เริ่มต้นใช้งาน Terraform และ Firebase

# Terraform configuration to set up providers by version. ...  # Configures the provider to use the resource block's specified project for quota checks. ...  # Configures the provider to not use the resource block's specified project for quota checks. ...  # Creates a new Google Cloud project. resource "google_project" "default" {   # Use the provider that enables the setup of quota checks for a new project   provider   = google-beta.no_user_project_override    name            = "Project Display Name"        // learn more about the project name   project_id      = "project-id-for-new-project"  // learn more about the project ID   # Required for any service that requires the Blaze pricing plan   # (like Firebase Authentication with GCIP)   billing_account = "000000-000000-000000"    # Required for the project to display in any list of Firebase projects.   labels = {     "firebase" = "enabled"  // learn more about the Firebase-enabled label   } }  # Enables required APIs. resource "google_project_service" "default" {   # Use the provider without quota checks for enabling APIS   provider = google-beta.no_user_project_override   project  = google_project.default.project_id   for_each = toset([     "cloudbilling.googleapis.com",     "cloudresourcemanager.googleapis.com",     "firebase.googleapis.com",     # Enabling the ServiceUsage API allows the new project to be quota checked from now on.     "serviceusage.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. # This action essentially "creates a Firebase project" and allows the project to use # Firebase services (like Firebase Authentication) and # Firebase tooling (like the Firebase console). # Learn more about the relationship between Firebase projects and Google Cloud. resource "google_firebase_project" "default" {   # Use the provider that performs quota checks from now on   provider = google-beta    project  = google_project.default.project_id    # Waits for the required APIs to be enabled.   depends_on = [     google_project_service.default   ] }  # Creates a Firebase Android App in the new project created above. # Learn more about the relationship between Firebase Apps and Firebase projects. resource "google_firebase_android_app" "default" {   provider = google-beta    project      = google_project.default.project_id   display_name = "My Awesome Android app"  # learn more about an app's display name   package_name = "awesome.package.name"    # learn more about an app's package name    # Wait for Firebase to be enabled in the Google Cloud project before creating this App.   depends_on = [     google_firebase_project.default,   ] }

# Creates a new Google Cloud project. resource "google_project" "auth" {   provider  = google-beta.no_user_project_override   folder_id = "folder-id-for-new-project"   name            = "Project Display Name"   project_id      = "project-id-for-new-project"    # Associates the project with a Cloud Billing account   # (required for Firebase Authentication with GCIP).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "auth" {   provider = google-beta.no_user_project_override   project  = google_project.auth.project_id   for_each = toset([     "cloudbilling.googleapis.com",     "cloudresourcemanager.googleapis.com",     "serviceusage.googleapis.com",     "identitytoolkit.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. resource "google_firebase_project" "auth" {   provider = google-beta   project  = google_project.auth.project_id    depends_on = [     google_project_service.auth,   ] }  # Creates an Identity Platform config. # Also enables Firebase Authentication with Identity Platform in the project if not. resource "google_identity_platform_config" "auth" {   provider = google-beta   project  = google_firebase_project.auth.project    # Auto-deletes anonymous users   autodelete_anonymous_users = true    # Configures local sign-in methods, like anonymous, email/password, and phone authentication.   sign_in {     allow_duplicate_emails = true      anonymous {       enabled = true     }      email {       enabled = true       password_required = false     }      phone_number {       enabled = true       test_phone_numbers = {         "+11231231234" = "000000"       }     }   }    # Sets an SMS region policy.   sms_region_config {     allowlist_only {       allowed_regions = [         "US",         "CA",       ]     }   }    # Configures blocking functions.   blocking_functions {     triggers {       event_type = "beforeSignIn"       function_uri = "https://us-east1-${google_project.auth.project_id}.cloudfunctions.net/before-sign-in"     }     forward_inbound_credentials {       refresh_token = true       access_token = true       id_token = true     }   }    # Configures a temporary quota for new signups for anonymous, email/password, and phone number.   