terraform-example-foundation
terraform-example-foundation copied to clipboard
Shows how the CFT modules can be composed to build a secure cloud foundation
### TL;DR Locally, terraform init/plan/apply works flawlessly. When using GithubActions, the pipeline fails with: ``` Error: Error when reading or editing CloudIdentityGroup "groups/123456": googleapi: Error 403: Error(2028): Permission denied for...
see testing on #1229 ## 3-networks-hub-and-spoke - 2 symlinks modified in error during the non-production to nonproduction rename/refactor - the change is to ../common - which itself is a symlink...
### TL;DR The resources for [cai-monitoring.tf](https://github.com/terraform-google-modules/terraform-example-foundation/blob/229e53c8ca7ab6dd43305ab59f63a280c00dae55/1-org/envs/shared/cai_monitoring.tf#L4) are encrypted with CMEK, but this is inconsistent with how CMEK is enforced (or not) throughout the rest of the deployment. ### Expected behavior...
### TL;DR - Github action workflow job `run` is failing with the above. - Successfully deploy step 0 - Bootstrap - At stage now where I have a PR open...
### TL;DR # 3-networks-hub-and-spoke - 2 symlinks modified in error during the non-production to nonproduction rename/refactor - the change is to ../common - which itself is a symlink so the...
### TL;DR This happens almost every time when deploying dev, nprod or prod. Have to plan and apply again and everything is fine . But this kind of error will...
Earlier versions of the blueprint created a monitoring project per environment, with the assumption that this could be used for creating an environment-wide metrics scoping project which would then be...
### TL;DR In 0-bootstrap the default deployment model is cloudbuild. If not using cloudbuild need to manually rename and edit files. Instead can use a simple script and a hierarchy...
### TL;DR assigned to https://github.com/fmichaelobrien PR developed in fork https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/issues/399 ## ER: The default CI/CD repo/pipeline around Cloud Build and Cloud Source Repositories works well. There is a need for...
This PR changes one project name and moves one resource to another project for logical grouping where the implementation differs from the original design. - `prj-c-logging` was intended to contain...