Dawid is a guest writer at Spacelift. He works as a DevOps Engineer, having a primary background in the development and management of CI/CD circles. 

All posts by Dawid Butrykowski - DevOps Expert

Dawid Butrykowski

Author title

OpenTofu is now part of the Linux Foundation 🎉

Title category

Get all the latest content on Infrastructure as Code, DevOps, Spacelift features & news directly to your inbox!

Level up your IaC knowledge. Stay up to date with educational devops guides & news in infrastructure as code, cloud & more!

Managing Infrastructure at Scale | Spacelift Blog

applepodcasts

spotify

missionctrl

Welcome to missionCTRL, a show dedicated to exploring the frontiers of modern DevOps. Listen (or watch) as we sit down with the practitioners who are pushing the boundaries of development

Getting started with Terraform on Google Cloud Platform (GCP)

Want to level up your Terraform knowledge? Explore our tutorials and step-by-step guides written by Terraform experts. Learn Terraform best practices and solutions to the most difficult problems.

Terraform Guides and Tutorials | Spacelift Blog

Terraform

When beginning their journey with a tool, a great many people make a mistake I call “the first time problem”. They look for the instructions or tutorials, but they seek them out only to copy and paste the code. They do this because they seemingly have no goals, and their only desire is to finish the next point in training on the platform, to add a badge to their profile.

In this tutorial, you will learn how to create a self-hosted WordPress instance. But the purpose of this article is not for it to become yet another copy-paste template. We want to give you a clear path from point A to point B, which means from a bare repository to a finished, ready-to-use WordPress page, without specifying every move. At the end of this journey, we will leave you with the freedom to deepen your knowledge of tools and resources.

self-hosted WordPress instance

First, we need to configure the <a href="https://docs.spacelift.io/vendors/terraform/terraform-provider" target="_blank" rel="noopener">Terraform provider</a>, which allows us to connect with Google Cloud API and get down to business. Don’t worry about credentials, we will handle this in a later part of the article.

Second, we need a place where resources could be stored. This is required because without it, we will not be able to create the resources. For this purpose, we will use a GCP resource called ‘project’. It works as a container for all our components. This article will assume that you already have a project created, and that its name is “google-demo”.

<h3></h3>
<h3>Core networking</h3>
To work with a machine in our project or display our page in the web browser, we need a virtual network where other Google Cloud resources like nodes, addresses, and firewall rules can be added.
Firstly, create a network and subnetwork with an available IP range for our machines.

Secondly, create a private address for our database instance, which we will create later so as not to make it publicly available.

<h3>DNS</h3>
No one uses an IP address to reach sites on the internet, therefore we need a domain address. To that end, create an address resource and bind DNS records of “A” and “CNAME” types to expose our page on a domain <a href="http://www.example.com" rel="nofollow">www.example.com</a> to the world. Of course, a Cloud DNS hosted zone with your desired name is required—in this article, we will use the “example-com” zone and assume that we have registered it previously.

<h3>Firewall</h3>
Last but not least, we need to configure the most crucial component of our infrastructure—the firewall. It is critical because we don’t want to accidentally open ports or expose instances to the world.

To properly launch a functional WordPress instance, we need a database. The most common option is MySQL, because WordPress supports it out of the box. We could create another machine for the database, install and configure it, but why would we? We can utilize managed services using the cloud and do not need to worry about creating the entire infrastructure from scratch. Instead, relying on resources and a few lines of code, we can deploy a new and shiny MySQL instance that is ready to work.

To get a username and password created by Terraform, we add the output code:

<ul>
<li><a href="https://spacelift.io/blog/terraform-environments" target="_blank" rel="noopener"><span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Managing Multiple Terraform Environments Efficiently&quot;}" data-sheets-userformat="{&quot;2&quot;:513,&quot;3&quot;:{&quot;1&quot;:0},&quot;12&quot;:0}">Managing Multiple Terraform Environments Efficiently</a></li>
<li><a href="https://spacelift.io/blog/terraform-in-ci-cd" target="_blank" rel="noopener"><span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Deploying Infrastructure in CI/CD with Terraform&quot;}" data-sheets-userformat="{&quot;2&quot;:513,&quot;3&quot;:{&quot;1&quot;:0},&quot;12&quot;:0}">Deploying Infrastructure in CI/CD with Terraform</a></li>
<li><a href="https://spacelift.io/blog/infrastructure-problems-that-spacelift-solves" target="_blank" rel="noopener"><span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Common Infrastructure Challenges and How to Solve Them&quot;}" data-sheets-userformat="{&quot;2&quot;:513,&quot;3&quot;:{&quot;1&quot;:0},&quot;12&quot;:0}">Common Infrastructure Challenges and How to Solve Them</a></li>
</ul>

<h3>Initialization script</h3>
To install WordPress on our machine, we create a simple script, which installs a web server (<a href="https://httpd.apache.org/" target="_blank" rel="nofollow noopener">Apache2</a>) and downloads a package with WordPress after operating system startup.

