Terraform Plan Google Cloud Platform Plan: 7 to Add

GCP VPC & Compute Architecture

Execution plan topology for project my-devops-journey-502420. Multi-subnet custom VPC with isolated compute instances and zero-trust IAP secure ingress.

2 VMs (e2-micro)
2 Subnets
2 Firewall Rules
Custom VPC Network
🌐

Custom subnet topology spanning two isolated CIDR blocks in us-central1.

lab-vpc 10.10.0.0/16
Debian 12 Instances
⚡

Lightweight e2-micro Debian instances assigned per subnet in zone us-central1-a.

vm-a vm-b Output: vm_b_ip
Zero-Trust IAP SSH
🛡️

Bastion-less secure tunneling over port 22 restricted strictly to Google Cloud IAP CIDR.

TCP:22 35.235.240.0/20
Internal ICMP Ping
🔄

Cross-subnet ICMP protocol enabled across the VPC CIDR for low-latency network health checks.

ICMP Subnet-A ↔ Subnet-B
💡 Click any element in the diagram to inspect properties
☁️ GCP PROJECT: my-devops-journey-502420 | VPC: lab-vpc 📍 REGION: us-central1 (Zone: us-central1-a) 🌐 subnet-a • 10.10.0.0/24 🌐 subnet-b • 10.10.1.0/24 🛡️ allow-iap-ssh (TCP 22) Source: 35.235.240.0/20 (IAP Tunnel) 🔄 allow-internal-icmp (ICMP) Source: 10.10.0.0/16 (VPC Supernet) ⚡ vm-a (e2-micro) Debian 12 • Zone us-central1-a ⚡ vm-b (e2-micro) Debian 12 • Zone us-central1-a 📡 ICMP Ping 💎 Output: vm_b_ip (Dynamic)

📋 Terraform Execution Plan Matrix

Ready for terraform apply
Action Resource Type Identifier Primary Configuration • Scope
+ CREATE google_compute_network lab-vpc Custom mode (auto_create_subnetworks = false)
+ CREATE google_compute_subnetwork subnet-a CIDR: 10.10.0.0/24 • Region: us-central1
+ CREATE google_compute_subnetwork subnet-b CIDR: 10.10.1.0/24 • Region: us-central1
+ CREATE google_compute_instance vm-a e2-micro • Debian 12 • Subnet-A • us-central1-a
+ CREATE google_compute_instance vm-b e2-micro • Debian 12 • Subnet-B • us-central1-a
+ CREATE google_compute_firewall allow-iap-ssh Ingress TCP 22 • Source: 35.235.240.0/20 (IAP)
+ CREATE google_compute_firewall allow-internal-icmp Ingress ICMP • Source: 10.10.0.0/16 (VPC Supernet)