Re-base

2020-10-12 17:07:52 -04:00
parent 8aaa4b93eb
commit e38486c7cc
27 changed files with 1129 additions and 100 deletions
--- a/bt-autoscaler/terraform/roots/central/.terraform/plugins/selections.json
+++ b/bt-autoscaler/terraform/roots/central/.terraform/plugins/selections.json
@@ -1,16 +1,8 @@
 {
-  "registry.terraform.io/hashicorp/google": {
-    "hash": "h1:m4KVvG8BmApeUlLI2cL3P8sTY5yZZxrRE7PaHQQRa/M=",
-    "version": "3.41.0"
-  },
  "registry.terraform.io/hashicorp/google-beta": {
    "hash": "h1:zsIZIszrwu9B9TGiUMGUF3QrpOT6OxGrTIJIo+b8Re0=",
    "version": "3.41.0"
  },
-  "registry.terraform.io/hashicorp/null": {
-    "hash": "h1:ysHGBhBNkIiJLEpthB/IVCLpA1Qoncp3KbCTFGFZTO0=",
-    "version": "3.0.0"
-  },
  "registry.terraform.io/hashicorp/random": {
    "hash": "h1:nFL6uiwsQFLiP8QCr35sPfWe9LpXI3/c7gP9tYnih+k=",
    "version": "2.3.0"
--- a/bt-autoscaler/terraform/roots/central/graph.svg
+++ b/bt-autoscaler/terraform/roots/central/graph.svg
@@ -0,0 +1,367 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<!-- Generated by graphviz version 2.43.0 (0)
+ -->
+<!-- Title: %3 Pages: 1 -->
+<svg width="2796pt" height="476pt"
+ viewBox="0.00 0.00 2796.37 476.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 472)">
+<title>%3</title>
+<polygon fill="white" stroke="transparent" points="-4,4 -4,-472 2792.37,-472 2792.37,4 -4,4"/>
+<!-- [root] google_compute_disk.data (expand) -->
+<g id="node1" class="node">
+<title>[root] google_compute_disk.data (expand)</title>
+<polygon fill="none" stroke="black" points="2046,-180 1842,-180 1842,-144 2046,-144 2046,-180"/>
+<text text-anchor="middle" x="1944" y="-158.3" font-family="Times,serif" font-size="14.00">google_compute_disk.data</text>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] -->
+<g id="node3" class="node">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]</title>
+<polygon fill="none" stroke="black" points="1589,-108 1212.29,-90 1589,-72 1965.71,-90 1589,-108"/>
+<text text-anchor="middle" x="1589" y="-86.3" font-family="Times,serif" font-size="14.00">provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]</text>
+</g>
+<!-- [root] google_compute_disk.data (expand)&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] -->
+<g id="edge1" class="edge">
+<title>[root] google_compute_disk.data (expand)&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]</title>
+<path fill="none" stroke="black" d="M1857.61,-143.97C1799.91,-132.59 1724.6,-117.74 1668.4,-106.66"/>
+<polygon fill="black" stroke="black" points="1668.98,-103.2 1658.5,-104.7 1667.63,-110.07 1668.98,-103.2"/>
+</g>
+<!-- [root] random_id.vm_suffix (expand) -->
+<g id="node5" class="node">
+<title>[root] random_id.vm_suffix (expand)</title>
+<polygon fill="none" stroke="black" points="2376,-108 2212,-108 2212,-72 2376,-72 2376,-108"/>
+<text text-anchor="middle" x="2294" y="-86.3" font-family="Times,serif" font-size="14.00">random_id.vm_suffix</text>
+</g>
+<!-- [root] google_compute_disk.data (expand)&#45;&gt;[root] random_id.vm_suffix (expand) -->
+<g id="edge2" class="edge">
+<title>[root] google_compute_disk.data (expand)&#45;&gt;[root] random_id.vm_suffix (expand)</title>
+<path fill="none" stroke="black" d="M2029.17,-143.97C2081.46,-133.51 2148.43,-120.11 2201.94,-109.41"/>
+<polygon fill="black" stroke="black" points="2202.65,-112.84 2211.77,-107.45 2201.28,-105.98 2202.65,-112.84"/>
+</g>
+<!-- [root] var.disk_type -->
+<g id="node10" class="node">
+<title>[root] var.disk_type</title>
+<polygon fill="none" stroke="black" points="2088,-108 1984,-108 1984,-72 2094,-72 2094,-102 2088,-108"/>
+<polyline fill="none" stroke="black" points="2088,-108 2088,-102 "/>
+<polyline fill="none" stroke="black" points="2094,-102 2088,-102 "/>
+<text text-anchor="middle" x="2039" y="-86.3" font-family="Times,serif" font-size="14.00">var.disk_type</text>
+</g>
+<!-- [root] google_compute_disk.data (expand)&#45;&gt;[root] var.disk_type -->
+<g id="edge3" class="edge">
+<title>[root] google_compute_disk.data (expand)&#45;&gt;[root] var.disk_type</title>
+<path fill="none" stroke="black" d="M1967.48,-143.7C1979.56,-134.8 1994.45,-123.82 2007.52,-114.2"/>
+<polygon fill="black" stroke="black" points="2009.81,-116.85 2015.79,-108.1 2005.66,-111.22 2009.81,-116.85"/>
+</g>
+<!-- [root] google_compute_instance.default (expand) -->
+<g id="node2" class="node">
+<title>[root] google_compute_instance.default (expand)</title>
+<polygon fill="none" stroke="black" points="2152,-252 1898,-252 1898,-216 2152,-216 2152,-252"/>
+<text text-anchor="middle" x="2025" y="-230.3" font-family="Times,serif" font-size="14.00">google_compute_instance.default</text>
+</g>
+<!-- [root] google_compute_instance.default (expand)&#45;&gt;[root] google_compute_disk.data (expand) -->
+<g id="edge4" class="edge">
+<title>[root] google_compute_instance.default (expand)&#45;&gt;[root] google_compute_disk.data (expand)</title>
+<path fill="none" stroke="black" d="M2004.98,-215.7C1994.87,-206.97 1982.46,-196.24 1971.48,-186.75"/>
+<polygon fill="black" stroke="black" points="1973.65,-183.99 1963.79,-180.1 1969.07,-189.29 1973.65,-183.99"/>
+</g>
+<!-- [root] var.image -->
+<g id="node11" class="node">
+<title>[root] var.image</title>
+<polygon fill="none" stroke="black" points="2144,-180 2064,-180 2064,-144 2150,-144 2150,-174 2144,-180"/>
+<polyline fill="none" stroke="black" points="2144,-180 2144,-174 "/>
+<polyline fill="none" stroke="black" points="2150,-174 2144,-174 "/>
+<text text-anchor="middle" x="2107" y="-158.3" font-family="Times,serif" font-size="14.00">var.image</text>
+</g>
+<!-- [root] google_compute_instance.default (expand)&#45;&gt;[root] var.image -->
+<g id="edge5" class="edge">
+<title>[root] google_compute_instance.default (expand)&#45;&gt;[root] var.image</title>
+<path fill="none" stroke="black" d="M2045.27,-215.7C2055.5,-206.97 2068.06,-196.24 2079.18,-186.75"/>
+<polygon fill="black" stroke="black" points="2081.63,-189.26 2086.96,-180.1 2077.09,-183.94 2081.63,-189.26"/>
+</g>
+<!-- [root] var.vm_type -->
+<g id="node19" class="node">
+<title>[root] var.vm_type</title>
+<polygon fill="none" stroke="black" points="2265.5,-180 2168.5,-180 2168.5,-144 2271.5,-144 2271.5,-174 2265.5,-180"/>
+<polyline fill="none" stroke="black" points="2265.5,-180 2265.5,-174 "/>
+<polyline fill="none" stroke="black" points="2271.5,-174 2265.5,-174 "/>
+<text text-anchor="middle" x="2220" y="-158.3" font-family="Times,serif" font-size="14.00">var.vm_type</text>
+</g>
+<!-- [root] google_compute_instance.default (expand)&#45;&gt;[root] var.vm_type -->
+<g id="edge6" class="edge">
+<title>[root] google_compute_instance.default (expand)&#45;&gt;[root] var.vm_type</title>
+<path fill="none" stroke="black" d="M2072.7,-215.88C2099.95,-206.09 2134.3,-193.77 2162.97,-183.47"/>
+<polygon fill="black" stroke="black" points="2164.22,-186.74 2172.45,-180.07 2161.86,-180.15 2164.22,-186.74"/>
+</g>
+<!-- [root] var.project_id -->
+<g id="node14" class="node">
+<title>[root] var.project_id</title>
+<polygon fill="none" stroke="black" points="1520.5,-36 1413.5,-36 1413.5,0 1526.5,0 1526.5,-30 1520.5,-36"/>
+<polyline fill="none" stroke="black" points="1520.5,-36 1520.5,-30 "/>
+<polyline fill="none" stroke="black" points="1526.5,-30 1520.5,-30 "/>
+<text text-anchor="middle" x="1470" y="-14.3" font-family="Times,serif" font-size="14.00">var.project_id</text>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]&#45;&gt;[root] var.project_id -->
+<g id="edge21" class="edge">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]&#45;&gt;[root] var.project_id</title>
+<path fill="none" stroke="black" d="M1562,-73.12C1546,-63.7 1525.47,-51.63 1507.87,-41.28"/>
+<polygon fill="black" stroke="black" points="1509.37,-38.1 1498.98,-36.04 1505.82,-44.13 1509.37,-38.1"/>
+</g>
+<!-- [root] var.region -->
+<g id="node15" class="node">
+<title>[root] var.region</title>
+<polygon fill="none" stroke="black" points="1627.5,-36 1544.5,-36 1544.5,0 1633.5,0 1633.5,-30 1627.5,-36"/>
+<polyline fill="none" stroke="black" points="1627.5,-36 1627.5,-30 "/>
+<polyline fill="none" stroke="black" points="1633.5,-30 1627.5,-30 "/>
+<text text-anchor="middle" x="1589" y="-14.3" font-family="Times,serif" font-size="14.00">var.region</text>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]&#45;&gt;[root] var.region -->
+<g id="edge22" class="edge">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]&#45;&gt;[root] var.region</title>
+<path fill="none" stroke="black" d="M1589,-71.7C1589,-63.98 1589,-54.71 1589,-46.11"/>
+<polygon fill="black" stroke="black" points="1592.5,-46.1 1589,-36.1 1585.5,-46.1 1592.5,-46.1"/>
+</g>
+<!-- [root] var.zone -->
+<g id="node20" class="node">
+<title>[root] var.zone</title>
+<polygon fill="none" stroke="black" points="1722,-36 1652,-36 1652,0 1728,0 1728,-30 1722,-36"/>
+<polyline fill="none" stroke="black" points="1722,-36 1722,-30 "/>
+<polyline fill="none" stroke="black" points="1728,-30 1722,-30 "/>
+<text text-anchor="middle" x="1690" y="-14.3" font-family="Times,serif" font-size="14.00">var.zone</text>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]&#45;&gt;[root] var.zone -->
+<g id="edge23" class="edge">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;]&#45;&gt;[root] var.zone</title>
+<path fill="none" stroke="black" d="M1612.17,-72.94C1625.41,-63.76 1642.24,-52.1 1656.86,-41.97"/>
+<polygon fill="black" stroke="black" points="1658.95,-44.78 1665.17,-36.21 1654.96,-39.03 1658.95,-44.78"/>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] -->
+<g id="node4" class="node">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;]</title>
+<polygon fill="none" stroke="black" points="2294,-36 1943.6,-18 2294,0 2644.4,-18 2294,-36"/>
+<text text-anchor="middle" x="2294" y="-14.3" font-family="Times,serif" font-size="14.00">provider[&quot;registry.terraform.io/hashicorp/random&quot;]</text>
+</g>
+<!-- [root] random_id.vm_suffix (expand)&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] -->
+<g id="edge25" class="edge">
+<title>[root] random_id.vm_suffix (expand)&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;]</title>
+<path fill="none" stroke="black" d="M2294,-71.7C2294,-63.98 2294,-54.71 2294,-46.11"/>
+<polygon fill="black" stroke="black" points="2297.5,-46.1 2294,-36.1 2290.5,-46.1 2297.5,-46.1"/>
+</g>
+<!-- [root] var.additional_users -->
+<g id="node6" class="node">
+<title>[root] var.additional_users</title>
+<polygon fill="none" stroke="black" points="154,-324 0,-324 0,-288 160,-288 160,-318 154,-324"/>
+<polyline fill="none" stroke="black" points="154,-324 154,-318 "/>
+<polyline fill="none" stroke="black" points="160,-318 154,-318 "/>
+<text text-anchor="middle" x="80" y="-302.3" font-family="Times,serif" font-size="14.00">var.additional_users</text>
+</g>
+<!-- [root] var.availability_type -->
+<g id="node7" class="node">
+<title>[root] var.availability_type</title>
+<polygon fill="none" stroke="black" points="332,-324 178,-324 178,-288 338,-288 338,-318 332,-324"/>
+<polyline fill="none" stroke="black" points="332,-324 332,-318 "/>
+<polyline fill="none" stroke="black" points="338,-318 332,-318 "/>
+<text text-anchor="middle" x="258" y="-302.3" font-family="Times,serif" font-size="14.00">var.availability_type</text>
+</g>
+<!-- [root] var.backup_configuration -->
+<g id="node8" class="node">
+<title>[root] var.backup_configuration</title>
+<polygon fill="none" stroke="black" points="545.5,-324 356.5,-324 356.5,-288 551.5,-288 551.5,-318 545.5,-324"/>
+<polyline fill="none" stroke="black" points="545.5,-324 545.5,-318 "/>
+<polyline fill="none" stroke="black" points="551.5,-318 545.5,-318 "/>
+<text text-anchor="middle" x="454" y="-302.3" font-family="Times,serif" font-size="14.00">var.backup_configuration</text>
+</g>
+<!-- [root] var.database_version -->
+<g id="node9" class="node">
+<title>[root] var.database_version</title>
+<polygon fill="none" stroke="black" points="730.5,-324 569.5,-324 569.5,-288 736.5,-288 736.5,-318 730.5,-324"/>
+<polyline fill="none" stroke="black" points="730.5,-324 730.5,-318 "/>
+<polyline fill="none" stroke="black" points="736.5,-318 730.5,-318 "/>
+<text text-anchor="middle" x="653" y="-302.3" font-family="Times,serif" font-size="14.00">var.database_version</text>
+</g>
+<!-- [root] var.min_cpu -->
+<g id="node12" class="node">
+<title>[root] var.min_cpu</title>
+<polygon fill="none" stroke="black" points="850,-324 754,-324 754,-288 856,-288 856,-318 850,-324"/>
+<polyline fill="none" stroke="black" points="850,-324 850,-318 "/>
+<polyline fill="none" stroke="black" points="856,-318 850,-318 "/>
+<text text-anchor="middle" x="805" y="-302.3" font-family="Times,serif" font-size="14.00">var.min_cpu</text>
+</g>
+<!-- [root] var.private_network -->
+<g id="node13" class="node">
+<title>[root] var.private_network</title>
+<polygon fill="none" stroke="black" points="1027.5,-324 874.5,-324 874.5,-288 1033.5,-288 1033.5,-318 1027.5,-324"/>
+<polyline fill="none" stroke="black" points="1027.5,-324 1027.5,-318 "/>
+<polyline fill="none" stroke="black" points="1033.5,-318 1027.5,-318 "/>
+<text text-anchor="middle" x="954" y="-302.3" font-family="Times,serif" font-size="14.00">var.private_network</text>
+</g>
+<!-- [root] var.tier -->
+<g id="node16" class="node">
+<title>[root] var.tier</title>
+<polygon fill="none" stroke="black" points="1114,-324 1052,-324 1052,-288 1120,-288 1120,-318 1114,-324"/>
+<polyline fill="none" stroke="black" points="1114,-324 1114,-318 "/>
+<polyline fill="none" stroke="black" points="1120,-318 1114,-318 "/>
+<text text-anchor="middle" x="1086" y="-302.3" font-family="Times,serif" font-size="14.00">var.tier</text>
+</g>
+<!-- [root] var.user_name -->
+<g id="node17" class="node">
+<title>[root] var.user_name</title>
+<polygon fill="none" stroke="black" points="1252,-324 1138,-324 1138,-288 1258,-288 1258,-318 1252,-324"/>
+<polyline fill="none" stroke="black" points="1252,-324 1252,-318 "/>
+<polyline fill="none" stroke="black" points="1258,-318 1252,-318 "/>
+<text text-anchor="middle" x="1198" y="-302.3" font-family="Times,serif" font-size="14.00">var.user_name</text>
+</g>
+<!-- [root] var.user_password -->
+<g id="node18" class="node">
+<title>[root] var.user_password</title>
+<polygon fill="none" stroke="black" points="1419.5,-324 1276.5,-324 1276.5,-288 1425.5,-288 1425.5,-318 1419.5,-324"/>
+<polyline fill="none" stroke="black" points="1419.5,-324 1419.5,-318 "/>
+<polyline fill="none" stroke="black" points="1425.5,-318 1419.5,-318 "/>
+<text text-anchor="middle" x="1351" y="-302.3" font-family="Times,serif" font-size="14.00">var.user_password</text>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup) -->
+<g id="node21" class="node">
+<title>[root] meta.count&#45;boundary (EachMode fixup)</title>
+<ellipse fill="none" stroke="black" cx="1020" cy="-378" rx="222.86" ry="18"/>
+<text text-anchor="middle" x="1020" y="-374.3" font-family="Times,serif" font-size="14.00">[root] meta.count&#45;boundary (EachMode fixup)</text>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.additional_users -->
+<g id="edge9" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.additional_users</title>
+<path fill="none" stroke="black" d="M812.53,-371.41C642.32,-365.1 395.02,-351.97 170.46,-324.09"/>
+<polygon fill="black" stroke="black" points="170.82,-320.61 160.46,-322.84 169.94,-327.56 170.82,-320.61"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.availability_type -->
+<g id="edge10" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.availability_type</title>
+<path fill="none" stroke="black" d="M834.82,-367.92C701.95,-360.09 518.54,-346.62 348.6,-324.14"/>
+<polygon fill="black" stroke="black" points="348.84,-320.64 338.47,-322.78 347.91,-327.57 348.84,-320.64"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.backup_configuration -->
+<g id="edge11" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.backup_configuration</title>
+<path fill="none" stroke="black" d="M888.44,-363.41C798.95,-353.79 677.6,-340.02 561.71,-324.21"/>
+<polygon fill="black" stroke="black" points="561.97,-320.71 551.59,-322.82 561.02,-327.64 561.97,-320.71"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.database_version -->
+<g id="edge12" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.database_version</title>
+<path fill="none" stroke="black" d="M937.18,-361.2C880.62,-350.42 805.58,-336.1 746.82,-324.89"/>
+<polygon fill="black" stroke="black" points="747.27,-321.42 736.79,-322.98 745.96,-328.29 747.27,-321.42"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.min_cpu -->
+<g id="edge13" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.min_cpu</title>
+<path fill="none" stroke="black" d="M969.05,-360.41C938.21,-350.37 898.7,-337.51 866.18,-326.92"/>
+<polygon fill="black" stroke="black" points="866.92,-323.48 856.33,-323.71 864.76,-330.14 866.92,-323.48"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.private_network -->
+<g id="edge14" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.private_network</title>
+<path fill="none" stroke="black" d="M1003.69,-359.7C995.69,-351.22 985.93,-340.86 977.18,-331.58"/>
