canada-ca/accelerators_accelerateurs-gcp

View on GitHub

[GCP] Tools and templates to accelerate GC service delivery. Outils et modèles pour accélérer la prestation de services du GC.

Stars: 10
Forks: 8
Open beginner issues: 0
Indexed issues: 53

Dominant language: HCL
License: MIT
Last GitHub push: Mar 31, 2023
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

53 open issues indexed

remove instruction to copy variables.tfvar in 1-guardrails - as already copied in 0-bootstrap Open

canada-ca/accelerators_accelerateurs-gcp#4 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add/adjust for 3rd log sync group audit_data_users in the tfvar Open

canada-ca/accelerators_accelerateurs-gcp#5 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Expand bootstrap.sh with variable northamerica-northeast1 or northamerica-northeast2 - and update org policy constraint Open

canada-ca/accelerators_accelerateurs-gcp#6 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Missing 10-cyber-defense-services Open

canada-ca/accelerators_accelerateurs-gcp#7 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add instructions to fill in project labels in 1-guardrails/projects.tf Open

canada-ca/accelerators_accelerateurs-gcp#8 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Fixing permissions issue on module log_export_to_biqquery - running terraform apply Open

canada-ca/accelerators_accelerateurs-gcp#10 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Automate 3 IAM group creation Open

canada-ca/accelerators_accelerateurs-gcp#11 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add procedure/sync via gsutil to keep tfstate in a bucket - out of the local shell Open

canada-ca/accelerators_accelerateurs-gcp#12 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Finops: add pricing data forecasting details for running guardrails solution Open

canada-ca/accelerators_accelerateurs-gcp#13 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Automate billing/org id generation Open

canada-ca/accelerators_accelerateurs-gcp#14 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Cover off subset of IAM - Identity and Organization | Checklist is pre completed before guardrails run Open

canada-ca/accelerators_accelerateurs-gcp#15 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Control code to ITSG-33 mapping and labels - add code comments and GCP labelling Open

canada-ca/accelerators_accelerateurs-gcp#18 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Redeployment example 20220228 Open

canada-ca/accelerators_accelerateurs-gcp#20 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add Terraform Service Account impersonation config/code Open

canada-ca/accelerators_accelerateurs-gcp#22 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Remaining config changes to fully deploy Open

canada-ca/accelerators_accelerateurs-gcp#24 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
reentrant bootstrap script has switched to seed project from boostrap - return back to bootstrap Open

canada-ca/accelerators_accelerateurs-gcp#25 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
minor: rerun terraform causes org policy rewrite - no effect - policy still up Open

canada-ca/accelerators_accelerateurs-gcp#27 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Open in cloud shell - hardcoded to fmichaelobrien fork not canada-ca main - I'll PR shortly Open

canada-ca/accelerators_accelerateurs-gcp#29 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Alternate glcoud init (auth) procedure for shell browser clients with popup blockers - use local gcloud sdk Open

canada-ca/accelerators_accelerateurs-gcp#30 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Adjust bootstrap.sh script for OSX (sed -i) should be (sed) - use a parameter Open

canada-ca/accelerators_accelerateurs-gcp#31 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
bootstrap.sh 2nd sed on provider.tf not required Open

canada-ca/accelerators_accelerateurs-gcp#32 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Move Google Admin group creation back into Google Cloud IAM group creation - no need to switch out to admin - assign to fmichaelobrien Open

canada-ca/accelerators_accelerateurs-gcp#33 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Post -i workaround for SED during guardrails validation - known issue can be fixed Open

canada-ca/accelerators_accelerateurs-gcp#35 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Document cloud broker procedure to associate billing account ID with organization + billing user Open

canada-ca/accelerators_accelerateurs-gcp#37 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Adjust bootstrap.sh to add the Billing Account Administrator role to the TF Service Account for both the Billing view as well as existing IAM view Open

