Add Cloud Function that deletes VM instances created without CMEK.

[zachberger]

This Cloud Function detects newly created VM Instances that have disks attached
with a Google-managed encryption key attached and then immediately deletes
any such VM instances.

[aaron-lane]

I verified the Terraform configuration is functional, but could the example be extended with a noncompliant VM to prove the functionality without requiring the end users to add additional resources?

[zachberger]

could the example be extended with a noncompliant VM to prove the functionality without requiring the end users to add additional resources?

This sounds frustrating. Typically when I grab an example or tool I want it to work with as little configuration as possible. If I do this the end user has to cleanup the TF and remove this resource and any other dependencies.

[zachberger]

@aaron-lane I don't have the ability to assign this back to you

[morgante]

This sounds frustrating. Typically when I grab an example or tool I want it to work with as little configuration as possible. If I do this the end user has to cleanup the TF and remove this resource and any other dependencies.

Agreed.

[aaron-lane]

@zachberger Typically, examples should be as self-contained as possible. If this example has practical applications outside of demonstrating usage of the module then we should add it as a submodule so that it can be properly supported.

[zachberger]

This is exhausting. Ive been sent from repo to repo being told to contribute in different ways. At this point I don't even want to contribute this anymore.

[morgante]

I'm reopening this because I concur with @zachberger that having an entire VM instance be part of the config just for a simple example is extraneous and unnecessary. As far as I am concerned, this PR is fine to merge as-is.

[morgante]

Just one tiny nit.

[morgante]

nit. spelling (ReceiveMessage)

[morgante]

One tiny nit, but I am fine with merging as-is.