www.googleapis.com/compute/v1/projects/${var.project_id}/regions/${var.region}/disks/repd-test-1"
|
||||
options = {
|
||||
replica_zone = "${var.region}-c"
|
||||
attached_disks = {
|
||||
repd = {
|
||||
auto_delete = false
|
||||
initialize_params = {
|
||||
replica_zone = "${var.region}-c"
|
||||
}
|
||||
source = {
|
||||
attach = "https://www.googleapis.com/compute/v1/projects/${var.project_id}/regions/${var.region}/disks/repd-test-1"
|
||||
}
|
||||
}
|
||||
}]
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -217,7 +220,7 @@ module "vm-disks-example" {
|
||||
|
||||
#### Disk types and options
|
||||
|
||||
The `attached_disks` variable exposes an `option` attribute that can be used to fine tune the configuration of each disk. The following example shows a VM with multiple disks
|
||||
The `attached_disks` variable exposes an `initialize_params` attribute that can be used to fine tune the configuration of each disk. The following example shows a VM with multiple disks
|
||||
|
||||
```hcl
|
||||
module "vm-disk-options-example" {
|
||||
@@ -229,27 +232,26 @@ module "vm-disk-options-example" {
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
attached_disks = [
|
||||
{
|
||||
name = "data1"
|
||||
size = "10"
|
||||
source_type = "image"
|
||||
source = "image-1"
|
||||
options = {
|
||||
attached_disks = {
|
||||
data1 = {
|
||||
initialize_params = {
|
||||
replica_zone = "${var.region}-c"
|
||||
}
|
||||
},
|
||||
{
|
||||
name = "data2"
|
||||
size = "20"
|
||||
source_type = "snapshot"
|
||||
source = "snapshot-2"
|
||||
options = {
|
||||
type = "pd-ssd"
|
||||
mode = "READ_ONLY"
|
||||
source = {
|
||||
image = "image-1"
|
||||
}
|
||||
}
|
||||
]
|
||||
data2 = {
|
||||
mode = "READ_ONLY"
|
||||
initialize_params = {
|
||||
size = 20
|
||||
type = "pd-ssd"
|
||||
}
|
||||
source = {
|
||||
snapshot = "snapshot-2"
|
||||
}
|
||||
}
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -261,47 +263,51 @@ For hyperdisks there are additional options available to configure performance.
|
||||
|
||||
```hcl
|
||||
module "vm-disk-options-example" {
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
name = "test"
|
||||
instance_type = "n4-standard-2"
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
name = "test"
|
||||
machine_type = "n4-standard-2"
|
||||
network_interfaces = [{
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
}
|
||||
|
||||
attached_disks = [
|
||||
{
|
||||
name = "data1"
|
||||
size = "10"
|
||||
options = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
},
|
||||
{
|
||||
name = "data2"
|
||||
size = "10"
|
||||
source_type = "image"
|
||||
source = "projects/debian-cloud/global/images/family/debian-12"
|
||||
options = {
|
||||
provisioned_iops = 5000
|
||||
provisioned_throughput = 500
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
}
|
||||
}
|
||||
attached_disks = {
|
||||
data1 = {
|
||||
initialize_params = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
}
|
||||
}
|
||||
},
|
||||
|
||||
]
|
||||
}
|
||||
data2 = {
|
||||
mode = "READ_ONLY"
|
||||
initialize_params = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 5000
|
||||
provisioned_throughput = 500
|
||||
}
|
||||
}
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
}
|
||||
}
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -316,24 +322,22 @@ You can use storage pool for better management of storage capacity.
|
||||
```hcl
|
||||
# hyperdisk - with storage pool
|
||||
resource "google_compute_storage_pool" "default" {
|
||||
project = var.project_id
|
||||
name = "storage-pool-basic"
|
||||
|
||||
project = var.project_id
|
||||
name = "storage-pool-basic"
|
||||
pool_provisioned_capacity_gb = "20480"
|
||||
pool_provisioned_iops = "10000"
|
||||
pool_provisioned_throughput = 1024
|
||||
storage_pool_type = "hyperdisk-balanced"
|
||||
zone = "${var.region}-c"
|
||||
|
||||
deletion_protection = false
|
||||
deletion_protection = false
|
||||
}
|
||||
|
||||
module "vm-disk-options-example" {
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-c"
|
||||
name = "test"
|
||||
instance_type = "c4d-standard-2"
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-c"
|
||||
name = "test"
|
||||
machine_type = "c4d-standard-2"
|
||||
network_interfaces = [
|
||||
{
|
||||
network = var.vpc.self_link
|
||||
@@ -341,40 +345,41 @@ module "vm-disk-options-example" {
|
||||
}
|
||||
]
|
||||
boot_disk = {
|
||||
use_independent_disk = true
|
||||
use_independent_disk = {}
|
||||
initialize_params = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
storage_pool = google_compute_storage_pool.default.id
|
||||
type = "hyperdisk-balanced"
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
storage_pool = google_compute_storage_pool.default.id
|
||||
}
|
||||
}
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
}
|
||||
}
|
||||
|
||||
attached_disks = [
|
||||
{
|
||||
name = "data1"
|
||||
size = "10"
|
||||
options = {
|
||||
# provisioned_iops = 3000
|
||||
# provisioned_throughput = 140
|
||||
storage_pool = google_compute_storage_pool.default.id
|
||||
type = "hyperdisk-balanced"
|
||||
attached_disks = {
|
||||
data1 = {
|
||||
initialize_params = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
storage_pool = google_compute_storage_pool.default.id
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
name = "data2"
|
||||
size = "10"
|
||||
source_type = "image"
|
||||
source = "projects/debian-cloud/global/images/family/debian-12"
|
||||
options = {
|
||||
provisioned_iops = 5000
|
||||
provisioned_throughput = 500
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
data2 = {
|
||||
initialize_params = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 5000
|
||||
provisioned_throughput = 500
|
||||
}
|
||||
}
|
||||
},
|
||||
|
||||
]
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
}
|
||||
}
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -390,50 +395,51 @@ For hyperdisks there are additional options available to configure performance.
|
||||
|
||||
```hcl
|
||||
module "vm-arm" {
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-c"
|
||||
name = "test"
|
||||
instance_type = "c4a-standard-1"
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-c"
|
||||
name = "test"
|
||||
machine_type = "c4a-standard-1"
|
||||
network_interfaces = [{
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
architecture = "ARM64"
|
||||
initialize_params = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12-arm64"
|
||||
architecture = "ARM64"
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
}
|
||||
|
||||
attached_disks = [
|
||||
{
|
||||
name = "data1"
|
||||
size = "10"
|
||||
options = {
|
||||
architecture = "ARM64"
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
},
|
||||
{
|
||||
name = "data2"
|
||||
size = "10"
|
||||
source_type = "image"
|
||||
source = "projects/debian-cloud/global/images/family/debian-12-arm64"
|
||||
options = {
|
||||
architecture = "ARM64"
|
||||
provisioned_iops = 5000
|
||||
provisioned_throughput = 500
|
||||
type = "hyperdisk-balanced"
|
||||
}
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12-arm64"
|
||||
}
|
||||
}
|
||||
attached_disks = {
|
||||
data1 = {
|
||||
initialize_params = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 3000
|
||||
provisioned_throughput = 140
|
||||
}
|
||||
}
|
||||
},
|
||||
|
||||
]
|
||||
}
|
||||
data2 = {
|
||||
initialize_params = {
|
||||
type = "hyperdisk-balanced"
|
||||
hyperdisk = {
|
||||
provisioned_iops = 5000
|
||||
provisioned_throughput = 500
|
||||
}
|
||||
}
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12-arm64"
|
||||
}
|
||||
}
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -445,7 +451,7 @@ module "vm-arm" {
|
||||
|
||||
#### Boot disk as an independent resource
|
||||
|
||||
To create the boot disk as an independent resources instead of as part of the instance creation flow, set `boot_disk.use_independent_disk` to `true` and optionally configure `boot_disk.initialize_params`.
|
||||
To create the boot disk as an independent resources instead of as part of the instance creation flow, set `boot_disk.use_independent_disk` to a non-null object (e.g. `{}`) and optionally configure `boot_disk.initialize_params`.
|
||||
|
||||
This will create the boot disk as its own resource and attach it to the instance, allowing to recreate the instance from Terraform while preserving the boot disk.