quota {     sign_up_quota_config {       quota = 1000       start_time = ""       quota_duration = "7200s"     }   }    # Configures authorized domains.   authorized_domains = [     "localhost",     "${google_project.auth.project_id}.firebaseapp.com",     "${google_project.auth.project_id}.web.app",   ] }  # Creates a Firebase Android App in the new project created above. resource "google_firebase_android_app" "auth" {   provider     = google-beta   project      = google_firebase_project.auth.project   display_name = "My Android app"   package_name = "android.package.name" }  # Creates a Firebase Apple-platforms App in the new project created above. resource "google_firebase_apple_app" "auth" {   provider     = google-beta   project      = google_firebase_project.auth.project   display_name = "My Apple app"   bundle_id    = "apple.app.12345" }  # Creates a Firebase Web App in the new project created above. resource "google_firebase_web_app" "auth" {   provider     = google-beta   project      = google_firebase_project.auth.project   display_name = "My Web app" }

# Creates a new Google Cloud project. resource "google_project" "dataconnect" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project"    # Associates the project with a Cloud Billing account   # (required to use Firebase Data Connect).   billing_account = "000000-000000-000000"    # Required for the project to display in a list of Firebase projects.   labels = {     "firebase" = "enabled"   } }  # Enables required APIs. resource "google_project_service" "services" {   provider = google-beta.no_user_project_override   project  = google_project.dataconnect.project_id   for_each = toset([     "serviceusage.googleapis.com",     "cloudresourcemanager.googleapis.com",     "firebasedataconnect.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created earlier. resource "google_firebase_project" "dataconnect" {   provider = google-beta   project  = google_project.dataconnect.project_id    depends_on = [google_project_service.services] }  # Create a Firebase Data Connect service resource "google_firebase_data_connect_service" "dataconnect-default" {   project         = google_firebase_project.dataconnect.project   location        = "name-of-region-for-service"   service_id      = "${google_firebase_project.dataconnect.project}-default-fdc"   deletion_policy = "DEFAULT" }

# Creates a new Google Cloud project. resource "google_project" "rtdb" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project" }  # Enables required APIs. resource "google_project_service" "rtdb" {   provider = google-beta.no_user_project_override   project  = google_project.rtdb.project_id   for_each = toset([     "serviceusage.googleapis.com",     "cloudresourcemanager.googleapis.com",     "firebasedatabase.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. resource "google_firebase_project" "rtdb" {   provider = google-beta   project  = google_project.rtdb.project_id    depends_on = [google_project_service.rtdb] }  # Provisions the default Realtime Database default instance. resource "google_firebase_database_instance" "database" {   provider    = google-beta   project     = google_firebase_project.rtdb.project   # See available locations: https://firebase.google.com/docs/database/locations   region      = "name-of-region"   # This value will become the first segment of the database's URL.   instance_id = "${google_project.rtdb.project_id}-default-rtdb"   type        = "DEFAULT_DATABASE" }  # Creates a Firebase Android App in the new project created above. resource "google_firebase_android_app" "rtdb" {   provider     = google-beta   project      = google_firebase_project.rtdb.project   display_name = "My Android app"   package_name = "android.package.name" }  # Creates a Firebase Apple-platforms App in the new project created above. resource "google_firebase_apple_app" "rtdb" {   provider     = google-beta   project      = google_firebase_project.rtdb.project   display_name = "My Apple app"   bundle_id    = "apple.app.12345" }  # Creates a Firebase Web App in the new project created above. resource "google_firebase_web_app" "rtdb" {   provider     = google-beta   project      = google_firebase_project.rtdb.project   display_name = "My Web app" }

# Creates a new Google Cloud project. resource "google_project" "rtdb-multi" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project"    # Associate the project with a Cloud Billing account   # (required for multiple Realtime Database instances).