Skip to content

feat(terraform): add GCP equivalents for composition and application-… - #293

Open
inventvenkat wants to merge 2 commits into
mainfrom
feat/gcp-terraform-modules
Open

feat(terraform): add GCP equivalents for composition and application-…#293
inventvenkat wants to merge 2 commits into
mainfrom
feat/gcp-terraform-modules

Conversation

@inventvenkat

Copy link
Copy Markdown
Collaborator

…resources modules

Ports terraform/aws/modules/{composition,application-resources} to terraform/gcp/modules/, using only official terraform-google-modules / GoogleCloudPlatform registry modules (no base/ layer, no third-party modules). 23 composition modules and 14 application-resources modules, each validated with terraform init/validate against the real registry.

See terraform/gcp/modules/README.md for the AWS->GCP module map and the list of intentional divergences (no NACL/lock-table equivalents, SES -> Secret Manager, CloudFront Functions has no Cloud CDN analog, etc).

Also wires the new tree into the existing tooling: justfile gen-docs, the terraform-docs CI workflow, and a google provider override in the terraform-validate CI workflow.

inventvenkat and others added 2 commits August 11, 2026 08:45
…resources modules

Ports terraform/aws/modules/{composition,application-resources} to
terraform/gcp/modules/, using only official terraform-google-modules /
GoogleCloudPlatform registry modules (no base/ layer, no third-party
modules). 23 composition modules and 14 application-resources modules,
each validated with terraform init/validate against the real registry.

See terraform/gcp/modules/README.md for the AWS->GCP module map and the
list of intentional divergences (no NACL/lock-table equivalents, SES ->
Secret Manager, CloudFront Functions has no Cloud CDN analog, etc).

Also wires the new tree into the existing tooling: justfile gen-docs,
the terraform-docs CI workflow, and a google provider override in the
terraform-validate CI workflow.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@sentinelone-cnapp-aps1

Copy link
Copy Markdown

SentinelOne IaC Issues Detector

❌ Detected 3 issue(s) in your pull request

Here are the detected issues.

Resource File Issue Message Severity
google_compute_disk.keeper_data main.tf Multiple instances found with unencrypted disks MEDIUM
google_compute_disk.server_data main.tf Multiple instances found with unencrypted disks MEDIUM
google_compute_disk.data main.tf Multiple instances found with unencrypted disks MEDIUM

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant