From 3b00d7346d8bf39c2ed782b43280f1659d1d07bd Mon Sep 17 00:00:00 2001
From: "Nathan (Blaise) Bruer" <github.blaise@allada.com>
Date: Thu, 30 Nov 2023 21:42:55 -0600
Subject: [PATCH] Add GCP to terraform deployment examples

Adds Google Cloud deploymnet example to the "deployment-examples"
terraform directory.
---
 deployment-examples/terraform/GCP/README.md   |   35 +
 .../terraform/GCP/deployments/dev/main.tf     |   38 +
 .../GCP/deployments/dev/variables.tf          |   33 +
 .../GCP/deployments/global/api_services.tf    |   31 +
 .../terraform/GCP/deployments/global/dns.tf   |   28 +
 .../terraform/GCP/deployments/global/main.tf  |   29 +
 .../GCP/deployments/global/ssl_certs.tf       |   55 +
 .../GCP/deployments/global/storage_buckets.tf |   23 +
 .../GCP/deployments/global/variables.tf       |   38 +
 .../terraform/GCP/module/api_services.tf      |   49 +
 .../terraform/GCP/module/base_image.tf        |  160 ++
 .../terraform/GCP/module/cloud_functions.tf   |  105 ++
 .../terraform/GCP/module/cloud_metrics.tf     |   54 +
 .../terraform/GCP/module/dns.tf               |   17 +
 .../terraform/GCP/module/iam.tf               |   22 +
 .../terraform/GCP/module/instance_browser.tf  |  247 +++
 .../terraform/GCP/module/instance_cas.tf      |  249 +++
 .../GCP/module/instance_scheduler.tf          |  264 +++
 .../GCP/module/instance_x86_cpu_worker.tf     |  179 ++
 .../terraform/GCP/module/s3.tf                |   76 +
 .../GCP/module/scripts/bb_browser_config.json |   22 +
 .../GCP/module/scripts/browser_proxy.json     |   70 +
 .../terraform/GCP/module/scripts/cas.json     |  148 ++
 .../module/scripts/cloud_functions/index.js   |  100 ++
 .../scripts/cloud_functions/package.json      |    8 +
 .../module/scripts/cloud_functions/yarn.lock  | 1551 +++++++++++++++++
 .../GCP/module/scripts/cloud_publisher.py     |  143 ++
 .../GCP/module/scripts/create_filesystem.sh   |   49 +
 .../GCP/module/scripts/entrypoint.sh          |   20 +
 .../GCP/module/scripts/native-link.service    |   13 +
 .../GCP/module/scripts/scheduler.json         |  163 ++
 .../GCP/module/scripts/start_native_link.sh   |  147 ++
 .../terraform/GCP/module/scripts/worker.json  |  104 ++
 .../terraform/GCP/module/ssh_keys.tf          |   21 +
 .../terraform/GCP/module/ssl.tf               |   24 +
 .../terraform/GCP/module/variables.tf         |   33 +
 .../terraform/GCP/module/vpc.tf               |  103 ++
 37 files changed, 4451 insertions(+)
 create mode 100644 deployment-examples/terraform/GCP/README.md
 create mode 100644 deployment-examples/terraform/GCP/deployments/dev/main.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/dev/variables.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/global/api_services.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/global/dns.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/global/main.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/global/ssl_certs.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/global/storage_buckets.tf
 create mode 100644 deployment-examples/terraform/GCP/deployments/global/variables.tf
 create mode 100644 deployment-examples/terraform/GCP/module/api_services.tf
 create mode 100644 deployment-examples/terraform/GCP/module/base_image.tf
 create mode 100644 deployment-examples/terraform/GCP/module/cloud_functions.tf
 create mode 100644 deployment-examples/terraform/GCP/module/cloud_metrics.tf
 create mode 100644 deployment-examples/terraform/GCP/module/dns.tf
 create mode 100644 deployment-examples/terraform/GCP/module/iam.tf
 create mode 100644 deployment-examples/terraform/GCP/module/instance_browser.tf
 create mode 100644 deployment-examples/terraform/GCP/module/instance_cas.tf
 create mode 100644 deployment-examples/terraform/GCP/module/instance_scheduler.tf
 create mode 100644 deployment-examples/terraform/GCP/module/instance_x86_cpu_worker.tf
 create mode 100644 deployment-examples/terraform/GCP/module/s3.tf
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/bb_browser_config.json
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/browser_proxy.json
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/cas.json
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/cloud_functions/index.js
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/cloud_functions/package.json
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/cloud_functions/yarn.lock
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/cloud_publisher.py
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/create_filesystem.sh
 create mode 100755 deployment-examples/terraform/GCP/module/scripts/entrypoint.sh
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/native-link.service
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/scheduler.json
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/start_native_link.sh
 create mode 100644 deployment-examples/terraform/GCP/module/scripts/worker.json
 create mode 100644 deployment-examples/terraform/GCP/module/ssh_keys.tf
 create mode 100644 deployment-examples/terraform/GCP/module/ssl.tf
 create mode 100644 deployment-examples/terraform/GCP/module/variables.tf
 create mode 100644 deployment-examples/terraform/GCP/module/vpc.tf

diff --git a/deployment-examples/terraform/GCP/README.md b/deployment-examples/terraform/GCP/README.md
new file mode 100644
index 000000000..de848d1d9
--- /dev/null
+++ b/deployment-examples/terraform/GCP/README.md
@@ -0,0 +1,35 @@
+# TODO
+
+Documentation coming soon.
+
+# TL;Dr
+```sh
+
+# First we need to apply the global config. This config
+# is unlikely to change much. The "dev" section below
+# depends on this "global" section to be applied first.
+# It is done this way to reduce cost of development, since
+# SSL certs costs ~$20 every time they are generated, so we
+# generate them only once and keep using the same one.
+#
+# Important: Once it is applied, you need to immediately
+# create a "NS" record to the domain specified in "gcp_dns_zone"
+# in the whatever DNS service you are using and point it to the
+# NS record specified by the GCP DNS zone it created.
+cd deployment-examples/terraform/GCP/deployments/global
+
+terraform init
+terraform apply \
+  -var gcp_project_id=project-name-goes-here \
+  -var gcp_dns_zone=my-domain.example.com \
+  -var gcp_region=us-central1 \
+  -var gcp_zone=us-central1-a
+
+# After "global" is applied we need to apply the "dev" section.
+# This is the majority of the configuration.
+cd deployment-examples/terraform/GCP/deployments/dev
+
+terraform init
+terraform apply \
+  -var gcp_project_id=project-name-goes-here
+```
diff --git a/deployment-examples/terraform/GCP/deployments/dev/main.tf b/deployment-examples/terraform/GCP/deployments/dev/main.tf
new file mode 100644
index 000000000..bf1f00449
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/dev/main.tf
@@ -0,0 +1,38 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+terraform {
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "5.5.0"
+    }
+  }
+  required_version = ">= 1.6.3"
+}
+
+provider "google" {
+  project = var.gcp_project_id
+  region  = var.gcp_region
+  zone    = var.gcp_zone
+}
+
+module "native_link" {
+  source = "../../module"
+
+  gcp_project_id = var.gcp_project_id
+  gcp_region     = var.gcp_region
+  gcp_zone       = var.gcp_zone
+  project_prefix = var.project_prefix
+}
diff --git a/deployment-examples/terraform/GCP/deployments/dev/variables.tf b/deployment-examples/terraform/GCP/deployments/dev/variables.tf
new file mode 100644
index 000000000..e55e65710
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/dev/variables.tf
@@ -0,0 +1,33 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+variable "gcp_project_id" {
+  description = "Google cloud project ID"
+  default     = "my-gcp-project-id"
+}
+
+variable "gcp_region" {
+  description = "Google cloud region"
+  default     = "us-central1"
+}
+
+variable "gcp_zone" {
+  description = "Google cloud zone"
+  default     = "us-central1-b"
+}
+
+variable "project_prefix" {
+  description = "Prefix all names with this value"
+  default     = "nldev"
+}
diff --git a/deployment-examples/terraform/GCP/deployments/global/api_services.tf b/deployment-examples/terraform/GCP/deployments/global/api_services.tf
new file mode 100644
index 000000000..42601a983
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/global/api_services.tf
@@ -0,0 +1,31 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_project_service" "dns_api" {
+  service                    = "dns.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "compute_api" {
+  service                    = "compute.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "certificate_manager_api" {
+  service                    = "certificatemanager.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
diff --git a/deployment-examples/terraform/GCP/deployments/global/dns.tf b/deployment-examples/terraform/GCP/deployments/global/dns.tf
new file mode 100644
index 000000000..a0fc09688
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/global/dns.tf
@@ -0,0 +1,28 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_dns_managed_zone" "default" {
+  name        = "${var.project_prefix}-dns-zone"
+  dns_name    = "${var.gcp_dns_zone}."
+  description = "Base DNS zone for Native Link resources"
+  depends_on  = [google_project_service.dns_api]
+}
+
+resource "google_dns_record_set" "dns_authorization_wildcard_certificate" {
+  name         = google_certificate_manager_dns_authorization.default.dns_resource_record[0].name
+  managed_zone = google_dns_managed_zone.default.name
+  type         = google_certificate_manager_dns_authorization.default.dns_resource_record[0].type
+  ttl          = 300
+  rrdatas      = [google_certificate_manager_dns_authorization.default.dns_resource_record[0].data]
+}
diff --git a/deployment-examples/terraform/GCP/deployments/global/main.tf b/deployment-examples/terraform/GCP/deployments/global/main.tf
new file mode 100644
index 000000000..649e5f014
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/global/main.tf
@@ -0,0 +1,29 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+terraform {
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "4.84.0"
+    }
+  }
+  required_version = ">= 0.14.9"
+}
+
+provider "google" {
+  project = var.gcp_project_id
+  region  = var.gcp_region
+  zone    = var.gcp_zone
+}
diff --git a/deployment-examples/terraform/GCP/deployments/global/ssl_certs.tf b/deployment-examples/terraform/GCP/deployments/global/ssl_certs.tf
new file mode 100644
index 000000000..82194221d
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/global/ssl_certs.tf
@@ -0,0 +1,55 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Note: This call will cost $20 every time it is called.
+resource "google_certificate_manager_certificate" "default" {
+  name = "${var.project_prefix}-wildcard-ssl-certificate"
+
+  managed {
+    domains = [
+      "*.${google_certificate_manager_dns_authorization.default.domain}",
+      "${google_certificate_manager_dns_authorization.default.domain}"
+    ]
+    dns_authorizations = [
+      google_certificate_manager_dns_authorization.default.id
+    ]
+  }
+}
+
+resource "google_certificate_manager_dns_authorization" "default" {
+  name       = "${var.project_prefix}-dns-authorization"
+  domain     = var.gcp_dns_zone
+  depends_on = [google_project_service.certificate_manager_api]
+}
+
+resource "google_certificate_manager_certificate_map" "default" {
+  name       = "${var.project_prefix}-certificate-map"
+  depends_on = [google_project_service.certificate_manager_api]
+}
+
+resource "google_certificate_manager_certificate_map_entry" "default_certificate_entry" {
+  name         = "${var.project_prefix}-default-domain-entry"
+  description  = "${google_certificate_manager_dns_authorization.default.domain} certificate entry"
+  map          = google_certificate_manager_certificate_map.default.name
+  certificates = [google_certificate_manager_certificate.default.id]
+  hostname     = google_certificate_manager_dns_authorization.default.domain
+}
+
+resource "google_certificate_manager_certificate_map_entry" "sub_domain_certificate_entry" {
+  name         = "${var.project_prefix}-sub-domain-entry"
+  description  = "*.${google_certificate_manager_dns_authorization.default.domain} certificate entry"
+  map          = google_certificate_manager_certificate_map.default.name
+  certificates = [google_certificate_manager_certificate.default.id]
+  hostname     = "*.${google_certificate_manager_dns_authorization.default.domain}"
+}
diff --git a/deployment-examples/terraform/GCP/deployments/global/storage_buckets.tf b/deployment-examples/terraform/GCP/deployments/global/storage_buckets.tf
new file mode 100644
index 000000000..3296a1068
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/global/storage_buckets.tf
@@ -0,0 +1,23 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_storage_bucket" "state_bucket" {
+  name          = "${var.project_prefix}-terraform-state-bucket-${var.gcp_project_id}"
+  force_destroy = false
+  location      = "US"
+  storage_class = "STANDARD"
+  versioning {
+    enabled = true
+  }
+}
diff --git a/deployment-examples/terraform/GCP/deployments/global/variables.tf b/deployment-examples/terraform/GCP/deployments/global/variables.tf
new file mode 100644
index 000000000..775f50939
--- /dev/null
+++ b/deployment-examples/terraform/GCP/deployments/global/variables.tf
@@ -0,0 +1,38 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+variable "gcp_project_id" {
+  description = "Google cloud project ID"
+  default     = "my-gcp-project-id"
+}
+
+variable "gcp_dns_zone" {
+  description = "Base DNS zone"
+  default     = "example.com"
+}
+
+variable "gcp_region" {
+  description = "Google cloud region"
+  default     = "us-central1"
+}
+
+variable "gcp_zone" {
+  description = "Google cloud zone"
+  default     = "us-central1-b"
+}
+
+variable "project_prefix" {
+  description = "Prefix all names with this value"
+  default     = "nldev"
+}
diff --git a/deployment-examples/terraform/GCP/module/api_services.tf b/deployment-examples/terraform/GCP/module/api_services.tf
new file mode 100644
index 000000000..e471185c0
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/api_services.tf
@@ -0,0 +1,49 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_project_service" "secret_manager_api" {
+  service                    = "secretmanager.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "cloud_function_api" {
+  service                    = "cloudfunctions.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "run_api" {
+  service                    = "run.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "cloudbuild_api" {
+  service                    = "cloudbuild.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "cloudscheduler_api" {
+  service                    = "cloudscheduler.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
+
+resource "google_project_service" "storage_api" {
+  service                    = "storage.googleapis.com"
+  disable_dependent_services = false
+  disable_on_destroy         = false
+}
diff --git a/deployment-examples/terraform/GCP/module/base_image.tf b/deployment-examples/terraform/GCP/module/base_image.tf
new file mode 100644
index 000000000..04b559b29
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/base_image.tf
@@ -0,0 +1,160 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_compute_instance" "build_instance" {
+  project      = var.gcp_project_id
+  provider     = google-beta
+  name         = "${var.project_prefix}-build-instance"
+  machine_type = "e2-highcpu-32"
+  zone         = var.gcp_zone
+
+  boot_disk {
+    initialize_params {
+      image = "ubuntu-os-cloud/ubuntu-2204-lts"
+      size  = "10"
+    }
+  }
+
+  network_interface {
+    network = data.google_compute_network.default.id
+
+    access_config {
+      # Ephemeral.
+      network_tier = "STANDARD"
+    }
+  }
+
+  scheduling {
+    provisioning_model          = "SPOT"
+    preemptible                 = true
+    automatic_restart           = false
+    instance_termination_action = "DELETE"
+
+    # This instance is not needed, so shut it down after 1 hour.
+    max_run_duration {
+      seconds = 3600
+    }
+  }
+
+  metadata = {
+    ssh-keys = "ubuntu:${data.tls_public_key.native_link_pem.public_key_openssh}"
+  }
+
+  connection {
+    host        = coalesce(self.network_interface.0.access_config.0.nat_ip, self.network_interface.0.network_ip)
+    agent       = true
+    type        = "ssh"
+    user        = "ubuntu"
+    private_key = data.tls_public_key.native_link_pem.private_key_openssh
+  }
+
+  # Create tarball of current native-link checkout.
+  # Note: In production this should be changed to some pinned release version.
+  provisioner "local-exec" {
+    command = <<EOT
+      set -ex
+      ROOT_MODULE="$(realpath ${path.root})"
+      rm -rf $ROOT_MODULE/.terraform-native-link-builder
+      mkdir -p $ROOT_MODULE/.terraform-native-link-builder
+      cd $ROOT_MODULE/../../../../..
+      find . ! -ipath '*/target*' -and ! \( -ipath '*/.*' -and ! -name '.rustfmt.toml' -and ! -name '.bazelrc' \) -and ! -ipath './bazel-*' -type f -print0 | tar cvf $ROOT_MODULE/.terraform-native-link-builder/file.tar.gz --null -T -
+    EOT
+  }
+
+  provisioner "file" {
+    source      = "${path.module}/scripts/create_filesystem.sh"
+    destination = "create_filesystem.sh"
+  }
+
+  # Prepare our instance.
+  provisioner "remote-exec" {
+    inline = [
+      <<EOT
+        set -eux
+        sudo DEBIAN_FRONTEND=noninteractive apt-get update &&
+        sudo DEBIAN_FRONTEND=noninteractive apt-get install -y curl jq build-essential lld pkg-config libssl-dev &&
+        curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y &&
+        sudo mv ~/create_filesystem.sh /root/create_filesystem.sh &&
+        sudo chmod +x /root/create_filesystem.sh &&
+        sudo /root/create_filesystem.sh /mnt/data
+      EOT
+    ]
+  }
+
+  # Upload our tarball to the instance.
+  provisioner "file" {
+    source      = "${path.root}/.terraform-native-link-builder/file.tar.gz"
+    destination = "/tmp/file.tar.gz"
+  }
+
+  # Build and install native-link.
+  provisioner "remote-exec" {
+    inline = [
+      <<EOT
+        set -eux &&
+        mkdir -p /tmp/native-link &&
+        cd /tmp/native-link &&
+        tar xvf /tmp/file.tar.gz &&
+        . ~/.cargo/env &&
+        cargo build --release --bin cas &&
+        sudo mv /tmp/native-link/target/release/cas /usr/local/bin/native-link &&
+        `` &&
+        cd /tmp/native-link/deployment-examples/terraform/GCP/module/scripts &&
+        sudo mv ./bb_browser_config.json    /root/bb_browser_config.json &&
+        sudo mv ./browser_proxy.json        /root/browser_proxy.json &&
+        sudo mv ./scheduler.json            /root/scheduler.json &&
+        sudo mv ./cas.json                  /root/cas.json &&
+        sudo mv ./worker.json               /root/worker.json &&
+        sudo mv ./start_native_link.sh      /root/start_native_link.sh &&
+        sudo mv ./entrypoint.sh             /root/entrypoint.sh &&
+        sudo mv ./cloud_publisher.py        /root/cloud_publisher.py &&
+        `` &&
+        sudo mv ./native-link.service       /etc/systemd/system/native-link.service &&
+        sudo chmod +x /root/start_native_link.sh &&
+        sudo systemctl enable native-link &&
+        sudo rm -rf /tmp/file.tar.gz /tmp/native-link &&
+        sync
+      EOT
+    ]
+  }
+
+  # Install cloud monitoring publishing agent.
+  provisioner "remote-exec" {
+    inline = [
+      <<EOT
+        set -eux &&
+        echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list &&
+        curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key --keyring /usr/share/keyrings/cloud.google.gpg add - &&
+        sudo DEBIAN_FRONTEND=noninteractive apt-get update &&
+        sudo DEBIAN_FRONTEND=noninteractive apt-get install google-cloud-cli python3 python3-pip -y &&
+        `# Scheduler needs to push metrics to cloud watch.` &&
+        sudo pip3 install google-cloud-monitoring &&
+        sync
+      EOT
+    ]
+  }
+}
+
+resource "google_compute_snapshot" "base_snapshot" {
+  name              = "${var.project_prefix}-base-snapshot"
+  source_disk       = google_compute_instance.build_instance.boot_disk.0.source
+  zone              = var.gcp_zone
+  storage_locations = [var.gcp_region]
+}
+
+resource "google_compute_image" "base_image" {
+  name              = "${var.project_prefix}-base-image"
+  source_snapshot   = google_compute_snapshot.base_snapshot.id
+  storage_locations = [var.gcp_region]
+}
diff --git a/deployment-examples/terraform/GCP/module/cloud_functions.tf b/deployment-examples/terraform/GCP/module/cloud_functions.tf
new file mode 100644
index 000000000..e63276be1
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/cloud_functions.tf
@@ -0,0 +1,105 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_service_account" "cf_service_account" {
+  account_id   = "${var.project_prefix}-cf-sa"
+  display_name = "Cloud Functions Service Account"
+}
+
+resource "google_cloudfunctions2_function" "update_ips_cf" {
+  name     = "${var.project_prefix}-update-ips-cf"
+  location = var.gcp_region
+
+  build_config {
+    runtime     = "nodejs18"
+    entry_point = "updateIPs"
+    source {
+      storage_source {
+        bucket = google_storage_bucket.cf_bucket.name
+        object = google_storage_bucket_object.cf_zip_file.name
+      }
+    }
+  }
+
+  service_config {
+    min_instance_count    = 1
+    available_memory      = "256Mi"
+    timeout_seconds       = 60
+    service_account_email = google_service_account.cf_service_account.email
+    environment_variables = {
+      GCP_PROJECT               = var.gcp_project_id,
+      DNS_ZONE                  = data.google_dns_managed_zone.dns_zone.name,
+      SCHEDULER_INSTANCE_PREFIX = google_compute_region_instance_group_manager.scheduler_instance_group.base_instance_name,
+    }
+  }
+  depends_on = [
+    google_project_service.cloud_function_api,
+    google_project_service.run_api,
+    google_project_service.cloudbuild_api,
+  ]
+}
+
+resource "google_cloudfunctions2_function_iam_member" "invoker" {
+  project        = google_cloudfunctions2_function.update_ips_cf.project
+  location       = google_cloudfunctions2_function.update_ips_cf.location
+  cloud_function = google_cloudfunctions2_function.update_ips_cf.name
+  role           = "roles/cloudfunctions.invoker"
+  member         = "serviceAccount:${google_service_account.cf_service_account.email}"
+}
+
+resource "google_cloud_run_service_iam_member" "cloud_run_invoker" {
+  project  = google_cloudfunctions2_function.update_ips_cf.project
+  location = google_cloudfunctions2_function.update_ips_cf.location
+  service  = google_cloudfunctions2_function.update_ips_cf.name
+  role     = "roles/run.invoker"
+  member   = "serviceAccount:${google_service_account.cf_service_account.email}"
+}
+
+resource "google_cloud_scheduler_job" "invoke_cloud_function" {
+  name        = "${var.project_prefix}-update-ips-invoke-cf"
+  description = "Updates the internal IP addresses of some resources in case instances go down."
