forked from terraform-google-modules/terraform-google-vm
-
Notifications
You must be signed in to change notification settings - Fork 0
/
variables.tf
318 lines (277 loc) · 9.54 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
/**
* Copyright 2019 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
variable "project_id" {
type = string
description = "The GCP project ID"
default = null
}
variable "name_prefix" {
description = "Name prefix for the instance template"
type = string
default = "default-instance-template"
}
variable "machine_type" {
description = "Machine type to create, e.g. n1-standard-1"
type = string
default = "n1-standard-1"
}
variable "min_cpu_platform" {
description = "Specifies a minimum CPU platform. Applicable values are the friendly names of CPU platforms, such as Intel Haswell or Intel Skylake. See the complete list: https://cloud.google.com/compute/docs/instances/specify-min-cpu-platform"
type = string
default = null
}
variable "can_ip_forward" {
description = "Enable IP forwarding, for NAT instances for example"
type = string
default = "false"
}
variable "tags" {
type = list(string)
description = "Network tags, provided as a list"
default = []
}
variable "labels" {
type = map(string)
description = "Labels, provided as a map"
default = {}
}
variable "preemptible" {
type = bool
description = "Allow the instance to be preempted"
default = false
}
variable "automatic_restart" {
type = bool
description = "(Optional) Specifies whether the instance should be automatically restarted if it is terminated by Compute Engine (not terminated by a user)."
default = true
}
variable "on_host_maintenance" {
type = string
description = "Instance availability Policy"
default = "MIGRATE"
}
variable "region" {
type = string
description = "Region where the instance template should be created."
default = null
}
variable "enable_nested_virtualization" {
type = bool
description = "Defines whether the instance should have nested virtualization enabled."
default = false
}
variable "threads_per_core" {
description = "The number of threads per physical core. To disable simultaneous multithreading (SMT) set this to 1."
type = number
default = null
}
#######
# disk
#######
variable "source_image" {
description = "Source disk image. If neither source_image nor source_image_family is specified, defaults to the latest public CentOS image."
type = string
default = ""
}
variable "source_image_family" {
description = "Source image family. If neither source_image nor source_image_family is specified, defaults to the latest public CentOS image."
type = string
default = "centos-7"
}
variable "source_image_project" {
description = "Project where the source image comes from. The default project contains CentOS images."
type = string
default = "centos-cloud"
}
variable "disk_size_gb" {
description = "Boot disk size in GB"
type = string
default = "100"
}
variable "disk_type" {
description = "Boot disk type, can be either pd-ssd, local-ssd, or pd-standard"
type = string
default = "pd-standard"
}
variable "disk_labels" {
description = "Labels to be assigned to boot disk, provided as a map"
type = map(string)
default = {}
}
variable "disk_encryption_key" {
description = "The id of the encryption key that is stored in Google Cloud KMS to use to encrypt all the disks on this instance"
type = string
default = null
}
variable "auto_delete" {
description = "Whether or not the boot disk should be auto-deleted"
type = string
default = "true"
}
variable "additional_disks" {
description = "List of maps of additional disks. See https://www.terraform.io/docs/providers/google/r/compute_instance_template#disk_name"
type = list(object({
disk_name = string
device_name = string
auto_delete = bool
boot = bool
disk_size_gb = number
disk_type = string
disk_labels = map(string)
}))
default = []
}
####################
# network_interface
####################
variable "network" {
description = "The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks."
type = string
default = ""
}
variable "subnetwork" {
description = "The name of the subnetwork to attach this interface to. The subnetwork must exist in the same region this instance will be created in. Either network or subnetwork must be provided."
type = string
default = ""
}
variable "subnetwork_project" {
description = "The ID of the project in which the subnetwork belongs. If it is not provided, the provider project is used."
type = string
default = ""
}
variable "network_ip" {
description = "Private IP address to assign to the instance if desired."
type = string
default = ""
}
variable "stack_type" {
description = "The stack type for this network interface to identify whether the IPv6 feature is enabled or not. Values are `IPV4_IPV6` or `IPV4_ONLY`. Default behavior is equivalent to IPV4_ONLY."
type = string
default = null
}
variable "additional_networks" {
description = "Additional network interface details for GCE, if any."
default = []
type = list(object({
network = string
subnetwork = string
subnetwork_project = string
network_ip = string
access_config = list(object({
nat_ip = string
network_tier = string
}))
ipv6_access_config = list(object({
network_tier = string
}))
}))
}
###########
# metadata
###########
variable "startup_script" {
description = "User startup script to run when instances spin up"
type = string
default = ""
}
variable "metadata" {
type = map(string)
description = "Metadata, provided as a map"
default = {}
}
##################
# service_account
##################
variable "service_account" {
type = object({
email = string
scopes = set(string)
})
description = "Service account to attach to the instance. See https://www.terraform.io/docs/providers/google/r/compute_instance_template#service_account."
}
###########################
# Shielded VMs
###########################
variable "enable_shielded_vm" {
type = bool
default = false
description = "Whether to enable the Shielded VM configuration on the instance. Note that the instance image must support Shielded VMs. See https://cloud.google.com/compute/docs/images"
}
variable "shielded_instance_config" {
description = "Not used unless enable_shielded_vm is true. Shielded VM configuration for the instance."
type = object({
enable_secure_boot = bool
enable_vtpm = bool
enable_integrity_monitoring = bool
})
default = {
enable_secure_boot = true
enable_vtpm = true
enable_integrity_monitoring = true
}
}
###########################
# Confidential Compute VMs
###########################
variable "enable_confidential_vm" {
type = bool
default = false
description = "Whether to enable the Confidential VM configuration on the instance. Note that the instance image must support Confidential VMs. See https://cloud.google.com/compute/docs/images"
}
###########################
# Public IP
###########################
variable "access_config" {
description = "Access configurations, i.e. IPs via which the VM instance can be accessed via the Internet."
type = list(object({
nat_ip = string
network_tier = string
}))
default = []
}
variable "ipv6_access_config" {
description = "IPv6 access configurations. Currently a max of 1 IPv6 access configuration is supported. If not specified, the instance will have no external IPv6 Internet access."
type = list(object({
network_tier = string
}))
default = []
}
###########################
# Guest Accelerator (GPU)
###########################
variable "gpu" {
description = "GPU information. Type and count of GPU to attach to the instance template. See https://cloud.google.com/compute/docs/gpus more details"
type = object({
type = string
count = number
})
default = null
}
##################
# alias IP range
##################
variable "alias_ip_range" {
description = <<EOF
An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks.
ip_cidr_range: The IP CIDR range represented by this alias IP range. This IP CIDR range must belong to the specified subnetwork and cannot contain IP addresses reserved by system or used by other network interfaces. At the time of writing only a netmask (e.g. /24) may be supplied, with a CIDR format resulting in an API error.
subnetwork_range_name: The subnetwork secondary range name specifying the secondary range from which to allocate the IP CIDR range for this alias IP range. If left unspecified, the primary range of the subnetwork will be used.
EOF
type = object({
ip_cidr_range = string
subnetwork_range_name = string
})
default = null
}