129 lines
3.9 KiB
Terraform
129 lines
3.9 KiB
Terraform
|
/**
|
||
|
* Copyright 2022 Google LLC
|
||
|
*
|
||
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
* you may not use this file except in compliance with the License.
|
||
|
* You may obtain a copy of the License at
|
||
|
*
|
||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||
|
*
|
||
|
* Unless required by applicable law or agreed to in writing, software
|
||
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
* See the License for the specific language governing permissions and
|
||
|
* limitations under the License.
|
||
|
*/
|
||
|
|
||
|
resource "google_vertex_ai_metadata_store" "store" {
|
||
|
provider = google-beta
|
||
|
project = module.project.project_id
|
||
|
name = "default"
|
||
|
description = "Vertex Ai Metadata Store"
|
||
|
region = var.region
|
||
|
dynamic "encryption_spec" {
|
||
|
for_each = try(var.service_encryption_keys.aiplatform, null) == null ? [] : [""]
|
||
|
|
||
|
content {
|
||
|
kms_key_name = try(var.service_encryption_keys.aiplatform, null)
|
||
|
}
|
||
|
}
|
||
|
# `state` value will be decided automatically based on the result of the configuration
|
||
|
lifecycle {
|
||
|
ignore_changes = [state]
|
||
|
}
|
||
|
}
|
||
|
|
||
|
module "service-account-notebook" {
|
||
|
source = "../../../modules/iam-service-account"
|
||
|
project_id = module.project.project_id
|
||
|
name = "notebook-sa"
|
||
|
}
|
||
|
|
||
|
resource "google_notebooks_runtime" "runtime" {
|
||
|
for_each = { for k, v in var.notebooks : k => v if v.type == "MANAGED" }
|
||
|
name = "${var.prefix}-${each.key}"
|
||
|
|
||
|
project = module.project.project_id
|
||
|
location = var.region
|
||
|
access_config {
|
||
|
access_type = "SINGLE_USER"
|
||
|
runtime_owner = try(var.notebooks[each.key].owner, null)
|
||
|
}
|
||
|
software_config {
|
||
|
enable_health_monitoring = true
|
||
|
}
|
||
|
virtual_machine {
|
||
|
virtual_machine_config {
|
||
|
machine_type = var.notebooks[each.key].machine_type
|
||
|
network = local.vpc
|
||
|
subnet = local.subnet
|
||
|
internal_ip_only = var.notebooks[each.key].internal_ip_only
|
||
|
dynamic "encryption_config" {
|
||
|
for_each = try(local.service_encryption_keys.notebooks, null) == null ? [] : [1]
|
||
|
content {
|
||
|
kms_key = local.service_encryption_keys.notebooks
|
||
|
}
|
||
|
}
|
||
|
metadata = {
|
||
|
notebook-disable-nbconvert = "false"
|
||
|
notebook-disable-downloads = "true"
|
||
|
notebook-disable-terminal = "false"
|
||
|
notebook-disable-root = "true"
|
||
|
}
|
||
|
data_disk {
|
||
|
initialize_params {
|
||
|
disk_size_gb = "100"
|
||
|
disk_type = "PD_STANDARD"
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
resource "google_notebooks_instance" "playground" {
|
||
|
for_each = { for k, v in var.notebooks : k => v if v.type == "USER_MANAGED" }
|
||
|
name = "${var.prefix}-${each.key}"
|
||
|
location = format("%s-%s", var.region, "b")
|
||
|
machine_type = var.notebooks[each.key].machine_type
|
||
|
project = module.project.project_id
|
||
|
|
||
|
container_image {
|
||
|
repository = "gcr.io/deeplearning-platform-release/base-cpu"
|
||
|
tag = "latest"
|
||
|
}
|
||
|
|
||
|
install_gpu_driver = true
|
||
|
boot_disk_type = "PD_SSD"
|
||
|
boot_disk_size_gb = 110
|
||
|
disk_encryption = try(local.service_encryption_keys.notebooks != null, false) ? "CMEK" : null
|
||
|
kms_key = try(local.service_encryption_keys.notebooks, null)
|
||
|
|
||
|
no_public_ip = var.notebooks[each.key].internal_ip_only
|
||
|
no_proxy_access = false
|
||
|
|
||
|
network = local.vpc
|
||
|
subnet = local.subnet
|
||
|
|
||
|
instance_owners = try(tolist(var.notebooks[each.key].owner), null)
|
||
|
service_account = module.service-account-notebook.email
|
||
|
|
||
|
metadata = {
|
||
|
notebook-disable-nbconvert = "false"
|
||
|
notebook-disable-downloads = "false"
|
||
|
notebook-disable-terminal = "false"
|
||
|
notebook-disable-root = "true"
|
||
|
}
|
||
|
|
||
|
# Remove once terraform-provider-google/issues/9164 is fixed
|
||
|
lifecycle {
|
||
|
ignore_changes = [disk_encryption, kms_key]
|
||
|
}
|
||
|
|
||
|
#TODO Uncomment once terraform-provider-google/issues/9273 is fixed
|
||
|
# tags = ["ssh"]
|
||
|
depends_on = [
|
||
|
google_project_iam_member.shared_vpc,
|
||
|
]
|
||
|
}
|
||
|
|