rtrentinavx

resource "aviatrix_azure_spoke_native_peering" "user-spoke-west-2" {
  count = var.region_active == "west" ? 1 : 0
  transit_gateway_name = module.user-west-2-transit.transit_gateway.gw_name
  spoke_account_name   = var.account
  spoke_region         = var.region-a
  spoke_vpc_id         = aviatrix_vpc.azure_vnet_user-spoke-west-2.vpc_id
}

rtrentinavx

module "vpn-spoke-west-2" {
  source                           = "terraform-aviatrix-modules/mc-spoke/aviatrix"
  version                          = "1.3.0"
  account                          = var.account
  cloud                            = var.cloud
  region                           = var.region-a
  cidr                             = cidrsubnet("${trimsuffix(var.cidr-region-a-1, "23")}16", 8, 2)
  inspection                       = true
  transit_gw                       = module.corp-west-2-transit.transit_gateway.gw_name
  ha_gw                            = true

rtrentinavx

resource "aviatrix_site2cloud" "site2cloud_connection-east" {
  depends_on = [
    aviatrix_gateway.aviatrix_gateway_standalone-east
  ]
  count = var.region_active == "east" ? 1 : 0 
  vpc_id                     = aviatrix_gateway.aviatrix_gateway_standalone-east.vpc_id
  connection_name            = "${aviatrix_gateway.aviatrix_gateway_standalone-east.id}-${var.region_active}-${replace("${var.remote_gateway_ip}", ".", "-")}"
  connection_type            = "mapped"
  remote_gateway_type        = "generic"
  tunnel_type                = "route"

rtrentinavx

module "transit-east" {
  source                 = "terraform-aviatrix-modules/mc-transit/aviatrix"
  version                = "v2.2.0"
  cloud                  = var.cloud
  cidr                   = var.cidr
  region                 = var.region
  account                = var.account
  enable_transit_firenet = true
  az_support             = true
}

rtrentinavx

terraform {
    required_providers {
        aws = {
            source = "hashicorp/aws"
            version = "~> 3.0"
        }
    }
}

provider "aws" {

rtrentinavx

gcloud beta container clusters create gke-us-east4-cluster-1 \
--zone "us-east4-a" \
--enable-private-nodes \
--enable-private-endpoint \
--master-ipv4-cidr "192.168.254.0/28" \
--enable-ip-alias \
--network  "projects/rtrentin-01/global/networks/gcp-spoke100-us-east4" \
--subnetwork "projects/rtrentin-01/regions/us-east4/subnetworks/gcp-spoke100-us-east4-nodes" \
--cluster-secondary-range-name "gcp-spoke100-us-east4-pod" \
--services-secondary-range-name "gcp-spoke100-us-east4-services" \

rtrentinavx

apiVersion: v1
kind: Service
metadata:
  name: nginx
spec:
  selector:
    app: nginx
  ports:
    - port: 80
      targetPort: 80

rtrentinavx

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
spec:
  selector:
    matchLabels:
      app: nginx
  replicas: 2
  template:

rtrentinavx

gcloud container clusters create gke-us-east4-cluster-1 
--region=us-east4 \
--enable-ip-alias \
--network=gcp-spoke100-us-east4 \
--subnetwork=gcp-spoke100-us-east4-nodes \
--cluster-secondary-range-name=gcp-spoke100-us-east4-pod \
--services-secondary-range-name=gcp-spoke100-us-east4-services \
--default-max-pods-per-node=10