|
||||
|
||||
@@ -456,8 +462,7 @@ module "simple-vm-example" {
|
||||
zone = "${var.region}-b"
|
||||
name = "test"
|
||||
boot_disk = {
|
||||
initialize_params = {}
|
||||
use_independent_disk = true
|
||||
use_independent_disk = {}
|
||||
}
|
||||
network_interfaces = [{
|
||||
network = var.vpc.self_link
|
||||
@@ -536,7 +541,6 @@ resource "google_compute_image" "cos-gvnic" {
|
||||
project = var.project_id
|
||||
name = "my-image"
|
||||
source_image = "https://www.googleapis.com/compute/v1/projects/cos-cloud/global/images/cos-89-16108-534-18"
|
||||
|
||||
guest_os_features {
|
||||
type = "GVNIC"
|
||||
}
|
||||
@@ -558,8 +562,10 @@ module "vm-with-gvnic" {
|
||||
name = "test"
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
type = "pd-ssd"
|
||||
}
|
||||
source = {
|
||||
image = google_compute_image.cos-gvnic.self_link
|
||||
type = "pd-ssd"
|
||||
}
|
||||
}
|
||||
network_interfaces = [{
|
||||
@@ -674,8 +680,8 @@ module "spot-vm-example" {
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
name = "test"
|
||||
options = {
|
||||
spot = true
|
||||
scheduling_config = {
|
||||
provisioning_model = "SPOT"
|
||||
termination_action = "STOP"
|
||||
}
|
||||
network_interfaces = [{
|
||||
@@ -696,10 +702,10 @@ module "vm-confidential-example" {
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
name = "confidential-vm"
|
||||
confidential_compute = true
|
||||
instance_type = "n2d-standard-2"
|
||||
confidential_compute = "SEV"
|
||||
machine_type = "n2d-standard-2"
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
}
|
||||
}
|
||||
@@ -714,11 +720,11 @@ module "template-confidential-example" {
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
name = "confidential-template"
|
||||
confidential_compute = true
|
||||
confidential_compute = "SEV"
|
||||
create_template = {}
|
||||
instance_type = "n2d-standard-2"
|
||||
machine_type = "n2d-standard-2"
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/debian-cloud/global/images/family/debian-12"
|
||||
}
|
||||
}
|
||||
@@ -790,10 +796,9 @@ module "kms-vm-example" {
|
||||
network = module.vpc.self_link
|
||||
subnetwork = module.vpc.subnet_self_links["${var.region}/production"]
|
||||
}]
|
||||
attached_disks = [{
|
||||
name = "attached-disk"
|
||||
size = 10
|
||||
}]
|
||||
attached_disks = {
|
||||
attached-disk = {}
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -819,10 +824,9 @@ module "autokey-vm-example" {
|
||||
network = "projects/myhost/global/networks/dev-spoke-0"
|
||||
subnetwork = "projects/myhost/regions/europe-west8/subnetworks/gce"
|
||||
}]
|
||||
attached_disks = [{
|
||||
name = "attached-disk"
|
||||
size = 10
|
||||
}]
|
||||
attached_disks = {
|
||||
attached-disk = {}
|
||||
}
|
||||
service_account = {
|
||||
auto_create = true
|
||||
}
|
||||
@@ -839,7 +843,7 @@ module "autokey-vm-example" {
|
||||
|
||||
### Advanced machine features
|
||||
|
||||
Advanced machine features can be configured via the `options.advanced_machine_features` variable.
|
||||
Advanced machine features can be configured via the `machine_features_config` variable.
|
||||
|
||||
```hcl
|
||||
module "simple-vm-example" {
|
||||
@@ -851,12 +855,10 @@ module "simple-vm-example" {
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
options = {
|
||||
advanced_machine_features = {
|
||||
enable_nested_virtualization = true
|
||||
enable_turbo_mode = true
|
||||
threads_per_core = 2
|
||||
}
|
||||
machine_features_config = {
|
||||
enable_nested_virtualization = true
|
||||
enable_turbo_mode = true
|
||||
threads_per_core = 2
|
||||
}
|
||||
}
|
||||
# tftest modules=1 resources=1
|
||||
@@ -879,13 +881,13 @@ module "cos-test" {
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/cos-cloud/global/images/family/cos-stable"
|
||||
}
|
||||
}
|
||||
attached_disks = [
|
||||
{ size = 10 }
|
||||
]
|
||||
attached_disks = {
|
||||
disk-0 = {}
|
||||
}
|
||||
service_account = {
|
||||
email = module.iam-service-account.email
|
||||
}
|
||||
@@ -909,13 +911,15 @@ module "cos-test" {
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/cos-cloud/global/images/family/cos-stable"
|
||||
}
|
||||
}
|
||||
attached_disks = [
|
||||
{ size = 10 }
|
||||
]
|
||||
attached_disks = {
|
||||
disk-0 = {
|
||||
auto_delete = true
|
||||
}
|
||||
}
|
||||
service_account = {
|
||||
email = module.iam-service-account.email
|
||||
}
|
||||
@@ -945,7 +949,7 @@ module "instance-group" {
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/cos-cloud/global/images/family/cos-stable"
|
||||
}
|
||||
}
|
||||
@@ -976,7 +980,7 @@ module "instance" {
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/cos-cloud/global/images/family/cos-stable"
|
||||
}
|
||||
}
|
||||
@@ -1019,7 +1023,7 @@ module "instance" {
