copy of gke standard cluster

SinaChavoshi · SinaChavoshi · commit 71b263826526 · 2025-09-15T18:20:01.000Z
diff --git a/examples/gke_inference_gateway_standard_cluster/README.md b/examples/gke_inference_gateway_standard_cluster/README.md
@@ -0,0 +1,41 @@
+# GKE Standard Cluster and Node Pool
+
+This example creates a GKE private cluster and Node Pool with beta features.
+For a full example see [simple_regional_private_beta](../simple_regional_private_beta/README.md) example.
+
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| cluster\_name\_suffix | A suffix to append to the default cluster name | `string` | `""` | no |
+| dns\_cache | Boolean to enable / disable NodeLocal DNSCache | `bool` | `false` | no |
+| gce\_pd\_csi\_driver | (Beta) Whether this cluster should enable the Google Compute Engine Persistent Disk Container Storage Interface (CSI) Driver. | `bool` | `false` | no |
+| ip\_range\_pods | The secondary ip range to use for pods | `any` | n/a | yes |
+| ip\_range\_services | The secondary ip range to use for services | `any` | n/a | yes |
+| network | The VPC network to host the cluster in | `any` | n/a | yes |
+| project\_id | The project ID to host the cluster in | `any` | n/a | yes |
+| region | The region to host the cluster in | `any` | n/a | yes |
+| service\_account | Service account to associate to the nodes in the cluster | `any` | n/a | yes |
+| subnetwork | The subnetwork to host the cluster in | `any` | n/a | yes |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| addons\_config | The configuration for addons supported by GKE Autopilot. |
+| ca\_certificate | The cluster ca certificate (base64 encoded) |
+| cluster\_name | Cluster name |
+| endpoint | The cluster endpoint |
+| location | Cluster location |
+| master\_version | The master Kubernetes version |
+| node\_locations | Cluster node locations |
+| project\_id | The project ID the cluster is in |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+
+To provision this example, run the following from within this directory:
+- `terraform init` to get the plugins
+- `terraform plan` to see the infrastructure plan
+- `terraform apply` to apply the infrastructure build
+- `terraform destroy` to destroy the built infrastructure
diff --git a/examples/gke_inference_gateway_standard_cluster/main.tf b/examples/gke_inference_gateway_standard_cluster/main.tf
@@ -0,0 +1,103 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  cluster_type          = "gke-standard"
+  default_workload_pool = "${var.project_id}.svc.id.goog"
+}
+
+data "google_client_config" "default" {}
+
+provider "kubernetes" {
+  host                   = "https://${module.gke.endpoint}"
+  token                  = data.google_client_config.default.access_token
+  cluster_ca_certificate = base64decode(module.gke.ca_certificate)
+}
+
+data "google_compute_subnetwork" "subnetwork" {
+  name    = var.subnetwork
+  project = var.project_id
+  region  = var.region
+}
+
+module "gke" {
+  source  = "terraform-google-modules/kubernetes-engine/google//modules/gke-standard-cluster"
+  version = "~> 38.0"
+
+  project_id    = var.project_id
+  name       = "${local.cluster_type}-cluster${var.cluster_name_suffix}"
+  location   = var.region
+  network    = var.network
+  subnetwork = var.subnetwork
+
+  ip_allocation_policy = {
+    cluster_secondary_range_name  = var.ip_range_pods
+    services_secondary_range_name = var.ip_range_services
+  }
+
+  private_cluster_config = {
+    enable_private_endpoint = true
+    enable_private_nodes    = true
+    master_ipv4_cidr_block  = "172.16.0.0/28"
+    master_global_access_config = {
+      enabled = true
+    }
+  }
+
+  deletion_protection      = false
+  remove_default_node_pool = true
+  initial_node_count       = 1
+
+  workload_identity_config = {
