Update README

This commit is contained in:
Lorenzo Caggioni 2022-04-13 14:42:11 +02:00
parent f9d4c913c4
commit 9d5df771a3
2 changed files with 22 additions and 5 deletions

View File

@ -32,13 +32,30 @@ $ terraform apply
You should see the output of the Terraform script with resources created and some commands that you'll need in the following steps below.
TBC
## Move to real use case consideration
This implementation is intentionally minimal and easy to read. A real world use case should consider:
- Using a Shared VPC
- Using VPC-SC to mitigate data exfiltration
## Test your environment
We assume all those steps are run using a user listed on `data_eng_principals`. You can authenticate as the user using the following command:
```
$ gcloud init
$ gcloud auth application-default login
```
Below you can find commands to connect to the VM instance and Cloud SQL instance.
```
$ gcloud compute ssh sql-test --project PROJECT_ID --zone ZONE
sql-test:~$ cloud_sql_proxy -instances=CLOUDSQL_INSTANCE=tcp:5432
sql-test:~$ psql 'host=127.0.0.1 port=5432 sslmode=disable dbname=DATABASE user=USER'
```
You can find computed commands on the Terraform `demo_commands` output.
<!-- BEGIN TFDOC -->
## Variables

View File

@ -32,8 +32,8 @@ output "project_id" {
output "demo_commands" {
description = "Demo commands."
value = {
01 = "gcloud compute ssh ${module.test-vm.instance.name} --project ${module.project.name} --zone ${var.regions.primary}-b"
02 = "cloud_sql_proxy -instances=${module.db.connection_name}=tcp:5432 &"
03 = "psql 'host=127.0.0.1 port=5432 sslmode=disable dbname=${var.postgres_database} user=postgres'"
"01_ssh" = "gcloud compute ssh ${module.test-vm.instance.name} --project ${module.project.name} --zone ${var.regions.primary}-b"
"02_cloud_sql_proxy" = "cloud_sql_proxy -instances=${module.db.connection_name}=tcp:5432 &"
"03_psql" = "psql 'host=127.0.0.1 port=5432 sslmode=disable dbname=${var.postgres_database} user=postgres'"
}
}