feat(module/asg): Introduce Instance Refresh for ASG module

examples/centralized_design_autoscale/example.tfvars

@@ -576,6 +576,23 @@ vmseries_asgs = {
       }
     }
 
+    launch_template_version = "1"
+
+    instance_refresh = {
+      strategy = "Rolling"
+      preferences = {
+        checkpoint_delay             = 3600
+        checkpoint_percentages       = [50, 100]
+        instance_warmup              = 1200
+        min_healthy_percentage       = 50
+        skip_matching                = false
+        auto_rollback                = false
+        scale_in_protected_instances = "Ignore"
+        standby_instances            = "Ignore"
+      }
+      triggers = []
+    }
+
     application_lb = {
       name = "public-alb"
       rules = {

examples/centralized_design_autoscale/main.tf

@@ -368,6 +368,8 @@ module "vm_series_asg" {
   min_size                        = each.value.asg.min_size
   desired_capacity                = each.value.asg.desired_cap
   lambda_execute_pip_install_once = each.value.asg.lambda_execute_pip_install_once
+  instance_refresh                = each.value.instance_refresh
+  launch_template_version         = each.value.launch_template_version
   vmseries_iam_instance_profile   = aws_iam_instance_profile.vm_series_iam_instance_profile.name
   subnet_ids                      = [for i, j in var.vpcs[each.value.vpc].subnets : module.subnet_sets[format("%s-lambda", each.value.vpc)].subnets[j.az].id if j.set == "lambda"]
   security_group_ids              = contains(keys(module.vpc[each.value.vpc].security_group_ids), "lambda") ? [module.vpc[each.value.vpc].security_group_ids["lambda"]] : []

examples/centralized_design_autoscale/variables.tf

@@ -278,6 +278,8 @@ variable "vmseries_asgs" {
     - `statistic`: statistic of the metric. Valid values: Average, Maximum, Minimum, SampleCount, Sum
     - `cloudwatch_namespace`: name of CloudWatch namespace, where metrics are available (it should be the same as namespace configured in VM-Series plugin in PAN-OS)
     - `tags`: tags configured for dynamic scaling policy
+  - `launch_template_version`: launch template version to use to launch instances
+  - `instance_refresh`: instance refresh for ASG defined by several attributes (please README for module `asg` for more details)
 
