Files
hunfabric/blueprints/gke/multi-cluster-mesh-gke-fleet-api/gke.tf
Ludovico Magnocavallo d86b8d565c Refactor GKE cluster modules access configurations, add support for DNS endpoint (#2761)
* stub

* gke standard module and tests

* blueprints

* tfdoc

* autopilot

* blueprints

* tfdoc

* gke hub module examples

* dataproc and gke fixture
2024-12-12 11:02:24 +01:00

72 lines
2.0 KiB
HCL

/**
* Copyright 2023 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
# tfdoc:file:description GKE cluster and hub resources.
module "clusters" {
for_each = var.clusters_config
source = "../../../modules/gke-cluster-standard"
project_id = module.fleet_project.project_id
name = each.key
location = var.region
access_config = {
ip_access = {
authorized_ranges = merge(
{ mgmt : var.mgmt_subnet_cidr_block },
{
for key, config in var.clusters_config :
"pods-${key}" => config.pods_cidr_block if key != each.key
}
)
}
}
vpc_config = {
network = module.svpc.self_link
subnetwork = module.svpc.subnet_self_links["${var.region}/subnet-${each.key}"]
}
release_channel = "REGULAR"
labels = {
mesh_id = "proj-${module.fleet_project.number}"
}
deletion_protection = var.deletion_protection
}
module "cluster_nodepools" {
for_each = var.clusters_config
source = "../../../modules/gke-nodepool"
project_id = module.fleet_project.project_id
cluster_name = module.clusters[each.key].name
location = var.region
name = "nodepool-${each.key}"
node_count = { initial = 1 }
service_account = {
create = true
}
tags = ["${each.key}-node"]
}
module "hub" {
source = "../../../modules/gke-hub"
project_id = module.fleet_project.project_id
clusters = { for k, v in module.clusters : k => v.id }
features = {
servicemesh = true
}
depends_on = [
module.fleet_project
]
}