How do I create a GCP VPC Access Connector?

In this guide, we will create a GCP VPC Access Connector using Pulumi. A VPC Access Connector allows you to connect your serverless environment (like Cloud Functions or App Engine) to your VPC network. This setup is essential for accessing resources in your VPC from your serverless applications.

Steps:

1. Define the necessary network resources such as VPC and subnet.
2. Create the VPC Access Connector.

The code block below demonstrates how to achieve this using Pulumi in TypeScript.

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

// Create a VPC Network
const network = new gcp.compute.Network("my-vpc-network", {
    autoCreateSubnetworks: false,
});

// Create a Subnet in the VPC Network
const subnet = new gcp.compute.Subnetwork("my-subnet", {
    ipCidrRange: "10.0.0.0/24",
    region: "us-central1",
    network: network.id,
});

// Create a VPC Access Connector
const vpcConnector = new gcp.vpcaccess.Connector("my-vpc-connector", {
    region: "us-central1",
    network: network.id,
    ipCidrRange: "10.8.0.0/28",
    minInstances: 2,
    maxInstances: 10,
    machineType: "e2-micro",
});

// Export the URLs of the created resources
export const networkUrl = network.selfLink;
export const subnetUrl = subnet.selfLink;
export const vpcConnectorUrl = vpcConnector.selfLink;

Key Points:

• VPC Network: A custom VPC network where the VPC Access Connector will reside.
• Subnet: A subnet within the VPC to allocate IP ranges for the connector.
• VPC Access Connector: The actual connector resource that allows serverless applications to access VPC resources.

Summary:

We created a VPC Network and a Subnet within that network. Then, we defined a VPC Access Connector that uses the specified network and subnet to connect serverless applications to the VPC. This setup is essential for enabling serverless environments to securely access resources within a VPC.