Step 1 - Nais-team preparations¶

Create the terraform service user¶

In nais-terraform-modules

Add the new tenant to serviceaccounts.tf.

The name you choose here will be the $NAIS_TENANT_ALIAS used in the next step.

Create a PR and let Atlantis plan and apply the changes.

Add the new tenant to the Nais billing account¶

Billing -> Account Management -> Right side menu (Show info panel) -> Add principal

Add nais-tf-<TENANT>@nais-io.iam.gserviceaccount.com as Billing Account User

Ask the tenant about what IP-ranges they want to use¶

Make sure we have IP-ranges that do not overlap with the tenant's existing infrastructure. If the tenant requires connectivity with external

Example ranges¶

Management
  ip_cidr_range            = "10.17.0.0/23"
  pods_ip_cidr_range       = "10.17.64.0/18"
  svc_ip_cidr_range        = "192.168.0.0/21"
  master_ip_cidr_range     = "172.16.0.0/28"
  loadbalancer_cidr_range  = "100.64.0.0/24"

Dev 
  ip_cidr_range            = "10.17.2.0/23"
  aiven_vpc_cidr           = "10.17.8.0/24"
  pods_ip_cidr_range       = "10.17.128.0/18"
  svc_ip_cidr_range        = "192.168.4.0/21"
  master_ip_cidr_range     = "172.16.0.16/28"
  loadbalancer_cidr_range  = "100.64.1.0/24"
  shared_vpc_ip_cidr       = "100.71.0.0/20"

Prod 
  ip_cidr_range            = "10.17.4.0/23"
  aiven_vpc_cidr           = "10.17.9.0/24"
  pods_ip_cidr_range       = "10.17.192.0/18"
  svc_ip_cidr_range        = "192.168.8.0/21"
  master_ip_cidr_range     = "172.16.0.32/28"
  loadbalancer_cidr_range  = "100.64.2.0/24"
  shared_vpc_ip_cidr_start = "100.71.16.0/20"