terraform-example-foundation v2.0.0

Features

• 4-projects GCS CMEK example (#346) (d74ff33)
• add FAQ, Glossary & Troubleshooting docs (#466) (57643a6)
• Add GAR in infra pipelines and tests (#395) (2a2e4fe)
• Add hub and spoke network architecture (#298) (d9468db)
• add iam.automaticIamGrantsForDefaultServiceAccounts org policy constraint (#386) (f6b0387)
• Add log export GCS bucket object versioning (#317) (cb0e622)
• add Shielded VMs & OS Login org policies (#283) (07a201e)
• Add step 5-app-infra (#382) (fd5329c)
• add support for hierarchical firewall policies (#343) (e7bb1bc)
• Add terraform validator and add policy-library (#263) (f220588)
• Adds prefix to projects and folder name (#289) (66dacf2)
• App Infra pipelines (#337) (c3b19e8)
• enable hub & spoke transitivity via gateway VMs (#322) (f6cd9ad)
• example-foundations test modes (#309) (34a6d75)
• implement support for Partner Interconnect (#345) (70501ec)
• Make BigQuery log destinations partitioned (#277) (f40c5fe)
• Move Cloud Source Repo definition to variable. (#302) (48037c9)
• Replace container registry with artifact registry in CloudBuild (#367) (6b6469b)
• Update terraform-validator version, instructions and CMEK bucket (#397) (8f7c58e)
• updates to support TF 0.13 (#268) (c5c6c6c)

Bug Fixes

• 1-org README.md add setting up Security Command Center to Prerequisites (#467) (ee04cb5)
• add bucket prefix for bootstrap (#407) (03bd05a)
• add cloudbuild api to seed proj (#358) (1fda12b)
• add CMEK project name prefix and root readme project names (#414) (141c059)
• add impersonate to gcloud builds submit command in infra-pipeline module (#458) (1d3fbf8)
• add infra pipeline CB SA role test (#450) (e30fe8c)
• add missing google apis to policy constraint (#370) (2ac0466)
• Add missing symlink in shared network env (#328) (48c2318)
• add network fixture prepare to lint test (#323) (c120d55)
• add standalone repo for terraform-validator policies (#403) (b170478)
• Adding KMS API in bootstrap project (#385) (39b8da3)
• Bugfix/fix 4-projects issues (#374) (f5f5224)
• clone policies repo once per build (#329) (3e95111)
• default sa deprivilege (ea5fcc2)
• Documentation fixes (#327) (ce610d0)
• Documentation language inconsistencies, typos and tests (#419) ([71b633f](https://www.github.com/terraform-google-modules/terraform-example-foundation/commit/71b633f...

terraform-example-foundation v1.1.0

Features

• add integration tests for 4-projects (#232) (0521aeb)
• Add Provider cache (#250) (5c5b8b3)
• add terraform show command to wrapper script (#267) (2a8e9f2)
• adds jenkins agent vpn automation in terraform (#234) (68208ad)
• adds kitchen testes for step 3-networks (#231) (50bab16)
• Adds org policy admin role for admin group (#262) (12f02ec)
• Adds peering project examples (#243) (dc6dd95)
• adds support for bucket retention policy for logs (#266) (cc4ddbc)

Bug Fixes

• 3-networks inconsistencies and typos (#304) (f87ed16)
• adjust log filters for SHA/CIS compliance (#261) (cd42805)
• deprecated bucket-policy-only parameter and bq table deletion (#264) (3dfda65)
• egress deny fw rule for all protocols (#260) (402c785)
• enable data access logs collection (#249) (6e887e0)
• explicitly add project to scc pub/sub topic creation (#233) (ca7d926)
• Pin network module for terraform 0.12 (#333) (f0218a5)
• set default_service_account value correctly to 'deprivilege' (#282) (6f8a4c0)

terraform-example-foundation v1.0.0

This is the first major release of the example foundation and includes a large refactor as a part of aligning the code to the Google Cloud security foundations guide.

terraform-example-foundation v0.1.0

This is an initial stable release of the example foundation, prior to the introduction of a large refactor as a part of aligning the code to the Google Cloud security foundations guide.