This directory contains Terraform configuration for a foundational environment on Google Cloud.
It includes a subset of resources configured via the setup checklist and is based on the security foundations blueprint.
To run the commands described in this document, you need the following:
- Install the Google Cloud SDK version 319.0.0 or later
- Install Terraform version 0.13.7 or later.
- Set up a Google Cloud organization.
- Set up a Google Cloud billing account.
- For the user who will run the Terraform install, grant the
following roles:
- The
roles/billing.adminrole on the billing account. - The
roles/resourcemanager.organizationAdminrole on the Google Cloud organization. - The
roles/resourcemanager.folderCreatorrole on the Google Cloud organization. - The
roles/resourcemanager.projectCreatorrole on the Google Cloud organization.
- The
- Run
terraform init. - Run
terraform planand review the output. - Run
terraform apply.
Once you have the basic foundation deployed, you should explore:
- Building an advanced foundation using the security blueprint
- Automatically deploying Terraform with Cloud Build