Goolge Cloud Skills Boost

Terraform Challenge Labs

컨텐츠 정보

본문

# Task 1 ``` touch main.tf touch variables.tf mkdir modules cd modules mkdir instances cd instances touch instances.tf touch outputs.tf touch variables.tf cd .. mkdir storage cd storage touch storage.tf touch outputs.tf touch variables.tf cd ``` ## Task 2 Add the following to the each variables.tf file, and fill in the GCP Project ID: ``` variable "region" { default = "us-central1" } variable "zone" { default = "us-central1-a" } variable "project_id" { default = "" } Add the following to the main.tf file : terraform { required_providers { google = { source = "hashicorp/google" version = "3.55.0" } } } provider "google" { project = var.project_id region = var.region zone = var.zone } module "instances" { source = "./modules/instances" } ``` iMPORTANT: Run terraform init in Cloud Shell in the root directory to initialize terraform. : Import infrastructure Navigate to Compute Engine > VM Instances. Click on tf-instance-1. Copy the Instance ID down somewhere to use later. Navigate to Compute Engine > VM Instances. Click on tf-instance-2. Copy the Instance ID down somewhere to use later. Next, navigate to modules/instances/instances.tf. Copy the following configuration into the file: ``` resource "google_compute_instance" "tf-instance-1" { name = "tf-instance-1" machine_type = "n1-standard-1" zone = var.zone boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "default" } } resource "google_compute_instance" "tf-instance-2" { name = "tf-instance-2" machine_type = "n1-standard-1" zone = var.zone boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "default" } } ``` To import the first instance, use the following command, using the Instance ID for tf-instance-1 you copied down earlier. ``` terraform import module.instances.google_compute_instance.tf-instance-1 ``` To import the second instance, use the following command, using the Instance ID for tf-instance-2 you copied down earlier. ``` terraform import module.instances.google_compute_instance.tf-instance-2 ``` The two instances have now been imported into your terraform configuration. You can now optionally run the commands to update the state of Terraform. Type yes at the dialogue after you run the apply command to accept the state changes. ``` terraform plan terraform apply ``` ## Task - 3 : Configure a remote backend Add the following code to the modules/storage/storage.tf file: ``` resource "google_storage_bucket" "storage-bucket" { name = "BUCKET_NAME" location = "US" force_destroy = true uniform_bucket_level_access = true } ``` Next, add the following to the main.tf file: ``` module "storage" { source = "./modules/storage" } ``` Run the following commands to initialize the module and create the storage bucket resource. Type yes at the dialogue after you run the apply command to accept the state changes. ``` terraform init terraform apply ``` Next, update the main.tf file so that the terraform block looks like the following. Fill in your GCP Project ID for the bucket argument definition. ``` terraform { backend "gcs" { bucket = "BUCKET_NAME" prefix = "terraform/state" } required_providers { google = { source = "hashicorp/google" version = "3.55.0" } } } ``` Run the following to initialize the remote backend. Type yes at the prompt. ``` terraform init ``` ## Task - 4 : Modify and update infrastructure Navigate to modules/instances/instance.tf. Replace the entire contents of the file with the following: ``` resource "google_compute_instance" "tf-instance-1" { name = "tf-instance-1" machine_type = "n1-standard-2" zone = var.zone allow_stopping_for_update = true boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "default" } } resource "google_compute_instance" "tf-instance-2" { name = "tf-instance-2" machine_type = "n1-standard-2" zone = var.zone allow_stopping_for_update = true boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "default" } } resource "google_compute_instance" "tf-instance-3" { name = "INSTANCE_NAME" machine_type = "n1-standard-2" zone = var.zone allow_stopping_for_update = true boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "default" } } ``` Run the following commands to initialize the module and create/update the instance resources. Type yes at the dialogue after you run the apply command to accept the state changes. ``` terraform init terraform apply ``` ## Task - 5 : Taint and destroy resources Taint the tf-instance-3 resource by running the following command: ``` terraform taint module.instances.google_compute_instance.tf-instance-3 ``` Run the following commands to apply the changes: ``` terraform init terraform apply ``` Remove the tf-instance-3 resource part from the instances.tf file. Delete the following code chunk from the file. ``` resource "google_compute_instance" "tf-instance-3" { name = "INSTANCE NAME" machine_type = "n1-standard-2" zone = var.zone allow_stopping_for_update = true boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "default" } } ``` Run the following commands to apply the changes. Type yes at the prompt. ``` terraform apply ``` ## Task - 6 : Use a module from the Registry Copy and paste the following into the main.tf file: ``` module "vpc" { source = "terraform-google-modules/network/google" version = "~> 3.2.2" project_id = var.project_id network_name = "VPC_NAME" routing_mode = "GLOBAL" subnets = [ { subnet_name = "subnet-01" subnet_ip = "10.10.10.0/24" subnet_region = "us-central1" }, { subnet_name = "subnet-02" subnet_ip = "10.10.20.0/24" subnet_region = "us-central1" subnet_private_access = "true" subnet_flow_logs = "true" description = "This subnet has a description" } ] } ``` Run the following commands to initialize the module and create the VPC. Type yes at the prompt. ``` terraform init terraform apply ``` Navigate to modules/instances/instances.tf. Replace the entire contents of the file with the following: ``` resource "google_compute_instance" "tf-instance-1" { name = "tf-instance-1" machine_type = "n1-standard-2" zone = var.zone allow_stopping_for_update = true boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "VPC_NAME" subnetwork = "subnet-01" } } resource "google_compute_instance" "tf-instance-2" { name = "tf-instance-2" machine_type = "n1-standard-2" zone = var.zone allow_stopping_for_update = true boot_disk { initialize_params { image = "debian-cloud/debian-10" } } network_interface { network = "VPC_NAME" subnetwork = "subnet-02" } } ``` Run the following commands to initialize the module and update the instances. Type yes at the prompt. ``` terraform init terraform apply ``` ## Task - 7 : Configure a firewall Add the following resource to the main.tf file and fill in the GCP Project ID: ``` resource "google_compute_firewall" "tf-firewall" { name = "tf-firewall" network = "projects//global/networks/VPC_NAME" allow { protocol = "tcp" ports = ["80"] } source_tags = ["web"] source_ranges = ["0.0.0.0/0"] } ``` Run the following commands to configure the firewall. Type yes at the prompt. ``` terraform init terraform apply ```

관련자료

댓글 1
전체 18 / 1 페이지
RSS

최근글


새댓글