23 lines
876 B
Terraform
23 lines
876 B
Terraform
|
# This enables NAT to external IP addresses so our GKE nodes do not need public IP addresses because this demo is going to spin up a lot of nodes.
|
||
|
|
|
||
|
|
resource "google_compute_router" "router" {
|
||
|
|
project = google_project.project.project_id
|
||
|
|
name = "snat-router"
|
||
|
|
network = google_compute_network.default.id
|
||
|
|
region = google_compute_subnetwork.default.region
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "google_compute_router_nat" "nat" {
|
||
|
|
project = google_project.project.project_id
|
||
|
|
name = "my-router-nat"
|
||
|
|
router = google_compute_router.router.name
|
||
|
|
region = google_compute_router.router.region
|
||
|
|
nat_ip_allocate_option = "AUTO_ONLY"
|
||
|
|
source_subnetwork_ip_ranges_to_nat = "ALL_SUBNETWORKS_ALL_IP_RANGES"
|
||
|
|
|
||
|
|
log_config {
|
||
|
|
enable = true
|
||
|
|
filter = "ERRORS_ONLY"
|
||
|
|
}
|
||
|
|
}
|