How to Create GKE Cluster Using TERRAFORM from Scratch? (GCP Shared VPC | Terraform GCP Kubernetes)
Source: YouTube · Anton Putra · published Jun 7, 2021 · 26:30
This video demonstrates how to create a GKE cluster using Terraform with shared VPC for network security 0:00-0:23.
Key Takeaways:
• The setup involves creating two projects: a host project containing the VPC and a service project for the GKE cluster 0:06-0:15
• Local variables are configured for project names, org ID, and secondary IP ranges for pods and services 3:00-4:40
• Shared VPC configuration requires enabling the host project and attaching the service project with proper IAM permissions 8:40-12:05
• The GKE cluster is created in the service project using the shared VPC's private subnet with NAT gateway for internet access 14:00-15:30
• Firewall rules are created in the host project to allow the load balancer to access the application 22:30-25:15
This approach centralizes network management while following least privilege security practices 0:16-0:23.
Sources:
- 0:00-0:23 Introduction to shared VPC and two-project architecture
- 3:00-4:40 Setting up local variables for Terraform configuration
- 8:40-12:05 Shared VPC configuration and IAM permissions
- 14:00-15:30 Creating GKE cluster in service project
- 22:30-25:15 Creating firewall rules for load balancer access
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
in this video we're going to create a gk cluster and use shared vpc first of all we're going to create our two projects host aging and kit staging then we will create a shared vpc in the host project and share a subnet with our gate staging project that will be used to deploy the kubernetes cluster the following approach is used to implement security-based practices of least privilege for network administration auditing and access control all right first of all let's go ahead and create the folder terraform where we're gonna keep all our trafform files and the first file will be provider.cf and here we're going to define first of all the provider itself and we're going to define the region as well so i'm going to be using the us west 2 to deploy our projects and kubernetes also we're going…