+  schedule    = "*/5 * * * *" # Every 5 mins.
+  project     = google_cloudfunctions2_function.update_ips_cf.project
+  region      = google_cloudfunctions2_function.update_ips_cf.location
+
+  http_target {
+    uri         = google_cloudfunctions2_function.update_ips_cf.service_config[0].uri
+    http_method = "POST"
+    oidc_token {
+      audience              = "${google_cloudfunctions2_function.update_ips_cf.service_config[0].uri}/"
+      service_account_email = google_service_account.cf_service_account.email
+    }
+  }
+  depends_on = [google_project_service.cloudscheduler_api]
+}
+
+resource "google_project_iam_custom_role" "update_ips_cf_role" {
+  role_id     = "${var.project_prefix}UpdateIpsCfRole"
+  title       = "Update IPs CF Role"
+  description = "Update IPs Cloud Function Role"
+  permissions = [
+    "compute.instances.list",
+    "dns.changes.create",
+    "dns.managedZones.get",
+    "dns.resourceRecordSets.get",
+    "dns.resourceRecordSets.list",
+    "dns.resourceRecordSets.update"
+  ]
+}
+
+resource "google_project_iam_member" "update_ips_cf_iam_member" {
+  member  = "serviceAccount:${google_service_account.cf_service_account.email}"
+  project = var.gcp_project_id
+  role    = google_project_iam_custom_role.update_ips_cf_role.name
+}
diff --git a/deployment-examples/terraform/GCP/module/cloud_metrics.tf b/deployment-examples/terraform/GCP/module/cloud_metrics.tf
new file mode 100644
index 000000000..47235c0d8
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/cloud_metrics.tf
@@ -0,0 +1,54 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Note: This is commented out so we can maintain metrics across deployments/upgrades.
+resource "google_monitoring_metric_descriptor" "metric_x86_cpu_worker_cpu_total" {
+  description  = "Total number of CPU resources available for x86 tasks."
+  display_name = "x86_cpu_total"
+  type         = "custom.googleapis.com/native-link/x86_workers/cpu_total"
+  metric_kind  = "GAUGE"
+  value_type   = "INT64"
+}
+
+resource "google_monitoring_metric_descriptor" "metric_x86_cpu_worker_actions_queued" {
+  description  = "Total number of CPU resources actions queued for x86 tasks."
+  display_name = "x86_actions_queued"
+  type         = "custom.googleapis.com/native-link/x86_workers/actions_queued"
+  metric_kind  = "GAUGE"
+  value_type   = "INT64"
+}
+
+resource "google_monitoring_metric_descriptor" "metric_x86_cpu_worker_actions_active" {
+  description  = "Total number of CPU resources actions active for x86 tasks."
+  display_name = "x86_actions_active"
+  type         = "custom.googleapis.com/native-link/x86_workers/actions_active"
+  metric_kind  = "GAUGE"
+  value_type   = "INT64"
+}
+
+resource "google_monitoring_metric_descriptor" "metric_x86_cpu_worker_actions_total" {
+  description  = "Total number of CPU resources actions for x86 tasks."
+  display_name = "x86_actions_total"
+  type         = "custom.googleapis.com/native-link/x86_workers/actions_total"
+  metric_kind  = "GAUGE"
+  value_type   = "INT64"
+}
+
+resource "google_monitoring_metric_descriptor" "metric_x86_cpu_worker_cpu_ratio" {
+  description  = "CPU resources actions to cpus available for x86 tasks."
+  display_name = "x86_cpu_ratio"
+  type         = "custom.googleapis.com/native-link/x86_workers/cpu_ratio"
+  metric_kind  = "GAUGE"
+  value_type   = "DOUBLE"
+}
diff --git a/deployment-examples/terraform/GCP/module/dns.tf b/deployment-examples/terraform/GCP/module/dns.tf
new file mode 100644
index 000000000..56301ed02
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/dns.tf
@@ -0,0 +1,17 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+data "google_dns_managed_zone" "dns_zone" {
+  name = "${var.project_prefix}-dns-zone"
+}
diff --git a/deployment-examples/terraform/GCP/module/iam.tf b/deployment-examples/terraform/GCP/module/iam.tf
new file mode 100644
index 000000000..2cf640fe0
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/iam.tf
@@ -0,0 +1,22 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_project_iam_custom_role" "secret_manager_access_role" {
+  role_id     = "${var.project_prefix}SecretManagerAccessRole"
+  title       = "Access Secret Manager Versions"
+  description = "Restricive Role to only allow access to secret versions."
+  permissions = [
+    "secretmanager.versions.access",
+  ]
+}
diff --git a/deployment-examples/terraform/GCP/module/instance_browser.tf b/deployment-examples/terraform/GCP/module/instance_browser.tf
new file mode 100644
index 000000000..d9e6551de
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/instance_browser.tf
@@ -0,0 +1,247 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_compute_region_autoscaler" "browser_autoscaler" {
+  name     = "${var.project_prefix}-browser-autoscaler"
+  provider = google-beta
+  project  = var.gcp_project_id
+  region   = var.gcp_region
+
+  autoscaling_policy {
+    max_replicas    = 10
+    min_replicas    = 1
+    cooldown_period = 60 # 1 minutes.
+
+    load_balancing_utilization {
+      target = 1
+    }
+
+    scale_in_control {
+      max_scaled_in_replicas {
+        fixed = 10
+      }
+      time_window_sec = 120 # 2 minutes.
+    }
+  }
+
+  target = google_compute_region_instance_group_manager.browser_instance_group.id
+}
+
+resource "google_compute_region_instance_group_manager" "browser_instance_group" {
+  base_instance_name = "${var.project_prefix}-browser-group"
+  name               = "${var.project_prefix}-browser-instance-group"
+
+  named_port {
+    name = "browser"
+    port = "50051"
+  }
+
+  target_size = "1"
+
+  version {
+    instance_template = google_compute_region_instance_template.browser_instance_template.id
+  }
+
+  auto_healing_policies {
+    health_check      = google_compute_region_health_check.browser_region_health_checker.id
+    initial_delay_sec = 300
+  }
+
+  wait_for_instances_status = "STABLE"
+}
+
+resource "google_compute_region_instance_template" "browser_instance_template" {
+  name = "${var.project_prefix}-browser-instance-template"
+
+  # This instance is rarely used, so we can get away with a micro instance.
+  machine_type   = "e2-micro"
+  can_ip_forward = false
+
+  service_account {
+    email  = google_service_account.browser_service_account.email
+    scopes = ["cloud-platform"]
+  }
+
+  scheduling {
+    automatic_restart   = true
+    on_host_maintenance = "MIGRATE"
+  }
+
+  disk {
+    source_image = google_compute_image.base_image.id
+    auto_delete  = true
+    boot         = true
+  }
+
+  network_interface {
+    network = data.google_compute_network.default.id
+
+    # Give it a public IP.
+    access_config {
+      # Ephemeral.
+      network_tier = "STANDARD"
+    }
+  }
+
+  metadata = {
+    native-link-type            = "browser"
+    native-link-cas-bucket      = "${google_storage_bucket.cas_s3_bucket.name}:${google_storage_bucket.cas_s3_bucket.location}"
+    native-link-ac-bucket       = "${google_storage_bucket.ac_s3_bucket.name}:${google_storage_bucket.ac_s3_bucket.location}"
+    native-link-hmac-secret-key = google_secret_manager_secret.browser_secret_manager_hmac_key.secret_id
+  }
+}
+
+resource "google_compute_region_health_check" "browser_region_health_checker" {
+  name                = "${var.project_prefix}-browser-region-health-checker"
+  region              = var.gcp_region
+  check_interval_sec  = "30"
+  healthy_threshold   = "2"
+  timeout_sec         = "5"
+  unhealthy_threshold = "2"
+
+  http_health_check {
+    port         = "50051"
+    request_path = "/"
+  }
+
+  log_config {
+    enable = "false"
+  }
+}
+
+resource "google_compute_health_check" "browser_health_checker" {
+  name                = "${var.project_prefix}-browser-health-checker"
+  check_interval_sec  = "30"
+  healthy_threshold   = "2"
+  timeout_sec         = "5"
+  unhealthy_threshold = "2"
+
+  http_health_check {
+    port         = "50051"
+    request_path = "/"
+  }
+
+  log_config {
+    enable = "false"
+  }
+}
+
+resource "google_compute_backend_service" "browser_backend_service" {
+  name                    = "${var.project_prefix}-browser-backend-service"
+  affinity_cookie_ttl_sec = "0"
+
+  backend {
+    balancing_mode  = "UTILIZATION"
+    capacity_scaler = "1"
+    group           = google_compute_region_instance_group_manager.browser_instance_group.instance_group
+    max_utilization = "0.8"
+  }
+
+  connection_draining_timeout_sec = "300"
+  enable_cdn                      = "false"
+  load_balancing_scheme           = "EXTERNAL_MANAGED"
+  locality_lb_policy              = "ROUND_ROBIN"
+
+  health_checks = [
+    google_compute_health_check.browser_health_checker.id,
+  ]
+
+  log_config {
+    enable = "false"
+  }
+
+  port_name        = "browser"
+  protocol         = "HTTP"
+  session_affinity = "NONE"
+  timeout_sec      = "30"
+}
+
+resource "google_compute_url_map" "browser_load_balancer" {
+  name            = "${var.project_prefix}-browser-url-map"
+  default_service = google_compute_backend_service.browser_backend_service.id
+}
+
+resource "google_compute_target_https_proxy" "browser_http_proxy" {
+  name            = "${var.project_prefix}-browser-http-proxy"
+  url_map         = google_compute_url_map.browser_load_balancer.id
+  certificate_map = "//certificatemanager.googleapis.com/${data.google_certificate_manager_certificate_map.default.id}"
+  proxy_bind      = "false"
+  quic_override   = "NONE"
+  ssl_policy      = google_compute_ssl_policy.lb_ssl_policy.id
+}
+
+resource "google_compute_global_forwarding_rule" "browser_forwarding_rule" {
+  name                  = "${var.project_prefix}-browser-forwarding-rule"
+  ip_protocol           = "TCP"
+  ip_version            = "IPV4"
+  load_balancing_scheme = "EXTERNAL_MANAGED"
+  port_range            = "443-443"
+  target                = google_compute_target_https_proxy.browser_http_proxy.id
+}
+
+resource "google_dns_record_set" "browser_dns_record_set" {
+  name = "browser.${data.google_dns_managed_zone.dns_zone.dns_name}"
+  type = "A"
+  ttl  = 300
+
+  managed_zone = data.google_dns_managed_zone.dns_zone.name
+
+  rrdatas = [
+    google_compute_global_forwarding_rule.browser_forwarding_rule.ip_address
+  ]
+}
+
+resource "google_service_account" "browser_service_account" {
+  account_id = "${var.project_prefix}-browser-sa"
+}
+
+resource "google_storage_hmac_key" "browser_hmac_key" {
+  service_account_email = google_service_account.browser_service_account.email
+}
+
+resource "google_secret_manager_secret" "browser_secret_manager_hmac_key" {
+  secret_id = "${var.project_prefix}-browser-secret-manager-hmac-key"
+
+  replication {
+    auto {}
+  }
+
+  depends_on = [google_project_service.secret_manager_api]
+}
+
+# TODO(allada) Setup hmac key rotation using a lambda or similar.
+resource "google_secret_manager_secret_version" "browser_secret_manager_version_hmac_key" {
+  secret          = google_secret_manager_secret.browser_secret_manager_hmac_key.id
+  secret_data     = "${google_storage_hmac_key.browser_hmac_key.access_id}:${google_storage_hmac_key.browser_hmac_key.secret}"
+  deletion_policy = "DELETE"
+}
+
+resource "google_secret_manager_secret_iam_member" "browser_secret_accessor_iam_member" {
+  project   = google_secret_manager_secret.browser_secret_manager_hmac_key.project
+  secret_id = google_secret_manager_secret.browser_secret_manager_hmac_key.secret_id
+  role      = "roles/secretmanager.secretAccessor"
+  member    = "serviceAccount:${google_service_account.browser_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "browser_service_account_cas_bucket_iam_member" {
+  bucket = google_storage_bucket.cas_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.browser_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "browser_service_account_ac_bucket_iam_member" {
+  bucket = google_storage_bucket.ac_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.browser_service_account.email}"
+}
diff --git a/deployment-examples/terraform/GCP/module/instance_cas.tf b/deployment-examples/terraform/GCP/module/instance_cas.tf
new file mode 100644
index 000000000..49bdbf3f4
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/instance_cas.tf
@@ -0,0 +1,249 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_compute_region_autoscaler" "cas_autoscaler" {
+  name     = "${var.project_prefix}-cas-autoscaler"
+  provider = google-beta
+  project  = var.gcp_project_id
+  region   = var.gcp_region
+
+  autoscaling_policy {
+    max_replicas    = 10
+    min_replicas    = 1
+    cooldown_period = 60 # 1 minutes.
+
+    load_balancing_utilization {
+      target = 1
+    }
+
+    scale_in_control {
+      max_scaled_in_replicas {
+        fixed = 10
+      }
+      time_window_sec = 120 # 2 minutes.
+    }
+  }
+
+  target = google_compute_region_instance_group_manager.cas_instance_group.id
+}
+
+resource "google_compute_region_instance_group_manager" "cas_instance_group" {
+  base_instance_name = "${var.project_prefix}-cas-group"
+  name               = "${var.project_prefix}-cas-instance-group"
+  region             = var.gcp_region
+
+  named_port {
+    name = "cas"
+    port = "50051"
+  }
+
+  target_size = "1"
+
+  version {
+    instance_template = google_compute_region_instance_template.cas_instance_template.id
+  }
+
+  auto_healing_policies {
+    health_check      = google_compute_region_health_check.cas_region_health_checker.id
+    initial_delay_sec = 300
+  }
+
+  wait_for_instances_status = "STABLE"
+}
+
+resource "google_compute_region_instance_template" "cas_instance_template" {
+  name = "${var.project_prefix}-cas-instance-template"
+
+  # Use a very small instance type for the CAS, since it's just a proxy to S3.
+  machine_type   = "e2-highcpu-8"
+  can_ip_forward = false
+
+  service_account {
+    email  = google_service_account.cas_service_account.email
+    scopes = ["cloud-platform"]
+  }
+
+  scheduling {
+    automatic_restart   = true
+    on_host_maintenance = "MIGRATE"
+  }
+
+  disk {
+    source_image = google_compute_image.base_image.id
+    auto_delete  = true
+    boot         = true
+  }
+
+  network_interface {
+    network = data.google_compute_network.default.id
+
+    # Give it a public IP.
+    access_config {
+      # Ephemeral.
+      network_tier = "STANDARD"
+    }
+  }
+
+  metadata = {
+    native-link-type            = "cas"
+    native-link-cas-bucket      = "${google_storage_bucket.cas_s3_bucket.name}:${google_storage_bucket.cas_s3_bucket.location}"
+    native-link-ac-bucket       = "${google_storage_bucket.ac_s3_bucket.name}:${google_storage_bucket.ac_s3_bucket.location}"
+    native-link-hmac-secret-key = google_secret_manager_secret.cas_secret_manager_hmac_key.secret_id
+  }
+}
+
+resource "google_compute_region_health_check" "cas_region_health_checker" {
+  name               = "${var.project_prefix}-cas-region-health-checker"
+  check_interval_sec = "15"
+  healthy_threshold  = "2"
+
+  http2_health_check {
+    port         = "50051"
+    request_path = "/status"
+    response     = "Ok"
+  }
+
+  log_config {
+    enable = "false"
+  }
+
+  timeout_sec         = "5"
+  unhealthy_threshold = "3"
+}
+
+resource "google_compute_health_check" "cas_health_checker" {
+  name               = "${var.project_prefix}-cas-health-checker"
+  check_interval_sec = "15"
+  healthy_threshold  = "2"
+
+  http2_health_check {
+    port         = "50051"
+    request_path = "/status"
+    response     = "Ok"
+  }
+
+  log_config {
+    enable = "false"
+  }
+
+  timeout_sec         = "5"
+  unhealthy_threshold = "3"
+}
+
+resource "google_compute_backend_service" "cas_backend_service" {
+  name                    = "${var.project_prefix}-cas-backend-service"
+  affinity_cookie_ttl_sec = "0"
+
+  backend {
+    balancing_mode  = "UTILIZATION"
+    capacity_scaler = "1"
+    group           = google_compute_region_instance_group_manager.cas_instance_group.instance_group
+    max_utilization = "0.8"
+  }
+
+  connection_draining_timeout_sec = "300"
+  enable_cdn                      = "false"
+  health_checks = [
+    google_compute_health_check.cas_health_checker.id,
+  ]
+  load_balancing_scheme = "EXTERNAL_MANAGED"
+  locality_lb_policy    = "ROUND_ROBIN"
+
+  log_config {
+    enable = "false"
+  }
+
+  port_name        = "cas"
+  protocol         = "HTTP2"
+  session_affinity = "NONE"
+  timeout_sec      = "30"
+}
+
+resource "google_compute_url_map" "cas_url_map" {
+  name            = "${var.project_prefix}-cas-url-map"
+  default_service = google_compute_backend_service.cas_backend_service.id
+}
+
+resource "google_compute_target_https_proxy" "cas_http_proxy" {
+  name            = "${var.project_prefix}-cas-http-proxy"
+  url_map         = google_compute_url_map.cas_url_map.id
+  certificate_map = "//certificatemanager.googleapis.com/${data.google_certificate_manager_certificate_map.default.id}"
+  proxy_bind      = "false"
+  quic_override   = "NONE"
+  ssl_policy      = google_compute_ssl_policy.lb_ssl_policy.id
+}
+
+resource "google_compute_global_forwarding_rule" "cas_forwarding_rule" {
+  name                  = "${var.project_prefix}-cas-forwarding-rule"
+  ip_protocol           = "TCP"
+  ip_version            = "IPV4"
+  load_balancing_scheme = "EXTERNAL_MANAGED"
+  port_range            = "443-443"
+  target                = google_compute_target_https_proxy.cas_http_proxy.id
+}
+
+resource "google_dns_record_set" "cas_dns_record_set" {
+  name         = "cas.${data.google_dns_managed_zone.dns_zone.dns_name}"
+  type         = "A"
+  ttl          = 300
+  managed_zone = data.google_dns_managed_zone.dns_zone.name
+
+  rrdatas = [
+    google_compute_global_forwarding_rule.cas_forwarding_rule.ip_address
+  ]
+}
+
+resource "google_service_account" "cas_service_account" {
+  account_id = "${var.project_prefix}-cas-sa"
+}
+
+resource "google_storage_hmac_key" "cas_hmac_key" {
+  service_account_email = google_service_account.cas_service_account.email
+}
+
+resource "google_secret_manager_secret" "cas_secret_manager_hmac_key" {
+  secret_id = "${var.project_prefix}-cas-secret-manager-hmac-key"
+
+  replication {
+    auto {}
+  }
+
+  depends_on = [google_project_service.secret_manager_api]
+}
+
+# TODO(allada) Setup hmac key rotation using a lambda or similar.
+resource "google_secret_manager_secret_version" "cas_secret_manager_version_hmac_key" {
+  secret          = google_secret_manager_secret.cas_secret_manager_hmac_key.id
+  secret_data     = "${google_storage_hmac_key.cas_hmac_key.access_id}:${google_storage_hmac_key.cas_hmac_key.secret}"
+  deletion_policy = "DELETE"
+}
+
+resource "google_secret_manager_secret_iam_member" "cas_secret_accessor_iam_member" {
+  project   = google_secret_manager_secret.cas_secret_manager_hmac_key.project
+  secret_id = google_secret_manager_secret.cas_secret_manager_hmac_key.secret_id
+  role      = "roles/secretmanager.secretAccessor"
+  member    = "serviceAccount:${google_service_account.cas_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "cas_service_account_cas_bucket_iam_member" {
+  bucket = google_storage_bucket.cas_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.cas_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "cas_service_account_ac_bucket_iam_member" {
+  bucket = google_storage_bucket.ac_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.cas_service_account.email}"
+}
diff --git a/deployment-examples/terraform/GCP/module/instance_scheduler.tf b/deployment-examples/terraform/GCP/module/instance_scheduler.tf
new file mode 100644
index 000000000..cd24a90df
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/instance_scheduler.tf
@@ -0,0 +1,264 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_compute_region_autoscaler" "scheduler_autoscaler" {
+  name     = "${var.project_prefix}-scheduler-autoscaler"
+  provider = google-beta
+  project  = var.gcp_project_id
+  region   = var.gcp_region
+
+  autoscaling_policy {
+    cooldown_period = "60"
+
+    max_replicas = "1"
+    min_replicas = "0"
+    mode         = "OFF"
+  }
+
+  target = google_compute_region_instance_group_manager.scheduler_instance_group.id
+}
+
+resource "google_compute_region_instance_group_manager" "scheduler_instance_group" {
+  name               = "${var.project_prefix}-scheduler-instance-group"
+  base_instance_name = "${var.project_prefix}-scheduler-group"
+  region             = var.gcp_region
+
+  named_port {
+    name = "scheduler"
+    port = "50051"
+  }
+
+  target_size = "1"
+
+  version {
+    instance_template = google_compute_region_instance_template.scheduler_instance_template.id
+  }
+
+  auto_healing_policies {
+    health_check      = google_compute_region_health_check.scheduler_region_health_checker.id
+    initial_delay_sec = 300
+  }
+
+  wait_for_instances_status = "STABLE"
+}
+
+resource "google_compute_region_instance_template" "scheduler_instance_template" {
+  name = "${var.project_prefix}-scheduler-instance-template"
+
+  # The scheduler is a very light-weight service, it can often be a very small
+  # instance type, but may need to scale up if it's a large cluster.
