├── .gitignore ├── CODE_OF_CONDUCT.md ├── CONTRIBUTING.md ├── LICENSE ├── Makefile ├── README.md ├── _helpers ├── admin_project_setup.sh ├── build-infra.sh ├── deploy-app.sh ├── rbac.sh ├── setup_cloud_build_service_account.sh └── setup_service_account.sh ├── cicd └── cloudbuild.yml ├── docs ├── Google-Groups-and-RBAC.md ├── assets │ └── pci-mapping.pdf ├── build-infrastructure.md ├── cicd.md ├── deploy-application.md ├── development.md ├── diagrams.md ├── diagrams │ ├── applications-and-projects-detailed-view.png │ ├── cross-cluster-application-architecture.png │ ├── cross-cluster-dns.png │ ├── highlevel_project_view.png │ ├── network_pci_scope.png │ ├── network_subnets.png │ └── terraform_admin_iam.png └── https-redirection.md ├── k8s ├── helm │ ├── in-scope-microservices │ │ ├── .helmignore │ │ ├── Chart.yaml │ │ ├── templates │ │ │ ├── _helpers.tpl │ │ │ ├── backend-config.yaml │ │ │ ├── deployments.yaml │ │ │ ├── ingress.yaml │ │ │ ├── managed-certificate.yml │ │ │ ├── service-entries.yaml │ │ │ └── services-local.yaml │ │ └── values.yaml │ ├── out-of-scope-microservices │ │ ├── .helmignore │ │ ├── Chart.yaml │ │ ├── templates │ │ │ ├── deployments.yaml │ │ │ ├── service-entries.yaml │ │ │ └── services-local.yaml │ │ └── values.yaml │ └── rbac │ │ ├── Chart.yaml │ │ ├── templates │ │ ├── admin.yml │ │ └── reader.yml │ │ └── values.yml ├── namespaces │ ├── in-scope-namespace.yml │ └── out-of-scope-namespace.yml ├── policy │ ├── restricted-psp-dev.yaml │ └── restricted-psp.yaml ├── rbac │ └── basic-restrictions │ │ ├── readme │ │ ├── system-basic-user.yml │ │ └── system-discovery.yml ├── values-istio-multicluster-gateways-with-ilb.yml └── values-istio-multicluster-gateways.yml ├── microservices-demo └── frontend │ ├── Dockerfile │ ├── build.sh │ ├── default.conf │ ├── readme.txt │ └── run.sh ├── terraform └── infrastructure │ ├── backend.tf.example │ ├── clusters.tf │ ├── dns.tf │ ├── firewall-rules.tf │ ├── iam.tf │ ├── network.tf │ ├── org-policies.tf │ ├── projects.tf │ ├── security-policy.tf │ ├── shared.tf │ └── vpc-service-controls.tf ├── test ├── boilerplate │ ├── boilerplate.Dockerfile.txt │ ├── boilerplate.sh.txt │ ├── boilerplate.tf.txt │ └── boilerplate.yaml.txt ├── make.sh ├── test_verify_boilerplate.py └── verify_boilerplate.py └── workstation.env.example /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/.gitignore -------------------------------------------------------------------------------- /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/CODE_OF_CONDUCT.md -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/Makefile -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/README.md -------------------------------------------------------------------------------- /_helpers/admin_project_setup.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/_helpers/admin_project_setup.sh -------------------------------------------------------------------------------- /_helpers/build-infra.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/_helpers/build-infra.sh -------------------------------------------------------------------------------- /_helpers/deploy-app.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/_helpers/deploy-app.sh -------------------------------------------------------------------------------- /_helpers/rbac.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/_helpers/rbac.sh -------------------------------------------------------------------------------- /_helpers/setup_cloud_build_service_account.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/_helpers/setup_cloud_build_service_account.sh -------------------------------------------------------------------------------- /_helpers/setup_service_account.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/_helpers/setup_service_account.sh -------------------------------------------------------------------------------- /cicd/cloudbuild.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/cicd/cloudbuild.yml -------------------------------------------------------------------------------- /docs/Google-Groups-and-RBAC.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/Google-Groups-and-RBAC.md -------------------------------------------------------------------------------- /docs/assets/pci-mapping.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/assets/pci-mapping.pdf -------------------------------------------------------------------------------- /docs/build-infrastructure.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/build-infrastructure.md -------------------------------------------------------------------------------- /docs/cicd.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/cicd.md -------------------------------------------------------------------------------- /docs/deploy-application.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/deploy-application.md -------------------------------------------------------------------------------- /docs/development.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/development.md -------------------------------------------------------------------------------- /docs/diagrams.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams.md -------------------------------------------------------------------------------- /docs/diagrams/applications-and-projects-detailed-view.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/applications-and-projects-detailed-view.png -------------------------------------------------------------------------------- /docs/diagrams/cross-cluster-application-architecture.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/cross-cluster-application-architecture.png -------------------------------------------------------------------------------- /docs/diagrams/cross-cluster-dns.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/cross-cluster-dns.png -------------------------------------------------------------------------------- /docs/diagrams/highlevel_project_view.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/highlevel_project_view.png -------------------------------------------------------------------------------- /docs/diagrams/network_pci_scope.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/network_pci_scope.png -------------------------------------------------------------------------------- /docs/diagrams/network_subnets.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/network_subnets.png -------------------------------------------------------------------------------- /docs/diagrams/terraform_admin_iam.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/diagrams/terraform_admin_iam.png -------------------------------------------------------------------------------- /docs/https-redirection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/docs/https-redirection.md -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/.helmignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/.helmignore -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/Chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/Chart.yaml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/backend-config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/templates/backend-config.yaml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/deployments.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/templates/deployments.yaml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/ingress.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/templates/ingress.yaml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/managed-certificate.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/templates/managed-certificate.yml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/service-entries.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/templates/service-entries.yaml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/templates/services-local.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/templates/services-local.yaml -------------------------------------------------------------------------------- /k8s/helm/in-scope-microservices/values.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/in-scope-microservices/values.yaml -------------------------------------------------------------------------------- /k8s/helm/out-of-scope-microservices/.helmignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/out-of-scope-microservices/.helmignore -------------------------------------------------------------------------------- /k8s/helm/out-of-scope-microservices/Chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/out-of-scope-microservices/Chart.yaml -------------------------------------------------------------------------------- /k8s/helm/out-of-scope-microservices/templates/deployments.