Terraform GCP Project

A Terraform module for GKE Cluster with opinionated options, we focus on getting the most of the security feature available turned on, and with minimal dependencies to gke managed feature if not necessary.

Compatibility

This module is meant for use with Terraform 0.14.

Requirements

Software

• Terraform >= 0.14
• terraform-provider-google-beta plugin >= 4.5, < 5.0.0

Permissions

In order to execute this module you must start the Google providers with a Service Account with at least the following roles:

• roles/compute.viewer
• roles/compute.securityAdmin
• roles/container.clusterAdmin
• roles/container.developer
• roles/iam.serviceAccountUser

node_pools and defaults_node_pools_configs variables

The node_pools variable takes the following parameters:

Name	Description	Type	Default	defaults_node_pools_configs	Requirement
name	The name of the pool	string		❌	Required
min_size	The minumun number of nodes in the pool	number	3	✅	Optional
max_size	The minumun number of nodes in the pool, if not present the same value of min_size will be used	number	min_size	✅	Optional
max_surge	The number of additional nodes that can be added to the node pool during an upgrade	number	1	✅	Optional
max_unavailable	The number of nodes that can be simultaneously unavailable during an upgrade	number	0	✅	Optional
machine_type	The GCP instance machine type to use	string		✅	Required
machine_image	The GCP instance machine image name to use	string	"COS"	✅	Optional
min_cpu_platform	The minimum CPU platform to use, if not set the zone default will be used	string	""	✅	Optional
disk_type	The root disk type of the nodes.	string	pd-standard	✅	Optional
disk_size_gb	The root disk size of the nodes, expressed in GB. The minimum value is 10	number	50	✅	Optional
service_account	The service account to be used by the Node VMs	string	""	✅	Optional
node_locations	A comma separated list of zone location for the pool	string	""	❌	Optional
sandbox_enabled	Turn on or off the gvisor sandbox for the nodes	boll	"false"	❌	Optional

Contributing

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

Versioning

We use SemVer for versioning. For the versions available, see the tags on this repository.

License

This project is licensed under the Apache License 2.0 - see the LICENSE.md file for details