CadolesKube/typhoon
7
0
Fork 0
mirror of https://github.com/puppetmaster/typhoon.git synced 2025-04-13 21:51:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

Generate Azure Virtual Network IPv6 ULA space at random

Browse Source 
* Private IPv6 address space should be assigned randomly within
an organization per https://datatracker.ietf.org/doc/html/rfc4193
This commit is contained in:
Dalton Hubble 2024-07-14 13:48:55 -07:00
parent be0e516974
commit 672bbad10b
No known key found for this signature in database
GPG Key ID: BD34C2E3EF32B7A0
4 changed files with 40 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
azure/fedora-coreos/kubernetes/network.tf
View File

@ -1,14 +1,27 @@
# Choose an IPv6 ULA subnet at random
# https://datatracker.ietf.org/doc/html/rfc4193
resource "random_id" "ula-netnum" {
byte_length = 5 # 40 bits
}
locals { locals {
# fd00::/8 -> shift 40 -> 2^40 possible /48 subnets
ula-range = cidrsubnet("fd00::/8", 40, random_id.ula-netnum.dec)
network_cidr = {
ipv4 = var.network_cidr.ipv4
ipv6 = length(var.network_cidr.ipv6) > 0 ? var.network_cidr.ipv6 : [local.ula-range]
}
# Subdivide the virtual network into subnets # Subdivide the virtual network into subnets
# - controllers use netnum 0 # - controllers use netnum 0
# - workers use netnum 1 # - workers use netnum 1
controller_subnets = { controller_subnets = {
ipv4 = [for i, cidr in var.network_cidr.ipv4 : cidrsubnet(cidr, 1, 0)] ipv4 = [for i, cidr in local.network_cidr.ipv4 : cidrsubnet(cidr, 1, 0)]
ipv6 = [for i, cidr in var.network_cidr.ipv6 : cidrsubnet(cidr, 16, 0)] ipv6 = [for i, cidr in local.network_cidr.ipv6 : cidrsubnet(cidr, 16, 0)]
} }
worker_subnets = { worker_subnets = {
ipv4 = [for i, cidr in var.network_cidr.ipv4 : cidrsubnet(cidr, 1, 1)] ipv4 = [for i, cidr in local.network_cidr.ipv4 : cidrsubnet(cidr, 1, 1)]
ipv6 = [for i, cidr in var.network_cidr.ipv6 : cidrsubnet(cidr, 16, 1)] ipv6 = [for i, cidr in local.network_cidr.ipv6 : cidrsubnet(cidr, 16, 1)]
} }
cluster_subnets = { cluster_subnets = {
ipv4 = concat(local.controller_subnets.ipv4, local.worker_subnets.ipv4) ipv4 = concat(local.controller_subnets.ipv4, local.worker_subnets.ipv4)
@ -27,10 +40,9 @@ resource "azurerm_virtual_network" "network" {
resource_group_name = azurerm_resource_group.cluster.name resource_group_name = azurerm_resource_group.cluster.name
location = azurerm_resource_group.cluster.location location = azurerm_resource_group.cluster.location
address_space = concat( address_space = concat(
var.network_cidr.ipv4, local.network_cidr.ipv4,
var.network_cidr.ipv6 local.network_cidr.ipv6
) )
} }
# Subnets - separate subnets for controllers and workers because Azure # Subnets - separate subnets for controllers and workers because Azure

2
azure/fedora-coreos/kubernetes/variables.tf
View File

@ -122,7 +122,7 @@ variable "networking" {
variable "network_cidr" { variable "network_cidr" {
type = object({ type = object({
ipv4 = list(string) ipv4 = list(string)
ipv6 = optional(list(string), ["fd9a:0d2f:b7dc::/48"]) ipv6 = optional(list(string), [])
}) })
description = "Virtual network CIDR ranges" description = "Virtual network CIDR ranges"
default = { default = {

25
azure/flatcar-linux/kubernetes/network.tf
View File

@ -1,14 +1,27 @@
# Choose an IPv6 ULA subnet at random
# https://datatracker.ietf.org/doc/html/rfc4193
resource "random_id" "ula-netnum" {
byte_length = 5 # 40 bits
}
locals { locals {
# fd00::/8 -> shift 40 -> 2^40 possible /48 subnets
ula-range = cidrsubnet("fd00::/8", 40, random_id.ula-netnum.dec)
network_cidr = {
ipv4 = var.network_cidr.ipv4
ipv6 = length(var.network_cidr.ipv6) > 0 ? var.network_cidr.ipv6 : [local.ula-range]
}
# Subdivide the virtual network into subnets # Subdivide the virtual network into subnets
# - controllers use netnum 0 # - controllers use netnum 0
# - workers use netnum 1 # - workers use netnum 1
controller_subnets = { controller_subnets = {
ipv4 = [for i, cidr in var.network_cidr.ipv4 : cidrsubnet(cidr, 1, 0)] ipv4 = [for i, cidr in local.network_cidr.ipv4 : cidrsubnet(cidr, 1, 0)]
ipv6 = [for i, cidr in var.network_cidr.ipv6 : cidrsubnet(cidr, 16, 0)] ipv6 = [for i, cidr in local.network_cidr.ipv6 : cidrsubnet(cidr, 16, 0)]
} }
worker_subnets = { worker_subnets = {
ipv4 = [for i, cidr in var.network_cidr.ipv4 : cidrsubnet(cidr, 1, 1)] ipv4 = [for i, cidr in local.network_cidr.ipv4 : cidrsubnet(cidr, 1, 1)]
ipv6 = [for i, cidr in var.network_cidr.ipv6 : cidrsubnet(cidr, 16, 1)] ipv6 = [for i, cidr in local.network_cidr.ipv6 : cidrsubnet(cidr, 16, 1)]
} }
cluster_subnets = { cluster_subnets = {
ipv4 = concat(local.controller_subnets.ipv4, local.worker_subnets.ipv4) ipv4 = concat(local.controller_subnets.ipv4, local.worker_subnets.ipv4)
@ -27,8 +40,8 @@ resource "azurerm_virtual_network" "network" {
resource_group_name = azurerm_resource_group.cluster.name resource_group_name = azurerm_resource_group.cluster.name
location = azurerm_resource_group.cluster.location location = azurerm_resource_group.cluster.location
address_space = concat( address_space = concat(
var.network_cidr.ipv4, local.network_cidr.ipv4,
var.network_cidr.ipv6 local.network_cidr.ipv6
) )
} }

2
azure/flatcar-linux/kubernetes/variables.tf
View File

@ -127,7 +127,7 @@ variable "networking" {
variable "network_cidr" { variable "network_cidr" {
type = object({ type = object({
ipv4 = list(string) ipv4 = list(string)
ipv6 = optional(list(string), ["fd9a:0d2f:b7dc::/48"]) ipv6 = optional(list(string), [])
}) })
description = "Virtual network CIDR ranges" description = "Virtual network CIDR ranges"
default = { default = {