Setup Google Cloud Network Resources

Virtual Private Network(VPC)/Subnets Information

Caution

Providing Command Line here are provided as a baseline provisioning, may not comply to any of Landing Zone concepts or Hyperscaler Cloud best practices.

So, use only for reference or Proof-of-Concept ONLY.

You will be provision Google Cloud Network with a simple network that specific for running only Kubernetes Cluster

• A VPC named opstella-platform
  • Subnet Mode in Custom Mode
  • Default MTU 1460
• A Subnet named gke-nodes
  • CIDR IP: 172.16.0.0/26
  • A Secondary IP Range named gke-pod-pool-1 - CIDR IP: 10.250.0.0/16
  • A Secondary IP Range named gke-pod-pool-2 - CIDR IP: 10.251.0.0/16
  • A Secondary IP Range named gke-pod-pool-3 - CIDR IP: 10.252.0.0/16
  • A Secondary IP Range named gke-pod-pool-4 - CIDR IP: 10.253.0.0/16

Create Virtual Private Network(VPC)/Subnets Resources

You can use GCP Cloud Management Console (Web Console) to provision or use the following CLI Command to create resources on Bastion Host. (Recommended)

# Create VPC
gcloud compute networks create opstella-platform --subnet-mode=custom

## Output

Created [https://www.googleapis.com/compute/v1/projects/foobar-opstella/global/networks/opstella-platform].
NAME                SUBNET_MODE  BGP_ROUTING_MODE  IPV4_RANGE  GATEWAY_IPV4
opstella-platform   CUSTOM       REGIONAL

Instances on this network will not be reachable until firewall rules
are created. As an example, you can allow all internal traffic between
instances as well as SSH, RDP, and ICMP by running:

$ gcloud compute firewall-rules create <FIREWALL_NAME> --network opstella-platform --allow tcp,udp,icmp --source-ranges <IP_RANGE>
$ gcloud compute firewall-rules create <FIREWALL_NAME> --network opstella-platform --allow tcp:22,tcp:3389,icmp

# Create Subnet in the VPC
gcloud compute networks subnets create gke-nodes \
    --network=opstella-platform \
    --range=172.16.0.0/26 \
    --stack-type=IPV4_ONLY \
    --secondary-range=gke-pod-pool-1=10.250.0.0/16 \
    --secondary-range=gke-pod-pool-2=10.251.0.0/16 \
    --secondary-range=gke-pod-pool-3=10.252.0.0/16 \
    --secondary-range=gke-pod-pool-4=10.253.0.0/16

## Output

Created [https://www.googleapis.com/compute/v1/projects/foobar-opstella/regions/asia-southeast1/subnetworks/opstella-gke-nodes].
NAME           REGION           NETWORK            RANGE          STACK_TYPE  IPV6_ACCESS_TYPE  INTERNAL_IPV6_PREFIX  EXTERNAL_IPV6_PREFIX
gke-nodes      asia-southeast1  opstella-platform  172.16.0.0/26  IPV4_ONLY