This directory contains Terraform configuration for a foundational environment on Google Cloud.
It includes a subset of resources configured via the setup checklist and is based on the security foundations blueprint.
To run the commands described in this document, you need the following:
- Install the Google Cloud SDK version 319.0.0 or later
- Install Terraform version 0.13.7 or later.
- Set up a Google Cloud organization.
- Set up a Google Cloud billing account.
- For the user who will run the Terraform install, grant the
following roles:
- The
roles/billing.admin
role on the billing account. - The
roles/resourcemanager.organizationAdmin
role on the Google Cloud organization. - The
roles/resourcemanager.folderCreator
role on the Google Cloud organization. - The
roles/resourcemanager.projectCreator
role on the Google Cloud organization.
- The
- Run
terraform init
. - Run
terraform plan
and review the output. - Run
terraform apply
.
Once you have the basic foundation deployed, you should explore:
- Building an advanced foundation using the security blueprint
- Automatically deploying Terraform with Cloud Build