@@ -36,187 +36,187 @@ resources:
3636 exports :
3737 - subnet_name
3838 - subnet_link
39- - name : public_address
40- props :
41- - name : address_name
42- value : " {{ stack_name }}-{{ stack_env }}-{{ region }}-ip-addr"
43- exports :
44- - address
45- - name : controller_instances
46- file : instances.iql
47- props :
48- - name : num_instances
49- value : 3
50- - name : instance_name_prefix
51- value : " {{ stack_name }}-{{ stack_env }}-controller"
52- - name : disks
53- value :
54- - autoDelete : true
55- boot : true
56- initializeParams :
57- diskSizeGb : 10
58- sourceImage : https://compute.googleapis.com/compute/v1/projects/ubuntu-os-cloud/global/images/family/ubuntu-2004-lts
59- mode : READ_WRITE
60- type : PERSISTENT
61- - name : machine_type
62- value : " https://compute.googleapis.com/compute/v1/projects/{{ project }}/zones/{{ default_zone }}/machineTypes/f1-micro"
63- - name : scheduling
64- value : {automaticRestart: true}
65- - name : tags
66- value : {items: ["{{ stack_name }}", "controller"]}
67- - name : service_accounts
68- value :
69- - email : default
70- scopes :
71- - https://www.googleapis.com/auth/compute
72- - https://www.googleapis.com/auth/devstorage.read_only
73- - https://www.googleapis.com/auth/logging.write
74- - https://www.googleapis.com/auth/monitoring
75- - https://www.googleapis.com/auth/service.management.readonly
76- - https://www.googleapis.com/auth/servicecontrol
77- - name : network_interfaces
78- values :
79- dev :
80- value :
81- - {networkIP: "10.240.0.10", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
82- - {networkIP: "10.240.0.11", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
83- - {networkIP: "10.240.0.12", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
84- - name : worker_instances
85- file : instances.iql
86- props :
87- - name : num_instances
88- value : 3
89- - name : instance_name_prefix
90- value : " {{ stack_name }}-{{ stack_env }}-worker"
91- - name : disks
92- value :
93- - autoDelete : true
94- boot : true
95- initializeParams :
96- diskSizeGb : 10
97- sourceImage : https://compute.googleapis.com/compute/v1/projects/ubuntu-os-cloud/global/images/family/ubuntu-2004-lts
98- mode : READ_WRITE
99- type : PERSISTENT
100- - name : machine_type
101- value : " https://compute.googleapis.com/compute/v1/projects/{{ project }}/zones/{{ default_zone }}/machineTypes/f1-micro"
102- - name : scheduling
103- value : {automaticRestart: true}
104- - name : tags
105- value : {items: ["{{ stack_name }}", "worker"]}
106- - name : service_accounts
107- value :
108- - email : default
109- scopes :
110- - https://www.googleapis.com/auth/compute
111- - https://www.googleapis.com/auth/devstorage.read_only
112- - https://www.googleapis.com/auth/logging.write
113- - https://www.googleapis.com/auth/monitoring
114- - https://www.googleapis.com/auth/service.management.readonly
115- - https://www.googleapis.com/auth/servicecontrol
116- - name : network_interfaces
117- values :
118- dev :
119- value :
120- - {networkIP: "10.240.0.20", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
121- - {networkIP: "10.240.0.21", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
122- - {networkIP: "10.240.0.22", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
123- - name : health_checks
124- props :
125- - name : health_check_name
126- value : kubernetes
127- - name : health_check_interval_sec
128- value : 5
129- - name : health_check_description
130- value : Kubernetes Health Check
131- - name : health_check_timeout_sec
132- value : 5
133- - name : health_check_healthy_threshold
134- value : 2
135- - name : health_check_unhealthy_threshold
136- value : 2
137- - name : health_check_host
138- value : kubernetes.default.svc.cluster.local
139- - name : health_check_port
140- value : 80
141- - name : health_check_path
142- value : /healthz
143- exports :
144- - health_check_link
145- - name : internal_firewall
146- file : firewalls.iql
147- props :
148- - name : fw_name
149- value : " {{ stack_name }}-{{ stack_env }}-allow-internal-fw"
150- - name : fw_direction
151- value : INGRESS
152- - name : fw_source_ranges
153- values :
154- dev :
155- value : ["10.240.0.0/24", "10.200.0.0/16"]
156- - name : fw_allowed
157- value : [{IPProtocol: tcp}, {IPProtocol: udp}, {IPProtocol: icmp}]
