为 Pod 和服务配置 Terraform GKE 插件 IP 范围

Question

我正在尝试使用GKE 的 Terraform 模块，但我不确定如何配置属性ip_range_pods和ip_range_services.

具体来说，我不确定他们是如何得出这些值的：

  ip_range_pods              = "us-central1-01-gke-01-pods"
  ip_range_services          = "us-central1-01-gke-01-services"

Answer 1

和ip_range_pods映射ip_range_services到资源的和属性，如模块源中所示：ip_allocation_policy cluster_secondary_range_nameservices_secondary_range_namegoogle_container_cluster

resource "google_container_cluster" "zonal_primary" {
  # ...

  ip_allocation_policy {
    cluster_secondary_range_name  = "${var.ip_range_pods}"
    services_secondary_range_name = "${var.ip_range_services}"
  }
}

这些需要是子网中的现有范围，例如由google_compute_subnetwork资源创建的范围：

resource "google_compute_subnetwork" "network-with-private-secondary-ip-ranges" {
  name          = "test-subnetwork"
  ip_cidr_range = "10.2.0.0/16"
  region        = "us-central1"
  network       = "${google_compute_network.custom-test.self_link}"
  secondary_ip_range {
    range_name    = "tf-test-secondary-range-update1"
    ip_cidr_range = "192.168.10.0/24"
  }
}

resource "google_compute_network" "custom-test" {
  name                    = "test-network"
  auto_create_subnetworks = false
}