osinfra-io/google-cloud-terraform-backend

Infrastructure as Code (IaC) example for Google Cloud Platform Terraform backend.

google-cloud-terraform-backend's Issues

Onboard testing resources

Description

We want to onboard the testing resource for Kitchen-Terraform testing of Terraform child modules.

Acceptance

• Testing folder ID: 155411168404
• Repositories added: terraform-google-storage-bucket, terraform-google-project, terraform-google-kubernetes-engine, terraform-google-cloud-sql, terraform-google-cloud-nat, terraform-google-cloud-dns, terraform-google-subnet, terraform-google-vpc

Implementation Notes

Additional Context

IAM roles should be at the environment level folder vs. system folder

Description

It would tighten up security a bit to have the project creator role at the environment folder level vs. the system.

Acceptance

• Project creator role set on the environment level folders

Implementation Notes

Additional Context

Use module for state bucket

Description

Let's use the module for Google Cloud Storage Bucket.

Acceptance

• Module used

Implementation Notes

Additional Context

Align coding conventions

Description

Let's align the coding conventions here with the google-cloud-hierarchy repository.

Acceptance

• Align coding conventions with other repositories

Implementation Notes

Additional Context

Support for onboarding

Description

We will want to onboard teams efficiently and decrease the barrier to entry for Continuous Delivery.

Acceptance

• Acceptance Criteria
• Acceptance Criteria
• Acceptance Criteria

Implementation Notes

Additional Context

Refactor for_each expressions

Description

I'd like to pull more complex for_each expressions out of main.tf in the spirit of keeping the main.tf simple so we can better assign good first issues to new developers.

Acceptance

• Follow coding conventions from https://github.com/osinfra-io/github-organization-management
• Simplify main.tf

Implementation Notes

Additional Context

Add github-terraform-gcp-called-workflows

Add Infracost workflow

Description

Use infracost for cost analysis.

Acceptance

• Infracost workflow runs

Implementation Notes

Additional Context

Add service interfaces

Add or update Terraform backend

Email address:

[email protected]

Google folder path:

Platform Teams/Kubernetes

Repository name(s):

google-cloud-kubernetes

Additional comments:

No response

Cleanup README.md

Update to align with audit logging name change

Enable required APIs

Description

Cloud billing API must be enabled here so the service account can use it when creating new projects.

Error: failed pre-requisites: failed to check permissions on billing account : googleapi: Error 403: Cloud Billing API has not been used in project 6006068 before or it is disabled.

This project will need to enable all APIs a given platform will require. I suppose we could just blindly enable all APIs but less is more.

Acceptance

• New project can be created and new workflows run

Implementation Notes

Additional Context

Enable Infracost template and sync usage file with pre-commit

Working on the issue: antonbabenko/pre-commit-terraform#587, we learned we could simplify developers' management of usage files.

Tasks

Beta Give feedback

1. Add Infracost template
2. Pre-commit should sync usage file

• https://www.infracost.io/docs/features/config_file

Add google-cloud-terraform-hierarchy

Add google-cloud-kitchen-terraform repository

Description

Missing workload identity user roles on this repo.

Acceptance

• Workflows in google-cloud-kitchen-terraform repository can run

Implementation Notes

Additional Context

Add github-organization-management