This module implements a DNS service running CoreDNS as a container on Container Optimized OS instances.

The following resources are created and managed by this module:

• google_compute_address, one reserved IP address per instance
• google_compute_instance, one or more COS instances
• google_compute_firewall, one firewall rule to allow traffic from specific IP ranges to the DNS port

Variables allow controlling several aspects of the created resurces, like number of instances (instance_count), container image used for CoreDNS (container_image), client IP ranges allowed to connect to the service(client_cidrs), and CoreDNS configuration file (corefile).

module "dns-service" {
  source         = "terraform-google-modules/container-vm/google//modules/cos-coredns"
  instance_count = "1"
  project_id     = "my-project"
  region         = "europe-west3"
  zone           = "europe-west3-c"
  prefix         = "cloud"
  corefile       = "assets/Corefile.cloud"
  vm_tags        = ["ssh"]
  client_cidrs   = ["0.0.0.0/0"]
  network        = "my-network-name"
  subnetwork     = "https://www.googleapis.com/compute/v1/projects/my-project/regions/europe-west3/subnetworks/my-subnetwork"
}

{
  "service": "coredns"
}

[
  "https://www.googleapis.com/auth/devstorage.read_only",
  "https://www.googleapis.com/auth/logging.write",
  "https://www.googleapis.com/auth/monitoring.write",
  "https://www.googleapis.com/auth/pubsub",
  "https://www.googleapis.com/auth/service.management.readonly",
  "https://www.googleapis.com/auth/servicecontrol",
  "https://www.googleapis.com/auth/trace.append"
]