+  machine_type   = "e2-highcpu-4"
+  can_ip_forward = false
+
+  service_account {
+    email  = google_service_account.scheduler_service_account.email
+    scopes = ["cloud-platform"]
+  }
+
+  scheduling {
+    automatic_restart   = true
+    on_host_maintenance = "MIGRATE"
+  }
+
+  disk {
+    source_image = google_compute_image.base_image.id
+    auto_delete  = true
+    boot         = true
+  }
+
+  network_interface {
+    network = data.google_compute_network.default.id
+
+    # Give it a public IP.
+    access_config {
+      # Ephemeral.
+      network_tier = "STANDARD"
+    }
+  }
+
+  metadata = {
+    native-link-type            = "scheduler"
+    native-link-cas-bucket      = "${google_storage_bucket.cas_s3_bucket.name}:${google_storage_bucket.cas_s3_bucket.location}"
+    native-link-ac-bucket       = "${google_storage_bucket.ac_s3_bucket.name}:${google_storage_bucket.ac_s3_bucket.location}"
+    native-link-hmac-secret-key = google_secret_manager_secret.scheduler_secret_manager_hmac_key.secret_id
+  }
+}
+
+resource "google_compute_region_health_check" "scheduler_region_health_checker" {
+  name               = "${var.project_prefix}-scheduler-region-health-checker"
+  check_interval_sec = "5"
+  healthy_threshold  = "2"
+
+  http2_health_check {
+    port         = "50051"
+    request_path = "/status"
+    response     = "Ok"
+  }
+
+  log_config {
+    enable = "false"
+  }
+
+  timeout_sec         = "5"
+  unhealthy_threshold = "2"
+}
+
+resource "google_compute_health_check" "scheduler_health_checker" {
+  name               = "${var.project_prefix}-scheduler-health-checker"
+  check_interval_sec = "5"
+  healthy_threshold  = "2"
+
+  http2_health_check {
+    port         = "50051"
+    request_path = "/status"
+    response     = "Ok"
+  }
+
+  log_config {
+    enable = "false"
+  }
+
+  timeout_sec         = "5"
+  unhealthy_threshold = "2"
+}
+
+resource "google_compute_backend_service" "scheduler_backend_service" {
+  name                    = "${var.project_prefix}-scheduler-backend-service"
+  affinity_cookie_ttl_sec = "0"
+
+  backend {
+    balancing_mode  = "UTILIZATION"
+    capacity_scaler = "1"
+    group           = google_compute_region_instance_group_manager.scheduler_instance_group.instance_group
+    max_utilization = "0.8"
+  }
+
+  connection_draining_timeout_sec = "300"
+  enable_cdn                      = "false"
+  health_checks = [
+    google_compute_health_check.scheduler_health_checker.id,
+  ]
+  load_balancing_scheme = "EXTERNAL_MANAGED"
+  locality_lb_policy    = "ROUND_ROBIN"
+
+  log_config {
+    enable = "false"
+  }
+
+  port_name        = "scheduler"
+  protocol         = "HTTP2"
+  session_affinity = "NONE"
+  timeout_sec      = "30"
+}
+
+resource "google_compute_url_map" "scheduler_url_map" {
+  name            = "${var.project_prefix}-scheduler-url-map"
+  default_service = google_compute_backend_service.scheduler_backend_service.id
+}
+
+resource "google_compute_target_https_proxy" "scheduler_http_proxy" {
+  name            = "${var.project_prefix}-scheduler-http-proxy"
+  url_map         = google_compute_url_map.scheduler_url_map.id
+  certificate_map = "//certificatemanager.googleapis.com/${data.google_certificate_manager_certificate_map.default.id}"
+  proxy_bind      = "false"
+  quic_override   = "NONE"
+  ssl_policy      = google_compute_ssl_policy.lb_ssl_policy.id
+}
+
+resource "google_compute_global_forwarding_rule" "scheduler_forwarding_rule" {
+  name                  = "${var.project_prefix}-scheduler-forwarding-rule"
+  ip_protocol           = "TCP"
+  ip_version            = "IPV4"
+  load_balancing_scheme = "EXTERNAL_MANAGED"
+  port_range            = "443-443"
+  target                = google_compute_target_https_proxy.scheduler_http_proxy.id
+}
+
+resource "google_dns_record_set" "scheduler_dns_record_set" {
+  name         = "scheduler.${data.google_dns_managed_zone.dns_zone.dns_name}"
+  type         = "A"
+  ttl          = 300
+  managed_zone = data.google_dns_managed_zone.dns_zone.name
+
+  rrdatas = [
+    google_compute_global_forwarding_rule.scheduler_forwarding_rule.ip_address
+  ]
+}
+
+resource "google_dns_record_set" "scheduler_internal_for_worker_dns_record_set" {
+  name         = "worker_api.scheduler.${data.google_dns_managed_zone.dns_zone.dns_name}"
+  type         = "A"
+  ttl          = 300
+  managed_zone = data.google_dns_managed_zone.dns_zone.name
+
+  rrdatas = [
+    "0.0.0.0" # Will be set by lambda later.
+  ]
+}
+
+resource "google_service_account" "scheduler_service_account" {
+  account_id = "${var.project_prefix}-scheduler-sa"
+}
+
+resource "google_project_iam_member" "scheduler_secret_manager_iam_member" {
+  member  = "serviceAccount:${google_service_account.scheduler_service_account.email}"
+  project = var.gcp_project_id
+  role    = google_project_iam_custom_role.secret_manager_access_role.name
+}
+
+resource "google_storage_hmac_key" "scheduler_hmac_key" {
+  service_account_email = google_service_account.scheduler_service_account.email
+}
+
+resource "google_secret_manager_secret" "scheduler_secret_manager_hmac_key" {
+  secret_id = "${var.project_prefix}-scheduler-secret-manager-hmac-key"
+
+  replication {
+    auto {}
+  }
+
+  depends_on = [google_project_service.secret_manager_api]
+}
+
+# TODO(allada) Setup hmac key rotation using a lambda or similar.
+resource "google_secret_manager_secret_version" "scheduler_secret_manager_version_hmac_key" {
+  secret          = google_secret_manager_secret.scheduler_secret_manager_hmac_key.id
+  secret_data     = "${google_storage_hmac_key.scheduler_hmac_key.access_id}:${google_storage_hmac_key.scheduler_hmac_key.secret}"
+  deletion_policy = "DELETE"
+}
+
+resource "google_secret_manager_secret_iam_member" "scheduler_secret_accessor_iam_member" {
+  project   = google_secret_manager_secret.scheduler_secret_manager_hmac_key.project
+  secret_id = google_secret_manager_secret.scheduler_secret_manager_hmac_key.secret_id
+  role      = "roles/secretmanager.secretAccessor"
+  member    = "serviceAccount:${google_service_account.scheduler_service_account.email}"
+}
+
+resource "google_project_iam_member" "scheduler_metrics_iam_member" {
+  project = var.gcp_project_id
+  role    = "roles/monitoring.metricWriter"
+  member  = "serviceAccount:${google_service_account.scheduler_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "scheduler_service_account_cas_bucket_iam_member" {
+  bucket = google_storage_bucket.cas_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.scheduler_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "scheduler_service_account_ac_bucket_iam_member" {
+  bucket = google_storage_bucket.ac_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.scheduler_service_account.email}"
+}
diff --git a/deployment-examples/terraform/GCP/module/instance_x86_cpu_worker.tf b/deployment-examples/terraform/GCP/module/instance_x86_cpu_worker.tf
new file mode 100644
index 000000000..eea1e2a1c
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/instance_x86_cpu_worker.tf
@@ -0,0 +1,179 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_compute_region_autoscaler" "x86_cpu_worker_autoscaler" {
+  name     = "${var.project_prefix}-x86-cpu-worker-autoscaler"
+  provider = google-beta
+  project  = var.gcp_project_id
+  region   = var.gcp_region
+
+  autoscaling_policy {
+    max_replicas    = 10
+    min_replicas    = 1
+    cooldown_period = 60 # 1 minutes.
+
+    metric {
+      name   = "custom.googleapis.com/native-link/x86_workers/cpu_ratio"
+      target = 1.0
+      type   = "GAUGE"
+      filter = "resource.type=\"global\""
+    }
+
+    scale_in_control {
+      max_scaled_in_replicas {
+        fixed = 10
+      }
+      time_window_sec = 120 # 2 minutes.
+    }
+  }
+
+  target = google_compute_region_instance_group_manager.x86_cpu_worker_instance_group.id
+}
+
+resource "google_compute_region_instance_group_manager" "x86_cpu_worker_instance_group" {
+  base_instance_name = "${var.project_prefix}-x86-cpu-worker-group"
+  name               = "${var.project_prefix}-x86-cpu-worker-instance-group"
+
+  version {
+    instance_template = google_compute_region_instance_template.x86_cpu_worker_instance_template.id
+  }
+
+  auto_healing_policies {
+    health_check      = google_compute_region_health_check.x86_cpu_worker_health_checker.id
+    initial_delay_sec = 120 # 2 minutes.
+  }
+
+  wait_for_instances_status = "STABLE"
+}
+
+resource "google_compute_region_instance_template" "x86_cpu_worker_instance_template" {
+  name = "${var.project_prefix}-x86-cpu-worker-instance-template"
+
+  machine_type   = "n2d-standard-8"
+  can_ip_forward = false
+
+  scheduling {
+    instance_termination_action = "STOP"
+    automatic_restart           = false
+    provisioning_model          = "SPOT"
+    preemptible                 = true
+  }
+
+  service_account {
+    email  = google_service_account.x86_cpu_worker_service_account.email
+    scopes = ["cloud-platform"]
+  }
+
+  disk {
+    source_image = google_compute_image.base_image.id
+    auto_delete  = true
+    boot         = true
+  }
+
+  disk {
+    disk_type    = "local-ssd"
+    type         = "SCRATCH"
+    disk_size_gb = "375"
+  }
+
+  network_interface {
+    network = data.google_compute_network.default.id
+
+    # TODO(allada) We need to give it a public ip to access google services
+    # like bucket and secrets manager. Google does support private access to
+    # these services, but it requires a lot of configurations.
+    access_config {
+      # Ephemeral.
+      network_tier = "STANDARD"
+    }
+  }
+
+  metadata = {
+    native-link-type                               = "worker"
+    native-link-internal-worker-scheduler-endpoint = trim(google_dns_record_set.scheduler_internal_for_worker_dns_record_set.name, ".")
+    native-link-cas-bucket                         = "${google_storage_bucket.cas_s3_bucket.name}:${google_storage_bucket.cas_s3_bucket.location}"
+    native-link-ac-bucket                          = "${google_storage_bucket.ac_s3_bucket.name}:${google_storage_bucket.ac_s3_bucket.location}"
+    native-link-hmac-secret-key                    = google_secret_manager_secret.x86_cpu_worker_secret_manager_hmac_key.secret_id
+    native-link-browser-endpoint                   = trim(google_dns_record_set.browser_dns_record_set.name, ".")
+  }
+}
+
+resource "google_compute_region_health_check" "x86_cpu_worker_health_checker" {
+  name               = "${var.project_prefix}-x86-cpu-worker-health-checker"
+  check_interval_sec = "5"
+  healthy_threshold  = "2"
+
+  http_health_check {
+    port         = "50051"
+    request_path = "/status"
+    response     = "Ok"
+  }
+
+  log_config {
+    enable = "false"
+  }
+
+  timeout_sec         = "5"
+  unhealthy_threshold = "2"
+}
+
+resource "google_service_account" "x86_cpu_worker_service_account" {
+  account_id = "${var.project_prefix}-x86-worker-sa"
+}
+
+resource "google_project_iam_member" "x86_cpu_worker_secret_manager_iam_member" {
+  member  = "serviceAccount:${google_service_account.x86_cpu_worker_service_account.email}"
+  project = var.gcp_project_id
+  role    = google_project_iam_custom_role.secret_manager_access_role.name
+}
+
+resource "google_storage_hmac_key" "x86_cpu_worker_hmac_key" {
+  service_account_email = google_service_account.x86_cpu_worker_service_account.email
+}
+
+resource "google_secret_manager_secret" "x86_cpu_worker_secret_manager_hmac_key" {
+  secret_id = "${var.project_prefix}-x86-cpu-worker-secret-manager-hmac-key"
+
+  replication {
+    auto {}
+  }
+
+  depends_on = [google_project_service.secret_manager_api]
+}
+
+# TODO(allada) Setup hmac key rotation using a lambda or similar.
+resource "google_secret_manager_secret_version" "x86_cpu_worker_secret_manager_version_hmac_key" {
+  secret          = google_secret_manager_secret.x86_cpu_worker_secret_manager_hmac_key.id
+  secret_data     = "${google_storage_hmac_key.x86_cpu_worker_hmac_key.access_id}:${google_storage_hmac_key.x86_cpu_worker_hmac_key.secret}"
+  deletion_policy = "DELETE"
+}
+
+resource "google_secret_manager_secret_iam_member" "x86_cpu_worker_secret_accessor_iam_member" {
+  project   = google_secret_manager_secret.x86_cpu_worker_secret_manager_hmac_key.project
+  secret_id = google_secret_manager_secret.x86_cpu_worker_secret_manager_hmac_key.secret_id
+  role      = "roles/secretmanager.secretAccessor"
+  member    = "serviceAccount:${google_service_account.x86_cpu_worker_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "x86_cpu_worker_service_account_cas_bucket_iam_member" {
+  bucket = google_storage_bucket.cas_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.x86_cpu_worker_service_account.email}"
+}
+
+resource "google_storage_bucket_iam_member" "x86_cpu_worker_service_account_ac_bucket_iam_member" {
+  bucket = google_storage_bucket.ac_s3_bucket.name
+  role   = "roles/storage.objectUser"
+  member = "serviceAccount:${google_service_account.x86_cpu_worker_service_account.email}"
+}
diff --git a/deployment-examples/terraform/GCP/module/s3.tf b/deployment-examples/terraform/GCP/module/s3.tf
new file mode 100644
index 000000000..dc80e2ce9
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/s3.tf
@@ -0,0 +1,76 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_storage_bucket" "cas_s3_bucket" {
+  name     = "${var.project_prefix}-cas-bucket-${var.gcp_project_id}"
+  location = var.gcp_region
+
+  force_destroy = false
+
+  uniform_bucket_level_access = true
+
+  public_access_prevention = "enforced"
+  storage_class            = "STANDARD"
+
+  versioning {
+    enabled = false
+  }
+  depends_on = [google_project_service.storage_api]
+}
+
+resource "google_storage_bucket" "ac_s3_bucket" {
+  name     = "${var.project_prefix}-ac-bucket-${var.gcp_project_id}"
+  location = var.gcp_region
+
+  force_destroy = false
+
+  uniform_bucket_level_access = true
+
+  public_access_prevention = "enforced"
+  storage_class            = "STANDARD"
+
+  versioning {
+    enabled = false
+  }
+  depends_on = [google_project_service.storage_api]
+}
+
+resource "google_storage_bucket" "cf_bucket" {
+  name          = "${var.project_prefix}-cf-bucket-${var.gcp_project_id}"
+  location      = "US"
+  force_destroy = true
+
+  uniform_bucket_level_access = true
+
+  public_access_prevention = "enforced"
+  storage_class            = "STANDARD"
+
+  versioning {
+    enabled = false
+  }
+  depends_on = [google_project_service.storage_api]
+}
+
+data "archive_file" "cf_zip_file" {
+  type        = "zip"
+  output_path = "${path.root}/.terraform-native-link-builder/cf_files.zip"
+  source_dir  = "${path.module}/scripts/cloud_functions"
+  depends_on  = [google_compute_instance.build_instance]
+}
+
+resource "google_storage_bucket_object" "cf_zip_file" {
+  name   = "cf_files.zip"
+  bucket = google_storage_bucket.cf_bucket.name
+  source = data.archive_file.cf_zip_file.output_path
+}
diff --git a/deployment-examples/terraform/GCP/module/scripts/bb_browser_config.json b/deployment-examples/terraform/GCP/module/scripts/bb_browser_config.json
new file mode 100644
index 000000000..8a9c6d633
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/bb_browser_config.json
@@ -0,0 +1,22 @@
+{
+  "blobstore": {
+    "actionCache": {
+      "grpc": {
+        "address": "127.0.0.1:50052"
+      }
+    },
+    "contentAddressableStorage": {
+      "grpc": {
+        "address": "127.0.0.1:50052"
+      }
+    }
+  },
+  "maximumMessageSizeBytes": 16777216,
+  "httpServers": [{
+    "listenAddresses": ["0.0.0.0:50051"],
+    "authenticationPolicy": { "allow": {} }
+  }],
+  "authorizer": {
+    "allow": {}
+  }
+}
diff --git a/deployment-examples/terraform/GCP/module/scripts/browser_proxy.json b/deployment-examples/terraform/GCP/module/scripts/browser_proxy.json
new file mode 100644
index 000000000..d709e0e40
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/browser_proxy.json
@@ -0,0 +1,70 @@
+{
+  "stores": {
+    "AC_STORE": {
+      "compression": {
+        "backend": {
+          "s3_store": {
+            "region": "${NATIVE_LINK_AC_S3_BUCKET_REGION:-}",
+            "bucket": "${NATIVE_LINK_AC_S3_BUCKET:-}",
+            "retry": {
+              "max_retries": 7,
+              "delay": 0.1,
+              "jitter": 0.5
+            }
+          }
+        },
+        "compression_algorithm": {
+          "LZ4": {}
+        }
+      }
+    },
+    "CAS_STORE": {
+      "compression": {
+        "backend": {
+          "s3_store": {
+            "region": "${NATIVE_LINK_CAS_S3_BUCKET_REGION:-}",
+            "bucket": "${NATIVE_LINK_CAS_S3_BUCKET:-}",
+            "retry": {
+              "max_retries": 7,
+              "delay": 0.1,
+              "jitter": 0.5
+            }
+          }
+        },
+        "compression_algorithm": {
+          "LZ4": {}
+        }
+      }
+    }
+  },
+  "servers": [{
+    // Non-public apis. We re-export the CAS services so we don't need to go through
+    // an external load balancer.
+    "listen_address": "0.0.0.0:50052",
+    "services": {
+      "prometheus": {
+        "path": "/metrics"
+      },
+      "cas": {
+        "main": {
+          "cas_store": "CAS_STORE"
+        }
+      },
+      "ac": {
+        "main": {
+          "ac_store": "AC_STORE"
+        }
+      },
+      "capabilities": {
+        "main": {}
+      },
+      "bytestream": {
+        "cas_stores": {
+          "main": "CAS_STORE"
+        },
+        // According to https://github.com/grpc/grpc.github.io/issues/371 16KiB - 64KiB is optimal.
+        "max_bytes_per_stream": 64000 // 64kb.
+      }
+    }
+  }]
+}
diff --git a/deployment-examples/terraform/GCP/module/scripts/cas.json b/deployment-examples/terraform/GCP/module/scripts/cas.json
new file mode 100644
index 000000000..1cd646163
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/cas.json
@@ -0,0 +1,148 @@
+{
+  "stores": {
+    "AC_STORE": {
+      "compression": {
+        "backend": {
+          "fast_slow": {
+            "fast": {
+              "memory": {
+                "eviction_policy": {
+                  "max_bytes": "${NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT:-100000000}"
+                }
+              }
+            },
+            "slow": {
+              "s3_store": {
+                "region": "${NATIVE_LINK_AC_S3_BUCKET_REGION:-}",
+                "bucket": "${NATIVE_LINK_AC_S3_BUCKET:-}",
+                "retry": {
+                  "max_retries": 7,
+                  "delay": 0.1,
+                  "jitter": 0.5
+                }
+              }
+            }
+          }
+        },
+        "compression_algorithm": {
+          "LZ4": {}
+        }
+      }
+    },
+    "CAS_STORE": {
+      "existence_cache": {
+        "backend": {
+          "compression": {
+            "backend": {
+              "fast_slow": {
+                "fast": {
+                  // In memory only cache smaller files. Large files will always read from S3.
+                  "size_partitioning": {
+                    "size": 134217728, // 128mib.
+                    "lower_store": {
+                      "memory": {
+                        "eviction_policy": {
+                          "max_bytes": "${NATIVE_LINK_CAS_MEMORY_CONTENT_LIMIT:-100000000}"
+                        }
+                      }
+                    },
+                    "upper_store": {
+                      "noop": {}
+                    }
+                  }
+                },
+                "slow": {
+                  "s3_store": {
+                    "region": "${NATIVE_LINK_CAS_S3_BUCKET_REGION:-}",
+                    "bucket": "${NATIVE_LINK_CAS_S3_BUCKET:-}",
+                    "retry": {
+                      "max_retries": 7,
+                      "delay": 0.1,
+                      "jitter": 0.5
+                    }
+                  }
+                }
+              }
+            },
+            "compression_algorithm": {
+              "LZ4": {}
+            }
+          }
+        },
+        "eviction_policy": {
+          "max_seconds": 3600, // 1 hour.
+          "max_count": 1000000
+        }
+      }
+    }
+  },
+  "servers": [{
+    "listen_address": "0.0.0.0:50051",
+    "tls": {
+      "cert_file": "${NATIVE_LINK_CERT_FILE:-}",
+      "key_file": "${NATIVE_LINK_KEY_FILE:-}"
+    },
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    // External apis support compression.
+    "compression": {
+      "send_compression_algorithm": "Gzip",
+      "accepted_compression_algorithms": ["Gzip"]
+    },
+    "services": {
+      "cas": {
+        "main": {
+          "cas_store": "CAS_STORE"
+        }
+      },
+      "ac": {
+        "main": {
+          "ac_store": "AC_STORE"
+        }
+      },
+      "capabilities": {
+        "main": {}
+      },
+      "bytestream": {
+        "cas_stores": {
+          "main": "CAS_STORE"
+        },
+        // According to https://github.com/grpc/grpc.github.io/issues/371 16KiB - 64KiB is optimal.
+        "max_bytes_per_stream": 64000 // 64kb.
+      }
+    }
+  }, {
+    // Non-public apis. We re-export the CAS services so we don't need to go through
+    // an external load balancer.
+    "listen_address": "0.0.0.0:50052",
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    "services": {
+      "prometheus": {
+        "path": "/metrics"
+      },
+      "cas": {
+        "main": {
+          "cas_store": "CAS_STORE"
+        }
+      },
+      "ac": {
+        "main": {
+          "ac_store": "AC_STORE"
+        }
+      },
+      "capabilities": {
+        "main": {}
+      },
+      "bytestream": {
+        "cas_stores": {
+          "main": "CAS_STORE"
+        },
+        // According to https://github.com/grpc/grpc.github.io/issues/371 16KiB - 64KiB is optimal.
+        "max_bytes_per_stream": 64000 // 64kb.
+      }
+    }
+  }]
+}
diff --git a/deployment-examples/terraform/GCP/module/scripts/cloud_functions/index.js b/deployment-examples/terraform/GCP/module/scripts/cloud_functions/index.js
new file mode 100644
index 000000000..31e5e15c9
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/cloud_functions/index.js
@@ -0,0 +1,100 @@
+// Copyright 2023 The Native Link Authors. All rights reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// This script is designed to be run as a Google Cloud Function. It will
+// update the DNS records for the private ip of the scheduler instance.
+// This is used because the scheduler instance might be replaced under
+// rare circumstances, and we want to make sure that the DNS records are
+// updated to point to the new instances.
+
+const functions = require('@google-cloud/functions-framework');
+const compute = require('@google-cloud/compute');
+const { DNS } = require('@google-cloud/dns');
+
+const projectId = process.env.GCP_PROJECT || process.env.GCLOUD_PROJECT;
+const dnsZone = process.env.DNS_ZONE;
+const schedulerInstancePrefix = process.env.SCHEDULER_INSTANCE_PREFIX;
+
+async function getRecordIfExists(zone, name) {
+  const records = await zone.getRecords({
+    name,
+    type: 'A'
+  });
+  if (!records.length || !records[0].length) {
+    return null;
+  }
+  return records[0][0];
+}
+
+async function findSchedulerInstance() {
+  const instancesClient = new compute.InstancesClient({ projectId });
+
+  const aggListRequest = instancesClient.aggregatedListAsync({
+    project: projectId,
+    maxResults: 5,
+    filter: `status=RUNNING AND name=${schedulerInstancePrefix}*`,
+  });
+
+  let schedulerInstance = null;
+
+  for await (const [_zone, instancesObject] of aggListRequest) {
+    if (!instancesObject.instances || !instancesObject.instances.length) {
+      continue;
+    }
+    for (const instance of instancesObject.instances) {
+      schedulerInstance = instance;
+    }
+  }
+  return schedulerInstance;
+}
+
+async function updateIPs(_cloudEvent) {
+  const schedulerInstance = await findSchedulerInstance();
+
+  const dns = new DNS({ projectId });
+  const zone = dns.zone(dnsZone);
+  const dnsName = (await zone.get())[1].dnsName;
+  const addRecords = [];
+  const deleteRecords = [];
+
+  if (schedulerInstance) {
+    // Note: In the event the network that the scheduler and workers communicate through is
+    // different this section should be updated.
+    const internalForWorkerSchedulerIp = schedulerInstance.networkInterfaces[0].networkIP;
+    const existingInternalForWorkerSchedulerRecord = await getRecordIfExists(zone, `worker_api.scheduler.${dnsName}`);
+    if (!existingInternalForWorkerSchedulerRecord || existingInternalForWorkerSchedulerRecord.data[0] !== internalForWorkerSchedulerIp) {
+      if (existingInternalForWorkerSchedulerRecord) {
+        deleteRecords.push(existingInternalForWorkerSchedulerRecord);
+      }
+      addRecords.push(zone.record("A", {
+        name: `worker_api.scheduler.${dnsName}`,
+        ttl: 300,
+        data: internalForWorkerSchedulerIp,
+      }));
+    }
+  }
+
+  if (!addRecords.length) {
+    // Nothing to change.
+    console.log('nothing to do');
+    return;
+  }
+
+  const result = await zone.createChange({ add: addRecords, delete: deleteRecords });
+
+  const change = result[0];
+  console.log("Changes", { add: addRecords, delete: deleteRecords });
+}
+
+functions.cloudEvent('updateIPs', updateIPs);
diff --git a/deployment-examples/terraform/GCP/module/scripts/cloud_functions/package.json b/deployment-examples/terraform/GCP/module/scripts/cloud_functions/package.json
new file mode 100644
index 000000000..b79094df3
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/cloud_functions/package.json
@@ -0,0 +1,8 @@
+{
+  "main": "index.js",
+  "dependencies": {
+    "@google-cloud/compute": "^4.0.1",
+    "@google-cloud/dns": "^4.0.0",
+    "@google-cloud/functions-framework": "^3.3.0"
+  }
+}
diff --git a/deployment-examples/terraform/GCP/module/scripts/cloud_functions/yarn.lock b/deployment-examples/terraform/GCP/module/scripts/cloud_functions/yarn.lock
new file mode 100644
index 000000000..7a27d8844
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/cloud_functions/yarn.lock
@@ -0,0 +1,1551 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+
+"@babel/code-frame@^7.0.0":
+  version "7.22.13"
+  resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.22.13.tgz#e3c1c099402598483b7a8c46a721d1038803755e"
+  integrity sha512-XktuhWlJ5g+3TJXc5upd9Ks1HutSArik6jf2eAjYFyIOf4ej3RN+184cZbzDvbPnuTJIUhPKKJE3cIsYTiAT3w==
+  dependencies:
+    "@babel/highlight" "^7.22.13"
+    chalk "^2.4.2"
+
+"@babel/helper-validator-identifier@^7.22.20":
+  version "7.22.20"
+  resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.22.20.tgz#c4ae002c61d2879e724581d96665583dbc1dc0e0"
+  integrity sha512-Y4OZ+ytlatR8AI+8KZfKuL5urKp7qey08ha31L8b3BwewJAoJamTzyvxPR/5D+KkdJCGPq/+8TukHBlY10FX9A==
+
+"@babel/highlight@^7.22.13":
+  version "7.22.20"
+  resolved "https://registry.yarnpkg.com/@babel/highlight/-/highlight-7.22.20.tgz#4ca92b71d80554b01427815e06f2df965b9c1f54"
+  integrity sha512-dkdMCN3py0+ksCgYmGG8jKeGA/8Tk+gJwSYYlFGxG5lmhfKNoAy004YpLxpS1W2J8m/EK2Ew+yOs9pVRwO89mg==
+  dependencies:
+    "@babel/helper-validator-identifier" "^7.22.20"
+    chalk "^2.4.2"
+    js-tokens "^4.0.0"
+
+"@google-cloud/common@^5.0.0":
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/@google-cloud/common/-/common-5.0.0.tgz#578246e0af02d68aa94aefb03d737bca37554dd0"
+  integrity sha512-IsbTVr7Ag+04GMT87X738vDs85QU1rMvaesm2wEQrtTbZAR92tGmUQ8/D/kdnYgAi98Q4zmfhF+T8Xs/Lw4zAA==
+  dependencies:
+    "@google-cloud/projectify" "^4.0.0"
+    "@google-cloud/promisify" "^4.0.0"
+    arrify "^2.0.1"
+    duplexify "^4.1.1"
+    ent "^2.2.0"
+    extend "^3.0.2"
+    google-auth-library "^9.0.0"
+    retry-request "^6.0.0"
+    teeny-request "^9.0.0"
+
+"@google-cloud/compute@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@google-cloud/compute/-/compute-4.0.1.tgz#d2e3ae3955feb87002a61c9053dd827e69623faf"
+  integrity sha512-9/kzXFNTmEh8UqNdt8G5NdtfIyAfVYG+7yagk/rh2mh/XFynDGW4DXIYvrWIcMns8HSZxrUgNyNDPva+BUp14w==
+  dependencies:
+    google-gax "^4.0.3"
+
+"@google-cloud/dns@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@google-cloud/dns/-/dns-4.0.0.tgz#df3dcf613bfc98c444c3a893f5485fe1cb1859bc"
+  integrity sha512-cqwq8rNalRl7gxEVV2w2WITCq7tx4Sk4j+4qfS+ZIPn1yu0Xe4ZxyuthP1KB2IrZDSKZtzRtoYpAA8PrDVmRNw==
+  dependencies:
+    "@google-cloud/common" "^5.0.0"
+    "@google-cloud/paginator" "^5.0.0"
+    "@google-cloud/promisify" "^4.0.0"
+    arrify "^2.0.0"
+    dns-zonefile "0.2.10"
+    lodash.groupby "^4.6.0"
+    string-format-obj "^1.1.1"
+
+"@google-cloud/functions-framework@^3.3.0":
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/@google-cloud/functions-framework/-/functions-framework-3.3.0.tgz#9e4563e36ad8644aee1bb5dceaa715bd1ca6759d"
+  integrity sha512-+4O1dX5VNRK1W1NyAia7zy5jLf88ytuz39/1kVUUaNiOf76YbMZKV0YjZwfk7uEwRrC6l2wynK1G+q8Gb5DeVw==
+  dependencies:
+    "@types/express" "4.17.17"
+    body-parser "^1.18.3"
+    cloudevents "^7.0.0"
+    express "^4.16.4"
+    minimist "^1.2.7"
+    on-finished "^2.3.0"
+    read-pkg-up "^7.0.1"
+    semver "^7.3.5"
+
+"@google-cloud/paginator@^5.0.0":
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/@google-cloud/paginator/-/paginator-5.0.0.tgz#b8cc62f151685095d11467402cbf417c41bf14e6"
+  integrity sha512-87aeg6QQcEPxGCOthnpUjvw4xAZ57G7pL8FS0C4e/81fr3FjkpUpibf1s2v5XGyGhUVGF4Jfg7yEcxqn2iUw1w==
+  dependencies:
+    arrify "^2.0.0"
+    extend "^3.0.2"
+
+"@google-cloud/projectify@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@google-cloud/projectify/-/projectify-4.0.0.tgz#d600e0433daf51b88c1fa95ac7f02e38e80a07be"
+  integrity sha512-MmaX6HeSvyPbWGwFq7mXdo0uQZLGBYCwziiLIGq5JVX+/bdI3SAq6bP98trV5eTWfLuvsMcIC1YJOF2vfteLFA==
+
+"@google-cloud/promisify@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@google-cloud/promisify/-/promisify-4.0.0.tgz#a906e533ebdd0f754dca2509933334ce58b8c8b1"
+  integrity sha512-Orxzlfb9c67A15cq2JQEyVc7wEsmFBmHjZWZYQMUyJ1qivXyMwdyNOs9odi79hze+2zqdTtu1E19IM/FtqZ10g==
+
+"@grpc/grpc-js@~1.9.0":
+  version "1.9.5"
+  resolved "https://registry.yarnpkg.com/@grpc/grpc-js/-/grpc-js-1.9.5.tgz#22e283754b7b10d1ad26c3fb21849028dcaabc53"
+  integrity sha512-iouYNlPxRAwZ2XboDT+OfRKHuaKHiqjB5VFYZ0NFrHkbEF+AV3muIUY9olQsp8uxU4VvRCMiRk9ftzFDGb61aw==
+  dependencies:
+    "@grpc/proto-loader" "^0.7.8"
+    "@types/node" ">=12.12.47"
+
+"@grpc/proto-loader@^0.7.0", "@grpc/proto-loader@^0.7.8":
+  version "0.7.10"
+  resolved "https://registry.yarnpkg.com/@grpc/proto-loader/-/proto-loader-0.7.10.tgz#6bf26742b1b54d0a473067743da5d3189d06d720"
+  integrity sha512-CAqDfoaQ8ykFd9zqBDn4k6iWT9loLAlc2ETmDFS9JCD70gDcnA4L3AFEo2iV7KyAtAAHFW9ftq1Fz+Vsgq80RQ==
+  dependencies:
+    lodash.camelcase "^4.3.0"
+    long "^5.0.0"
+    protobufjs "^7.2.4"
+    yargs "^17.7.2"
+
+"@protobufjs/aspromise@^1.1.1", "@protobufjs/aspromise@^1.1.2":
+  version "1.1.2"
+  resolved "https://registry.yarnpkg.com/@protobufjs/aspromise/-/aspromise-1.1.2.tgz#9b8b0cc663d669a7d8f6f5d0893a14d348f30fbf"
+  integrity sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==
+
+"@protobufjs/base64@^1.1.2":
+  version "1.1.2"
+  resolved "https://registry.yarnpkg.com/@protobufjs/base64/-/base64-1.1.2.tgz#4c85730e59b9a1f1f349047dbf24296034bb2735"
+  integrity sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==
+
+"@protobufjs/codegen@^2.0.4":
+  version "2.0.4"
+  resolved "https://registry.yarnpkg.com/@protobufjs/codegen/-/codegen-2.0.4.tgz#7ef37f0d010fb028ad1ad59722e506d9262815cb"
+  integrity sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==
+
+"@protobufjs/eventemitter@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz#355cbc98bafad5978f9ed095f397621f1d066b70"
+  integrity sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==
+
+"@protobufjs/fetch@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@protobufjs/fetch/-/fetch-1.1.0.tgz#ba99fb598614af65700c1619ff06d454b0d84c45"
+  integrity sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==
+  dependencies:
+    "@protobufjs/aspromise" "^1.1.1"
+    "@protobufjs/inquire" "^1.1.0"
+
+"@protobufjs/float@^1.0.2":
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/@protobufjs/float/-/float-1.0.2.tgz#5e9e1abdcb73fc0a7cb8b291df78c8cbd97b87d1"
+  integrity sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==
+
+"@protobufjs/inquire@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@protobufjs/inquire/-/inquire-1.1.0.tgz#ff200e3e7cf2429e2dcafc1140828e8cc638f089"
+  integrity sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==
+
+"@protobufjs/path@^1.1.2":
+  version "1.1.2"
+  resolved "https://registry.yarnpkg.com/@protobufjs/path/-/path-1.1.2.tgz#6cc2b20c5c9ad6ad0dccfd21ca7673d8d7fbf68d"
+  integrity sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==
+
+"@protobufjs/pool@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@protobufjs/pool/-/pool-1.1.0.tgz#09fd15f2d6d3abfa9b65bc366506d6ad7846ff54"
+  integrity sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==
+
+"@protobufjs/utf8@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@protobufjs/utf8/-/utf8-1.1.0.tgz#a777360b5b39a1a2e5106f8e858f2fd2d060c570"
+  integrity sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==
+
+"@tootallnate/once@2":
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/@tootallnate/once/-/once-2.0.0.tgz#f544a148d3ab35801c1f633a7441fd87c2e484bf"
+  integrity sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==
+
+"@types/body-parser@*":
+  version "1.19.3"
+  resolved "https://registry.yarnpkg.com/@types/body-parser/-/body-parser-1.19.3.tgz#fb558014374f7d9e56c8f34bab2042a3a07d25cd"
+  integrity sha512-oyl4jvAfTGX9Bt6Or4H9ni1Z447/tQuxnZsytsCaExKlmJiU8sFgnIBRzJUpKwB5eWn9HuBYlUlVA74q/yN0eQ==
+  dependencies:
+    "@types/connect" "*"
+    "@types/node" "*"
+
+"@types/connect@*":
+  version "3.4.36"
+  resolved "https://registry.yarnpkg.com/@types/connect/-/connect-3.4.36.tgz#e511558c15a39cb29bd5357eebb57bd1459cd1ab"
+  integrity sha512-P63Zd/JUGq+PdrM1lv0Wv5SBYeA2+CORvbrXbngriYY0jzLUWfQMQQxOhjONEz/wlHOAxOdY7CY65rgQdTjq2w==
+  dependencies:
+    "@types/node" "*"
+
+"@types/express-serve-static-core@^4.17.33":
+  version "4.17.37"
+  resolved "https://registry.yarnpkg.com/@types/express-serve-static-core/-/express-serve-static-core-4.17.37.tgz#7e4b7b59da9142138a2aaa7621f5abedce8c7320"
+  integrity sha512-ZohaCYTgGFcOP7u6aJOhY9uIZQgZ2vxC2yWoArY+FeDXlqeH66ZVBjgvg+RLVAS/DWNq4Ap9ZXu1+SUQiiWYMg==
+  dependencies:
+    "@types/node" "*"
+    "@types/qs" "*"
+    "@types/range-parser" "*"
+    "@types/send" "*"
+
+"@types/express@4.17.17":
+  version "4.17.17"
+  resolved "https://registry.yarnpkg.com/@types/express/-/express-4.17.17.tgz#01d5437f6ef9cfa8668e616e13c2f2ac9a491ae4"
+  integrity sha512-Q4FmmuLGBG58btUnfS1c1r/NQdlp3DMfGDGig8WhfpA2YRUtEkxAjkZb0yvplJGYdF1fsQ81iMDcH24sSCNC/Q==
+  dependencies:
+    "@types/body-parser" "*"
+    "@types/express-serve-static-core" "^4.17.33"
+    "@types/qs" "*"
+    "@types/serve-static" "*"
+
+"@types/http-errors@*":
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/@types/http-errors/-/http-errors-2.0.2.tgz#a86e00bbde8950364f8e7846687259ffcd96e8c2"
+  integrity sha512-lPG6KlZs88gef6aD85z3HNkztpj7w2R7HmR3gygjfXCQmsLloWNARFkMuzKiiY8FGdh1XDpgBdrSf4aKDiA7Kg==
+
+"@types/long@^4.0.0":
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/@types/long/-/long-4.0.2.tgz#b74129719fc8d11c01868010082d483b7545591a"
+  integrity sha512-MqTGEo5bj5t157U6fA/BiDynNkn0YknVdh48CMPkTSpFTVmvao5UQmm7uEF6xBEo7qIMAlY/JSleYaE6VOdpaA==
+
+"@types/mime@*":
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/@types/mime/-/mime-3.0.2.tgz#c1ae807f13d308ee7511a5b81c74f327028e66e8"
+  integrity sha512-Wj+fqpTLtTbG7c0tH47dkahefpLKEbB+xAZuLq7b4/IDHPl/n6VoXcyUQ2bypFlbSwvCr0y+bD4euTTqTJsPxQ==
+
+"@types/mime@^1":
+  version "1.3.3"
+  resolved "https://registry.yarnpkg.com/@types/mime/-/mime-1.3.3.tgz#bbe64987e0eb05de150c305005055c7ad784a9ce"
+  integrity sha512-Ys+/St+2VF4+xuY6+kDIXGxbNRO0mesVg0bbxEfB97Od1Vjpjx9KD1qxs64Gcb3CWPirk9Xe+PT4YiiHQ9T+eg==
+
+"@types/node@*", "@types/node@>=12.12.47", "@types/node@>=13.7.0":
+  version "20.8.2"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-20.8.2.tgz#d76fb80d87d0d8abfe334fc6d292e83e5524efc4"
+  integrity sha512-Vvycsc9FQdwhxE3y3DzeIxuEJbWGDsnrxvMADzTDF/lcdR9/K+AQIeAghTQsHtotg/q0j3WEOYS/jQgSdWue3w==
+
+"@types/normalize-package-data@^2.4.0":
+  version "2.4.2"
+  resolved "https://registry.yarnpkg.com/@types/normalize-package-data/-/normalize-package-data-2.4.2.tgz#9b0e3e8533fe5024ad32d6637eb9589988b6fdca"
+  integrity sha512-lqa4UEhhv/2sjjIQgjX8B+RBjj47eo0mzGasklVJ78UKGQY1r0VpB9XHDaZZO9qzEFDdy4MrXLuEaSmPrPSe/A==
+
+"@types/qs@*":
+  version "6.9.8"
+  resolved "https://registry.yarnpkg.com/@types/qs/-/qs-6.9.8.tgz#f2a7de3c107b89b441e071d5472e6b726b4adf45"
+  integrity sha512-u95svzDlTysU5xecFNTgfFG5RUWu1A9P0VzgpcIiGZA9iraHOdSzcxMxQ55DyeRaGCSxQi7LxXDI4rzq/MYfdg==
+
+"@types/range-parser@*":
+  version "1.2.5"
+  resolved "https://registry.yarnpkg.com/@types/range-parser/-/range-parser-1.2.5.tgz#38bd1733ae299620771bd414837ade2e57757498"
+  integrity sha512-xrO9OoVPqFuYyR/loIHjnbvvyRZREYKLjxV4+dY6v3FQR3stQ9ZxIGkaclF7YhI9hfjpuTbu14hZEy94qKLtOA==
+
+"@types/send@*":
+  version "0.17.2"
+  resolved "https://registry.yarnpkg.com/@types/send/-/send-0.17.2.tgz#af78a4495e3c2b79bfbdac3955fdd50e03cc98f2"
+  integrity sha512-aAG6yRf6r0wQ29bkS+x97BIs64ZLxeE/ARwyS6wrldMm3C1MdKwCcnnEwMC1slI8wuxJOpiUH9MioC0A0i+GJw==
+  dependencies:
+    "@types/mime" "^1"
+    "@types/node" "*"
+
+"@types/serve-static@*":
+  version "1.15.3"
+  resolved "https://registry.yarnpkg.com/@types/serve-static/-/serve-static-1.15.3.tgz#2cfacfd1fd4520bbc3e292cca432d5e8e2e3ee61"
+  integrity sha512-yVRvFsEMrv7s0lGhzrggJjNOSmZCdgCjw9xWrPr/kNNLp6FaDfMC1KaYl3TSJ0c58bECwNBMoQrZJ8hA8E1eFg==
+  dependencies:
+    "@types/http-errors" "*"
+    "@types/mime" "*"
+    "@types/node" "*"
+
+abort-controller@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/abort-controller/-/abort-controller-3.0.0.tgz#eaf54d53b62bae4138e809ca225c8439a6efb392"
+  integrity sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==
+  dependencies:
+    event-target-shim "^5.0.0"
+
+accepts@~1.3.8:
+  version "1.3.8"
+  resolved "https://registry.yarnpkg.com/accepts/-/accepts-1.3.8.tgz#0bf0be125b67014adcb0b0921e62db7bffe16b2e"
+  integrity sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==
+  dependencies:
+    mime-types "~2.1.34"
+    negotiator "0.6.3"
+
+agent-base@6:
+  version "6.0.2"
+  resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-6.0.2.tgz#49fff58577cfee3f37176feab4c22e00f86d7f77"
+  integrity sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==
+  dependencies:
+    debug "4"
+
+agent-base@^7.0.2:
+  version "7.1.0"
+  resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-7.1.0.tgz#536802b76bc0b34aa50195eb2442276d613e3434"
+  integrity sha512-o/zjMZRhJxny7OyEF+Op8X+efiELC7k7yOjMzgfzVqOzXqkBkWI79YoTdOtsuWd5BWhAGAuOY/Xa6xpiaWXiNg==
+  dependencies:
+    debug "^4.3.4"
+
+ajv-formats@^2.1.1:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/ajv-formats/-/ajv-formats-2.1.1.tgz#6e669400659eb74973bbf2e33327180a0996b520"
+  integrity sha512-Wx0Kx52hxE7C18hkMEggYlEifqWZtYaRgouJor+WMdPnQyEK13vgEWyVNup7SoeeoLMsr4kf5h6dOW11I15MUA==
+  dependencies:
+    ajv "^8.0.0"
+
+ajv@^8.0.0, ajv@^8.11.0:
+  version "8.12.0"
+  resolved "https://registry.yarnpkg.com/ajv/-/ajv-8.12.0.tgz#d1a0527323e22f53562c567c00991577dfbe19d1"
+  integrity sha512-sRu1kpcO9yLtYxBKvqfTeh9KzZEwO3STyX1HT+4CaDzC6HpTGYhIhPIzj9XuKU7KYDwnaeh5hcOwjy1QuJzBPA==
+  dependencies:
+    fast-deep-equal "^3.1.1"
+    json-schema-traverse "^1.0.0"
+    require-from-string "^2.0.2"
+    uri-js "^4.2.2"
+
+ansi-regex@^5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.1.tgz#082cb2c89c9fe8659a311a53bd6a4dc5301db304"
+  integrity sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==
+
+ansi-styles@^3.2.1:
+  version "3.2.1"
+  resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
+  integrity sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==
+  dependencies:
+    color-convert "^1.9.0"
+
+ansi-styles@^4.0.0:
+  version "4.3.0"
+  resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-4.3.0.tgz#edd803628ae71c04c85ae7a0906edad34b648937"
+  integrity sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==
+  dependencies:
+    color-convert "^2.0.1"
+
+array-flatten@1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/array-flatten/-/array-flatten-1.1.1.tgz#9a5f699051b1e7073328f2a008968b64ea2955d2"
+  integrity sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==
+
+arrify@^2.0.0, arrify@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/arrify/-/arrify-2.0.1.tgz#c9655e9331e0abcd588d2a7cad7e9956f66701fa"
+  integrity sha512-3duEwti880xqi4eAMN8AyR4a0ByT90zoYdLlevfrvU43vb0YZwZVfxOgxWrLXXXpyugL0hNZc9G6BiB5B3nUug==
+
+available-typed-arrays@^1.0.5:
+  version "1.0.5"
+  resolved "https://registry.yarnpkg.com/available-typed-arrays/-/available-typed-arrays-1.0.5.tgz#92f95616501069d07d10edb2fc37d3e1c65123b7"
+  integrity sha512-DMD0KiN46eipeziST1LPP/STfDU0sufISXmjSgvVsoU2tqxctQeASejWcfNtxYKqETM1UxQ8sp2OrSBWpHY6sw==
+
+base64-js@^1.3.0:
+  version "1.5.1"
+  resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.5.1.tgz#1b1b440160a5bf7ad40b650f095963481903930a"
+  integrity sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==
+
+bignumber.js@^9.0.0:
+  version "9.1.2"
+  resolved "https://registry.yarnpkg.com/bignumber.js/-/bignumber.js-9.1.2.tgz#b7c4242259c008903b13707983b5f4bbd31eda0c"
+  integrity sha512-2/mKyZH9K85bzOEfhXDBFZTGd1CTs+5IHpeFQo9luiBG7hghdC851Pj2WAhb6E3R6b9tZj/XKhbg4fum+Kepug==
+
+body-parser@1.20.1:
+  version "1.20.1"
+  resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.20.1.tgz#b1812a8912c195cd371a3ee5e66faa2338a5c668"
+  integrity sha512-jWi7abTbYwajOytWCQc37VulmWiRae5RyTpaCyDcS5/lMdtwSz5lOpDE67srw/HYe35f1z3fDQw+3txg7gNtWw==
+  dependencies:
+    bytes "3.1.2"
+    content-type "~1.0.4"
+    debug "2.6.9"
+    depd "2.0.0"
+    destroy "1.2.0"
+    http-errors "2.0.0"
+    iconv-lite "0.4.24"
+    on-finished "2.4.1"
+    qs "6.11.0"
+    raw-body "2.5.1"
+    type-is "~1.6.18"
+    unpipe "1.0.0"
+
+body-parser@^1.18.3:
+  version "1.20.2"
+  resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.20.2.tgz#6feb0e21c4724d06de7ff38da36dad4f57a747fd"
+  integrity sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==
+  dependencies:
+    bytes "3.1.2"
+    content-type "~1.0.5"
+    debug "2.6.9"
+    depd "2.0.0"
+    destroy "1.2.0"
+    http-errors "2.0.0"
+    iconv-lite "0.4.24"
+    on-finished "2.4.1"
+    qs "6.11.0"
+    raw-body "2.5.2"
+    type-is "~1.6.18"
+    unpipe "1.0.0"
+
+buffer-equal-constant-time@1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz#f8e71132f7ffe6e01a5c9697a4c6f3e48d5cc819"
+  integrity sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==
+
+bytes@3.1.2:
+  version "3.1.2"
+  resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.1.2.tgz#8b0beeb98605adf1b128fa4386403c009e0221a5"
+  integrity sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==
+
+call-bind@^1.0.0, call-bind@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/call-bind/-/call-bind-1.0.2.tgz#b1d4e89e688119c3c9a903ad30abb2f6a919be3c"
+  integrity sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==
+  dependencies:
+    function-bind "^1.1.1"
+    get-intrinsic "^1.0.2"
+
+chalk@^2.4.2:
+  version "2.4.2"
+  resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
+  integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==
+  dependencies:
+    ansi-styles "^3.2.1"
+    escape-string-regexp "^1.0.5"
+    supports-color "^5.3.0"
+
+cliui@^8.0.1:
+  version "8.0.1"
+  resolved "https://registry.yarnpkg.com/cliui/-/cliui-8.0.1.tgz#0c04b075db02cbfe60dc8e6cf2f5486b1a3608aa"
+  integrity sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==
+  dependencies:
+    string-width "^4.2.0"
+    strip-ansi "^6.0.1"
+    wrap-ansi "^7.0.0"
+
+cloudevents@^7.0.0:
+  version "7.0.2"
+  resolved "https://registry.yarnpkg.com/cloudevents/-/cloudevents-7.0.2.tgz#367b22bb6399ab15a6b18347e6ce5ccecdc87849"
+  integrity sha512-WiOqWsNkMZmMMZ6xa3kzx/MA+8+V+c5eGkStZIcik+Px2xCobmzcacw1EOGyfhODaQKkIv8TxXOOLzV69oXFqA==
+  dependencies:
+    ajv "^8.11.0"
+    ajv-formats "^2.1.1"
+    json-bigint "^1.0.0"
+    process "^0.11.10"
+    util "^0.12.4"
+    uuid "^8.3.2"
+
+color-convert@^1.9.0:
+  version "1.9.3"
+  resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-1.9.3.tgz#bb71850690e1f136567de629d2d5471deda4c1e8"
+  integrity sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==
+  dependencies:
+    color-name "1.1.3"
+
+color-convert@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-2.0.1.tgz#72d3a68d598c9bdb3af2ad1e84f21d896abd4de3"
+  integrity sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==
+  dependencies:
+    color-name "~1.1.4"
+
+color-name@1.1.3:
+  version "1.1.3"
+  resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
+  integrity sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==
+
+color-name@~1.1.4:
+  version "1.1.4"
+  resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
+  integrity sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==
+
+content-disposition@0.5.4:
+  version "0.5.4"
+  resolved "https://registry.yarnpkg.com/content-disposition/-/content-disposition-0.5.4.tgz#8b82b4efac82512a02bb0b1dcec9d2c5e8eb5bfe"
+  integrity sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==
+  dependencies:
+    safe-buffer "5.2.1"
+
+content-type@~1.0.4, content-type@~1.0.5:
+  version "1.0.5"
+  resolved "https://registry.yarnpkg.com/content-type/-/content-type-1.0.5.tgz#8b773162656d1d1086784c8f23a54ce6d73d7918"
+  integrity sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==
+
+cookie-signature@1.0.6:
+  version "1.0.6"
+  resolved "https://registry.yarnpkg.com/cookie-signature/-/cookie-signature-1.0.6.tgz#e303a882b342cc3ee8ca513a79999734dab3ae2c"
+  integrity sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==
+
+cookie@0.5.0:
+  version "0.5.0"
+  resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.5.0.tgz#d1f5d71adec6558c58f389987c366aa47e994f8b"
+  integrity sha512-YZ3GUyn/o8gfKJlnlX7g7xq4gyO6OSuhGPKaaGssGB2qgDUS0gPgtTvoyZLTt9Ab6dC4hfc9dV5arkvc/OCmrw==
+
+debug@2.6.9:
+  version "2.6.9"
+  resolved "https://registry.yarnpkg.com/debug/-/debug-2.6.9.tgz#5d128515df134ff327e90a4c93f4e077a536341f"
+  integrity sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==
+  dependencies:
+    ms "2.0.0"
+
+debug@4, debug@^4.1.1, debug@^4.3.4:
+  version "4.3.4"
+  resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.4.tgz#1319f6579357f2338d3337d2cdd4914bb5dcc865"
+  integrity sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==
+  dependencies:
+    ms "2.1.2"
+
+depd@2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/depd/-/depd-2.0.0.tgz#b696163cc757560d09cf22cc8fad1571b79e76df"
+  integrity sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==
+
+destroy@1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/destroy/-/destroy-1.2.0.tgz#4803735509ad8be552934c67df614f94e66fa015"
+  integrity sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==
+
+dns-zonefile@0.2.10:
+  version "0.2.10"
+  resolved "https://registry.yarnpkg.com/dns-zonefile/-/dns-zonefile-0.2.10.tgz#c9c1c4e74ff9a1c99636ae77e1440f0642d4dddd"
+  integrity sha512-YXs0T8EjhwI3YFpL4l7n9Uy+g/ufmd3WyDSQsI4mrMNlrrdgK6aN0AbNjOkKoHyF59l/x4Y3/z64F3aJWCKWpg==
+
+duplexify@^4.0.0, duplexify@^4.1.1:
+  version "4.1.2"
+  resolved "https://registry.yarnpkg.com/duplexify/-/duplexify-4.1.2.tgz#18b4f8d28289132fa0b9573c898d9f903f81c7b0"
+  integrity sha512-fz3OjcNCHmRP12MJoZMPglx8m4rrFP8rovnk4vT8Fs+aonZoCwGg10dSsQsfP/E62eZcPTMSMP6686fu9Qlqtw==
+  dependencies:
+    end-of-stream "^1.4.1"
+    inherits "^2.0.3"
+    readable-stream "^3.1.1"
+    stream-shift "^1.0.0"
+
+ecdsa-sig-formatter@1.0.11, ecdsa-sig-formatter@^1.0.11:
+  version "1.0.11"
+  resolved "https://registry.yarnpkg.com/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz#ae0f0fa2d85045ef14a817daa3ce9acd0489e5bf"
+  integrity sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==
+  dependencies:
+    safe-buffer "^5.0.1"
+
+ee-first@1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
+  integrity sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==
+
+emoji-regex@^8.0.0:
+  version "8.0.0"
+  resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-8.0.0.tgz#e818fd69ce5ccfcb404594f842963bf53164cc37"
+  integrity sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==
+
+encodeurl@~1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/encodeurl/-/encodeurl-1.0.2.tgz#ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
+  integrity sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==
+
+end-of-stream@^1.4.1:
+  version "1.4.4"
+  resolved "https://registry.yarnpkg.com/end-of-stream/-/end-of-stream-1.4.4.tgz#5ae64a5f45057baf3626ec14da0ca5e4b2431eb0"
+  integrity sha512-+uw1inIHVPQoaVuHzRyXd21icM+cnt4CzD5rW+NC1wjOUSTOs+Te7FOv7AhN7vS9x/oIyhLP5PR1H+phQAHu5Q==
+  dependencies:
+    once "^1.4.0"
+
+ent@^2.2.0:
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/ent/-/ent-2.2.0.tgz#e964219325a21d05f44466a2f686ed6ce5f5dd1d"
+  integrity sha512-GHrMyVZQWvTIdDtpiEXdHZnFQKzeO09apj8Cbl4pKWy4i0Oprcq17usfDt5aO63swf0JOeMWjWQE/LzgSRuWpA==
+
+error-ex@^1.3.1:
+  version "1.3.2"
+  resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
+  integrity sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==
+  dependencies:
+    is-arrayish "^0.2.1"
+
+escalade@^3.1.1:
+  version "3.1.1"
+  resolved "https://registry.yarnpkg.com/escalade/-/escalade-3.1.1.tgz#d8cfdc7000965c5a0174b4a82eaa5c0552742e40"
+  integrity sha512-k0er2gUkLf8O0zKJiAhmkTnJlTvINGv7ygDNPbeIsX/TJjGJZHuh9B2UxbsaEkmlEo9MfhrSzmhIlhRlI2GXnw==
+
+escape-html@~1.0.3:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/escape-html/-/escape-html-1.0.3.tgz#0258eae4d3d0c0974de1c169188ef0051d1d1988"
+  integrity sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==
+
+escape-string-regexp@^1.0.5:
+  version "1.0.5"
+  resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz#1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
+  integrity sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==
+
+etag@~1.8.1:
+  version "1.8.1"
+  resolved "https://registry.yarnpkg.com/etag/-/etag-1.8.1.tgz#41ae2eeb65efa62268aebfea83ac7d79299b0887"
+  integrity sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==
+
+event-target-shim@^5.0.0:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/event-target-shim/-/event-target-shim-5.0.1.tgz#5d4d3ebdf9583d63a5333ce2deb7480ab2b05789"
+  integrity sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==
+
+express@^4.16.4:
+  version "4.18.2"
+  resolved "https://registry.yarnpkg.com/express/-/express-4.18.2.tgz#3fabe08296e930c796c19e3c516979386ba9fd59"
+  integrity sha512-5/PsL6iGPdfQ/lKM1UuielYgv3BUoJfz1aUwU9vHZ+J7gyvwdQXFEBIEIaxeGf0GIcreATNyBExtalisDbuMqQ==
+  dependencies:
+    accepts "~1.3.8"
+    array-flatten "1.1.1"
+    body-parser "1.20.1"
+    content-disposition "0.5.4"
+    content-type "~1.0.4"
+    cookie "0.5.0"
+    cookie-signature "1.0.6"
+    debug "2.6.9"
+    depd "2.0.0"
+    encodeurl "~1.0.2"
+    escape-html "~1.0.3"
+    etag "~1.8.1"
+    finalhandler "1.2.0"
+    fresh "0.5.2"
+    http-errors "2.0.0"
+    merge-descriptors "1.0.1"
+    methods "~1.1.2"
+    on-finished "2.4.1"
+    parseurl "~1.3.3"
+    path-to-regexp "0.1.7"
+    proxy-addr "~2.0.7"
+    qs "6.11.0"
+    range-parser "~1.2.1"
+    safe-buffer "5.2.1"
+    send "0.18.0"
+    serve-static "1.15.0"
+    setprototypeof "1.2.0"
+    statuses "2.0.1"
+    type-is "~1.6.18"
+    utils-merge "1.0.1"
+    vary "~1.1.2"
+
+extend@^3.0.2:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/extend/-/extend-3.0.2.tgz#f8b1136b4071fbd8eb140aff858b1019ec2915fa"
+  integrity sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==
+
+fast-deep-equal@^3.1.1:
+  version "3.1.3"
+  resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz#3a7d56b559d6cbc3eb512325244e619a65c6c525"
+  integrity sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==
+
+finalhandler@1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/finalhandler/-/finalhandler-1.2.0.tgz#7d23fe5731b207b4640e4fcd00aec1f9207a7b32"
+  integrity sha512-5uXcUVftlQMFnWC9qu/svkWv3GTd2PfUhK/3PLkYNAe7FbqJMt3515HaxE6eRL74GdsriiwujiawdaB1BpEISg==
+  dependencies:
+    debug "2.6.9"
+    encodeurl "~1.0.2"
+    escape-html "~1.0.3"
+    on-finished "2.4.1"
+    parseurl "~1.3.3"
+    statuses "2.0.1"
+    unpipe "~1.0.0"
+
+find-up@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/find-up/-/find-up-4.1.0.tgz#97afe7d6cdc0bc5928584b7c8d7b16e8a9aa5d19"
+  integrity sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==
+  dependencies:
+    locate-path "^5.0.0"
+    path-exists "^4.0.0"
+
+for-each@^0.3.3:
+  version "0.3.3"
+  resolved "https://registry.yarnpkg.com/for-each/-/for-each-0.3.3.tgz#69b447e88a0a5d32c3e7084f3f1710034b21376e"
+  integrity sha512-jqYfLp7mo9vIyQf8ykW2v7A+2N4QjeCeI5+Dz9XraiO1ign81wjiH7Fb9vSOWvQfNtmSa4H2RoQTrrXivdUZmw==
+  dependencies:
+    is-callable "^1.1.3"
+
+forwarded@0.2.0:
+  version "0.2.0"
+  resolved "https://registry.yarnpkg.com/forwarded/-/forwarded-0.2.0.tgz#2269936428aad4c15c7ebe9779a84bf0b2a81811"
+  integrity sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==
+
+fresh@0.5.2:
+  version "0.5.2"
+  resolved "https://registry.yarnpkg.com/fresh/-/fresh-0.5.2.tgz#3d8cadd90d976569fa835ab1f8e4b23a105605a7"
+  integrity sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==
+
+function-bind@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.1.tgz#a56899d3ea3c9bab874bb9773b7c5ede92f4895d"
+  integrity sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A==
+
+gaxios@^6.0.0:
+  version "6.1.1"
+  resolved "https://registry.yarnpkg.com/gaxios/-/gaxios-6.1.1.tgz#549629f86a13e756b900f9ff7c94624670102938"
+  integrity sha512-bw8smrX+XlAoo9o1JAksBwX+hi/RG15J+NTSxmNPIclKC3ZVK6C2afwY8OSdRvOK0+ZLecUJYtj2MmjOt3Dm0w==
+  dependencies:
+    extend "^3.0.2"
+    https-proxy-agent "^7.0.1"
+    is-stream "^2.0.0"
+    node-fetch "^2.6.9"
+
+gcp-metadata@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/gcp-metadata/-/gcp-metadata-6.0.0.tgz#2ae12008bef8caa8726cba31fd0a641ebad5fb56"
+  integrity sha512-Ozxyi23/1Ar51wjUT2RDklK+3HxqDr8TLBNK8rBBFQ7T85iIGnXnVusauj06QyqCXRFZig8LZC+TUddWbndlpQ==
+  dependencies:
+    gaxios "^6.0.0"
+    json-bigint "^1.0.0"
+
+get-caller-file@^2.0.5:
+  version "2.0.5"
+  resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-2.0.5.tgz#4f94412a82db32f36e3b0b9741f8a97feb031f7e"
+  integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==
+
+get-intrinsic@^1.0.2, get-intrinsic@^1.1.3:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/get-intrinsic/-/get-intrinsic-1.2.1.tgz#d295644fed4505fc9cde952c37ee12b477a83d82"
+  integrity sha512-2DcsyfABl+gVHEfCOaTrWgyt+tb6MSEGmKq+kI5HwLbIYgjgmMcV8KQ41uaKz1xxUcn9tJtgFbQUEVcEbd0FYw==
+  dependencies:
+    function-bind "^1.1.1"
+    has "^1.0.3"
+    has-proto "^1.0.1"
+    has-symbols "^1.0.3"
+
+google-auth-library@^9.0.0:
+  version "9.1.0"
+  resolved "https://registry.yarnpkg.com/google-auth-library/-/google-auth-library-9.1.0.tgz#5c8444ca5c298030bbd7535f13b84748a86a8091"
+  integrity sha512-1M9HdOcQNPV5BwSXqwwT238MTKodJFBxZ/V2JP397ieOLv4FjQdfYb9SooR7Mb+oUT2IJ92mLJQf804dyx0MJA==
+  dependencies:
+    base64-js "^1.3.0"
+    ecdsa-sig-formatter "^1.0.11"
+    gaxios "^6.0.0"
+    gcp-metadata "^6.0.0"
+    gtoken "^7.0.0"
+    jws "^4.0.0"
+    lru-cache "^6.0.0"
+
+google-gax@^4.0.3:
+  version "4.0.4"
+  resolved "https://registry.yarnpkg.com/google-gax/-/google-gax-4.0.4.tgz#b309560b4ac775df71f86e6607ebcf6fa98a04a2"
+  integrity sha512-Yoey/ABON2HaTUIRUt5tTQAvwQ6E/2etSyFXwHNVcYtIiYDpKix7G4oorZdkp17gFiYovzRCRhRZYrfdCgRK9Q==
+  dependencies:
+    "@grpc/grpc-js" "~1.9.0"
+    "@grpc/proto-loader" "^0.7.0"
+    "@types/long" "^4.0.0"
+    abort-controller "^3.0.0"
+    duplexify "^4.0.0"
+    google-auth-library "^9.0.0"
+    node-fetch "^2.6.1"
+    object-hash "^3.0.0"
+    proto3-json-serializer "^2.0.0"
+    protobufjs "7.2.5"
+    retry-request "^6.0.0"
+
+gopd@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/gopd/-/gopd-1.0.1.tgz#29ff76de69dac7489b7c0918a5788e56477c332c"
+  integrity sha512-d65bNlIadxvpb/A2abVdlqKqV563juRnZ1Wtk6s1sIR8uNsXR70xqIzVqxVf1eTqDunwT2MkczEeaezCKTZhwA==
+  dependencies:
+    get-intrinsic "^1.1.3"
+
+gtoken@^7.0.0:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/gtoken/-/gtoken-7.0.1.tgz#b64bd01d88268ea3a3572c9076a85d1c48f1a455"
+  integrity sha512-KcFVtoP1CVFtQu0aSk3AyAt2og66PFhZAlkUOuWKwzMLoulHXG5W5wE5xAnHb+yl3/wEFoqGW7/cDGMU8igDZQ==
+  dependencies:
+    gaxios "^6.0.0"
+    jws "^4.0.0"
+
+has-flag@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd"
+  integrity sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==
+
+has-proto@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/has-proto/-/has-proto-1.0.1.tgz#1885c1305538958aff469fef37937c22795408e0"
