dfc5023e0b
* Expose deletion_protection in GKE modules * Make deletion protection consistent across all modules * Add deletion_protection option to blueprints * Fix blueprints tests * Fix types * Update READMEs * Fix dp readme * Fix cmek blueprint default deletion_protection * Fix blueprints tests
68 lines
1.9 KiB
HCL
68 lines
1.9 KiB
HCL
/**
|
|
* Copyright 2023 Google LLC
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
|
|
resource "random_password" "cloudsql_password" {
|
|
length = 8
|
|
}
|
|
|
|
# create a VPC for CloudSQL
|
|
module "vpc" {
|
|
source = "../../../../modules/net-vpc"
|
|
project_id = module.project.project_id
|
|
name = "${var.prefix}-sql-vpc"
|
|
subnets = [
|
|
{
|
|
ip_cidr_range = var.ip_ranges.sql_vpc
|
|
name = "subnet"
|
|
region = var.region
|
|
}
|
|
]
|
|
psa_config = {
|
|
ranges = {
|
|
cloud-sql = var.ip_ranges.psa
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
# create a VPC connector for the ClouSQL VPC
|
|
resource "google_vpc_access_connector" "connector" {
|
|
count = var.create_connector ? 1 : 0
|
|
project = module.project.project_id
|
|
name = "${var.prefix}-wp-connector"
|
|
region = var.region
|
|
ip_cidr_range = var.ip_ranges.connector
|
|
network = module.vpc.self_link
|
|
}
|
|
|
|
|
|
# Set up CloudSQL
|
|
module "cloudsql" {
|
|
source = "../../../../modules/cloudsql-instance"
|
|
project_id = module.project.project_id
|
|
network = module.vpc.self_link
|
|
name = "${var.prefix}-mysql"
|
|
region = var.region
|
|
database_version = local.cloudsql_conf.database_version
|
|
tier = local.cloudsql_conf.tier
|
|
databases = [local.cloudsql_conf.db]
|
|
users = {
|
|
"${local.cloudsql_conf.user}" = var.cloudsql_password
|
|
}
|
|
deletion_protection = false
|
|
}
|