+<polygon fill="black" stroke="black" points="979.53,-328.98 970.13,-324.1 974.44,-333.78 979.53,-328.98"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.tier -->
+<g id="edge15" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.tier</title>
+<path fill="none" stroke="black" d="M1036.31,-359.7C1044.31,-351.22 1054.07,-340.86 1062.82,-331.58"/>
+<polygon fill="black" stroke="black" points="1065.56,-333.78 1069.87,-324.1 1060.47,-328.98 1065.56,-333.78"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.user_name -->
+<g id="edge16" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.user_name</title>
+<path fill="none" stroke="black" d="M1062.64,-360.23C1087.37,-350.51 1118.73,-338.17 1145.03,-327.83"/>
+<polygon fill="black" stroke="black" points="1146.45,-331.03 1154.48,-324.12 1143.89,-324.52 1146.45,-331.03"/>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.user_password -->
+<g id="edge17" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] var.user_password</title>
+<path fill="none" stroke="black" d="M1095.52,-361.03C1146.43,-350.26 1213.66,-336.05 1266.37,-324.9"/>
+<polygon fill="black" stroke="black" points="1267.31,-328.28 1276.37,-322.78 1265.86,-321.43 1267.31,-328.28"/>
+</g>
+<!-- [root] output.gce_external_ip (expand) -->
+<g id="node22" class="node">
+<title>[root] output.gce_external_ip (expand)</title>
+<ellipse fill="none" stroke="black" cx="1632" cy="-306" rx="188.47" ry="18"/>
+<text text-anchor="middle" x="1632" y="-302.3" font-family="Times,serif" font-size="14.00">[root] output.gce_external_ip (expand)</text>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] output.gce_external_ip (expand) -->
+<g id="edge7" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] output.gce_external_ip (expand)</title>
+<path fill="none" stroke="black" d="M1142.74,-362.96C1248.21,-350.9 1399.66,-333.58 1506.04,-321.41"/>
+<polygon fill="black" stroke="black" points="1506.66,-324.86 1516.2,-320.25 1505.86,-317.9 1506.66,-324.86"/>
+</g>
+<!-- [root] output.gce_internal_ip (expand) -->
+<g id="node23" class="node">
+<title>[root] output.gce_internal_ip (expand)</title>
+<ellipse fill="none" stroke="black" cx="2025" cy="-306" rx="186.57" ry="18"/>
+<text text-anchor="middle" x="2025" y="-302.3" font-family="Times,serif" font-size="14.00">[root] output.gce_internal_ip (expand)</text>
+</g>
+<!-- [root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] output.gce_internal_ip (expand) -->
+<g id="edge8" class="edge">
+<title>[root] meta.count&#45;boundary (EachMode fixup)&#45;&gt;[root] output.gce_internal_ip (expand)</title>
+<path fill="none" stroke="black" d="M1193.67,-366.69C1357.54,-356.7 1610.06,-340.66 1829,-324 1846.6,-322.66 1865.08,-321.17 1883.37,-319.64"/>
+<polygon fill="black" stroke="black" points="1883.84,-323.11 1893.51,-318.79 1883.25,-316.14 1883.84,-323.11"/>
+</g>
+<!-- [root] output.gce_external_ip (expand)&#45;&gt;[root] google_compute_instance.default (expand) -->
+<g id="edge18" class="edge">
+<title>[root] output.gce_external_ip (expand)&#45;&gt;[root] google_compute_instance.default (expand)</title>
+<path fill="none" stroke="black" d="M1716.79,-289.9C1776.12,-279.33 1855.8,-265.14 1919.27,-253.83"/>
+<polygon fill="black" stroke="black" points="1920.09,-257.24 1929.32,-252.04 1918.86,-250.35 1920.09,-257.24"/>
+</g>
+<!-- [root] output.gce_internal_ip (expand)&#45;&gt;[root] google_compute_instance.default (expand) -->
+<g id="edge19" class="edge">
+<title>[root] output.gce_internal_ip (expand)&#45;&gt;[root] google_compute_instance.default (expand)</title>
+<path fill="none" stroke="black" d="M2025,-287.7C2025,-279.98 2025,-270.71 2025,-262.11"/>
+<polygon fill="black" stroke="black" points="2028.5,-262.1 2025,-252.1 2021.5,-262.1 2028.5,-262.1"/>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close) -->
+<g id="node24" class="node">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close)</title>
+<ellipse fill="none" stroke="black" cx="2123" cy="-378" rx="328.44" ry="18"/>
+<text text-anchor="middle" x="2123" y="-374.3" font-family="Times,serif" font-size="14.00">[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close)</text>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close)&#45;&gt;[root] google_compute_instance.default (expand) -->
+<g id="edge20" class="edge">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close)&#45;&gt;[root] google_compute_instance.default (expand)</title>
+<path fill="none" stroke="black" d="M2177.3,-360.21C2194.32,-352.1 2211.2,-340.45 2221,-324 2229.19,-310.26 2230.73,-300.7 2221,-288 2210.23,-273.93 2177.68,-262.73 2142.13,-254.33"/>
+<polygon fill="black" stroke="black" points="2142.56,-250.84 2132.04,-252.03 2141.01,-257.66 2142.56,-250.84"/>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close) -->
+<g id="node25" class="node">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close)</title>
+<ellipse fill="none" stroke="black" cx="2479" cy="-234" rx="309.25" ry="18"/>
+<text text-anchor="middle" x="2479" y="-230.3" font-family="Times,serif" font-size="14.00">[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close)</text>
+</g>
+<!-- [root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close)&#45;&gt;[root] random_id.vm_suffix (expand) -->
+<g id="edge24" class="edge">
+<title>[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close)&#45;&gt;[root] random_id.vm_suffix (expand)</title>
+<path fill="none" stroke="black" d="M2456.68,-215.87C2423.63,-190.5 2361.56,-142.85 2324.38,-114.32"/>
+<polygon fill="black" stroke="black" points="2326.46,-111.5 2316.39,-108.19 2322.2,-117.05 2326.46,-111.5"/>
+</g>
+<!-- [root] root -->
+<g id="node26" class="node">
+<title>[root] root</title>
+<ellipse fill="none" stroke="black" cx="2123" cy="-450" rx="58.49" ry="18"/>
+<text text-anchor="middle" x="2123" y="-446.3" font-family="Times,serif" font-size="14.00">[root] root</text>
+</g>
+<!-- [root] root&#45;&gt;[root] meta.count&#45;boundary (EachMode fixup) -->
+<g id="edge26" class="edge">
+<title>[root] root&#45;&gt;[root] meta.count&#45;boundary (EachMode fixup)</title>
+<path fill="none" stroke="black" d="M2066.4,-445.41C1907.84,-435.35 1454.23,-406.56 1199.37,-390.38"/>
+<polygon fill="black" stroke="black" points="1199.46,-386.88 1189.26,-389.74 1199.02,-393.87 1199.46,-386.88"/>
+</g>
+<!-- [root] root&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close) -->
+<g id="edge27" class="edge">
+<title>[root] root&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/google&#45;beta&quot;] (close)</title>
+<path fill="none" stroke="black" d="M2123,-431.7C2123,-423.98 2123,-414.71 2123,-406.11"/>
+<polygon fill="black" stroke="black" points="2126.5,-406.1 2123,-396.1 2119.5,-406.1 2126.5,-406.1"/>
+</g>
+<!-- [root] root&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close) -->
+<g id="edge28" class="edge">
+<title>[root] root&#45;&gt;[root] provider[&quot;registry.terraform.io/hashicorp/random&quot;] (close)</title>
+<path fill="none" stroke="black" d="M2181.47,-448.02C2267.64,-445.27 2422.58,-434.89 2460,-396 2494.22,-360.43 2490.47,-298.05 2484.72,-262.27"/>
+<polygon fill="black" stroke="black" points="2488.1,-261.32 2482.91,-252.09 2481.21,-262.54 2488.1,-261.32"/>
+</g>
+</g>
+</svg>
--- a/bt-autoscaler/terraform/roots/central/iam.json
+++ b/bt-autoscaler/terraform/roots/central/iam.json
@@ -0,0 +1,19 @@
+{
+  "bindings": [
+    {
+      "members": [
+        "user:jprdonnelly@gmail.com"
+      ],
+      "role": "roles/iam.serviceAccountAdmin"
+    },
+    {
+      "members": [
+        "serviceAccount:593942668809-compute@developer.gserviceaccount.com",
+        "user:jprdonnelly@gmail.com"
+      ],
+      "role": "roles/iam.serviceAccountUser"
+    }
+  ],
+  "etag": "BwWvglMDG2Y=",
+  "version": 1
+}
--- a/bt-autoscaler/terraform/roots/central/iam.yaml
+++ b/bt-autoscaler/terraform/roots/central/iam.yaml
@@ -0,0 +1,14 @@
+bindings:
+- members:
+  - user:jprdonnelly@gmail.com
+  role: roles/iam.serviceAccountAdmin
+- members:
+  - serviceAccount:593942668809-compute@developer.gserviceaccount.com
+  - user:jprdonnelly@gmail.com
+  role: roles/iam.serviceAccountUser
+- members:
+  - serviceAccount:593942668809-compute@developer.gserviceaccount.com
+  - user:jprdonnelly@gmail.com
+  role: roles/compute.instanceAdmin.v1
+etag: BwWvglMDG2Y=
+version: 1
--- a/bt-autoscaler/terraform/roots/central/main.tf
+++ b/bt-autoscaler/terraform/roots/central/main.tf
@@ -14,7 +14,7 @@ resource "random_id" "vm_suffix" {
  byte_length = 2
 }

