Terraform for Google Cloud: Learn Infrastructure as Code

Explore a Google Cloud Platform review with key services and resources used with Terraform, highlighting Compute Engine and other essentials for Terraform on GCP.

Set up your Google Cloud account with free credits and tour the console, the home base for managing projects, resources, and services, including Cloud Shell for browser-based infrastructure management.

Explore Google Cloud identity and access management, defining who can act on which resources, with roles as privileges bound to people, groups, or services within a hierarchical organization.

Explore how Google Cloud organizes resources from the organization to folders, projects, and resources, and manage access with IAM roles and policy inheritance.

See how service accounts authenticate apps on Google Cloud using public-private RSA key pairs. Distinguish user managed, default, and Google managed service accounts, with role bindings and unique project-based emails.

Explore the Compute Engine basics, including persistent and local SSD storage, boot images and startup scripts, and how scaling out via virtual networks compares to upgrading a single VM.

Create a Google Cloud Compute Engine virtual machine, install nginx, and expose a simple web page via the external ip address after enabling http/https firewall rules.

Explore how Google Cloud's virtual private cloud creates software-defined networks inside projects, linking subnets across regions and zones to control internal and external access with firewall rules.

Explore how Google Cloud networks are global while subnets are regional, and how IP ranges, CIDR blocks, firewall rules, and internal versus external IPs govern traffic.

Google Cloud storage concepts, including buckets and objects, storage classes from standard to archive, access controls, versioning, lifecycle management, and transfer options for scalable unstructured data.

Learn to create a cloud storage bucket, upload and download an image, share it via a public link, organize with folders, and delete objects and the bucket.

Discover Google Kubernetes Engine (GKE) as a fully managed layer on Google Cloud that deploys and manages Kubernetes for containerised applications, with standard and autopilot modes.

Explore the Google Kubernetes Engine architecture, including the control plane, cube API server, TCD database, scheduler, controller manager, and cube cloud manager, plus pods and namespaces.

Learn to set up a Google Cloud project, enable Kubernetes Engine and Artifact Registry, deploy a hello app to GKE, expose via a load balancer, and test.

Learn infrastructure as code using Terraform on Google Cloud. Explore how it configures VPC, subnets, firewall, compute, storage, and databases like Cloud SQL, Spanner, and BigQuery.

Learn how configuration management and provisioning tools like Ansible and Terraform automate infrastructure on GCP, balancing mutable versus immutable infrastructure and declarative versus procedural approaches.

Terraform enables infrastructure as code to provision and manage cloud resources, including Google Cloud compute instances, using declarative configurations and immutable, repeatable deployments.

Install Terraform on macOS using Homebrew or manual download, verify the installation, and place the binary in your PATH for both amd64 and arm64 systems.

Learn to create a Google Cloud Compute Engine instance with Terraform using a configuration file, following six steps: set up the project, enable APIs, authenticate, write config, apply, destroy VM.

Set up a Google Cloud project and understand how organizations, folders, and projects structure resources, then enable the Compute Engine API to begin managing resources with infrastructure as code.

Authenticate Terraform with Google Cloud by creating a service account, granting roles, downloading a key, and configuring authentication via the Google application credentials environment variable or a file path.

Configure a Google Cloud compute engine with a Terraform file, including provider, project, zone, credentials, and a Debian boot disk with Nginx startup script; manage with init, plan, apply, destroy.

Discover the basics of Terraform language syntax, including blocks, labels, arguments, and nested blocks, to read and write simple configurations for Google Cloud resources.

Declare required providers and provider blocks with source and optional version in Terraform, and understand Terraform core versus plugins architecture, including how init installs provider plugins.

Declare resources in Terraform to manage infrastructure objects, using resource blocks for unique objects like Google Compute instances, and perform CRUD operations via provider plugins.

Learn how to use input variables, output values, and local values to parameterize a Terraform Google Cloud config, refactor hard-coded values, and manage staging and production with tfvars files.