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/cos-cloud/global/images/family/cos-stable"
|
||||
}
|
||||
}
|
||||
@@ -1047,21 +1051,19 @@ module "instance" {
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
boot_disk = {
|
||||
initialize_params = {
|
||||
source = {
|
||||
image = "projects/cos-cloud/global/images/family/cos-stable"
|
||||
}
|
||||
snapshot_schedule = ["boot"]
|
||||
}
|
||||
attached_disks = [
|
||||
{
|
||||
name = "disk-1"
|
||||
size = 10
|
||||
options = {
|
||||
attached_disks = {
|
||||
disk-1 = {
|
||||
initialize_params = {
|
||||
replica_zone = "${var.region}-c"
|
||||
}
|
||||
snapshot_schedule = ["data"]
|
||||
}
|
||||
]
|
||||
}
|
||||
snapshot_schedules = {
|
||||
boot = {
|
||||
schedule = {
|
||||
@@ -1141,16 +1143,16 @@ You can add node affinities (and anti-affinity) configurations to allocate the V
|
||||
|
||||
```hcl
|
||||
module "sole-tenancy" {
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
instance_type = "n1-standard-1"
|
||||
name = "test"
|
||||
source = "./fabric/modules/compute-vm"
|
||||
project_id = var.project_id
|
||||
zone = "${var.region}-b"
|
||||
machine_type = "n1-standard-1"
|
||||
name = "test"
|
||||
network_interfaces = [{
|
||||
network = var.vpc.self_link
|
||||
subnetwork = var.subnet.self_link
|
||||
}]
|
||||
options = {
|
||||
scheduling_config = {
|
||||
node_affinities = {
|
||||
workload = {
|
||||
values = ["frontend"]
|
||||
@@ -1169,43 +1171,45 @@ module "sole-tenancy" {
|
||||
|
||||
| name | description | type | required | default |
|
||||
|---|---|:---:|:---:|:---:|
|
||||
| [name](variables.tf#L323) | Instance name. | <code>string</code> | ✓ | |
|
||||
| [network_interfaces](variables.tf#L335) | Network interfaces configuration. Use self links for Shared VPC, set addresses to null if not needed. | <code title="list(object({ network = string subnetwork = string alias_ips = optional(map(string), {}) nat = optional(bool, false) nic_type = optional(string) stack_type = optional(string) addresses = optional(object({ internal = optional(string) external = optional(string) }), null) network_tier = optional(string) }))">list(object({…}))</code> | ✓ | |
|
||||
| [project_id](variables.tf#L430) | Project id. | <code>string</code> | ✓ | |
|
||||
| [zone](variables.tf#L550) | Compute zone. | <code>string</code> | ✓ | |
|
||||
| [attached_disk_defaults](variables.tf#L17) | Defaults for attached disks options. | <code title="object({ auto_delete = optional(bool, false) mode = string replica_zone = string type = string })">object({…})</code> | | <code title="{ auto_delete = true mode = "READ_WRITE" replica_zone = null type = "pd-balanced" }">{…}</code> |
|
||||
| [attached_disks](variables.tf#L37) | Additional disks, if options is null defaults will be used in its place. Source type is one of 'image' (zonal disks in vms and template), 'snapshot' (vm), 'existing', and null. | <code title="list(object({ name = optional(string) device_name = optional(string) size = string snapshot_schedule = optional(list(string)) source = optional(string) source_type = optional(string) options = optional( object({ architecture = optional(string) auto_delete = optional(bool, false) # applies only to vm templates mode = optional(string, "READ_WRITE") provisioned_iops = optional(number) provisioned_throughput = optional(number) # in MiB/s replica_zone = optional(string) storage_pool = optional(string) type = optional(string, "pd-balanced") }), { auto_delete = true mode = "READ_WRITE" replica_zone = null type = "pd-balanced" } ) }))">list(object({…}))</code> | | <code>[]</code> |
|
||||
| [boot_disk](variables.tf#L92) | Boot disk properties. Initialize params are ignored when source is set. | <code title="object({ name = optional(string) auto_delete = optional(bool, true) snapshot_schedule = optional(list(string)) source = optional(string) initialize_params = optional(object({ architecture = optional(string) image = optional(string, "projects/debian-cloud/global/images/family/debian-11") provisioned_iops = optional(number) provisioned_throughput = optional(number) # in MiB/s size = optional(number, 10) storage_pool = optional(string) type = optional(string, "pd-balanced") }), {}) use_independent_disk = optional(bool, false) })">object({…})</code> | | <code title="{ initialize_params = {} }">{…}</code> |
|
||||
| [can_ip_forward](variables.tf#L135) | Enable IP forwarding. | <code>bool</code> | | <code>false</code> |
|
||||
| [confidential_compute](variables.tf#L141) | Enable Confidential Compute for these instances. | <code>bool</code> | | <code>false</code> |
|
||||
| [context](variables.tf#L147) | Context-specific interpolations. | <code title="object({ addresses = optional(map(string), {}) custom_roles = optional(map(string), {}) kms_keys = optional(map(string), {}) iam_principals = optional(map(string), {}) locations = optional(map(string), {}) networks = optional(map(string), {}) project_ids = optional(map(string), {}) subnets = optional(map(string), {}) tag_values = optional(map(string), {}) })">object({…})</code> | | <code>{}</code> |
|
||||
| [create_template](variables.tf#L164) | Create instance template instead of instances. Defaults to a global template. | <code title="object({ regional = optional(bool, false) })">object({…})</code> | | <code>null</code> |
|
||||
| [description](variables.tf#L173) | Description of a Compute Instance. | <code>string</code> | | <code>"Managed by the compute-vm Terraform module."</code> |
|
||||
| [enable_display](variables.tf#L179) | Enable virtual display on the instances. | <code>bool</code> | | <code>false</code> |
|
||||
| [encryption](variables.tf#L185) | Encryption options. Only one of kms_key_self_link and disk_encryption_key_raw may be set. If needed, you can specify to encrypt or not the boot disk. | <code title="object({ encrypt_boot = optional(bool, false) disk_encryption_key_raw = optional(string) kms_key_self_link = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||
| [gpu](variables.tf#L195) | GPU information. Based on https://cloud.google.com/compute/docs/gpus. | <code title="object({ count = number type = string })">object({…})</code> | | <code>null</code> |
|
||||
| [group](variables.tf#L230) | Define this variable to create an instance group for instances. Disabled for template use. | <code title="object({ named_ports = map(number) })">object({…})</code> | | <code>null</code> |
|
||||
| [hostname](variables.tf#L238) | Instance FQDN name. | <code>string</code> | | <code>null</code> |
|
||||
| [iam](variables.tf#L244) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||
| [instance_schedule](variables.tf#L250) | Assign or create and assign an instance schedule policy. Either resource policy id or create_config must be specified if not null. Set active to null to dtach a policy from vm before destroying. | <code title="object({ active = optional(bool, true) description = optional(string) expiration_time = optional(string) start_time = optional(string) timezone = optional(string, "UTC") vm_start = optional(string) vm_stop = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||
| [instance_type](variables.tf#L274) | Instance type. | <code>string</code> | | <code>"e2-micro"</code> |
|
||||
| [kms_autokeys](variables.tf#L280) | KMS Autokey key handles. If location is not specified it will be inferred from the zone. Key handle names will be added to the kms_keys context with an `autokeys/` prefix. | <code title="map(object({ location = optional(string) resource_type_selector = optional(string, "compute.googleapis.com/Disk") }))">map(object({…}))</code> | | <code>{}</code> |
|
||||
| [labels](variables.tf#L298) | Instance labels. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [metadata](variables.tf#L304) | Instance metadata. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [metadata_startup_script](variables.tf#L310) | Instance startup script. Will trigger recreation on change, even after importing. | <code>string</code> | | <code>null</code> |
|
||||
| [min_cpu_platform](variables.tf#L317) | Minimum CPU platform. | <code>string</code> | | <code>null</code> |
|
||||
| [network_attached_interfaces](variables.tf#L328) | Network interfaces using network attachments. | <code>list(string)</code> | | <code>[]</code> |
|
||||
| [network_tag_bindings](variables.tf#L356) | Resource manager tag bindings in arbitrary key => tag key or value id format. Set on both the instance only for networking purposes, and modifiable without impacting the main resource lifecycle. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [options](variables.tf#L363) | Instance options. | <code title="object({ advanced_machine_features = optional(object({ enable_nested_virtualization = optional(bool) enable_turbo_mode = optional(bool) enable_uefi_networking = optional(bool) performance_monitoring_unit = optional(string) threads_per_core = optional(number) visible_core_count = optional(number) })) allow_stopping_for_update = optional(bool, true) deletion_protection = optional(bool, false) key_revocation_action_type = optional(string) graceful_shutdown = optional(object({ enabled = optional(bool, false) max_duration_secs = optional(number) })) max_run_duration = optional(object({ nanos = optional(number) seconds = number })) node_affinities = optional(map(object({ values = list(string) in = optional(bool, true) })), {}) spot = optional(bool, false) termination_action = optional(string) })">object({…})</code> | | <code title="{ allow_stopping_for_update = true deletion_protection = false spot = false termination_action = null key_revocation_action_type = "NONE" }">{…}</code> |
