[hoangsvit]

New lab — GSP1316

• Establish Site to Site Connectivity with HA-VPN using NCC, Google Skills Catalog; active Arcade membership not verified.
• Official tasks: https://www.skills.google/focuses/124818?parent=catalog
• CLI semantics cross-checked against https://cloud.google.com/sdk/gcloud/reference/network-connectivity/spokes/linked-vpn-tunnels/create
• Main/PR/article duplicate check: no matching GSP1316 folder, PR by ID/title, or indexed eplus.dev post.
• Independent Bash implementation; Copyright (c) 2026 ePlus.DEV | Unlicense.

Coverage

• Task 1: create NCC hub.
• Task 2: discover two routing-vpc-side HA VPN tunnels for each office, create two regional linked VPN spokes with --site-to-site-data-transfer; official 100-point checkpoint.
• Task 3: discover office VM internal IPs and verify bidirectional ping through the topology.
• Task 4: cleanup of only the new spokes and hub, opt-in after grading.
• HASHNODE.md: complete Overview, Setup, resource verification, Task 1–4, manual commands, checkpoint, sources, and Solution at the end. Quick uses exactly two main-branch commands; unavailable until merge. Manual YouTube and diagram embedding rights remain unverified.

Safety and limitations

• Auto-detect project, zones, regions and VPN tunnels; no hardcoded secret/region/project ID.
• Refuse ambiguous tunnel selection (must be exactly two routing-side tunnels per office).
• Idempotent resource creation; bounded retries; least-privilege scope; no modifications to old lab scripts.
• TTY/NO_COLOR/FORCE_COLOR behavior; no auto-merge or main push.
• static validated only; runtime/grader unverified. GitHub CI for exact PR head must confirm bash -n and ShellCheck severity error.

Test latest PR commit

Run only in authorized Google Skills Cloud Shell. Resolves latest branch SHA, checks it is nonempty, fetches the immutable commit's script to avoid stale branch caches, and records a SHA-stamped log:

BRANCH=feat/gsp1316-ncc-site-to-site-scout-20261030
SHA="$(git ls-remote https://github.com/ePlus-DEV/storage.git refs/heads/$BRANCH | awk '{print $1}')"
test -n "$SHA" || { echo "Missing latest PR head SHA" >&2; exit 1; }
curl -fL --retry 3 "https://raw.githubusercontent.com/ePlus-DEV/storage/$SHA/labs/GSP1316/lab.sh" -o lab-test.sh
set -o pipefail
FORCE_COLOR=1 bash lab-test.sh 2>&1 | tee "lab-GSP1316-${SHA:0:12}.log"

Do not use source lab.sh in the PR tee test. Runtime/grader PASS is not asserted.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}