Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
Support user tags, a different project for the network (shared VPC), and removing external IPs #156
This may be niche, but was necessary for our setup. We're spinning up VMs in a shared VPC (https://cloud.google.com/vpc/docs/shared-vpc), so we needed to specify a subnetwork from a different project from the created compute resources.
We also want to tag provisioned instances with labels, for automatic application of firewall rules (mostly to expose UIs).
Disabling external IPs is good security practice. This will initially break director spin-up since it installs centos packages, but is fixed by setting up Cloud NAT over the subnet to enable egress.
This is working for us, but I haven't aggressively tested it with different combinations of defaults/custom values.