ScalewayStatic-verified

Scaleway Serverless Container

Name: Scaleway Serverless Container
Brand: IaC Bazaar
SKU: scaleway-serverless-container
Availability: InStock

Container namespace, deployed container, custom domain, and registry wiring.

terraformAlt & Specialty Cloudsscaleway

Compare Serverless Containers across clouds →

scaleway-serverless-containervizier v1.2.0

Verification

Static-verified

Passed: validated and lint-clean (provider-schema-validated for AWS/Azure/GCP; Terraform-language lint elsewhere).

Conformance

Static validation (fmt · validate · tflint)
No applicable security policies for this provider
Plan tests (mocked: validation rules · outputs)

Provenance

SHA-256 checksum
Cosign signature

Functional

Live test pending (no cloud run yet)

Last verified 2026-06-28 · how we verify

Verify this download

cosign · sha-256

Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.

# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub

# 2. This module's Sigstore bundle
curl -o scaleway-serverless-container-1.0.0.sigstore.json \
  https://www.iac-bazaar.com/api/artifacts/scaleway-serverless-container/signature

# 3. Verify the tarball you downloaded
cosign verify-blob \
  --key cosign.pub \
  --bundle scaleway-serverless-container-1.0.0.sigstore.json \
  scaleway-serverless-container-1.0.0.tar.gz
# → Verified OK

# 4. (optional) confirm the checksum too
echo "0122dd99ef13c3a193dbc825e52bb53afdea5435b25ecf2152a37cf7689c488d  scaleway-serverless-container-1.0.0.tar.gz" | sha256sum -c

Signature bundle Public key Machine-readable receipt How we verify

Use it from the registry

terraform · opentofu

module "serverless_container" {
  source  = "www.iac-bazaar.com/iac-bazaar/scaleway-serverless-container/scaleway"
  version = "1.0.0"
}

Needs a registry token from /account/tokens. The module itself is free; the account is what identifies you. Full setup: registry docs.

Cite it in your README

badge · attribution

Paste this beside the module in the repository that uses it. The badge is rendered from this artifact's verification record, so it reads static-verified because the record says so, and the link lands on this page.

README.md, GitLab, Gitea

[![IaC Bazaar: static-verified](https://www.iac-bazaar.com/api/artifacts/scaleway-serverless-container/badge)](https://www.iac-bazaar.com/catalog/scaleway-serverless-container?utm_source=syndication&utm_medium=readme&utm_campaign=artifact)

Terraform module 1.0.0, static-verified on IaC Bazaar: [Scaleway Serverless Container](https://www.iac-bazaar.com/catalog/scaleway-serverless-container?utm_source=syndication&utm_medium=readme&utm_campaign=artifact)

```hcl
module "serverless_container" {
  source  = "www.iac-bazaar.com/iac-bazaar/scaleway-serverless-container/scaleway"
  version = "1.0.0"
}
```

Preview:

Inputs & outputs

Create a free account to read this module's contract

The declared contract - every input name, type, default and description, plus every output - is shown to signed-in accounts, not to anonymous visitors.

A free account sees the contract of every module in the catalogue. There is no subscription and nothing to buy - the modules are free to download, and they run under Vizier.

Create a free account →Sign in

Documentation

scaleway-serverless-container

A Scaleway Serverless Container stack: a Containers namespace (with its private registry), a deployed container, and optional custom-domain bindings. Bring your own namespace or let the module create a dedicated one.

Status: static-validated, live-test pending. Validated with tofu validate + tflint + checkov against the scaleway/scaleway provider. Not yet applied against a live Scaleway project (live verify needs a pushed image), so it ships under live-test quarantine.

Design & secure defaults

Private by default. privacy = "private" requires a Scaleway auth token to invoke; flip to "public" only when anonymous access is intended.
HTTPS enforced. http_option = "redirected" 301-redirects plain HTTP to HTTPS so traffic is never served in the clear.
Strong isolation. sandbox = "v2" runs the gVisor-isolated runtime.
Secrets stay secret. secret_environment_variables (container and namespace) are sensitive and never appear in plan output.
Cost-efficient scaling. min_scale = 0 scales to zero when idle; raise it to remove cold starts. A precondition enforces min_scale <= max_scale.
Pin what you ship. Supply registry_sha256 to bind the exact image digest and force a redeploy when it changes.
Safe deploy gating. deploy only takes effect when registry_image is set, and a precondition rejects deploy = true without an image.
Custom domains require privacy = "public" (a precondition enforces this, since private containers are reachable only via their authenticated native endpoint) and a pre-existing CNAME to the native endpoint.

Provider

scaleway/scaleway >= 2.0, < 3.0. Requires Terraform/OpenTofu >= 1.6.

License

Commercial — LicenseRef-IaCBazaar-Commercial. See the IaC Bazaar terms.

Usage code & full reference need an account

The complete copy-paste usage, the full input/output reference, and operational notes are free with an account - shown here and bundled in the download. Sign in and this section fills in.

Usage
Key inputs
Outputs

Create a free account Sign in

Related modules

Static validatedLive test pending

scaleway-function

A Scaleway Serverless Function in its own namespace, private so an IAM token is needed to invoke it (public by name), plain HTTP redirected to HTTPS, secrets in the encrypted secret variables rather than the plain ones, idling at zero instances with a ceiling you chose, and the zip archive uploaded at apply with its hash so a changed archive redeploys.

View module

Static validatedLive test pending

scaleway-static-site

A Scaleway Object Storage bucket serving a static website. A bucket policy here is version 2023-04-17, not the AWS 2012-10-17 that every S3 example carries and Scaleway has deprecated, and the module checks which one you passed. Without a policy the public-read ACL also publishes the file list, which file_list_is_public reports.

View module

Static validatedLive test pending

ibm-code-engine-app

A Code Engine project and application with managed_domain_mappings local_private, because the field defaults to local_public and an application deployed with no opinion about it answers the world. scale_min_instances is one rather than zero, run_as_user is not root, and a private image without its pull secret is refused - that failure otherwise arrives long after the apply.

View module

Static validatedLive test pending

oci-container-instances

A container with no health check is restarted only when its process exits, so a deadlocked one stays; containers run as root unless the security context says otherwise; and a public IP on the instance is an internet-facing container with only an NSG in front. Every container gets a check that restarts it and runs non-root on a read-only filesystem; the instance stays private.

View module

Static validatedLive test pending

alicloud-sae-application

A Serverless App Engine namespace and application with auto_config false, which makes the VPC, vSwitch and security group required rather than letting SAE create three resources that live in your account and nobody's Terraform. Two replicas so a deploy is not an outage, min_ready_instances set so a rollout is actually rolling, and typed liveness and readiness probes.

View module

Live-tested

azure-container-apps

Container Apps environment with workload profiles, Dapr, KEDA scale rules, ACR pull identity and custom domain.

View module