Terraform Tutorial

Stay organized with collections Save and categorize content based on your preferences.

Setting up your environment

In this tutorial, you run commands in Cloud Shell. Cloud Shell is a shell environment with the Google Cloud CLI already installed, including the Google Cloud CLI, and with values already set for your current project. Cloud Shell can take several minutes to initialize:

Open Cloud Shell

Preparing the application

In Cloud Shell, perform the following steps:

1. Clone the sample app repository to your Cloud Shell instance:

   git clone https://github.com/GoogleCloudPlatform/nodejs-docs-samples.git

2. Change to the directory that contains the Cloud Run functions sample code examples:

   cd nodejs-docs-samples/functions

   The Node.js sample used in this tutorial is a basic "Hello World" HTTP function.

Create your main.tf file

1. In the nodejs-docs-samples/functions/ directory, create a main.tf file for the Terraform configuration:

   touch main.tf
   

2. Copy this Terraform configuration into your main.tf file:

   terraform {
     required_providers {
       google = {
         source  = "hashicorp/google"
         version = ">= 4.34.0"
       }
     }
   }
   
   resource "random_id" "default" {
     byte_length = 8
   }
   
   resource "google_storage_bucket" "default" {
     name                        = "${random_id.default.hex}-gcf-source" # Every bucket name must be globally unique
     location                    = "US"
     uniform_bucket_level_access = true
   }
   
   data "archive_file" "default" {
     type        = "zip"
     output_path = "/tmp/function-source.zip"
     source_dir  = "functions/hello-world/"
   }
   resource "google_storage_bucket_object" "object" {
     name   = "function-source.zip"
     bucket = google_storage_bucket.default.name
     source = data.archive_file.default.output_path # Add path to the zipped function source code
   }
   
   resource "google_cloudfunctions2_function" "default" {
     name        = "function-v2"
     location    = "us-central1"
     description = "a new function"
   
     build_config {
       runtime     = "nodejs22"
       entry_point = "helloHttp" # Set the entry point
       source {
         storage_source {
           bucket = google_storage_bucket.default.name
           object = google_storage_bucket_object.object.name
         }
       }
     }
   
     service_config {
       max_instance_count = 1
       available_memory   = "256M"
       timeout_seconds    = 60
     }
   }
   
   resource "google_cloud_run_service_iam_member" "member" {
     location = google_cloudfunctions2_function.default.location
     service  = google_cloudfunctions2_function.default.name
     role     = "roles/run.invoker"
     member   = "allUsers"
   }
   
   output "function_uri" {
     value = google_cloudfunctions2_function.default.service_config[0].uri
   }

3. Edit the main.tf file to make sure it has the correct values for the following items. You need to edit this file whenever your configuration changes (for example, to use a different runtime or deploy a different function):

   • Runtime: In this example, replace nodejs16 with the latest Node.js runtime nodejs22.
   • Function entry point: In this example, the function entry point is helloHttp.
   • Path to source directory: In this example change your source_dir to helloworld/helloworldHttp.
   • IAM member="allUsers" configuration won't succeed if your project is under a domain restriction organization policy that restricts granting IAM roles to the allUsers principal. Use with caution in production and consider a more restricted member list if possible.

Initialize Terraform

In the nodejs-docs-samples/functions/ directory containing your main.tf file, run this command to add the necessary plugins and build the .terraform directory:

terraform init

Apply the Terraform configuration

In the nodejs-docs-samples/functions/ directory containing your main.tf file, deploy the function by applying the configuration. When prompted, enter yes:

terraform apply

Test the function

1. When the function finishes deploying, take note of the URI property or find it using the following command:

   gcloud functions describe function-v2 --gen2 --region=us-central1 --format="value(serviceConfig.uri)"
   

2. Make a request to this URL to see your function's "Hello World" message. Note that the function is deployed requiring authentication. Therefore you must provide credentials in your request:

   curl -H "Authorization: Bearer $(gcloud auth print-identity-token)" YOUR_FUNCTION_URL

Clean up

After completing the tutorial, you can delete everything that you created so that you don't incur any further costs.

Terraform lets you remove all the resources defined in the configuration file by running the terraform destroy command in the nodejs-docs-samples/functions/ directory containing your main.tf file:

terraform destroy

Enter yes to allow Terraform to delete your resources.