This is the Terraform module for the Ona GCP Runner. It deploys an Ona runner in your Google Cloud VPC, where each development environment runs as a Compute Engine instance inside your project — source code and credentials never leave your infrastructure.
GCP Runners require an Enterprise plan. To get access, contact our sales.
Refer to the Ona documentation for setup instructions, configuration options, and troubleshooting.
The runner-with-networking example
provides a full infrastructure setup including VPC, DNS, and certificates.
Terraform creates the Secret Manager secret and its IAM policy, but it does not manage a secret version for the runner secrets key. The runner writes the first version, verifies that Secret Manager returns the same key, and then removes the legacy copy from Redis. This keeps the key material out of Terraform state.
Subsequent Terraform applies leave runner-created versions unchanged. A
terraform destroy removes the secret and its versions with the rest of the
runner infrastructure.
New stable releases are published roughly once a week. To get notified when a release is available, subscribe to the Pub/Sub release notifications topic from your own GCP project. See the Release Notifications documentation for topic details, message format, and subscription examples.