Skip to content

Commit

Permalink
Update policies.md
Browse files Browse the repository at this point in the history
  • Loading branch information
kevinbleckmann committed May 28, 2024
1 parent fc565c4 commit 8c279e9
Showing 1 changed file with 9 additions and 32 deletions.
41 changes: 9 additions & 32 deletions policies.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,46 +2,23 @@
<img src="./images/logo-classicblue-800px.png" alt="Intel Logo" width="250"/>
</p>

# Intel® Cloud Optimization Modules for Terraform
# Intel® Optimized Cloud Modules for Terraform

© Copyright 2022, Intel Corporation
© Copyright 2024, Intel Corporation

## GCP VM module
## HashiCorp Sentinel Policies

This file documents the HashiCorp Sentinel policies that apply to this module
<b>What are Sentinel Policies?</b>

## Policy 1
HashiCorp Sentinel is a policy as code framework that can be used to enforce policies and standards across an organization's infrastructure. It allows organizations to define rules for their infrastructure using a high-level language, and integrates with a variety of HashiCorp tools, including Terraform and Vault. Sentinel policies are defined using the Sentinel language, and can be used to enforce rules such as compliance requirements, security best practices, and cost optimization. Sentinel policies can be implemented at different stages of the infrastructure development lifecycle, deployment, and runtime.

Description: The configured "machine_type" should be an Intel Xeon 3rd Generation(code-named Ice Lake) Scalable processors or an Intel Xeon 4th Generation(code-named Sapphire Rapids) Scalable processors.
## Intel's Sentinel Policy Structure

Resource type: google_compute_instance
Reference the `intel-policy-library` [README.md](https://github.com/intel/intel-policy-library/blob/main/README.md#getting-started) for details on how to get started using our policies.

Parameter: machine_type
Intel® provides a list of `optimal` instance types per cloud resource, selected to deliver the best possible performance, security, and cost-efficiency for your cloud workloads. What sets this library apart is its dynamic nature; it is designed to automatically update, informing developers whenever more suitable hardware becomes available within their cloud environment, enabling them to make timely and informed decisions.

Allowed Types

- **General Purpose:** N2-Standard: n2-standard-2, n2-standard-4, n2-standard-8, n2-standard-16, n2-standard-32, n2-standard-48, n2-standard-64, n2-standard-80, n2-standard-96, n2-standard-128
- **General Purpose:** N2-HighMem: n2-highmem-2, n2-highmem-4, n2-highmem-8, n2-highmem-16, n2-highmem-32, n2-highmem-48, n2-highmem-64, n2-highmem-80, n2-highmem-96, n2-highmem-128
- **General Purpose:** N2-HighCPU: n2-highcpu-2, n2-highcpu-4, n2-highcpu-8, n2-highcpu-16, n2-highcpu-32, n2-highcpu-48, n2-highcpu-64, n2-highcpu-80, n2-highcpu-96
- **General Purpose:** C3-Standard:
c3-standard-4, c3-standard-8, c3-standard-22, c3-standard-44, c3-standard-88, c3-standard-176
- **General Purpose with Local SSD:** C3-Standard-LSSD: c3-standard-4-lssd, c3-standard-8-lssd, c3-standard-22-lssd, c3-standard-44-lssd, c3-standard-88-lssd, c3-standard-176-lssd
- **General Purpose:** C3-HighCPU: c3-highcpu-4, c3-highcpu-8, c3-highcpu-22, c3-highcpu-44, c3-highcpu-88, c3-highcpu-176
- **General Purpose:** c3-HighMem: c3-highmem-4, c3-highmem-8, c3-highmem-22, c3-highmem-44, c3-highmem-88, c3-highmem-176
- **Memory Optimized:** m3-UltraMem: m3-ultramem-32, m3-ultramem-64, m3-ultramem-128, m3-megamem-64, m3-megamem-128
- **Compute Optimized:** h3-Standard: h3-standard-88

## Policy 2

Description: This policy will be based on the google_compute_instance resource type and the minimum cpu platform (min_cpu_platform) parameter. This policy will allow "Intel Ice Lake", "Intel Sapphire Rapids" CPU platforms.

Resource type: google_compute_instance

Parameter: min_cpu_platform

Allowed Types

- Intel Ice Lake, Intel Sapphire Rapids
This library also contains `recommended` instance types for AI and Confidential Computing workloads. For more information regarding Intel's AI and Confidential Computing capabilities and policies see the Intel® Xeon® Scalable Processors and Intel® Advanced Matrix Extensions (AMX) and Intel® Xeon® Scalable Processors and Confidential Computing sections in the [intel-policy-library](https://github.com/intel/intel-policy-library)

## Links
<https://cloud.google.com/compute/docs/cpu-platforms>

0 comments on commit 8c279e9

Please sign in to comment.