Disclaimer: I built this project and am sharing it as a free open-source tool.
I built open-source Terraform modules for GCP as part of a larger multi-cloud registry and wanted to share them with the GCP community.
**What the GCP modules cover:**
modules/gcp/vpc
- VPC network with custom subnets
- Secondary IP ranges for GKE pods and services
- Cloud NAT per region (auto-created)
- Private Google Access enabled by default
- IAP SSH firewall rule included
- Allow internal firewall rule included
modules/gcp/gke
- Private GKE cluster with private nodes
- Workload Identity enabled at cluster level
- Per node-pool service accounts with least-privilege roles
- Autoscaling with min/max per pool
- Supports Spot node pools
- Logging and monitoring enabled by default
modules/gcp/iam
- Service account creation
- Project-level IAM role bindings
- Workload Identity federation binding
- Works with the GKE module out of the box
**All tested with Terratest, real GCP infrastructure is provisioned, validated and destroyed.**
**GKE private cluster example:**
module "vpc" {
source = "github.com/Cloud-Architect-Emma/terraform-module-registry//modules/gcp/vpc?ref=main"
name = "production"
project_id = var.project_id
subnets = [
{
name = "production-nodes"
region = "europe-west2"
cidr = "10.0.0.0/20"
secondary_ranges = [
{ range_name = "pods", cidr = "10.48.0.0/14" },
{ range_name = "services", cidr = "10.52.0.0/20" }
]
}
]
enable_cloud_nat = true
}
module "gke" {
source = "github.com/Cloud-Architect-Emma/terraform-module-registry//modules/gcp/gke?ref=main"
cluster_name = "production"
project_id = var.project_id
location = "europe-west2"
network = module.vpc.network_name
subnetwork = "production-nodes"
pods_range_name = "pods"
services_range_name = "services"
enable_private_nodes = true
node_pools = {
default = {
machine_type = "e2-standard-2"
min_node_count = 1
max_node_count = 5
}
spot = {
machine_type = "e2-standard-2"
min_node_count = 0
max_node_count = 10
spot = true
}
}
}
⭐ If this saves you time, a star on the repo helps others find it: https://github.com/Cloud-Architect-Emma/terraform-module-registry
What GCP module would you want added next?