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/out-of-scope-microservices/templates/deployments.yaml -------------------------------------------------------------------------------- /k8s/helm/out-of-scope-microservices/templates/service-entries.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/out-of-scope-microservices/templates/service-entries.yaml -------------------------------------------------------------------------------- /k8s/helm/out-of-scope-microservices/templates/services-local.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/out-of-scope-microservices/templates/services-local.yaml -------------------------------------------------------------------------------- /k8s/helm/out-of-scope-microservices/values.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/out-of-scope-microservices/values.yaml -------------------------------------------------------------------------------- /k8s/helm/rbac/Chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/rbac/Chart.yaml -------------------------------------------------------------------------------- /k8s/helm/rbac/templates/admin.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/rbac/templates/admin.yml -------------------------------------------------------------------------------- /k8s/helm/rbac/templates/reader.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/rbac/templates/reader.yml -------------------------------------------------------------------------------- /k8s/helm/rbac/values.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/helm/rbac/values.yml -------------------------------------------------------------------------------- /k8s/namespaces/in-scope-namespace.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/namespaces/in-scope-namespace.yml -------------------------------------------------------------------------------- /k8s/namespaces/out-of-scope-namespace.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/namespaces/out-of-scope-namespace.yml -------------------------------------------------------------------------------- /k8s/policy/restricted-psp-dev.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/policy/restricted-psp-dev.yaml -------------------------------------------------------------------------------- /k8s/policy/restricted-psp.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/policy/restricted-psp.yaml -------------------------------------------------------------------------------- /k8s/rbac/basic-restrictions/readme: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/rbac/basic-restrictions/readme -------------------------------------------------------------------------------- /k8s/rbac/basic-restrictions/system-basic-user.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/rbac/basic-restrictions/system-basic-user.yml -------------------------------------------------------------------------------- /k8s/rbac/basic-restrictions/system-discovery.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/rbac/basic-restrictions/system-discovery.yml -------------------------------------------------------------------------------- /k8s/values-istio-multicluster-gateways-with-ilb.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/values-istio-multicluster-gateways-with-ilb.yml -------------------------------------------------------------------------------- /k8s/values-istio-multicluster-gateways.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/k8s/values-istio-multicluster-gateways.yml -------------------------------------------------------------------------------- /microservices-demo/frontend/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/microservices-demo/frontend/Dockerfile -------------------------------------------------------------------------------- /microservices-demo/frontend/build.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/microservices-demo/frontend/build.sh -------------------------------------------------------------------------------- /microservices-demo/frontend/default.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/microservices-demo/frontend/default.conf -------------------------------------------------------------------------------- /microservices-demo/frontend/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/microservices-demo/frontend/readme.txt -------------------------------------------------------------------------------- /microservices-demo/frontend/run.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/microservices-demo/frontend/run.sh -------------------------------------------------------------------------------- /terraform/infrastructure/backend.tf.example: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/backend.tf.example -------------------------------------------------------------------------------- /terraform/infrastructure/clusters.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/clusters.tf -------------------------------------------------------------------------------- /terraform/infrastructure/dns.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/dns.tf -------------------------------------------------------------------------------- /terraform/infrastructure/firewall-rules.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/firewall-rules.tf -------------------------------------------------------------------------------- /terraform/infrastructure/iam.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/iam.tf -------------------------------------------------------------------------------- /terraform/infrastructure/network.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/network.tf -------------------------------------------------------------------------------- /terraform/infrastructure/org-policies.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/org-policies.tf -------------------------------------------------------------------------------- /terraform/infrastructure/projects.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/projects.tf -------------------------------------------------------------------------------- /terraform/infrastructure/security-policy.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/security-policy.tf -------------------------------------------------------------------------------- /terraform/infrastructure/shared.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/shared.tf -------------------------------------------------------------------------------- /terraform/infrastructure/vpc-service-controls.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/terraform/infrastructure/vpc-service-controls.tf -------------------------------------------------------------------------------- /test/boilerplate/boilerplate.Dockerfile.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/boilerplate/boilerplate.Dockerfile.txt -------------------------------------------------------------------------------- /test/boilerplate/boilerplate.sh.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/boilerplate/boilerplate.sh.txt -------------------------------------------------------------------------------- /test/boilerplate/boilerplate.tf.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/boilerplate/boilerplate.tf.txt -------------------------------------------------------------------------------- /test/boilerplate/boilerplate.yaml.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/boilerplate/boilerplate.yaml.txt -------------------------------------------------------------------------------- /test/make.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/make.sh -------------------------------------------------------------------------------- /test/test_verify_boilerplate.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/test_verify_boilerplate.py -------------------------------------------------------------------------------- /test/verify_boilerplate.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/test/verify_boilerplate.py -------------------------------------------------------------------------------- /workstation.env.example: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoogleCloudPlatform/pci-gke-blueprint/HEAD/workstation.env.example --------------------------------------------------------------------------------