Skip to main content

Google Cloud Platform

Polaris offers an official Terraform module for deploying on Google Cloud Platform. This module provisions a secure Confidential VM with AMD SEV-SNP technology running the Polaris Proxy and your client workload.

For Polaris deployments, the Cloud KMS integration should be disabled:

enable_kms = false

Accessing the Module​

The module is available on the Terraform Registry:

Terraform Registry - Fr0ntierX/polaris/google

module "polaris" {
  source          = "Fr0ntierX/polaris/google"

  # Basic Configuration
  project_id      = "my-project"
  name            = "polaris-instance"
  region          = "us-central1"
  zone            = "us-central1-a"

  # VM Configuration
  machine_type    = "n2d-standard-2"
  service_account = "[email protected]"

  # Workload Configuration
  workload_image  = "fr0ntierx/anonymization-service"

  # Polaris Proxy Configuration
  polaris_proxy_port = "3000"
  polaris_proxy_enable_input_encryption  = true
  polaris_proxy_enable_output_encryption = true
  polaris_proxy_enable_cors           = true

  # Polaris Configuration
  enable_kms      = false
}

Available Features​

FeatureDescription
Confidential ComputingAMD SEV-SNP based Confidential VMs for memory encryption
Ephemeral KeysKeys generated at runtime and not persisted
Firewall RulesSecure access to the Polaris proxy
Docker IntegrationAutomated container setup and networking

Learn More​

For detailed configuration options and usage examples, refer to: