5134a7b36d
* Bump tf to version 1.0 * Bump terraform-aws-ci * Mark private key output as sensitive * remove deprecated list() function
108 lines
4.0 KiB
HCL
108 lines
4.0 KiB
HCL
# ------------------------------------------------------------------------------
|
|
# LAUNCH A POSTGRES CLOUD SQL PRIVATE IP INSTANCE
|
|
# ------------------------------------------------------------------------------
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# CONFIGURE OUR GCP CONNECTION
|
|
# ------------------------------------------------------------------------------
|
|
|
|
provider "google-beta" {
|
|
project = var.project
|
|
region = var.region
|
|
}
|
|
|
|
terraform {
|
|
# This module is now only being tested with Terraform 1.0.x. However, to make upgrading easier, we are setting
|
|
# 0.12.26 as the minimum version, as that version added support for required_providers with source URLs, making it
|
|
# forwards compatible with 1.0.x code.
|
|
required_version = ">= 0.12.26"
|
|
|
|
required_providers {
|
|
google-beta = {
|
|
source = "hashicorp/google-beta"
|
|
version = "~> 3.57.0"
|
|
}
|
|
}
|
|
}
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# CREATE A RANDOM SUFFIX AND PREPARE RESOURCE NAMES
|
|
# ------------------------------------------------------------------------------
|
|
|
|
resource "random_id" "name" {
|
|
byte_length = 2
|
|
}
|
|
|
|
locals {
|
|
# If name_override is specified, use that - otherwise use the name_prefix with a random string
|
|
instance_name = length(var.name_override) == 0 ? format("%s-%s", var.name_prefix, random_id.name.hex) : var.name_override
|
|
private_network_name = "private-network-${random_id.name.hex}"
|
|
private_ip_name = "private-ip-${random_id.name.hex}"
|
|
}
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# CREATE COMPUTE NETWORKS
|
|
# ------------------------------------------------------------------------------
|
|
|
|
# Simple network, auto-creates subnetworks
|
|
resource "google_compute_network" "private_network" {
|
|
provider = google-beta
|
|
name = local.private_network_name
|
|
}
|
|
|
|
# Reserve global internal address range for the peering
|
|
resource "google_compute_global_address" "private_ip_address" {
|
|
provider = google-beta
|
|
name = local.private_ip_name
|
|
purpose = "VPC_PEERING"
|
|
address_type = "INTERNAL"
|
|
prefix_length = 16
|
|
network = google_compute_network.private_network.self_link
|
|
}
|
|
|
|
# Establish VPC network peering connection using the reserved address range
|
|
resource "google_service_networking_connection" "private_vpc_connection" {
|
|
provider = google-beta
|
|
network = google_compute_network.private_network.self_link
|
|
service = "servicenetworking.googleapis.com"
|
|
reserved_peering_ranges = [google_compute_global_address.private_ip_address.name]
|
|
}
|
|
|
|
# ------------------------------------------------------------------------------
|
|
# CREATE DATABASE INSTANCE WITH PRIVATE IP
|
|
# ------------------------------------------------------------------------------
|
|
|
|
module "postgres" {
|
|
# When using these modules in your own templates, you will need to use a Git URL with a ref attribute that pins you
|
|
# to a specific version of the modules, such as the following example:
|
|
# source = "github.com/gruntwork-io/terraform-google-sql.git//modules/cloud-sql?ref=v0.2.0"
|
|
source = "./modules/cloud-sql"
|
|
|
|
project = var.project
|
|
region = var.region
|
|
name = local.instance_name
|
|
db_name = var.db_name
|
|
|
|
engine = var.postgres_version
|
|
machine_type = var.machine_type
|
|
|
|
# These together will construct the master_user privileges, i.e.
|
|
# 'master_user_name'@'master_user_host' IDENTIFIED BY 'master_user_password'.
|
|
# These should typically be set as the environment variable TF_VAR_master_user_password, etc.
|
|
# so you don't check these into source control."
|
|
master_user_password = var.master_user_password
|
|
|
|
master_user_name = var.master_user_name
|
|
master_user_host = "%"
|
|
|
|
# Pass the private network link to the module
|
|
private_network = google_compute_network.private_network.self_link
|
|
|
|
# Wait for the vpc connection to complete
|
|
dependencies = [google_service_networking_connection.private_vpc_connection.network]
|
|
|
|
custom_labels = {
|
|
test-id = "postgres-private-ip-example"
|
|
}
|
|
}
|