lemniskett/lemniskett.moe
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

writeups/google-cloudskillsboost: [GSP345]

Browse Source 
Automating Infrastructure on Google Cloud with Terraform: Challenge Lab
This commit is contained in:
hiiruki 2023-09-10 16:08:35 +07:00
parent 56e6155a7e
commit d99b9df15d
No known key found for this signature in database
GPG Key ID: E40D7521AF5886C8
2 changed files with 542 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
content/writeups/google-cloudskillsboost/GSP345/images/Instance_ID.webp Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 14 KiB

542
content/writeups/google-cloudskillsboost/GSP345/index.md Normal file
View File

@ -0,0 +1,542 @@
---
title: "[GSP345] Automating Infrastructure on Google Cloud with Terraform: Challenge Lab"
description: ""
summary: "Quest: Automating Infrastructure on Google Cloud with Terraform"
date: 2023-05-19T07:02:15+07:00
draft: false
author: "Hiiruki" # ["Me", "You"] # multiple authors
tags: ["writeups", "challenge", "google-cloudskillsboost", "gsp345", "google-cloud", "cloudskillsboost", "juaragcp", "google-cloud-platform", "gcp", "cloud-computing", "terraform", "automation", "infrastructure", "vpc", "firewall"]
canonicalURL: ""
showToc: true
TocOpen: false
TocSide: 'right' # or 'left'
weight: 13
# aliases: ["/first"]
hidemeta: false
comments: false
disableHLJS: true # to disable highlightjs
disableShare: true
hideSummary: false
searchHidden: false
ShowReadingTime: true
ShowBreadCrumbs: true
ShowPostNavLinks: true
ShowWordCount: true
ShowRssButtonInSectionTermList: true
# UseHugoToc: true
cover:
image: "<image path/url>" # image path/url
alt: "<alt text>" # alt text
caption: "<text>" # display caption under cover
relative: false # when using page bundles set this to true
hidden: true # only hide on current single page
# editPost:
# URL: "https://github.com/hiiruki/hiiruki.dev/blob/main/content/writeups/google-cloudskillsboost/GSP345/index.md"
# Text: "Suggest Changes" # edit text
# appendFilePath: true # to append file path to Edit link
---
### GSP345
![Lab Banner](https://cdn.qwiklabs.com/GMOHykaqmlTHiqEeQXTySaMXYPHeIvaqa2qHEzw6Occ%3D#center)
- Time: 1 hour 30 minutes<br>
- Difficulty: Introductory<br>
- Price: 1 Credit
Lab: [GSP345](https://www.cloudskillsboost.google/focuses/42740?parent=catalog)<br>
Quest: [Automating Infrastructure on Google Cloud with Terraform](https://www.cloudskillsboost.google/quests/159)<br>
## Challenge scenario
You are a cloud engineer intern for a new startup. For your first project, your new boss has tasked you with creating infrastructure in a quick and efficient manner and generating a mechanism to keep track of it for future reference and changes. You have been directed to use [Terraform](https://www.terraform.io/) to complete the project.
For this project, you will use Terraform to create, deploy, and keep track of infrastructure on the startup's preferred provider, Google Cloud. You will also need to import some mismanaged instances into your configuration and fix them.
In this lab, you will use Terraform to import and create multiple VM instances, a VPC network with two subnetworks, and a firewall rule for the VPC to allow connections between the two instances. You will also create a Cloud Storage bucket to host your remote backend.
### Task 1. Create the configuration files
1. Make the empty files and directories in Cloud Shell or the Cloud Shell Editor.
```bash
touch main.tf
touch variables.tf
mkdir modules
cd modules
mkdir instances
cd instances
touch instances.tf
touch outputs.tf
touch variables.tf
cd ..
mkdir storage
cd storage
touch storage.tf
touch outputs.tf
touch variables.tf
cd
```
Folder structure should look like this:
```bash
main.tf
variables.tf
modules/
└── instances
├── instances.tf
├── outputs.tf
└── variables.tf
└── storage
├── storage.tf
├── outputs.tf
└── variables.tf
```
2. Add the following to the each variables.tf file, and replace `PROJECT_ID` with your GCP Project ID, also change the `REGION` and the `ZONE` based on the lab instructions.
