solutions/project/project-experimentation/network/nat.yaml (61 lines of code) (raw):

# Copyright 2021 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. ######### # Cloud NAT northamerica-northeast1 apiVersion: compute.cnrm.cloud.google.com/v1beta1 kind: ComputeRouterNAT metadata: name: project-id-nane1-nat # kpt-set: ${project-id}-nane1-nat namespace: networking annotations: cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id} config.kubernetes.io/depends-on: compute.cnrm.cloud.google.com/namespaces/networking/ComputeRouter/project-id-nane1-router # kpt-set: compute.cnrm.cloud.google.com/namespaces/networking/ComputeRouter/${project-id}-nane1-router spec: resourceID: nane1-nat natIpAllocateOption: AUTO_ONLY region: northamerica-northeast1 routerRef: name: project-id-nane1-router # kpt-set: ${project-id}-nane1-router sourceSubnetworkIpRangesToNat: ALL_SUBNETWORKS_ALL_IP_RANGES --- # Cloud Router northamerica-northeast1 apiVersion: compute.cnrm.cloud.google.com/v1beta1 kind: ComputeRouter metadata: name: project-id-nane1-router # kpt-set: ${project-id}-nane1-router namespace: networking annotations: cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id} config.kubernetes.io/depends-on: compute.cnrm.cloud.google.com/namespaces/networking/ComputeNetwork/project-id-global-vpc1-vpc # kpt-set: compute.cnrm.cloud.google.com/namespaces/networking/ComputeNetwork/${project-id}-global-vpc1-vpc spec: resourceID: nane1-router description: northamerica-northeast1 router networkRef: name: project-id-global-vpc1-vpc # kpt-set: ${project-id}-global-vpc1-vpc region: northamerica-northeast1 --- # Cloud NAT northamerica-northeast2 apiVersion: compute.cnrm.cloud.google.com/v1beta1 kind: ComputeRouterNAT metadata: name: project-id-nane2-nat # kpt-set: ${project-id}-nane2-nat namespace: networking annotations: cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id} config.kubernetes.io/depends-on: compute.cnrm.cloud.google.com/namespaces/networking/ComputeRouter/project-id-nane2-router # kpt-set: compute.cnrm.cloud.google.com/namespaces/networking/ComputeRouter/${project-id}-nane2-router spec: resourceID: nane2-nat natIpAllocateOption: AUTO_ONLY region: northamerica-northeast2 routerRef: name: project-id-nane2-router # kpt-set: ${project-id}-nane2-router sourceSubnetworkIpRangesToNat: ALL_SUBNETWORKS_ALL_IP_RANGES --- # Cloud Router northamerica-northeast2 apiVersion: compute.cnrm.cloud.google.com/v1beta1 kind: ComputeRouter metadata: name: project-id-nane2-router # kpt-set: ${project-id}-nane2-router namespace: networking annotations: cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id} config.kubernetes.io/depends-on: compute.cnrm.cloud.google.com/namespaces/networking/ComputeNetwork/project-id-global-vpc1-vpc # kpt-set: compute.cnrm.cloud.google.com/namespaces/networking/ComputeNetwork/${project-id}-global-vpc1-vpc spec: resourceID: nane2-router description: northamerica-northeast2 router networkRef: name: project-id-global-vpc1-vpc # kpt-set: ${project-id}-global-vpc1-vpc region: northamerica-northeast2