Console
    Contact Us Start free

    Deploy a VPC with Terraform

    Learn how to use Infrastructure Manager to deploy a Virtual Private Cloud (VPC).

    This quickstart uses a Terraform configuration that is stored in a public GitHub repository. The configuration defines the VPC to provision.

    Before you begin

    1. Sign in to your Google Account.

      If you don't already have one, sign up for a new account .

    2. Install the Google Cloud CLI.

    3. If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity .

    4. To initialize the gcloud CLI, run the following command:

      gcloud  
init

    5. Create or select a Google Cloud project .

      • Create a Google Cloud project:

        gcloud projects create PROJECT_ID

        Replace PROJECT_ID with a name for the Google Cloud project you are creating.

      • Select the Google Cloud project that you created:

        gcloud config set project PROJECT_ID

        Replace PROJECT_ID with your Google Cloud project name.

    6. Verify that billing is enabled for your Google Cloud project .

    7. Enable the Infrastructure Manager API:

      gcloud  
services  
 enable 
  
config.googleapis.com

    8. Set up authentication:

      1. Create the service account:

        gcloud  
iam  
service-accounts  
create  
 SERVICE_ACCOUNT_NAME

        Replace SERVICE_ACCOUNT_NAME with a name for the service account.

      2. Grant the roles/config.agent IAM role to the service account:

        gcloud  
projects  
add-iam-policy-binding  
 PROJECT_ID 
  
--member = 
 "serviceAccount: SERVICE_ACCOUNT_NAME 
@ PROJECT_ID 
.iam.gserviceaccount.com" 
  
--role = 
roles/config.agent

        Replace the following:

        • SERVICE_ACCOUNT_NAME : the name of the service account
        • PROJECT_ID : the project ID where you created the service account

    9. Install the Google Cloud CLI.

    10. If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity .

    11. To initialize the gcloud CLI, run the following command:

      gcloud  
init

    12. Create or select a Google Cloud project .

      • Create a Google Cloud project:

        gcloud projects create PROJECT_ID

        Replace PROJECT_ID with a name for the Google Cloud project you are creating.

      • Select the Google Cloud project that you created:

        gcloud config set project PROJECT_ID

        Replace PROJECT_ID with your Google Cloud project name.

    13. Verify that billing is enabled for your Google Cloud project .

    14. Enable the Infrastructure Manager API:

      gcloud  
services  
 enable 
  
config.googleapis.com

    15. Set up authentication:

      1. Create the service account:

        gcloud  
iam  
service-accounts  
create  
 SERVICE_ACCOUNT_NAME

        Replace SERVICE_ACCOUNT_NAME with a name for the service account.

      2. Grant the roles/config.agent IAM role to the service account:

        gcloud  
projects  
add-iam-policy-binding  
 PROJECT_ID 
  
--member = 
 "serviceAccount: SERVICE_ACCOUNT_NAME 
@ PROJECT_ID 
.iam.gserviceaccount.com" 
  
--role = 
roles/config.agent

        Replace the following:

        • SERVICE_ACCOUNT_NAME : the name of the service account
        • PROJECT_ID : the project ID where you created the service account
      16.

    Grant permissions for resources in the configuration

    You have granted permissions needed to run Infra Manager, but you also need to grant permissions that are specific to the resources described in the configuration you are deploying.

    Grant permissions for the VPC, which is the resource defined in the Terraform configuration.

      gcloud 
  
 projects 
  
 add-iam-policy-binding 
  
  PROJECT_ID 
 
  
\  
 --member 
 = 
 serviceAccount 
 : 
  SERVICE_ACCOUNT_NAME 
 
@ PROJECT_ID 
 . 
iam.gserviceaccount.com  
\  
 --role 
 = 
 roles/ 
 compute.networkAdmin

    Replace the following:

    • SERVICE_ACCOUNT_NAME : the name of the service account.
    • PROJECT_ID : your project ID.

    Preview the deployment

    Before you create a deployment, you can create a preview of the deployment. You can use this preview to verify the resources that are planned to be provisioned.

    The following command has four values populated that don't have a default value. These values are: your project ID, the service account name, the location us-central1 , and the name quickstart-vpc for the network you're creating.