-resource "google_compute_disk" "data" {
+resource "google_compute_disk" "dataCen" {
  provider = google-beta
  name     = "central-datadisk-${random_id.vm_suffix.hex}"
  type     = var.disk_type
@@ -48,7 +48,7 @@ resource "google_compute_instance" "central" {
  }

  attached_disk {
-    source = google_compute_disk.data.name
+    source = google_compute_disk.dataCen.name
  }

  # lifecycle {
@@ -64,32 +64,44 @@ resource "google_compute_instance" "central" {
  }

  metadata = {
-    windows-startup-script-url = "gs://qliksense/scripts/bootstrap.ps1"
+    windows-startup-script-url = "gs://qliksense/scripts/bootstrap-cen.ps1"
  }

  service_account {
    email  = "terraform@esoteric-parsec-243510.iam.gserviceaccount.com"
-    scopes = ["userinfo-email", "compute-rw", "storage-ro"]
+    scopes = ["cloud-platform"]
  }
 }

-resource "null_resource" "bootstrap" {
+# data "google_compute_instance_serial_port" "serial" {
+#   provider = google-beta
+#   instance = google_compute_instance.central.name
+#   zone     = var.zone
+#   port     = 4
+# }

-  connection {
-    type     = "winrm"
-    https    = true
-    insecure = true
-    use_ntlm = true
-    user     = var.user_name
-    password = var.user_password
-    host     = google_compute_instance.central.name
-    timeout  = "20m"
-  }
+# resource "local_file" "log" {
+#   filename = "${path.module}/tf-deploy.log"
+#   content  = join("\n", "${data.google_compute_instance_serial_port.serial.contents}")
+# }

-  provisioner "remote-exec" {
-    inline = [
-      "powershell.exe -ExecutionPolicy Bypass -File E:\\deploy\\scripts\\win-nfs_client-install.ps1"
-    ]
-  }
+# resource "null_resource" "bootstrap" {

-}
+#   connection {
+#     type     = "winrm"
+#     https    = true
+#     insecure = true
+#     use_ntlm = true
+#     user     = var.user_name
+#     password = var.user_password
+#     host     = google_compute_instance.central.name
+#     timeout  = "20m"
+#   }
+
+#   provisioner "remote-exec" {
+#     inline = [
+#       "powershell.exe -ExecutionPolicy Bypass -File E:\\deploy\\scripts\\win-nfs_client-install.ps1"
+#     ]
+#   }
+
+# }
--- a/bt-autoscaler/terraform/roots/central/outputs.tf
+++ b/bt-autoscaler/terraform/roots/central/outputs.tf
@@ -14,4 +14,8 @@ output "gce_external_ip" {

 output "gce_internal_ip" {
  value = google_compute_instance.central.network_interface[0].network_ip
-}
+}
+
+# output "serial_out" {
+#   value = data.google_compute_instance_serial_port.serial.contents
+# }
--- a/bt-autoscaler/terraform/roots/central/terraform.tfvars.json
+++ b/bt-autoscaler/terraform/roots/central/terraform.tfvars.json
@@ -6,7 +6,7 @@
  "database_version": "POSTGRES_9_6",
  "vm_type": "e2-highmem-4",
  "min_cpu": "Intel Skylake",
-  "image": "family/windows-2019",
+  "image": "gce-uefi-images/windows-2019",
  "disk_type": "pd-ssd",
  "availability_type": "REGIONAL",
  "user_name": "qlikadmin",
--- a/bt-autoscaler/terraform/roots/psql/.terraform/modules/postgres
+++ b/bt-autoscaler/terraform/roots/psql/.terraform/modules/postgres
--- a/bt-autoscaler/terraform/roots/psql/destroy.sh
+++ b/bt-autoscaler/terraform/roots/psql/destroy.sh
--- a/bt-autoscaler/terraform/roots/psql/main.tf
+++ b/bt-autoscaler/terraform/roots/psql/main.tf
@@ -42,7 +42,7 @@ resource "google_sql_database_instance" "qseow-psql" {

 resource "google_sql_user" "users" {
  instance = google_sql_database_instance.qseow-psql.name
-  name     = var.user_name
+  name     = var.db_user
  password = var.user_password
  project  = var.project_id

@@ -54,7 +54,7 @@ resource "google_sql_user" "users" {

 resource "null_resource" "db_setup" {
  provisioner "local-exec" {
-    command = "PGPASSWORD=${google_sql_user.users.password} /usr/bin/psql -h ${google_sql_database_instance.qseow-psql.private_ip_address} -U${var.user_name} --dbname=postgres < qseow_db_setup.sql"
+    command = "PGPASSWORD=${google_sql_user.users.password} /usr/bin/psql -h ${google_sql_database_instance.qseow-psql.private_ip_address} -Upostgres --dbname=postgres < qseow_db_setup.sql"
  }
  depends_on = [google_sql_database_instance.qseow-psql, google_sql_user.users]
 }
--- a/bt-autoscaler/terraform/roots/psql/qseow_db_setup.sql
+++ b/bt-autoscaler/terraform/roots/psql/qseow_db_setup.sql
@@ -6,7 +6,7 @@ CREATE DATABASE "QLogs" ENCODING = 'UTF8';

 CREATE ROLE "qliksenserepository" WITH LOGIN NOINHERIT NOSUPERUSER NOCREATEDB NOCREATEROLE NOREPLICATION VALID UNTIL 'infinity';
 ALTER ROLE "qliksenserepository" WITH ENCRYPTED PASSWORD 'Qlik1234!';
-GRANT qliksenserepository TO postgres;
+GRANT "qliksenserepository" TO postgres;

 ALTER DATABASE "QSR" OWNER TO "qliksenserepository";
 ALTER DATABASE "SenseServices" OWNER TO "qliksenserepository";
--- a/bt-autoscaler/terraform/roots/psql/terraform.tfvars
+++ b/bt-autoscaler/terraform/roots/psql/terraform.tfvars
@@ -0,0 +1,5 @@
+  project = "esoteric-parsec-243510"
+  region = "us-central1"
+  zone = "us-central1-a"
+  aclCIDR = "71.164.77.198/32"
+  postgresPwd = "Qlik1234!"
--- a/bt-autoscaler/terraform/roots/psql/terraform.tfvars.json
+++ b/bt-autoscaler/terraform/roots/psql/terraform.tfvars.json
@@ -7,6 +7,7 @@
  "db_tier": "db-g1-small",
  "file_tier": "BASIC_HDD",
  "availability_type": "REGIONAL",
+  "db_user": "postgres",
  "user_name": "qlikadmin",
  "user_password": "Qlik1234!"
 }
--- a/bt-autoscaler/terraform/roots/psql/variables.tf
+++ b/bt-autoscaler/terraform/roots/psql/variables.tf
@@ -75,6 +75,12 @@ variable "private_network" {
  default = "projects/esoteric-parsec-243510/global/networks/private-network"
 }

+variable "db_user" {
+  description = "The name of the DB user"
+  type        = string
+  default     = "postgres"
+}
+
 variable "user_name" {
  description = "The name of the default user"
  type        = string
--- a/bt-autoscaler/terraform/roots/rim/.terraform/plugins/selections.json
+++ b/bt-autoscaler/terraform/roots/rim/.terraform/plugins/selections.json
@@ -0,0 +1,10 @@
+{
+  "registry.terraform.io/hashicorp/google-beta": {
+    "hash": "h1:zsIZIszrwu9B9TGiUMGUF3QrpOT6OxGrTIJIo+b8Re0=",
+    "version": "3.41.0"
+  },
+  "registry.terraform.io/hashicorp/random": {
+    "hash": "h1:nFL6uiwsQFLiP8QCr35sPfWe9LpXI3/c7gP9tYnih+k=",
+    "version": "2.3.0"
+  }
+}
--- a/bt-autoscaler/terraform/roots/rim/main.tf
+++ b/bt-autoscaler/terraform/roots/rim/main.tf
@@ -0,0 +1,106 @@
+terraform {
+  required_version = ">= 0.12"
+}
+
+provider "google-beta" {
+  credentials = file("esoteric-parsec-243510-a8f93bb5a906.json")
+  project     = var.project_id
+  region      = var.region
+  zone        = var.zone
+}
+
+# Create random ID for VM suffix
+resource "random_id" "vm_suffix" {
+  byte_length = 2
+}
+
+resource "google_compute_disk" "dataRim" {
+  provider = google-beta
+  name     = "rim-datadisk-${random_id.vm_suffix.hex}"
+  type     = var.disk_type
+  zone     = var.zone
+  # labels = {
+  #   environment = "dev"
+  # }
+  size = 50
+}
+
+resource "google_compute_instance" "rim" {
+  provider     = google-beta
+  name         = "rim-${random_id.vm_suffix.hex}"
+  machine_type = var.vm_type
+  # min_cpu_platform commented out during testing - e2 instances do not support
+  # min_cpu_platform = var.min_cpu
+  zone = var.zone
+
+  # hostname = "central-${random_id.vm_suffix.hex}"
+
+  # tags = ["foo", "bar"]
+  # timeouts {
+  #   create = "60m"
+  #   delete = "2h"
+  # }
+
+  boot_disk {
+    initialize_params {
+      image = var.image
+    }
+  }
+
+  attached_disk {
+    source = google_compute_disk.dataRim.name
+  }
+
+  # lifecycle {
+  #   ignore_changes = [attached_disk]
+  # }
+
+  network_interface {
+    network = "default"
+
+    access_config {
+      network_tier = "STANDARD"
+    }
+  }
+
+  metadata = {
+    windows-startup-script-url = "gs://qliksense/scripts/bootstrap-rim.ps1"
+  }
+
+  service_account {
+    email  = "terraform@esoteric-parsec-243510.iam.gserviceaccount.com"
+    scopes = ["userinfo-email", "compute-ro", "storage-rw"]
+  }
+}
+# data "google_compute_instance_serial_port" "serial" {
+#   provider = google-beta
+#   instance = google_compute_instance.central.name
+#   zone     = var.zone
+#   port     = 4
+# }
+
+# resource "local_file" "log" {
+#   filename = "${path.module}/tf-deploy.log"
+#   content  = join("\n", "${data.google_compute_instance_serial_port.serial.contents}")
+# }
+
+# resource "null_resource" "bootstrap" {
+
+#   connection {
+#     type     = "winrm"
+#     https    = true
+#     insecure = true
+#     use_ntlm = true
+#     user     = var.user_name
+#     password = var.user_password
+#     host     = google_compute_instance.central.name
+#     timeout  = "20m"
+#   }
+
+#   provisioner "remote-exec" {
+#     inline = [
+#       "powershell.exe -ExecutionPolicy Bypass -File E:\\deploy\\scripts\\win-nfs_client-install.ps1"
+#     ]
+#   }
+
+# }
--- a/bt-autoscaler/terraform/roots/rim/outputs.tf
+++ b/bt-autoscaler/terraform/roots/rim/outputs.tf
@@ -0,0 +1,21 @@
+# Configure return values from google_sql_database_instance
+
+# output "psql_ip_address" {
+#   value = google_sql_database_instance.qseow-psql.private_ip_address
+# }
+
+output "gce_name" {
+  value = google_compute_instance.rim.name
+}
+
+output "gce_external_ip" {
+  value = google_compute_instance.rim.network_interface[0].access_config[0].nat_ip
+}
+
+output "gce_internal_ip" {
+  value = google_compute_instance.rim.network_interface[0].network_ip
+}
+
+# output "serial_out" {
+#   value = data.google_compute_instance_serial_port.serial.contents
+# }
--- a/bt-autoscaler/terraform/roots/rim/terraform.tfvars.json
+++ b/bt-autoscaler/terraform/roots/rim/terraform.tfvars.json
@@ -0,0 +1,14 @@
+{
+  "project_id": "esoteric-parsec-243510",
+  "region": "europe-west1",
+  "zone": "europe-west1-d",
+  "private_network": "projects/esoteric-parsec-243510/global/networks/default",
+  "database_version": "POSTGRES_9_6",
+  "vm_type": "e2-highmem-4",
+  "min_cpu": "Intel Skylake",
+  "image": "gce-uefi-images/windows-2019",
+  "disk_type": "pd-ssd",
+  "availability_type": "REGIONAL",
+  "user_name": "qlikadmin",
+  "user_password": "Qlik1234!"
+}
--- a/bt-autoscaler/terraform/roots/rim/variables.tf
+++ b/bt-autoscaler/terraform/roots/rim/variables.tf
@@ -0,0 +1,116 @@
+variable "project_id" {
+  type        = string
+  description = "The project ID to manage the Cloud SQL resources"
+}
+
+variable "database_version" {
+  description = "The database version to use"
+  type        = string
+}
+
+variable "region" {
+  type        = string
+  description = "GCP Region"
+  default     = "us-central1"
+}
+
+variable "tier" {
+  description = "The tier for the master instance."
+  type        = string
+  default     = "db-f1-micro"
+}
+
+variable "zone" {
+  type        = string
+  description = "Zone target"
+}
+
+variable "disk_type" {
+  description = "GCE Boot/Attached Disk Type"
+  type        = string
+  default     = "pd-ssd"
+}
+
+variable "min_cpu" {
+  description = "GCE Minimum CPU Family"
+  type        = string
+  default     = "AMD Rome "
+}
+
+variable "image" {
+  description = "Path to GCE Image Type"
+  type        = string
+  default     = "windows-2019/windows-server-2019-dc-v20200908"
+}
+
+variable "vm_type" {
+  description = "The GCE machine type"
+  type        = string
+  default     = "n2d-highmem-8"
+}
+
+variable "availability_type" {
+  description = "The availability type for the master instance.This is only used to set up high availability for the PostgreSQL instance. Can be either `ZONAL` or `REGIONAL`."
+  type        = string
+  default     = "REGIONAL"
+}
+
+variable "backup_configuration" {
+  description = "The backup_configuration settings subblock for the database setings"
+  type = object({
+    enabled    = bool
+    start_time = string
+    location   = string
+  })
+  default = {
+    enabled    = false
+    start_time = null
+    location   = null
+  }
+}
+
+# variable "authorized_networks_a" {
+#   description = "CIDR Block to add to network ACL"
+#   type        = string
+#   default = "71.164.77.198/32"
+# }
+
+# variable "authorized_networks_b" {
+#   description = "CIDR Block to add to network ACL"
+#   type        = string
+#   default = "127.0.0.1/32"
+# }
+
+# variable "authorized_networks_c" {
+#   description = "CIDR Block to add to network ACL"
+#   type        = string
+#   default = "127.0.0.1/32"
+# }
+
+variable "private_network" {
+  description = "Full path to private network ID"
+  type        = string
+  default     = "projects/esoteric-parsec-243510/global/networks/private-network"
+}
+
+variable "user_name" {
+  description = "The name of the default user"
+  type        = string
+  default     = "default"
+}
+
+variable "user_password" {
+  description = "The password for the default user. If not set, a random one will be generated and available in the generated_user_password output variable."
+  type        = string
+  default     = ""
+}
+
+variable "additional_users" {
+  description = "A list of users to be created in your cluster"
+  type = list(object({
+    name     = string
+    password = string
+  }))
+  default = []
+}
+
--- a/bt-autoscaler/terraform/roots/scripts/bootstrap-cen.ps1
+++ b/bt-autoscaler/terraform/roots/scripts/bootstrap-cen.ps1
@@ -0,0 +1,112 @@
+#!/usr/bin/env pwsh
+#
+## Intended to be executed in a GitOps pipeline on the new GCE resource by remote-exec in TF
+## or as a startup script via Metadata key windows-startup-script-url
+##
+
+if ($env:computername -notlike "central-*") {
+  exit 0
+}
+
+# Format and mount data disk
+Write-Host "## ========================>> Create Data drive & dirs"
+
+Get-Disk |
+  Where-Object partitionstyle -eq 'raw' |
+  Initialize-Disk -PartitionStyle GPT -PassThru |
+  New-Partition -DriveLetter E -UseMaximumSize |
+  Format-Volume -FileSystem NTFS -NewFileSystemLabel 'Data' -Confirm:$false
+
+if (! (Test-Path E:\)) {
+  Write-Error "Drive not found"
+  exit 1
+}
+
+$deploy_path = "E:\deploy"
+
+if (! (Test-Path $deploy_path)) {
+  New-Item -ItemType Directory -Path $deploy_path
+  New-Item -ItemType Directory -Path $deploy_path\binaries
+  New-Item -ItemType Directory -Path $deploy_path\modules
+  New-Item -ItemType Directory -Path $deploy_path\modules\tf
+  New-Item -ItemType Directory -Path $deploy_path\modules\ps
+}
+
+Write-Host "## ========================>> Create Local Accounts and add to Administrators Group"
+
+if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qservice' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+if(!(Get-LocalUser -Name qlikadmin -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qlikadmin' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+Add-LocalGroupMember -Group "Administrators" -Member "qservice", "qlikadmin"
+
+Write-Host "## ========================>> Copy scripts and binaries from Cloud Storage Bucket"
+gsutil -m cp -r gs://qliksense/scripts $deploy_path\
+gsutil -m cp gs://qliksense/binaries/Qlik_Sense* $deploy_path\binaries\
+gsutil -m cp gs://qliksense/binaries/vscode_stable.exe $deploy_path\binaries\
+gsutil -m cp gs://qliksense/binaries/firefox_latest.exe $deploy_path\binaries\
+gsutil -m cp gs://qliksense/binaries/ps7.zip $deploy_path\binaries\
+# gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'
+
+# Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v7.0.3/PowerShell-7.0.3-win-x64.zip -OutFile $deploy_path\binaries\ps7.zip
+# Invoke-WebRequest -Uri https://aka.ms/win32-x64-user-stable -Outfile $deploy_path\binaries\vscode_stable.exe
+# Invoke-WebRequest -Uri "https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-US" -Outfile $deploy_path\binaries\firefox_latest.exe
+
+Unblock-File -Path $deploy_path\binaries\*
+Unblock-File -Path $deploy_path\scripts\*
+
+# WinRM Connects
+New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
+New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
+
+Write-Host "## ========================>> Import PS Modules"
+Get-PackageProvider -Name NuGet -ForceBootstrap
+
+Install-Module PSDscResources -Force
+Install-Module QlikResources -Force
+
+Write-Host "## ========================>> Deploy PS7 | Firefox | VS Code"
+Expand-Archive -Path $deploy_path\binaries\ps7.zip -DestinationPath $deploy_path\binaries\ps7
+Invoke-Command -ScriptBlock {Start-Process -FilePath "$deploy_path\binaries\vscode_stable.exe" -ArgumentList "/VERYSILENT /MERGETASKS=!runcode" -Wait -PassThru} | Out-Null
+Invoke-Command -ScriptBlock {Start-Process -FilePath "$deploy_path\binaries\firefox_latest.exe" -ArgumentList "/s" -Wait -PassThru} | Out-Null
+
+# QSEoW FW Rule
+Write-Host "## ========================>> Create QSEoW FW Rule"
+New-NetFirewallRule -DisplayName "Qlik Sense" -Direction Inbound -LocalPort 443, 4244,4242, 4432, 4444, 5355, 5353, 80, 4248, 3090, 4000, 5555, 5556, 4993, 4994 -Protocol TCP -Action Allow -ea Stop | Out-Null
+# Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
+
+#### Enable NFS Client, set Anon user to UID:GID 0 == root. Restart service.
+Write-Host "## ========================>> Installing NFS Client"
+Install-WindowsFeature -Name NFS-Client
+New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
+    -Name "AnonymousUid" -Value "0" -PropertyType DWORD
+New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
+    -Name "AnonymousGid" -Value "0" -PropertyType DWORD
+nfsadmin client stop
+nfsadmin client start
+
+#### Launch silent install
+Write-Host "========================>> Installing QSEoW"
+Invoke-Command -ScriptBlock {Start-Process -FilePath "E:\deploy\binaries\Qlik_Sense_setup.exe" -ArgumentList "-s -log E:\deploy\deploy.log accepteula=1 installdir=E:\deploy\Qlik dbpassword=Qlik1234! hostname=$($env:computername) userwithdomain=$($env:computername)\qservice password=Qlik1234! bundleinstall=dashboard,visualization spc=E:\deploy\scripts\cen.xml" -Wait -PassThru} #| Out-Null
+
+# HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
+# New-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce' -Name 'Run' -Value '<insert_script_command_here>'
+
+Set-GceInstance -Name ($env:computername).ToLower() -Zone europe-west1-d -AddTag "bootstrapped"
+Set-GceInstance -Name ($env:computername).ToLower() -Zone europe-west1-d -RemoveMetadata "windows-startup-script-url"
+
+Exit 0
--- a/bt-autoscaler/terraform/roots/scripts/bootstrap-rim.ps1
+++ b/bt-autoscaler/terraform/roots/scripts/bootstrap-rim.ps1
@@ -0,0 +1,112 @@
+#!/usr/bin/env pwsh
+#
+## Intended to be executed in a GitOps pipeline on the new GCE resource by remote-exec in TF
+## or as a startup script via Metadata key windows-startup-script-url
+##
+
+if ($env:computername -notlike "rim-*") {
+  exit 0
+}
+
+# Format and mount data disk
+Write-Host "## ========================>> Create Data drive & dirs"
+
+Get-Disk |
+  Where-Object partitionstyle -eq 'raw' |
+  Initialize-Disk -PartitionStyle GPT -PassThru |
+  New-Partition -DriveLetter E -UseMaximumSize |
+  Format-Volume -FileSystem NTFS -NewFileSystemLabel 'Data' -Confirm:$false
+
+if (! (Test-Path E:\)) {
+  Write-Error "Drive not found"
+  exit 1
+}
+
+$deploy_path = "E:\deploy"
+
+if (! (Test-Path $deploy_path)) {
+  New-Item -ItemType Directory -Path $deploy_path
+  New-Item -ItemType Directory -Path $deploy_path\binaries
+  New-Item -ItemType Directory -Path $deploy_path\modules
+  New-Item -ItemType Directory -Path $deploy_path\modules\tf
+  New-Item -ItemType Directory -Path $deploy_path\modules\ps
+}
+
+Write-Host "## ========================>> Create Local Accounts and add to Administrators Group"
+
+if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qservice' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+if(!(Get-LocalUser -Name qlikadmin -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qlikadmin' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+Add-LocalGroupMember -Group "Administrators" -Member "qservice", "qlikadmin"
+
+Write-Host "## ========================>> Copy scripts and binaries from Cloud Storage Bucket"
+gsutil -m cp -r gs://qliksense/scripts $deploy_path\
+gsutil -m cp gs://qliksense/binaries/Qlik_Sense* $deploy_path\binaries\
+gsutil -m cp gs://qliksense/binaries/vscode_stable.exe $deploy_path\binaries\
+gsutil -m cp gs://qliksense/binaries/firefox_latest.exe $deploy_path\binaries\
+gsutil -m cp gs://qliksense/binaries/ps7.zip $deploy_path\binaries\
+# gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'
+
+# Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v7.0.3/PowerShell-7.0.3-win-x64.zip -OutFile $deploy_path\binaries\ps7.zip
+# Invoke-WebRequest -Uri https://aka.ms/win32-x64-user-stable -Outfile $deploy_path\binaries\vscode_stable.exe
+# Invoke-WebRequest -Uri "https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-US" -Outfile $deploy_path\binaries\firefox_latest.exe
+
+Unblock-File -Path $deploy_path\binaries\*
+Unblock-File -Path $deploy_path\scripts\*
+
+# WinRM Connects
+New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
+New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
+
+Write-Host "## ========================>> Import PS Modules"
+Get-PackageProvider -Name NuGet -ForceBootstrap
+
+Install-Module PSDscResources -Force
+Install-Module QlikResources -Force
+
+Write-Host "## ========================>> Deploy PS7 | Firefox | VS Code"
+Expand-Archive -Path $deploy_path\binaries\ps7.zip -DestinationPath $deploy_path\binaries\ps7
+Invoke-Command -ScriptBlock {Start-Process -FilePath "$deploy_path\binaries\vscode_stable.exe" -ArgumentList "/VERYSILENT /MERGETASKS=!runcode" -Wait -PassThru} | Out-Null
+Invoke-Command -ScriptBlock {Start-Process -FilePath "$deploy_path\binaries\firefox_latest.exe" -ArgumentList "/s" -Wait -PassThru} | Out-Null
+
+# QSEoW FW Rule
+Write-Host "## ========================>> Create QSEoW FW Rule"
+New-NetFirewallRule -DisplayName "Qlik Sense" -Direction Inbound -LocalPort 443, 4244,4242, 4432, 4444, 5355, 5353, 80, 4248, 3090, 4000, 5555, 5556, 4993, 4994 -Protocol TCP -Action Allow -ea Stop | Out-Null
+# Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
+
+#### Enable NFS Client, set Anon user to UID:GID 0 == root. Restart service.
+Write-Host "## ========================>> Installing NFS Client"
+Install-WindowsFeature -Name NFS-Client
+New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
+    -Name "AnonymousUid" -Value "0" -PropertyType DWORD
+New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
+    -Name "AnonymousGid" -Value "0" -PropertyType DWORD
+nfsadmin client stop
+nfsadmin client start
+
+#### Launch silent install
+Write-Host "========================>> Installing QSEoW"
+Invoke-Command -ScriptBlock {Start-Process -FilePath "E:\deploy\binaries\Qlik_Sense_setup.exe" -ArgumentList "-s -log E:\deploy\deploy.log accepteula=1 installdir=E:\deploy\Qlik dbpassword=Qlik1234! hostname=$($env:computername) userwithdomain=$($env:computername)\qservice password=Qlik1234! bundleinstall=dashboard,visualization spc=E:\deploy\scripts\rim.xml" -Wait -PassThru} #| Out-Null
+
+# HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
+# New-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce' -Name 'Run' -Value '<insert_script_command_here>'
+
+Set-GceInstance -Name $shortname -Zone europe-west1-d -AddTag "bootstrapped"
+Set-GceInstance -Name $shortname -Zone europe-west1-d -RemoveMetadata "windows-startup-script-url"
+
+Exit 0
--- a/bt-autoscaler/terraform/roots/scripts/bootstrap.ps1
+++ b/bt-autoscaler/terraform/roots/scripts/bootstrap.ps1
@@ -1,9 +1,29 @@
 #!/usr/bin/env pwsh
 #
 ## Intended to be executed in a GitOps pipeline on the new GCE resource by remote-exec in TF
-## or as a startup script via Metadata key windows-startup-script-url
-##
+## 
+Enable-PSRemoting
+winrm set 'winrm/config/client' '@{TrustedHosts="*"}'

