Institutional · Historical source presentation; edition undated

Geospatial delivery on Google Cloud: products, infrastructure and release responsibility

Architecture and delivery design; source presentation author

The delivery design separates deployable products from the infrastructure that runs them. Tagged Terraform modules, independent pipelines and an explicit review-to-production workflow let developers test changes while keeping production responsibility visible.

Several products, separate release decisions

GeoServer, CKAN and GeoNetwork have different installation requirements and release cycles. A platform integrating them must decide which software changes belong to a product release and which changes belong to the infrastructure that deploys it.

The presentation also distinguishes review work from production work. Developers need a reproducible environment for experiments, while a production change needs supervision and shared operational knowledge. The source describes this as a delivery convention and architecture, without supplying a measured incident or performance study.

Two delivery streams meet in review

Product projects build installation artifacts for a Debian or Ubuntu instance. The source names setup.sh and resources.tar.gz as their outputs. Infrastructure projects consume those artifacts and provide deployment configuration through Terraform. The products and the infrastructure can therefore follow independent release cycles (source slides 6 and 17).

Tagged Terraform modules make an infrastructure release reproducible and reusable. A review environment can be deployed from scratch, integrated, tested and destroyed when it is no longer needed. The source pipeline diagram explicitly shows artifact fetching, integration testing and destruction of review resources (slides 8–11).

The diagram below abstracts those delivery decisions. It distinguishes changes, review evidence and human responsibility. It does not assert an exact inventory of cloud resources or a deployment topology.

Product releases, infrastructure changes and release responsibility

A software change produces release artifacts through CI. A Terraform change produces a tagged infrastructure configuration and integration checks. Both enter review. Tester evidence supports the supervised production decision, followed by a template and disk rollout. Developer review work and the DevOps pair session are separate responsibilities.

Open full-size SVG
Geospatial cloud delivery: product, infrastructure and release responsibility Software releases produce setup and resource artifacts. Terraform changes produce tagged modules and review infrastructure. Both enter review. Tester checks support a supervised production change with a DevOps pair session and a managed instance group rollout. This is an abstract delivery workflow, not an inventory of cloud resources. Two release streams, one review decision Abstract workflow reconstructed from the original GCP geospatial delivery slides PRODUCT RELEASE Product changeGeoServer, CKANor GeoNetwork Product pipelineIndependentrelease cycle Release artifactssetup.shresources.tar.gz Deploy in reviewFetch the selectedproduct artifacts INFRASTRUCTURE CHANGE Terraform changeReusablemodules Tagged modulesReproduciblerelease inputs Review integrationDeploy, integrateand test Review environmentIsolated fromproduction changes RELEASE RESPONSIBILITY Developer reviewAutonomousdeployment andexperiments Tester checksService testsbefore promotion DevOps pair sessionAuthorise andsupervise theproduction change Production rolloutInstance template,fresh disks andmanaged group update Both streams supply review evidence Teal: release inputs and review evidence. Ochre: responsibility for the release decision. The source describes rolling updates after primary-instance changes. This is separate from JMS propagation. Source: complete 19-slide GCP geospatial cluster presentation, especially slides 4–6, 8–14 and 17.

Make production changes a shared responsibility

The source allows autonomous deployment and testing in review. Production activities require authorisation and a pair session with the person responsible for DevOps. This boundary supports knowledge sharing and a check before change reaches the live environment (slide 4).

The workflow moves features from review, through testing, to production. The slides identify JMeter and other service tests, continuous testing, and fail-fast principles. They describe an intended verification process. They do not provide test results or demonstrate a measured coverage percentage (slide 5).

Replication has a distinct purpose from software delivery. A primary instance detects configuration or data changes and triggers an update pipeline. Terraform produces a new instance template, attaches fresh disk copies and policies, triggers a managed instance group rolling update, and cleans up outdated disks and templates (slides 12–14).

The slides describe automatic backups and recovery using a previous backup, with experiments first performed on a copy in review. These procedures make recovery a design concern. The source does not establish a measured recovery time, recovery point or availability result (slide 7).

A documented delivery architecture

The source establishes an architecture account with explicit product boundaries, reusable infrastructure modules, release artifacts, review verification and production responsibility. It makes the propagation mechanism and the role of the DevOps team inspectable through a complete 19-slide public copy.

The deck’s capacity statement is a design intention: scaling to additional instances to support thousands of requests per minute. It includes historical Google Cloud region and latency descriptions. This case does not convert those statements into current cloud facts, observed production throughput or an independently validated benchmark.

Versioned inputs help explain a deployment

Separating product artifacts from infrastructure definitions makes the inputs to a deployment easier to name and reproduce. The operational question remains whether the selected software artifact, infrastructure tag and data snapshot belong together.

For a current implementation I would make those inputs explicit in the release record and check review-to-production parity, rollback behaviour and propagation ordering. I would also define which test failures prevent promotion. These are retrospective evaluation questions, not claims that the historical platform already implemented those additional controls.

Questions & discussion

Why separate product and infrastructure pipelines?

The source gives products and infrastructure independent release cycles. A product publishes installation artifacts, while the infrastructure controls how those artifacts run, integrate and roll out.

Read the relevant section
Who can change production?

The described workflow requires authorisation and a pair session with the person responsible for DevOps. Review deployment and testing are designed for autonomous developer use.

Read the relevant section
What does the rolling update propagate?

The source pipeline creates an instance template with fresh disk copies and policies after a primary-instance change, then updates the managed instance group. That process is distinct from the older GeoServer JMS configuration-messaging extension.

Read the relevant section

Sources & scope

Related documents

Presentation · Undated source edition

Geospatial platforms on Google Cloud: deployment and replication

Complete 19-slide source presentation on Terraform modules, product and infrastructure pipelines, review and production workflows, regional replicas and rolling updates. Contacts and operational screenshots are redacted. Capacity statements describe intended design.

Carlo Cancellieri. Public copy of the original GCP geospatial cluster presentation. Historical product descriptions and region counts remain as originally presented.

Read the related case study