ba304518f1
* fix(compute-vm): prevent instance recreation for key_revocation_action_type The `key_revocation_action_type` attribute in the `google_compute_instance` resource defaults to `NONE` on the provider side. When this optional attribute was not explicitly set in the module's `options` variable, it resolved to `null` in the Terraform configuration. This caused Terraform to detect a change from `null` to `NONE` on every plan, leading to unnecessary instance recreation. This change applies `coalesce` to `var.options.key_revocation_action_type` in the resource definition so that it defaults to `NONE` when unset, aligning the configuration with provider behavior and preventing a permadiff. * updated the regional compute template too with the key_revocation_action_type * fixed the formatting
165 lines
5.1 KiB
YAML
165 lines
5.1 KiB
YAML
# Copyright 2025 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
values:
|
|
google_compute_disk.disks["data-0"]:
|
|
architecture: null
|
|
async_primary_disk: []
|
|
create_snapshot_before_destroy: false
|
|
create_snapshot_before_destroy_prefix: null
|
|
description: null
|
|
disk_encryption_key:
|
|
- kms_key_self_link: projects/foo-prod-sec-core/locations/global/keyRings/prod-global-default/cryptoKeys/compute
|
|
kms_key_service_account: null
|
|
raw_key: null
|
|
rsa_encrypted_key: null
|
|
effective_labels:
|
|
disk_name: data-0
|
|
disk_type: pd-balanced
|
|
goog-terraform-provisioned: 'true'
|
|
image: null
|
|
labels:
|
|
disk_name: data-0
|
|
disk_type: pd-balanced
|
|
name: test-data-0
|
|
params: []
|
|
project: foo-test-0
|
|
size: 10
|
|
snapshot: null
|
|
source_disk: null
|
|
source_image_encryption_key: []
|
|
source_instant_snapshot: null
|
|
source_snapshot_encryption_key: []
|
|
source_storage_object: null
|
|
storage_pool: null
|
|
terraform_labels:
|
|
disk_name: data-0
|
|
disk_type: pd-balanced
|
|
goog-terraform-provisioned: 'true'
|
|
timeouts: null
|
|
type: pd-balanced
|
|
zone: europe-west8-a
|
|
google_compute_instance.default[0]:
|
|
advanced_machine_features: []
|
|
allow_stopping_for_update: true
|
|
attached_disk:
|
|
- device_name: data-0
|
|
disk_encryption_key_raw: null
|
|
disk_encryption_key_rsa: null
|
|
disk_encryption_service_account: null
|
|
force_attach: null
|
|
mode: READ_WRITE
|
|
source: test-data-0
|
|
boot_disk:
|
|
- auto_delete: true
|
|
disk_encryption_key_raw: null
|
|
disk_encryption_key_rsa: null
|
|
disk_encryption_service_account: null
|
|
force_attach: null
|
|
initialize_params:
|
|
- enable_confidential_compute: null
|
|
image: projects/debian-cloud/global/images/family/debian-11
|
|
resource_manager_tags: null
|
|
size: 10
|
|
source_image_encryption_key: []
|
|
source_snapshot_encryption_key: []
|
|
storage_pool: null
|
|
type: pd-balanced
|
|
interface: null
|
|
kms_key_self_link: projects/foo-prod-sec-core/locations/global/keyRings/prod-global-default/cryptoKeys/compute
|
|
mode: READ_WRITE
|
|
can_ip_forward: false
|
|
deletion_protection: false
|
|
description: Managed by the compute-vm Terraform module.
|
|
desired_status: null
|
|
effective_labels:
|
|
goog-terraform-provisioned: 'true'
|
|
enable_display: false
|
|
hostname: null
|
|
instance_encryption_key: []
|
|
key_revocation_action_type: NONE
|
|
labels: null
|
|
machine_type: f1-micro
|
|
metadata: null
|
|
metadata_startup_script: null
|
|
name: test
|
|
network_interface:
|
|
- access_config:
|
|
- nat_ip: 35.10.10.10
|
|
public_ptr_domain_name: null
|
|
alias_ip_range: []
|
|
ipv6_access_config: []
|
|
network: projects/foo-dev-net-spoke-0/global/networks/dev-spoke-0
|
|
network_ip: 10.0.0.10
|
|
nic_type: null
|
|
queue_count: null
|
|
security_policy: null
|
|
subnetwork: projects/foo-dev-net-spoke-0/regions/europe-west1/subnetworks/gce
|
|
network_performance_config: []
|
|
params: []
|
|
partner_metadata: null
|
|
project: foo-test-0
|
|
resource_policies: null
|
|
scheduling:
|
|
- automatic_restart: true
|
|
availability_domain: null
|
|
graceful_shutdown: []
|
|
host_error_timeout_seconds: null
|
|
instance_termination_action: null
|
|
local_ssd_recovery_timeout: []
|
|
maintenance_interval: null
|
|
max_run_duration: []
|
|
min_node_cpus: null
|
|
node_affinities: []
|
|
on_host_maintenance: MIGRATE
|
|
on_instance_stop_action: []
|
|
preemptible: false
|
|
provisioning_model: STANDARD
|
|
termination_time: null
|
|
scratch_disk: []
|
|
service_account:
|
|
- scopes:
|
|
- https://www.googleapis.com/auth/devstorage.read_only
|
|
- https://www.googleapis.com/auth/logging.write
|
|
- https://www.googleapis.com/auth/monitoring.write
|
|
shielded_instance_config: []
|
|
tags: null
|
|
terraform_labels:
|
|
goog-terraform-provisioned: 'true'
|
|
timeouts: null
|
|
zone: europe-west8-a
|
|
google_compute_instance_iam_binding.default["$custom_roles:myrole_one"]:
|
|
condition: []
|
|
instance_name: test
|
|
members:
|
|
- group:test-group@example.com
|
|
project: foo-test-0
|
|
role: organizations/366118655033/roles/myRoleOne
|
|
zone: europe-west8-a
|
|
google_tags_location_tag_binding.disks["data-0/foo"]:
|
|
location: europe-west8-a
|
|
tag_value: tagValues/1234567890
|
|
timeouts: null
|
|
google_tags_location_tag_binding.instance["foo"]:
|
|
location: europe-west8-a
|
|
tag_value: tagValues/1234567890
|
|
timeouts: null
|
|
counts:
|
|
google_compute_disk: 1
|
|
google_compute_instance: 1
|
|
google_compute_instance_iam_binding: 1
|
|
google_tags_location_tag_binding: 2
|
|
modules: 0
|
|
resources: 5
|