GoogleCloudPlatform / pubsec-declarative-toolkit

The GCP PubSec Declarative Toolkit is a collection of declarative solutions to help you on your Journey to Google Cloud. Solutions are designed using Config Connector and deployed using Config Controller.
Apache License 2.0
30 stars 26 forks source link

Implement policy based routing for client projects - where next hop is routed through an internal LB and based on a packets destination address including client to client east-west traffic #854

Open fmichaelobrien opened 4 months ago

fmichaelobrien commented 4 months ago

see network architecture that allows for both shared VPC service projects and client specific VPCs.

check 1.6.x for inclusion of https://github.com/GoogleCloudPlatform/magic-modules/pull/9320 late october 2023 https://releases.hashicorp.com/terraform/

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/network_connectivity_policy_based_route

https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest/v1/projects.locations.global.policyBasedRoutes https://cloud.google.com/vpc/docs/use-policy-based-routes#api https://github.com/hashicorp/terraform-provider-google/issues/15414 https://github.com/GoogleCloudPlatform/magic-modules/pull/9320 https://github.com/terraform-google-modules/docs-examples/pull/579 https://cloud.google.com/vpc/docs/use-policy-based-routes#create-within-vpc

https://cloud.google.com/vpc/docs/policy-based-routes https://medium.com/google-cloud/why-policy-based-routing-is-a-game-changer-f4c6a7badccb https://codelabs.developers.google.com/codelabs/cloudnet-pbr#0

krm for config-controller - there is some discussion on missing krm wrapper around the PBR api - investigate

documentation https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/wiki/Architecture