+  integrity sha512-7qE+iP+O+bgF9clE5+UoBFzE65mlBiVj3tKCrlNQ0Ogwm0BjpT/gK4SlLYDMybDh5I3TCTKnPPa0oMG7JDYrhg==
+
+has-symbols@^1.0.2, has-symbols@^1.0.3:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.0.3.tgz#bb7b2c4349251dce87b125f7bdf874aa7c8b39f8"
+  integrity sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==
+
+has-tostringtag@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/has-tostringtag/-/has-tostringtag-1.0.0.tgz#7e133818a7d394734f941e73c3d3f9291e658b25"
+  integrity sha512-kFjcSNhnlGV1kyoGk7OXKSawH5JOb/LzUc5w9B02hOTO0dfFRjbHQKvg1d6cf3HbeUmtU9VbbV3qzZ2Teh97WQ==
+  dependencies:
+    has-symbols "^1.0.2"
+
+has@^1.0.3:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/has/-/has-1.0.4.tgz#2eb2860e000011dae4f1406a86fe80e530fb2ec6"
+  integrity sha512-qdSAmqLF6209RFj4VVItywPMbm3vWylknmB3nvNiUIs72xAimcM8nVYxYr7ncvZq5qzk9MKIZR8ijqD/1QuYjQ==
+
+hosted-git-info@^2.1.4:
+  version "2.8.9"
+  resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-2.8.9.tgz#dffc0bf9a21c02209090f2aa69429e1414daf3f9"
+  integrity sha512-mxIDAb9Lsm6DoOJ7xH+5+X4y1LU/4Hi50L9C5sIswK3JzULS4bwk1FvjdBgvYR4bzT4tuUQiC15FE2f5HbLvYw==
+
+http-errors@2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-2.0.0.tgz#b7774a1486ef73cf7667ac9ae0858c012c57b9d3"
+  integrity sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==
+  dependencies:
+    depd "2.0.0"
+    inherits "2.0.4"
+    setprototypeof "1.2.0"
+    statuses "2.0.1"
+    toidentifier "1.0.1"
+
+http-proxy-agent@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/http-proxy-agent/-/http-proxy-agent-5.0.0.tgz#5129800203520d434f142bc78ff3c170800f2b43"
+  integrity sha512-n2hY8YdoRE1i7r6M0w9DIw5GgZN0G25P8zLCRQ8rjXtTU3vsNFBI/vWK/UIeE6g5MUUz6avwAPXmL6Fy9D/90w==
+  dependencies:
+    "@tootallnate/once" "2"
+    agent-base "6"
+    debug "4"
+
+https-proxy-agent@^5.0.0:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz#c59ef224a04fe8b754f3db0063a25ea30d0005d6"
+  integrity sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==
+  dependencies:
+    agent-base "6"
+    debug "4"
+
+https-proxy-agent@^7.0.1:
+  version "7.0.2"
+  resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-7.0.2.tgz#e2645b846b90e96c6e6f347fb5b2e41f1590b09b"
+  integrity sha512-NmLNjm6ucYwtcUmL7JQC1ZQ57LmHP4lT15FQ8D61nak1rO6DH+fz5qNK2Ap5UN4ZapYICE3/0KodcLYSPsPbaA==
+  dependencies:
+    agent-base "^7.0.2"
+    debug "4"
+
+iconv-lite@0.4.24:
+  version "0.4.24"
+  resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
+  integrity sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==
+  dependencies:
+    safer-buffer ">= 2.1.2 < 3"
+
+inherits@2.0.4, inherits@^2.0.3:
+  version "2.0.4"
+  resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
+  integrity sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==
+
+ipaddr.js@1.9.1:
+  version "1.9.1"
+  resolved "https://registry.yarnpkg.com/ipaddr.js/-/ipaddr.js-1.9.1.tgz#bff38543eeb8984825079ff3a2a8e6cbd46781b3"
+  integrity sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==
+
+is-arguments@^1.0.4:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/is-arguments/-/is-arguments-1.1.1.tgz#15b3f88fda01f2a97fec84ca761a560f123efa9b"
+  integrity sha512-8Q7EARjzEnKpt/PCD7e1cgUS0a6X8u5tdSiMqXhojOdoV9TsMsiO+9VLC5vAmO8N7/GmXn7yjR8qnA6bVAEzfA==
+  dependencies:
+    call-bind "^1.0.2"
+    has-tostringtag "^1.0.0"
+
+is-arrayish@^0.2.1:
+  version "0.2.1"
+  resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
+  integrity sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==
+
+is-callable@^1.1.3:
+  version "1.2.7"
+  resolved "https://registry.yarnpkg.com/is-callable/-/is-callable-1.2.7.tgz#3bc2a85ea742d9e36205dcacdd72ca1fdc51b055"
+  integrity sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==
+
+is-core-module@^2.13.0:
+  version "2.13.0"
+  resolved "https://registry.yarnpkg.com/is-core-module/-/is-core-module-2.13.0.tgz#bb52aa6e2cbd49a30c2ba68c42bf3435ba6072db"
+  integrity sha512-Z7dk6Qo8pOCp3l4tsX2C5ZVas4V+UxwQodwZhLopL91TX8UyyHEXafPcyoeeWuLrwzHcr3igO78wNLwHJHsMCQ==
+  dependencies:
+    has "^1.0.3"
+
+is-fullwidth-code-point@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz#f116f8064fe90b3f7844a38997c0b75051269f1d"
+  integrity sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==
+
+is-generator-function@^1.0.7:
+  version "1.0.10"
+  resolved "https://registry.yarnpkg.com/is-generator-function/-/is-generator-function-1.0.10.tgz#f1558baf1ac17e0deea7c0415c438351ff2b3c72"
+  integrity sha512-jsEjy9l3yiXEQ+PsXdmBwEPcOxaXWLspKdplFUVI9vq1iZgIekeC0L167qeu86czQaxed3q/Uzuw0swL0irL8A==
+  dependencies:
+    has-tostringtag "^1.0.0"
+
+is-stream@^2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/is-stream/-/is-stream-2.0.1.tgz#fac1e3d53b97ad5a9d0ae9cef2389f5810a5c077"
+  integrity sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==
+
+is-typed-array@^1.1.3:
+  version "1.1.12"
+  resolved "https://registry.yarnpkg.com/is-typed-array/-/is-typed-array-1.1.12.tgz#d0bab5686ef4a76f7a73097b95470ab199c57d4a"
+  integrity sha512-Z14TF2JNG8Lss5/HMqt0//T9JeHXttXy5pH/DBU4vi98ozO2btxzq9MwYDZYnKwU8nRsz/+GVFVRDq3DkVuSPg==
+  dependencies:
+    which-typed-array "^1.1.11"
+
+js-tokens@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
+  integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
+
+json-bigint@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/json-bigint/-/json-bigint-1.0.0.tgz#ae547823ac0cad8398667f8cd9ef4730f5b01ff1"
+  integrity sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==
+  dependencies:
+    bignumber.js "^9.0.0"
+
+json-parse-even-better-errors@^2.3.0:
+  version "2.3.1"
+  resolved "https://registry.yarnpkg.com/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz#7c47805a94319928e05777405dc12e1f7a4ee02d"
+  integrity sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==
+
+json-schema-traverse@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz#ae7bcb3656ab77a73ba5c49bf654f38e6b6860e2"
+  integrity sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==
+
+jwa@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/jwa/-/jwa-2.0.0.tgz#a7e9c3f29dae94027ebcaf49975c9345593410fc"
+  integrity sha512-jrZ2Qx916EA+fq9cEAeCROWPTfCwi1IVHqT2tapuqLEVVDKFDENFw1oL+MwrTvH6msKxsd1YTDVw6uKEcsrLEA==
+  dependencies:
+    buffer-equal-constant-time "1.0.1"
+    ecdsa-sig-formatter "1.0.11"
+    safe-buffer "^5.0.1"
+
+jws@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/jws/-/jws-4.0.0.tgz#2d4e8cf6a318ffaa12615e9dec7e86e6c97310f4"
+  integrity sha512-KDncfTmOZoOMTFG4mBlG0qUIOlc03fmzH+ru6RgYVZhPkyiy/92Owlt/8UEN+a4TXR1FQetfIpJE8ApdvdVxTg==
+  dependencies:
+    jwa "^2.0.0"
+    safe-buffer "^5.0.1"
+
+lines-and-columns@^1.1.6:
+  version "1.2.4"
+  resolved "https://registry.yarnpkg.com/lines-and-columns/-/lines-and-columns-1.2.4.tgz#eca284f75d2965079309dc0ad9255abb2ebc1632"
+  integrity sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==
+
+locate-path@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-5.0.0.tgz#1afba396afd676a6d42504d0a67a3a7eb9f62aa0"
+  integrity sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==
+  dependencies:
+    p-locate "^4.1.0"
+
+lodash.camelcase@^4.3.0:
+  version "4.3.0"
+  resolved "https://registry.yarnpkg.com/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz#b28aa6288a2b9fc651035c7711f65ab6190331a6"
+  integrity sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==
+
+lodash.groupby@^4.6.0:
+  version "4.6.0"
+  resolved "https://registry.yarnpkg.com/lodash.groupby/-/lodash.groupby-4.6.0.tgz#0b08a1dcf68397c397855c3239783832df7403d1"
+  integrity sha512-5dcWxm23+VAoz+awKmBaiBvzox8+RqMgFhi7UvX9DHZr2HdxHXM/Wrf8cfKpsW37RNrvtPn6hSwNqurSILbmJw==
+
+long@^5.0.0:
+  version "5.2.3"
+  resolved "https://registry.yarnpkg.com/long/-/long-5.2.3.tgz#a3ba97f3877cf1d778eccbcb048525ebb77499e1"
+  integrity sha512-lcHwpNoggQTObv5apGNCTdJrO69eHOZMi4BNC+rTLER8iHAqGrUVeLh/irVIM7zTw2bOXA8T6uNPeujwOLg/2Q==
+
+lru-cache@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-6.0.0.tgz#6d6fe6570ebd96aaf90fcad1dafa3b2566db3a94"
+  integrity sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==
+  dependencies:
+    yallist "^4.0.0"
+
+media-typer@0.3.0:
+  version "0.3.0"
+  resolved "https://registry.yarnpkg.com/media-typer/-/media-typer-0.3.0.tgz#8710d7af0aa626f8fffa1ce00168545263255748"
+  integrity sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==
+
+merge-descriptors@1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/merge-descriptors/-/merge-descriptors-1.0.1.tgz#b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
+  integrity sha512-cCi6g3/Zr1iqQi6ySbseM1Xvooa98N0w31jzUYrXPX2xqObmFGHJ0tQ5u74H3mVh7wLouTseZyYIq39g8cNp1w==
+
+methods@~1.1.2:
+  version "1.1.2"
+  resolved "https://registry.yarnpkg.com/methods/-/methods-1.1.2.tgz#5529a4d67654134edcc5266656835b0f851afcee"
+  integrity sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==
+
+mime-db@1.52.0:
+  version "1.52.0"
+  resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.52.0.tgz#bbabcdc02859f4987301c856e3387ce5ec43bf70"
+  integrity sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==
+
+mime-types@~2.1.24, mime-types@~2.1.34:
+  version "2.1.35"
+  resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.35.tgz#381a871b62a734450660ae3deee44813f70d959a"
+  integrity sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==
+  dependencies:
+    mime-db "1.52.0"
+
+mime@1.6.0:
+  version "1.6.0"
+  resolved "https://registry.yarnpkg.com/mime/-/mime-1.6.0.tgz#32cd9e5c64553bd58d19a568af452acff04981b1"
+  integrity sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==
+
+minimist@^1.2.7:
+  version "1.2.8"
+  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.8.tgz#c1a464e7693302e082a075cee0c057741ac4772c"
+  integrity sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==
+
+ms@2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
+  integrity sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==
+
+ms@2.1.2:
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.2.tgz#d09d1f357b443f493382a8eb3ccd183872ae6009"
+  integrity sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==
+
+ms@2.1.3:
+  version "2.1.3"
+  resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.3.tgz#574c8138ce1d2b5861f0b44579dbadd60c6615b2"
+  integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==
+
+negotiator@0.6.3:
+  version "0.6.3"
+  resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.3.tgz#58e323a72fedc0d6f9cd4d31fe49f51479590ccd"
+  integrity sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==
+
+node-fetch@^2.6.1, node-fetch@^2.6.9:
+  version "2.7.0"
+  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.7.0.tgz#d0f0fa6e3e2dc1d27efcd8ad99d550bda94d187d"
+  integrity sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==
+  dependencies:
+    whatwg-url "^5.0.0"
+
+normalize-package-data@^2.5.0:
+  version "2.5.0"
+  resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-2.5.0.tgz#e66db1838b200c1dfc233225d12cb36520e234a8"
+  integrity sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==
+  dependencies:
+    hosted-git-info "^2.1.4"
+    resolve "^1.10.0"
+    semver "2 || 3 || 4 || 5"
+    validate-npm-package-license "^3.0.1"
+
+object-hash@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/object-hash/-/object-hash-3.0.0.tgz#73f97f753e7baffc0e2cc9d6e079079744ac82e9"
+  integrity sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==
+
+object-inspect@^1.9.0:
+  version "1.12.3"
+  resolved "https://registry.yarnpkg.com/object-inspect/-/object-inspect-1.12.3.tgz#ba62dffd67ee256c8c086dfae69e016cd1f198b9"
+  integrity sha512-geUvdk7c+eizMNUDkRpW1wJwgfOiOeHbxBR/hLXK1aT6zmVSO0jsQcs7fj6MGw89jC/cjGfLcNOrtMYtGqm81g==
+
+on-finished@2.4.1, on-finished@^2.3.0:
+  version "2.4.1"
+  resolved "https://registry.yarnpkg.com/on-finished/-/on-finished-2.4.1.tgz#58c8c44116e54845ad57f14ab10b03533184ac3f"
+  integrity sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==
+  dependencies:
+    ee-first "1.1.1"
+
+once@^1.4.0:
+  version "1.4.0"
+  resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1"
+  integrity sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==
+  dependencies:
+    wrappy "1"
+
+p-limit@^2.2.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-2.3.0.tgz#3dd33c647a214fdfffd835933eb086da0dc21db1"
+  integrity sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==
+  dependencies:
+    p-try "^2.0.0"
+
+p-locate@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-4.1.0.tgz#a3428bb7088b3a60292f66919278b7c297ad4f07"
+  integrity sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==
+  dependencies:
+    p-limit "^2.2.0"
+
+p-try@^2.0.0:
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/p-try/-/p-try-2.2.0.tgz#cb2868540e313d61de58fafbe35ce9004d5540e6"
+  integrity sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==
+
+parse-json@^5.0.0:
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-5.2.0.tgz#c76fc66dee54231c962b22bcc8a72cf2f99753cd"
+  integrity sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==
+  dependencies:
+    "@babel/code-frame" "^7.0.0"
+    error-ex "^1.3.1"
+    json-parse-even-better-errors "^2.3.0"
+    lines-and-columns "^1.1.6"
+
+parseurl@~1.3.3:
+  version "1.3.3"
+  resolved "https://registry.yarnpkg.com/parseurl/-/parseurl-1.3.3.tgz#9da19e7bee8d12dff0513ed5b76957793bc2e8d4"
+  integrity sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==
+
+path-exists@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-4.0.0.tgz#513bdbe2d3b95d7762e8c1137efa195c6c61b5b3"
+  integrity sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==
+
+path-parse@^1.0.7:
+  version "1.0.7"
+  resolved "https://registry.yarnpkg.com/path-parse/-/path-parse-1.0.7.tgz#fbc114b60ca42b30d9daf5858e4bd68bbedb6735"
+  integrity sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==
+
+path-to-regexp@0.1.7:
+  version "0.1.7"
+  resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
+  integrity sha512-5DFkuoqlv1uYQKxy8omFBeJPQcdoE07Kv2sferDCrAq1ohOU+MSDswDIbnx3YAM60qIOnYa53wBhXW0EbMonrQ==
+
+process@^0.11.10:
+  version "0.11.10"
+  resolved "https://registry.yarnpkg.com/process/-/process-0.11.10.tgz#7332300e840161bda3e69a1d1d91a7d4bc16f182"
+  integrity sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==
+
+proto3-json-serializer@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/proto3-json-serializer/-/proto3-json-serializer-2.0.0.tgz#1d5354e28a0ee985a771f8502d2b4db962d19d1e"
+  integrity sha512-FB/YaNrpiPkyQNSNPilpn8qn0KdEfkgmJ9JP93PQyF/U4bAiXY5BiUdDhiDO4S48uSQ6AesklgVlrKiqZPzegw==
+  dependencies:
+    protobufjs "^7.0.0"
+
+protobufjs@7.2.5, protobufjs@^7.0.0, protobufjs@^7.2.4:
+  version "7.2.5"
+  resolved "https://registry.yarnpkg.com/protobufjs/-/protobufjs-7.2.5.tgz#45d5c57387a6d29a17aab6846dcc283f9b8e7f2d"
+  integrity sha512-gGXRSXvxQ7UiPgfw8gevrfRWcTlSbOFg+p/N+JVJEK5VhueL2miT6qTymqAmjr1Q5WbOCyJbyrk6JfWKwlFn6A==
+  dependencies:
+    "@protobufjs/aspromise" "^1.1.2"
+    "@protobufjs/base64" "^1.1.2"
+    "@protobufjs/codegen" "^2.0.4"
+    "@protobufjs/eventemitter" "^1.1.0"
+    "@protobufjs/fetch" "^1.1.0"
+    "@protobufjs/float" "^1.0.2"
+    "@protobufjs/inquire" "^1.1.0"
+    "@protobufjs/path" "^1.1.2"
+    "@protobufjs/pool" "^1.1.0"
+    "@protobufjs/utf8" "^1.1.0"
+    "@types/node" ">=13.7.0"
+    long "^5.0.0"
+
+proxy-addr@~2.0.7:
+  version "2.0.7"
+  resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.7.tgz#f19fe69ceab311eeb94b42e70e8c2070f9ba1025"
+  integrity sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==
+  dependencies:
+    forwarded "0.2.0"
+    ipaddr.js "1.9.1"
+
+punycode@^2.1.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.3.0.tgz#f67fa67c94da8f4d0cfff981aee4118064199b8f"
+  integrity sha512-rRV+zQD8tVFys26lAGR9WUuS4iUAngJScM+ZRSKtvl5tKeZ2t5bvdNFdNHBW9FWR4guGHlgmsZ1G7BSm2wTbuA==
+
+qs@6.11.0:
+  version "6.11.0"
+  resolved "https://registry.yarnpkg.com/qs/-/qs-6.11.0.tgz#fd0d963446f7a65e1367e01abd85429453f0c37a"
+  integrity sha512-MvjoMCJwEarSbUYk5O+nmoSzSutSsTwF85zcHPQ9OrlFoZOYIjaqBAJIqIXjptyD5vThxGq52Xu/MaJzRkIk4Q==
+  dependencies:
+    side-channel "^1.0.4"
+
+range-parser@~1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/range-parser/-/range-parser-1.2.1.tgz#3cf37023d199e1c24d1a55b84800c2f3e6468031"
+  integrity sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==
+
+raw-body@2.5.1:
+  version "2.5.1"
+  resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.5.1.tgz#fe1b1628b181b700215e5fd42389f98b71392857"
+  integrity sha512-qqJBtEyVgS0ZmPGdCFPWJ3FreoqvG4MVQln/kCgF7Olq95IbOp0/BWyMwbdtn4VTvkM8Y7khCQ2Xgk/tcrCXig==
+  dependencies:
+    bytes "3.1.2"
+    http-errors "2.0.0"
+    iconv-lite "0.4.24"
+    unpipe "1.0.0"
+
+raw-body@2.5.2:
+  version "2.5.2"
+  resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.5.2.tgz#99febd83b90e08975087e8f1f9419a149366b68a"
+  integrity sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==
+  dependencies:
+    bytes "3.1.2"
+    http-errors "2.0.0"
+    iconv-lite "0.4.24"
+    unpipe "1.0.0"
+
+read-pkg-up@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-7.0.1.tgz#f3a6135758459733ae2b95638056e1854e7ef507"
+  integrity sha512-zK0TB7Xd6JpCLmlLmufqykGE+/TlOePD6qKClNW7hHDKFh/J7/7gCWGR7joEQEW1bKq3a3yUZSObOoWLFQ4ohg==
+  dependencies:
+    find-up "^4.1.0"
+    read-pkg "^5.2.0"
+    type-fest "^0.8.1"
+
+read-pkg@^5.2.0:
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-5.2.0.tgz#7bf295438ca5a33e56cd30e053b34ee7250c93cc"
+  integrity sha512-Ug69mNOpfvKDAc2Q8DRpMjjzdtrnv9HcSMX+4VsZxD1aZ6ZzrIE7rlzXBtWTyhULSMKg076AW6WR5iZpD0JiOg==
+  dependencies:
+    "@types/normalize-package-data" "^2.4.0"
+    normalize-package-data "^2.5.0"
+    parse-json "^5.0.0"
+    type-fest "^0.6.0"
+
+readable-stream@^3.1.1:
+  version "3.6.2"
+  resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.6.2.tgz#56a9b36ea965c00c5a93ef31eb111a0f11056967"
+  integrity sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==
+  dependencies:
+    inherits "^2.0.3"
+    string_decoder "^1.1.1"
+    util-deprecate "^1.0.1"
+
+require-directory@^2.1.1:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/require-directory/-/require-directory-2.1.1.tgz#8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
+  integrity sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==
+
+require-from-string@^2.0.2:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/require-from-string/-/require-from-string-2.0.2.tgz#89a7fdd938261267318eafe14f9c32e598c36909"
+  integrity sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==
+
+resolve@^1.10.0:
+  version "1.22.6"
+  resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.22.6.tgz#dd209739eca3aef739c626fea1b4f3c506195362"
+  integrity sha512-njhxM7mV12JfufShqGy3Rz8j11RPdLy4xi15UurGJeoHLfJpVXKdh3ueuOqbYUcDZnffr6X739JBo5LzyahEsw==
+  dependencies:
+    is-core-module "^2.13.0"
+    path-parse "^1.0.7"
+    supports-preserve-symlinks-flag "^1.0.0"
+
+retry-request@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/retry-request/-/retry-request-6.0.0.tgz#a74dbbab421b51daefa20228f6036e6e2a0f1169"
+  integrity sha512-24kaFMd3wCnT3n4uPnsQh90ZSV8OISpfTFXJ00Wi+/oD2OPrp63EQ8hznk6rhxdlpwx2QBhQSDz2Fg46ki852g==
+  dependencies:
+    debug "^4.1.1"
+    extend "^3.0.2"
+
+safe-buffer@5.2.1, safe-buffer@^5.0.1, safe-buffer@~5.2.0:
+  version "5.2.1"
+  resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
+  integrity sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==
+
+"safer-buffer@>= 2.1.2 < 3":
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
+  integrity sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==
+
+"semver@2 || 3 || 4 || 5":
+  version "5.7.2"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.2.tgz#48d55db737c3287cd4835e17fa13feace1c41ef8"
+  integrity sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==
+
+semver@^7.3.5:
+  version "7.5.4"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-7.5.4.tgz#483986ec4ed38e1c6c48c34894a9182dbff68a6e"
+  integrity sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==
+  dependencies:
+    lru-cache "^6.0.0"
+
+send@0.18.0:
+  version "0.18.0"
+  resolved "https://registry.yarnpkg.com/send/-/send-0.18.0.tgz#670167cc654b05f5aa4a767f9113bb371bc706be"
+  integrity sha512-qqWzuOjSFOuqPjFe4NOsMLafToQQwBSOEpS+FwEt3A2V3vKubTquT3vmLTQpFgMXp8AlFWFuP1qKaJZOtPpVXg==
+  dependencies:
+    debug "2.6.9"
+    depd "2.0.0"
+    destroy "1.2.0"
+    encodeurl "~1.0.2"
+    escape-html "~1.0.3"
+    etag "~1.8.1"
+    fresh "0.5.2"
+    http-errors "2.0.0"
+    mime "1.6.0"
+    ms "2.1.3"
+    on-finished "2.4.1"
+    range-parser "~1.2.1"
+    statuses "2.0.1"
+
+serve-static@1.15.0:
+  version "1.15.0"
+  resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.15.0.tgz#faaef08cffe0a1a62f60cad0c4e513cff0ac9540"
+  integrity sha512-XGuRDNjXUijsUL0vl6nSD7cwURuzEgglbOaFuZM9g3kwDXOWVTck0jLzjPzGD+TazWbboZYu52/9/XPdUgne9g==
+  dependencies:
+    encodeurl "~1.0.2"
+    escape-html "~1.0.3"
+    parseurl "~1.3.3"
+    send "0.18.0"
+
+setprototypeof@1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/setprototypeof/-/setprototypeof-1.2.0.tgz#66c9a24a73f9fc28cbe66b09fed3d33dcaf1b424"
+  integrity sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==
+
+side-channel@^1.0.4:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/side-channel/-/side-channel-1.0.4.tgz#efce5c8fdc104ee751b25c58d4290011fa5ea2cf"
+  integrity sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==
+  dependencies:
+    call-bind "^1.0.0"
+    get-intrinsic "^1.0.2"
+    object-inspect "^1.9.0"
+
+spdx-correct@^3.0.0:
+  version "3.2.0"
+  resolved "https://registry.yarnpkg.com/spdx-correct/-/spdx-correct-3.2.0.tgz#4f5ab0668f0059e34f9c00dce331784a12de4e9c"
+  integrity sha512-kN9dJbvnySHULIluDHy32WHRUu3Og7B9sbY7tsFLctQkIqnMh3hErYgdMjTYuqmcXX+lK5T1lnUt3G7zNswmZA==
+  dependencies:
+    spdx-expression-parse "^3.0.0"
+    spdx-license-ids "^3.0.0"
+
+spdx-exceptions@^2.1.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz#3f28ce1a77a00372683eade4a433183527a2163d"
+  integrity sha512-/tTrYOC7PPI1nUAgx34hUpqXuyJG+DTHJTnIULG4rDygi4xu/tfgmq1e1cIRwRzwZgo4NLySi+ricLkZkw4i5A==
+
+spdx-expression-parse@^3.0.0:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz#cf70f50482eefdc98e3ce0a6833e4a53ceeba679"
+  integrity sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==
+  dependencies:
+    spdx-exceptions "^2.1.0"
+    spdx-license-ids "^3.0.0"
+
+spdx-license-ids@^3.0.0:
+  version "3.0.15"
+  resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.15.tgz#142460aabaca062bc7cd4cc87b7d50725ed6a4ba"
+  integrity sha512-lpT8hSQp9jAKp9mhtBU4Xjon8LPGBvLIuBiSVhMEtmLecTh2mO0tlqrAMp47tBXzMr13NJMQ2lf7RpQGLJ3HsQ==
+
+statuses@2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/statuses/-/statuses-2.0.1.tgz#55cb000ccf1d48728bd23c685a063998cf1a1b63"
+  integrity sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==
+
+stream-events@^1.0.5:
+  version "1.0.5"
+  resolved "https://registry.yarnpkg.com/stream-events/-/stream-events-1.0.5.tgz#bbc898ec4df33a4902d892333d47da9bf1c406d5"
+  integrity sha512-E1GUzBSgvct8Jsb3v2X15pjzN1tYebtbLaMg+eBOUOAxgbLoSbT2NS91ckc5lJD1KfLjId+jXJRgo0qnV5Nerg==
+  dependencies:
+    stubs "^3.0.0"
+
+stream-shift@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/stream-shift/-/stream-shift-1.0.1.tgz#d7088281559ab2778424279b0877da3c392d5a3d"
+  integrity sha512-AiisoFqQ0vbGcZgQPY1cdP2I76glaVA/RauYR4G4thNFgkTqr90yXTo4LYX60Jl+sIlPNHHdGSwo01AvbKUSVQ==
+
+string-format-obj@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/string-format-obj/-/string-format-obj-1.1.1.tgz#c7612ca4e2ad923812a81db192dc291850aa1f65"
+  integrity sha512-Mm+sROy+pHJmx0P/0Bs1uxIX6UhGJGj6xDGQZ5zh9v/SZRmLGevp+p0VJxV7lirrkAmQ2mvva/gHKpnF/pTb+Q==
+
+string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
+  version "4.2.3"
+  resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.3.tgz#269c7117d27b05ad2e536830a8ec895ef9c6d010"
+  integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==
+  dependencies:
+    emoji-regex "^8.0.0"
+    is-fullwidth-code-point "^3.0.0"
+    strip-ansi "^6.0.1"
+
+string_decoder@^1.1.1:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
+  integrity sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==
+  dependencies:
+    safe-buffer "~5.2.0"
+
+strip-ansi@^6.0.0, strip-ansi@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9"
+  integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==
+  dependencies:
+    ansi-regex "^5.0.1"
+
+stubs@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/stubs/-/stubs-3.0.0.tgz#e8d2ba1fa9c90570303c030b6900f7d5f89abe5b"
+  integrity sha512-PdHt7hHUJKxvTCgbKX9C1V/ftOcjJQgz8BZwNfV5c4B6dcGqlpelTbJ999jBGZ2jYiPAwcX5dP6oBwVlBlUbxw==
+
+supports-color@^5.3.0:
+  version "5.5.0"
+  resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
+  integrity sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==
+  dependencies:
+    has-flag "^3.0.0"
+
+supports-preserve-symlinks-flag@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz#6eda4bd344a3c94aea376d4cc31bc77311039e09"
+  integrity sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==
+
+teeny-request@^9.0.0:
+  version "9.0.0"
+  resolved "https://registry.yarnpkg.com/teeny-request/-/teeny-request-9.0.0.tgz#18140de2eb6595771b1b02203312dfad79a4716d"
+  integrity sha512-resvxdc6Mgb7YEThw6G6bExlXKkv6+YbuzGg9xuXxSgxJF7Ozs+o8Y9+2R3sArdWdW8nOokoQb1yrpFB0pQK2g==
+  dependencies:
+    http-proxy-agent "^5.0.0"
+    https-proxy-agent "^5.0.0"
+    node-fetch "^2.6.9"
+    stream-events "^1.0.5"
+    uuid "^9.0.0"
+
+toidentifier@1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/toidentifier/-/toidentifier-1.0.1.tgz#3be34321a88a820ed1bd80dfaa33e479fbb8dd35"
+  integrity sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==
+
+tr46@~0.0.3:
+  version "0.0.3"
+  resolved "https://registry.yarnpkg.com/tr46/-/tr46-0.0.3.tgz#8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
+  integrity sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==
+
+type-fest@^0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.6.0.tgz#8d2a2370d3df886eb5c90ada1c5bf6188acf838b"
+  integrity sha512-q+MB8nYR1KDLrgr4G5yemftpMC7/QLqVndBmEEdqzmNj5dcFOO4Oo8qlwZE3ULT3+Zim1F8Kq4cBnikNhlCMlg==
+
+type-fest@^0.8.1:
+  version "0.8.1"
+  resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.8.1.tgz#09e249ebde851d3b1e48d27c105444667f17b83d"
+  integrity sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==
+
+type-is@~1.6.18:
+  version "1.6.18"
+  resolved "https://registry.yarnpkg.com/type-is/-/type-is-1.6.18.tgz#4e552cd05df09467dcbc4ef739de89f2cf37c131"
+  integrity sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==
+  dependencies:
+    media-typer "0.3.0"
+    mime-types "~2.1.24"
+
+unpipe@1.0.0, unpipe@~1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/unpipe/-/unpipe-1.0.0.tgz#b2bf4ee8514aae6165b4817829d21b2ef49904ec"
+  integrity sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==
+
+uri-js@^4.2.2:
+  version "4.4.1"
+  resolved "https://registry.yarnpkg.com/uri-js/-/uri-js-4.4.1.tgz#9b1a52595225859e55f669d928f88c6c57f2a77e"
+  integrity sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==
+  dependencies:
+    punycode "^2.1.0"
+
+util-deprecate@^1.0.1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
+  integrity sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==
+
+util@^0.12.4:
+  version "0.12.5"
+  resolved "https://registry.yarnpkg.com/util/-/util-0.12.5.tgz#5f17a6059b73db61a875668781a1c2b136bd6fbc"
+  integrity sha512-kZf/K6hEIrWHI6XqOFUiiMa+79wE/D8Q+NCNAWclkyg3b4d2k7s0QGepNjiABc+aR3N1PAyHL7p6UcLY6LmrnA==
+  dependencies:
+    inherits "^2.0.3"
+    is-arguments "^1.0.4"
+    is-generator-function "^1.0.7"
+    is-typed-array "^1.1.3"
+    which-typed-array "^1.1.2"
+
+utils-merge@1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
+  integrity sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==
+
+uuid@^8.3.2:
+  version "8.3.2"
+  resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
+  integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==
+
+uuid@^9.0.0:
+  version "9.0.1"
+  resolved "https://registry.yarnpkg.com/uuid/-/uuid-9.0.1.tgz#e188d4c8853cc722220392c424cd637f32293f30"
+  integrity sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==
+
+validate-npm-package-license@^3.0.1:
+  version "3.0.4"
+  resolved "https://registry.yarnpkg.com/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz#fc91f6b9c7ba15c857f4cb2c5defeec39d4f410a"
+  integrity sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==
+  dependencies:
+    spdx-correct "^3.0.0"
+    spdx-expression-parse "^3.0.0"
+
+vary@~1.1.2:
+  version "1.1.2"
+  resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
+  integrity sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==
+
+webidl-conversions@^3.0.0:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-3.0.1.tgz#24534275e2a7bc6be7bc86611cc16ae0a5654871"
+  integrity sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==
+
+whatwg-url@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-5.0.0.tgz#966454e8765462e37644d3626f6742ce8b70965d"
+  integrity sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==
+  dependencies:
+    tr46 "~0.0.3"
+    webidl-conversions "^3.0.0"
+
+which-typed-array@^1.1.11, which-typed-array@^1.1.2:
+  version "1.1.11"
+  resolved "https://registry.yarnpkg.com/which-typed-array/-/which-typed-array-1.1.11.tgz#99d691f23c72aab6768680805a271b69761ed61a"
+  integrity sha512-qe9UWWpkeG5yzZ0tNYxDmd7vo58HDBc39mZ0xWWpolAGADdFOzkfamWLDxkOWcvHQKVmdTyQdLD4NOfjLWTKew==
+  dependencies:
+    available-typed-arrays "^1.0.5"
+    call-bind "^1.0.2"
+    for-each "^0.3.3"
+    gopd "^1.0.1"
+    has-tostringtag "^1.0.0"
+
+wrap-ansi@^7.0.0:
+  version "7.0.0"
+  resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-7.0.0.tgz#67e145cff510a6a6984bdf1152911d69d2eb9e43"
+  integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==
+  dependencies:
+    ansi-styles "^4.0.0"
+    string-width "^4.1.0"
+    strip-ansi "^6.0.0"
+
+wrappy@1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
+  integrity sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==
+
+y18n@^5.0.5:
+  version "5.0.8"
+  resolved "https://registry.yarnpkg.com/y18n/-/y18n-5.0.8.tgz#7f4934d0f7ca8c56f95314939ddcd2dd91ce1d55"
+  integrity sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==
+
+yallist@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/yallist/-/yallist-4.0.0.tgz#9bb92790d9c0effec63be73519e11a35019a3a72"
+  integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==
+
+yargs-parser@^21.1.1:
+  version "21.1.1"
+  resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-21.1.1.tgz#9096bceebf990d21bb31fa9516e0ede294a77d35"
+  integrity sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==
+
+yargs@^17.7.2:
+  version "17.7.2"
+  resolved "https://registry.yarnpkg.com/yargs/-/yargs-17.7.2.tgz#991df39aca675a192b816e1e0363f9d75d2aa269"
+  integrity sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==
+  dependencies:
+    cliui "^8.0.1"
+    escalade "^3.1.1"
+    get-caller-file "^2.0.5"
+    require-directory "^2.1.1"
+    string-width "^4.2.3"
+    y18n "^5.0.5"
+    yargs-parser "^21.1.1"
diff --git a/deployment-examples/terraform/GCP/module/scripts/cloud_publisher.py b/deployment-examples/terraform/GCP/module/scripts/cloud_publisher.py
new file mode 100644
index 000000000..7bfd7c4aa
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/cloud_publisher.py
@@ -0,0 +1,143 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Publishes cloud monitoring metrics from Prometheus metrics.
+
+This script is intended to be run as a cron job on the scheduler instance.
+It will read the Prometheus metrics from the scheduler and publish them
+to Google Cloud Monitoring.
+"""
+import sys
+import urllib.request
+import time
+import argparse
+from google.cloud import monitoring_v3
+
+
+def publish_google_cloud_monitoring(metrics, project_id):
+    client = monitoring_v3.MetricServiceClient()
+
+    time_series = []
+
+    for metric_name in metrics:
+        if metrics[metric_name] is None:
+            continue
+        now = time.time()
+        seconds = int(now)
+        nanos = int((now - seconds) * 10 ** 9)
+
+        if isinstance(metrics[metric_name], float):
+            value = {
+                "double_value": metrics[metric_name],
+            }
+        else:
+            value = {
+                "int64_value": metrics[metric_name],
+            }
+
+        series = monitoring_v3.TimeSeries()
+        # TODO(allada) This should be a variable (x86_workers).
+        series.metric.type = f"custom.googleapis.com/native-link/x86_workers/{metric_name}"
+        series.points = [{
+            "interval": monitoring_v3.TimeInterval({
+                "start_time": {
+                    "seconds": seconds,
+                    "nanos": nanos,
+                },
+                "end_time": {
+                    "seconds": seconds,
+                    "nanos": nanos,
+                }
+            }),
+            "value": value,
+        }]
+
+        time_series.append(series)
+
+    client.create_time_series(
+        request = {
+            "name": f"projects/{project_id}",
+            "time_series": time_series,
+        }
+    )
+
+
+def get_metric_value(line):
+    if line.startswith(b'#'):
+        return None
+    parts = line.decode('ascii').split(' ', 1)
+    if len(parts) != 2:
+        print(f"Invalid line: {line}", file=sys.stderr)
+        return None
+    return (parts[0].strip(), int(float(parts[1].strip())))
+
+
+def main():
+    req = urllib.request.Request("http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-type")
+    req.add_header("Metadata-Flavor", "Google")
+    instance_type = urllib.request.urlopen(req).read()
+    # Only the scheduler should publish metrics.
+    if instance_type != b"scheduler":
+        return
+
+    parser = argparse.ArgumentParser(
+        description='Publish Prometheus metrics to cloud services.')
+    parser.add_argument('--url', type=str, required=True)
+    parser.add_argument('--project', type=str, required=True)
+
+    args = parser.parse_args()
+
+    active_actions_total = None
+    queued_actions_total = None
+    available_cpus = None
+
+    lines = urllib.request.urlopen(args.url).readlines()
+    for line in lines:
+        parts = get_metric_value(line)
+        if parts is None:
+            continue
+        (metric_name, value) = parts
+        # TODO(#384) Prometheus has a bug where it duplicates names a lot, when it's fixed this must be changed.
+        if metric_name.startswith("native_link_native_link_schedulers_native_link_schedulers_MAIN_SCHEDULER_active_actions_total"):
+            active_actions_total = value
+        if metric_name.startswith("native_link_native_link_schedulers_native_link_schedulers_MAIN_SCHEDULER_queued_actions_total"):
+            queued_actions_total = value
+        if metric_name.startswith("native_link_native_link_schedulers_native_link_schedulers_MAIN_SCHEDULER_cpu_count_available_properties"):
+            available_cpus = value
+
+    all_cpus = None
+    if available_cpus is not None and active_actions_total is not None:
+        all_cpus = float(available_cpus + active_actions_total)
+
+    actions_total = None
+    if active_actions_total is not None and queued_actions_total is not None:
+        actions_total = active_actions_total + queued_actions_total
+
+    # We need to use something smaller than infinity but large enough it'll allocate some nodes
+    # in the event there are no instances online.
+    cpu_ratio = 2.0 if queued_actions_total is not None else None
+    if all_cpus is not None and all_cpus != 0 and actions_total is not None:
+        cpu_ratio = float(actions_total) / all_cpus
+
+    publish_google_cloud_monitoring({
+        "actions_active": active_actions_total,
+        "actions_queued": queued_actions_total,
+        "cpu_total": available_cpus,
+
+        "actions_total": actions_total,
+        "cpu_ratio": cpu_ratio,
+    }, args.project)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/deployment-examples/terraform/GCP/module/scripts/create_filesystem.sh b/deployment-examples/terraform/GCP/module/scripts/create_filesystem.sh
new file mode 100644
index 000000000..eb3084097
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/create_filesystem.sh
@@ -0,0 +1,49 @@
+#!/bin/bash
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Creates a raid from all available drives if multiple drives.
+# Then creates an ext4 filesystem on raid (or single drive if no raid).
