feat: Deploy LB from kubernetes with Helm

Author: gtoonstra

main.tf

@@ -121,6 +121,7 @@ module "load_balancer" {
   vpc_id                         = local.vpc_id
   subnetwork                     = local.vpc_subnetwork
   deploy_neg_backend             = var.deploy_neg_backend
+  deploy_lb                      = var.deploy_lb
 
   depends_on = [
     module.project_factory_project_services,

modules/load_balancer/main.tf

@@ -67,7 +67,7 @@ resource "google_compute_managed_ssl_certificate" "lb_app" {
 }
 
 data "google_compute_ssl_certificate" "lb_app" {
-  count   = var.ssl_cert_name != "" ? 1 : 0
+  count   = var.deploy_lb && var.ssl_cert_name != "" ? 1 : 0
   project = var.project_id
   name    = var.ssl_cert_name
 
@@ -81,6 +81,8 @@ module "lb_app" {
   source  = "GoogleCloudPlatform/lb-http/google"
   version = "12.1.4"
 
+  count             = var.deploy_lb ? 1 : 0
+
   project           = var.project_id
   name              = "${var.deployment_name}-app"
   target_tags       = ["app"]
@@ -151,3 +153,7 @@ module "lb_app" {
     resource.google_compute_network_endpoint_group.nginx,
   ]
 }
+
+locals {
+  external_ip = var.deploy_lb ? module.lb_app[0].external_ip : "255.255.255.255"
+}

modules/load_balancer/neg.tf

@@ -8,7 +8,7 @@ resource "random_id" "neg_name" {
 }
 
 resource "google_compute_network_endpoint_group" "nginx" {
-  count = var.deploy_neg_backend ? 1 : 0
+  count = var.deploy_lb && var.deploy_neg_backend ? 1 : 0
 
   name         = local.neg_name
   network      = var.vpc_id

modules/load_balancer/outputs.tf

@@ -1,5 +1,5 @@
 output "lb_external_ip" {
-  value = jsonencode([module.lb_app.external_ip])
+  value = jsonencode([local.external_ip])
 }
 
 output "neg_name" {

modules/load_balancer/variables.tf

@@ -87,6 +87,12 @@ variable "deploy_neg_backend" {
   description = "Set this to true to connect the backend service to the NEG that the GKE cluster will create"
 }
 
+variable "deploy_lb" {
+  type        = bool
+  default     = true
+  description = "Allows a deploy with a not-yet-existing load balancer"
+}
+
 variable "vpc_id" {
   type        = string
   description = "The ID of the VPC network where the GKE cluster will be created"

variables.tf

@@ -122,6 +122,7 @@ variable "lb_app_rules" {
     src_ip_ranges  = list(string) # optional, only used if match_type is "src_ip_ranges"
     expr           = string       # optional, only used if match_type is "expr"
   }))
+  default = []
   description = "Extra rules to apply to the application load balancer for additional filtering"
 }
 
@@ -137,6 +138,12 @@ variable "deploy_neg_backend" {
   description = "Set this to true to connect the backend service to the NEG that the GKE cluster will create"
 }
 
+variable "deploy_lb" {
+  type        = bool
+  default     = true
+  description = "Allows a deploy with a not-yet-existing load balancer"
+}
+
 #  ╻ ╻┏━┓┏━╸
 #  ┃┏┛┣━┛┃
 #  ┗┛ ╹  ┗━╸