Deploy Duo on Google Confidential Space

Deploy duo-server and auth-svc, optionally with the policy engine, to your own Google Cloud project, then use the demo mobile app to create a wallet against it.

The tutorial has the following steps:

• Introduction
• Set up OpenTofu
• Configure the variables
• Third-party credentials
• Set up Secret Guardian resources
• Set up backend resources
• Deploy the services
• Enable the policy engine
• Test with the mobile app
• Appendix: Tear down the deployment