cloud engineer
How to implement image family with Terraform in GCP.
Declare the machine image in terraform.tfvars.
image-family = "centos-7" |
image-family = "centos-7"
Declare data type for the machine image in maint.tf.
data "google_compute_image" "my_image" { family = var.image-family project = "your-project-id" } |
data "google_compute_image" "my_image" { family = var.image-family project = "your-project-id" }
In main.tf use “google_compute_instance” under boot disk section in main.tf.
boot_disk { initialize_params { image = data.google_compute_image.my_image.self_link } } |
boot_disk { initialize_params { image = data.google_compute_image.my_image.self_link } }
Here’s how to move a VM to another network.
Stop the VM.
gcloud compute instances stop server-name \ --zone=us-central1-c \ --project project-id |
gcloud compute instances stop server-name \ --zone=us-central1-c \ --project project-id
Migrate the VM. Use self link for network and subnetwork.
gcloud compute instances network-interfaces update server-name \ --zone=us-central1-c \ --network-interface=nic0 \ --network=your-network \ --subnetwork=your-sub-network \ --project project-id |
gcloud compute instances network-interfaces update server-name \ --zone=us-central1-c \ --network-interface=nic0 \ --network=your-network \ --subnetwork=your-sub-network \ --project project-id
Start the VM.
gcloud compute instances start server-name \ --zone=us-central1-c \ --project project-id |
gcloud compute instances start server-name \ --zone=us-central1-c \ --project project-id
There are a few issues that prop up every once in a while with gcloud compute ssh. gcloud compute ssh creates local user at first login. The account password has a default expiration of 90 days. If unable to login, you can try logging in as a different name (even a fictitious name) e.g. superheroes, etc. something unique.
gcloud compute ssh username@servername --zone us-central1-c --project project-id --internal-ip |
gcloud compute ssh username@servername --zone us-central1-c --project project-id --internal-ip
Once logged in, you can delete local users with expired passwords or perform other admin tasks.
userdel -r username |
userdel -r username
You can also try to run chage to adjust the password expiration.
chage -M 180 username (extends expiration from 90 to 180 days) |
chage -M 180 username (extends expiration from 90 to 180 days)
If you continue to have login issues, you can also delete Metadata SSH keys in both the instance and project levels.
Last resort you can use force key overwrite which will regenerate a new key and overwrite broken ssh keys.
gcloud compute ssh username@servername \ --force-key-file-overwrite \ --zone us-central1-c \ --project project-id \ --internal-ip |
gcloud compute ssh username@servername \ --force-key-file-overwrite \ --zone us-central1-c \ --project project-id \ --internal-ip
There’s a new beta command to rename a GCP VM.
You must stop instance first.
gcloud compute instances stop server-name \ --zone us-central1-c \ --project your-project-id |
gcloud compute instances stop server-name \ --zone us-central1-c \ --project your-project-id
Rename the instance.
gcloud beta compute instances set-name old-server-name \ --new-name=new-server-name \ --zone us-central1-c \ --project your-project-id |
gcloud beta compute instances set-name old-server-name \ --new-name=new-server-name \ --zone us-central1-c \ --project your-project-id
Start the instance.
gcloud compute instances start server-name \ --zone us-central1-c \ --project your-project-id |
gcloud compute instances start server-name \ --zone us-central1-c \ --project your-project-id
Login.
gcloud compute ssh server-name \ --zone us-central1-c \ --project your-project-id \ --internal-ip & |
gcloud compute ssh server-name \ --zone us-central1-c \ --project your-project-id \ --internal-ip &
If you are getting this return code [1] error, check if enable-oslogin metadata is set to TRUE in your VM.
Here’s the error when logging in.
gcloud compute ssh your-server-name \ --zone us-central1-a \ --project your-project-id \ --internal-ip & ERROR: (gcloud.compute.ssh) [C:\Program Files (x86)\Google\Cloud SDK\google-cloud-sdk\bin\sdk\plink.exe] exited with return code [1]. |
gcloud compute ssh your-server-name \ --zone us-central1-a \ --project your-project-id \ --internal-ip & ERROR: (gcloud.compute.ssh) [C:\Program Files (x86)\Google\Cloud SDK\google-cloud-sdk\bin\sdk\plink.exe] exited with return code [1].
Remove metadata.
gcloud compute instances remove-metadata your-server-name \ --keys=enable-oslogin \ --zone us-central1-a \ --project your-project-id Updated [https://www.googleapis.com/compute/v1/projects/your-project-id/zones/us-central1-a/instances/your-server-name]. |
gcloud compute instances remove-metadata your-server-name \ --keys=enable-oslogin \ --zone us-central1-a \ --project your-project-id Updated [https://www.googleapis.com/compute/v1/projects/your-project-id/zones/us-central1-a/instances/your-server-name].
Run gcloud ssh again.
gcloud compute ssh your-server-name \ --zone us-central1-a \ --project your-project-id \ --internal-ip & [1] 1257 |
gcloud compute ssh your-server-name \ --zone us-central1-a \ --project your-project-id \ --internal-ip & [1] 1257
This time it opens up a Putty session and you’re able to login.