WIP

pydevops · Dec 7, 2021 · ebd540c · ebd540c
1 parent 5b4522e
commit ebd540c
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 4 deletions.
diff --git a/.gitignore b/.gitignore
@@ -122,3 +122,7 @@ dmypy.json
 
 # Pyre type checker
 .pyre/
+
+# kubeconfig
+kubeconfig
+env.sh
diff --git a/gke/private/create-cluster.sh b/gke/private/create-cluster.sh
@@ -21,9 +21,10 @@ gcloud beta container clusters create $CLUSTER_NAME \
     --machine-type $MACHINE_TYPE \
     --enable-ip-alias  \
     --enable-master-authorized-networks \
-    --master-authorized-networks "$MAN_CIDR"
-   # --enable-private-nodes
-
+    --master-authorized-networks "$MAN_CIDR" \
+    --enable-private-nodes \
+    --master-ipv4-cidr "$MASTER_CIDR"
+
 export KUBECONFIG=$PWD/kubeconfig
 gcloud container clusters get-credentials $CLUSTER_NAME --zone $GCP_ZONE 
 

diff --git a/gke/private/env.sh b/gke/private/env.sh
@@ -11,7 +11,8 @@ export PROJECT_NUMBER=$(gcloud projects describe $PROJECT_ID --format="value(pro
 ###########################################
 
 export IDNS=${PROJECT_ID}.svc.id.goog # workflow identity domain
-export MAN_CIDR=135.0.150.138/32
+export MAN_CIDR="135.0.150.138/32"
+export MASTER_CIDR="172.16.0.0/28"
 
 export GCP_REGION="us-central1" # CHANGEME (OPT)
 export GCP_ZONE="us-central1-a" # CHANGEME (OPT)