Windsor Harlow Let’s talk

GCP Platform Operations

A Google Cloud setup for releasing software, investigating problems and reviewing running costs.

Engineering labTypeEngineering labCloudGoogle CloudFoundationTerraform modules
Overview · Cloud & platform engineering

Built to deploy. Designed to operate.

A Google Cloud platform built with reusable Terraform code and Google Kubernetes Engine (GKE). It combines automated releases with network controls, access management and tools for monitoring and troubleshooting.

Google CloudGKEDockerTerraformRemote stateGitHub Actions
GCP Platform Operations reference architecture diagram
Reference architectureOpen full size ↗
The Engineering

Decisions that shape the system.

01

A repeatable foundation

Reusable Terraform modules define VPCs, subnetworks, routing, firewall rules, IAM and GKE, kept in version control and reviewed.

02

A controlled delivery path

GitHub Actions and Cloud Build automate checks, builds and deployments; Workload Identity, scoped IAM and Secret Manager connect workloads safely.

03

Operations as part of the platform

Monitoring, logs and alerts link to incident runbooks; Python and Bash automation support diagnostics and cost reviews.

Capabilities

What it does.

Reusable Terraform

Modules for the platform foundation.

Network controls

VPC, firewalls, DNS and Cloud Armor.

Deployment automation

GitHub Actions and Cloud Build.

Workload identity

Scoped IAM and managed secrets.

Operational visibility

Metrics, logs, alerts and runbooks.

Cost awareness

Usage reviews and right-sizing.

Stack

Built with.

Cloud
Google CloudGKEDocker
Infrastructure
TerraformRemote state
Delivery
GitHub ActionsCloud BuildArtifact RegistryHelm
Security
IAMWorkload IdentitySecret ManagerCloud Armor
Observability
Cloud MonitoringCloud LoggingPrometheusGrafana

Engineering lab — an independent reference build, not client work. The diagram is a reference view of the platform.

Next project
AWS Infrastructure as Code