Skip to content

Latest commit

 

History

History
76 lines (56 loc) · 3.08 KB

team-setup.md

File metadata and controls

76 lines (56 loc) · 3.08 KB
Raw

Team Setup

These are the "Administrator" setup steps for a team to set up to run FireWorks workflows on Google Cloud Platform using Borealis.

After this, each developer can follow the Developer Setup steps.

Also see Handy Links.

Steps

  1. You'll need a Google account. It can be in Cloud Identity or G Suite, but any Gmail account should suffice to create personal projects.

    Expand the Enterprise onboarding checklist items for details.

  2. Create your GCP project and enable billing using the Cloud Console.

  3. For the other developer on your team, add their accounts to the project and grant them suitable permissions such as Project Editor and Logging Admin.

    (You could grant narrower access although it'll be more complicated access to the Project, Cloud Storage, Compute Engine, and Logging, at least.)

  4. Enable these services: Compute Engine, Cloud Storage, StackDriver Logging, IAM, Container Registry, and Cloud Build.

  5. Pick a Zone for your Compute Engine VMs and your Cloud Storage buckets. The choice of zone impacts service prices, network latency, and available services. See Cloud Billing.

  6. Follow the Install the development tools page to install, log in to the gcloud command line tool, and configure your default project and zone.

  7. TODO: Create the Docker Image for your project, starting with the Dockerfile(s) and scripts needed to build it.

  8. Follow the instructions in how-to-install-gce-server.txt to create your Fireworker Compute Engine Disk Image and its Service Account. This Image will have the software needed to start up a Fireworker VM.

  9. Create a Google Compute Engine VM instance (GCE console) and install MongoDB on it. Alternatively, set up Google-managed MongoDB service or use an external instance of MongoDB that's accessible to GCE VMs.

    (Google Cloud offers Cloud VPN if you need to connect your on-premises network to Google's network through an IPsec VPN tunnel.

    Suggested GCE VM setup choices:

    • Name: mongo
    • Machine type: g1-small (1 vCPU, 1.7 GB RAM)
    • Region and Zone: The same as everything else in the project
    • Boot disk: debian
    • Preemptibility: off
    • Automatic restart: on
    • Service account: The project's default service account
    • Cloud API access scopes:
      • Service Control: Enabled
      • Service Management: Read Only
      • Stackdriver Logging: Write Only
      • Stackdriver Monitoring API: Write Only
      • Stackdriver Trace: Write Only
      • Storage: Read Only

    Each developer should get their own DB on the shared MongoDB server. Set up MongoDB access controls if you want, but it's not needed if the MongoDB server is accessible only to people and GCP servers in the project.