69 lines
1.9 KiB
Terraform
69 lines
1.9 KiB
Terraform
|
|
||
|
|
resource "google_project_service" "sqladmin_api" {
|
||
|
|
service = "sqladmin.googleapis.com"
|
||
|
|
disable_on_destroy = false
|
||
|
|
}
|
||
|
|
|
||
|
|
# Create a Cloud SQL instance for PostgreSQL
|
||
|
|
resource "google_sql_database_instance" "postgres_instance" {
|
||
|
|
name = "pg-instance-via-tf"
|
||
|
|
database_version = "POSTGRES_15" # Specify the desired PostgreSQL version
|
||
|
|
region = "us-central1"
|
||
|
|
|
||
|
|
settings {
|
||
|
|
# The tier for the Cloud SQL instance, determines CPU and memory
|
||
|
|
tier = "db-f1-micro"
|
||
|
|
|
||
|
|
# Set disk size and enable disk auto-resize
|
||
|
|
disk_size = 10
|
||
|
|
disk_autoresize = true
|
||
|
|
|
||
|
|
# Network configuration for private IP
|
||
|
|
# If you need public IP, adjust authorized_networks
|
||
|
|
ip_configuration {
|
||
|
|
authorized_networks {
|
||
|
|
value = "0.0.0.0/0"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# Prevents accidental deletion of the instance
|
||
|
|
deletion_protection = false
|
||
|
|
depends_on = [google_project_service.sqladmin_api]
|
||
|
|
}
|
||
|
|
|
||
|
|
# Generate a random password for the default user
|
||
|
|
resource "random_password" "db_password" {
|
||
|
|
length = 16
|
||
|
|
special = true
|
||
|
|
override_special = "!#$%*()_-+="
|
||
|
|
|
||
|
|
keepers = {
|
||
|
|
rotatation_version = "2"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# Create a database user
|
||
|
|
resource "google_sql_user" "db_user" {
|
||
|
|
name = "sirius"
|
||
|
|
instance = google_sql_database_instance.postgres_instance.name
|
||
|
|
password = random_password.db_password.result
|
||
|
|
}
|
||
|
|
|
||
|
|
# Create the initial database
|
||
|
|
resource "google_sql_database" "database" {
|
||
|
|
name = "n8ndb"
|
||
|
|
instance = google_sql_database_instance.postgres_instance.name
|
||
|
|
}
|
||
|
|
|
||
|
|
# Output the connection name and generated password
|
||
|
|
output "instance_connection_name" {
|
||
|
|
value = google_sql_database_instance.postgres_instance.connection_name
|
||
|
|
description = "The connection name of the instance, used for the Cloud SQL Proxy"
|
||
|
|
}
|
||
|
|
|
||
|
|
output "database_user_password" {
|
||
|
|
value = random_password.db_password.result
|
||
|
|
sensitive = true
|
||
|
|
}
|