+    workload_pool = local.default_workload_pool
+  }
+
+  master_authorized_networks_config = {
+    cidr_blocks = [{
+      cidr_block   = data.google_compute_subnetwork.subnetwork.ip_cidr_range
+      display_name = "VPC"
+    }]
+  }
+
+  addons_config = {
+    dns_cache_config = {
+      enabled = var.dns_cache
+    }
+
+    gce_persistent_disk_csi_driver_config = {
+      enabled = var.gce_pd_csi_driver
+    }
+  }
+}
+
+module "node_pool" {
+  source  = "terraform-google-modules/kubernetes-engine/google//modules/gke-node-pool"
+  version = "~> 38.0"
+
+  project_id  = var.project_id
+  location = var.region
+  cluster  = module.gke.cluster_name
+  node_config = {
+    disk_size_gb    = 100
+    disk_type       = "pd-standard"
+    image_type      = "COS_CONTAINERD"
+    machine_type    = "e2-medium"
+    service_account = var.service_account
+    workload_metadata_config = {
+      mode = "GKE_METADATA"
+    }
+  }
+}
diff --git a/examples/gke_inference_gateway_standard_cluster/outputs.tf b/examples/gke_inference_gateway_standard_cluster/outputs.tf
@@ -0,0 +1,57 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "endpoint" {
+  sensitive   = true
+  description = "The cluster endpoint"
+  value       = module.gke.endpoint
+}
+
+output "ca_certificate" {
+  sensitive   = true
+  description = "The cluster ca certificate (base64 encoded)"
+  value       = module.gke.ca_certificate
+}
+
+output "project_id" {
+  description = "The project ID the cluster is in"
+  value       = var.project_id
+}
+
+output "location" {
+  description = "Cluster location"
+  value       = module.gke.location
+}
+
+output "node_locations" {
+  description = "Cluster node locations"
+  value       = module.gke.node_locations
+}
+
+output "addons_config" {
+  description = "The configuration for addons supported by GKE Autopilot."
+  value       = module.gke.addons_config
+}
+
+output "cluster_name" {
+  description = "Cluster name"
+  value       = module.gke.cluster_name
+}
+
+output "master_version" {
+  description = "The master Kubernetes version"
+  value       = module.gke.master_version
+}
diff --git a/examples/gke_inference_gateway_standard_cluster/variables.tf b/examples/gke_inference_gateway_standard_cluster/variables.tf
@@ -0,0 +1,59 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "project_id" {
+  description = "The project ID to host the cluster in"
+}
+
+variable "cluster_name_suffix" {
+  description = "A suffix to append to the default cluster name"
+  default     = ""
+}
+
+variable "region" {
+  description = "The region to host the cluster in"
+}
+
+variable "network" {
+  description = "The VPC network to host the cluster in"
+}
+
+variable "subnetwork" {
+  description = "The subnetwork to host the cluster in"
+}
+
+variable "ip_range_pods" {
+  description = "The secondary ip range to use for pods"
+}
+
+variable "ip_range_services" {
+  description = "The secondary ip range to use for services"
+}
+
+variable "service_account" {
+  description = "Service account to associate to the nodes in the cluster"
+}
+
+variable "dns_cache" {
+  description = "Boolean to enable / disable NodeLocal DNSCache "
+  default     = false
+}
+
+variable "gce_pd_csi_driver" {
+  type        = bool
+  description = "(Beta) Whether this cluster should enable the Google Compute Engine Persistent Disk Container Storage Interface (CSI) Driver."
+  default     = false
+}
diff --git a/examples/gke_inference_gateway_standard_cluster/versions.tf b/examples/gke_inference_gateway_standard_cluster/versions.tf
@@ -0,0 +1,30 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 1.3"
+  required_providers {
+    google = {
+      source = "hashicorp/google"
+    }
+    google-beta = {
+      source = "hashicorp/google-beta"
+    }
+    kubernetes = {
+      source = "hashicorp/kubernetes"
+    }
+  }
+}
