Add networking for Service k8s cluster

This also renames gce_net to gce_net_workers to show the distinction
with gce_net_services.

Author: Duologic

gce-production-net-1/main.tf

@@ -65,7 +65,7 @@ provider "aws" {}
 provider "heroku" {}
 
 module "gce_net" {
-  source = "../modules/gce_net"
+  source = "../modules/gce_net_workers"
 
   bastion_config        = "${file("config/bastion.env")}"
   bastion_image         = "${var.gce_bastion_image}"

gce-production-net-2/main.tf

@@ -65,7 +65,7 @@ provider "aws" {}
 provider "heroku" {}
 
 module "gce_net" {
-  source = "../modules/gce_net"
+  source = "../modules/gce_net_workers"
 
   bastion_config        = "${file("config/bastion.env")}"
   bastion_image         = "${var.gce_bastion_image}"

gce-production-net-3/main.tf

@@ -65,7 +65,7 @@ provider "aws" {}
 provider "heroku" {}
 
 module "gce_net" {
-  source = "../modules/gce_net"
+  source = "../modules/gce_net_workers"
 
   bastion_config        = "${file("config/bastion.env")}"
   bastion_image         = "${var.gce_bastion_image}"

gce-staging-net-1/main.tf

@@ -66,7 +66,7 @@ provider "aws" {}
 provider "heroku" {}
 
 module "gce_net" {
-  source = "../modules/gce_net"
+  source = "../modules/gce_net_workers"
 
   bastion_config        = "${file("config/bastion.env")}"
   bastion_image         = "${var.latest_gce_bastion_image}"

modules/gce_net_services/nat.tf

@@ -0,0 +1,34 @@
+resource "google_compute_address" "services_nat" {
+  count   = "${var.nat_ip_count}"
+  name    = "services-nat-ip-${count.index}"
+  project = "${var.project}"
+}
+
+resource "google_compute_router" "services_nat" {
+  name    = "router"
+  project = "${var.project}"
+  network = "${google_compute_network.main.self_link}"
+
+  bgp {
+    asn = 64514
+  }
+}
+
+resource "google_compute_router_nat" "services_nat" {
+  name    = "services-nat"
+  project = "${var.project}"
+
+  nat_ip_allocate_option             = "MANUAL_ONLY"
+  nat_ips                            = ["${google_compute_address.services_nat.*.self_link}"]
+  router                             = "${google_compute_router.services_nat.name}"
+  source_subnetwork_ip_ranges_to_nat = "LIST_OF_SUBNETWORKS"
+
+  subnetwork {
+    name                    = "${google_compute_subnetwork.services.self_link}"
+    source_ip_ranges_to_nat = ["ALL_IP_RANGES"]
+  }
+
+  log_config {
+    enable = false
+  }
+}

modules/gce_net_services/networks.tf

@@ -0,0 +1,21 @@
+resource "google_compute_network" "main" {
+  name                    = "main"
+  project                 = "${var.project}"
+  auto_create_subnetworks = "false"
+}
+
+resource "google_compute_subnetwork" "services" {
+  name             = "services"
+  project          = "${var.project}"
+  ip_cidr_range    = "${var.services_subnet_cidr_range}"
+  network          = "${google_compute_network.main.self_link}"
+  enable_flow_logs = "true"
+}
+
+output "main_network_name" {
+  value = "${google_compute_network.main.name}"
+}
+
+output "services_network_name" {
+  value = "${google_compute_subnetwork.services.name}"
+}

modules/gce_net_services/variables.tf

@@ -0,0 +1,9 @@
+variable "project" {}
+
+variable "nat_ip_count" {
+  default = 1
+}
+
+variable "services_subnet_cidr_range" {
+  default = "10.80.0.0/16"
+}

modules/gce_net/bastion-cloud-config.yml.tpl renamed to modules/gce_net_workers/bastion-cloud-config.yml.tpl

@@ -5,6 +5,11 @@ module "project" {
   project_id   = "${var.project_id}"
 }
 
-# module "networking" {}
+module "networking" {
+  source = "../modules/gce_net_services"
+
+  project = "${module.project.project_id}"
+}
+
 # module "kubernetes_cluster" {}