Learn how to use Terraform output values to print Google Compute instance details in the CLI, including the instance ID and CPU platform, and organize outputs in an outputs.tf file.

Define local values in Terraform and replace hardcoded labels with a local block, then reference locals in compute instances to set application name and environment consistently.

Initialize your Terraform working directory, configure modules and providers, and set up a remote backend, then use plan to preview changes and apply or destroy resources.

Preview infrastructure changes with Terraform plan by refreshing state, detecting drift, and comparing it to your configuration to generate an execution plan before applying the changes.

Terraform apply generates an execution plan and, after review, applies changes to Google Cloud storage resources, creating two buckets named First win and Second win.

Explore essential Terraform commands for Google Cloud, including init, plan, apply, and destroy; learn how show and refresh help verify and synchronize state with remote resources.

Learn how Terraform state tracks Google Compute instances, what the state file records, and how remote backends like Google Cloud Storage enable locking and encryption for collaborative infrastructure as code.

Configure Google Cloud Storage as a remote backend for Terraform state by enabling the storage API, granting the Terraform service account storage admin, and creating a unique bucket.

Learn how Terraform modules encapsulate resources into reusable components for development, testing, and production. Discover how modules enable consistency, versioning, and easier updates through reusable design and automated testing.

Apply a module example to build a home loan microservice infrastructure on Google Cloud using Terraform, provisioning Google Kubernetes Engine, memory store, and cloud storage.

Configure a Google Cloud network with Terraform by creating a VPC and subnet, setting up providers and credentials, then enable GKE, Memory Store, and Cloud Storage APIs.

Provision a Google Kubernetes Engine cluster and a node pool with Terraform, using variables for cluster name, application name, and environment across three zones, then proceed to memory store.

Create a redis-based memorystore resource in Google Cloud using Terraform, defining memory storage name, size, and an authorized network, and select basic or standard (highly available) tier before applying.

Create a Google storage bucket with a name, location, force destroy true, and lifecycle rules; apply Terraform to provision cloud storage staging for a microservices architecture.

Learn to manage production and staging environments in Terraform by using modules to centralize resources and propagate updates across all environments.

Refactor your GCP Terraform setup into reusable modules to provision memory store, cloud storage, and a Google container cluster across environments, with variables for VPC, subnet, and deployment specifics.

Refactor your infrastructure by using a reusable module for staging and production, wiring environment variables and deploying GKE, memory store, and cloud storage via Terraform init, plan, and apply.

Learn to move Terraform modules from local folders to a GitHub source repository, configure remote modules, and manage production and staging environments with versioned GitHub tags.

Discover versioning Terraform modules in Google Cloud by tagging code, using specific module versions in staging and production, and understanding modules as architectural abstractions across layers.

Explore using terraform for_each to create multiple Google Compute Engine instances from one resource, first with a set of names, then a map of objects for vm type and zone.

Learn how to use for_each with modules in Terraform to create multiple Google Compute Engine instances via module blocks.

Learn how to use Terraform dynamic blocks to create multiple firewall allow rules within a single google compute firewall resource, replacing repeated blocks with a map-driven dynamic meta-argument.

Learn to build production-ready Google Cloud infrastructure with reusable Terraform scripts. Create a VPC, two subnets, firewalls, and a f1-micro compute engine with Redis and Apache, using a static IP.

Learn to set up a Google Cloud Terraform project by enabling APIs, creating a service account, configuring a VPC with two subnets, and running Terraform init, plan, and apply.

Build a vpc with west and east subnets, configure firewall rules for http, https, and ssh, and deploy compute instances with startup scripts installing redis and apache.

Refactor your Google Cloud Terraform project into reusable modules for compute engines and static IPs, wiring variables, root configurations, and outputs, and prepare for for_each in the next lab.

Refactor Terraform configuration to remove module duplication by using for_each and locals, enabling multiple affordable compute engine resources across west and east regions with static IPs and VPCs.

This lab demonstrates managing three GCP environments—dev, staging, and production—using Terraform workspaces and per-environment variable files to maintain separate state files while reusing a single configuration.