create a new nodepool using c3 instances

kubernetes · Mar 5, 2024 · 77965af · 77965af
1 parent 94237cd
commit 77965af
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 3 deletions.
diff --git a/infra/gcp/terraform/k8s-infra-prow-build/main.tf b/infra/gcp/terraform/k8s-infra-prow-build/main.tf
@@ -100,3 +100,18 @@ module "prow_build_nodepool_n1_highmem_8_localssd" {
   service_account           = module.prow_build_cluster.cluster_node_sa.email
 }
 
+module "prow_build_nodepool_c3_standard_8_lssd" {
+  source          = "../modules/gke-nodepool"
+  project_name    = module.project.project_id
+  cluster_name    = module.prow_build_cluster.cluster.name
+  location        = module.prow_build_cluster.cluster.location
+  name            = "pool6"
+  initial_count   = 1
+  min_count       = 1
+  max_count       = 80
+  image_type      = "UBUNTU_CONTAINERD"
+  machine_type    = "c3-standard-8-lssd" // includes 2 Local SSDs
+  disk_size_gb    = 100
+  disk_type       = "pd-balanced"
+  service_account = module.prow_build_cluster.cluster_node_sa.email
+}
diff --git a/infra/gcp/terraform/k8s-infra-public-pii/main.tf b/infra/gcp/terraform/k8s-infra-public-pii/main.tf
@@ -183,5 +183,5 @@ resource "google_project_iam_member" "pii_access" {
   for_each = toset(["roles/viewer", "roles/bigquery.user"])
   project  = local.project_id
   role     = each.key
-  member   = "[email protected]"
+  member   = "group:[email protected]"
 }
diff --git a/infra/gcp/terraform/modules/gke-cluster/main.tf b/infra/gcp/terraform/modules/gke-cluster/main.tf
@@ -155,7 +155,7 @@ resource "google_container_cluster" "prod_cluster" {
 
   // Enable GKE Network Policy
   network_policy {
-    enabled  = true
+    enabled  = false
     provider = "CALICO"
   }
 
@@ -252,7 +252,7 @@ resource "google_container_cluster" "test_cluster" {
 
   // Enable GKE Network Policy
   network_policy {
-    enabled  = true
+    enabled  = false
     provider = "CALICO"
   }