    To create a preview, use the following command:

       
 gcloud 
  
 infra-manager 
  
 previews 
  
 create 
  
 projects/ PROJECT_ID 
/locations/us-central 
 1 
 /previews/quickstart-preview 
  
\  
 --service-account 
  
 projects/ PROJECT_ID 
/serviceAccounts/ SERVICE_ACCOUNT_NAME 
@ PROJECT_ID 
 
 . 
iam.gserviceaccount.com  
\  
 --git-source-repo 
 = 
 https 
 : 
 //github.com/terraform-google-modules/terraform-google-network \ 
  
 --git-source-directory 
 = 
 modules/vpc 
  
\  
 --git-source-ref 
 = 
 main 
  
\  
 --input-values 
 = 
 project_id 
 = 
  PROJECT_ID 
 
 , 
 network_name 
 = 
 quickstart-vpc

    After you create a preview, you can review the preview results. This quickstart skips this step, but you can see Export and view preview results if you want more details.

    Create a deployment

    Use Infra Manager to create a deployment. This means that Infra Manager provisions the resources that are defined in the Terraform configuration.

    The configuration for this quickstart has four values that don't have a default value. The following command adds these values: your project ID, the service account name, the location us-central1 , and the name quickstart-vpc for the network you're creating.

      gcloud 
  
 infra-manager 
  
 deployments 
  
 apply 
  
 projects/ PROJECT_ID 
/locations/us-central 
 1 
 /deployments/quickstart-deployment 
  
\  
 --service-account 
 = 
 projects/ PROJECT_ID 
/serviceAccounts/ SERVICE_ACCOUNT_NAME 
@ PROJECT_ID 
 
 . 
iam.gserviceaccount.com  
\  
 --git-source-repo 
 = 
 https 
 : 
 //github.com/terraform-google-modules/terraform-google-network \ 
  
 --git-source-directory 
 = 
 modules/vpc 
  
\  
 --git-source-ref 
 = 
 main 
  
\  
 --input-values 
 = 
 project_id 
 = 
  PROJECT_ID 
 
 , 
 network_name 
 = 
 quickstart-vpc

    When the deployment is done, you see:

     Creating the deployment...done

    The VPC is now created and configured as described in the configuration.

    View the build results in Cloud Build

    To view the Cloud Build job that Infra Manager used to create the deployment, open the Build Historypage in the Google Cloud console:

    Open the Build History page

    View the status of the deployment

    Now that the deployment is done, you can view its description to review information about it, including the state.

    View the description of the deployment:

      gcloud 
  
 infra-manager 
  
 deployments 
  
 describe 
  
 projects/ PROJECT_ID 
/locations/us-central 
 1 
 /deployments/quickstart-deployment

    The output has details about the deployment, including the timestamp of the deployment, the name of the latest revision, and the state.

    For the state, you see ACTIVE .

    View details about the provisioned VPC

    View details about the provisioned VPC:

      gcloud 
  
 infra-manager 
  
 resources 
  
 list 
  
 --revision 
 = 
 projects/ PROJECT_ID 
/locations/us-central 
 1 
 /deployments/quickstart-deployment/revisions/ REVISION_ID

    Replace REVISION_ID with the ID of the latest revision. This ID is r-0 , unless you deployed multiple times. You can see the ID of the latest revision in the deployment description in the previous section.

    View the VPC in the console

    View the VPC in the console:

    Go to VPC networks

    You see the VPC named quickstart-vpc . This is the VPC that Infra Manager provisioned.

    Clean up

    To avoid incurring charges to your Google Cloud account for the resources used on this page, make sure that you delete resources that you no longer need.

    Delete the VPC

    Delete the VPC and the metadata about the deployment:

      gcloud 
  
 infra-manager 
  
 deployments 
  
 delete 
  
 projects/ PROJECT_ID 
/locations/us-central 
 1 
 /deployments/quickstart-deployment

    Optional: Delete the project

    If you deployed the solution in a new Google Cloud project, and if you no longer the project, then delete it by completing the following steps:

    1. In the Google Cloud console, go to the Manage resources page.

      Go to Manage resources

    2. In the project list, select the project that you want to delete, and then click Delete .
    3. At the prompt, type the project ID, and then click Shut down .

    What's next
    Design a Mobile Site
    View Site in Mobile | Classic
    Share by: