fe71be72d3
* Cloud DNS and Shared VPC (#184) * Cloud DNS and Shared VPC module to allow application teams to have their own Cloud DNS configuration. * Cleaning up README.md * Improving Formating. * Adding license to all .tf files. * Removing dead code. * Moving this example into the Cloud Operations folder. * Using fabric resources and refactoring. Only the 'test.example' file is not using the proper modules now. * normalize README, use autogenerated vars table, add types to variables * refactor * simple tests * add diagram, update READMEs Co-authored-by: Aurélien Legrand <aurelien.legrand01@gmail.com> |
||
|---|---|---|
| .. | ||
| asset-inventory-feed-remediation | ||
| dns-fine-grained-iam | ||
| dns-shared-vpc | ||
| quota-monitoring | ||
| scheduled-asset-inventory-export-bq | ||
| README.md | ||
README.md
Operations examples
The examples in this folder show how to wire together different Google Cloud services to simplify operations, and are meant for testing, or as minimal but sufficiently complete starting points for actual use.
Resource tracking and remediation via Cloud Asset feeds
This example shows how to leverage Cloud Asset Inventory feeds to stream resource changes in real time, and how to programmatically use the feed change notifications for alerting or remediation, via a Cloud Function wired to the feed PubSub queue.
The example's feed tracks changes to Google Compute instances, and the Cloud Function enforces policy compliance on each change so that tags match a set of simple rules. The obious use case is when instance tags are used to scope firewall rules, bu the example can easily be adapted to suit different use cases.
Scheduled Cloud Asset Inventory Export to Bigquery
This example shows how to leverage the Cloud Asset Inventory Exporting to Bigquery feature, to keep track of your organization's assets over time storing information in Bigquery. Data stored in Bigquery can then be used for different purposes like dashboarding or analysis.
Granular Cloud DNS IAM via Service Directory
This example shows how to leverage Service Directory and Cloud DNS Service Directory private zones, to implement fine-grained IAM controls on DNS. The example creates a Service Directory namespace, a Cloud DNS private zone that uses it as its authoritative source, service accounts with different levels of permissions, and VMs to test them.
Granular Cloud DNS IAM for Shared VPC
This example shows how to create reusable and modular Cloud DNS architectures, by provisioning dedicated Cloud DNS instances for application teams that want to manage their own DNS records, and configuring DNS peering to ensure name resolution works in a common Shared VPC.
Compute Engine quota monitoring
This example shows a practical way of collecting and monitoring Compute Engine resource quotas via Cloud Monitoring metrics as an alternative to the recently released built-in quota metrics. A simple alert on quota thresholds is also part of the example.