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "rtdb-multi" {   provider = google-beta.no_user_project_override   project  = google_project.rtdb-multi.project_id   for_each = toset([     "cloudbilling.googleapis.com",     "serviceusage.googleapis.com",     "cloudresourcemanager.googleapis.com",     "firebasedatabase.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. resource "google_firebase_project" "rtdb-multi" {   provider = google-beta   project  = google_project.rtdb-multi.project_id    depends_on = [google_project_service.rtdb-multi] }  # Provisions the default Realtime Database default instance. resource "google_firebase_database_instance" "database-default" {   provider    = google-beta   project     = google_firebase_project.rtdb-multi.project   # See available locations: https://firebase.google.com/docs/database/locations   region      = "name-of-region"   # This value will become the first segment of the database's URL.   instance_id = "${google_project.rtdb-multi.project_id}-default-rtdb"   type        = "DEFAULT_DATABASE" }  # Provisions an additional Realtime Database instance. resource "google_firebase_database_instance" "database-additional" {   provider    = google-beta   project     = google_firebase_project.rtdb-multi.project   # See available locations: https://firebase.google.com/docs/projects/locations#rtdb-locations   # This location doesn't need to be the same as the default database instance.   region      = "name-of-region"   # This value will become the first segment of the database's URL.   instance_id = "name-of-additional-database-instance"   type        = "USER_DATABASE" }  # Creates a Firebase Android App in the new project created above. resource "google_firebase_android_app" "rtdb-multi" {   provider     = google-beta   project      = google_firebase_project.rtdb-multi.project   display_name = "My Android app"   package_name = "android.package.name" }  # Creates a Firebase Apple-platforms App in the new project created above. resource "google_firebase_apple_app" "rtdb-multi" {   provider     = google-beta   project      = google_firebase_project.rtdb-multi.project   display_name = "My Apple app"   bundle_id    = "apple.app.12345" }  # Creates a Firebase Web App in the new project created above. resource "google_firebase_web_app" "rtdb-multi" {   provider     = google-beta   project      = google_firebase_project.rtdb-multi.project   display_name = "My Web app" }

# Creates a new Google Cloud project. resource "google_project" "firestore" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project" }  # Enables required APIs. resource "google_project_service" "firestore" {   provider = google-beta.no_user_project_override   project  = google_project.firestore.project_id   for_each = toset([     "cloudresourcemanager.googleapis.com",     "serviceusage.googleapis.com",     "firestore.googleapis.com",     "firebaserules.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. resource "google_firebase_project" "firestore" {   provider = google-beta   project  = google_project.firestore.project_id    depends_on = [google_project_service.firestore] }  # Provisions the Firestore database instance. resource "google_firestore_database" "firestore" {   provider                    = google-beta   project                     = google_firebase_project.firestore.project   name                        = "(default)"   # See available locations: https://firebase.google.com/docs/firestore/locations   location_id                 = "name-of-region"   # "FIRESTORE_NATIVE" is required to use Firestore with Firebase SDKs, authentication, and Firebase Security Rules.   type                        = "FIRESTORE_NATIVE"   concurrency_mode            = "OPTIMISTIC" }  # Creates a ruleset of Firestore Security Rules from a local file. resource "google_firebaserules_ruleset" "firestore" {   provider = google-beta   project  = google_firestore_database.firestore.project   source {     files {       name = "firestore.rules"       # Write security rules in a local file named "firestore.rules".       # Learn more: https://firebase.google.com/docs/firestore/security/get-started       content = file("firestore.rules")     }   } }  # Releases the ruleset for the Firestore instance. resource "google_firebaserules_release" "firestore" {   provider     = google-beta   name         = "cloud.firestore"  # must be cloud.firestore   ruleset_name = google_firebaserules_ruleset.firestore.name   project      = google_firestore_database.firestore.project }  # Adds a new Firestore index. resource "google_firestore_index" "indexes" {   provider = google-beta   project  = google_firestore_database.firestore.project    collection  = "quiz"   query_scope = "COLLECTION"    fields {     field_path = "question"     order      = "ASCENDING"   }    fields {     field_path = "answer"     order      = "ASCENDING"   } }  # Adds a new Firestore document with seed data. # Don't use real end-user or production data in this seed document. resource "google_firestore_document" "doc" {   provider    = google-beta   project     = google_firestore_database.firestore.project   collection  = "quiz"   document_id = "question-1"   fields      = "{\"question\":{\"stringValue\":\"Favorite Database\"},\"answer\":{\"stringValue\":\"Firestore\"}}" }  # Creates a Firebase Android App in the new project created above. resource "google_firebase_android_app" "firestore" {   provider     = google-beta   project      = google_firebase_project.firestore.project   display_name = "My Android app"   package_name = "android.package.name" }  # Creates a Firebase Apple-platforms App in the new project created above. resource "google_firebase_apple_app" "firestore" {   provider     = google-beta   project      = google_firebase_project.firestore.project   display_name = "My Apple app"   bundle_id    = "apple.app.12345" }  # Creates a Firebase Web App in the new project created above. resource "google_firebase_web_app" "firestore" {   provider     = google-beta   project      = google_firebase_project.firestore.project   display_name = "My Web app" }

rules_version = '2'; service cloud.firestore {   match /databases/{database}/documents {     match /some_collection/{document} {       allow read, create, update: if request.auth != null;     }   } }

# Creates a new Google Cloud project. resource "google_project" "storage-multi" {   provider  = google-beta.no_user_project_override   folder_id = "folder-id-for-new-project"   name            = "Project Display Name"   project_id      = "project-id-for-new-project"    # Associates the project with a Cloud Billing account   # (required for multiple Cloud Storage buckets).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "storage-multi" {   provider = google-beta.no_user_project_override   project  = google_project.storage-multi.project_id   for_each = toset([     "cloudbilling.googleapis.com",     "serviceusage.googleapis.com",     "cloudresourcemanager.googleapis.com",     "firebaserules.googleapis.com",     "firebasestorage.googleapis.com",     "storage.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. resource "google_firebase_project" "storage-multi" {   provider = google-beta   project  = google_project.storage-multi.project_id    depends_on = [google_project_service.storage-multi] }  # Provisions a Cloud Storage bucket. resource "google_storage_bucket" "bucket-1" {   provider = google-beta   project  = google_firebase_project.storage-multi.project   name     = "name-of-storage-bucket"   # See available locations: https://cloud.google.com/storage/docs/locations#available-locations   location = "name-of-region-for-bucket" }  # Provisions an additional Cloud Storage bucket. resource "google_storage_bucket" "bucket-2" {   provider = google-beta   project  = google_firebase_project.storage-multi.project   name     = "name-of-additional-storage-bucket"   # See available locations: https://cloud.google.com/storage/docs/locations#available-locations   # This location does not need to be the same as the existing Storage bucket.   location = "name-of-region-for-additional-bucket" }  # Makes the first Storage bucket accessible for Firebase SDKs, authentication, and Firebase Security Rules. resource "google_firebase_storage_bucket" "bucket-1" {   provider  = google-beta   project   = google_firebase_project.storage-multi.project   bucket_id = google_storage_bucket.bucket-1.name }  # Makes the additional Storage bucket accessible for Firebase SDKs, authentication, and Firebase Security Rules. resource "google_firebase_storage_bucket" "bucket-2" {   provider  = google-beta   project   = google_firebase_project.storage-multi.project   bucket_id = google_storage_bucket.bucket-2.name }  # Creates a ruleset of Firebase Security Rules from a local file. resource "google_firebaserules_ruleset" "storage-multi" {   provider = google-beta   project  = google_firebase_project.storage-multi.project   source {     files {       # Write security rules in a local file named "storage.rules"       # Learn more: https://firebase.google.com/docs/storage/security/get-started       name    = "storage.rules"       content = file("storage.rules")     }   } }  # Releases the ruleset to the first Storage bucket. resource "google_firebaserules_release" "bucket-1" {   provider     = google-beta   name         = "firebase.storage/${google_storage_bucket.bucket-1.name}"   ruleset_name = "projects/${google_project.storage-multi.project_id}/rulesets/${google_firebaserules_ruleset.storage-multi.name}"   project      = google_firebase_project.storage-multi.project }  # Releases the ruleset to the additional Storage bucket. resource "google_firebaserules_release" "bucket-2" {   provider     = google-beta   name         = "firebase.storage/${google_storage_bucket.bucket-2.name}"   ruleset_name = "projects/${google_project.storage-multi.project_id}/rulesets/${google_firebaserules_ruleset.storage-multi.name}"   project      = google_firebase_project.storage-multi.project }  # Uploads a new file to the first Storage bucket. # Do not use real end-user or production data in this file. resource "google_storage_bucket_object" "cat-picture-multi" {   provider = google-beta   name     = "cat.png"   source   = "path/to/cat.png"   bucket   = google_storage_bucket.bucket-1.name }  # Creates a Firebase Android App in the new project created above. resource "google_firebase_android_app" "storage-multi" {   provider     = google-beta   project      = google_firebase_project.storage-multi.project   display_name = "My Android app"   package_name = "android.package.name" }  # Creates a Firebase Apple-platforms App in the new project created above. resource "google_firebase_apple_app" "storage-multi" {   provider     = google-beta   project      = google_firebase_project.storage-multi.project   display_name = "My Apple app"   bundle_id    = "apple.app.12345" }  # Creates a Firebase Web App in the new project created above. resource "google_firebase_web_app" "storage-multi" {   provider     = google-beta   project      = google_firebase_project.storage-multi.project   display_name = "My Web app" }

rules_version = '2'; service firebase.storage {   match /b/{bucket}/o {     match /some_folder/{fileName} {       allow read, write: if request.auth != null;     }   } }

# Creates a new Google Cloud project. resource "google_project" "appcheck" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project" }  # Enables required APIs. resource "google_project_service" "services" {   provider = google-beta.no_user_project_override   project  = google_project.appcheck.project_id   for_each = toset([     "cloudresourcemanager.googleapis.com",     "firebase.googleapis.com",     "firebaseappcheck.googleapis.com",     "firestore.googleapis.com",     "serviceusage.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created earlier. resource "google_firebase_project" "appcheck" {   provider = google-beta   project  = google_project.appcheck.project_id    depends_on = [google_project_service.services] }  # Provisions the Firestore database instance. resource "google_firestore_database" "database" {   provider = google-beta   project  = google_firebase_project.appcheck.project   name     = "(default)"   # See available locations: https://firebase.google.com/docs/projects/locations#default-cloud-location   location_id = "name-of-region"   # "FIRESTORE_NATIVE" is required to use Firestore with Firebase SDKs, authentication, and Firebase Security Rules.   type             = "FIRESTORE_NATIVE"   concurrency_mode = "OPTIMISTIC" }  # Creates a Firebase Android App in the new project created earlier. resource "google_firebase_android_app" "appcheck" {   provider     = google-beta   project      = google_firebase_project.appcheck.project   display_name = "Play Integrity app"   package_name = "package.name.playintegrity"   sha256_hashes = [     # TODO: insert your Android app's SHA256 certificate   ] }  # Register the Android app with the Play Integrity provider resource "google_firebase_app_check_play_integrity_config" "appcheck" {   provider = google-beta   project  = google_firebase_project.appcheck.project   app_id   = google_firebase_android_app.appcheck.app_id    depends_on = [google_firestore_database.database]    lifecycle {     precondition {       condition     = length(google_firebase_android_app.appcheck.sha256_hashes) > 0       error_message = "Provide a SHA-256 certificate on the Android App to use App Check"     }   } }  # Enable enforcement of App Check for Firestore resource "google_firebase_app_check_service_config" "firestore" {   provider = google-beta    project    = google_firebase_project.appcheck.project   service_id = "firestore.googleapis.com"    depends_on = [google_project_service.services] }

# Creates a new Google Cloud project. resource "google_project" "extensions" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project"    # Associates the project with a Cloud Billing account   # (required to use Firebase Extensions).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "extensions" {   provider = google-beta.no_user_project_override   project  = google_project.extensions.project_id   for_each = toset([     "cloudbilling.googleapis.com",     "cloudresourcemanager.googleapis.com",     "serviceusage.googleapis.com",     "firebase.googleapis.com",     "firebaseextensions.