From dd365f6bb0e6ae228be2039b79a1669078daa1e6 Mon Sep 17 00:00:00 2001 From: Julio Castillo Date: Thu, 14 May 2020 19:05:55 +0200 Subject: [PATCH] Fix comment in shared VPC + GKE example --- infrastructure/shared-vpc-gke/main.tf | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/infrastructure/shared-vpc-gke/main.tf b/infrastructure/shared-vpc-gke/main.tf index 1c8d01bdf..c958d36c2 100644 --- a/infrastructure/shared-vpc-gke/main.tf +++ b/infrastructure/shared-vpc-gke/main.tf @@ -17,6 +17,7 @@ ############################################################################### # the container.hostServiceAgentUser role is needed for GKE on shared VPC +# see: https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-shared-vpc#grant_host_service_agent_role module "project-host" { source = "../../modules/project" @@ -81,12 +82,6 @@ module "project-svc-gke" { # Networking # ################################################################################ -# the service project GKE robot needs the `hostServiceAgent` role throughout -# the entire life of its clusters; the `iam_project_id` project output is used -# here to set the project id so that the VPC depends on that binding, and any -# cluster using it then also depends on it indirectly; you can of course use -# the `project_id` output instead if you don't care about destroying - # subnet IAM bindings control which identities can use the individual subnets module "vpc-shared" {