diff --git a/looker_instance_basic/backing_file.tf b/looker_instance_basic/backing_file.tf new file mode 100644 index 00000000..c60b1199 --- /dev/null +++ b/looker_instance_basic/backing_file.tf @@ -0,0 +1,15 @@ +# This file has some scaffolding to make sure that names are unique and that +# a region and zone are selected when you try to create your Terraform resources. + +locals { + name_suffix = "${random_pet.suffix.id}" +} + +resource "random_pet" "suffix" { + length = 2 +} + +provider "google" { + region = "us-central1" + zone = "us-central1-c" +} diff --git a/looker_instance_basic/main.tf b/looker_instance_basic/main.tf new file mode 100644 index 00000000..19636934 --- /dev/null +++ b/looker_instance_basic/main.tf @@ -0,0 +1,9 @@ +resource "google_looker_instance" "looker-instance" { + name = "my-instance-${local.name_suffix}" + platform_edition = "LOOKER_CORE_STANDARD" + region = "us-central1" + oauth_config { + client_id = "my-client-id-${local.name_suffix}" + client_secret = "my-client-secret-${local.name_suffix}" + } +} diff --git a/looker_instance_basic/motd b/looker_instance_basic/motd new file mode 100644 index 00000000..45a906e8 --- /dev/null +++ b/looker_instance_basic/motd @@ -0,0 +1,7 @@ +=== + +These examples use real resources that will be billed to the +Google Cloud Platform project you use - so make sure that you +run "terraform destroy" before quitting! + +=== diff --git a/looker_instance_basic/tutorial.md b/looker_instance_basic/tutorial.md new file mode 100644 index 00000000..29277c92 --- /dev/null +++ b/looker_instance_basic/tutorial.md @@ -0,0 +1,79 @@ +# Looker Instance Basic - Terraform + +## Setup + + + +Welcome to Terraform in Google Cloud Shell! We need you to let us know what project you'd like to use with Terraform. + + + +Terraform provisions real GCP resources, so anything you create in this session will be billed against this project. + +## Terraforming! + +Let's use {{project-id}} with Terraform! Click the Cloud Shell icon below to copy the command +to your shell, and then run it from the shell by pressing Enter/Return. Terraform will pick up +the project name from the environment variable. + +```bash +export GOOGLE_CLOUD_PROJECT={{project-id}} +``` + +After that, let's get Terraform started. Run the following to pull in the providers. + +```bash +terraform init +``` + +With the providers downloaded and a project set, you're ready to use Terraform. Go ahead! + +```bash +terraform apply +``` + +Terraform will show you what it plans to do, and prompt you to accept. Type "yes" to accept the plan. + +```bash +yes +``` + + +## Post-Apply + +### Editing your config + +Now you've provisioned your resources in GCP! If you run a "plan", you should see no changes needed. + +```bash +terraform plan +``` + +So let's make a change! Try editing a number, or appending a value to the name in the editor. Then, +run a 'plan' again. + +```bash +terraform plan +``` + +Afterwards you can run an apply, which implicitly does a plan and shows you the intended changes +at the 'yes' prompt. + +```bash +terraform apply +``` + +```bash +yes +``` + +## Cleanup + +Run the following to remove the resources Terraform provisioned: + +```bash +terraform destroy +``` +```bash +yes +``` diff --git a/looker_instance_enterprise_full/backing_file.tf b/looker_instance_enterprise_full/backing_file.tf new file mode 100644 index 00000000..c60b1199 --- /dev/null +++ b/looker_instance_enterprise_full/backing_file.tf @@ -0,0 +1,15 @@ +# This file has some scaffolding to make sure that names are unique and that +# a region and zone are selected when you try to create your Terraform resources. + +locals { + name_suffix = "${random_pet.suffix.id}" +} + +resource "random_pet" "suffix" { + length = 2 +} + +provider "google" { + region = "us-central1" + zone = "us-central1-c" +} diff --git a/looker_instance_enterprise_full/main.tf b/looker_instance_enterprise_full/main.tf new file mode 100644 index 00000000..ef093fd1 --- /dev/null +++ b/looker_instance_enterprise_full/main.tf @@ -0,0 +1,76 @@ +resource "google_looker_instance" "looker-instance" { + name = "my-instance-${local.name_suffix}" + platform_edition = "LOOKER_CORE_ENTERPRISE_ANNUAL" + region = "us-central1" + private_ip_enabled = true + public_ip_enabled = false + reserved_range = "${google_compute_global_address.looker_range.name}" + consumer_network = google_compute_network.looker_network.id + admin_settings { + allowed_email_domains = ["google.com"] + } + encryption_config { + kms_key_name = "looker-kms-key-${local.name_suffix}" + } + maintenance_window { + day_of_week = "THURSDAY" + start_time { + hours = 22 + minutes = 0 + seconds = 0 + nanos = 0 + } + } + deny_maintenance_period { + start_date { + year = 2050 + month = 1 + day = 1 + } + end_date { + year = 2050 + month = 2 + day = 1 + } + time { + hours = 10 + minutes = 0 + seconds = 0 + nanos = 0 + } + } + oauth_config { + client_id = "my-client-id-${local.name_suffix}" + client_secret = "my-client-secret-${local.name_suffix}" + } + depends_on = [ + google_service_networking_connection.looker_vpc_connection + ] +} + +resource "google_service_networking_connection" "looker_vpc_connection" { + network = google_compute_network.looker_network.id + service = "servicenetworking.googleapis.com" + reserved_peering_ranges = [google_compute_global_address.looker_range.name] +} + +resource "google_compute_global_address" "looker_range" { + name = "looker-range-${local.name_suffix}" + purpose = "VPC_PEERING" + address_type = "INTERNAL" + prefix_length = 20 + network = google_compute_network.looker_network.id +} + +data "google_project" "project" {} + +resource "google_compute_network" "looker_network" { + name = "looker-network-${local.name_suffix}" + auto_create_subnetworks = false +} + +resource "google_kms_crypto_key_iam_member" "crypto_key" { + crypto_key_id = "looker-kms-key-${local.name_suffix}" + role = "roles/cloudkms.cryptoKeyEncrypterDecrypter" + member = "serviceAccount:service-${data.google_project.project.number}@gcp-sa-looker.iam.gserviceaccount.com" +} diff --git a/looker_instance_enterprise_full/motd b/looker_instance_enterprise_full/motd new file mode 100644 index 00000000..45a906e8 --- /dev/null +++ b/looker_instance_enterprise_full/motd @@ -0,0 +1,7 @@ +=== + +These examples use real resources that will be billed to the +Google Cloud Platform project you use - so make sure that you +run "terraform destroy" before quitting! + +=== diff --git a/looker_instance_enterprise_full/tutorial.md b/looker_instance_enterprise_full/tutorial.md new file mode 100644 index 00000000..482d9b69 --- /dev/null +++ b/looker_instance_enterprise_full/tutorial.md @@ -0,0 +1,79 @@ +# Looker Instance Enterprise Full - Terraform + +## Setup + + + +Welcome to Terraform in Google Cloud Shell! We need you to let us know what project you'd like to use with Terraform. + + + +Terraform provisions real GCP resources, so anything you create in this session will be billed against this project. + +## Terraforming! + +Let's use {{project-id}} with Terraform! Click the Cloud Shell icon below to copy the command +to your shell, and then run it from the shell by pressing Enter/Return. Terraform will pick up +the project name from the environment variable. + +```bash +export GOOGLE_CLOUD_PROJECT={{project-id}} +``` + +After that, let's get Terraform started. Run the following to pull in the providers. + +```bash +terraform init +``` + +With the providers downloaded and a project set, you're ready to use Terraform. Go ahead! + +```bash +terraform apply +``` + +Terraform will show you what it plans to do, and prompt you to accept. Type "yes" to accept the plan. + +```bash +yes +``` + + +## Post-Apply + +### Editing your config + +Now you've provisioned your resources in GCP! If you run a "plan", you should see no changes needed. + +```bash +terraform plan +``` + +So let's make a change! Try editing a number, or appending a value to the name in the editor. Then, +run a 'plan' again. + +```bash +terraform plan +``` + +Afterwards you can run an apply, which implicitly does a plan and shows you the intended changes +at the 