Scaleway Instance

Deploys a Scaleway compute Instance as a composite resource that bundles the server, an optional dedicated Flexible IP, optional additional local volumes, and an optional Private Network attachment into a single declarative manifest. The instance is provisioned in a specific Scaleway zone and can reference ScalewayInstanceSecurityGroup and ScalewayPrivateNetwork resources for network configuration.

What Gets Created

When you deploy a ScalewayInstance resource, OpenMCF provisions:

• Instance Server — an instance.Server resource in the specified zone with the chosen commercial type, base image, root volume configuration, optional cloud-init script, instance state control, and deletion protection
• Flexible IP (optional) — a dedicated instance.Ip resource providing a public IPv4 address that has an independent lifecycle, surviving instance replacement to preserve DNS records and firewall rules. Created only when publicIp is set.
• Additional Volumes (optional) — one or more instance.Volume resources (local SSD or scratch) created and attached to the instance via additionalVolumeIds. These volumes share the instance's lifecycle.
• Private Network Attachment (optional) — an inline private NIC on the server connecting it to a ScalewayPrivateNetwork, enabling communication with other resources over private IPs. Created only when privateNetworkId is set.

Prerequisites

• Scaleway credentials configured via environment variables or OpenMCF provider config
• A target zone where the instance will be created (e.g., fr-par-1, nl-ams-1, pl-waw-1). The zone must match the zone of any referenced Private Network or security group.
• A base image — either a UUID or a human-friendly label (e.g., ubuntu_jammy, debian_bullseye) available in the target zone
• (Optional) A ScalewayPrivateNetwork if you want the instance on an internal network
• (Optional) A ScalewayInstanceSecurityGroup if you need custom firewall rules

Quick Start

Create a file instance.yaml:

apiVersion: scaleway.openmcf.org/v1
kind: ScalewayInstance
metadata:
  name: web-01
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: dev.ScalewayInstance.web-01
spec:
  zone: fr-par-1
  type: DEV1-S
  image: ubuntu_jammy
  publicIp: {}
  state: started

Deploy:

openmcf apply -f instance.yaml

This creates a DEV1-S instance running Ubuntu Jammy in fr-par-1 with a dedicated public IP address.

Configuration Reference

Required Fields

Optional Fields

Examples

Minimal Development Instance

A small development instance with a public IP and the default root volume:

apiVersion: scaleway.openmcf.org/v1
kind: ScalewayInstance
metadata:
  name: dev-box
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: dev.ScalewayInstance.dev-box
spec:
  zone: fr-par-1
  type: DEV1-S
  image: ubuntu_jammy
  publicIp: {}
  state: started

Production Instance with Private Network and Security Group

A production instance on a Private Network, behind a custom security group, with a larger SBS root volume, cloud-init bootstrapping, and deletion protection enabled. The security group and Private Network are referenced from other OpenMCF resources:

apiVersion: scaleway.openmcf.org/v1
kind: ScalewayInstance
metadata:
  name: app-server
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: prod.ScalewayInstance.app-server
spec:
  zone: fr-par-1
  type: PRO2-S
  image: ubuntu_jammy
  securityGroupId:
    valueFrom:
      kind: ScalewayInstanceSecurityGroup
      name: web-sg
      fieldPath: status.outputs.security_group_id
  privateNetworkId:
    valueFrom:
      kind: ScalewayPrivateNetwork
      name: app-network
      fieldPath: status.outputs.private_network_id
  rootVolume:
    sizeInGb: 50
    volumeType: sbs_volume
    deleteOnTermination: true
    sbsIops: 5000
  cloudInit: |
    #!/bin/bash
    apt-get update && apt-get install -y docker.io
    systemctl enable docker
    systemctl start docker
  state: started
  protected: true

Instance with Additional Volumes and Custom Root Volume

A general-purpose instance with a larger local SSD root volume and two additional volumes — one for application data and one for temporary processing:

apiVersion: scaleway.openmcf.org/v1
kind: ScalewayInstance
metadata:
  name: data-processor
  labels:
    openmcf.org/provisioner: pulumi
    pulumi.openmcf.org/organization: my-org
    pulumi.openmcf.org/project: my-project
    pulumi.openmcf.org/stack.name: staging.ScalewayInstance.data-processor
spec:
  zone: nl-ams-1
  type: GP1-S
  image: debian_bullseye
  publicIp:
    reverseDns: data-processor.example.com
  rootVolume:
    sizeInGb: 40
    volumeType: l_ssd
  additionalVolumes:
    - name: app-data
      volumeType: l_ssd
      sizeInGb: 100
    - name: scratch-space
      volumeType: scratch
      sizeInGb: 50
  cloudInit: |
    #!/bin/bash
    mkfs.ext4 /dev/vdb
    mkdir -p /mnt/app-data
    mount /dev/vdb /mnt/app-data
    echo '/dev/vdb /mnt/app-data ext4 defaults 0 2' >> /etc/fstab
  state: started

Stack Outputs

After deployment, the following outputs are available in status.outputs:

Related Components

• ScalewayInstanceSecurityGroup — zonal firewall that controls inbound and outbound traffic rules; referenced via the securityGroupId field
• ScalewayPrivateNetwork — internal network for private communication between instances, databases, and load balancers; referenced via the privateNetworkId field
• ScalewayVpc — regional VPC that contains Private Networks
• ScalewayPublicGateway — provides NAT and DHCP for instances on a Private Network that do not have a public IP
• ScalewayKapsuleCluster — managed Kubernetes cluster; instances can serve as standalone workloads alongside Kapsule clusters on the same Private Network
• ScalewayRdbInstance — managed database that instances connect to over the Private Network using private_ip_address