Skip to content

Commit ae25495

Browse files
committed
revert gcp related changes as they are not necessary
1 parent 7374759 commit ae25495

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

scripts/gcp-oidc/README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -197,14 +197,14 @@ You will be provided a new operator API token which should be stored in Secret M
197197
`~tee-env-DEPLOYMENT_ENVIRONMENT=prod~`.
198198
199199
It is recommended that you also specify the machine type in the gcloud script. Currently, it is recommended to run the
200-
UID2 operator on a machine type of n2d-standard-8 for production. (default to n2d-standard-2)
200+
UID2 operator on a machine type of n2d-standard-16. (default to n2d-standard-2)
201201
202202
An example of the script is given below:
203203
204204
```
205205
$ gcloud compute instances create {INSTANCE_NAME} \
206206
--zone {ZONE} \
207-
--machine-type n2d-standard-8 \
207+
--machine-type n2d-standard-16 \
208208
--confidential-compute \
209209
--shielded-secure-boot \
210210
--maintenance-policy Terminate \
@@ -215,7 +215,7 @@ $ gcloud compute instances create {INSTANCE_NAME} \
215215
--metadata ^~^tee-image-reference={OPERATOR_IMAGE}~tee-restart-policy=Never~tee-container-log-redirect=true~tee-env-DEPLOYMENT_ENVIRONMENT=prod~tee-env-API_TOKEN_SECRET_NAME={OPERATOR_KEY_SECRET_FULL_NAME}
216216
```
217217
218-
Note that compared to the `gcloud` command used in the prior section, parameter `--machine-type n2d-standard-8` is set to ensure production deployment of UID2 Operator runs on the recommended machine type for production.
218+
Note that compared to the `gcloud` command used in the prior section, parameter `--machine-type n2d-standard-16` is set to ensure production deployment of UID2 Operator runs on the recommended machine type for production.
219219
220220
## Upgrading
221221

scripts/gcp-oidc/terraform/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ terraform destroy
6868
| service_account_name | `string` | n/a | yes | The name of the service account that you want to use for your UID2 Operator instance in GCP Confidential Space. |
6969
| uid_operator_image | `string` | n/a | yes | The Docker image URL for the UID2 Private Operator for GCP, used in configuration, which you received as part of UID2 Operator Account Setup. For example: `us-docker.pkg.dev/uid2-prod-project/iabtechlab/uid2-operator@sha256:{IMAGE_SHA}` |
7070
| uid_operator_key | `string` | n/a | yes | The UID2 operator key, which you received as part of UID2 Operator Account Setup. <br> Note: only required during first time provision. You could leave it as empty string later if you don't want to update secret value. |
71-
| uid_deployment_env | `string` | n/a | yes | Valid values: `integ` for integration environment, `prod` for production environment. <br> Machine type is determined by the deployment environment: `integ` uses `n2d-standard-2` and prod uses `n2d-standard-8`. |
71+
| uid_deployment_env | `string` | n/a | yes | Valid values: `integ` for integration environment, `prod` for production environment. <br> Machine type is determined by the deployment environment: `integ` uses `n2d-standard-2` and prod uses `n2d-standard-16`. |
7272
| uid_operator_key_secret_name | `string` | `"secret-operator-key"` | no | The name that you specify for your operator key secret. The Terraform template creates a secret in the GCP Secret Manager to hold the `uid_operator_key` value. You can define the name; for example, `uid2-operator-operator-key-secret-integ`. |
7373
| region | `string` | `"us-east1"` | no | The region that you want to deploy to. For a list of valid regions, see [Available regions and zones](https://cloud.google.com/compute/docs/regions-zones#available) in the Google Cloud documentation. <br>NOTE: The UID2 Private Operator implementation for GCP Confidential Space is not supported in these areas: Europe, China. |
7474
| network_name | `string` | `"uid-operator"` | no | The VPC resource name (also used for rules/ instance tags). |

scripts/gcp-oidc/terraform/main.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ module "secret-manager" {
9494
resource "google_compute_instance_template" "uid_operator" {
9595
depends_on = [module.project_services]
9696
name_prefix = "uid-operator-cs-template-"
97-
machine_type = var.uid_deployment_env == "prod" ? "n2d-standard-8" : "n2d-standard-2"
97+
machine_type = var.uid_deployment_env == "prod" ? "n2d-standard-16" : "n2d-standard-2"
9898

9999
tags = [var.network_name]
100100

0 commit comments

Comments
 (0)