google/stellar-engine

View on GitHub

Framework for management of compliant Google Cloud infrastructure and design patterns for Assured Workloads featuring best practices and documentation to accelerate accreditation efforts e.g., Federal Authorization to Operate (ATO).

Stars: 49
Forks: 20
Open beginner issues: 0
Indexed issues: 67
Avg merge: 3d 14h
Merged PRs (30d): 28

Dominant language: HCL
License: Apache-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

67 open issues indexed

[Bug] gemini-enterprise: usage-audit logging half-applies and nothing notices — the engine is left observabilityEnabled without sensitiveLoggingEnabled, so every prompt and response logs as <elided> Open

bug gemini for government Level of Effort - Low Priority - Medium security

google/stellar-engine#182 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] gemini-enterprise time-based access: the configured time zone is not honored — a re-run silently resets it to America/New_York, and the level's title and hour descriptions assert Eastern regardless of what was set Open

bug gemini for government Level of Effort - Low Priority - Medium

google/stellar-engine#187 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Create a blueprint for SCC Notifications for NIST 800_53 R5 Controls in Security Command Center Open

enhancement

google/stellar-engine#188 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] gem4gov-cli: the compliance regime has no effect on the engine's feature posture — FedRAMP High, IL4 and IL5 print the same list and apply the same engine_features.yaml Open

bug gemini for government Level of Effort - Medium Priority - High

google/stellar-engine#190 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Documentation] fast/stages-aw README misdescribes the networking stage: it advertises VPN connectivity neither option implements, and calls VPC-level firewall rules and subnets "YAML-based factories" when both are plain tfvars variables Open

documentation Level of Effort - Low Priority - Medium

google/stellar-engine#191 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] No FedRAMP Moderate blueprint family — the platform supports FRM but every workload blueprint is still FedRAMP High or IL5 only Open

enhancement Level of Effort - High Priority - Medium

google/stellar-engine#192 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Documentation] FedRAMP Moderate networking: record whether a Moderate-specific network pattern was superseded, which regions it supports, and where IL2 lands Open

documentation Level of Effort - Medium Priority - Medium

google/stellar-engine#195 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] docs/ddg.md points at fast/stages-aw/2-networking-a-fedramp-high, which v3.0.0 renamed — the deployment guide's networking step cannot be followed Open

bug Level of Effort - Low Priority - Medium

google/stellar-engine#196 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request]Customize Org Policy Enforcement Based on Regime Setting Open

enhancement

google/stellar-engine#197 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Remove Source Repo references and modules and replace with SSM Open

enhancement

google/stellar-engine#198 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] 2-networking-a-fedramp: the NVA cluster runs on Spot VMs with automatic_restart disabled, so a preemption removes the organization's only internet egress path — the IL5 stage runs the equivalent appliances on-demand Open

bug Level of Effort - Low Priority - Medium

google/stellar-engine#199 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] modules/project and modules/iam-service-account silently truncate over-length IDs instead of failing, and the documented prefix limit of 7 characters now leaves zero margin (naming-convention.md still says 6) Open

bug Level of Effort - Low Priority - Low

google/stellar-engine#228 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] Brownfield discovery offers the wrong Terraform state bucket: it looks for gs://<prefix>-tn-<env>-<tenant>-0, but a tenant's own stage state lives in gs://<prefix>-<env>-<tenant>-iac-0 Open

bug gemini for government Level of Effort - Low Priority - High

google/stellar-engine#230 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Bug] kms_protection_level is required by four FAST stages but is set by nothing, and 0-bootstrap builds its keys from the raw variable instead of the regime-aware local it computes Open

bug Level of Effort - Low Priority - High security

google/stellar-engine#231 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Documentation] path-to-authorization.md advertises FedRAMP Moderate baselines for the SCTM and Policies and Procedures templates, but the published template set is FedRAMP High and IL5 only Open

documentation Level of Effort - High Priority - Medium

google/stellar-engine#232 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] No research blueprint family — the README names universities as a target audience, every blueprint is FedRAMP High, FedRAMP Moderate or IL5 Open

enhancement

google/stellar-engine#239 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 16, 2026
[Documentation] docs/ddg.md still reports Version v2.9.1 / Updated May 11, 2026 at v4.0.0, and has fallen behind the stages it documents Open

documentation Level of Effort - Low Priority - Medium

google/stellar-engine#242 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

google/stellar-engine

Get new issues in your inbox