terraform/modules/autoscaler-functions/main.tf

/**
 * Copyright 2024 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     https://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

terraform {
  provider_meta "google" {
    module_name = "cloud-solutions/memorystore-cluster-autoscaler-deploy-cf-v3.0.0" // x-release-please-version
  }
}

// PubSub

resource "google_pubsub_topic" "poller_topic" {
  name = "poller-topic"
}

resource "google_pubsub_topic_iam_member" "poller_pubsub_sub_iam" {
  project = var.project_id
  topic   = google_pubsub_topic.poller_topic.name
  role    = "roles/pubsub.subscriber"
  member  = "serviceAccount:${var.poller_sa_email}"
}

resource "google_pubsub_topic_iam_member" "forwarder_pubsub_pub_iam" {
  for_each = toset(var.forwarder_sa_emails)

  project = var.project_id
  topic   = google_pubsub_topic.poller_topic.name
  role    = "roles/pubsub.publisher"
  member  = each.key
}

resource "google_pubsub_topic" "scaler_topic" {
  name = "scaler-topic"
}

resource "google_pubsub_topic_iam_member" "poller_pubsub_pub_iam" {
  project = var.project_id
  topic   = google_pubsub_topic.scaler_topic.name
  role    = "roles/pubsub.publisher"
  member  = "serviceAccount:${var.poller_sa_email}"
}

resource "google_pubsub_topic_iam_member" "scaler_pubsub_sub_iam" {
  project = var.project_id
  topic   = google_pubsub_topic.scaler_topic.name
  role    = "roles/pubsub.subscriber"
  member  = "serviceAccount:${var.scaler_sa_email}"
}

// Cloud Run functions

resource "google_storage_bucket" "bucket_gcf_source" {
  name                        = "${var.project_id}-gcf-source"
  storage_class               = "REGIONAL"
  location                    = var.region
  force_destroy               = "true"
  uniform_bucket_level_access = var.uniform_bucket_level_access
}

data "archive_file" "local_source" {
  type        = "zip"
  source_dir  = abspath("${path.module}/../../..")
  output_path = "${var.local_output_path}/src.zip"
  excludes    = [".git", ".github", ".husky", ".nyc_output", ".vscode", "kubernetes", "node_modules", "resources", "terraform"]
}

resource "google_storage_bucket_object" "gcs_functions_source" {
  name   = "src.${data.archive_file.local_source.output_md5}.zip"
  bucket = google_storage_bucket.bucket_gcf_source.name
  source = data.archive_file.local_source.output_path
}

resource "google_cloudfunctions2_function" "poller_function" {
  name     = "tf-poller-function"
  project  = var.project_id
  location = var.region

  build_config {
    runtime     = "nodejs${var.nodejs_version}"
    entry_point = "checkMemorystoreClusterScaleMetricsPubSub"
    source {
      storage_source {
        bucket = google_storage_bucket.bucket_gcf_source.name
        object = google_storage_bucket_object.gcs_functions_source.name
      }
    }
    service_account = var.build_sa_id
  }

  service_config {
    available_memory      = "256M"
    ingress_settings      = "ALLOW_INTERNAL_AND_GCLB"
    service_account_email = var.poller_sa_email
  }

  event_trigger {
    event_type            = "google.cloud.pubsub.topic.v1.messagePublished"
    pubsub_topic          = google_pubsub_topic.poller_topic.id
    retry_policy          = "RETRY_POLICY_RETRY"
    service_account_email = var.poller_sa_email
  }

  lifecycle {
    ignore_changes = [
      service_config[0].max_instance_count
    ]
  }
}

resource "google_cloudfunctions2_function" "scaler_function" {
  name     = "tf-scaler-function"
  project  = var.project_id
  location = var.region

  build_config {
    runtime     = "nodejs${var.nodejs_version}"
    entry_point = "scaleMemorystoreClusterPubSub"
    source {
      storage_source {
        bucket = google_storage_bucket.bucket_gcf_source.name
        object = google_storage_bucket_object.gcs_functions_source.name
      }
    }
    service_account = var.build_sa_id
  }

  service_config {
    available_memory      = "256M"
    ingress_settings      = "ALLOW_INTERNAL_AND_GCLB"
    service_account_email = var.scaler_sa_email
  }

  event_trigger {
    event_type            = "google.cloud.pubsub.topic.v1.messagePublished"
    pubsub_topic          = google_pubsub_topic.scaler_topic.id
    retry_policy          = "RETRY_POLICY_RETRY"
    service_account_email = var.scaler_sa_email
  }

  lifecycle {
    ignore_changes = [
      service_config[0].max_instance_count
    ]
  }
}

resource "google_cloud_run_service_iam_member" "cloud_run_poller_invoker" {
  project  = google_cloudfunctions2_function.poller_function.project
  location = google_cloudfunctions2_function.poller_function.location
  service  = google_cloudfunctions2_function.poller_function.name
  role     = "roles/run.invoker"
  member   = "serviceAccount:${var.poller_sa_email}"
}

resource "google_cloud_run_service_iam_member" "cloud_run_scaler_invoker" {
  project  = google_cloudfunctions2_function.scaler_function.project
  location = google_cloudfunctions2_function.scaler_function.location
  service  = google_cloudfunctions2_function.scaler_function.name
  role     = "roles/run.invoker"
  member   = "serviceAccount:${var.scaler_sa_email}"
}