Blue/green deployment: Single or multiple VPCs

Google Cloud Compute Infrastructure
1

Hi all,

I’m planning for blue/green deployment for my GKE clusters. What would be a better choice to deploy the clusters:

  • Single VPC with multiple subnets
    • 1 blue subnet
    • 1 green subnet
  • Multiple VPC with single subnet
    • 1 green VPC - 1 green subnet
    • 1 blue VPC - 1 blue subnet

The cons I can think of for single VPC is that no VPC peering is required and less overhead.

Are there any other points I’m missing?

Any pointers is greatly appreciated.

Thanks.

2

From the security standpoint, it is always better to have separate VPCs. However, if your cluster is running within a single project/organization and there’s only one team responsible for managing the network resources, then, it does not make sense to use separate VPCs, you would be just adding a grade of complexity to the implementation.

1 Like
3

Thanks for the input. As the cluster is managed by the same team, a single VPC would be the ideal route.

I would like to dig a little deeper on separating VPCs from security standpoint. Would you be so kind to elaborate on that?

Thanks.