GoogleCloudPlatform/pci-gke-blueprint

Issues

• Build Issue when try to execute a ./_helpers/build-infra.sh

  #125 opened 3 years ago by sganesanmuth
  0

• Install dependencies: Makefile requires shellcheck tool

  #120 opened 4 years ago by josebiro
  0

• Resolve Cloud Build errors

  #123 opened 4 years ago by jmound
  0

• Docker tag for InSpec profile version is hardcoded in cloudbuild.yml

  #118 opened 5 years ago by KonradSchieban
  2

• Enable Binary Authorization on GKE

  #117 opened 5 years ago by KonradSchieban
  0

• Add egress rules for GKE

  #116 opened 5 years ago by KonradSchieban
  0

• Automate audit logging enablement

  #115 opened 5 years ago by KonradSchieban
  0

• Run GKE node pool with custom service account

  #114 opened 5 years ago by KonradSchieban
  0

• Update to latest version (v0.2.0) of microservices-demo

  #113 opened 5 years ago by jmound
  0

• Module fails when policy admin IAM role is missing

  #109 opened 5 years ago by KonradSchieban
  0

• Redirect frontend http requests to https

  #104 opened 5 years ago by jmound
  0

• Document how to enable and use Security Health Analytics for this project

  #101 opened 5 years ago by jmound
  0

• Move TLS certificates to GCP Secret Manager

  #100 opened 5 years ago by jmound
  0

• Enable Packet Mirroring for IDS / IPS requirement

  #99 opened 5 years ago by jmound
  0

• Upgrade to latest Istio version with latest installation steps.

  #98 opened 5 years ago by jmound
  0

• Add steps for creating TLS certificates for Istio

  #97 opened 5 years ago by jmound
  0

• Update configurations to enable demonstrating the Debug API

  #46 opened 6 years ago by jmound
  0

• Demonstrate a SCC/Forseti use case

  #23 opened 6 years ago by jmound
  0

• Add a Cleanup section to documentation

  #47 opened 6 years ago by chroto
  0

• Upgrade to Stackdriver Kubernetes Engine Monitoring aka v2(beta) Stackdriver for GKE

  #64 opened 5 years ago by jmound
  2

• add deployment constraints

  #32 opened 5 years ago by anners
  1

• Refactor terraform files to prepare/ease transition to a multiple repository layout

  #49 opened 5 years ago by jmound
  1

• Configure Tiller to use TLS Auth

  #74 opened 5 years ago by bgeesaman
  1

• Terraform 0.12 support

  #92 opened 5 years ago by anners
  2

• GKE version is shared.tf is unsupported

  #93 opened 5 years ago by KonradSchieban
  1

• List which PCI requirements we are meeting with this project

  #72 opened 5 years ago by anners
  0

• Create a single master build script

  #82 opened 5 years ago by jmound
  0

• forseti service account permissions

  #75 opened 5 years ago by anners
  1

• Code Review follow up tasks

  #50 opened 6 years ago by jmound
  2

• Final PCI team review

  #31 opened 6 years ago by anners
  1

• Migrate project to Terraform v0.12.0

  #69 opened 6 years ago by chroto
  3

• Additional documentation

  #61 opened 6 years ago by jmound
  0

• Review for consistency with Google’s coding style guides

  #62 opened 6 years ago by jmound
  1

• Refactor Terraform variables

  #63 opened 6 years ago by jmound
  0

• Enable the Debugger API

  #44 opened 6 years ago by jmound
  0

• Add a reference to the cluster resource in the node pool resource

  #51 opened 6 years ago by jmound
  0

• Create helm charts to allow Kubernetes config templating

  #19 opened 6 years ago by jmound
  0

• Move the frontend and checkout services to the in-scope cluster

  #21 opened 6 years ago by jmound
  0

• Add feature list/tour to docs

  #37 opened 6 years ago by jmound
  0

• Configure fluentd to send all GKE logs (both clusters) to the mgmt project's Stackdriver

  #15 opened 6 years ago by jmound
  1

• Terraform can't handle GKE issue_client_certificate w/ K8S version 1.12

  #41 opened 6 years ago by jmound
  1

• Migrate to CFT Log-export module

  #54 opened 6 years ago by chroto
  0

• Remove unused cluster outputs

  #53 opened 6 years ago by chroto
  0

• Ensure commented descriptions on all IAM binding resources

  #55 opened 6 years ago by chroto
  0

• Code Review with someone from the CFT team

  #30 opened 6 years ago by anners
  4

• Review firewall rules

  #36 opened 6 years ago by jmound
  0

• Refactor helm charts

  #40 opened 6 years ago by jmound
  0

• Update documentation

  #26 opened 6 years ago by jmound
  0

• HTTPS Only

  #34 opened 6 years ago by chroto
  0

• Add docs describing connecting Forseti to Security Command Center

  #14 opened 6 years ago by jmound
  0