feat: add minimal PROD VM example

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-17 21:04:00 +03:00
parent 9731ba672f
commit 88242af900
12 changed files with 660 additions and 5 deletions
@@ -0,0 +1,74 @@
+# Copy this file to terraform.tfvars and replace organization-specific values.
+# Put the API token only in secrets.auto.tfvars, never in this file.
+
+# Existing organization created manually in the Nubes personal account.
+organization = "REPLACE_WITH_ORGANIZATION_NAME_OR_UUID"
+
+# Exact IP space visible to this organization in the personal account.
+ip_space_name = "internet-no-antiddos-v1"
+
+# Tested minimum for this VM-only PROD chain. Two IPs left no free address
+# when the VM requested its external IP; three allowed the deployment to start.
+org_vip_count = 3
+
+# API endpoint for the PROD stand.
+api_endpoint = "https://lk-api-gateway.ngcloud.ru/api/v1/svc"
+
+# Unique VDC service name.
+vdc_resource_name = "vm-minimal-vdc"
+
+# Values from the tested PROD resource pool. Replace with values available
+# to the manually created organization if its resource pool differs.
+vdc_network_provider = "msk1"
+vdc_provider_vdc     = "Intel Cascade Lake 3.1"
+
+# VDC capacity: vCPU, guaranteed share (0/50/80), and RAM in GB.
+vdc_cpu_allocated  = 8
+vdc_cpu_guaranteed = 0
+vdc_mem_allocated  = 200
+
+# JSON array of storage policies available to the selected Provider VDC.
+# Confirm the policy name and size in the personal account before applying.
+vdc_storage_config = "[{\"name\":\"SSD SDS\",\"size\":\"2000\"}]"
+
+# Unique Edge service name.
+nsxt_resource_name = "vm-minimal-edge"
+
+# Non-overlapping /24 routed subnet plus primary and secondary VM DNS servers.
+nsxt_ip_addr_pool = "10.10.102.0/24"
+nsxt_main_dns     = "81.22.46.22"
+nsxt_second_dns   = "185.247.187.77"
+
+# Unique vApp service name and vApp name.
+vapp_resource_name = "vm-minimal-vapp"
+vapp_name          = "vm-minimal-vapp"
+
+# Unique VM service name and hostname/IP-set name.
+vm_resource_name = "vm-minimal"
+vm_name          = "vm-minimal"
+
+# Tested VM sizing: Ubuntu base image (20 GB) plus 128 GB additional disk.
+vm_image = "Ubuntu_22-20G"
+vm_cpu   = 2
+vm_ram   = 4
+vm_disk  = 128
+
+# Linux account name and your OpenSSH PUBLIC key.
+vm_user_login      = "ubuntu"
+vm_user_public_key = "ssh-ed25519 REPLACE_WITH_YOUR_PUBLIC_KEY"
+
+# Inbound ports. Narrow the source CIDR below to trusted addresses.
+vm_access_port_list = [
+  { port = "22", type = "tcp" },
+  { port = "80", type = "tcp" }
+]
+vm_access_ip_list = ["REPLACE_WITH_YOUR_PUBLIC_IP/32"]
+
+# The tested VM gets its own external IP; do not change without checking
+# the consequences for inbound access.
+vm_same_snat = true
+
+# Keep both triggers null for initial creation. To request an operation later,
+# set its marker to a new, unique value.
+git_revision      = null
+reconcile_trigger = null