terraform-example-foundation

terraform-example-foundation copied to clipboard

1-org: Apply fails for scc resources with API version error.

18

### TL;DR When running an initial deployment for cloud-build. During the deployment of SCC resources for CAI monitoring terraform fails. ``` Error: Error creating NotificationConfig: googleapi: Error 400: This API...

zexoor

Improve README for troubleshooting "project does not exist"

1

### TL;DR Improve troubleshooting guidance in the readme for errors related to a project ID stored in terraform state when the GCP project doesn't exist. This is particularly common when...

eeaton

### TL;DR Enable VPCSC dryrun mode to mitigate issues with flaky failures in CI tests. ### Expected behavior [Integration tests](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/build/int.cloudbuild.yaml#L141) create a perimeter along with other resources, configure an access...

eeaton

### TL;DR Remove the hardcoding at different levels of IPs and configuration options and instead take the values from a configuration object (which may come from a simple yaml file,...

mromascanu123

Provide mechanism for cleanup after failed deployment to enable re-deployment

4

### TL;DR Need to selectively remove from the environment and from tfstate the already created resources after a failed deployment .This has two sides: - cleanup the created resources by...

mromascanu123

doc improvement: clarify intended usage and level of support

1

### TL;DR This repo is intended to be forked into the user's own environment, then customized and maintained in their own version control system. We do not intend to support...

eeaton

validate step in 0-bootstrap fails when parent_folder is set.

3

### TL;DR https://github.com/terraform-google-modules/terraform-example-foundation/blob/dc0eb29e3303bb27cd7ed180d9573a9709981b33/0-bootstrap/README.md?plain=1#L164 The validate script checks for pre-req I AM roles include Organization Policy Admin and Organization Admin. These roles cannot be set at a folder level, so if...

eeaton

CI improvement: Reduce number of duplicated projects

2

### TL;DR Currently it is difficult to merge even small PR because of flaky CI tests. The CI test pipelines [build and destroy the entire environment](https://github.com/terraform-google-modules/terraform-example-foundation/blob/94b3ace19a517d5b3b224e9dca88f9e5761906b0/build/int.cloudbuild.yaml#L31). This CI test occurs...

eeaton

CI improvement: Remove explicit steps that are already addressed by org policies

3

### TL;DR Investigating the cause of flaky CI errors, I'm seeing a high rate of the following issues that are set in the project factory module but can be better...

eeaton

FR: CSR (Cloud Source Repositories) EOL June 2024 - replace the default path for version control system and CICD tool

10

### TL;DR CSR is undergoing deprecation in favour of SSM - https://cloud.google.com/source-repositories/docs/authentication - https://cloud.google.com/secure-source-manager/docs/overview ## Impact to CICD - will affect the CB/CSR default option in the TEF LZ -...

fmichaelobrien