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created above. resource "google_firebase_project" "extensions" {   provider = google-beta   project  = google_project.extensions.project_id    depends_on = [     google_project_service.extensions,   ] }  # Installs an instance of the "Translate Text in Firestore" extension. # Or updates the extension if the specified instance already exists. resource "google_firebase_extensions_instance" "translation" {   provider = google-beta   project = google_firebase_project.extensions.project    instance_id = "translate-text-in-firestore"   config {     extension_ref = "firebase/firestore-translate-text"      params = {       COLLECTION_PATH      = "posts/comments/translations"       DO_BACKFILL          = true       LANGUAGES            = "ar,en,es,de,fr"       INPUT_FIELD_NAME     = "input"       LANGUAGES_FIELD_NAME = "languages"       OUTPUT_FIELD_NAME    = "translated"     }      system_params = {       "firebaseextensions.v1beta.function/location"                   = "us-central1"       "firebaseextensions.v1beta.function/memory"                     = "256"       "firebaseextensions.v1beta.function/minInstances"               = "0"       "firebaseextensions.v1beta.function/vpcConnectorEgressSettings" = "VPC_CONNECTOR_EGRESS_SETTINGS_UNSPECIFIED"     }   } }

# Creates a new Google Cloud project. resource "google_project" "vertex" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project"    # Associate the project with a Cloud Billing account   # (required for Vertex AI in Firebase).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "services" {   provider   = google-beta.no_user_project_override    project  = google_project.vertex.project_id   for_each = toset([     "cloudresourcemanager.googleapis.com",     "firebase.googleapis.com",     "serviceusage.googleapis.com",     # Required APIs for Vertex AI in Firebase     "aiplatform.googleapis.com",     "firebasevertexai.googleapis.com",     # App Check is recommended to protect Vertex AI in Firebase from abuse     "firebaseappcheck.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created earlier. resource "google_firebase_project" "vertex" {   provider = google-beta   project  = google_project.vertex.project_id    depends_on = [google_project_service.services] }  # Creates a Firebase Web App in the new project created earlier. resource "google_firebase_web_app" "app" {   provider = google-beta   project  = google_firebase_project.vertex.project    display_name = "My Web App" }  # Creates a Firebase Android App in the new project created earlier. resource "google_firebase_android_app" "app" {   provider     = google-beta   project      = google_firebase_project.vertex.project   display_name = "My Android App"   package_name = "package.name.playintegrity"   sha256_hashes = [     # TODO: insert your Android app's SHA256 certificate   ] }  # Creates a Firebase Apple App in the new project created earlier. resource "google_firebase_apple_app" "app" {   provider     = google-beta   project      = google_firebase_project.vertex.project   display_name = "My Apple App"   bundle_id    = "bundle.id"   team_id      = "1234567890" }  ### Protects Vertex AI in Firebase with App Check.  # Turns on enforcement for Vertex AI in Firebase resource "google_firebase_app_check_service_config" "vertex" {   provider = google-beta    project          = google_firebase_project.vertex.project   service_id       = "firebaseml.googleapis.com"   enforcement_mode = "ENFORCED" }  # Enables the reCAPTCHA Enterprise API resource "google_project_service" "recaptcha_enterprise" {   provider = google-beta    project = google_firebase_project.vertex.project   service = "recaptchaenterprise.googleapis.com"    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables the Play Integrity API resource "google_project_service" "play_integrity" {   provider = google-beta    project = google_firebase_project.vertex.project   service = "playintegrity.googleapis.com"    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Allows the web app to use reCAPTCHA Enterprise with App Check resource "google_firebase_app_check_recaptcha_enterprise_config" "appcheck" {   provider = google-beta    project   = google_firebase_project.vertex.project   app_id    = google_firebase_web_app.app.app_id   site_key  = "your site key"   token_ttl = "7200s" # Optional    depends_on = [google_project_service.recaptcha_enterprise] }  # Registers the Android app with the Play Integrity provider resource "google_firebase_app_check_play_integrity_config" "appcheck" {   provider  = google-beta   project   = google_firebase_project.vertex.project   