google/stellar-engine

Ver en GitHub

Framework for management of compliant Google Cloud infrastructure and design patterns for Assured Workloads featuring best practices and documentation to accelerate accreditation efforts e.g., Federal Authorization to Operate (ATO).

Estrellas: 49
Forks: 20
Issues abiertos para principiantes: 0
Issues indexados: 67
Merge medio: 3 d 12 h
PR fusionados (30 d): 35

Lenguaje dominante: HCL
Licencia: Apache-2.0
Último push a GitHub: 11/9/2026
Última indexación: 16/9/2026
Guía de contribución: Guía de contribución
Código de conducta: Código de conducta
Etiquetas para principiantes: Sin etiquetas para principiantes indexadas

Abierto Todos

63 issues abiertos indexados

[Feature Request] Multi-Regime Deployments Through Dynamic Prefixing Abierto

enhancement

google/stellar-engine#3 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Add CISA TALON (Pub/Sub) Logging Pattern Abierto

enhancement

google/stellar-engine#6 · 2 comentarios · 0 reacciones · 1 asignado · Indexado el 16/9/2026
[Feature Request] Add the Application Design Center Abierto

enhancement

google/stellar-engine#8 · 2 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] Custom KMS Org policy breaks terraform destroy operations of KMS keys Abierto

bug

google/stellar-engine#9 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Implement a Security Linter Abierto

enhancement

google/stellar-engine#10 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Lightweight Sandbox Abierto

enhancement

google/stellar-engine#12 · 2 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Allow Organization policy exceptions at folder/project level Abierto

enhancement

google/stellar-engine#14 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement CJIS Compliance Regime Support Abierto

enhancement gemini enterprise Priority - High

google/stellar-engine#17 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement FedRAMP Moderate Compliance Regime Support Abierto

enhancement gemini enterprise gemini for government Priority - High

google/stellar-engine#18 · 1 comentario · 0 reacciones · 1 asignado · Indexado el 16/9/2026
[Security] NGFW SSH private key written to disk as plaintext Abierto

bug security

google/stellar-engine#20 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Set default max size of cloud armor package payloads to be 8KB. Abierto

enhancement security

google/stellar-engine#29 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement IL5 Compliance Regime Support Abierto

enhancement gemini for government Priority - High

google/stellar-engine#30 · 0 comentarios · 0 reacciones · 1 asignado · Indexado el 16/9/2026
Core Maintenance and Automation Abierto

project management

google/stellar-engine#31 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
Compliance Expansion Abierto

project management

google/stellar-engine#32 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
Security Hardening Abierto

project management

google/stellar-engine#33 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
Features and Usability Abierto

project management

google/stellar-engine#34 · 0 comentarios · 0 reacciones · 1 asignado · Indexado el 16/9/2026
Documentation and Enablement Abierto

project management

google/stellar-engine#35 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement HIPPA Compliance Regime Support Abierto

enhancement gemini enterprise

google/stellar-engine#40 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement HITRUST Compliance Regime Support Abierto

enhancement gemini enterprise

google/stellar-engine#41 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement ITAR Compliance Regime Support Abierto

enhancement gemini enterprise gemini for government

google/stellar-engine#42 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Gemini Enterprise Deployment - Implement IL2 Compliance Regime Support Abierto

enhancement gemini for government

google/stellar-engine#43 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Develop Reference IAM Architecture for RBAC / SSO Abierto

enhancement security

google/stellar-engine#44 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Out-of-Band Drift Alerting Abierto

enhancement

google/stellar-engine#46 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Documentation] Add Stage Output Diagrams to READMEs Abierto

documentation

google/stellar-engine#48 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Automate `backend.tf` state bucket substitutions Abierto

enhancement

google/stellar-engine#49 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Automate Project ID randomization for soft-delete mitigation Abierto

enhancement

google/stellar-engine#50 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] Fix Custom KMS Organizational Policy Abierto

bug

google/stellar-engine#57 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Integrate Network Connectivity Center (NCC) Abierto

enhancement

google/stellar-engine#58 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Documentation] Clarifications in the path-to-authorization documentation Abierto

documentation Level of Effort - Low Priority - Low

google/stellar-engine#79 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Automated Enforcement of Sharing Artifacts Abierto

enhancement

google/stellar-engine#80 · 0 comentarios · 0 reacciones · 1 asignado · Indexado el 16/9/2026
[Documentation] Move the contents of documentation into docs Abierto

