cloud-foundation-fabric/blueprints

Terraform end-to-end blueprints for Google Cloud

This section contains foundational blueprints that bootstrap the organizational hierarchy and automation prerequisites, networking blueprints that implement core patterns or features, data solutions blueprints that demonstrate how to integrate data services in complete scenarios, cloud operations blueprints that leverage specific products to meet specific operational needs and factories that implement resource factories for the repetitive creation of specific resources.

Currently available blueprints:

• cloud operations - Resource tracking and remediation via Cloud Asset feeds, Granular Cloud DNS IAM via Service Directory, Granular Cloud DNS IAM for Shared VPC, Compute Engine quota monitoring, Scheduled Cloud Asset Inventory Export to Bigquery, Packer image builder, On-prem SA key management, TCP healthcheck for unmanaged GCE instances, HTTP Load Balancer with Cloud Armor
• data solutions - GCE/GCS CMEK via centralized Cloud KMS, Cloud Storage to Bigquery with Cloud Dataflow with least privileges, Data Platform Foundations, SQL Server AlwaysOn availability groups blueprint, Cloud SQL instance with multi-region read replicas
• factories - The why and the how of resource factories
• foundations - single level hierarchy (environments), multiple level hierarchy (business units + environments)
• networking - hub and spoke via peering, hub and spoke via VPN, DNS and Google Private Access for on-premises, Shared VPC with GKE support, ILB as next hop, PSC for on-premises Cloud Function invocation, decentralized firewall
• third party solutions - OpenShift cluster on Shared VPC

For more information see the README files in the foundations, networking, data solutions, cloud operations and factories folders.