setup/infra/private-cluster/turn-mig/main.tf

/**
 * Copyright 2020 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

data "template_file" "cloud-config" {
  template = file("${path.module}/assets/cloud-config.yaml")

  vars = {
    custom_var    = var.cloud_init_custom_var
    instance_name = "${var.name}"
  }
}

resource "google_compute_instance_template" "default" {
  name_prefix  = "${var.name}-"
  project      = var.project_id
  machine_type = var.machine_type
  labels       = {}
  tags         = var.vm_tags
  region       = var.region

  scheduling {
    automatic_restart   = false
    on_host_maintenance = var.preemptible ? "TERMINATE" : "MIGRATE"
    preemptible         = var.preemptible
  }

  disk {
    source_image = "cos-cloud/cos-stable"
    auto_delete  = true
    boot         = true
    disk_size_gb = var.disk_size_gb
  }

  service_account {
    email  = var.service_account
    scopes = var.scopes
  }

  can_ip_forward = false

  network_interface {
    subnetwork = var.subnetwork
    network_ip = ""
    access_config {}
  }

  metadata = {
    google-logging-enabled    = var.stackdriver_logging
    google-monitoring-enabled = var.stackdriver_monitoring
    user-data                 = data.template_file.cloud-config.rendered
  }

  lifecycle {
    create_before_destroy = "true"
  }
}

module "mig" {
  source                    = "terraform-google-modules/vm/google//modules/mig"
  version                   = "~> 2.1.0"
  project_id                = var.project_id
  instance_template         = google_compute_instance_template.default.self_link
  subnetwork                = var.subnetwork
  region                    = var.region
  distribution_policy_zones = var.zones
  hostname                  = var.name
  autoscaling_enabled       = false
  target_size               = var.instance_count

  named_ports = [
    {
      name = "http",
      port = 8088
    },
    {
      name = "turn"
      port = 3478
    }
  ]
}