50ac3a5013
* untested * pllan testing * fix stage 2s * move providers to their own file * single-environment stage 3 * fixes and moved blocks * stage3 factory * doc * review comments * review comments * tfdoc * fasts tage 1 tests * netsec as stage 2 * fix backported roles * fix backported roles * tfdoc * fixes * fix tag value roles in stage 1 * remove checklist, fix stage 1 tests * inventory * Small bugfix * refactor context tag values * fix previous merge * fix previous merge * fix previous merge * support short names for top level automation resources, change top level context variable * fix new top level context * roll back merge changes to stage 0 outputs * roll back more merge changes * linting errors * tfdoc * fix tests, roll back merge in tenants stage * tfdoc * fix inventory * optional stage 2 env folders and tag bindings * tflint * damn tflint * damn tflint * tfdoc * fix networking tests * tflint * fix test inventories * tfdoc * use coalesce for project parents * fix billing role conditions * fix billing role conditions * security stage tested (ngw resources need fixing/porting) * boilerplate * fix inventory * stage envs and stage linking script * initial work on resman docs, update diagram, improve teams folder * resman README * fix stage 2 IAM delegation * remove checklist from bootstrap * stage 1 tests * stage 0 1 and 2 tests * tflint * tflint * tfdoc * GCVE stage refactor (untested) * GCVE stage refactor (untested) * GCVE stage 3 * gcve tests * tflint * tfdoc * fix links * module tests * stages README * move network security to stage 2 * network security tests * replace stage links in README files * minimal netsec stage refactor * use factory for iac org policies, add configurable drs org policy for iac * test mt stage * tfdoc * fix cicd workflows * fix cicd workflows * gke-dev stage * tflint * remove data platform stage * exclude provider files via tfdoc opts * remove data platform tests and links * fix merge * fix resman inventory * boilerplate * inventory --------- Co-authored-by: Simone Ruffilli <sruffilli@google.com>
3.0 KiB
GKE blueprints
The blueprints in this folder show implement end-to-end scenarios for GKE topologies that show how to automate common configurations or leverage specific products.
They are meant to be used as minimal but complete starting points to create actual infrastructure, and as playgrounds to experiment with Google Cloud features.
Blueprints
Binary Authorization Pipeline
This blueprint shows how to create a CI and a CD pipeline in Cloud Build for the deployment of an application to a private GKE cluster with unrestricted access to a public endpoint. The blueprint enables a Binary Authorization policy in the project so only images that have been attested can be deployed to the cluster. The attestations are created using a cryptographic key pair that has been provisioned in KMS.
Multi-cluster mesh on GKE (fleet API)
This blueprint shows how to create a multi-cluster mesh for two private clusters on GKE. Anthos Service Mesh with automatic control plane management is set up for clusters using the Fleet API. This can only be done if the clusters are in a single project and in the same VPC. In this particular case both clusters having being deployed to different subnets in a shared VPC.
Multitenant GKE fleet
This blueprint allows simple centralized management of similar sets of GKE clusters and their nodepools in a single project, and optional fleet management via GKE Hub templated configurations.
Shared VPC with GKE and per-subnet support
This blueprint shows how to configure a Shared VPC, including the specific IAM configurations needed for GKE, and to give different level of access to the VPC subnets to different identities.
It is meant to be used as a starting point for most Shared VPC configurations, and to be integrated to the above blueprints where Shared VPC is needed in more complex network topologies.
Autopilot
This blueprint creates an Autopilot cluster with Google-managed Prometheus enabled and installs an application that scales as the traffic that is hitting the load balancer exposing it grows.