+if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qservice' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
+
+New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
+New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
+
+# if ($env:computername -ne 'central') {
+#   exit 0
+# }
+
+# Get-WmiObject -Class Win32_Volume -Filter "DriveType=5" | Set-WmiInstance -Arguments @{DriveLetter="Z:"}

 Get-Disk |
  Where-Object partitionstyle -eq 'raw' |
@@ -18,7 +38,7 @@ if (! (Test-Path E:\)) {

 $deploy_path = "E:\deploy"

-if (! (Test-Path $deploy_path)) {
+if (-Not (Test-Path $deploy_path)) {
  New-Item -ItemType Directory -Path $deploy_path
  New-Item -ItemType Directory -Path $deploy_path\binaries
  New-Item -ItemType Directory -Path $deploy_path\modules
@@ -26,68 +46,34 @@ if (! (Test-Path $deploy_path)) {
  New-Item -ItemType Directory -Path $deploy_path\modules\ps
 }

-gcloud components update -Force
+# Update these gcloud commands to be vars, allows portability
+#
+# CLOUDCLI_UPDATE
+# OBJCLI_COPY
+
+# gcloud components update -Force
+gsutil -m cp gs://qliksense/Qlik_Sense* $deploy_path\binaries\
 gsutil -m cp -r gs://qliksense/scripts $deploy_path\
-gsutil -m cp gs://qliksense/binaries/Qlik_Sense* $deploy_path\binaries\
-# gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'
-Unblock-File -Path $deploy_path\binaries\Qlik_Sense_setup.exe
-Unblock-File -Path $deploy_path\binaries\Qlik_Sense_update.exe
-
-# Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v7.0.3/PowerShell-7.0.3-win-x64.zip -OutFile $deploy_path\binaries\PowerShell-7.0.3-win-x64.zip
-
-# iwr -Uri https://aka.ms/win32-x64-user-stable -Outfile ..\binaries\vscode_stable.exe
-
-if ($env:computername -notlike "central-*") {
-  exit 0
-}
-
-if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
-  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
-  New-LocalUser `
-    -Name 'qservice' `
-    -Password $password `
-    -PasswordNeverExpires `
-    -UserMayNotChangePassword
-}
-
-if(!(Get-LocalUser -Name qlikadmin -ErrorAction Ignore)) {
-  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
-  New-LocalUser `
-    -Name 'qlikadmin' `
-    -Password $password `
-    -PasswordNeverExpires `
-    -UserMayNotChangePassword
-}
-
-Add-LocalGroupMember -Group "Administrators" -Member "qservice", "qlikadmin"
-
-# WinRM Connects
-New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
-New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
+gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'

 # Push-Location $deploy_path\modules\ps
 Get-PackageProvider -Name NuGet -ForceBootstrap
-
-Install-Module PSDesiredStateConfiguration -Force
-Install-Module PSDscResources -Force
-Install-Module QlikResources -Force
-
+# Below will also download and save the QlikResources requirements modules
+# Save-Module -Path $deploy_path/modules/ps/ -Name QlikResources -RequiredVersion 1.9.2
+# Save-Module -Path $deploy_path/modules/ps/ -Name GoogleCloud
 # HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
 # New-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce' -Name 'Run' -Value '<insert_script_command_here>'

-# $shortname = "$env:COMPUTERNAME".ToLower()
-# $thumbprint = ( New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName $shortname -FriendlyName "WinRM HTTPS Listener" -NotAfter (Get-Date).AddYears(20) ).Thumbprint

-# Testing Tools
-# & $deploy_path\binaries\vscode_stable.exe /VERYSILENT /MERGETASKS=!runcode
+Set-ExecutionPolicy Bypass -Scope Process -Force; E:\deploy\scripts\win-nfs_client-install.ps1
+gcloud compute instances add-tags central-12d5 --tags=bootstrapped --zone europe-west1-d

-# QSEoW FW Rule
-Write-Host "<---- Create QSEoW FW Rule"
-New-NetFirewallRule -DisplayName "Qlik Sense" -Direction Inbound -LocalPort 443, 4244,4242, 4432, 4444, 5355, 5353, 80, 4248, 3090, 4000, 5555, 5556, 4993, 4994 -Protocol TCP -Action Allow -ea Stop | Out-Null

-# Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
-
-Set-GceInstance -Name $shortname -Zone europe-west1-d -AddTag "bootstrapped"
-Set-GceInstance -Name $shortname -Zone europe-west1-d -RemoveMetadata "windows-startup-script-url"
+# Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
+# choco install git --no-progress
+# Import-Module "$env:ChocolateyInstall\helpers\chocolateyProfile.psm1"
+# Update-SessionEnvironment
+# git clone https://gitlab+deploy-token-52544:YH-1SVsTrNmzj7AXz7oh@gitlab.com/ahaydon/cityclarity-psm.git ./CitiClarity
+# Pop-Location

 Exit 0
--- a/bt-autoscaler/terraform/roots/scripts/cen.xml
+++ b/bt-autoscaler/terraform/roots/scripts/cen.xml
@@ -2,12 +2,12 @@
 <SharedPersistenceConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <DbUserName>qliksenserepository</DbUserName>
  <DbUserPassword>Qlik1234!</DbUserPassword>
-  <DbHost>10.54.242.2</DbHost>
+  <DbHost>10.54.242.14</DbHost>
  <DbPort>5432</DbPort>
-  <RootDir>\\10.236.6.170\qlikshare</RootDir>
-  <StaticContentRootDir>\\10.236.6.170\qlikshare\StaticContent</StaticContentRootDir>
-  <ArchivedLogsDir>\\10.236.6.170\qlikshare\ArchivedLogs</ArchivedLogsDir>
-  <AppsDir>\\10.236.6.170\qlikshare\Apps</AppsDir>
+  <RootDir>\\10.159.210.26\qlikshare</RootDir>
+  <StaticContentRootDir>\\10.159.210.26\qlikshare\StaticContent</StaticContentRootDir>
+  <ArchivedLogsDir>\\10.159.210.26\qlikshare\ArchivedLogs</ArchivedLogsDir>
+  <AppsDir>\\10.159.210.26\qlikshare\Apps</AppsDir>
  <CreateCluster>true</CreateCluster>
  <InstallLocalDb>false</InstallLocalDb>
  <ConfigureDbListener>false</ConfigureDbListener>
@@ -15,10 +15,10 @@
  <IpRange>0.0.0.0/0,::/0</IpRange>
  <MaxConnections>100</MaxConnections>
  <!-- <JoinCluster>true</JoinCluster> -->
-  <ConfigureLogging>false</ConfigureLogging>
+  <ConfigureLogging>true</ConfigureLogging>
  <SetupLocalLoggingDb>false</SetupLocalLoggingDb>
  <QLogsWriterPassword>Qlik1234!</QLogsWriterPassword>
  <QLogsReaderPassword>Qlik1234!</QLogsReaderPassword>
-  <QLogsHostname>10.54.242.2</QLogsHostname>
+  <QLogsHostname>10.54.242.14</QLogsHostname>
  <QLogsPort>5432</QLogsPort>
  </SharedPersistenceConfiguration>
--- a/bt-autoscaler/terraform/roots/scripts/centralNode.ps1
+++ b/bt-autoscaler/terraform/roots/scripts/centralNode.ps1
@@ -5,7 +5,7 @@ $configData = @{
    })
 }

