Skip to main content

Open GCP Cloud Shell

Cloud Shell guided deploy for Cloud Run, Cloud SQL PostgreSQL, and Secret Manager.

​
Overview

The Google Cloud deploy path uses Cloud Shell and DeployStack to run Terraform. It provisions Cloud Run for the Manifest container, Cloud SQL for PostgreSQL, and Secret Manager for runtime secrets.

​
Prerequisites

  • A Google Cloud project.
  • Billing enabled on the selected project.
  • Permission to enable APIs and create Cloud Run, Cloud SQL, IAM, and Secret Manager resources.
This stack creates paid resources, including Cloud SQL.

​
Deploy

Open the GCP Cloud Shell guided deploy. The walkthrough prompts for:
  • Google Cloud project.
  • Region.
  • Cloud Run service name.
  • Manifest image URL.
  • Cloud SQL machine tier.
  • Maximum Cloud Run instances.
  • Cloud SQL deletion protection.
Enable the required APIs: 
gcloud services enable \
  iam.googleapis.com \
  run.googleapis.com \
  sqladmin.googleapis.com \
  secretmanager.googleapis.com
Run the installer: 
deploystack install
The first deploy usually takes 10-15 minutes because Cloud SQL needs time to provision. The Terraform config patches BETTER_AUTH_URL to the final Cloud Run URL after the service is created.

​
Open Manifest

Print the service URL: 
terraform output service_url
Open the URL and create the first account. The first account becomes the admin. Verify the deployment: 
curl -fsS "$(terraform output -raw health_check_url)"

​
Production notes

  • Cloud SQL deletion protection is enabled by default.
  • Configure a custom domain before using OAuth callbacks in production.
  • Keep Secret Manager access limited to the Cloud Run service account.
Relevant Google Cloud docs: