zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloud-foundation-fabric/blueprints/networking/private-cloud-function-from...
History
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875) 
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
 		2022-10-12 12:59:36 +02:00
..
assets Rename examples folder to blueprints 2022-09-09 16:38:43 +02:00
README.md Rename examples folder to blueprints 2022-09-09 16:38:43 +02:00
diagram.png Rename examples folder to blueprints 2022-09-09 16:38:43 +02:00
main.tf Refactor compute-vm for Terraform 1.3 (#860) 2022-10-07 10:53:53 +02:00
outputs.tf Rename examples folder to blueprints 2022-09-09 16:38:43 +02:00
variables.tf Rename examples folder to blueprints 2022-09-09 16:38:43 +02:00
versions.tf Refactor GKE nodepool and blueprints (#875) 2022-10-12 12:59:36 +02:00

README.md

Calling a private Cloud Function from On-premises

This example shows how to invoke a private Google Cloud Function from the on-prem environment via a Private Service Connect endpoint.

According to the documentation, only requests from VPC networks in the same project or VPC Service Controls perimeter are allowed to call a private Cloud Function. That's the reason why a Private Service Connect endpoint is needed in this architecture.

The Terraform script in this folder will create two projects connected via VPN: one to simulate the on-prem environment and another containing the Cloud Function and the Private Service Connect endpoint.

The "on-prem" project contains a small VM that can be used to test the accessibility to the private Cloud Function:

curl https://YOUR_REGION-YOUR_PROJECT_ID.cloudfunctions.net/YOUR_FUNCTION_NAME

Cloud Function via Private Service Connect

Variables

name description type required default
project_id Project id. string ✓
ip_ranges IP ranges used for the VPCs. object({…}) {…}
name Name used for new resources. string "cf-via-psc"
project_create If non null, creates project instead of using an existing one. object({…}) null
psc_endpoint IP used for the Private Service Connect endpoint, it must not overlap with the hub_ip_range. string "172.16.32.1"
region Region where the resources will be created. string "europe-west1"

Outputs

name description sensitive
function_url URL of the Cloud Function.