GCP Virtual Private Cloud

GET /api/gcp/vpcs

def list_gcp_vpcs():
    credentials = SessionCredentials(gcp_account)
    projects = list_gcp_projects(credentials)
    
    networks_client = compute_v1.NetworksClient(credentials=credentials)
    subnetworks_client = compute_v1.SubnetworksClient(credentials=credentials)
    
    for proj_dict in projects:
        project_id = proj_dict.get("projectId")
        
        # List networks
        network_request = compute_v1.ListNetworksRequest(project=project_id)
        networks_in_project = list(networks_client.list(request=network_request))
        
        # Aggregate subnets
        subnet_request = compute_v1.AggregatedListSubnetworksRequest(project=project_id)
        subnet_iterator = subnetworks_client.aggregated_list(request=subnet_request)

{
  "value": [
    {
      "provider": "GCP",
      "name": "my-vpc-network",
      "id": "1234567890123456789",
      "description": "Production VPC network",
      "subnetMode": false,
      "routingMode": "REGIONAL",
      "projectId": "my-gcp-project",
      "subnets": [
        {
          "name": "us-central1-subnet",
          "region": "us-central1",
          "ipCidrRange": "10.0.1.0/24"
        }
      ]
    }
  ]
}

POST /api/gcp/vpc/create
Content-Type: application/json

{
  "projectId": "my-gcp-project",
  "vpcName": "my-new-vpc",
  "description": "Production VPC network",
  "routingMode": "REGIONAL"
}

networks_client = compute_v1.NetworksClient(credentials=credentials)

network_resource = compute_v1.Network(
    name=vpc_name,
    description=description, 
    auto_create_subnetworks=False,  # Custom subnet mode
    routing_config=compute_v1.NetworkRoutingConfig(
        routing_mode=routing_mode.upper() 
    ),
)

vpc_create_request = compute_v1.InsertNetworkRequest(
    project=project_id,
    network_resource=network_resource,
)

operation = networks_client.insert(request=vpc_create_request)
operation.result()  # Wait for completion

{
  "message": "Sieć VPC 'my-new-vpc' została pomyślnie utworzona."
}

{
  "error": "Pola 'projectId' oraz 'vpcName' są wymagane."
}

{
  "error": "Nie znaleziono aktywnego konta GCP w sesji"
}

{
  "error": "Brak uprawnień do tworzenia sieci VPC w projekcie 'my-gcp-project'. Szczegóły: ..."
}

{
  "error": "Sieć VPC o nazwie 'my-new-vpc' już istnieje w projekcie 'my-gcp-project'."
}

{
  "error": "Wystąpił nieoczekiwany błąd serwera: ..."
}

accounts = session.get("accounts", [])
gcp_account = next((acc for acc in accounts if acc.get("provider") == "gcp"), None)

if not gcp_account:
    return jsonify({"error": "Nie znaleziono aktywnego konta GCP w sesji"}), 401
    
if not gcp_account.get("refresh_token"):
    return jsonify({"error": "Brak kompletnych tokenów w sesji."}), 401

GCP Organization
└── Project
    └── VPC Network
        ├── Routing Mode: REGIONAL or GLOBAL
        ├── Subnet Mode: Custom (auto_create_subnetworks=False)
        ├── Firewall Rules
        └── Subnets
            ├── Subnet in us-central1 (10.0.1.0/24)
            ├── Subnet in europe-west1 (10.0.2.0/24)
            └── Subnet in asia-east1 (10.0.3.0/24)

from google.cloud import compute_v1

networks_client = compute_v1.NetworksClient(credentials=credentials)

# List networks
network_request = compute_v1.ListNetworksRequest(project=project_id)
networks = networks_client.list(request=network_request)

# Create network
insert_request = compute_v1.InsertNetworkRequest(
    project=project_id,
    network_resource=network_resource
)
operation = networks_client.insert(request=insert_request)

VPC: my-vpc (REGIONAL)
├── us-central1: Routes only within region
├── europe-west1: Routes only within region
└── asia-east1: Routes only within region

VPC: my-vpc (GLOBAL)
├── us-central1 ──┐
├── europe-west1 ─┼── All regions can reach each other
└── asia-east1 ───┘

except exceptions.Conflict:
    return jsonify({"error": f"Sieć VPC o nazwie '{vpc_name}' już istnieje..."}), 409
except exceptions.Forbidden as e:
    return jsonify({"error": f"Brak uprawnień do tworzenia sieci VPC..."}), 403
except Exception as e:
    return jsonify({"error": f"Wystąpił nieoczekiwany błąd serwera: {str(e)}"}), 500

VPC: prod-global-vpc (GLOBAL routing)
├── us-central1-subnet (10.1.0.0/20) - US users
├── europe-west1-subnet (10.2.0.0/20) - EU users
└── asia-east1-subnet (10.3.0.0/20) - APAC users

VPC: microservices-vpc (REGIONAL)
├── frontend-subnet (10.0.1.0/24) - Web tier
├── backend-subnet (10.0.2.0/24) - API tier
├── data-subnet (10.0.3.0/24) - Database tier
└── admin-subnet (10.0.4.0/24) - Management

On-Premises (192.168.0.0/16)
    |
    | Cloud VPN / Interconnect
    |
GCP VPC (10.0.0.0/16)