app_id    = google_firebase_android_app.app.app_id   token_ttl = "7200s" # Optional    lifecycle {     precondition {       condition     = length(google_firebase_android_app.app.sha256_hashes) > 0       error_message = "Provide a SHA-256 certificate on the Android App to use App Check"     }   }    depends_on = [google_project_service.play_integrity] }  # Registers the Apple app with the AppAttest provider resource "google_firebase_app_check_app_attest_config" "appcheck" {   provider  = google-beta   project   = google_firebase_project.vertex.project   app_id    = google_firebase_apple_app.app.app_id   token_ttl = "7200s" # Optional    lifecycle {     precondition {       condition     = google_firebase_apple_app.app.team_id != ""       error_message = "Provide a Team ID on the Apple App to use App Check"     }   } }

# Creates a new Google Cloud project. resource "google_project" "apphosting" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project"    # Associates the project with a Cloud Billing account   # (required to use Firebase App Hosting).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "services" {   provider = google-beta.no_user_project_override   project  = google_project.apphosting.project_id   for_each = toset([     "cloudresourcemanager.googleapis.com",     "firebase.googleapis.com",     "firebaseapphosting.googleapis.com",     "serviceusage.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created earlier. resource "google_firebase_project" "apphosting" {   provider = google-beta   project  = google_project.apphosting.project_id    depends_on = [google_project_service.services] }  # Creates a Firebase Web App in the new project created earlier. resource "google_firebase_web_app" "apphosting" {   provider     = google-beta   project      = google_firebase_project.apphosting.project   display_name = "My web app" }  # Creates a Firebase App Hosting Backend resource "google_firebase_app_hosting_backend" "example" {   provider = google-beta   project  = google_firebase_project.apphosting.project    # Choose the region closest to your users   location         = "name-of-region-for-service"   backend_id       = "name-of-backend-for-service"   app_id           = google_firebase_web_app.apphosting.app_id   display_name     = "My Backend"   serving_locality = "GLOBAL_ACCESS" # or "REGIONAL_STRICT"   service_account  = google_service_account.service_account.email }  # Creates the service account for Firebase App Hosting resource "google_service_account" "service_account" {   provider = google-beta   project  = google_firebase_project.apphosting.project    # Must be firebase-app-hosting-compute   account_id                   = "firebase-app-hosting-compute"   display_name                 = "Firebase App Hosting compute service account"    # Do not throw if already exists   create_ignore_already_exists = true }  # Adds permission to the App Hosting service account resource "google_project_iam_member" "app_hosting_sa" {   provider = google-beta   project  = google_firebase_project.apphosting.project    for_each = toset([     "roles/firebase.sdkAdminServiceAgent",     "roles/firebaseapphosting.computeRunner"   ])    role   = each.key   member = google_service_account.service_account.member }  # Creates a Build resource "google_firebase_app_hosting_build" "example" {   provider = google-beta    project          = google_firebase_app_hosting_backend.example.project   location         = google_firebase_app_hosting_backend.example.location   backend          = google_firebase_app_hosting_backend.example.backend_id   build_id         = "my-build"    source {     container {       # TODO: use your own image       image = "us-docker.pkg.dev/cloudrun/container/hello"     }   } }  # Rolls out the Build resource "google_firebase_app_hosting_traffic" "example" {   provider = google-beta    project          = google_firebase_app_hosting_backend.example.project   location         = google_firebase_app_hosting_backend.example.location   backend          = google_firebase_app_hosting_backend.example.backend_id    target {     splits {       build = google_firebase_app_hosting_build.example.name       percent = 100     }   } }

# Creates a new Google Cloud project. resource "google_project" "apphosting" {   provider   = google-beta.no_user_project_override   folder_id  = "folder-id-for-new-project"   name       = "Project Display Name"   project_id = "project-id-for-new-project"    # Associates the project with a Cloud Billing account   # (required to use Firebase App Hosting).   