google/stellar-engine

Vedi su GitHub

Framework for management of compliant Google Cloud infrastructure and design patterns for Assured Workloads featuring best practices and documentation to accelerate accreditation efforts e.g., Federal Authorization to Operate (ATO).

Stelle: 51
Fork: 21
Issue aperte per principianti: 9
Issue indicizzate: 76
Merge medio: 3g 12h
PR unite (30g): 35

Lingua principale: HCL
Licenza: Apache-2.0
Ultimo push su GitHub: 18/9/2026
Ultima indicizzazione: 16/9/2026
Guida per i contributori: Guida per i contributori
Codice di condotta: Codice di condotta
Label per principianti: Nessuna label per principianti indicizzata

Adatte ai principianti Tutto

Aperta Tutte

[Bug] gem4gov app update-compliance: the engine patch is rejected (updateMask contains the immutable path disable_analytics), so the compliance feature states are never applied by the command Aperta

Bug Level of Effort - Low Priority - Medium

Difficoltà 3/5 1-2 giorni Idoneità per principianti 76/100

google/stellar-engine#259 · Aperta il 22/9/2026
[Documentation] docs/ddg.md: billing_override under three later stages still names 1-resman's tfvars, the enable-services fallback one-liner cannot work, and the Stage 0 Assured Workloads note quotes the wrong error and a folder that does not exist Aperta

Documentation Level of Effort - Low Priority - Medium

Difficoltà 2/5 1-3 ore Idoneità per principianti 90/100

google/stellar-engine#258 · Aperta il 21/9/2026
[Bug] 0-bootstrap: with logging sinks (the sample default) the log-sink key is granted to a Cloud Logging service account nothing creates, and the CMEK log buckets fail with "CMEK is not provisioned" — the project-level Logging settings are never read Aperta

Bug Level of Effort - Low Priority - High

Difficoltà 4/5 3-5 giorni Idoneità per principianti 68/100

google/stellar-engine#257 · Aperta il 21/9/2026
[Bug] 0-bootstrap: essentialcontacts.managed.allowedContactDomains parameters are double-encoded (organization.tf jsonencode()s the JSON string from platform_policy.yaml) — the post-migration apply fails Aperta

Bug Level of Effort - Low Priority - High

Difficoltà 2/5 1-3 ore Idoneità per principianti 88/100

google/stellar-engine#256 · Aperta il 21/9/2026
[Bug] 2-networking-a-fedramp: time_sleep.peering_delay does not stagger the spoke peerings (peering-envs depends on the whole for_each resource, so all three start together) — a fresh apply can fail with "peering operation in progress" for two spokes Aperta

Bug Level of Effort - Low Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 68/100

google/stellar-engine#255 · Aperta il 21/9/2026
[Bug] 2-networking-a-fedramp: the hierarchical firewall policy defaults to the unprefixed name net-default, which is unique per organization — a second deployment in the same org (a redeploy under a new prefix) fails at apply Aperta

Bug Level of Effort - Low Priority - Low

Difficoltà 3/5 1-2 giorni Idoneità per principianti 78/100

google/stellar-engine#254 · Aperta il 21/9/2026
[Feature Request] Streamline FAST stage IAM impersonation tooling to reduce cross-stage 403 errors Aperta

Documentation Enhancement Level of Effort - Medium Priority - Medium Scope - Fast

Difficoltà 5/5 Più di una settimana Idoneità per principianti 38/100

google/stellar-engine#253 · Aperta il 18/9/2026
[Feature Request] Add pre-flight OS/shell environment checks and containerized workstation support for Windows Aperta

Enhancement Level of Effort - Medium Priority - Medium Scope - Fast

Difficoltà 5/5 Più di una settimana Idoneità per principianti 45/100

google/stellar-engine#252 · Aperta il 18/9/2026
[Bug] Single-pass apply fails when relocating _Default Cloud Logging sink from global Aperta

Bug Framework - FedRAMP Moderate Level of Effort - Medium Priority - High Scope - Fast Security

Difficoltà 4/5 3-5 giorni Idoneità per principianti 48/100

google/stellar-engine#251 · Aperta il 18/9/2026
[Feature Request] No research blueprint family — the README names universities as a target audience, every blueprint is FedRAMP High, FedRAMP Moderate or IL5 Aperta

enhancement

google/stellar-engine#239 · 2 commenti · 1 assegnatario · Aperta il 13/9/2026
[Documentation] path-to-authorization.md advertises FedRAMP Moderate baselines for the SCTM and Policies and Procedures templates, but the published template set is FedRAMP High and IL5 only Aperta

documentation Level of Effort - High Priority - Medium

Difficoltà 1/5 1-3 ore Idoneità per principianti 88/100

google/stellar-engine#232 · Aperta il 10/9/2026
[Bug] Brownfield discovery offers the wrong Terraform state bucket: it looks for gs://<prefix>-tn-<env>-<tenant>-0, but a tenant's own stage state lives in gs://<prefix>-<env>-<tenant>-iac-0 Aperta

Bug Gemini - Government Level of Effort - Low Priority - High

Difficoltà 3/5 1-2 giorni Idoneità per principianti 74/100

google/stellar-engine#230 · Aperta il 10/9/2026
[Bug] modules/project and modules/iam-service-account silently truncate over-length IDs instead of failing, and the documented prefix limit of 7 characters now leaves zero margin (naming-convention.md still says 6) Aperta

bug Level of Effort - Low Priority - Low

Difficoltà 4/5 3-5 giorni Idoneità per principianti 68/100

google/stellar-engine#228 · Aperta il 10/9/2026
[Bug] 2-networking-a-fedramp: the NVA cluster runs on Spot VMs with automatic_restart disabled, so a preemption removes the organization's only internet egress path — the IL5 stage runs the equivalent appliances on-demand Aperta

bug Level of Effort - Low Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 55/100

google/stellar-engine#199 · Aperta il 21/8/2026
[Feature Request] Remove Source Repo references and modules and replace with SSM Aperta

enhancement

Difficoltà 4/5 3-5 giorni Idoneità per principianti 45/100

google/stellar-engine#198 · Aperta il 20/8/2026
[Feature Request]Customize Org Policy Enforcement Based on Regime Setting Aperta

enhancement

Difficoltà 5/5 Più di una settimana Idoneità per principianti 35/100

google/stellar-engine#197 · Aperta il 19/8/2026
[Documentation] FedRAMP Moderate networking: record whether a Moderate-specific network pattern was superseded, which regions it supports, and where IL2 lands Aperta

documentation Level of Effort - Medium Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 55/100

google/stellar-engine#195 · Aperta il 17/8/2026
[Feature Request] No FedRAMP Moderate blueprint family — the platform supports FRM but every workload blueprint is still FedRAMP High or IL5 only Aperta

enhancement Level of Effort - High Priority - Medium

Difficoltà 5/5 Più di una settimana Idoneità per principianti 38/100

google/stellar-engine#192 · Aperta il 17/8/2026
[Bug] gem4gov-cli: the compliance regime has no effect on the engine's feature posture — FedRAMP High, IL4 and IL5 print the same list and apply the same engine_features.yaml Aperta

Bug Gemini - Government Level of Effort - Medium Priority - High

Difficoltà 4/5 3-5 giorni Idoneità per principianti 48/100

google/stellar-engine#190 · Aperta il 17/8/2026
[Feature Request] Create a blueprint for SCC Notifications for NIST 800_53 R5 Controls in Security Command Center Aperta

enhancement

Difficoltà 5/5 Più di una settimana Idoneità per principianti 38/100

google/stellar-engine#188 · Aperta il 12/8/2026
[Bug] gemini-enterprise time-based access: the configured time zone is not honored — a re-run silently resets it to America/New_York, and the level's title and hour descriptions assert Eastern regardless of what was set Aperta

Bug Gemini - Government Level of Effort - Low Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 58/100

google/stellar-engine#187 · Aperta il 11/8/2026
[Bug] gemini-enterprise: usage-audit logging half-applies and nothing notices — the engine is left observabilityEnabled without sensitiveLoggingEnabled, so every prompt and response logs as <elided> Aperta

