gke-ecommerce
Devgurusio/gke-ecommerce/gcp
Google Kubernetes Engine starter kit to bootstrap an e-commerce site based on microservices
 Google Kubernetes Engine (GKE) This is an opinionated terraform module to bootstrap a GKE Cluster using Terraform. Based on our needs and following GKE security best practices, we've enabled/disabled some features by default. Features enabled: Default node pool removed Logging and Monitoring using Cloud Operations for GKE GKE Shielded nodes (with secure boot enabled) Workload identity VPC Native cluster Storage classes using CSI driver Prevent cluster destroy Updatable nodes (new node pool created before destroying the old one) non-default SA for nodes Usage of containerd as runtime Cluster autoscaler vertical pod autoscaler Features disabled: Basic auth for API server Client certificate issuing for API server Usag
| Name | Type | Description | Default |
|---|---|---|---|
| project_id | string | The project ID to host the cluster in (required) | required |
| subnet_ip_cidr_range | string | IPv4 CIDR Block for Subnetwork | "10.0.0.0/17" |
| deletion_protection | bool | Whether to enable deletion protection on the cluster | true |
| autoscaling_profile | string | The autoscaling profile to use. Valid values are: balanced, cost, performance. D | "BALANCED" |
| release_channel | string | The release channel of this cluster. Accepted values are `UNSPECIFIED`, `RAPID`, | "UNSPECIFIED" |
| cluster_name_suffix | string | A suffix to append to the default cluster name | "" |
| zones | list(string) | The zone to host the cluster in (required if is a zonal cluster) | [] |
| master_ipv4_cidr_block | string | IPv4 CIDR Block for Master Nodes | "172.16.0.0/28" |
| cluster_autoscaler_cpu_min | number | Minimum number of CPUs in the cluster autoscaler | 1 |
| gke_instance_type | string | The worker instance type | "n1-standard-2" |
| node_pool_disk_type | string | Disk type for GKE nodes. Available values: pd-stadard, pd-ssd.Default: pd-standa | "pd-ssd" |
| node_auto_repair | bool | Whether the nodes will be automatically repaired | true |
| monitoring_service | string | The monitoring service that the cluster should write metrics to. Automatically s | "monitoring.googleapis.com/kubernetes" |
| enable_cluster_autoscaler | bool | Whether to enable cluster autoscaler | false |
| services_ipv4_cidr_block | string | IPv4 CIDR Block for Kubernetes services | "192.168.64.0/18" |
| enable_netpol | bool | Toggles network policies enforcement feature. Default: false | false |
| netpol_provider | string | Sets the network policy provider. Default: CALICO | "CALICO" |
| nat_ip_count | number | The number of NAT IPs | 1 |
| min_ports_per_vm | string | Max number of concurrent outgoing request to IP:PORT_PROTOCOL per VM | "8192" |
| udp_idle_timeout_sec | string | Timeout (in seconds) for UDP connections. Defaults to 30s if not set. | "30" |
| google_compute_firewall_name | string | The name of the firewall rule to be created | "istio-discovery-allow-firewall" |
| … and 9 more inputs | |||
network_name — Network namenetwork_self_link — Network selflinksubnetwork_name — Subnetwork namegoogle_container_cluster — GKE cluster namek8s_ingress_ip — API server public IP addressnat_address — List of NAT addressesAzure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,