feat: add minimal PROD VM example

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vm_v3_minimal/vm.tf

@@ -0,0 +1,77 @@
+# Create the vApp after the VDC, Edge, organization IP allocation, and SNAT are ready.
+resource "nubes_vapp" "vapp" {
+  # Name shown for this vApp service in the personal account.
+  resource_name = var.vapp_resource_name
+
+  # vApp name; must be unique in the organization and match the platform naming pattern.
+  vapp_name = var.vapp_name
+
+  # UUID of the VDC where the vApp will reside.
+  vdc_uid = nubes_vc_vdc.vdc.id
+
+  # UUID of the Edge whose routed network will be used by the vApp.
+  nsxt_uid = nubes_vc_nsxt.edge.id
+
+  # Suspend the vApp rather than fully deleting it on terraform destroy.
+  suspend_on_destroy = true
+
+  # Adopt an existing same-name vApp rather than failing during Create.
+  adopt_existing_on_create = true
+
+  # The tested PROD vApp deployment requires the IP/SNAT configuration to be ready.
+  depends_on = [nubes_vc_nsxt_snat.snat]
+}
+
+# Create one VM inside the vApp.
+resource "nubes_vc_vm_v3" "vm" {
+  # Name shown for this VM service in the personal account.
+  resource_name = var.vm_resource_name
+
+  # VM hostname/IP-set name; it must match the platform naming pattern.
+  vm_name = var.vm_name
+
+  # UUID of the vApp created above.
+  vapp_uid = nubes_vapp.vapp.id
+
+  # Operating-system image; its base disk is separate from vm_disk.
+  image_vm = var.vm_image
+
+  # Number of vCPUs allocated to the VM.
+  vm_cpu = var.vm_cpu
+
+  # VM memory in GB.
+  vm_ram = var.vm_ram
+
+  # Additional disk size in GB, excluding the image's base disk.
+  vm_disk = var.vm_disk
+
+  # Linux account created for SSH access.
+  user_login = var.vm_user_login
+
+  # Public key installed for that account; never use a private key here.
+  user_public_key = var.vm_user_public_key
+
+  # Organization IP space used by this VM.
+  ip_space_name = var.ip_space_name
+
+  # true gives this VM its own external IP during deployment.
+  same_snat = var.vm_same_snat
+
+  # JSON-encoded inbound port/protocol allow-list.
+  access_port_list = jsonencode(var.vm_access_port_list)
+
+  # JSON-encoded source IP/CIDR allow-list; keep it as narrow as practical.
+  access_ip_list = jsonencode(var.vm_access_ip_list)
+
+  # Optional marker: changing it requests redeploy on Update.
+  git_revision = var.git_revision
+
+  # Optional marker: changing it requests reconcile on Update, not on Create.
+  reconcile_trigger = var.reconcile_trigger
+
+  # Suspend the VM rather than fully deleting it on terraform destroy.
+  suspend_on_destroy = true
+
+  # Adopt an existing same-name VM rather than failing during Create.
+  adopt_existing_on_create = true
+}