pf-02-gcp-terraform-gke-platform

A module set that keeps capacity during GKE node pool upgrades with SURGE, and opens only what a VPN needs through a firewall baseline, all as code.

• Terraform
• GCP
• GKE
• Cloud Logging
• Cloud Monitoring

22

Terraform modules

5

Extra nodes first (max_surge)

0

Nodes down at once (max_unavailable)

Approach

The node pool upgrades with SURGE: five new nodes come up first and unavailable stays at zero. The c2sfirewall module opens management ports from the VPN at priority 1000 and denies other tcp and udp outbound at priority 65534.

View on GitHub ↗
Open the case: case-studies/gcp-terraform/README.md →