Add pf example with deny all org policy

2022-10-28 17:34:34 +02:00 · 2022-10-28 17:34:34 +02:00 · 410fe1c73a
parent c714952f39
commit 410fe1c73a
3 changed files with 9 additions and 0 deletions
--- a/blueprints/factories/project-factory/README.md
+++ b/blueprints/factories/project-factory/README.md
@ -160,6 +160,9 @@ org_policies:
    allow:
      values:
        - projects/fast-dev-iac-core-0
+  constraints/compute.vmExternalIpAccess:
+    deny:
+      all: true

 # [opt] Service account to create for the project and their roles on the project
 # in name => [roles] format
--- a/blueprints/factories/project-factory/sample-data/projects/project.yaml
+++ b/blueprints/factories/project-factory/sample-data/projects/project.yaml
@ -54,6 +54,9 @@ org_policies:
    allow:
      values:
        - projects/fast-dev-iac-core-0
+  constraints/compute.vmExternalIpAccess:
+    deny:
+      all: true

 # [opt] Service account to create for the project and their roles on the project
 # in name => [roles] format
--- a/fast/stages/03-project-factory/dev/data/projects/project.yaml.sample
+++ b/fast/stages/03-project-factory/dev/data/projects/project.yaml.sample
@ -54,6 +54,9 @@ org_policies:
    allow:
      values:
        - projects/fast-dev-iac-core-0
+  constraints/compute.vmExternalIpAccess:
+    deny:
+      all: true

 # [opt] Service account to create for the project and their roles on the project
 # in name => [roles] format