kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add spoke peering zones to hub forwarding zone

Browse Source
This commit is contained in:
Aleksandr Averbukh
2019-10-30 12:04:58 +01:00
parent 5bd25ea48f
commit 5f9438d0ae
1 changed files with 32 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
infrastructure/hub-and-spoke-vpns/main.tf
View File

@@ -166,7 +166,7 @@ resource "google_compute_router" "spoke-1" {
}
resource "google_compute_router" "spoke-2" {
name = "spoke-2"
region = element(local.spoke_2_subnet_regions, 0)
region = element(local.spoke_2_subnet_regions, 1)
network = module.vpc-spoke-2.network_name
project = var.spoke_2_project_id
bgp {
@@ -230,7 +230,7 @@ module "vpn-spoke-2-to-hub" {
project_id = var.spoke_2_project_id
network = module.vpc-spoke-2.network_name
region = element(local.spoke_2_subnet_regions, 0)
region = element(local.spoke_2_subnet_regions, 1)
tunnel_name_prefix = "spoke-2-to-hub"
shared_secret = module.vpn-hub-to-spoke-2.ipsec_secret-dynamic[0]
peer_ips = [module.vpn-hub-to-spoke-2.gateway_ip]
@@ -269,28 +269,54 @@ module "hub-forwarding-zone" {
target_name_server_addresses = var.forwarding_zone_server_addresses
}
module "spoke-1-peering-zone" {
module "spoke-1-peering-zone-to-hub-private-zone" {
source = "terraform-google-modules/cloud-dns/google"
version = "~> 2.0"
project_id = var.spoke_1_project_id
type = "peering"
name = "${var.private_dns_zone_name}-spoke-1-peering"
name = "${var.private_dns_zone_name}-spoke-1-peering-to-hub-private"
domain = var.private_dns_zone_domain
private_visibility_config_networks = [module.vpc-spoke-1.network_self_link]
target_network = module.vpc-hub.network_self_link
}
module "spoke-2-peering-zone" {
module "spoke-2-peering-zone-to-hub-private-zone" {
source = "terraform-google-modules/cloud-dns/google"
version = "~> 2.0"
project_id = var.spoke_2_project_id
type = "peering"
name = "${var.private_dns_zone_name}-spoke-2-peering"
name = "${var.private_dns_zone_name}-spoke-2-peering-to-hub-private"
domain = var.private_dns_zone_domain
private_visibility_config_networks = [module.vpc-spoke-2.network_self_link]
target_network = module.vpc-hub.network_self_link
}
module "spoke-1-peering-zone-to-hub-forwarding-zone" {
source = "terraform-google-modules/cloud-dns/google"
version = "~> 2.0"
project_id = var.spoke_1_project_id
type = "peering"
name = "${var.private_dns_zone_name}-spoke-1-peering-to-hub-forwarding"
domain = var.forwarding_dns_zone_domain
private_visibility_config_networks = [module.vpc-spoke-1.network_self_link]
target_network = module.vpc-hub.network_self_link
}
module "spoke-2-peering-zone-to-hub-forwarding-zone" {
source = "terraform-google-modules/cloud-dns/google"
version = "~> 2.0"
project_id = var.spoke_2_project_id
type = "peering"
name = "${var.private_dns_zone_name}-spoke-2-peering-to-hub-forwarding"
domain = var.forwarding_dns_zone_domain
private_visibility_config_networks = [module.vpc-spoke-2.network_self_link]
target_network = module.vpc-hub.network_self_link
}