Service project

As explained in Google Anthos in Action

A service project is a Google Cloud project whose resources use networking provided by a shared VPC host project.

A service project is a Google Cloud project whose resources use networking supplied by a shared VPC host project. It separates products, tenants, and platform responsibilities while preserving permitted connectivity across projects. section 10.1.1

A shared-VPC deployment assigns responsibilities across projects:

• The host project contains subnets, firewall rules, and network permissions, controlled by a centralized networking team. section 10.1.1
• The platform_admins service project contains the Anthos GKE clusters and is managed by platform administrators. section 10.1.1
• Product service projects contain each product's non-Anthos resources, while tenants receive landing zones across the shared Anthos clusters. section 10.1.1
• Multiple service projects can use shared subnets and connect to one another when network access is allowed. section 10.1.1

Regional Anthos platform

A production environment can use project-0-nethost-prod as the network host, project-1-platform_admins-prod for Anthos GKE clusters, and project-2-product1-prod for product resources. The platform can span two regions, use multiple VPC-native clusters per region, and provide each tenant with namespaces and policies across the multicluster service mesh. section 10.3.1

Figure 10.3 Shared VPC architecture in GCP

Use the shared VPC architecture figure to inspect how the host project supplies network resources to multiple service projects. section 10.1.1

How Google Anthos in Action covers it

How deep it goes

Explains project responsibilities and multicluster placement, stopping short of provisioning commands or detailed IAM configuration.

Examples

Uses platform_admins and product projects in a shared VPC, including a two-region Anthos deployment with multiple clusters per region.

What it assumes

Assumes familiarity with Google Cloud projects, shared VPC networking, Anthos, and GKE clusters.

What you can do after

Evaluate shared-VPC project boundaries and place Anthos platform, tenant, and product resources accordingly.

How it connects

Connects service projects to shared VPC, host projects, IAM, Anthos, GKE, landing zones, and VPC-native clusters.

liveBookmanning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Related concepts

• shared vpc modelused by · A shared VPC model is a Google Cloud networking arrangement in which a host project provides a Virtual Private Cloud network for resources in attached service projects.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.