feat(prober,recorder): Set CPU idle on regional basis (#1162)

- chainguard-dev/internal-dev#20110

Author: jml

modules/cloudevent-recorder/README.md

@@ -134,6 +134,7 @@ No requirements.
 | <a name="input_broker"></a> [broker](#input\_broker) | A map from each of the input region names to the name of the Broker topic in that region. | `map(string)` | n/a | yes |
 | <a name="input_cloud_storage_config_max_bytes"></a> [cloud\_storage\_config\_max\_bytes](#input\_cloud\_storage\_config\_max\_bytes) | The maximum bytes that can be written to a Cloud Storage file before a new file is created. Min 1 KB, max 10 GiB. | `number` | `1000000000` | no |
 | <a name="input_cloud_storage_config_max_duration"></a> [cloud\_storage\_config\_max\_duration](#input\_cloud\_storage\_config\_max\_duration) | The maximum duration that can elapse before a new Cloud Storage file is created. Min 1 minute, max 10 minutes, default 5 minutes. | `number` | `300` | no |
+| <a name="input_cpu_idle"></a> [cpu\_idle](#input\_cpu\_idle) | A map of region names to cpu\_idle settings. When true, CPU is throttled when no requests are being processed. | `map(bool)` | `{}` | no |
 | <a name="input_deletion_protection"></a> [deletion\_protection](#input\_deletion\_protection) | Whether to enable deletion protection on data resources. | `bool` | `true` | no |
 | <a name="input_enable_profiler"></a> [enable\_profiler](#input\_enable\_profiler) | Enable cloud profiler. | `bool` | `false` | no |
 | <a name="input_flush_interval"></a> [flush\_interval](#input\_flush\_interval) | Flush interval for logrotate, as a duration string. | `string` | `""` | no |

modules/cloudevent-recorder/recorder.tf

@@ -60,6 +60,7 @@ module "this" {
       resources = {
         limits = var.limits
       }
+      regional-cpu-idle = var.cpu_idle
     }
     "logrotate" = {
       source = {
@@ -75,6 +76,7 @@ module "this" {
         name       = "logs"
         mount_path = "/logs"
       }]
+      regional-cpu-idle = var.cpu_idle
     }
   }
   volumes = [{

modules/cloudevent-recorder/variables.tf

@@ -116,6 +116,12 @@ variable "limits" {
   default = null
 }
 
+variable "cpu_idle" {
+  default     = {}
+  description = "A map of region names to cpu_idle settings. When true, CPU is throttled when no requests are being processed."
+  type        = map(bool)
+}
+
 variable "scaling" {
   description = "The scaling configuration for the service."
   type = object({

modules/prober/README.md

@@ -100,6 +100,7 @@ No requirements.
 | <a name="input_alert_description"></a> [alert\_description](#input\_alert\_description) | Alert documentation. Use this to link to playbooks or give additional context. | `string` | `"An uptime check has failed."` | no |
 | <a name="input_base_image"></a> [base\_image](#input\_base\_image) | The base image to use for the prober. | `string` | `null` | no |
 | <a name="input_cpu"></a> [cpu](#input\_cpu) | The CPU limit for the prober. | `string` | `"1000m"` | no |
+| <a name="input_cpu_idle"></a> [cpu\_idle](#input\_cpu\_idle) | A map of region names to cpu\_idle settings. When true, CPU is throttled when no requests are being processed. | `map(bool)` | `{}` | no |
 | <a name="input_deletion_protection"></a> [deletion\_protection](#input\_deletion\_protection) | Whether to enable delete protection for the service. | `bool` | `true` | no |
 | <a name="input_dns_zone"></a> [dns\_zone](#input\_dns\_zone) | The managed DNS zone in which to create prober record sets (required for multiple locations). | `string` | `""` | no |
 | <a name="input_domain"></a> [domain](#input\_domain) | The domain of the environment to probe (required for multiple locations). | `string` | `""` | no |

modules/prober/main.tf

@@ -68,7 +68,8 @@ module "this" {
             }
           }
       ])
-      regional-env = var.regional-env
+      regional-env      = var.regional-env
+      regional-cpu-idle = var.cpu_idle
       resources = {
         limits = {
           cpu    = var.cpu

modules/prober/variables.tf

@@ -74,6 +74,12 @@ variable "regional-env" {
   }))
 }
 
+variable "cpu_idle" {
+  default     = {}
+  description = "A map of region names to cpu_idle settings. When true, CPU is throttled when no requests are being processed."
+  type        = map(bool)
+}
+
 variable "secret_env" {
   default     = {}
   description = "A map of secrets to mount as environment variables from Google Secrets Manager (e.g. secret_key=secret_name)"