158- - name : external_firewall
159- file : firewalls.iql
160- props :
161- - name : fw_name
162- value : " {{ stack_name }}-{{ stack_env }}-allow-external-fw"
163- - name : fw_direction
164- value : INGRESS
165- - name : fw_source_ranges
166- values :
167- dev :
168- value : ["0.0.0.0/0"]
169- - name : fw_allowed
170- value : [{IPProtocol: tcp, ports: ["22"]}, {IPProtocol: tcp, ports: ["6443"]},{IPProtocol: icmp}]
171- - name : health_check_firewall
172- file : firewalls.iql
173- props :
174- - name : fw_name
175- value : " {{ stack_name }}-{{ stack_env }}-allow-health-check-fw"
176- - name : fw_direction
177- value : INGRESS
178- - name : fw_source_ranges
179- values :
180- dev :
181- value : ["209.85.152.0/22", "209.85.204.0/22", "35.191.0.0/16"]
182- - name : fw_allowed
183- value : [{IPProtocol: tcp}]
184- - name : get_controller_instances
185- type : query
186- exports :
187- - controller_instances
188- - name : target_pool
189- props :
190- - name : target_pool_name
191- value : " {{ stack_name }}-{{ stack_env }}-target-pool"
192- - name : target_pool_session_affinity
193- value : NONE
194- - name : target_pool_health_checks
195- value : ["{{ health_check_link }}"]
196- - name : target_pool_instances
197- value : " {{ controller_instances }}"
198- exports :
199- - target_pool_link
200- - name : forwarding_rule
201- props :
202- - name : forwarding_rule_name
203- value : " {{ stack_name }}-{{ stack_env }}-forwarding-rule"
204- - name : forwarding_rule_load_balancing_scheme
205- value : EXTERNAL
206- - name : forwarding_rule_port_range
207- value : 6443
208- - name : routes
209- props :
210- - name : num_routes
211- value : 3
212- - name : route_name_prefix
213- value : " {{ stack_name }}-{{ stack_env }}-route"
214- - name : route_priority
215- value : 1000
216- - name : route_data
217- values :
218- dev :
219- value :
220- - {dest_range: "10.200.0.0/24", next_hop_ip: "10.240.0.20"}
221- - {dest_range: "10.200.1.0/24", next_hop_ip: "10.240.0.21"}
222- - {dest_range: "10.200.2.0/24", next_hop_ip: "10.240.0.22"}
39+ # - name: public_address
40+ # props:
41+ # - name: address_name
42+ # value: "{{ stack_name }}-{{ stack_env }}-{{ region }}-ip-addr"
43+ # exports:
44+ # - address
45+ # - name: controller_instances
46+ # file: instances.iql
47+ # props:
48+ # - name: num_instances
49+ # value: 3
50+ # - name: instance_name_prefix
51+ # value: "{{ stack_name }}-{{ stack_env }}-controller"
52+ # - name: disks
53+ # value:
54+ # - autoDelete: true
55+ # boot: true
56+ # initializeParams:
57+ # diskSizeGb: 10
58+ # sourceImage: https://compute.googleapis.com/compute/v1/projects/ubuntu-os-cloud/global/images/family/ubuntu-2004-lts
59+ # mode: READ_WRITE
60+ # type: PERSISTENT
61+ # - name: machine_type
62+ # value: "https://compute.googleapis.com/compute/v1/projects/{{ project }}/zones/{{ default_zone }}/machineTypes/f1-micro"
63+ # - name: scheduling
64+ # value: {automaticRestart: true}
65+ # - name: tags
66+ # value: {items: ["{{ stack_name }}", "controller"]}
67+ # - name: service_accounts
68+ # value:
69+ # - email: default
70+ # scopes:
71+ # - https://www.googleapis.com/auth/compute
72+ # - https://www.googleapis.com/auth/devstorage.read_only
73+ # - https://www.googleapis.com/auth/logging.write
74+ # - https://www.googleapis.com/auth/monitoring
75+ # - https://www.googleapis.com/auth/service.management.readonly
76+ # - https://www.googleapis.com/auth/servicecontrol
77+ # - name: network_interfaces
78+ # values:
79+ # dev:
80+ # value:
81+ # - {networkIP: "10.240.0.10", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
82+ # - {networkIP: "10.240.0.11", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
83+ # - {networkIP: "10.240.0.12", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
84+ # - name: worker_instances
85+ # file: instances.iql
86+ # props:
87+ # - name: num_instances
88+ # value: 3
89+ # - name: instance_name_prefix
90+ # value: "{{ stack_name }}-{{ stack_env }}-worker"
91+ # - name: disks
92+ # value:
93+ # - autoDelete: true
94+ # boot: true
95+ # initializeParams:
96+ # diskSizeGb: 10
97+ # sourceImage: https://compute.googleapis.com/compute/v1/projects/ubuntu-os-cloud/global/images/family/ubuntu-2004-lts
98+ # mode: READ_WRITE
99+ # type: PERSISTENT
100+ # - name: machine_type
