Cloud Architecture
Google Cloud — hiện tại & lộ trình migration
Reviewer Google Cloud thấy rõ: đang chạy gì trên VM, migrate lên Cloud Run / Cloud SQL / GKE khi nào, Credits dùng vào đâu.
Migration roadmap
VM hiện tại → GCP managed (5 phase)
Lộ trình cụ thể cho Google Cloud for Startups Credits — reviewer thấy rõ service nào migrate khi nào.
┌─────────────┐ ┌──────────────┐ ┌─────────────┐ ┌─────────┐ ┌──────────┐ │ GCP VM │───▶│ Cloud Run │───▶│ Cloud SQL │───▶│ GKE │───▶│ CDN+SLO │ │ Compose now │ │ Gateway·Id· │ │ Memorystore │ │ Stream │ │ Multi- │ │ Caddy·PG· │ │ Partner APIs │ │ GCS backups │ │ Vertex │ │ region │ │ Redis │ │ Secret Mgr │ │ │ │ batch │ │ │ └─────────────┘ └──────────────┘ └─────────────┘ └─────────┘ └──────────┘ Q2 2026 LIVE Q3 2026 BUILD Q4 2026 BUILD Q1 2027 Q2 2027
Q2 2026 · NowLive
Baseline production (GCP VM)
Credits ước tính: 10%
- • GCP VM · Docker Compose prod
- • Caddy TLS · Gateway IAM · Identity JWT
- • PostgreSQL 16 · Redis 7 · investor probes
Q3 2026Live
Đưa stateless services lên Cloud Run
Credits ước tính: 25%
- • Gateway · Identity trên Cloud Run (scripts staging)
- • Artifact Registry + Cloud Build CI
- • Secret Manager · Workload Identity
- • Runbook: deploy/cloud-run/
Q4 2026Đang xây
Tầng dữ liệu managed
Credits ước tính: 20%
- • Cloud SQL HA · Memorystore · GCS media driver
- • Runbook: deploy/cloud-sql/ · memorystore/ · gcs/
- • Media service MEDIA_STORAGE_DRIVER=gcs
Q1 2027Đang xây
GKE cho streaming & device mesh
Credits ước tính: 25%
- • GKE MediaMTX + streaming workers
- • Vertex AI trong ai-service
- • Cloud Run đa vùng (VN + SG)
- • Runbook: deploy/gke/ · vertex-rag.md
Q2 2027Đang xây
Global edge & observability
Credits ước tính: 20%
- • SLO 99.9% · Cloud Monitoring uptime checks
- • SOC2 readiness · security audit docs
- • Cloud CDN + Cloud Armor · DR drill
- • Runbook: deploy/slo/ · docs/security/
Service mapping — hiện tại → mục tiêu GCP
| Module | Hiện tại | Mục tiêu GCP | Phase |
|---|---|---|---|
| Gateway | Docker · gateway container | Cloud Run (autoscale) | Q3 2026 |
| Identity | Docker · identity-service | Cloud Run + Cloud SQL | Q3–Q4 2026 |
| Partner / Commerce | Docker · partner + product | Cloud Run | Q3 2026 |
| PostgreSQL | postgres:16-alpine on VM | Cloud SQL PostgreSQL HA | Q4 2026 |
| Redis | redis:7-alpine on VM | Memorystore Redis | Q4 2026 |
| Media / uploads | Local volumes | Cloud Storage + CDN | Q4 2026 |
| Streaming / IoT | MediaMTX · device-service on VM | GKE node pools | Q1 2027 |
| My AI / RAG | ai-service container | Vertex AI + Vector Search | Q1 2027 |
| Secrets | _secrets/*.env on VM | Secret Manager + IAM | Q3 2026 |
| Observability | Docker logs · manual probes | Cloud Monitoring + SLO | Q2 2027 |
Phân bổ Google Cloud Credits (ước tính)
Cloud Run + Cloud Build30%
Autoscale microservices stateless
Vertex AI25%
My AI Concierge · RAG · agent tools
Cloud SQL + Memorystore20%
Tầng dữ liệu HA managed
GKE (streaming/IoT)15%
Device mesh · camera ingest
CDN · Monitoring · Security10%
Edge + SLO + WAF
Chi tiết theo dịch vụ GCP
Hạ tầng hiện tại
- •Google Cloud VM (production)
- •Docker Compose · Caddy TLS
- •PostgreSQL · Redis
- •Gateway IAM + JWT RS256
Kiến trúc mục tiêu
- •Cloud Run đa vùng
- •GKE cho device/streaming mesh
- •Cloud SQL HA + Memorystore
- •Global CDN + WAF
Migration Google Cloud
- •Đưa Gateway + Identity lên Cloud Run
- •Migrate Postgres sang Cloud SQL
- •Secrets → Secret Manager
- •Observability → Cloud Monitoring
Vertex AI
- •My AI Concierge quy mô lớn
- •RAG trên dữ liệu Identity + workspace
- •Agent tools cho workflow đối tác
- •Edge inference cho device fleets
Cloud Run
- •Microservices stateless
- •Autoscale theo route prefix
- •Deploy zero-downtime
GKE
- •Streaming ingest workers
- •Device telemetry processors
- •Batch AI pipelines
Cloud SQL
- •Schema Identity · Commerce · Finance
- •Read replica cho reporting
- •Point-in-time recovery
Redis (Memorystore)
- •Session + rate limits
- •Visa tour state
- •Cache device real-time
Cloud Storage
- •Media uploads · camera frames
- •Tài liệu investor static
- •Backup artifacts
Monitoring
- •Dashboard Cloud Monitoring
- •SLO theo service
- •Alert Gateway/Identity
Google Cloud
Tại sao Sapalens cần Google Cloud
Trả lời trực tiếp cho Google for Startups — scale AI, identity, IoT, marketplace, 34 tỉnh/thành.
- • AI Concierge at scale for millions of social actors
- • Identity OS multi-tenant workspaces
- • Live camera / IoT streaming infrastructure
- • Marketplace and partner workspace expansion
- • Data pipelines for 34 provinces
- • Secure finance, logistics, and governance modules
- • Edge AI on device fleets