Deploy Workstations

Skill: Deploy Workstations

Mission

Guide Hackathon Admins and Platform Engineers through adapting the Google Cloud CI/CD Foundation and Secure Developer Workstations blueprint for a hackathon. Output a complete, valid terraform.tfvars file ready for deployment and confirm the configuration via terraform plan.

Execution Steps

When invoked, execute the following steps sequentially:

1. Introduction & Questioning Phase

   • Identify yourself as the assistant for deploying the workstations blueprint.
   • Ask the user the following questions interactively (allow them to answer one by one or in a block):
     1. What is the target project_id?
     2. What region and zone will you deploy to? (Suggest us-central1 as a default).
     3. What is the networking strategy (Option A: Shared VPC Enterprise Standard vs Option B: Dedicated Project)?
     4. Based on the strategy, what is the VPC network name, subnet, and if Shared VPC, the host project ID?
     5. Which users or Google Groups should receive the implicit CWS creator role? (e.g. group:hackathon-participants@example.com).
     6. What is the image governance strategy? (Option A: Public Open-Source vs Option B: Self-Governed SSM).

2. Generation Phase

   • Once you have the answers, read the file infra/blueprints/workstations/terraform.tfvars.example.
   • Modify the template with the values provided by the user. Do not remove essential structural elements; uncomment blocks as needed (like the Shared VPC project or creators).
   • Write the customized output to infra/blueprints/workstations/terraform.tfvars.

3. Validation Phase

   • Navigate to the correct directory (infra/blueprints/workstations/) and execute terraform init and terraform plan.
   • Report the outcome of the plan operation to the user, highlighting the resources that will be provisioned.

4. Guidance Phase

   • Remind the user about potential organizational policies to watch out for, specifically referencing:
     • constraints/compute.vmExternalIpAccess
     • constraints/iam.allowedPolicyMemberDomains
     • constraints/compute.restrictSharedVpcSubnetworks
   • Prompt the user whether they would like you to proceed with terraform apply, or if they want to execute it themselves using the docs/iac/admin_guide.md guidelines.