Skip to content
This repository has been archived by the owner on Apr 7, 2020. It is now read-only.

Remove support for public IPs in GCP #559

Merged
merged 1 commit into from
Jan 17, 2020

Conversation

zanetworker
Copy link
Contributor

@zanetworker zanetworker commented Jan 17, 2020

What this PR does / why we need it:
This PR completely removes support for public IPs in GCP. All egress traffic should be routed via CloudNAT.

Which issue(s) this PR fixes:
Fixes #408

Release note:

Support for public IPs is now completely removed and new machines will get no public IPs.
It is now mandatory to specify a CloudRouter configuration for GCP shoots (i.e., name) if a VPC is re-used. The Gardener landscape operator should ensure that this is done for all GCP shoots before updating to this version.

@zanetworker zanetworker requested a review from a team as a code owner January 17, 2020 07:52
@gardener-robot-ci-3 gardener-robot-ci-3 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Jan 17, 2020
@gardener-robot-ci-2 gardener-robot-ci-2 added needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Jan 17, 2020
@rfranzke rfranzke merged commit 38ef61c into gardener-attic:master Jan 17, 2020
rfranzke added a commit to gardener/gardener-extension-provider-gcp that referenced this pull request Jan 31, 2020
``` noteworthy developer github.com/gardener/terraformer #33 @DockToFuture
The Google provider plugins have been upgraded to `v3.4.0`.
```

``` improvement operator
added integration tests for health checks for all extensions (originally contributed by @danielfoehrKn via [gardener-attic/gardener-extensions#563](https://github.com/gardener/gardener-extensions#563)).
```

``` noteworthy user
Support for public IPs is now completely removed and new machines will get no public IPs (originally contributed by @zanetworker via [gardener-attic/gardener-extensions#559](https://github.com/gardener/gardener-extensions#559)).
```

``` action user
It is now mandatory to specify a CloudRouter configuration for GCP shoots (i.e., name) if a VPC is re-used. The Gardener landscape operator should ensure that this is done for all GCP shoots before updating to this version (originally contributed by @zanetworker via [gardener-attic/gardener-extensions#559](https://github.com/gardener/gardener-extensions#559)).
```

``` improvement operator
It is now possible to enable VPC Flow Logs on GCP by specifying `spec.provider.infrastructureConfig.networks.flowLogs` section in the `shoot.yaml` file. If the section is not provided then the VPC Flow Logs are disabled (originally contributed by @DockToFuture via [gardener-attic/gardener-extensions#535](https://github.com/gardener/gardener-extensions#535)).
```
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove external IPs from GCP worker nodes
4 participants