-
Notifications
You must be signed in to change notification settings - Fork 81
/
main.tf
174 lines (167 loc) · 5.21 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
/**
* Copyright 2018 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
locals {
google_load_balancer_ip_ranges = [
"130.211.0.0/22",
"35.191.0.0/16",
]
target_tags = [
"container-vm-test-mig"
]
}
provider "google" {
project = var.project_id
}
provider "google-beta" {
project = var.project_id
}
module "gce-container" {
source = "terraform-google-modules/container-vm/google"
version = "~> 3.0"
container = {
image = var.image
}
}
resource "google_compute_network" "default" {
name = var.network
auto_create_subnetworks = "false"
}
resource "google_compute_subnetwork" "default" {
name = var.subnetwork
ip_cidr_range = "10.125.0.0/20"
network = google_compute_network.default.self_link
region = var.region
private_ip_google_access = true
}
# Router and Cloud NAT are required for installing packages from repos (apache, php etc)
resource "google_compute_router" "default" {
name = "${var.network}-gw-group1"
network = google_compute_network.default.self_link
region = var.region
}
module "cloud-nat" {
source = "terraform-google-modules/cloud-nat/google"
version = "~> 5.0"
router = google_compute_router.default.name
project_id = var.project_id
region = var.region
name = "${var.network}-cloud-nat-group1"
}
module "mig_template" {
source = "terraform-google-modules/vm/google//modules/instance_template"
version = "~> 11.0"
network = google_compute_network.default.self_link
subnetwork = google_compute_subnetwork.default.self_link
service_account = var.service_account
name_prefix = var.network
source_image_family = "cos-stable"
source_image_project = "cos-cloud"
source_image = reverse(split("/", module.gce-container.source_image))[0]
metadata = merge(var.additional_metadata, { "gce-container-declaration" = module.gce-container.metadata_value })
tags = [
"container-vm-test-mig"
]
labels = {
"container-vm" = module.gce-container.vm_container_label
}
}
module "mig" {
source = "terraform-google-modules/vm/google//modules/mig"
version = "~> 11.0"
instance_template = module.mig_template.self_link
region = var.region
hostname = var.network
target_size = var.mig_instance_count
named_ports = [
{
name = "http",
port = var.image_port
}
]
}
module "http-lb" {
source = "GoogleCloudPlatform/lb-http/google"
version = "~> 10.0"
project = var.project_id
name = "${var.mig_name}-lb"
target_tags = local.target_tags
firewall_networks = [
google_compute_network.default.self_link
]
backends = {
default = {
description = null
protocol = "HTTP"
port = 80
port_name = "http"
timeout_sec = 30
connection_draining_timeout_sec = null
enable_cdn = false
security_policy = null
session_affinity = null
affinity_cookie_ttl_sec = null
custom_request_headers = null
custom_response_headers = null
health_check = {
check_interval_sec = null
timeout_sec = null
healthy_threshold = null
unhealthy_threshold = null
request_path = "/"
port = 80
host = null
logging = null
}
log_config = {
enable = false
sample_rate = null
}
groups = [
{
group = module.mig.instance_group
balancing_mode = null
capacity_scaler = null
description = null
max_connections = null
max_connections_per_instance = null
max_connections_per_endpoint = null
max_rate = null
max_rate_per_instance = null
max_rate_per_endpoint = null
max_utilization = null
}
]
iap_config = {
enable = false
oauth2_client_id = ""
oauth2_client_secret = ""
}
}
}
}
resource "google_compute_firewall" "lb-to-instances" {
name = "${var.mig_name}-firewall-lb-to-instances"
project = var.project_id
network = var.network
allow {
protocol = "tcp"
ports = [
var.image_port
]
}
source_ranges = local.google_load_balancer_ip_ranges
target_tags = local.target_tags
}