A cloud engineer needs to deploy an isolated enterprise application environment in Google Cloud using the Google Cloud CLI (`gcloud`). Arrange the administrative steps in the correct operational order to provision the networking infrastructure and deploy the application instance safely.
- 1Execute `gcloud compute networks create` with `--subnet-mode=custom` to establish an isolated Virtual Private Cloud network without default subnets.
- 2Execute `gcloud compute networks subnets create` specifying the parent network name, target region, and primary IP CIDR range.
- 3Execute `gcloud compute firewall-rules create` specifying the allowed ports, network name, and target network tags.
- 4Execute `gcloud compute instances create` specifying the target subnet and assigning the designated network tags.
Answer
The operational sequence requires first creating the custom VPC network, next adding the custom subnet, followed by establishing the ingress firewall rule with target tags, and finally creating the Compute Engine instance bound to the subnet and network tag.
In Google Cloud Platform networking, resources must be created following structural dependencies. First, a custom-mode VPC network must exist to act as the parent object. Second, a subnet within that VPC must be created to define regional CIDR IP blocks. Third, firewall rules are attached to the VPC network with target tags so traffic rules are active. Finally, the Compute Engine VM instance is created referencing the custom subnet and network tags.
Step-by-Step Solution
Key Concept
Deployment dependency order for GCP Virtual Private Cloud (VPC) networks, custom subnets, firewall rules, and compute workloads.