Comment maîtriser Google Cloud Console en 2026

#!/bin/bash

# Dépendances Ubuntu/Debian
echo "Installation des dépendances..."
apt-get update -qq
apt-get install -y apt-transport-https ca-certificates gnupg curl

# Ajout de la clé Google Cloud
echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key --keyring /usr/share/keyrings/cloud.google.gpg add -

# Installation gcloud SDK v460+ (2026 stable)
apt-get update -qq && apt-get install -y google-cloud-cli google-cloud-cli-gke-gcloud-auth-plugin

gcloud version
echo "gcloud installé avec succès !"

#!/bin/bash

# Initialisation interactive (console-only pour scripts)
gcloud init --console-only

# Authentification avec compte service (recommandé prod)
# Remplacez par votre clé JSON téléchargée depuis Console > IAM > Service Accounts
export GOOGLE_APPLICATION_CREDENTIALS="/path/to/your-service-account-key.json"
gcloud auth activate-service-account --key-file=$GOOGLE_APPLICATION_CREDENTIALS

# Lister projets et en activer un (créez-en un si absent)
gcloud projects list
PROJECT_ID="mon-projet-expert-2026"
gcloud config set project $PROJECT_ID
gcloud config list

echo "Configuration terminée. Projet actif : $PROJECT_ID"

#!/bin/bash

PROJECT_ID="gc-expert-$RANDOM"

# Créer projet avec labels pour billing
PROJECT_NAME="Projet Expert 2026"
gcloud projects create $PROJECT_ID \
  --name="$PROJECT_NAME" \
  --labels=env=prod,cost-center=devops \
  --set-as-default

gcloud config set project $PROJECT_ID

# Activer APIs nécessaires
SERVICES=(compute.googleapis.com run.googleapis.com container.googleapis.com storage.googleapis.com cloudbilling.googleapis.com)
for service in "${SERVICES[@]}"; do
  gcloud services enable $service --project $PROJECT_ID
  echo "API $service activée."
done

# Créer service account IAM custom
SA_EMAIL="expert-sa@$PROJECT_ID.iam.gserviceaccount.com"
gcloud iam service-accounts create expert-sa \
  --description="SA pour déploiements experts" \
  --display-name="Expert Service Account"

# Attacher rôles granulaire (principe least privilege)
gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:$SA_EMAIL" \
  --role="roles/editor"
gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:$SA_EMAIL" \
  --role="roles/storage.admin"

# Générer clé JSON
KEY_FILE="${PROJECT_ID}-sa-key.json"
gcloud iam service-accounts keys create $KEY_FILE \
  --iam-account=$SA_EMAIL \
  --project $PROJECT_ID

export GOOGLE_APPLICATION_CREDENTIALS="$KEY_FILE"
echo "Projet $PROJECT_ID créé. Clé SA : $KEY_FILE"

#!/bin/bash

PROJECT_ID=$(gcloud config get-value project)
BUCKET_NAME="gs://${PROJECT_ID}-expert-bucket-$(date +%s)"

# Créer bucket multi-région avec versioning et lifecycle
BUCKET_LOCATION="EU"
gsutil mb -p $PROJECT_ID -l $BUCKET_LOCATION -b on -c STANDARD \
  --versioning $BUCKET_NAME

# Configurer lifecycle : supprimer objets >30j
cat > lifecycle.json << EOF
{
  "rule": [{
    "action": {"type": "Delete"},
    "condition": {"age": 30}
  }]
}
EOF
gsutil lifecycle set lifecycle.json $BUCKET_NAME

# Uploader fichier exemple et le rendre public
echo '{"message": "Hello GCP Expert 2026"}' > data.json
gsutil cp data.json $BUCKET_NAME/
gsutil acl ch -u AllUsers:R $BUCKET_NAME/data.json

gsutil ls -L $BUCKET_NAME/data.json
echo "Bucket créé : $BUCKET_NAME. Accès public : https://storage.googleapis.com${BUCKET_NAME#gs://}/data.json"

FROM node:20-alpine

WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production

COPY . .

EXPOSE 8080

CMD ["node", "server.js"]

HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD wget --no-verbose --tries=1 --spider http://localhost:8080/health || exit 1

#!/bin/bash

PROJECT_ID=$(gcloud config get-value project)
SERVICE_NAME="expert-app"
IMAGE_NAME="gcr.io/$PROJECT_ID/$SERVICE_NAME"

# Créer app Node simple
cat > server.js << 'EOF'
const express = require('express');
const app = express();

app.get('/health', (req, res) => res.send('OK'));
app.get('/', (req, res) => res.json({message: 'Expert Cloud Run 2026'}));

const port = process.env.PORT || 8080;
app.listen(port, () => console.log(`Listening on port ${port}`));
EOF

cat > package.json << 'EOF'
{
  "name": "expert-app",
  "version": "1.0.0",
  "dependencies": {
    "express": "^4.19.2"
  }
}
EOF

# Build et push
npm install
gcloud builds submit --tag $IMAGE_NAME

# Déployer avec autoscaling CPU 50-200%
gcloud run deploy $SERVICE_NAME \
  --image $IMAGE_NAME \
  --platform managed \
  --region europe-west1 \
  --allow-unauthenticated \
  --min-instances 0 \
  --max-instances 100 \
  --cpu 1 \
  --memory 512Mi \
  --set-env-vars="NODE_ENV=production" \
  --project $PROJECT_ID

URL=$(gcloud run services describe $SERVICE_NAME --platform=managed --region=europe-west1 --format='value(status.url)')
echo "Déployé ! URL: $URL"

terraform {
  required_providers {
    google = {
      source  = "hashicorp/google"
      version = "~> 6.0"
    }
  }
}

provider "google" {
  project = var.project_id
  region  = "europe-west1"
}

variable "project_id" {
  type = string
}

resource "google_container_cluster" "expert_gke" {
  name     = "expert-cluster"
  location = "europe-west1"

  remove_default_node_pool = true
  initial_node_count       = 1

  network    = google_compute_network.vpc.name
  subnetwork = google_compute_subnetwork.subnet.name

  master_auth {
    username = ""
    password = ""
  }

  master_authorized_networks_config {
    cidr_blocks {
      cidr_block   = "0.0.0.0/0"
      display_name = "all"
    }
  }

  ip_allocation_policy {
    cluster_secondary_range_name  = google_container_cluster.expert_gke.cluster_ipv4_cidr_block
    services_secondary_range_name = google_container_cluster.expert_gke.cluster_services_ipv4_cidr
  }
}

resource "google_container_node_pool" "primary_nodes" {
  name       = "expert-pool"
  cluster    = google_container_cluster.expert_gke.name
  location   = "europe-west1"
  node_count = 3

  node_config {
    preemptible  = true
    machine_type = "e2-medium"
  }
}

resource "google_compute_network" "vpc" {
  name                    = "expert-vpc"
  auto_create_subnetworks = false
}

resource "google_compute_subnetwork" "subnet" {
  name          = "expert-subnet"
  ip_cidr_range = "10.0.1.0/24"
  region        = "europe-west1"
  network       = google_compute_network.vpc.id
}