|
||||
| [project_number](variables.tf#L435) | Project number. Used in tag bindings to avoid a permadiff. | <code>string</code> | | <code>null</code> |
|
||||
| [resource_policies](variables.tf#L441) | Resource policies to attach to the instance or template. | <code>list(string)</code> | | <code>null</code> |
|
||||
| [scratch_disks](variables.tf#L448) | Scratch disks configuration. | <code title="object({ count = number interface = string })">object({…})</code> | | <code title="{ count = 0 interface = "NVME" }">{…}</code> |
|
||||
| [service_account](variables.tf#L460) | Service account email and scopes. If email is null, the default Compute service account will be used unless auto_create is true, in which case a service account will be created. Set the variable to null to avoid attaching a service account. | <code title="object({ auto_create = optional(bool, false) email = optional(string) scopes = optional(list(string)) })">object({…})</code> | | <code>{}</code> |
|
||||
| [shielded_config](variables.tf#L470) | Shielded VM configuration of the instances. | <code title="object({ enable_secure_boot = optional(bool, true) enable_vtpm = optional(bool, true) enable_integrity_monitoring = optional(bool, true) })">object({…})</code> | | <code>null</code> |
|
||||
| [snapshot_schedules](variables.tf#L480) | Snapshot schedule resource policies that can be attached to disks. | <code title="map(object({ schedule = object({ daily = optional(object({ days_in_cycle = number start_time = string })) hourly = optional(object({ hours_in_cycle = number start_time = string })) weekly = optional(list(object({ day = string start_time = string }))) }) description = optional(string) retention_policy = optional(object({ max_retention_days = number on_source_disk_delete_keep = optional(bool) })) snapshot_properties = optional(object({ chain_name = optional(string) guest_flush = optional(bool) labels = optional(map(string)) storage_locations = optional(list(string)) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||
| [tag_bindings](variables.tf#L523) | Resource manager tag bindings in arbitrary key => tag key or value id format. Set on both the instance and zonal disks, and modifiable without impacting the main resource lifecycle. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [tag_bindings_immutable](variables.tf#L530) | Immutable resource manager tag bindings, in tagKeys/id => tagValues/id format. These are set on the instance or instance template at creation time, and trigger recreation if changed. | <code>map(string)</code> | | <code>null</code> |
|
||||
| [tags](variables.tf#L544) | Instance network tags for firewall rule targets. | <code>list(string)</code> | | <code>[]</code> |
|
||||
| [name](variables.tf#L353) | Instance name. | <code>string</code> | ✓ | |
|
||||
| [network_interfaces](variables.tf#L365) | Network interfaces configuration. Use self links for Shared VPC, set addresses to null if not needed. | <code title="list(object({ network = string subnetwork = string alias_ips = optional(map(string), {}) nat = optional(bool, false) network_tier = optional(string) nic_type = optional(string) stack_type = optional(string) queue_count = optional(number) # NEW internal_ipv6_prefix_length = optional(number) # NEW addresses = optional(object({ internal = optional(string) external = optional(string) }), null) }))">list(object({…}))</code> | ✓ | |
|
||||
| [project_id](variables.tf#L405) | Project id. | <code>string</code> | ✓ | |
|
||||
| [zone](variables.tf#L562) | Compute zone. | <code>string</code> | ✓ | |
|
||||
| [attached_disks](variables.tf#L17) | Additional disks. Source type is one of 'image' (zonal disks in vms and template), 'snapshot' (vm), 'existing', and null. | <code title="map(object({ auto_delete = optional(bool, true) # applies only to vm templates device_name = optional(string) force_attach = optional(bool) mode = optional(string, "READ_WRITE") name = optional(string) initialize_params = optional(object({ replica_zone = optional(string) size = optional(number, 10) type = optional(string, "pd-balanced") hyperdisk = optional(object({ provisioned_iops = optional(number) provisioned_throughput = optional(number) # in MiB/s storage_pool = optional(string) }), {}) }), {}) snapshot_schedule = optional(list(string)) source = optional(object({ attach = optional(string) image = optional(string) # not supported yet for repd snapshot = optional(string) }), {}) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||
