cluster.yaml

# Copyright 2016 Google Inc. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

imports:
- path: cluster.jinja

resources:
  # Deployment manager doesn't support depends on references in template type.
  # So the two possible work arounds are
  # 1. Use a single template (.jinja file for all resources) or
  # 2. Create two separate deployments and launch the boot strapper
  # after the cluster is created.
  #
  # Two separate deployments doesn't make much sense; we could just use
  # kubectl at that point. So we put all resources in a single deployment.
- name: kubeflow
  type: cluster.jinja
  properties:
    # You need to use a zone with Broadwell because that's what TFServing requires.
    zone: us-central1-a
    # "1.X": picks the highest valid patch+gke.N patch in the 1.X version
    # https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters
    cluster-version: "1.11"
    # Set this to v1beta1 to use beta features such as private clusterss
    # and the Kubernetes stackdriver agents.
    gkeApiVersion: v1beta1
    # An arbitrary string appending to name of nodepools
    # bump this if you want to modify the node pools.
    # This will cause existing node pools to be deleted and new ones to be created.
    # Use prefix v so it will be treated as a string.
    pool-version: v1
    # Two is small enough to fit within default quota.
    cpu-pool-initialNodeCount: 2
    gpu-pool-initialNodeCount: 0
    # Autoscaling parameters
    cpu-pool-enable-autoscaling: true
    cpu-pool-min-nodes: 0
    cpu-pool-max-nodes: 10
    securityConfig:
      # Use private IPs to make this more secure.
      privatecluster: false
      # masterIpv4CidrBlock for private clusters, if enabled
      # Use v1beta1 api
      masterIpv4CidrBlock: 172.16.0.16/28
      # Protect worker node metadata from pods
      # Use v1beta1 api
      secureNodeMetadata: false
      # Whether to enable Pod Security Policy Admission Controller
      # Use v1beta1 api
      podSecurityPolicy: false
      masterAuthorizedNetworksConfigEnabled: false
      masterAuthorizedNetworksConfigCidr:
      - cidrBlock: 1.2.3.4/32