Add desired_status to bastion

[intotecho]

TL;DR

Add option to create the bastion-host in shutdown mode - so it is only enabled when required by operator.

Terraform Resources

https://github.com/terraform-google-modules/terraform-google-bastion-host/blob/master/README.md


module "my-bastion-vm" {
  #source     = ".../cloud-foundation-fabric/modules/compute-vm"
  desired_status       = "TERMINATED"
}

module "iap_bastion" {

desired_state = true source = "terraform-google-modules/bastion-host/google"

project = var.project zone = var.zone network = google_compute_network.net.self_link subnet = google_compute_subnetwork.net.self_link members = [ "group:[email protected]", "user:[email protected]", ] }

Detailed design

No response

Additional information

No response

[intotecho]

A related enhancement would be to provide the variable allow_stopping_for_update which can be passed to compute vm.

[github-actions[bot]]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days