はじめての HA Cloud SQL (by Terraform Module)

# refs https://github.com/terraform-google-modules/terraform-google-sql-db
# refs https://github.com/terraform-google-modules/terraform-google-sql-db/tree/master/modules/private_service_access
# refs https://github.com/terraform-google-modules/terraform-google-sql-db/tree/master/modules/postgresql

module "private_service_access" {
  source  = "GoogleCloudPlatform/sql-db/google//modules/private_service_access"

  prefix_length = 20

  project_id = var.gcp_project_id
  vpc_network = var.vpc_network_name   # module.vpc.network_name
}

module "pgsql_db" {
  source  = "GoogleCloudPlatform/sql-db/google//modules/postgresql"
  #version = "8.0.0"

  project_id = var.gcp_project_id
  region     = var.region
  zone       = var.zone_a

  name = "production-${var.project}-pgsql-db"

  tier = "db-custom-2-5120"   # "db-n1-standard-1"  //productionのtier

  database_version = "POSTGRES_14"
  db_name       = var.db_name
  user_name     = var.db_user_name
  user_password = var.db_user_password

  backup_configuration = {
    enabled = true        //productionはtrue
    start_time = "17:00"   //UTC. JSTでは 2:00 //productionはset
    location = var.region
    point_in_time_recovery_enabled = true   //productionはtrue
    transaction_log_retention_days = 3
    retained_backups = 5                    //productionはset
    retention_unit   = "COUNT"
  }

  disk_autoresize = true
  disk_size = 16
  disk_type = "PD_SSD"

  #module_depends_on = [module.private_service_access]
  ip_configuration = {
    authorized_networks = [
#      {
#        name  = ""
#        value = ""
#      }
    ]
    ipv4_enabled = true
    private_network = var.vpc_network_self_link  # module.vpc.network_self_link
    require_ssl = false
    allocated_ip_range = null
  }

  insights_config = {
      query_string_length = 1024
      record_application_tags = true
      record_client_address = true
  }

  user_labels = {
    proj = var.project
    env  = var.environment
  }
}

# refs https://github.com/terraform-google-modules/terraform-google-memorystore

module "memorystore_redis" {
  source  = "terraform-google-modules/memorystore/google"
  #version = "4.1.0"

  project = var.gcp_project_id
  region  = var.region
  location_id = var.zone_a
  authorized_network = var.vpc_network_name   # module.vpc.network_name

  name    = "production-${var.project}-redis-cache"

  connect_mode = "PRIVATE_SERVICE_ACCESS"
  transit_encryption_mode = "DISABLED"  # "SERVER_AUTHENTICATION"

  tier = "STANDARD_HA"
  alternative_location_id = var.zone_c

  redis_version = "REDIS_6_X"
  #redis_configs = {
  #}

  memory_size_gb = 4

  labels = {
    proj = var.project
    env  = var.environment
  }
}

# refs https://github.com/terraform-google-modules/terraform-google-memorystore/blob/master/main.tf

module "enable_apis" {
  source  = "terraform-google-modules/project-factory/google//modules/project_services"
  version = "~> 11.0"

  project_id                  = var.project
  enable_apis                 = true
  disable_services_on_destroy = false

  activate_apis = [
    "redis.googleapis.com",
  ]
}


# refs https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/redis_instance

resource google_redis_instance "memorystore_redis" {
  depends_on = [module.enable_apis]

  name = "production-${var.project}-redis-cache"

  tier = "STANDARD_HA"
  memory_size_gb = 5

  location_id = "asia-northeast1-a"
  alternative_location_id = "asia-northeast1-c"

  authorized_network = var.vpc_network_name   # module.vpc.network_name

  redis_version = "REDIS_6_X"
  #redis_configs = {
  #}
  display_name = ""
  reserved_ip_range = null  #var.reserved_ip_range
  replica_count = 1
  read_replicas_mode = "READ_REPLICAS_ENABLED"

  transit_encryption_mode = "DISABLED"  # "SERVER_AUTHENTICATION"
  connect_mode = "PRIVATE_SERVICE_ACCESS"

  maintenance_policy {
    weekly_maintenance_window {
      day = "SATURDAY"
      start_time {  //17:30 UTC : 2:30 JST
        hours = 17
        minutes = 30
        seconds = 0
        nanos = 0
      }
    }
  }

  labels = {
    proj = var.project
    env  = var.environment
  }
}