GCP (Google Cloud Platform)

Cloud SQL (MySQL)

• Works great.
• In Connections -> Networking: Add a private IP to allow VPC access over private IP from other GCP services for example app engine and compute engine.

GAE App Engine

• Use serverless VPC access connectors to access Cloud SQL via a private network. This is more secure and faster than using the public IP network.

GAE Google App Engine Standard Environment

• Support for Go 1.20
• Does not support websockets. This is a bummer. No support for websockets means the chat app will not run in standard environment.

GAE Google App Engine Flexible Environment

• Only support for Go up to 1.19. I use some new string functions added in Go 1.20 so this is a bummer currently for flexible environment.
• Support for websockets

GAE Cloud Build

• Create a storage bucket to hold builds for deploymeht.

  gsutil mb gs://bucket-name

• cloudbuild.yaml file to hold build settings:

  steps:
    # Print the Go version being used.
    - name: 'mirror.gcr.io/library/golang'
      args: ['go', 'version']
    # Make a deploy directory we'll tar after building the app.
    - name: 'debian'
      args: ['mkdir', '-p', 'deploy/etc/systemd/system/', 'deploy/usr/bin']
    # Build the app.
    - name: 'mirror.gcr.io/library/golang'
      env: [
        'GO111MODULE=on',
        'GOPROXY=https://proxy.golang.org,direct',
        'GOOS=linux',
        'GOARCH=amd64'
      ]
      args: ['go', 'build', '-o', 'deploy/usr/bin/app', '.']
    # Copy the systemd service file into the deploy directory.
    - name: 'debian'
      args: ['cp', 'my-app.service', 'deploy/etc/systemd/system/']
    # Compress the deploy directory.
    - name: 'debian'
      args: ['tar', '-czf', '${_DEPLOY_FILENAME}', '-C', './deploy', '.']
  # Upload the tarball to Cloud Storage.
  artifacts:
    objects:
      location: '${_DEPLOY_DIR}'
      paths: ['${_DEPLOY_FILENAME}']
                      

• gcloud builds submit --substitutions=_DEPLOY_DIR=gs://bucket-name,_DEPLOY_FILENAME=app.tar.gz

• start-up script:

  set -ex
  
  # Install logging monitor. The monitor will automatically pickup logs sent to syslog.
  curl "https://storage.googleapis.com/signals-agents/logging/google-fluentd-install.sh" --output google-fluentd-install.sh
  checksum=$(sha256sum google-fluentd-install.sh | awk '{print $1;}')
  if [ "$checksum" != "ec78e9067f45f6653a6749cf922dbc9d79f80027d098c90da02f71532b5cc967" ]; then
      echo "Checksum does not match"
      exit 1
  fi
  chmod +x google-fluentd-install.sh && ./google-fluentd-install.sh
  service google-fluentd restart &
  
  APP_LOCATION=$(curl -s "http://metadata.google.internal/computeMetadata/v1/instance/attributes/app-location" -H "Metadata-Flavor: Google")
  gsutil cp "$APP_LOCATION" app.tar.gz
  tar -xzf app.tar.gz
  
  # Start the service included in app.tar.gz.
  service my-app start