+
+set -euxo pipefail
+
+if [[ $EUID -ne 0 ]]; then
+   echo "This script must be run as root"
+   exit 1
+fi
+
+MOUNT_LOCATION="$1"
+shift
+
+DEVICES=( $(lsblk --fs --json | jq -r '.blockdevices[] | select(.children == null and .fstype == null and (.mountpoint == null and .mountpoints[0] == null)) | .name') )
+DEVICES_FULLNAME=()
+for DEVICE in "${DEVICES[@]}"; do
+  DEVICES_FULLNAME+=("/dev/$DEVICE")
+done
+
+if [ "${#DEVICES_FULLNAME[@]}" -eq "0" ]; then
+    echo "No unused drives, using root volume"
+    exit 0
+elif [ "${#DEVICES_FULLNAME[@]}" -eq "1" ]; then
+    echo "Only one volume letting ext4 manage it directly instead of raid"
+    DEVICE="${DEVICES_FULLNAME[@]}"
+else
+    mdadm --create --verbose /dev/md0 --level=0 --raid-devices=${#DEVICES_FULLNAME[@]} "${DEVICES_FULLNAME[@]}"
+    DEVICE="/dev/md0"
+fi
+rm -rf "$MOUNT_LOCATION"
+mkdir -p "$MOUNT_LOCATION"
+
+mkfs.ext4 "$DEVICE"
+mount "$DEVICE" "$MOUNT_LOCATION"
diff --git a/deployment-examples/terraform/GCP/module/scripts/entrypoint.sh b/deployment-examples/terraform/GCP/module/scripts/entrypoint.sh
new file mode 100755
index 000000000..f6fa52159
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/entrypoint.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# This script may be used to do additonal work to each task before it is launched.
+# For example, you may want to possibly download and launch the task into a docker
+# container.
+
+exec "$@"
diff --git a/deployment-examples/terraform/GCP/module/scripts/native-link.service b/deployment-examples/terraform/GCP/module/scripts/native-link.service
new file mode 100644
index 000000000..9f12ce5aa
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/native-link.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Native Link remote execution system
+After=network.target
+
+[Service]
+Type=simple
+Restart=always
+RestartSec=1
+User=root
+ExecStart=/root/start_native_link.sh
+
+[Install]
+WantedBy=multi-user.target
diff --git a/deployment-examples/terraform/GCP/module/scripts/scheduler.json b/deployment-examples/terraform/GCP/module/scripts/scheduler.json
new file mode 100644
index 000000000..2c8c09ae4
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/scheduler.json
@@ -0,0 +1,163 @@
+{
+  "stores": {
+    "AC_STORE": {
+      "fast_slow": {
+        "fast": {
+          "memory": {
+            "eviction_policy": {
+              "max_bytes": "${NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT:-100000000}"
+            }
+          }
+        },
+        "slow": {
+          "compression": {
+            "backend": {
+              "s3_store": {
+                "region": "${NATIVE_LINK_AC_S3_BUCKET_REGION:-}",
+                "bucket": "${NATIVE_LINK_AC_S3_BUCKET:-}",
+                "retry": {
+                  "max_retries": 7,
+                  "delay": 0.1,
+                  "jitter": 0.5
+                }
+              }
+            },
+            "compression_algorithm": {
+              "LZ4": {}
+            }
+          }
+        }
+      }
+    },
+    "CAS_STORE": {
+      "existence_cache": {
+        "backend": {
+          "fast_slow": {
+            "fast": {
+              // Only cache small CAS files in memory.
+              "size_partitioning": {
+                "size": 1048576, // 1mib.
+                "lower_store": {
+                  "memory": {
+                    "eviction_policy": {
+                      "max_bytes": "${NATIVE_LINK_CAS_MEMORY_CONTENT_LIMIT:-100000000}"
+                    }
+                  }
+                },
+                "upper_store": {
+                  "noop": {}
+                }
+              }
+            },
+            "slow": {
+              "compression": {
+                "backend": {
+                  "s3_store": {
+                    "region": "${NATIVE_LINK_CAS_S3_BUCKET_REGION:-}",
+                    "bucket": "${NATIVE_LINK_CAS_S3_BUCKET:-}",
+                    "retry": {
+                      "max_retries": 7,
+                      "delay": 0.1,
+                      "jitter": 0.5
+                    }
+                  }
+                },
+                "compression_algorithm": {
+                  "LZ4": {}
+                }
+              }
+            }
+          }
+        },
+        "eviction_policy": {
+          "max_seconds": 3600, // 1 hour.
+          "max_count": 1000000
+        }
+      }
+    }
+  },
+  "schedulers": {
+    "MAIN_SCHEDULER": {
+      "simple": {
+        "supported_platform_properties": {
+          "cpu_count": "Minimum"
+        }
+      }
+    }
+  },
+  "servers": [{
+    "listen_address": "0.0.0.0:50051",
+    "tls": {
+      "cert_file": "${NATIVE_LINK_CERT_FILE:-}",
+      "key_file": "${NATIVE_LINK_KEY_FILE:-}"
+    },
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    "services": {
+      "ac": {
+        "main": {
+          "ac_store": "AC_STORE"
+        }
+      },
+      "execution": {
+        "main": {
+          "cas_store": "CAS_STORE",
+          "scheduler": "MAIN_SCHEDULER"
+        }
+      },
+      "capabilities": {
+        "main": {
+          "remote_execution": {
+            "scheduler": "MAIN_SCHEDULER"
+          }
+        }
+      }
+    }
+  }, {
+    // Non-public apis. We re-export the Scheduler services on a non-tls connection
+    // for local services that don't need a load balancer.
+    "listen_address": "0.0.0.0:50052",
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    "services": {
+      "prometheus": {
+        "path": "/metrics"
+      },
+      "ac": {
+        "main": {
+          "ac_store": "AC_STORE"
+        }
+      },
+      "execution": {
+        "main": {
+          "cas_store": "CAS_STORE",
+          "scheduler": "MAIN_SCHEDULER"
+        }
+      },
+      "capabilities": {
+        "main": {
+          "remote_execution": {
+            "scheduler": "MAIN_SCHEDULER"
+          }
+        }
+      }
+    }
+  }, {
+    // Internal Worker endpoint.
+    "listen_address": "0.0.0.0:50061",
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    "services": {
+      // Note: This should be served on a different port, because it has
+      // a different permission set than the other services.
+      // In other words, this service is a backend api. The ones above
+      // are a frontend api.
+      "worker_api": {
+        "scheduler": "MAIN_SCHEDULER"
+      }
+    }
+  }]
+}
diff --git a/deployment-examples/terraform/GCP/module/scripts/start_native_link.sh b/deployment-examples/terraform/GCP/module/scripts/start_native_link.sh
new file mode 100644
index 000000000..6e135a964
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/start_native_link.sh
@@ -0,0 +1,147 @@
+#!/bin/bash
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Starts native-link remote execution service.
+#
+# This service will try and figure out what kind of service
+# it should morph into and then configure and launch it.
+
+set -euxo pipefail
+
+function make_certs_and_export_envs() {
+    openssl req -nodes -x509 -sha256 -newkey rsa:2048 -keyout /root/key.pem -out /root/cert.pem -days 356 -subj '/CN=localhost'
+    NATIVE_LINK_CERT_FILE=/root/cert.pem
+    NATIVE_LINK_KEY_FILE=/root/key.pem
+    export NATIVE_LINK_CERT_FILE
+    export NATIVE_LINK_KEY_FILE
+}
+
+function setup_s3_envs() {
+    AWS_JOINED_KEYS=$(gcloud secrets versions access latest --secret=$(curl http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-hmac-secret-key -H "Metadata-Flavor: Google"))
+    AWS_ENDPOINT_URL=https://storage.googleapis.com
+    AWS_ACCESS_KEY_ID="$(echo "$AWS_JOINED_KEYS" | cut -d ":" -f 1)"
+    AWS_SECRET_ACCESS_KEY="$(echo "$AWS_JOINED_KEYS" | cut -d ":" -f 2)"
+    cas_s3_bucket_pair=$(curl http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-cas-bucket -H "Metadata-Flavor: Google")
+    NATIVE_LINK_CAS_S3_BUCKET="$(echo "$cas_s3_bucket_pair" | cut -d ":" -f 1)"
+    NATIVE_LINK_CAS_S3_BUCKET_REGION="$(echo "$cas_s3_bucket_pair" | cut -d ":" -f 2)"
+    ac_s3_bucket_pair=$(curl http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-ac-bucket -H "Metadata-Flavor: Google")
+    NATIVE_LINK_AC_S3_BUCKET="$(echo "$ac_s3_bucket_pair" | cut -d ":" -f 1)"
+    NATIVE_LINK_AC_S3_BUCKET_REGION="$(echo "$ac_s3_bucket_pair" | cut -d ":" -f 2)"
+    AWS_DEFAULT_REGION="$(curl http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut '-d/' -f4)"
+
+    export AWS_ENDPOINT_URL
+    export AWS_ACCESS_KEY_ID
+    export AWS_SECRET_ACCESS_KEY
+    export NATIVE_LINK_CAS_S3_BUCKET
+    export NATIVE_LINK_CAS_S3_BUCKET_REGION
+    export NATIVE_LINK_AC_S3_BUCKET
+    export NATIVE_LINK_AC_S3_BUCKET_REGION
+    export AWS_DEFAULT_REGION
+}
+
+function setup_publisher_cron() {
+    project_id=$(curl http://metadata.google.internal/computeMetadata/v1/project/project-id -H "Metadata-Flavor: Google")
+    echo "* * * * * root sh -c 'python3 /root/cloud_publisher.py --url http://127.0.0.1:50052/metrics --project $project_id'" | sudo tee -a /etc/crontab
+    sudo service cron reload
+}
+
+# Try to mount any volumes if needed. Ignore any errors that might occur.
+~/create_filesystem.sh /mnt/data || true
+
+type=$(curl http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-type -H "Metadata-Flavor: Google")
+
+total_total_memory=$(( $(grep MemTotal /proc/meminfo | awk '{print $2}') * 1000 ))
+
+if [ "$type" == "browser" ]; then
+    setup_s3_envs
+
+    # We want native-link to start first so bb_browser can connect to it.
+    /usr/local/bin/native-link /root/browser_proxy.json &
+
+    # Install docker and bb_browser.
+    DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y apt docker.io
+
+    # Run BB Browser.
+    docker run \
+        --rm \
+        --net host \
+        -v /root/bb_browser_config.json:/root/bb_browser_config.json \
+        ghcr.io/buildbarn/bb-browser@sha256:e0eb5e229b83e5d6c4fe5619a1436610e7c5e3d83fbc3ad1346366dd201b52c5 \
+        /root/bb_browser_config.json
+    wait
+elif [ "$type" == "cas" ]; then
+    make_certs_and_export_envs
+    setup_s3_envs
+
+    # Use ~71% of memory and disk.
+    total_avail_memory=$(( $total_total_memory * 10 / 14 ))
+    total_avail_disk_size=$(( ${total_disk_size:-0} * 10 / 14 ))
+
+    # 10% goes to AC.
+    NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT=$(( $total_avail_memory / 10 ))
+    NATIVE_LINK_AC_FS_CONTENT_LIMIT=$(( $total_avail_disk_size / 10 ))
+    # Remaining goes to CAS.
+    NATIVE_LINK_CAS_MEMORY_CONTENT_LIMIT=$(( $total_avail_memory - $NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT ))
+    NATIVE_LINK_CAS_FS_CONTENT_LIMIT=$(( $total_avail_disk_size - $NATIVE_LINK_AC_FS_CONTENT_LIMIT ))
+
+    export NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT
+    export NATIVE_LINK_AC_FS_CONTENT_LIMIT
+    export NATIVE_LINK_CAS_MEMORY_CONTENT_LIMIT
+    export NATIVE_LINK_CAS_FS_CONTENT_LIMIT
+
+    /usr/local/bin/native-link /root/cas.json
+elif [ "$type" == "scheduler" ]; then
+    setup_s3_envs
+    make_certs_and_export_envs
+    setup_publisher_cron
+
+    # Use ~83% of memory.
+    total_avail_memory=$(( $total_total_memory * 10 / 12 ))
+
+    # 10% goes to AC.
+    NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT=$(( $total_avail_memory / 10 ))
+    # Remaining goes to CAS.
+    NATIVE_LINK_CAS_MEMORY_CONTENT_LIMIT=$(( $total_avail_memory - $NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT ))
+
+    export NATIVE_LINK_AC_MEMORY_CONTENT_LIMIT
+    export NATIVE_LINK_CAS_MEMORY_CONTENT_LIMIT
+
+    /usr/local/bin/native-link /root/scheduler.json
+elif [ "$type" == "worker" ]; then
+    setup_s3_envs
+
+    NATIVE_LINK_SCHEDULER_ENDPOINT=$(curl http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-internal-worker-scheduler-endpoint -H "Metadata-Flavor: Google")
+    NATIVE_LINK_BROWSER_ENDPOINT=$(curl http://metadata.google.internal/computeMetadata/v1/instance/attributes/native-link-browser-endpoint -H "Metadata-Flavor: Google")
+
+    total_disk_size=$(( $(df /mnt/data | tail -n 1 | awk '{ print $2 }') * 1000 ))
+
+    # We don't cache AC on workers, so ~71% goes to CAS. To leave room for jobs to use disk space too.
+    NATIVE_LINK_CAS_FS_CONTENT_LIMIT=$(( ${total_disk_size:-0} * 10 / 15 ))
+
+    export NATIVE_LINK_SCHEDULER_ENDPOINT
+    export NATIVE_LINK_BROWSER_ENDPOINT
+    export NATIVE_LINK_CAS_FS_CONTENT_LIMIT
+
+    if ! mountpoint /worker ; then
+        mkdir -p /mnt/data
+        mkdir -p /worker
+        mount --bind /mnt/data /worker
+    fi
+
+    /usr/local/bin/native-link /root/worker.json
+else
+    echo "Unknown native-link type: $type" >&2
+    echo 1
+fi
diff --git a/deployment-examples/terraform/GCP/module/scripts/worker.json b/deployment-examples/terraform/GCP/module/scripts/worker.json
new file mode 100644
index 000000000..578182866
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/scripts/worker.json
@@ -0,0 +1,104 @@
+{
+  "stores": {
+    "AC_STORE": {
+      "compression": {
+        "backend": {
+          "s3_store": {
+            "region": "${NATIVE_LINK_AC_S3_BUCKET_REGION:-}",
+            "bucket": "${NATIVE_LINK_AC_S3_BUCKET:-}",
+            "retry": {
+              "max_retries": 7,
+              "delay": 0.1,
+              "jitter": 0.5
+            }
+          }
+        },
+        "compression_algorithm": {
+          "LZ4": {}
+        }
+      }
+    },
+    "S3_CAS_STORE": {
+      "compression": {
+        "backend": {
+          "s3_store": {
+            "region": "${NATIVE_LINK_CAS_S3_BUCKET_REGION:-}",
+            "bucket": "${NATIVE_LINK_CAS_S3_BUCKET:-}",
+            "retry": {
+              "max_retries": 7,
+              "delay": 0.1,
+              "jitter": 0.5
+            }
+          }
+        },
+        "compression_algorithm": {
+          "LZ4": {}
+        }
+      }
+    },
+    "CAS_STORE": {
+      "fast_slow": {
+        "fast": {
+          "filesystem": {
+            "content_path": "/worker/cas/content",
+            "temp_path": "/worker/cas/temp",
+            "eviction_policy": {
+              "max_bytes": "${NATIVE_LINK_CAS_FS_CONTENT_LIMIT:-100000000}"
+            }
+          }
+        },
+        "slow": {
+          "existence_cache": {
+            "backend": {
+              "ref_store": {
+                "name": "S3_CAS_STORE"
+              }
+            }
+          }
+        },
+        "eviction_policy": {
+          "max_seconds": 3600, // 1 hour.
+          "max_count": 1000000
+        }
+      }
+    }
+  },
+  "workers": [{
+    "local": {
+      "worker_api_endpoint": {
+        "uri": "grpc://${NATIVE_LINK_SCHEDULER_ENDPOINT:-127.0.0.1}:50061"
+      },
+      "cas_fast_slow_store": "CAS_STORE",
+      "upload_action_result": {
+        "ac_store": "AC_STORE",
+        "historical_results_store": "S3_CAS_STORE",
+        "success_message_template": "https://${NATIVE_LINK_BROWSER_ENDPOINT:-example.com}/main/blobs/{digest_function}/action/{action_digest_hash}-{action_digest_size}/",
+        "failure_message_template": "https://${NATIVE_LINK_BROWSER_ENDPOINT:-example.com}/main/blobs/{digest_function}/historical_execute_response/{historical_results_hash}-{historical_results_size}/"
+      },
+      "work_directory": "/worker/work",
+      "platform_properties": {
+        "cpu_count": {
+          "query_cmd": "nproc"
+        }
+      }
+    }
+  }],
+  "servers": [{
+    "listen_address": "0.0.0.0:50051",
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    // Only /status will be served.
+    "services": {}
+  }, {
+    "listen_address": "0.0.0.0:50052",
+    "advanced_http": {
+      "http2_keep_alive_interval": 10
+    },
+    "services": {
+      "prometheus": {
+        "path": "/metrics"
+      }
+    }
+  }]
+}
diff --git a/deployment-examples/terraform/GCP/module/ssh_keys.tf b/deployment-examples/terraform/GCP/module/ssh_keys.tf
new file mode 100644
index 000000000..f44d68bf0
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/ssh_keys.tf
@@ -0,0 +1,21 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "tls_private_key" "ssh_key" {
+  algorithm = "ED25519"
+}
+
+data "tls_public_key" "native_link_pem" {
+  private_key_openssh = tls_private_key.ssh_key.private_key_openssh
+}
diff --git a/deployment-examples/terraform/GCP/module/ssl.tf b/deployment-examples/terraform/GCP/module/ssl.tf
new file mode 100644
index 000000000..1cfe3099c
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/ssl.tf
@@ -0,0 +1,24 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Note: This is set in the global deployment.
+data "google_certificate_manager_certificate_map" "default" {
+  name = "${var.project_prefix}-certificate-map"
+}
+
+resource "google_compute_ssl_policy" "lb_ssl_policy" {
+  name            = "${var.project_prefix}-lb-ssl-policy"
+  min_tls_version = "TLS_1_0"
+  profile         = "COMPATIBLE"
+}
diff --git a/deployment-examples/terraform/GCP/module/variables.tf b/deployment-examples/terraform/GCP/module/variables.tf
new file mode 100644
index 000000000..0aaa3375f
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/variables.tf
@@ -0,0 +1,33 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+variable "gcp_project_id" {
+  description = "Google Cloud project ID."
+  default     = "my-gcp-project-id"
+}
+
+variable "gcp_region" {
+  description = "Google Cloud region."
+  default     = "us-central1"
+}
+
+variable "gcp_zone" {
+  description = "Google Cloud zone."
+  default     = "us-central1-b"
+}
+
+variable "project_prefix" {
+  description = "Prefix all names with this value"
+  default     = "nldev"
+}
diff --git a/deployment-examples/terraform/GCP/module/vpc.tf b/deployment-examples/terraform/GCP/module/vpc.tf
new file mode 100644
index 000000000..d850ac101
--- /dev/null
+++ b/deployment-examples/terraform/GCP/module/vpc.tf
@@ -0,0 +1,103 @@
+# Copyright 2023 The Native Link Authors. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+data "google_compute_network" "default" {
+  name = "default"
+}
+
+resource "google_compute_firewall" "public_firewall" {
+  name    = "${var.project_prefix}-public-firewall"
+  network = data.google_compute_network.default.id
+
+  allow {
+    protocol = "tcp"
+    ports    = ["50051"]
+  }
+
+  source_ranges = ["0.0.0.0/0"]
+
+  target_service_accounts = [
+    google_service_account.browser_service_account.email,
+    google_service_account.cas_service_account.email,
+    google_service_account.scheduler_service_account.email,
+  ]
+}
+
+resource "google_compute_firewall" "internal_firewall" {
+  name    = "${var.project_prefix}-internal-firewall"
+  network = data.google_compute_network.default.id
+
+  allow {
+    protocol = "tcp"
+    ports    = ["50052"]
+  }
+
+  # All traffic from internal traffic.
+  source_ranges = [
+    "10.0.0.0/8",
+    "172.16.0.0/12",
+    "192.168.0.0/16",
+  ]
+
+  target_service_accounts = [
+    google_service_account.cas_service_account.email,
+    google_service_account.scheduler_service_account.email,
+  ]
+}
+
+resource "google_compute_firewall" "healthcheck_firewall" {
+  name    = "${var.project_prefix}-healthcheck-firewall"
+  network = data.google_compute_network.default.id
+
+  allow {
+    protocol = "tcp"
+    ports = [
+      "50051",
+    ]
+  }
+
+  # GCP health checker ips. See:
+  # https://cloud.google.com/load-balancing/docs/health-checks#firewall_rules
+  source_ranges = [
+    "35.191.0.0/16",
+    "130.211.0.0/22",
+  ]
+
+  target_service_accounts = [
+    google_service_account.browser_service_account.email,
+    google_service_account.cas_service_account.email,
+    google_service_account.scheduler_service_account.email,
+    google_service_account.x86_cpu_worker_service_account.email,
+  ]
+}
+
+resource "google_compute_firewall" "scheduler_internal_worker_firewall" {
+  name    = "${var.project_prefix}-scheduler-internal-worker-firewall"
+  network = data.google_compute_network.default.id
+
+  allow {
+    protocol = "tcp"
+    ports    = ["50061"]
+  }
+
+  # Only allow from workers.
+  source_service_accounts = [
+    google_service_account.x86_cpu_worker_service_account.email,
+  ]
+
+  # Only allow to the schedulers.
+  target_service_accounts = [
+    google_service_account.scheduler_service_account.email,
+  ]
+}