Skip to main content

Open GCP Cloud Shell

Cloud Shell guided deploy for Cloud Run, Cloud SQL PostgreSQL, and Secret Manager.

​
Overview

The Google Cloud deploy path uses Cloud Shell and DeployStack to run Terraform. It provisions Cloud Run for the Manifest container, Cloud SQL for PostgreSQL, and Secret Manager for runtime secrets.

​
Prerequisites

  • A Google Cloud project.
  • Billing enabled on the selected project.
  • Permission to enable APIs and create Cloud Run, Cloud SQL, IAM, and Secret Manager resources.
This stack creates paid resources, including Cloud SQL.

​
Deploy

Open the GCP Cloud Shell guided deploy. The walkthrough prompts for:
  • Google Cloud project.
  • Region.
  • Cloud Run service name.
  • Manifest image URL.
  • Cloud SQL machine tier.
  • Maximum Cloud Run instances.
  • Cloud SQL deletion protection.
Enable the required APIs:
Run the installer:
The first deploy usually takes 10-15 minutes because Cloud SQL needs time to provision. The Terraform config patches BETTER_AUTH_URL to the final Cloud Run URL after the service is created.

​
Open Manifest

Print the service URL:
Open the URL and create the first account. Fresh installs redirect to /setup; the first account you create becomes the admin. Verify the deployment:

​
Request logs

The stack provisions a private Cloud Storage bucket for request logs. The deploy prints its name as the recording_bucket output.

​
Production notes

  • Cloud SQL deletion protection is enabled by default.
  • Configure a custom domain before using OAuth callbacks in production.
  • Keep Secret Manager access limited to the Cloud Run service account.
  • The request logs bucket keeps its objects on teardown. Export or delete its contents before deploystack uninstall.
Relevant Google Cloud docs: