terraform-example-foundation v2.0.0

Features

• 4-projects GCS CMEK example (#346) (d74ff33)
• add FAQ, Glossary & Troubleshooting docs (#466) (57643a6)
• Add GAR in infra pipelines and tests (#395) (2a2e4fe)
• Add hub and spoke network architecture (#298) (d9468db)
• add iam.automaticIamGrantsForDefaultServiceAccounts org policy constraint (#386) (f6b0387)
• Add log export GCS bucket object versioning (#317) (cb0e622)
• add Shielded VMs & OS Login org policies (#283) (07a201e)
• Add step 5-app-infra (#382) (fd5329c)
• add support for hierarchical firewall policies (#343) (e7bb1bc)
• Add terraform validator and add policy-library (#263) (f220588)
• Adds prefix to projects and folder name (#289) (66dacf2)
• App Infra pipelines (#337) (c3b19e8)
• enable hub & spoke transitivity via gateway VMs (#322) (f6cd9ad)
• example-foundations test modes (#309) (34a6d75)
• implement support for Partner Interconnect (#345) (70501ec)
• Make BigQuery log destinations partitioned (#277) (f40c5fe)
• Move Cloud Source Repo definition to variable. (#302) (48037c9)
• Replace container registry with artifact registry in CloudBuild (#367) (6b6469b)
• Update terraform-validator version, instructions and CMEK bucket (#397) (8f7c58e)
• updates to support TF 0.13 (#268) (c5c6c6c)

Bug Fixes

• 1-org README.md add setting up Security Command Center to Prerequisites (#467) (ee04cb5)
• add bucket prefix for bootstrap (#407) (03bd05a)
• add cloudbuild api to seed proj (#358) (1fda12b)
• add CMEK project name prefix and root readme project names (#414) (141c059)
• add impersonate to gcloud builds submit command in infra-pipeline module (#458) (1d3fbf8)
• add infra pipeline CB SA role test (#450) (e30fe8c)
• add missing google apis to policy constraint (#370) (2ac0466)
• Add missing symlink in shared network env (#328) (48c2318)
• add network fixture prepare to lint test (#323) (c120d55)
• add standalone repo for terraform-validator policies (#403) (b170478)
• Adding KMS API in bootstrap project (#385) (39b8da3)
• Bugfix/fix 4-projects issues (#374) (f5f5224)
• clone policies repo once per build (#329) (3e95111)
• default sa deprivilege (ea5fcc2)
• Documentation fixes (#327) (ce610d0)
• Documentation language inconsistencies, typos and tests (#419) (71b633f)
• Fixes for build stability issues (#406) (c2b8200)
• pin versions of terraform in the code to version 0.13.6 (#398) (b86457c)
• remove shielded VM org policy (#286) (c1a2852)
• rename access_context.tfvars to access_context.auto.tfvars in 4-projects (#396) (91ce3f8)
• set 3-networks service account token lifetime to 1200s (#432) (76efbe8)
• specify ports for ssh & rdp for IAP TCP forwarding rule (#390) (3eed2bc)
• support for hub and spoke transitivity (#427) (a6b43da)
• update 4-projects infra pipeline project name (#404) (7beb5a0)
• update documentation (#301) (54aa58a)
• Update google cloud sdk min version to 319.0.0 and use GA version of gcloud scc notifications (#463) (ebbb4d7)
• update google-beta provider source info (#368) (9924760)
• Update readme files (#399) (d1f29c3)
• upgrade version for dependant CFT modules (#339) (02a4ac5)
• use f1-micro as the machine type for the deploy in 5-app-infra step (#416) (1fad10b)
• version of network_peering in step 4-projects (#384) (16a99bb)