'yes' prompt. + +```bash +terraform apply +``` + +```bash +yes +``` + +## Cleanup + +Run the following to remove the resources Terraform provisioned: + +```bash +terraform destroy +``` +```bash +yes +``` diff --git a/looker_instance_full/backing_file.tf b/looker_instance_full/backing_file.tf new file mode 100644 index 00000000..c60b1199 --- /dev/null +++ b/looker_instance_full/backing_file.tf @@ -0,0 +1,15 @@ +# This file has some scaffolding to make sure that names are unique and that +# a region and zone are selected when you try to create your Terraform resources. + +locals { + name_suffix = "${random_pet.suffix.id}" +} + +resource "random_pet" "suffix" { + length = 2 +} + +provider "google" { + region = "us-central1" + zone = "us-central1-c" +} diff --git a/looker_instance_full/main.tf b/looker_instance_full/main.tf new file mode 100644 index 00000000..ec7039d9 --- /dev/null +++ b/looker_instance_full/main.tf @@ -0,0 +1,46 @@ +resource "google_looker_instance" "looker-instance" { + name = "my-instance-${local.name_suffix}" + platform_edition = "LOOKER_CORE_STANDARD" + region = "us-central1" + public_ip_enabled = true + admin_settings { + allowed_email_domains = ["google.com"] + } + // User metadata config is only available when platform edition is LOOKER_CORE_STANDARD. + user_metadata { + additional_developer_user_count = 10 + additional_standard_user_count = 10 + additional_viewer_user_count = 10 + } + maintenance_window { + day_of_week = "THURSDAY" + start_time { + hours = 22 + minutes = 0 + seconds = 0 + nanos = 0 + } + } + deny_maintenance_period { + start_date { + year = 2050 + month = 1 + day = 1 + } + end_date { + year = 2050 + month = 2 + day = 1 + } + time { + hours = 10 + minutes = 0 + seconds = 0 + nanos = 0 + } + } + oauth_config { + client_id = "my-client-id-${local.name_suffix}" + client_secret = "my-client-secret-${local.name_suffix}" + } +} diff --git a/looker_instance_full/motd b/looker_instance_full/motd new file mode 100644 index 00000000..45a906e8 --- /dev/null +++ b/looker_instance_full/motd @@ -0,0 +1,7 @@ +=== + +These examples use real resources that will be billed to the +Google Cloud Platform project you use - so make sure that you +run "terraform destroy" before quitting! + +=== diff --git a/looker_instance_full/tutorial.md b/looker_instance_full/tutorial.md new file mode 100644 index 00000000..1fc9f9aa --- /dev/null +++ b/looker_instance_full/tutorial.md @@ -0,0 +1,79 @@ +# Looker Instance Full - Terraform + +## Setup + + + +Welcome to Terraform in Google Cloud Shell! We need you to let us know what project you'd like to use with Terraform. + + + +Terraform provisions real GCP resources, so anything you create in this session will be billed against this project. + +## Terraforming! + +Let's use {{project-id}} with Terraform! Click the Cloud Shell icon below to copy the command +to your shell, and then run it from the shell by pressing Enter/Return. Terraform will pick up +the project name from the environment variable. + +```bash +export GOOGLE_CLOUD_PROJECT={{project-id}} +``` + +After that, let's get Terraform started. Run the following to pull in the providers. + +```bash +terraform init +``` + +With the providers downloaded and a project set, you're ready to use Terraform. Go ahead! + +```bash +terraform apply +``` + +Terraform will show you what it plans to do, and prompt you to accept. Type "yes" to accept the plan. + +```bash +yes +``` + + +## Post-Apply + +### Editing your config + +Now you've provisioned your resources in GCP! If you run a "plan", you should see no changes needed. + +```bash +terraform plan +``` + +So let's make a change! Try editing a number, or appending a value to the name in the editor. Then, +run a 'plan' again. + +```bash +terraform plan +``` + +Afterwards you can run an apply, which implicitly does a plan and shows you the intended changes +at the 'yes' prompt. + +```bash +terraform apply +``` + +```bash +yes +``` + +## Cleanup + +Run the following to remove the resources Terraform provisioned: + +```bash +terraform destroy +``` +```bash +yes +```