```terraform
variable "region" {
default = "<****us-central1****>"
}
variable "zone" {
default = "<****us-central1-a****>"
}
variable "project_id" {
default = "<****PROJECT_ID****>"
}
```
3. Add the following to the `main.tf` file.
```terraform
terraform {
required_providers {
google = {
source = "hashicorp/google"
version = "4.53.0"
}
}
}
provider "google" {
project = var.project_id
region = var.region
zone = var.zone
}
module "instances" {
source = "./modules/instances"
}
```
4. Run the following commands in Cloud Shell in the root directory to initialize terraform.
```bash
terraform init
```
### Task 2. Import infrastructure
1. In the Cloud Console, go to the **Navigation menu** and select **Compute Engine**.
2. Click the `tf-instance-1`, then copy the **Instance ID** down somewhere to use later.
![Instance ID](./images/Instance_ID.webp#center)
3. In the Cloud Console, go to the **Navigation menu** and select **Compute Engine**.
4. Do the same thing on previous step, click the `tf-instance-2`, then copy the **Instance ID** down somewhere to use later.
5. Next, navigate to `modules/instances/instances.tf`. Copy the following configuration into the file.
```terraform
resource "google_compute_instance" "tf-instance-1" {
name = "tf-instance-1"
machine_type = "n1-standard-1"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "default"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
resource "google_compute_instance" "tf-instance-2" {
name = "tf-instance-2"
machine_type = "n1-standard-1"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "default"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
```
6. Run the following commands in Cloud Shell to import the first instance. Replace `INSTANCE_ID_1` with **Instance ID** for `tf-instance-1` you copied down earlier.
```bash
terraform import module.instances.google_compute_instance.tf-instance-1 <****INSTANCE_ID_1****>
```
7. Run the following commands in Cloud Shell to import the first instance. Replace `INSTANCE_ID_2` with **Instance ID** for `tf-instance-2` you copied down earlier.
```bash
terraform import module.instances.google_compute_instance.tf-instance-2 <****INSTANCE_ID_2****>
```
8. Run the following commands to apply your changes.
```bash
terraform plan
terraform apply
```
### Task 3. Configure a remote backend
1. Add the following code to the `modules/storage/storage.tf` file. Replace `BUCKET_NAME` with bucket name given in lab instructions.
```terraform
resource "google_storage_bucket" "storage-bucket" {
name = "<****BUCKET_NAME****>"
location = "US"
force_destroy = true
uniform_bucket_level_access = true
}
```
2. Next, add the following to the `main.tf` file.
```terraform
module "storage" {
source = "./modules/storage"
}
```
3. Run the following commands to initialize the module and create the storage bucket resource. Type `yes` at the dialogue after you run the apply command to accept the state changes.
```bash
terraform init
terraform apply
```
4. Next, update the `main.tf` file so that the terraform block looks like the following. Fill in your GCP Project ID for the bucket argument definition. Replace `BUCKET_NAME` with Bucket Name given in lab instructions.
```terraform
terraform {
backend "gcs" {
bucket = "<****BUCKET_NAME****>"
prefix = "terraform/state"
}
required_providers {
google = {
source = "hashicorp/google"
version = "4.53.0"
}
}
}
```
5. Run the following commands to initialize the remote backend. Type `yes` at the prompt.
```bash
terraform init
```
### Task 4. Modify and update infrastructure
1. Navigate to `modules/instances/instance.tf`. Replace the entire contents of the file with the following, then replace `INSTANCE_NAME` with instance name given in lab instructions.
```terraform
resource "google_compute_instance" "tf-instance-1" {
name = "tf-instance-1"
machine_type = "n1-standard-2"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "default"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
resource "google_compute_instance" "tf-instance-2" {
name = "tf-instance-2"
machine_type = "n1-standard-2"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "default"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
resource "google_compute_instance" "<****INSTANCE_NAME****>" {
name = "<****INSTANCE_NAME****>"
machine_type = "n1-standard-2"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "default"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
```
2. Run the following commands to initialize the module and create/update the instance resources. Type `yes` at the dialogue after you run the apply command to accept the state changes.
```bash
terraform init
terraform apply
```
### Task 5. Destroy resources
1. Taint the `INSTANCE_NAME` resource by running the following command.
```bash
terraform taint module.instances.google_compute_instance.<****INSTANCE_NAME****>
```
2. Run the following commands to apply the changes.
```bash
terraform init
terraform apply
```
3. Remove the `INSTANCE_NAME` (instance 3) resource from the `instances.tf` file. Delete the following code chunk from the file.
```terraform
resource "google_compute_instance" "<****INSTANCE_NAME****>" {
name = "<****INSTANCE_NAME****>"
machine_type = "n1-standard-2"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "default"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
```
4. Run the following commands to apply the changes. Type yes at the prompt.
```bash
terraform apply
```
### Task 6. Use a module from the Registry
1. Copy and paste the following into the `main.tf` file. Replace `VPC_NAME` with VPC Name given in lab instructions.
```terraform
module "vpc" {
source = "terraform-google-modules/network/google"
version = "~> 6.0.0"
project_id = var.project_id
network_name = "<****VPC_NAME****>"
routing_mode = "GLOBAL"
subnets = [
{
subnet_name = "subnet-01"
subnet_ip = "10.10.10.0/24"
subnet_region = var.region
},
{
subnet_name = "subnet-02"
subnet_ip = "10.10.20.0/24"
subnet_region = var.region
subnet_private_access = "true"
subnet_flow_logs = "true"
description = "This subnet has a description"
}
]
}
```
2. Run the following commands to initialize the module and create the VPC. Type `yes` at the prompt.
```bash
terraform init
terraform apply
```
3. Navigate to `modules/instances/instances.tf`. Replace the entire contents of the file with the following. Replace `VPC_NAME` with VPC Name given in lab instructions.
```terraform
resource "google_compute_instance" "tf-instance-1" {
name = "tf-instance-1"
machine_type = "n1-standard-2"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "<****VPC_NAME****>"
subnetwork = "subnet-01"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
resource "google_compute_instance" "tf-instance-2" {
name = "tf-instance-2"
machine_type = "n1-standard-2"
zone = var.zone
boot_disk {
initialize_params {
image = "debian-cloud/debian-10"
}
}
network_interface {
network = "<****VPC_NAME****>"
subnetwork = "subnet-02"
}
metadata_startup_script = <<-EOT
#!/bin/bash
EOT
allow_stopping_for_update = true
}
module "vpc" {
source = "terraform-google-modules/network/google"
version = "~> 6.0.0"
project_id = "*****PROJECT_ID****"
network_name = "****VPC_NAME*****"
routing_mode = "GLOBAL"
subnets = [
{
subnet_name = "subnet-01"
subnet_ip = "10.10.10.0/24"
subnet_region = "us-central1"
},
{
subnet_name = "subnet-02"
subnet_ip = "10.10.20.0/24"
subnet_region = "us-central1"
subnet_private_access = "true"
subnet_flow_logs = "true"
description = "This subnet has a description"
},
]
}
```
4. Run the following commands to initialize the module and update the instances. Type `yes` at the prompt.
```bash
terraform init
terraform apply
```
### Task 7. Configure a firewall
1. Add the following resource to the `main.tf` file and replace `PROJECT_ID` and `VPC_NAME` with your GCP Project ID and VPC Name given in lab instructions.
```terraform
resource "google_compute_firewall" "tf-firewall" {
name = "tf-firewall"
network = "projects/<****PROJECT_ID****>/global/networks/<****VPC_NAME****>"
allow {
protocol = "tcp"
ports = ["80"]
}
source_tags = ["web"]
source_ranges = ["0.0.0.0/0"]
}
```
2. Run the following commands to configure the firewall. Type `yes` at the prompt.
```bash
terraform init
terraform apply
```
## Congratulations!
![Badge](https://cdn.qwiklabs.com/RGaT7KirRAjGDJTaOTOuax2BzYId0zvvGTs%2BPpGlcQI%3D#center)