| [boot_disk](variables.tf#L56) | Boot disk properties. | <code title="object({ architecture = optional(string) auto_delete = optional(bool, true) force_attach = optional(bool) snapshot_schedule = optional(list(string)) initialize_params = optional(object({ size = optional(number, 10) type = optional(string, "pd-balanced") hyperdisk = optional(object({ provisioned_iops = optional(number) provisioned_throughput = optional(number) # in MiB/s storage_pool = optional(string) }), {}) }), {}) source = optional(object({ attach = optional(string) disk = optional(string) image = optional(string) snapshot = optional(string) }), { image = "debian-cloud/debian-13" }) use_independent_disk = optional(object({ name = optional(string) })) })">object({…})</code> | | <code>{}</code> |
|
||||
| [can_ip_forward](variables.tf#L113) | Enable IP forwarding. | <code>bool</code> | | <code>false</code> |
|
||||
| [confidential_compute](variables.tf#L119) | Confidential Compute configuration. Set to 'SEV' or 'SEV_SNP' to enable. | <code>string</code> | | <code>null</code> |
|
||||
| [context](variables.tf#L129) | Context-specific interpolations. | <code title="object({ addresses = optional(map(string), {}) custom_roles = optional(map(string), {}) kms_keys = optional(map(string), {}) iam_principals = optional(map(string), {}) locations = optional(map(string), {}) networks = optional(map(string), {}) project_ids = optional(map(string), {}) subnets = optional(map(string), {}) tag_values = optional(map(string), {}) })">object({…})</code> | | <code>{}</code> |
|
||||
| [create_template](variables.tf#L146) | Create instance template instead of instances. Defaults to a global template. | <code title="object({ regional = optional(bool, false) })">object({…})</code> | | <code>null</code> |
|
||||
| [description](variables.tf#L155) | Description of a Compute Instance. | <code>string</code> | | <code>"Managed by the compute-vm Terraform module."</code> |
|
||||
| [enable_display](variables.tf#L161) | Enable virtual display on the instances. | <code>bool</code> | | <code>false</code> |
|
||||
| [encryption](variables.tf#L167) | Encryption options. Only one of kms_key_self_link and disk_encryption_key_raw may be set. If needed, you can specify to encrypt or not the boot disk. | <code title="object({ encrypt_boot = optional(bool, false) disk_encryption_key_raw = optional(string) kms_key_self_link = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||
| [gpu](variables.tf#L178) | GPU information. Based on https://cloud.google.com/compute/docs/gpus. | <code title="object({ count = number type = string })">object({…})</code> | | <code>null</code> |
|
||||
| [group](variables.tf#L213) | Instance group configuration. Set 'named_ports' to create a new unmanaged instance group, or provide an existing group self_link/id in 'membership' to join one. | <code title="object({ membership = optional(string) # ID of an existing unmanaged group to join named_ports = optional(map(number), {}) })">object({…})</code> | | <code>null</code> |
|
||||
| [hostname](variables.tf#L222) | Instance FQDN name. | <code>string</code> | | <code>null</code> |
|
||||
| [iam](variables.tf#L228) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||
| [instance_schedule](variables.tf#L234) | Assign or create and assign an instance schedule policy. Set active to null to detach a policy from vm before destroying. | <code title="object({ active = optional(bool, true) description = optional(string) expiration_time = optional(string) start_time = optional(string) timezone = optional(string, "UTC") vm_start = optional(string) vm_stop = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||
| [kms_autokeys](variables.tf#L258) | KMS Autokey key handles. If location is not specified it will be inferred from the zone. Key handle names will be added to the kms_keys context with an `autokeys/` prefix. | <code title="map(object({ location = optional(string) resource_type_selector = optional(string, "compute.googleapis.com/Disk") }))">map(object({…}))</code> | | <code>{}</code> |
|
||||
| [labels](variables.tf#L276) | Instance labels. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [lifecycle_config](variables.tf#L282) | Instance lifecycle and operational configurations. | <code title="object({ allow_stopping_for_update = optional(bool, true) deletion_protection = optional(bool, false) key_revocation_action_type = optional(string, "NONE") graceful_shutdown = optional(object({ enabled = optional(bool, false) max_duration_secs = optional(number) })) })">object({…})</code> | | <code>{}</code> |
|
||||
| [machine_features_config](variables.tf#L304) | Machine-level configuration. | <code title="object({ enable_nested_virtualization = optional(bool) enable_turbo_mode = optional(bool) enable_uefi_networking = optional(bool) performance_monitoring_unit = optional(string) threads_per_core = optional(number) visible_core_count = optional(number) })">object({…})</code> | | <code>{}</code> |