billing_account = "000000-000000-000000" }  # Enables required APIs. resource "google_project_service" "services" {   provider = google-beta.no_user_project_override   project  = google_project.apphosting.project_id   for_each = toset([     "cloudresourcemanager.googleapis.com",     "firebase.googleapis.com",     "firebaseapphosting.googleapis.com",     "serviceusage.googleapis.com",     "developerconnect.googleapis.com",   ])   service = each.key    # Don't disable the service if the resource block is removed by accident.   disable_on_destroy = false }  # Enables Firebase services for the new project created earlier. resource "google_firebase_project" "apphosting" {   provider = google-beta   project  = google_project.apphosting.project_id    depends_on = [google_project_service.services] }  # Creates a Firebase Web App in the new project created earlier. resource "google_firebase_web_app" "apphosting" {   provider     = google-beta   project      = google_firebase_project.apphosting.project   display_name = "My web app" }  ### Setting up Firebase App Hosting ###  # Creates a Firebase App Hosting Backend resource "google_firebase_app_hosting_backend" "example" {   provider = google-beta   project  = google_firebase_project.apphosting.project    # Choose the region closest to your users   location         = "name-of-region-for-service"   backend_id       = "name-of-backend-for-service"   app_id           = google_firebase_web_app.apphosting.app_id   display_name     = "My Backend"   serving_locality = "GLOBAL_ACCESS" # or "REGIONAL_STRICT"   service_account  = google_service_account.service_account.email    codebase {     repository = google_developer_connect_git_repository_link.my-repository.name     root_directory = "/"   } }  # Creates the service account for Firebase App Hosting resource "google_service_account" "service_account" {   provider = google-beta   project  = google_firebase_project.apphosting.project    # Must be firebase-app-hosting-compute   account_id                   = "firebase-app-hosting-compute"   display_name                 = "Firebase App Hosting compute service account"    # Do not throw if already exists   create_ignore_already_exists = true }  # Adds permission to the App Hosting service account resource "google_project_iam_member" "app_hosting_sa" {   provider = google-beta   project  = google_firebase_project.apphosting.project    for_each = toset([     "roles/developerconnect.readTokenAccessor",     "roles/firebase.sdkAdminServiceAgent",     "roles/firebaseapphosting.computeRunner"   ])    role   = each.key   member = google_service_account.service_account.member }  # Configures auto rollout from GitHub resource "google_firebase_app_hosting_traffic" "example" {   provider = google-beta    project  = google_firebase_app_hosting_backend.example.project   location = google_firebase_app_hosting_backend.example.location   backend  = google_firebase_app_hosting_backend.example.backend_id    rollout_policy {     codebase_branch = "main" # Or another branch   } }  ###  ### Setting up a connection to GitHub ###  # Provisions Service Agent for Developer Connect resource "google_project_service_identity" "devconnect-p4sa" {   provider = google-beta   project  = google_firebase_project.apphosting.project    service  = "developerconnect.googleapis.com" }  # Adds permission to Developer Connect Service Agent to manager GitHub tokens resource "google_project_iam_member" "devconnect-secret" {   provider = google-beta   project  = google_firebase_project.apphosting.project    role     = "roles/secretmanager.admin"   member   = google_project_service_identity.devconnect-p4sa.member }  # Connects to a GitHub account resource "google_developer_connect_connection" "my-connection" {   provider = google-beta   project  = google_firebase_project.apphosting.project    # Must match the google_firebase_app_hosting_backend's location   location = "name-of-region-for-service"    # Must be `firebase-app-hosting-github-oauth`   connection_id = "firebase-app-hosting-github-oauth"   github_config {     github_app = "FIREBASE"   }   depends_on = [google_project_iam_member.devconnect-secret] }  # Follow the next steps to set up the GitHub connection # Tip: Run terraform refresh to obtain the output output "next_steps" {   description = "Follow the action_uri if present to continue setup"   value = google_developer_connect_connection.my-connection.installation_state }  # Links a GitHub repo to the project resource "google_developer_connect_git_repository_link" "my-repository" {   provider = google-beta   project  = google_firebase_project.apphosting.project   location = google_developer_connect_connection.my-connection.location    git_repository_link_id = "my-repo-id"   parent_connection = google_developer_connect_connection.my-connection.connection_id   clone_uri = "https://github.com/myuser/myrepo.git" }  ###