You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| ip_masq_link_local | Whether to masquerade traffic to the link-local prefix (169.254.0.0/16). | string |`false`| no |
98
96
| ip_masq_resync_interval | The interval at which the agent attempts to sync its ConfigMap file from the disk. | string |`60s`| no |
@@ -104,63 +102,44 @@ Then perform the following commands on the root folder:
104
102
| maintenance_start_time | Time window specified for daily maintenance operations in RFC3339 format | string |`05:00`| no |
105
103
| master_authorized_networks_config | The desired configuration options for master authorized networks. Omit the nested cidr_blocks attribute to disallow external access (except the cluster node IPs, which GKE automatically whitelists)<br><br> ### example format ### master_authorized_networks_config = [{ cidr_blocks = [{ cidr_block = "10.0.0.0/8" display_name = "example_network" }], }]| list |`<list>`| no |
106
104
| monitoring_service | The monitoring service that the cluster should write metrics to. Automatically send metrics from pods in the cluster to the Google Cloud Monitoring API. VM metrics will be collected by Google Compute Engine regardless of this setting Available options include monitoring.googleapis.com, monitoring.googleapis.com/kubernetes (beta) and none | string |`monitoring.googleapis.com`| no |
107
-
=======
108
-
| enable\_basic\_auth | Basic authentication allows a user to authenticate to the cluster with a username and password. To maximize the security of your cluster, disable this option. Basic authentication is not recommended because it provides no confidentiality protection for transmitted credentials. Default: true | string |`true`| no |
109
-
| horizontal\_pod\_autoscaling | Enable horizontal pod autoscaling addon | string |`false`| no |
| ip\_masq\_link\_local | Whether to masquerade traffic to the link-local prefix (169.254.0.0/16). | string |`false`| no |
112
-
| ip\_masq\_resync\_interval | The interval at which the agent attempts to sync its ConfigMap file from the disk. | string |`60s`| no |
113
-
| ip\_range\_pods | The secondary ip range to use for pods | string | - | yes |
114
-
| ip\_range\_services | The secondary ip range to use for pods | string | - | yes |
115
-
| issue\_client\_certificate | Issues a client certificate to authenticate to the cluster endpoint. To maximize the security of your cluster, leave this option disabled. Client certificates don't automatically rotate and aren't easily revocable. WARNING: changing this after cluster creation is destructive! Default: false | string |`false`| no |
| kubernetes\_version | The Kubernetes version of the masters. If set to 'latest' it will pull latest available version in the selected region. | string |`latest`| no |
118
-
| logging\_service | The logging service that the cluster should write logs to. Available options include logging.googleapis.com, logging.googleapis.com/kubernetes (beta), and none | string |`logging.googleapis.com`| no |
119
-
| maintenance\_start\_time | Time window specified for daily maintenance operations in RFC3339 format | string |`05:00`| no |
120
-
| master\_authorized\_networks\_config | The desired configuration options for master authorized networks. Omit the nested cidr_blocks attribute to disallow external access (except the cluster node IPs, which GKE automatically whitelists)<br><br> ### example format ### master_authorized_networks_config = [{ cidr_blocks = [{ cidr_block = "10.0.0.0/8" display_name = "example_network" }], }]| list |`<list>`| no |
121
-
| monitoring\_service | The monitoring service that the cluster should write metrics to. Automatically send metrics from pods in the cluster to the Google Cloud Monitoring API. VM metrics will be collected by Google Compute Engine regardless of this setting Available options include monitoring.googleapis.com, monitoring.googleapis.com/kubernetes (beta) and none | string |`monitoring.googleapis.com`| no |
122
-
>>>>>>> Adding variables to README
123
105
| name | The name of the cluster (required) | string | - | yes |
124
106
| network | The VPC network to host the cluster in (required) | string | - | yes |
| network\_project\_id | The project ID of the shared VPC's host (for shared vpc support) | string | `` | no |
127
-
| node\_pools | List of maps containing node pools | list |`<list>`| no |
128
-
| node\_pools\_labels | Map of maps containing node labels by node-pool name | map |`<map>`| no |
129
-
| node\_pools\_tags | Map of lists containing node network tags by node-pool name | map |`<map>`| no |
130
-
| node\_pools\_taints | Map of lists containing node taints by node-pool name | map |`<map>`| no |
131
-
| node\_version | The Kubernetes version of the node pools. Defaults kubernetes_version (master) variable and can be overridden for individual node pools by setting the `version` key on them. Must be empyty or set the same as master at cluster creation. | string | `` | no |
132
-