canada-ca/accelerators_accelerateurs-gcp#38 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Marketplace GR-12 restriction required - or private service catalog Open

canada-ca/accelerators_accelerateurs-gcp#39 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Validation Verification Open

canada-ca/accelerators_accelerateurs-gcp#40 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Document cloud shell open user must select "Trust repo" for permissions to take effect Open

canada-ca/accelerators_accelerateurs-gcp#41 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Document and add to bootstrap.sh 6 super admin required roles required to prepare for terraform service account permissions Open

canada-ca/accelerators_accelerateurs-gcp#42 · 10 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Validate dept-seed-project does not have a GCP existing project conflict - either add random suffix or add increment on gcloud projects create command Open

canada-ca/accelerators_accelerateurs-gcp#43 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Log sink sk-c-logging-pub pub/sub topic missing Open

canada-ca/accelerators_accelerateurs-gcp#44 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
doc: add back pointer to gc collab wiki links Open

canada-ca/accelerators_accelerateurs-gcp#45 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
adjust both sh scripts - derive project for organization and billing (no input required) Open

canada-ca/accelerators_accelerateurs-gcp#46 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
example install run 20220915 - to validate terraform 1.2.8 project-factory removal of impersonate_service_account Open

canada-ca/accelerators_accelerateurs-gcp#47 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
delete or sed-update the labels in projects.tf Open

canada-ca/accelerators_accelerateurs-gcp#50 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add GR 09: restrict public IPs for VMs and SQL instances via organization policy Open

canada-ca/accelerators_accelerateurs-gcp#51 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
GR 1 and 2: Implement SSO for Super Admin and at Identity org level for Evidence ATO acceptance Open

canada-ca/accelerators_accelerateurs-gcp#53 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
GR 8: Segment and Separate - VPC diagrams for Profile 1 to 6 Open

canada-ca/accelerators_accelerateurs-gcp#54 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Verify terraform version post v1.3.4 - getting terraform plan/apply impersonate errors Open

canada-ca/accelerators_accelerateurs-gcp#55 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Rerun of terraform causes regional org policy hidden attribute change northamerica-northeast1 for module.org-policy.google_organization_policy.org_policy_list_allow_values[0] Open

canada-ca/accelerators_accelerateurs-gcp#56 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Bug: bootstrap project without billing associated due to maxed 5 projects/billing quota will fail billing check silently Open

canada-ca/accelerators_accelerateurs-gcp#57 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make bootstrap SA role additions quiet to preserve GR install log history Open

canada-ca/accelerators_accelerateurs-gcp#58 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
GR validation script procedure, regional mb fix, missing asset inventory jsons and hardcoded bucket name require rework before validation works Open

canada-ca/accelerators_accelerateurs-gcp#59 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Doc: add prereq step to turn off GoC VPN - otherwise terraform plan/apply will not authenticate Open

canada-ca/accelerators_accelerateurs-gcp#61 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Merge GR evidence requirements: gcp and azure Open

canada-ca/accelerators_accelerateurs-gcp#62 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Document turning off VPN before authenticating Terraform Service Account impersonation and billing api calls Open

canada-ca/accelerators_accelerateurs-gcp#63 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add procedure for manually adding the Terraform SA as Billing Account User on billing (in addition to IAM) to proceed with project/billing association Open

canada-ca/accelerators_accelerateurs-gcp#64 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Document terraform destroy of entire guardrails including gcloud delete for seed project, billing and TF service account - to reset the organization Open

canada-ca/accelerators_accelerateurs-gcp#65 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
derive project name from gcloud config via gcloud config list --format json | jq .core.project | sed 's/"//g' Open

canada-ca/accelerators_accelerateurs-gcp#66 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Adjust Guardrails Onboarding Documentation for recent changes - ongoing shared billing procedures Open

canada-ca/accelerators_accelerateurs-gcp#67 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

canada-ca/accelerators_accelerateurs-gcp

Get new issues in your inbox