-$password = ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+$password = ConvertTo-SecureString -String 'password' -AsPlainText -Force
 $SenseService = New-Object System.Management.Automation.PSCredential("$env:computername\qservice", $password)
 $QlikAdmin = New-Object System.Management.Automation.PSCredential("$env:computername\qlikadmin", $password)

--- a/bt-autoscaler/terraform/roots/scripts/pave.ps1
+++ b/bt-autoscaler/terraform/roots/scripts/pave.ps1
@@ -0,0 +1,109 @@
+#!/usr/bin/env pwsh
+#
+## Intended to be executed in a GitOps pipeline on the new GCE resource by remote-exec in TF
+## or as a startup script via Metadata key windows-startup-script-url
+##
+
+if ($env:computername -notlike "central-*") {
+  exit 0
+}
+
+#### Format and mount data disk
+Write-Host "<---- Create Data drive & dirs"
+
+Get-Disk |
+  Where-Object partitionstyle -eq 'raw' |
+  Initialize-Disk -PartitionStyle GPT -PassThru |
+  New-Partition -DriveLetter E -UseMaximumSize |
+  Format-Volume -FileSystem NTFS -NewFileSystemLabel 'Data' -Confirm:$false
+
+if (! (Test-Path E:\)) {
+  Write-Error "Drive not found"
+  exit 1
+}
+
+$deploy_path = "E:\deploy"
+
+if (! (Test-Path $deploy_path)) {
+  New-Item -ItemType Directory -Path $deploy_path
+  New-Item -ItemType Directory -Path $deploy_path\binaries
+  New-Item -ItemType Directory -Path $deploy_path\modules
+  New-Item -ItemType Directory -Path $deploy_path\modules\tf
+  New-Item -ItemType Directory -Path $deploy_path\modules\ps
+}
+
+Write-Host "<---- Copy scripts and binaries from Cloud Storage Bucket"
+gcloud components update -Force
+gsutil -m cp -r gs://qliksense/scripts $deploy_path\
+gsutil -m cp gs://qliksense/binaries/Qlik_Sense* $deploy_path\binaries\
+# gsutil -m cp -r gs://qliksense/modules 'C:\Program Files\WindowsPowerShell\Modules'
+
+Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v7.0.3/PowerShell-7.0.3-win-x64.zip -OutFile $deploy_path\binaries\ps7.zip
+Invoke-WebRequest -Uri https://aka.ms/win32-x64-user-stable -Outfile $deploy_path\binaries\vscode_stable.exe
+Invoke-WebRequest -Uri "https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-US" -Outfile $deploy_path\binaries\firefox_latest.exe
+
+Unblock-File -Path $deploy_path\binaries\*
+Unblock-File -Path $deploy_path\scripts\*
+
+Write-Host "<---- Create Local Accounts and add to Administrators Group"
+
+if(!(Get-LocalUser -Name qservice -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qservice' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+if(!(Get-LocalUser -Name qlikadmin -ErrorAction Ignore)) {
+  $password =  ConvertTo-SecureString -String 'Qlik1234!' -AsPlainText -Force
+  New-LocalUser `
+    -Name 'qlikadmin' `
+    -Password $password `
+    -PasswordNeverExpires `
+    -UserMayNotChangePassword
+}
+
+Add-LocalGroupMember -Group "Administrators" -Member "qservice", "qlikadmin"
+
+#### WinRM Connects
+New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation -Name AllowFreshCredentialsWhenNTLMOnly -Force
+New-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation\AllowFreshCredentialsWhenNTLMOnly -Name 1 -Value * -PropertyType String
+
+Write-Host "<---- Import PS Modules and Install Firefox / VS Code"
+Get-PackageProvider -Name NuGet -ForceBootstrap
+
+Install-Module PSDesiredStateConfiguration -Force
+Install-Module PSDscResources -Force
+Install-Module QlikResources -Force
+
+Expand-Archive -Path $deploy_path\binaries\ps7.zip -DestinationPath $deploy_path\binaries\ps7
+& $deploy_path\binaries\vscode_stable.exe /VERYSILENT /MERGETASKS=!runcode
+& $deploy_path\binaries\firefox_latest.exe /s
+# HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
+# New-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce' -Name 'Run' -Value '<insert_script_command_here>'
+
+#### QSEoW FW Rule
+Write-Host "<---- Create QSEoW FW Rule"
+New-NetFirewallRule -DisplayName "Qlik Sense" -Direction Inbound -LocalPort 443, 4244,4242, 4432, 4444, 5355, 5353, 80, 4248, 3090, 4000, 5555, 5556, 4993, 4994 -Protocol TCP -Action Allow -ea Stop | Out-Null
+# Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
+
+#### Enable NFS Client, set Anon user to UID:GID 0 == root. Restart service.
+Write-Host -Message "<---- Installing NFS Client"
+Install-WindowsFeature -Name NFS-Client
+New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
+    -Name "AnonymousUid" -Value "0" -PropertyType DWORD
+New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
+    -Name "AnonymousGid" -Value "0" -PropertyType DWORD
+nfsadmin client stop
+nfsadmin client start
+
+#### Launch silent install
+# Write-Host "<---- Installing QSEoW"
+# Invoke-Command -ScriptBlock {Start-Process -FilePath "E:\deploy\binaries\Qlik_Sense_setup.exe" -ArgumentList "-s -log E:\deploy\deploy.log accepteula=1 installdir=E:\deploy\Qlik dbpassword=Qlik1234! hostname=$($env:computername) userwithdomain=$($env:computername)\qservice password=Qlik1234! bundleinstall=dashboard,visualization spc=E:\deploy\scripts\spc.xml" -Wait -PassThru} | Out-Null
+
+Set-GceInstance -Name $shortname -Zone europe-west1-d -AddTag "bootstrapped"
+Set-GceInstance -Name $shortname -Zone europe-west1-d -RemoveMetadata "windows-startup-script-url"
+
+Exit 0
--- a/bt-autoscaler/terraform/roots/scripts/rim.xml
+++ b/bt-autoscaler/terraform/roots/scripts/rim.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0"?>
+<SharedPersistenceConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <DbUserName>qliksenserepository</DbUserName>
+  <DbUserPassword>Qlik1234!</DbUserPassword>
+  <DbHost>10.54.242.14</DbHost>
+  <DbPort>5432</DbPort>
+  <RootDir>\\10.159.210.26\qlikshare</RootDir>
+  <StaticContentRootDir>\\10.159.210.26\qlikshare\StaticContent</StaticContentRootDir>
+  <ArchivedLogsDir>\\10.159.210.26\qlikshare\ArchivedLogs</ArchivedLogsDir>
+  <AppsDir>\\10.159.210.26\qlikshare\Apps</AppsDir>
+  <CreateCluster>false</CreateCluster>
+  <InstallLocalDb>false</InstallLocalDb>
+  <ConfigureDbListener>false</ConfigureDbListener>
+  <ListenAddresses>*</ListenAddresses>
+  <IpRange>0.0.0.0/0,::/0</IpRange>
+  <MaxConnections>100</MaxConnections>
+  <!-- <JoinCluster>true</JoinCluster> -->
+  <ConfigureLogging>true</ConfigureLogging>
+  <SetupLocalLoggingDb>false</SetupLocalLoggingDb>
+  <QLogsWriterPassword>Qlik1234!</QLogsWriterPassword>
+  <QLogsReaderPassword>Qlik1234!</QLogsReaderPassword>
+  <QLogsHostname>10.54.242.14</QLogsHostname>
+  <QLogsPort>5432</QLogsPort>
+  </SharedPersistenceConfiguration>
--- a/bt-autoscaler/terraform/roots/scripts/win-nfs_client-install.ps1
+++ b/bt-autoscaler/terraform/roots/scripts/win-nfs_client-install.ps1
@@ -7,7 +7,7 @@
 # Wait-Process -Name $bootScript -ErrorAction SilentlyContinue -Timeout 1200

 # Enable NFS Client, set Anon user to UID:GID 0 == root. Restart service.
-Write-Host -Message "<---- Installing NFS"
+Write-Host -Message "<---- Installing NFS Client"
 Install-WindowsFeature -Name NFS-Client
 New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" `
    -Name "AnonymousUid" -Value "0" -PropertyType DWORD