Terraform Plan Google Cloud Platform Plan: 10 to Add

GCP VPC Peering & Compute Architecture

Execution plan topology for project my-devops-journey-502420. Multi-VPC mesh connected via bidirectional VPC Peering, with isolated subnets and Google Cloud IAP secure bastion-less ingress.

2 VPC Networks
2 VMs (e2-micro)
2 VPC Peerings
Dual Custom VPCs
🌐

Fully isolated custom VPC networks with dedicated subnets spanning us-central1.

vpc-a: 10.10.0.0/24 vpc-b: 10.20.0.0/24
VPC Peering Fabric
🔗

Direct Google backbone routing connecting vpc-a and vpc-b with zero bandwidth bottlenecks.

a-to-b b-to-a IPV4_ONLY
Debian 12 Instances
⚡

Lightweight e2-micro compute nodes in zone us-central1-a with dynamic IP outputs.

vm-a vm-b Outputs: vm_a_ip, vm_b_ip
Zero-Trust IAP & Ping
🛡️

Strict firewall rules permitting IAP TCP:22 SSH tunneling and inter-VPC ICMP health checks.

TCP:22 (IAP) ICMP (Cross-VPC)
💡 Click any element in the diagram to inspect properties
🛡️ Google Cloud IAP Proxy (35.235.240.0/20) Zero-Trust TCP:22 SSH Tunneling ☁️ VPC Network: vpc-a 🛡️ Firewall: vpc-a-allow Allow TCP:22, ICMP from 10.20.0.0/24 & IAP 🌐 subnet-a • 10.10.0.0/24 (us-central1) ⚡ vm-a (e2-micro) Debian 12 • us-central1-a NIC: subnet-a (IP: 10.10.0.x) 💎 Output: vm_a_ip 📡 Accepts SSH (22) & Ping (ICMP) ☁️ VPC Network: vpc-b 🛡️ Firewall: vpc-b-allow Allow TCP:22, ICMP from 10.10.0.0/24 & IAP 🌐 subnet-b • 10.20.0.0/24 (us-central1) ⚡ vm-b (e2-micro) Debian 12 • us-central1-a NIC: subnet-b (IP: 10.20.0.x) 💎 Output: vm_b_ip 📡 Accepts SSH (22) & Ping (ICMP) 🔗 VPC PEERING a-to-b • b-to-a Private Mesh Route

📋 Terraform Execution Plan Matrix

Ready for terraform apply
Action Resource Type Identifier Primary Configuration • Scope
+ CREATE google_compute_network network-a (vpc-a) Custom mode (auto_create_subnetworks = false)
+ CREATE google_compute_network network-b (vpc-b) Custom mode (auto_create_subnetworks = false)
+ CREATE google_compute_subnetwork subnet-a CIDR: 10.10.0.0/24 • Region: us-central1 • Network: vpc-a
+ CREATE google_compute_subnetwork subnet-b CIDR: 10.20.0.0/24 • Region: us-central1 • Network: vpc-b
+ CREATE google_compute_network_peering a_to_b Peering vpc-a → vpc-b • export_subnet_routes = true
+ CREATE google_compute_network_peering b_to_a Peering vpc-b → vpc-a • export_subnet_routes = true
+ CREATE google_compute_instance a (vm-a) e2-micro • Debian 12 • Subnet-A • Zone: us-central1-a
+ CREATE google_compute_instance b (vm-b) e2-micro • Debian 12 • Subnet-B • Zone: us-central1-a
+ CREATE google_compute_firewall a_allow (vpc-a-allow) Ingress TCP:22, ICMP • Sources: 10.20.0.0/24 (Subnet B), 35.235.240.0/20
+ CREATE google_compute_firewall b_allow (vpc-b-allow) Ingress TCP:22, ICMP • Sources: 10.10.0.0/24 (Subnet A), 35.235.240.0/20