documentation Level of Effort - Low Priority - Low

google/stellar-engine#81 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Documentation] DDG drift vs. current code needs to be resolved Abierto

documentation Level of Effort - Low Priority - Medium

google/stellar-engine#83 · 2 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] Broken Link - Missing Network Design Diagram - 404 Abierto

bug documentation

google/stellar-engine#91 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Relocate gemini-enterprise blueprint source code Abierto

enhancement gemini enterprise gemini for government Level of Effort - Low Priority - Low

google/stellar-engine#99 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Extend gemini-enterprise blueprint to support FedRAMP Moderate Abierto

enhancement gemini enterprise gemini for government Level of Effort - Medium

google/stellar-engine#102 · 1 comentario · 0 reacciones · 1 asignado · Indexado el 16/9/2026
[Bug] postgresql and app-engine blueprints require APIs the framework never enables (sqladmin.googleapis.com, appengine.googleapis.com) — fresh-tenant applies fail until the operator enables them manually Abierto

bug Level of Effort - Low Priority - Medium

google/stellar-engine#104 · 0 comentarios · 0 reacciones · 1 asignado · Indexado el 16/9/2026
[Bug] deploy.sh: brownfield CMEK auto-discovery assumes a project/keyring layout Stellar Engine FAST does not produce Abierto

bug gemini for government Level of Effort - Medium Priority - Medium

google/stellar-engine#106 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] gemini-stage-1: shared-VPC network resolution relies on try() fallbacks against stage-0 outputs — misleading failure when outputs are absent or misshaped Abierto

bug gemini for government Level of Effort - Low Priority - Low

google/stellar-engine#111 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] gemini-enterprise deploy.sh silently installs tfenv, pins Terraform to 1.12.2, and mutates the user's PATH/.bashrc — overriding a newer Terraform with no opt-out Abierto

bug gemini for government Level of Effort - Low Priority - Medium

google/stellar-engine#114 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Documentation] il5/postgresql classic firewall rule sits outside Stage 2's hierarchical firewall policy governance — document the coexistence or migrate Abierto

documentation Level of Effort - Medium Priority - Medium

google/stellar-engine#117 · 1 comentario · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] FAST stages: retype essential_contacts from single-email string to the modules' full EMAIL => [types] contact map Abierto

enhancement Level of Effort - Low Priority - Medium

google/stellar-engine#119 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] 2-networking: add a tfvars-driven IAM map on the shared-VPC host project (parity with Stage 3's kms_keys iam) Abierto

enhancement Level of Effort - Medium Priority - Medium

google/stellar-engine#120 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] gem4gov: add a license-assignment command (batchUpdateUserLicenses) Abierto

enhancement gemini for government Level of Effort - Medium Priority - Medium

google/stellar-engine#121 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] gem4gov: implement BigQuery import in the standalone datastore import command Abierto

enhancement gemini for government Level of Effort - Medium Priority - Medium

google/stellar-engine#122 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] gem4gov: add a license-retraction command (retractLicenseConfig) + range-reclaim helper Abierto

enhancement gemini for government Level of Effort - Medium Priority - Low

google/stellar-engine#123 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] Standard Brownfield auto-discovers a nonexistent CMEK keyring (${Cap_Env}-${Tenant}-keyring) with no override prompt, writing a broken kms_key_id that fails the gemini-stage-0 apply Abierto

bug gemini for government Level of Effort - Low Priority - Medium

google/stellar-engine#132 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] deploy.sh validates the identity groups twice in one Step-1 run (Identity-step describe + Manual-Steps re-confirm), and the two can disagree Abierto

bug gemini for government Level of Effort - Low Priority - Low

google/stellar-engine#135 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Bug] 2-networking-a-fedramp-high: NVA return-route generation only routes the FIRST tenant subnet per environment ([0] index) — additional tenant subnets get no NVA return route and lose ALL internet egress Abierto

bug Level of Effort - Low Priority - Medium

google/stellar-engine#146 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026
[Feature Request] Implement Versioning Process to Pull Request functionality Abierto

enhancement

google/stellar-engine#151 · 0 comentarios · 0 reacciones · 1 asignado · Indexado el 16/9/2026
[Feature Request] Move self-managed SSL Certificate uploads to Terraform for G4G deployments Abierto

enhancement gemini enterprise gemini for government Level of Effort - Low Priority - Low

google/stellar-engine#161 · 0 comentarios · 0 reacciones · 0 asignados · Indexado el 16/9/2026

google/stellar-engine

Recibe los nuevos issues en tu correo