<h3>Machine</h3>
Having gone through the initial configuration, we are now able to create the machine. To do that, we will need some details:
<ul>
<li style="font-weight: 400;" aria-level="1">Which type of machine we choose. </li>
<li style="font-weight: 400;" aria-level="1">What image we choose.</li>
<li style="font-weight: 400;" aria-level="1">What size of disk we want.</li>
</ul>
The first item on our list is machine type. We can check for it in <a class="editor-rtfLink" href="https://cloud.google.com/compute/docs/machine-types" target="_blank" rel="nofollow noopener">GCP documentation</a>. For tutorial purposes, we don’t need a big machine with a ton of vCPUs and RAM, so let’s choose a small one, such as e2-standard-2.
Next, we need an image. The standard option is, of course, GNU/Linux distribution. I personally prefer Debian, but you can choose whatever distribution you want from this <a class="editor-rtfLink" href="https://cloud.google.com/compute/docs/images/os-details#general-info" target="_blank" rel="nofollow noopener">list</a>. 
The template of an image value will look like this: ‘image-project/image-family’.
Lastly, we need to think about the size of our attached disk. We will use a small number, but if you want to do what is right for your case, you will need to think about extra size to accommodate 
<ul>
<li style="font-weight: 400;" aria-level="1">Future WordPress updates.</li>
<li style="font-weight: 400;" aria-level="1">Future WordPress plugin updates.</li>
<li style="font-weight: 400;" aria-level="1">Your custom changes to the page.</li>
<li style="font-weight: 400;" aria-level="1">Custom themes for your page.</li>
<li style="font-weight: 400;" aria-level="1">Uploaded assets.</li>
<li style="font-weight: 400;" aria-level="1">Page cache.</li>
</ul>
Now that we’ve gathered all the needed information, let’s code it.

At this point, our code is ready. We can push it to our version control system of choice and proceed with automation configuration.

When using infrastructure-as-code automation tools such as Terraform, AWS CloudFormation, or Pulumi, these tools typically require credentials to execute. Usually, these are very powerful credentials, administrative credentials, sometimes. And these can do a lot of damage. Typically, you&#8217;d provide those credentials statically &#8211; think AWS credentials, GCP service keys, etc. This is dangerous and against security best practices. <a href="https://docs.spacelift.io/integrations/cloud-providers/gcp" target="_blank" rel="noopener">Spacelift GCP integration</a> allows Spacelift to manage your Google Cloud resources without the need for long-lived static credentials.
<h3>Step 1. Stack configuration</h3>
We do not want to deploy all of the prepared code manually from our computer. Instead, we want it to be deployed automatically. For this, we will leverage Spacelift. At first, you need to create a stack:

image11

add stack

Choose a version control system provider (GitHub in this scenario), repository and branch.

image9

create a stack

Next, we proceed to a backend configuration. Since we have been using Terraform, we will naturally select Terraform for our backend. For the purpose of this article, we will also let Spacelift manage our Terraform state.

image8

configure backend

Last but not least, a few minor details such as a worker pool and the name of a stack.

image7

define behavior

image6

name stack

<h3></h3>
<h3>Step 2. Integration with GCP</h3>
Once our stack is created, we can proceed to integrate it with our Google Cloud Platform project.

image5

gcp integration

Edit your stack and go to the “Integrations” tab. Select Google Cloud Platform.

image4

Google Cloud Platform

Generate a service account that will be used with this particular stack.
Now, head to the Google Cloud Platform console and into the Identity and Access Management (IAM) tab.

image3-5

Access Management (IAM)

Add the appropriate permissions to the service account generated in the previous step. For the sake of our exercise, we will grant it Owner permissions (this permission is appropriate only for tutorial purposes. (To avoid issues and risks associated with the possibility of hostile permission escalation, never do this on real environments.)

image2

gcp permissions

Once this is done, you can simply click on the “Trigger” button in order to trigger a new deployment.

image1

gcp new deployment

Looking at all the headings and code that we wrote today, it may seem complicated and hard, but it really isn’t. If you have planned what has to be done, and if you read the descriptions added to properties that you want to use, you will see that it will begin to arrange itself into a coherent whole.
Google Cloud Platform is big and has a lot of components, which might be intimidating. To avoid losing your head, I recommend sticking to the KISS principle.
Now that we’ve come to the end of this tutorial, you should have a working WordPress page and a bunch of scripts. As you have probably noticed, your site is not secured by an SSL certificate. That is correct—this will be your homework, dear reader. Take what you have learned today and build on it!

Build more complex workflows based on Terraform using policy as code, programmatic configuration, context sharing, drift detection, resource visualization and many more.

Initialize/ plan/ apply your IaC, manage modules, state, and more. 

frame-8479

Frame 8479

5 Ways to Manage Terraform at Scale - Best Practices

Alternative to Atlantis – Spacelift

Importing Existing Infrastructure into Terraform - Step by Step

Learn how to get started with Terraform on Google Cloud Platform (GCP).  Terraform-Google cloud storage example.

Dawid Butrykowski

How to Get Started with Terraform on GCP – Tutorial

Get the newsletter

No recent posts