I am trying to provision landing zone infra for one of the clients. The architecture is as attached. i have proposed hub and spoke topology for client. Client does not have anything on GCP except BQ and not plan to have anuything down the line for 5-7 years. The ask is to access BQ over private network and not public. So i decided to go with PSC. So i created private zone in DEV spoke VPC and did the zzross zone binding with hub and i was able to resolve BQ private IP. However when i try to assiciate the HUB VPC now with another Spoke then it doesnt allow and says that Hub VPC is already associated with zone in spoke vpc DEV. which is right also as VPC can not be associated with more than one zone(is what i know from AWS) new to GCP. Can someone help considering the ask what route i should take to deliver this solution. I want to be able to resolve BQ name from on premise to private IP for each of the projects(DEV, UAT and Prod)
0 Answers
Related