terraform-google-modules / terraform-example-foundation

Shows how the CFT modules can be composed to build a secure cloud foundation
https://cloud.google.com/architecture/security-foundations
Apache License 2.0
1.18k stars 701 forks source link

Example on how to implement 4-projects step for GitLab #1285

Open KonStg opened 6 days ago

KonStg commented 6 days ago

TL;DR

There is an examples on how to implement all the foundation steps for GitLab in 0-bootstrap/envs/shared/README-GitLab.md But nothing for infrastructure 4-projects and 5-app-infra steps.
It would be very helpful for GitLab users to receive advice or direction for further actions in the phase 4-projects when using CFT with GitLab.

Specifically, how to isolate GCP service accounts for different environments of a single GitLab project. Did I understand correctly that a separate WIF pool needs to be created beforehand in phase 1-org and used in phase 4-projects, and the SAs need to be divided by environments with attribute_condition = "...".

Terraform Resources

No response

Detailed design

No response

Additional information

No response