GoogleCloudPlatform/pbmm-on-gcp-onboarding

Issues

• Dependency Dashboard

  #456 opened 5 months ago by forking-renovate
  0

• ITSG-33 security controls mapping for TEF V4 - for org policies

  #441 opened 5 months ago by fmichaelobrien
  4

• New org: billing sharing from external org now requires addition of directory id - as GCP default organization policy - domain restricted sharing

  #452 opened 5 months ago by obriensystems
  2

• Overlay fortigate NGFW dual LB example into 3-networks-hub-and-spoke

  #389 opened 5 months ago by fmichaelobrien
  3

• Add terraform delete triggers with optional script to allow for developer workflow of repeated create/delete of all TEF projects

  #390 opened 5 months ago by fmichaelobrien
  1

• 4-projects step 15 production apply of both business units - after common apply - fails with API rate limit on concurrent operations quota - fix: retry up to 60 min later

  #391 opened 5 months ago by obriensystems
  4

• 5-app-infra step 10 - cloud build trigger missing for plan and apply builds

  #392 opened 5 months ago by obriensystems
  3

• FR: Add Cloud NGFW Essential capability with optional Standard or Enterprise based IPS in the TEF 3-networks-hub-and-spoke folder and associated terraform-google-modules

  #396 opened 5 months ago by fmichaelobrien
  4

• prep for repo rename terraform-google-pubsec-foundation

  #397 opened 5 months ago by fmichaelobrien
  2

• Cloud Foundation Toolkit as source original for terraform-google-modules

  #398 opened 5 months ago by fmichaelobrien
  1

• Add Azure DevOps ADO as build and repository option

  #399 opened 5 months ago by obriensystems
  25

• Refector for CFF: Cloud Foundation Fabric - fork towards public sector secure overlay alignment

  #400 opened 5 months ago by fmichaelobrien
  1

• Use a json global config file directly with terraform as -var-file or as a jsondecode/file locals block

  #402 opened 5 months ago by fmichaelobrien
  1

• LZ Delete: full terraform destroy option for some or all of 1-5 folders including 0-bootstrap gcloud infrastructure - dev/org reuse

  #403 opened 5 months ago by fmichaelobrien
  2

• Adjust readme.md for local PR changes specific to ongoing ADO ci/cd option

  #404 opened 5 months ago by obriensystems
  1

• Data Residency: nane1/nane2 region retrofit throughout the LZ - in prep of a single parameterized input yaml

  #406 opened 5 months ago by obriensystems
  1

• Merge duplicate instructions on GCP onboarding, roles, service enablements, billing and bootstrap project - continuation of 362

  #407 opened 5 months ago by obriensystems
  1

• DockerHub development version of the TEF Dockerfile terraform.exe image for ADO iteration based off the gcloud image in https://hub.docker.com/r/google/cloud-sdk/

  #409 opened 5 months ago by obriensystems
  6

• Add local gcloud shell instructions to readme - staged in wiki

  #412 opened 5 months ago by obriensystems
  1

• Identity Federation procedure for Active Directory and Microsoft Entra

  #413 opened 5 months ago by obriensystems
  1

• Install GCP local CLI on Azure Virtual Desktop

  #414 opened 5 months ago by obriensystems
  2

• Add 2nd gcp_scc_admin to gcp_ssc_findings_admin

  #415 opened 5 months ago by fmichaelobrien
  1

• Step 0-bootstrap: no outputs generated

  #416 opened 5 months ago by eballestas
  3

• 0-bootstrap: cloudbuild output is not present on outputs.tf file

  #417 opened 5 months ago by eballestas
  4

• 0-bootstrap cloning to repo error

  #418 opened 5 months ago by eballestas
  3

• README.md warning on main branch temporary repo state while the CB/CSR option is returned during the retrofit for local TF deployment

  #419 opened 5 months ago by fmichaelobrien
  2

• Replace/revert-back CB/CSR options as we add local terraform and ado (399) options - to be able to use CB/CSR as a current option while we retrofit

  #421 opened 5 months ago by fmichaelobrien
  6

• As part of 421 - CB/local retrofit - verify no trailing . required for perimeter_additional_members like for the DNS peering domain - defaulting to no

  #422 opened 5 months ago by obriensystems
  2

• Missing cloudbuild services enable on bootstrap requires a 5 min wait state before a terraform re apply on 0-bootstrap - delete the existing cloudbuild worker pool to proceed

  #425 opened 5 months ago by obriensystems
  1

• As part of 421 - CB/local retrofit - verify KMS = us and GCS = US locations equivalents for nane1/nane2

  #424 opened 5 months ago by obriensystems
  1

• Verify windows /AVD workstation 0-bootstrap deployment has no issues with symlinks

  #428 opened 5 months ago by fmichaelobrien
  3

• Windows amd64/ia64 local gcloud client support: terraform apply via ming64/git-bash tested - expected win32 issue running bootstrap module check_env.sh works only inside docker container (ubuntu or google/cloud-sdk) - or use cloud shell

  #429 opened 5 months ago by fmichaelobrien
  14

• Verify federated ad/entra user visible in IAM gcp side for role assignment - currently only admin side can assign user to a group

  #430 opened 5 months ago by fmichaelobrien
  1

• Cloud Build module in bootstrap fails on CSR clone gcloud API auth during push-to-repo.sh for CB trigger creation on particular client - use ssh key and ssh-agent

  #431 opened 5 months ago by fmichaelobrien
  20

• Add cloudidentity.googleapis.com - from 360 run - missing from readme

  #432 opened 5 months ago by obriensystems
  2

• Document Cloud Build worker pool quota increase required for the 1 private pool per region - will hit on 2nd dev LZ

  #434 opened 5 months ago by obriensystems
  5

• Hold: secondary SA role of owner should not be required on bu proj

  #436 opened 5 months ago by obriensystems
  1

• terraform destroy - procedure and docs

  #437 opened 5 months ago by obriensystems
  1

• pipeline retries for what can go wrong with timeout, group retry, CB pool creation

  #438 opened 5 months ago by fmichaelobrien
  1

• Migration: CSR (Cloud Source Repositories) EOL June 2024 - move to SSM (Secure Source Manager) as default CICD repository

  #439 opened 5 months ago by obriensystems
  1

• Add CSR clone procedure using SSH instead of gcloud for cloud shell

  #440 opened 5 months ago by obriensystems
  1

• Canary: serverless: gen app builder

  #442 opened 5 months ago by obriensystems
  1

• Upstream: full group creation hangs on eventual consistency - wait 5 min to restart 0-bootstrap terraform plan/apply

  #443 opened 5 months ago by obriensystems
  1

• upstream: missing main branch references in 0-bootstrap push-to-repo.sh step - switch to master

  #444 opened 5 months ago by obriensystems
  1

• upstream: developer workflow - remove seed project liens before deleting - or disable liens on create

  #445 opened 5 months ago by obriensystems
  1

• Azure and GCP API calls - Cross Cloud Interconnect and Azure Expressroute

  #446 opened 5 months ago by obriensystems
  1

• Merge Marian's latest dev branch - incorporating 20240520 TEF upstream sync

  #448 opened 5 months ago by fmichaelobrien
  1

• service account impersonation for developer accounts

  #449 opened 5 months ago by obriensystems
  3

• Remove BAA from sa.tf in 0-boostrap - simuliation with only BAU - retest LZ

  #450 opened 5 months ago by obriensystems
  1

• Align PBMM and TEF repo on nonproduction, non-production and non_production identifiers - upstream and downstream

  #405 opened 6 months ago by obriensystems
  0