|
||||
| [machine_type](variables.tf#L328) | Machine type. | <code>string</code> | | <code>"e2-micro"</code> |
|
||||
| [metadata](variables.tf#L334) | Instance metadata. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [metadata_startup_script](variables.tf#L340) | Instance startup script. Will trigger recreation on change, even after importing. | <code>string</code> | | <code>null</code> |
|
||||
| [min_cpu_platform](variables.tf#L347) | Minimum CPU platform. | <code>string</code> | | <code>null</code> |
|
||||
| [network_attached_interfaces](variables.tf#L358) | Network interfaces using network attachments. | <code>list(string)</code> | | <code>[]</code> |
|
||||
| [network_performance_tier](variables.tf#L388) | Network performance total egress bandwidth tier. | <code>string</code> | | <code>null</code> |
|
||||
| [network_tag_bindings](variables.tf#L398) | Resource manager tag bindings in arbitrary key => tag key or value id format. Set on both the instance only for networking purposes, and modifiable without impacting the main resource lifecycle. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [project_number](variables.tf#L410) | Project number. Used in tag bindings to avoid a permadiff. | <code>string</code> | | <code>null</code> |
|
||||
| [resource_policies](variables.tf#L416) | Resource policies to attach to the instance or template. | <code>list(string)</code> | | <code>null</code> |
|
||||
| [scheduling_config](variables.tf#L423) | Scheduling configuration for the instance. | <code title="object({ automatic_restart = optional(bool) # Defaults to !spot maintenance_interval = optional(string) # NEW min_node_cpus = optional(number) # NEW on_host_maintenance = optional(string) # Defaults to MIGRATE or TERMINATE based on GPU/Spot provisioning_model = optional(string) # "SPOT" or "STANDARD" termination_action = optional(string) local_ssd_recovery_timeout = optional(object({ # NEW nanos = optional(number) seconds = number })) max_run_duration = optional(object({ nanos = optional(number) seconds = number })) node_affinities = optional(map(object({ values = list(string) in = optional(bool, true) })), {}) })">object({…})</code> | | <code>{}</code> |
|
||||
| [scratch_disks](variables.tf#L458) | Scratch disks configuration. | <code title="object({ count = number interface = string })">object({…})</code> | | <code title="{ count = 0 interface = "NVME" }">{…}</code> |
|
||||
| [service_account](variables.tf#L471) | Service account email and scopes. If email is null, the default Compute service account will be used unless auto_create is true, in which case a service account will be created. Set the variable to null to avoid attaching a service account. | <code title="object({ auto_create = optional(bool, false) email = optional(string) scopes = optional(list(string)) })">object({…})</code> | | <code>{}</code> |
|
||||
| [shielded_config](variables.tf#L482) | Shielded VM configuration of the instances. | <code title="object({ enable_secure_boot = optional(bool, true) enable_vtpm = optional(bool, true) enable_integrity_monitoring = optional(bool, true) })">object({…})</code> | | <code>null</code> |
|
||||
| [snapshot_schedules](variables.tf#L492) | Snapshot schedule resource policies that can be attached to disks. | <code title="map(object({ schedule = object({ daily = optional(object({ days_in_cycle = number start_time = string })) hourly = optional(object({ hours_in_cycle = number start_time = string })) weekly = optional(list(object({ day = string start_time = string }))) }) description = optional(string) retention_policy = optional(object({ max_retention_days = number on_source_disk_delete_keep = optional(bool) })) snapshot_properties = optional(object({ chain_name = optional(string) guest_flush = optional(bool) labels = optional(map(string)) storage_locations = optional(list(string)) })) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||
| [tag_bindings](variables.tf#L535) | Resource manager tag bindings in arbitrary key => tag key or value id format. Set on both the instance and zonal disks, and modifiable without impacting the main resource lifecycle. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [tag_bindings_immutable](variables.tf#L542) | Immutable resource manager tag bindings, in tagKeys/id => tagValues/id format. These are set on the instance or instance template at creation time, and trigger recreation if changed. | <code>map(string)</code> | | <code>null</code> |
|
||||
| [tags](variables.tf#L556) | Instance network tags for firewall rule targets. | <code>list(string)</code> | | <code>[]</code> |
|
||||
|
||||
## Outputs
|
||||
|
||||
|
||||
Reference in New Issue
Block a user