| non\_masquerade\_cidrs | List of strings in CIDR notation that specify the IP address ranges that do not use IP masquerading. | list |`<list>`| no |
133
-
| project\_id | The project ID to host the cluster in (required) | string | - | yes |
| network_project_id | The project ID of the shared VPC's host (for shared vpc support) | string | `` | no |
109
+
| remove_default_node_pool | Boolean value determining removal of default node pool | bool | false | no |
110
+
| node_pools | List of maps containing node pools | list |`<list>`| no |
111
+
| node_pools_labels | Map of maps containing node labels by node-pool name | map |`<map>`| no |
112
+
| node_pools_tags | Map of lists containing node network tags by node-pool name | map |`<map>`| no |
113
+
| node_pools_taints | Map of lists containing node taints by node-pool name | map |`<map>`| no |
114
+
| node_version | The Kubernetes version of the node pools. Defaults kubernetes_version (master) variable and can be overridden for individual node pools by setting the `version` key on them. Must be empyty or set the same as master at cluster creation. | string | `` | no |
115
+
| non_masquerade_cidrs | List of strings in CIDR notation that specify the IP address ranges that do not use IP masquerading. | list |`<list>`| no |
116
+
| project_id | The project ID to host the cluster in (required) | string | - | yes |
134
117
| region | The region to host the cluster in (required) | string | - | yes |
135
118
| regional | Whether is a regional cluster (zonal cluster if set false. WARNING: changing this after cluster creation is destructive!) | string |`true`| no |
136
-
<<<<<<< HEAD
137
119
| service_account | The service account to default running nodes as if not overridden in `node_pools`. Defaults to the compute engine default service account | string | `` | no |
138
120
| stub_domains | Map of stub domains and their resolvers to forward DNS queries for a certain domain to an external DNS server | map |`<map>`| no |
139
-
=======
140
-
| stub\_domains | Map of stub domains and their resolvers to forward DNS queries for a certain domain to an external DNS server | map |`<map>`| no |
141
-
>>>>>>> Adding variables to README
142
121
| subnetwork | The subnetwork to host the cluster in (required) | string | - | yes |
143
122
| zones | The zones to host the cluster in (optional if regional cluster / required if zonal) | list |`<list>`| no |
144
123
145
124
## Outputs
146
125
147
126
| Name | Description |
148
127
|------|-------------|
149
-
|ca\_certificate| Cluster ca certificate (base64 encoded) |
128
+
|ca_certificate| Cluster ca certificate (base64 encoded) |
150
129
| endpoint | Cluster endpoint |
151
-
|horizontal\_pod\_autoscaling\_enabled| Whether horizontal pod autoscaling enabled |
|node_pools_versions| List of node pools versions |
164
143
| region | Cluster region |
165
144
| type | Cluster type (regional / zonal) |
166
145
| zones | List of zones in which the cluster resides |
@@ -234,10 +213,9 @@ make generate_docs
234
213
235
214
Integration tests are run though [test-kitchen](https://github.com/test-kitchen/test-kitchen), [kitchen-terraform](https://github.com/newcontext-oss/kitchen-terraform), and [InSpec](https://github.com/inspec/inspec).
236
215
237
-
Seven test-kitchen instances are defined:
216
+
Six test-kitchen instances are defined:
238
217
239
218
-`deploy_service`
240
-
-`disable_client_cert`
241
219
-`node_pool`
242
220
-`shared_vpc`
243
221
-`simple_regional`
@@ -253,8 +231,8 @@ The test-kitchen instances in `test/fixtures/` wrap identically-named examples i
253
231
3. Build the Docker containers for testing:
254
232
255
233
```
256
-
CREDENTIALS_FILE="credentials.json" make docker_build_terraform
257
-
CREDENTIALS_FILE="credentials.json" make docker_build_kitchen_terraform
234
+
make docker_build_terraform
235
+
make docker_build_kitchen_terraform
258
236
```
259
237
4. Run the testing container in interactive mode:
260
238
@@ -270,7 +248,7 @@ The test-kitchen instances in `test/fixtures/` wrap identically-named examples i
270
248
3.`kitchen verify` tests the created infrastructure. Run `kitchen verify <INSTANCE_NAME>` to run a specific test case.
271
249
4.`kitchen destroy` tears down the underlying resources created by `kitchen converge`. Run `kitchen destroy <INSTANCE_NAME>` to tear down resources for a specific test case.
272
250
273
-
Alternatively, you can simply run `CREDENTIALS_FILE="credentials.json" make test_integration_docker` to run all the test steps non-interactively.
251
+
Alternatively, you can simply run `make test_integration_docker` to run all the test steps non-interactively.
274
252
275
253
#### Test configuration
276
254
@@ -325,4 +303,4 @@ are as follows:
325
303
is a compiled language so there is no standard linter.
326
304
* Terraform - terraform has a built-in linter in the 'terraform validate'
327
305
command.
328
-
* Dockerfiles - hadolint. Can be found in homebrew
306
+
* Dockerfiles - hadolint. Can be found in homebrew
0 commit comments