101+ # value: "https://compute.googleapis.com/compute/v1/projects/{{ project }}/zones/{{ default_zone }}/machineTypes/f1-micro"
102+ # - name: scheduling
103+ # value: {automaticRestart: true}
104+ # - name: tags
105+ # value: {items: ["{{ stack_name }}", "worker"]}
106+ # - name: service_accounts
107+ # value:
108+ # - email: default
109+ # scopes:
110+ # - https://www.googleapis.com/auth/compute
111+ # - https://www.googleapis.com/auth/devstorage.read_only
112+ # - https://www.googleapis.com/auth/logging.write
113+ # - https://www.googleapis.com/auth/monitoring
114+ # - https://www.googleapis.com/auth/service.management.readonly
115+ # - https://www.googleapis.com/auth/servicecontrol
116+ # - name: network_interfaces
117+ # values:
118+ # dev:
119+ # value:
120+ # - {networkIP: "10.240.0.20", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
121+ # - {networkIP: "10.240.0.21", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
122+ # - {networkIP: "10.240.0.22", subnetwork: "{{ subnet_link }}", accessConfigs: [{name: external-nat, type: ONE_TO_ONE_NAT}]}
123+ # - name: health_checks
124+ # props:
125+ # - name: health_check_name
126+ # value: kubernetes
127+ # - name: health_check_interval_sec
128+ # value: 5
129+ # - name: health_check_description
130+ # value: Kubernetes Health Check
131+ # - name: health_check_timeout_sec
132+ # value: 5
133+ # - name: health_check_healthy_threshold
134+ # value: 2
135+ # - name: health_check_unhealthy_threshold
136+ # value: 2
137+ # - name: health_check_host
138+ # value: kubernetes.default.svc.cluster.local
139+ # - name: health_check_port
140+ # value: 80
141+ # - name: health_check_path
142+ # value: /healthz
143+ # exports:
144+ # - health_check_link
145+ # - name: internal_firewall
146+ # file: firewalls.iql
147+ # props:
148+ # - name: fw_name
149+ # value: "{{ stack_name }}-{{ stack_env }}-allow-internal-fw"
150+ # - name: fw_direction
151+ # value: INGRESS
152+ # - name: fw_source_ranges
153+ # values:
154+ # dev:
155+ # value: ["10.240.0.0/24", "10.200.0.0/16"]
156+ # - name: fw_allowed
157+ # value: [{IPProtocol: tcp}, {IPProtocol: udp}, {IPProtocol: icmp}]
158+ # - name: external_firewall
159+ # file: firewalls.iql
160+ # props:
161+ # - name: fw_name
162+ # value: "{{ stack_name }}-{{ stack_env }}-allow-external-fw"
163+ # - name: fw_direction
164+ # value: INGRESS
165+ # - name: fw_source_ranges
166+ # values:
167+ # dev:
168+ # value: ["0.0.0.0/0"]
169+ # - name: fw_allowed
170+ # value: [{IPProtocol: tcp, ports: ["22"]}, {IPProtocol: tcp, ports: ["6443"]},{IPProtocol: icmp}]
171+ # - name: health_check_firewall
172+ # file: firewalls.iql
173+ # props:
174+ # - name: fw_name
175+ # value: "{{ stack_name }}-{{ stack_env }}-allow-health-check-fw"
176+ # - name: fw_direction
177+ # value: INGRESS
178+ # - name: fw_source_ranges
179+ # values:
180+ # dev:
181+ # value: ["209.85.152.0/22", "209.85.204.0/22", "35.191.0.0/16"]
182+ # - name: fw_allowed
183+ # value: [{IPProtocol: tcp}]
184+ # - name: get_controller_instances
185+ # type: query
186+ # exports:
187+ # - controller_instances
188+ # - name: target_pool
189+ # props:
190+ # - name: target_pool_name
191+ # value: "{{ stack_name }}-{{ stack_env }}-target-pool"
192+ # - name: target_pool_session_affinity
193+ # value: NONE
194+ # - name: target_pool_health_checks
195+ # value: ["{{ health_check_link }}"]
196+ # - name: target_pool_instances
197+ # value: "{{ controller_instances }}"
198+ # exports:
199+ # - target_pool_link
200+ # - name: forwarding_rule
201+ # props:
202+ # - name: forwarding_rule_name
203+ # value: "{{ stack_name }}-{{ stack_env }}-forwarding-rule"
204+ # - name: forwarding_rule_load_balancing_scheme
205+ # value: EXTERNAL
206+ # - name: forwarding_rule_port_range
207+ # value: 6443
208+ # - name: routes
209+ # props:
210+ # - name: num_routes
211+ # value: 3
212+ # - name: route_name_prefix
213+ # value: "{{ stack_name }}-{{ stack_env }}-route"
214+ # - name: route_priority
215+ # value: 1000
216+ # - name: route_data
217+ # values:
218+ # dev:
219+ # value:
220+ # - {dest_range: "10.200.0.0/24", next_hop_ip: "10.240.0.20"}
221+ # - {dest_range: "10.200.1.0/24", next_hop_ip: "10.240.0.21"}
222+ # - {dest_range: "10.200.2.0/24", next_hop_ip: "10.240.0.22"}
0 commit comments