Google Cloud

1. Google Cloud Fundamentals

• Regions and Zones: GCP resources are organized into regions and zones. A region is a specific geographical location, and each region has one or more isolated locations known as zones. Resources can be deployed within a zone or across multiple zones for high availability.
  • Example: us-central1 (region), us-central1-a (zone).
• Projects: GCP resources are organized under projects. A project serves as a container for billing, APIs, and other settings. Each project has:
  • Project ID: Unique identifier for the project.
  • Project Number: A unique number assigned automatically by GCP.
  • Project Name: A user-friendly name that you can change.
• Billing Accounts: Google Cloud offers a pay-as-you-go model. Billing accounts are linked to projects, and costs are tracked at the project level.
• Service Accounts: Service accounts allow applications to authenticate and interact with GCP services. They are used to run API calls and perform actions on behalf of an application, service, or VM.

• Principals: Can be users, service accounts, or groups that interact with GCP resources.
• Roles: Define a collection of permissions.
  • Primitive Roles: Basic roles like Owner, Editor, and Viewer.
  • Predefined Roles: More granular roles specific to a service (e.g., Compute Instance Admin).
  • Custom Roles: You can create custom roles to provide specific permissions.

2. GCP Compute Services

• VM Instances: GCE allows you to deploy virtual machines with a variety of operating systems. You can configure the CPU, memory, and storage capacity.
• Instance Templates: Predefined configurations that allow you to quickly launch VMs with specific settings.
• Preemptible VMs: Cost-effective instances that are short-lived and can be terminated by GCP at any time (ideal for batch jobs).

• Create a VM Instance (CLI):

gcloud compute instances create my-instance \
    --zone=us-central1-a \
    --machine-type=n1-standard-1 \
    --image-family=debian-9 \
    --image-project=debian-cloud
 

gcloud compute ssh my-instance --zone=us-central1-a
 

gcloud compute instances stop my-instance --zone=us-central1-a
gcloud compute instances start my-instance --zone=us-central1-a
 

gcloud container clusters create my-cluster \
    --zone us-central1-a \
    --num-nodes=3
 

kubectl create deployment nginx --image=nginx
kubectl expose deployment nginx --port=80 --type=LoadBalancer
 

kubectl scale deployment nginx --replicas=5
 

gcloud app deploy
 

gcloud app logs read
 

gcloud app browse
 

gcloud functions deploy my-function \
   --runtime nodejs10 \
   --trigger-http \
   --allow-unauthenticated
 

gcloud functions call my-function --data '{"message":"Hello, world!"}'
 

gsutil mb gs://my-bucket
 

gsutil cp my-file.txt gs://my-bucket
 

gsutil ls gs://my-bucket
 

gsutil acl ch -u AllUsers:R gs://my-bucket/my-file.txt
 

gcloud compute disks create my-disk --size=200GB --zone=us-central1-a
 

gcloud compute instances attach-disk my-instance --disk=my-disk --zone=us-central1-a
 

gcloud filestore instances create my-filestore \
    --zone=us-central1-a \
    --tier=STANDARD \
    --file-share=name="my-share",capacity=1TB \
    --network=name="default"
 

sudo mount -o nfsvers=4.1 -t nfs [IP_ADDRESS]:/my-share /mnt/my-mount
 

gcloud compute networks create my-vpc --subnet-mode=custom
 

gcloud compute networks subnets create my-subnet \
    --network=my-vpc \
    --region=us-central1 \
    --range=10.0.1.0/24
 

gcloud compute firewall-rules create allow-ssh \
    --network=my-vpc \
    --allow=tcp:22 \
    --source-ranges=0.0.0.0/0
 

gcloud compute backend-services create my-backend \
    --protocol=HTTP --port-name=http --global

gcloud compute url-maps create my-map --default-service=my-backend

gcloud compute target-http-proxies create my-proxy \
    --url-map=my-map

gcloud compute forwarding-rules create my-forwarding-rule \
    --global --target-http-proxy=my-proxy --ports=80
 

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-f1-micro --region=us-central1
 

gcloud sql connect my-instance --user=root
 

gcloud spanner instances create my-instance \
    --config=regional-us-central1 \
    --nodes=1 \
    --description="My Spanner Instance"
 

gcloud firestore databases create --region=us-central
 

db.collection('users').doc('alovelace').set({
    first: 'Ada',
    last: 'Lovelace',
    born: 1815
});
 

gcloud beta monitoring policies create \
    --display-name="Instance CPU Monitoring" \
    --conditions="[{
        'displayName': 'High CPU Usage',
        'conditionThreshold': {
            'filter': 'metric.type="compute.googleapis.com/instance/cpu/utilization" resource.type="gce_instance"',
            'comparison': 'COMPARISON_GT',
            'thresholdValue': 0.9
        }
    }]"
 

gcloud logging read "resource.type=gce_instance AND logName=projects/my-project/logs/syslog" --limit 5
 

gcloud logging sinks create my-sink storage.googleapis.com/my-bucket --log-filter='logName="projects/my-project/logs/syslog"'
 

gcloud compute security-policies create my-policy --description="My Security Policy"
gcloud compute security-policies rules create 1000 \
    --security-policy=my-policy \
    --expression="origin.ip == '1.2.3.4'" \
    --action="allow"