/Gooogle-Cloud-Challenge

Set Up and Configure a Cloud Environment in Google Cloud: Challenge Lab # GSP321

Remember set project id and zone before do anything

TASK 1: Create development VPC manually

gcloud compute networks create griffin-dev-vpc --subnet-mode custom

gcloud compute networks subnets create griffin-dev-wp --network=griffin-dev-vpc --region us-east1 --range=192.168.16.0/20

gcloud compute networks subnets create griffin-dev-mgmt --network=griffin-dev-vpc --region us-east1 --range=192.168.32.0/20

TASK 2: Create production VPC manually

gsutil cp -r gs://cloud-training/gsp321/dm .


cd dm

sed -i s/SET_REGION/us-east1/g prod-network.yaml

gcloud deployment-manager deployments create prod-network \
 --config=prod-network.yaml

TASK 3: Create bastion host

gcloud compute instances create bastion --network-interface=network=griffin-dev-vpc,subnet=griffin-dev-mgmt --network-interface=network=griffin-prod-vpc,subnet=griffin-prod-mgmt --tags=ssh --zone=us-east1-b

gcloud compute firewall-rules create fw-ssh-dev --source-ranges=0.0.0.0/0 --target-tags ssh --allow=tcp:22 --network=griffin-dev-vpc

gcloud compute firewall-rules create fw-ssh-prod --source-ranges=0.0.0.0/0 --target-tags ssh --allow=tcp:22 --network=griffin-prod-vpc

TASK 4: Create and configure Cloud SQL Instance

gcloud sql instances create griffin-dev-db --root-password password --region=us-east1

gcloud sql connect griffin-dev-db

Remember username and password you created for later

Enter mysql

CREATE DATABASE wordpress;

GRANT ALL PRIVILEGES ON wordpress.* TO "wp_user"@"%"
 IDENTIFIED BY "stormwind_rules";

FLUSH PRIVILEGES;

exit

TASK 5: Create Kubernetes cluster

gcloud container clusters create griffin-dev \
 --network griffin-dev-vpc \
 --subnetwork griffin-dev-wp \
 --machine-type n1-standard-4 \
 --num-nodes 2 \
 --zone us-east1-b

this step take you about 5-8 minutes. Be patience

gcloud container clusters get-credentials griffin-dev --zone us-east1-b

TASK 6, 7

gsutil cp -r gs://cloud-training/gsp321/wp-k8s .

cd wp-k8s

change your username and password you created in step 4

sed -i s/username_goes_here/wp_user/g wp-env.yaml

sed -i s/password_goes_here/stormwind_rules/g wp-env.yaml

kubectl create -f wp-env.yaml

gcloud iam service-accounts keys create key.json --iam-account=cloud-sql-proxy@$GOOGLE_CLOUD_PROJECT.iam.gserviceaccount.com

kubectl create secret generic cloudsql-instance-credentials --from-file key.json

I=$(gcloud sql instances describe griffin-dev-db --format="value(connectionName)")

sed -i s/YOUR_SQL_INSTANCE/$I/g wp-deployment.yaml

kubectl create -f wp-deployment.yaml

kubectl create -f wp-service.yaml

Using UI for both task so no code in here

TASK 8: Enable monitoring

Navigation Menu -> Kubernetes Engine -> Services and Ingress -> Copy Endpoint's address.

Navigation Menu -> Monitoring -> Uptime Checks -> + CREATE UPTIME CHECK Title : Wordpress Uptime // Next -> Target Hostname : {Endpoint's address} (without http...) Path : / // Next -> Next -> Create

TASK 9: Provide access for an additional engineer

// Navigation Menu -> IAM & Admin -> IAM -> ADD New Member : {Username 2 from Lab instruction page} Role : Project -> Editor