google/stellar-engine

在 GitHub 查看

Framework for management of compliant Google Cloud infrastructure and design patterns for Assured Workloads featuring best practices and documentation to accelerate accreditation efforts e.g., Federal Authorization to Operate (ATO).

星标: 51
派生: 21
开放的新手 issue: 9
已索引 issue: 76
平均合并: 3 天 12 小时
30 天内合并 PR: 35

主要语言: HCL
许可证: Apache-2.0
最近 GitHub push: 2026年9月18日
最近索引: 2026年9月16日
贡献指南: 贡献指南
行为准则: 行为准则
新手标签: 没有已索引的新手标签

适合新手全部

未关闭全部

[Bug] gem4gov app update-compliance: the engine patch is rejected (updateMask contains the immutable path disable_analytics), so the compliance feature states are never applied by the command 未关闭

Bug Level of Effort - Low Priority - Medium

难度 3/5 1-2 天新手友好度 76/100

google/stellar-engine#259 · 2026年9月22日创建
[Documentation] docs/ddg.md: billing_override under three later stages still names 1-resman's tfvars, the enable-services fallback one-liner cannot work, and the Stage 0 Assured Workloads note quotes the wrong error and a folder that does not exist 未关闭

Documentation Level of Effort - Low Priority - Medium

难度 2/5 1-3 小时新手友好度 90/100

google/stellar-engine#258 · 2026年9月21日创建
[Bug] 0-bootstrap: with logging sinks (the sample default) the log-sink key is granted to a Cloud Logging service account nothing creates, and the CMEK log buckets fail with "CMEK is not provisioned" — the project-level Logging settings are never read 未关闭

Bug Level of Effort - Low Priority - High

难度 4/5 3-5 天新手友好度 68/100

google/stellar-engine#257 · 2026年9月21日创建
[Bug] 0-bootstrap: essentialcontacts.managed.allowedContactDomains parameters are double-encoded (organization.tf jsonencode()s the JSON string from platform_policy.yaml) — the post-migration apply fails 未关闭

Bug Level of Effort - Low Priority - High

难度 2/5 1-3 小时新手友好度 88/100

google/stellar-engine#256 · 2026年9月21日创建
[Bug] 2-networking-a-fedramp: time_sleep.peering_delay does not stagger the spoke peerings (peering-envs depends on the whole for_each resource, so all three start together) — a fresh apply can fail with "peering operation in progress" for two spokes 未关闭

Bug Level of Effort - Low Priority - Medium

难度 4/5 3-5 天新手友好度 68/100

google/stellar-engine#255 · 2026年9月21日创建
[Bug] 2-networking-a-fedramp: the hierarchical firewall policy defaults to the unprefixed name net-default, which is unique per organization — a second deployment in the same org (a redeploy under a new prefix) fails at apply 未关闭

Bug Level of Effort - Low Priority - Low

难度 3/5 1-2 天新手友好度 78/100

google/stellar-engine#254 · 2026年9月21日创建
[Feature Request] Streamline FAST stage IAM impersonation tooling to reduce cross-stage 403 errors 未关闭

Documentation Enhancement Level of Effort - Medium Priority - Medium Scope - Fast

难度 5/5 一周以上新手友好度 38/100

google/stellar-engine#253 · 2026年9月18日创建
[Feature Request] Add pre-flight OS/shell environment checks and containerized workstation support for Windows 未关闭

Enhancement Level of Effort - Medium Priority - Medium Scope - Fast

难度 5/5 一周以上新手友好度 45/100

google/stellar-engine#252 · 2026年9月18日创建
[Bug] Single-pass apply fails when relocating _Default Cloud Logging sink from global 未关闭

Bug Framework - FedRAMP Moderate Level of Effort - Medium Priority - High Scope - Fast Security

难度 4/5 3-5 天新手友好度 48/100

google/stellar-engine#251 · 2026年9月18日创建
[Feature Request] No research blueprint family — the README names universities as a target audience, every blueprint is FedRAMP High, FedRAMP Moderate or IL5 未关闭

enhancement

google/stellar-engine#239 · 2 条评论 · 已指派 1 人 · 2026年9月13日创建
[Documentation] path-to-authorization.md advertises FedRAMP Moderate baselines for the SCTM and Policies and Procedures templates, but the published template set is FedRAMP High and IL5 only 未关闭

documentation Level of Effort - High Priority - Medium

难度 1/5 1-3 小时新手友好度 88/100

google/stellar-engine#232 · 2026年9月10日创建
[Bug] Brownfield discovery offers the wrong Terraform state bucket: it looks for gs://<prefix>-tn-<env>-<tenant>-0, but a tenant's own stage state lives in gs://<prefix>-<env>-<tenant>-iac-0 未关闭

Bug Gemini - Government Level of Effort - Low Priority - High

难度 3/5 1-2 天新手友好度 74/100

google/stellar-engine#230 · 2026年9月10日创建
[Bug] modules/project and modules/iam-service-account silently truncate over-length IDs instead of failing, and the documented prefix limit of 7 characters now leaves zero margin (naming-convention.md still says 6) 未关闭

bug Level of Effort - Low Priority - Low

难度 4/5 3-5 天新手友好度 68/100

google/stellar-engine#228 · 2026年9月10日创建
[Bug] 2-networking-a-fedramp: the NVA cluster runs on Spot VMs with automatic_restart disabled, so a preemption removes the organization's only internet egress path — the IL5 stage runs the equivalent appliances on-demand 未关闭

bug Level of Effort - Low Priority - Medium

难度 4/5 3-5 天新手友好度 55/100

google/stellar-engine#199 · 2026年8月21日创建
[Feature Request] Remove Source Repo references and modules and replace with SSM 未关闭

enhancement

难度 4/5 3-5 天新手友好度 45/100

google/stellar-engine#198 · 2026年8月20日创建
[Feature Request]Customize Org Policy Enforcement Based on Regime Setting 未关闭

enhancement

难度 5/5 一周以上新手友好度 35/100

google/stellar-engine#197 · 2026年8月19日创建
[Documentation] FedRAMP Moderate networking: record whether a Moderate-specific network pattern was superseded, which regions it supports, and where IL2 lands 未关闭

documentation Level of Effort - Medium Priority - Medium

难度 4/5 3-5 天新手友好度 55/100

google/stellar-engine#195 · 2026年8月17日创建
[Feature Request] No FedRAMP Moderate blueprint family — the platform supports FRM but every workload blueprint is still FedRAMP High or IL5 only 未关闭

enhancement Level of Effort - High Priority - Medium

难度 5/5 一周以上新手友好度 38/100

google/stellar-engine#192 · 2026年8月17日创建
[Bug] gem4gov-cli: the compliance regime has no effect on the engine's feature posture — FedRAMP High, IL4 and IL5 print the same list and apply the same engine_features.yaml 未关闭

Bug Gemini - Government Level of Effort - Medium Priority - High

难度 4/5 3-5 天新手友好度 48/100

google/stellar-engine#190 · 2026年8月17日创建
[Feature Request] Create a blueprint for SCC Notifications for NIST 800_53 R5 Controls in Security Command Center 未关闭

enhancement

难度 5/5 一周以上新手友好度 38/100

google/stellar-engine#188 · 2026年8月12日创建
[Bug] gemini-enterprise time-based access: the configured time zone is not honored — a re-run silently resets it to America/New_York, and the level's title and hour descriptions assert Eastern regardless of what was set 未关闭

Bug Gemini - Government Level of Effort - Low Priority - Medium

难度 4/5 3-5 天新手友好度 58/100

google/stellar-engine#187 · 2026年8月11日创建
[Bug] gemini-enterprise: usage-audit logging half-applies and nothing notices — the engine is left observabilityEnabled without sensitiveLoggingEnabled, so every prompt and response logs as <elided> 未关闭

Bug Gemini - Government Level of Effort - Low Priority - Medium Security

难度 3/5 1-2 天新手友好度 68/100

google/stellar-engine#182 · 2026年8月11日创建
[Feature Request] Move self-managed SSL Certificate uploads to Terraform for G4G deployments 未关闭

Enhancement Gemini - Enterprise Gemini - Government Level of Effort - Low Priority - Low

难度 4/5 3-5 天新手友好度 55/100

google/stellar-engine#161 · 2026年7月24日创建
[Feature Request] Implement Versioning Process to Pull Request functionality 未关闭

enhancement

google/stellar-engine#151 · 已指派 1 人 · 2026年7月20日创建
[Bug] 2-networking-a-fedramp-high: NVA return-route generation only routes the FIRST tenant subnet per environment ([0] index) — additional tenant subnets get no NVA return route and lose ALL internet egress 未关闭

bug Level of Effort - Low Priority - Medium

难度 2/5 1-3 小时新手友好度 76/100

google/stellar-engine#146 · 2026年7月10日创建
[Bug] deploy.sh validates the identity groups twice in one Step-1 run (Identity-step describe + Manual-Steps re-confirm), and the two can disagree 未关闭

Bug Gemini - Government Level of Effort - Low Priority - Low

难度 2/5 1-3 小时新手友好度 78/100

google/stellar-engine#135 · 2026年7月9日创建
[Bug] Standard Brownfield auto-discovers a nonexistent CMEK keyring (${Cap_Env}-${Tenant}-keyring) with no override prompt, writing a broken kms_key_id that fails the gemini-stage-0 apply 未关闭

Bug Gemini - Government Level of Effort - Low Priority - Medium

难度 4/5 3-5 天新手友好度 48/100

google/stellar-engine#132 · 2026年7月9日创建
[Feature Request] gem4gov: add a license-retraction command (retractLicenseConfig) + range-reclaim helper 未关闭

Enhancement Gemini - Government Level of Effort - Medium Priority - Low

难度 4/5 3-5 天新手友好度 52/100

google/stellar-engine#123 · 2026年7月7日创建
[Feature Request] gem4gov: implement BigQuery import in the standalone datastore import command 未关闭

Enhancement Gemini - Government Level of Effort - Medium Priority - Medium

难度 2/5 1-3 小时新手友好度 84/100

google/stellar-engine#122 · 2026年7月7日创建
[Feature Request] gem4gov: add a license-assignment command (batchUpdateUserLicenses) 未关闭

Enhancement Gemini - Government Level of Effort - Medium Priority - Medium

难度 4/5 3-5 天新手友好度 58/100

google/stellar-engine#121 · 2026年7月7日创建
[Feature Request] 2-networking: add a tfvars-driven IAM map on the shared-VPC host project (parity with Stage 3's kms_keys iam) 未关闭

enhancement Level of Effort - Medium Priority - Medium

难度 4/5 3-5 天新手友好度 52/100

google/stellar-engine#120 · 2026年7月7日创建
[Feature Request] FAST stages: retype essential_contacts from single-email string to the modules' full EMAIL => [types] contact map 未关闭

enhancement Level of Effort - Low Priority - Medium

难度 4/5 3-5 天新手友好度 64/100

google/stellar-engine#119 · 2026年7月7日创建
[Documentation] il5/postgresql classic firewall rule sits outside Stage 2's hierarchical firewall policy governance — document the coexistence or migrate 未关闭

documentation Level of Effort - Medium Priority - Medium

难度 2/5 半天新手友好度 72/100

google/stellar-engine#117 · 1 条评论 · 2026年7月7日创建
[Bug] gemini-enterprise deploy.sh silently installs tfenv, pins Terraform to 1.12.2, and mutates the user's PATH/.bashrc — overriding a newer Terraform with no opt-out 未关闭

Bug Gemini - Government Level of Effort - Low Priority - Medium

难度 3/5 1-2 天新手友好度 55/100

google/stellar-engine#114 · 2026年7月7日创建
[Bug] gemini-stage-1: shared-VPC network resolution relies on try() fallbacks against stage-0 outputs — misleading failure when outputs are absent or misshaped 未关闭

Bug Gemini - Government Level of Effort - Low Priority - Low

难度 3/5 1-2 天新手友好度 67/100

google/stellar-engine#111 · 2026年7月7日创建
[Bug] deploy.sh: brownfield CMEK auto-discovery assumes a project/keyring layout Stellar Engine FAST does not produce 未关闭

Bug Gemini - Government Level of Effort - Medium Priority - Medium

难度 4/5 3-5 天新手友好度 55/100

google/stellar-engine#106 · 2026年7月7日创建
[Bug] postgresql and app-engine blueprints require APIs the framework never enables (sqladmin.googleapis.com, appengine.googleapis.com) — fresh-tenant applies fail until the operator enables them manually 未关闭

bug Level of Effort - Low Priority - Medium

google/stellar-engine#104 · 已指派 1 人 · 2026年7月7日创建
[Feature Request] Extend gemini-enterprise blueprint to support FedRAMP Moderate 未关闭

Enhancement Gemini - Enterprise Gemini - Government Level of Effort - Medium

google/stellar-engine#102 · 1 条评论 · 已指派 1 人 · 2026年7月6日创建
[Feature Request] Relocate gemini-enterprise blueprint source code 未关闭

Enhancement Gemini - Enterprise Gemini - Government Level of Effort - Low Priority - Low

难度 3/5 1-2 天新手友好度 48/100

google/stellar-engine#99 · 2026年7月6日创建
[Bug] Broken Link - Missing Network Design Diagram - 404 未关闭

bug documentation

难度 2/5 1-3 小时新手友好度 72/100

google/stellar-engine#91 · 2026年6月17日创建
[Documentation] DDG drift vs. current code needs to be resolved 未关闭

documentation Level of Effort - Low Priority - Medium

难度 4/5 3-5 天新手友好度 45/100

google/stellar-engine#83 · 2 条评论 · 2026年6月2日创建
[Documentation] Move the contents of documentation into docs 未关闭

documentation Level of Effort - Low Priority - Low

难度 2/5 1-3 小时新手友好度 55/100

google/stellar-engine#81 · 2026年6月1日创建
[Feature Request] Automated Enforcement of Sharing Artifacts 未关闭

enhancement

google/stellar-engine#80 · 已指派 1 人 · 2026年6月1日创建
[Documentation] Clarifications in the path-to-authorization documentation 未关闭

documentation Level of Effort - Low Priority - Low

难度 2/5 1-3 小时新手友好度 68/100

google/stellar-engine#79 · 2026年6月1日创建
[Feature Request] Integrate Network Connectivity Center (NCC) 未关闭

enhancement

难度 5/5 一周以上新手友好度 35/100

google/stellar-engine#58 · 1 条评论 · 2026年5月6日创建
[Bug] Fix Custom KMS Organizational Policy 未关闭

bug

难度 4/5 3-5 天新手友好度 45/100

google/stellar-engine#57 · 1 条评论 · 2026年5月6日创建
[Feature Request] Automate Project ID randomization for soft-delete mitigation 未关闭

enhancement

难度 4/5 3-5 天新手友好度 48/100

google/stellar-engine#50 · 2026年5月5日创建
[Feature Request] Automate `backend.tf` state bucket substitutions 未关闭

enhancement

难度 3/5 1-2 天新手友好度 55/100

google/stellar-engine#49 · 2026年5月5日创建
[Documentation] Add Stage Output Diagrams to READMEs 未关闭

documentation

难度 3/5 1-2 天新手友好度 68/100

google/stellar-engine#48 · 2026年5月5日创建
[Feature Request] Out-of-Band Drift Alerting 未关闭

enhancement

难度 5/5 一周以上新手友好度 35/100

google/stellar-engine#46 · 2026年5月5日创建

google/stellar-engine

把新 issue 发到你的邮箱