   Example:
   ```
@@ -378,6 +380,23 @@ variable "vmseries_asgs" {
         }
       }
 
+      launch_template_version = "1"
+
+      instance_refresh = {
+        strategy = "Rolling"
+        preferences = {
+          checkpoint_delay             = 3600
+          checkpoint_percentages       = [50, 100]
+          instance_warmup              = 1200
+          min_healthy_percentage       = 50
+          skip_matching                = false
+          auto_rollback                = false
+          scale_in_protected_instances = "Ignore"
+          standby_instances            = "Ignore"
+        }
+        triggers = []
+      }
+
       application_lb = null
       network_lb     = null      
     }
@@ -434,6 +453,23 @@ variable "vmseries_asgs" {
       tags                 = map(string)
     })
 
+    launch_template_version = string
+
+    instance_refresh = object({
+      strategy = string
+      preferences = object({
+        checkpoint_delay             = number
+        checkpoint_percentages       = list(number)
+        instance_warmup              = number
+        min_healthy_percentage       = number
+        skip_matching                = bool
+        auto_rollback                = bool
+        scale_in_protected_instances = string
+        standby_instances            = string
+      })
+      triggers = list(string)
+    })
+
     application_lb = object({
       name  = string
       rules = any

examples/combined_design_autoscale/example-natgw-lambda-vpc.tfvars

@@ -595,6 +595,23 @@ vmseries_asgs = {
       }
     }
 
+    launch_template_version = "1"
+
+    instance_refresh = {
+      strategy = "Rolling"
+      preferences = {
+        checkpoint_delay             = 3600
+        checkpoint_percentages       = [50, 100]
+        instance_warmup              = 1200
+        min_healthy_percentage       = 50
+        skip_matching                = false
+        auto_rollback                = false
+        scale_in_protected_instances = "Ignore"
+        standby_instances            = "Ignore"
+      }
+      triggers = []
+    }
+
     delicense = {
       enabled        = true
       ssm_param_name = "NAME_OF_THE_SECURE_STRING_PARAMETER" # TODO: update here

examples/combined_design_autoscale/example-no-natgw-lambda-no-vpc.tfvars

@@ -540,6 +540,23 @@ vmseries_asgs = {
       }
     }
 
+    launch_template_version = "1"
+
+    instance_refresh = {
+      strategy = "Rolling"
+      preferences = {
+        checkpoint_delay             = 3600
+        checkpoint_percentages       = [50, 100]
+        instance_warmup              = 1200
+        min_healthy_percentage       = 50
+        skip_matching                = false
+        auto_rollback                = false
+        scale_in_protected_instances = "Ignore"
+        standby_instances            = "Ignore"
+      }
+      triggers = []
+    }
+
     delicense = {
       enabled        = false
       ssm_param_name = null

examples/combined_design_autoscale/example.tfvars

@@ -540,6 +540,23 @@ vmseries_asgs = {
       }
     }
 
+    launch_template_version = "1"
+
+    instance_refresh = {
+      strategy = "Rolling"
+      preferences = {
+        checkpoint_delay             = 3600
+        checkpoint_percentages       = [50, 100]
+        instance_warmup              = 1200
+        min_healthy_percentage       = 50
+        skip_matching                = false
+        auto_rollback                = false
+        scale_in_protected_instances = "Ignore"
+        standby_instances            = "Ignore"
+      }
+      triggers = []
+    }
+
     delicense = {
       enabled        = false
       ssm_param_name = null

examples/combined_design_autoscale/main.tf

@@ -368,6 +368,8 @@ module "vm_series_asg" {
   min_size                        = each.value.asg.min_size
   desired_capacity                = each.value.asg.desired_cap
   lambda_execute_pip_install_once = each.value.asg.lambda_execute_pip_install_once
+  instance_refresh                = each.value.instance_refresh
+  launch_template_version         = each.value.launch_template_version
   vmseries_iam_instance_profile   = aws_iam_instance_profile.vm_series_iam_instance_profile.name
   subnet_ids                      = [for i, j in var.vpcs[each.value.vpc].subnets : module.subnet_sets[format("%s-lambda", each.value.vpc)].subnets[j.az].id if j.set == "lambda"]
   security_group_ids              = contains(keys(module.vpc[each.value.vpc].security_group_ids), "lambda") ? [module.vpc[each.value.vpc].security_group_ids["lambda"]] : []

examples/combined_design_autoscale/variables.tf

@@ -280,6 +280,8 @@ variable "vmseries_asgs" {
     - `statistic`: statistic of the metric. Valid values: Average, Maximum, Minimum, SampleCount, Sum
     - `cloudwatch_namespace`: name of CloudWatch namespace, where metrics are available (it should be the same as namespace configured in VM-Series plugin in PAN-OS)
     - `tags`: tags configured for dynamic scaling policy
+  - `launch_template_version`: launch template version to use to launch instances
+  - `instance_refresh`: instance refresh for ASG defined by several attributes (please README for module `asg` for more details)
 
   Example:
   ```
@@ -380,6 +382,23 @@ variable "vmseries_asgs" {
         }
       }
 
+      launch_template_version = "1"
+
+      instance_refresh = {
+        strategy = "Rolling"
+        preferences = {
+          checkpoint_delay             = 3600
+          checkpoint_percentages       = [50, 100]
+          instance_warmup              = 1200
+          min_healthy_percentage       = 50
+          skip_matching                = false
+          auto_rollback                = false
+          scale_in_protected_instances = "Ignore"
+          standby_instances            = "Ignore"
+        }
+        triggers = []
+      }
+
       delicense = {
         enabled = true
         ssm_param_name = "example_param_store_delicense" # TODO: update here
@@ -438,6 +457,23 @@ variable "vmseries_asgs" {
       tags                 = map(string)
     })
 
+    launch_template_version = string
+
+    instance_refresh = object({
+      strategy = string
+      preferences = object({
+        checkpoint_delay             = number
+        checkpoint_percentages       = list(number)
+        instance_warmup              = number
+        min_healthy_percentage       = number
+        skip_matching                = bool
+        auto_rollback                = bool
+        scale_in_protected_instances = string
+        standby_instances            = string
+      })
+      triggers = list(string)
+    })
+
     delicense = object({
       enabled        = bool
       ssm_param_name = string