GCP Terraform

Install in Ubuntu

$ wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
sudo apt update && sudo apt install terraform

$ terraform -help

需要一個IAM才可以使用terraform

step1. 創建user
step2. 創建Key
step3. 上傳key

Project1.

目的
創建bucket
folder structure

$ ls
key.json  main.tf

main.tf











provider "google" {
  credentials = "${file("key.json")}"
  project = "[your project id]"
  region  = "asia-east1"
}

resource "google_storage_bucket" "quick-start-gcs" {
  name          = "[your bucket name]"
  location      = "asia-east1"
  force_destroy = true
}

執行指令

$ terraform init (初始化)
$ terraform fmt  (程式碼優化排版)
$ terraform plan (測試程式碼是否可以佈署)
$ terraform apply --auto-approve (真正開始佈署)
$ terraform destroy --auto-approve (刪除程式碼佈署的所有東西)

結果

Project2.

目的
創建instance
folder structure

$ ls
key.json  main.tf  provider.tf

程式碼

main.tf



















resource "google_compute_instance" "example" {
  name         = "example-instance"
  machine_type = "e2-micro"
  zone         = "asia-east1-b"

  boot_disk {
    initialize_params {
      image = "projects/ubuntu-os-cloud/global/images/ubuntu-2204-jammy-v20240726"
    }
  }

  network_interface {
    network = "default"

    access_config {
      // Ephemeral IP
    }
  }
}

provider.tf























##################################################################################
# CONFIGURATION
##################################################################################
terraform {
  # 指定 terraform 的最小版本
  required_version = ">=1.0"

  required_providers {
    # provider 中的最小版本
    google = {
      source  = "hashicorp/google"
      version = ">= 4.40.0"
    }
  }
}
##################################################################################
# PROVIDERS
##################################################################################
provider "google" {
  # your project name
  credentials = file("key.json")
  project     = "avian-casing-435202-m5"
}

執行指令

$ terraform init (初始化)
$ terraform fmt  (程式碼優化排版)
$ terraform plan (測試程式碼是否可以佈署)
$ terraform apply --auto-approve (真正開始佈署)
$ terraform destroy --auto-approve (刪除程式碼佈署的所有東西)

結果

Project3.

目的
檢查虛擬機是否存在，並獲取虛擬機的各種資訊
folder structure

$ ls
key.json  main.tf

main.tf





































resource "google_compute_instance" "example" {
  name         = "example-instance"
  machine_type = "e2-micro"
  zone         = "asia-east1-b"

  boot_disk {
    initialize_params {
      image = "projects/ubuntu-os-cloud/global/images/ubuntu-2204-jammy-v20240726"
    }
  }

  network_interface {
    network = "default"

    access_config {
      // Ephemeral IP
    }
  }

  # 成功案例，執行電腦本機路徑
  provisioner "local-exec" {
    command = "echo ${google_compute_instance.example.network_interface[0].network_ip} > ./ip_address_local_exec.txt"
  }

  # # 失敗案例，傳送到虛擬電腦本機
  # provisioner "file" {
  #   content     = google_compute_instance.example.network_interface[0].network_ip
  #   destination = "/tmp/ip_address_file.txt"
  # }

  # # 失敗案例，無法連線到遠端
  # provisioner "remote-exec" {
  #   inline = [
  #     "echo ${google_compute_instance.example.network_interface[0].network_ip} > /tmp/ip_address_remote_exec.txt"
  #   ]
  # }
}

執行指令

$ terraform init (初始化)
$ terraform fmt  (程式碼優化排版)
$ terraform plan (測試程式碼是否可以佈署)
$ terraform apply --auto-approve (真正開始佈署)
$ terraform destroy --auto-approve (刪除程式碼佈署的所有東西)

結果

$ ls
ip_address_local_exec.txt  key.json  main.tf  terraform.tfstate
$ cat ip_address_local_exec.txt 
10.140.0.3