Skip to content

Terraform

terraform

terraform
Inputs
InputType / defaultDescription
project_idRequiredstring—Explicit project receiving additive VM access and IAP audit bindings; unrelated IAM and billing stay unchanged.
regionRequiredstring—Region of the existing network and snapshot schedule.
zoneRequiredstring—Zone of the persistent host and boot disk.
vm_nameRequiredstring—Exact name of the existing host and boot disk.
machine_typeRequiredstring—Host capacity. Changes require a deliberate stopped-VM maintenance window.
disk_size_gbRequirednumber—Persistent disk capacity in GiB; use the current size or larger.
network_nameRequiredstring—Exact name of the dedicated VPC and its host network tag.
subnet_cidrRequiredstring—Existing subnet range; changing it requires an explicit network migration.
boot_imageRequiredstring—Exact immutable boot-image reference from the existing disk; never use a mutable image family.
state_bucketRequired${object({name = string, location = string})}—Existing protected state bucket; configure its same name separately during backend initialization.
accessRequired${object({customer_id = string, managed_group_email = string, login_group_email = string})}—Organization customer ID, managed security-group address, and group receiving host access.
snapshot_chain_nameRequiredstring—Exact existing snapshot-chain name; preserve it when adopting an existing host.
labelsOptional${map(string)}{}Optional nonsecret ownership labels; supply existing labels when adopting a deployment.
Outputs
OutputDescription
vmProtected host identity, current capacity and terminal connection commands.
Resources · 15
  • google_cloud_identity_group.agent_vm_access
  • google_compute_instance_iam_member.agent_vm_login
  • google_iap_tunnel_instance_iam_member.agent_vm_ssh
  • google_project_iam_custom_role.agent_vm_discovery
  • google_project_iam_member.agent_vm_discovery
  • google_project_iam_audit_config.iap_access
  • google_storage_bucket.terraform_state
  • google_compute_resource_policy.weekly_backup
  • google_compute_disk_resource_policy_attachment.weekly_backup
  • google_compute_network.devbox
  • google_compute_subnetwork.devbox
  • google_compute_firewall.iap_ssh
  • google_compute_disk.boot
  • google_compute_instance.devbox
  • google_project_service.required