GCP provider setup in Terraform - Commands & Configuration

Introduction

When you want to create and manage Google Cloud resources using Terraform, you need to set up the GCP provider. This setup connects Terraform to your Google Cloud account so it can create, update, or delete resources for you.

When you want to automate creating virtual machines in Google Cloud.

When you need to manage Google Cloud storage buckets with code.

When you want to keep your cloud infrastructure consistent and repeatable.

When you want to track changes to your Google Cloud setup in version control.

When you want to quickly recreate your Google Cloud environment in another project or region.

Config File - main.tf

main.tf

terraform {
  required_providers {
    google = {
      source  = "hashicorp/google"
      version = ">= 4.0.0"
    }
  }
  required_version = ">= 1.3.0"
}

provider "google" {
  project     = "example-project-123456"
  region      = "us-central1"
  credentials = file("./account-key.json")
}

This file tells Terraform to use the Google Cloud provider plugin version 4.0.0 or newer. It sets the Google Cloud project ID and region where resources will be created. The credentials key points to a JSON file with your service account key, which allows Terraform to access your Google Cloud account securely.

Commands

This command downloads the Google Cloud provider plugin and prepares Terraform to work with your configuration.

Terminal

terraform init

Expected Output

Initializing the backend...



Initializing provider plugins...

- Finding hashicorp/google versions matching ">= 4.0.0"...

- Installing hashicorp/google v4.50.0...

- Installed hashicorp/google v4.50.0 (signed by HashiCorp)



Terraform has been successfully initialized!



You may now begin working with Terraform. Try running "terraform plan" to see any changes that are required for your infrastructure.

This command shows what Terraform will do when you apply your configuration. It checks your setup and the current state of your Google Cloud resources.

Terminal

terraform plan

Expected Output

Refreshing Terraform state in-memory prior to plan...



No changes. Infrastructure is up-to-date.



This means that Terraform did not detect any differences between your configuration and the real infrastructure.

Key Concept

If you remember nothing else from this pattern, remember: the provider block connects Terraform to your Google Cloud account so it can manage resources there.

Common Mistakes

Not providing the correct path to the service account JSON file in the credentials field.

Terraform cannot authenticate to Google Cloud without valid credentials, so it will fail to create or manage resources.

Make sure the credentials path points to a valid JSON key file downloaded from your Google Cloud service account.

Using the wrong project ID or region in the provider block.

Terraform will try to create resources in a project or region that does not exist or that you do not have access to, causing errors.

Double-check your Google Cloud project ID and region values before running Terraform commands.

Summary

Create a main.tf file with the Google Cloud provider block including project, region, and credentials.

Run 'terraform init' to download the provider plugin and prepare Terraform.

Run 'terraform plan' to verify Terraform can connect and see what changes it will make.

Practice

1. What is the main purpose of the provider "google" block in a Terraform configuration for GCP?

easy

A. To define the virtual machine size in GCP

B. To create a new Google Cloud project automatically

C. To connect Terraform to your Google Cloud project

D. To set up billing information for Google Cloud

Solution

1. Step 1: Understand the role of the provider block

   The provider "google" block tells Terraform which cloud service to connect to and how.

2. Step 2: Identify what the provider configures

   It sets the connection details like project ID, region, and credentials to manage resources in GCP.

3. Final Answer:

   To connect Terraform to your Google Cloud project -> Option C

4. Quick Check:

   Provider block = Connect to GCP [OK]

Hint: Provider block always connects Terraform to the cloud service [OK]

Common Mistakes:

• Thinking provider creates resources directly
• Confusing provider with resource definitions
• Assuming provider sets billing or VM size

2. Which of the following is the correct syntax to specify the project ID in the GCP provider block in Terraform?

easy

A. project = "my-project-123"

B. project_id = "my-project-123"

C. projectName = "my-project-123"

D. projectID = "my-project-123"

Solution

1. Step 1: Recall the correct attribute name for project ID

   The official Terraform GCP provider uses project to specify the project.

2. Step 2: Check the syntax format

   The attribute is project = "my-project-123".

3. Final Answer:

   project = "my-project-123" -> Option A

4. Quick Check:

   Correct attribute is project [OK]

Hint: Use project [OK]

Common Mistakes:

• Using project_id instead of project
• Using camelCase like projectName or projectID
• Missing quotes around the project ID string

3. Given this Terraform provider block for GCP:

provider "google" {
  project     = "my-project"
  region      = "us-central1"
  credentials = file("account.json")
}

What will happen when you run terraform init?

medium

A. Terraform throws an error because the attribute project is incorrect

B. Terraform initializes and connects to the specified GCP project using the credentials file

C. Terraform ignores the credentials file and uses default credentials

D. Terraform creates a new GCP project named "my-project" automatically

Solution

1. Step 1: Check attribute names in the provider block

   The correct attribute for project ID is project, which is used here.

2. Step 2: Understand Terraform behavior on correct attributes

   Terraform initializes successfully and configures the provider using the credentials file.

3. Final Answer:

   Terraform initializes and connects to the specified GCP project using the credentials file -> Option B

4. Quick Check:

   Correct attributes allow successful init [OK]

Hint: Use exact attribute names like project to ensure smooth init [OK]

Common Mistakes:

• Assuming project is incorrect (it's the right attribute)
• Thinking Terraform auto-creates projects
• Believing init ignores credentials

4. You wrote this provider block:

provider "google" {
  project = "my-project"
  region = "us-central1"
  credentials = file("wrong-path.json")
}

When running terraform plan, you get a credentials error. What is the most likely cause?

medium

A. The credentials file path is incorrect or file does not exist

B. The project is invalid format

C. The region value is not supported by GCP

D. Terraform requires credentials to be set as environment variables only

Solution

1. Step 1: Analyze the credentials attribute

   The credentials attribute expects a valid JSON file path with service account keys.

2. Step 2: Identify the error cause

   If the file path is wrong or file missing, Terraform cannot authenticate and throws an error.

3. Final Answer:

   The credentials file path is incorrect or file does not exist -> Option A

4. Quick Check:

   Wrong credentials file path causes auth error [OK]

Hint: Check credentials file path carefully to avoid auth errors [OK]

Common Mistakes:

• Assuming region errors cause credential failures
• Thinking project format causes credential errors
• Believing credentials must be environment variables only

5. You want to configure Terraform to manage resources in two different GCP projects within the same configuration. How should you set up the provider blocks?

hard

A. Set project dynamically inside resource blocks without provider aliases

B. Use a single provider block with a list of projects

C. Create two separate Terraform configurations for each project

D. Define two provider blocks with different aliases and specify project for each

Solution

1. Step 1: Understand multi-project management in Terraform

   Terraform supports multiple provider configurations using aliases to distinguish them.

2. Step 2: Configure providers with aliases and project

   Define two provider "google" blocks with different alias names and set project for each.

3. Step 3: Reference providers in resources

   Use provider = google.alias_name in resource blocks to specify which project to use.

4. Final Answer:

   Define two provider blocks with different aliases and specify project for each -> Option D

5. Quick Check:

   Multiple projects = multiple aliased providers [OK]

Hint: Use provider aliases to manage multiple GCP projects [OK]

Common Mistakes:

• Trying to list multiple projects in one provider
• Not using aliases and causing conflicts
• Splitting into separate configs unnecessarily