Bug Gemini - Government Level of Effort - Low Priority - Medium Security

Difficoltà 3/5 1-2 giorni Idoneità per principianti 68/100

google/stellar-engine#182 · Aperta il 11/8/2026
[Feature Request] Move self-managed SSL Certificate uploads to Terraform for G4G deployments Aperta

Enhancement Gemini - Enterprise Gemini - Government Level of Effort - Low Priority - Low

Difficoltà 4/5 3-5 giorni Idoneità per principianti 55/100

google/stellar-engine#161 · Aperta il 24/7/2026
[Feature Request] Implement Versioning Process to Pull Request functionality Aperta

enhancement

google/stellar-engine#151 · 1 assegnatario · Aperta il 20/7/2026
[Bug] 2-networking-a-fedramp-high: NVA return-route generation only routes the FIRST tenant subnet per environment ([0] index) — additional tenant subnets get no NVA return route and lose ALL internet egress Aperta

bug Level of Effort - Low Priority - Medium

Difficoltà 2/5 1-3 ore Idoneità per principianti 76/100

google/stellar-engine#146 · Aperta il 10/7/2026
[Bug] deploy.sh validates the identity groups twice in one Step-1 run (Identity-step describe + Manual-Steps re-confirm), and the two can disagree Aperta

Bug Gemini - Government Level of Effort - Low Priority - Low

Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100

google/stellar-engine#135 · Aperta il 9/7/2026
[Bug] Standard Brownfield auto-discovers a nonexistent CMEK keyring (${Cap_Env}-${Tenant}-keyring) with no override prompt, writing a broken kms_key_id that fails the gemini-stage-0 apply Aperta

Bug Gemini - Government Level of Effort - Low Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 48/100

google/stellar-engine#132 · Aperta il 9/7/2026
[Feature Request] gem4gov: add a license-retraction command (retractLicenseConfig) + range-reclaim helper Aperta

Enhancement Gemini - Government Level of Effort - Medium Priority - Low

Difficoltà 4/5 3-5 giorni Idoneità per principianti 52/100

google/stellar-engine#123 · Aperta il 7/7/2026
[Feature Request] gem4gov: implement BigQuery import in the standalone datastore import command Aperta

Enhancement Gemini - Government Level of Effort - Medium Priority - Medium

Difficoltà 2/5 1-3 ore Idoneità per principianti 84/100

google/stellar-engine#122 · Aperta il 7/7/2026
[Feature Request] gem4gov: add a license-assignment command (batchUpdateUserLicenses) Aperta

Enhancement Gemini - Government Level of Effort - Medium Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 58/100

google/stellar-engine#121 · Aperta il 7/7/2026
[Feature Request] 2-networking: add a tfvars-driven IAM map on the shared-VPC host project (parity with Stage 3's kms_keys iam) Aperta

enhancement Level of Effort - Medium Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 52/100

google/stellar-engine#120 · Aperta il 7/7/2026
[Feature Request] FAST stages: retype essential_contacts from single-email string to the modules' full EMAIL => [types] contact map Aperta

enhancement Level of Effort - Low Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 64/100

google/stellar-engine#119 · Aperta il 7/7/2026
[Documentation] il5/postgresql classic firewall rule sits outside Stage 2's hierarchical firewall policy governance — document the coexistence or migrate Aperta

documentation Level of Effort - Medium Priority - Medium

Difficoltà 2/5 Mezza giornata Idoneità per principianti 72/100

google/stellar-engine#117 · 1 commento · Aperta il 7/7/2026
[Bug] gemini-enterprise deploy.sh silently installs tfenv, pins Terraform to 1.12.2, and mutates the user's PATH/.bashrc — overriding a newer Terraform with no opt-out Aperta

Bug Gemini - Government Level of Effort - Low Priority - Medium

Difficoltà 3/5 1-2 giorni Idoneità per principianti 55/100

google/stellar-engine#114 · Aperta il 7/7/2026
[Bug] gemini-stage-1: shared-VPC network resolution relies on try() fallbacks against stage-0 outputs — misleading failure when outputs are absent or misshaped Aperta

Bug Gemini - Government Level of Effort - Low Priority - Low

Difficoltà 3/5 1-2 giorni Idoneità per principianti 67/100

google/stellar-engine#111 · Aperta il 7/7/2026
[Bug] deploy.sh: brownfield CMEK auto-discovery assumes a project/keyring layout Stellar Engine FAST does not produce Aperta

Bug Gemini - Government Level of Effort - Medium Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 55/100

google/stellar-engine#106 · Aperta il 7/7/2026
[Bug] postgresql and app-engine blueprints require APIs the framework never enables (sqladmin.googleapis.com, appengine.googleapis.com) — fresh-tenant applies fail until the operator enables them manually Aperta

bug Level of Effort - Low Priority - Medium

google/stellar-engine#104 · 1 assegnatario · Aperta il 7/7/2026
[Feature Request] Extend gemini-enterprise blueprint to support FedRAMP Moderate Aperta

Enhancement Gemini - Enterprise Gemini - Government Level of Effort - Medium

google/stellar-engine#102 · 1 commento · 1 assegnatario · Aperta il 6/7/2026
[Feature Request] Relocate gemini-enterprise blueprint source code Aperta

Enhancement Gemini - Enterprise Gemini - Government Level of Effort - Low Priority - Low

Difficoltà 3/5 1-2 giorni Idoneità per principianti 48/100

google/stellar-engine#99 · Aperta il 6/7/2026
[Bug] Broken Link - Missing Network Design Diagram - 404 Aperta

bug documentation

Difficoltà 2/5 1-3 ore Idoneità per principianti 72/100

google/stellar-engine#91 · Aperta il 17/6/2026
[Documentation] DDG drift vs. current code needs to be resolved Aperta

documentation Level of Effort - Low Priority - Medium

Difficoltà 4/5 3-5 giorni Idoneità per principianti 45/100

google/stellar-engine#83 · 2 commenti · Aperta il 2/6/2026
[Documentation] Move the contents of documentation into docs Aperta

documentation Level of Effort - Low Priority - Low

Difficoltà 2/5 1-3 ore Idoneità per principianti 55/100

google/stellar-engine#81 · Aperta il 1/6/2026
[Feature Request] Automated Enforcement of Sharing Artifacts Aperta

enhancement

google/stellar-engine#80 · 1 assegnatario · Aperta il 1/6/2026
[Documentation] Clarifications in the path-to-authorization documentation Aperta

documentation Level of Effort - Low Priority - Low

Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100

google/stellar-engine#79 · Aperta il 1/6/2026
[Feature Request] Integrate Network Connectivity Center (NCC) Aperta

enhancement

Difficoltà 5/5 Più di una settimana Idoneità per principianti 35/100

google/stellar-engine#58 · 1 commento · Aperta il 6/5/2026
[Bug] Fix Custom KMS Organizational Policy Aperta

bug

Difficoltà 4/5 3-5 giorni Idoneità per principianti 45/100

google/stellar-engine#57 · 1 commento · Aperta il 6/5/2026
[Feature Request] Automate Project ID randomization for soft-delete mitigation Aperta

enhancement

Difficoltà 4/5 3-5 giorni Idoneità per principianti 48/100

google/stellar-engine#50 · Aperta il 5/5/2026
[Feature Request] Automate `backend.tf` state bucket substitutions Aperta

enhancement

Difficoltà 3/5 1-2 giorni Idoneità per principianti 55/100

google/stellar-engine#49 · Aperta il 5/5/2026
[Documentation] Add Stage Output Diagrams to READMEs Aperta

documentation

Difficoltà 3/5 1-2 giorni Idoneità per principianti 68/100

google/stellar-engine#48 · Aperta il 5/5/2026
[Feature Request] Out-of-Band Drift Alerting Aperta

enhancement

Difficoltà 5/5 Più di una settimana Idoneità per principianti 35/100

google/stellar-engine#46 · Aperta il 5/5/2026

google/stellar-engine

Ricevi le nuove issue nella tua casella