Skip to content

Repository files navigation

Compute Engine VM (Shielded, private)

IaC Bazaar: live-tested

A hardened Compute Engine VM on Debian 12 with Shielded VM (Secure Boot, vTPM, integrity monitoring), OS Login for IAM-managed SSH, no external IP by default, and deletion protection on.

This module was applied to a real Google Cloud account, verified, and destroyed on 2026-06-30 - not just terraform validated.

Check it yourself, no account needed:

curl -s https://www.iac-bazaar.com/api/artifacts/gcp-compute-instance/verification

The receipt names every check that ran, when it ran, and the SHA-256 of the archive it describes. Full detail: www.iac-bazaar.com/catalog/gcp-compute-instance

Usage

This module is licensed to run under Vizier. A module taken from the registry is a CHILD module, and Vizier sets vizier_run on the ROOT, so the value has to be handed down explicitly. Without it the plan stops with a licence error.

# Vizier writes this value into the root module.
variable "vizier_run" {
  type    = string
  default = ""
}

module "compute_instance" {
  source  = "registry.terraform.io/CyberCoreSystems/compute-instance/google"
  version = "~> 1.0"

  vizier_run = var.vizier_run

  # See variables.tf for the full input contract.
}

Why this module

Every module we publish goes through the same checks before release:

check what it means
tofu validate + tflint it parses and lints clean
checkov scanned for insecure defaults
live test really applied to a cloud account, outputs verified, then destroyed

That last row is the one most module catalogues skip. A module that has never been applied has never been proven.

Provider compatibility

google >= 7.0, < 8.0

More modules

This is one of 673 Terraform modules across 19 cloud platforms on IaC Bazaar, 113 of them live-tested: AWS, Azure, GCP, Oracle OCI, Cloudflare, Akamai, DigitalOcean, Linode, Hetzner, Vultr, Scaleway, Alibaba, IBM, UpCloud, Civo, Exoscale, OVH, Tencent and Huawei.

Browse the full catalogue at www.iac-bazaar.com, including production landing zones for AWS, Azure and GCP that have each been live-tested as a single composed apply.

Licence

See LICENSE.

About

Live-tested Compute Engine VM (Shielded, private) for Terraform and OpenTofu. Really applied to a cloud account, asserted against, then destroyed with the teardown confirmed. Checksummed and cosign-signed. Full evidence at https://www.iac-bazaar.com/catalog/gcp-compute-instance

Topics

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages