gcp_config.sh

#!/bin/bash

# ENV VARIABLES
PROJECT_ID=$1
PROJECT_REGION="us-central1"
PROJECT_ZONE="us-central1-a"
SERVICE_ACCOUNT_NAME="terraform-sa"
BUCKET_NAME="terraform-state-$PROJECT_ID"

echo "CHECKING THE ACTIVE CONFIG BEFORE MAKING ANY CHANGE..."
gcloud config set project $PROJECT_ID

echo "CREATING A GCS BUCKET TO SUPPORT TERRAFORM STATE..."
gsutil mb -p $PROJECT_ID -l $PROJECT_REGION gs://$BUCKET_NAME

echo "CREATING A SERVICE ACCOUNT TO SUPPORT TERRAFORM OPERATIONS..."
gcloud iam service-accounts create $SERVICE_ACCOUNT_NAME --project $PROJECT_ID

SERVICE_ACCOUNT_EMAIL="$SERVICE_ACCOUNT_NAME@$PROJECT_ID.iam.gserviceaccount.com"

echo "CREATING AND DOWNLOADING A KEY OF THE SERVICE ACCOUNT..."
gcloud iam service-accounts keys create key.json --iam-account=$SERVICE_ACCOUNT_EMAIL

echo "ADDING THE REQUIRED IAM ROLES TO THE SERVICE ACCOUNT..."
gcloud projects add-iam-policy-binding $PROJECT_ID --member='serviceAccount:'$SERVICE_ACCOUNT_EMAIL --role='roles/storage.admin'
gcloud projects add-iam-policy-binding $PROJECT_ID --member='serviceAccount:'$SERVICE_ACCOUNT_EMAIL --role='roles/compute.admin'
gcloud projects add-iam-policy-binding $PROJECT_ID --member='serviceAccount:'$SERVICE_ACCOUNT_EMAIL --role='roles/storage.objectAdmin'

echo "ENABLING THE MINIMUM GCLOUD SERVICES..."

gcloud services enable cloudresourcemanager.googleapis.com
gcloud services enable iam.googleapis.com
gcloud services enable iap.googleapis.com
gcloud services enable compute.googleapis.com

# Initialize JSON variable with the values to be stored in the file
json_output="{
  \"GCP_PROJECT_ID\": \"${PROJECT_ID}\",
  \"GCP_REGION\": \"${PROJECT_REGION}\",
  \"GCP_ZONE\": \"${PROJECT_ZONE}\",
  \"GCP_BUCKET_NAME\": \"${BUCKET_NAME}\",
  \"GCP_TF_SA_CREDS_BASE64\": \"<YOUR_ENCODED_BASE64_KEY>\"
}"

# Create and store the JSON data in a file called 'gcp_project_configuration_info.json'
echo "${json_output}" > gcp_project_configuration_info.json

echo "Done!"
echo "CONFIG PROCESS COMPLETED, YOU CAN FIND THE DETAILS IN THE 'gcp_project_configuration_info.json' FILE."