Miscellaneous reusable GitHub Called Workflows for common platform automation tasks.

OpenTofu example module that creates a GCP project with CIS GCP Benchmark compliance controls, billing budget alerts, Cloud Monitoring notification channels, and GCP API enablement.

OpenTofu example module that deploys the Istio service mesh on GKE using Helm charts with optional ingress gateway, Cloud Armor WAF protection, and cert-manager integration for mTLS.

Backstage developer portal running on Google Kubernetes Engine, providing a centralized platform service catalog and developer tooling.

GitHub Codespace for OpenTofu Infrastructure as Code development providing standardized developer environments.

OpenTofu example module that creates a Google Cloud Storage bucket with uniform bucket-level access, public access prevention, optional object versioning, and customer-managed encryption key support.

OpenTofu example module that provisions a Google Cloud SQL instance with configurable database version, high availability, automated backups, query insights, and private IP connectivity.

Pre-commit hooks for Infrastructure as Code (IaC) tools including OpenTofu format, validate, and test.

OpenTofu example module for helpers providing core platform functionality including workspace parsing, resource labeling, and logos integration for team and project management.

OpenTofu example module for Open Policy Agent Gatekeeper on Google Kubernetes Engine.

OpenTofu example module for the Datadog Kubernetes Operator on Google Kubernetes Engine.

OpenTofu example module that provisions a GKE cluster with Workload Identity, KMS encryption, CIS GKE Benchmark hardening, and GKE Fleet support for multi-cluster service discovery and ingress.

OpenTofu example module that creates a Shared VPC host project network with configurable firewall rules, regional subnetworks, VPC flow logging, optional Cloud NAT, and Cloud DNS managed zones.

The foundational principle of order across systems, integrating multi-provider infrastructure, establishing boundaries, governance, and stable standards for teams to operate autonomously.

OpenTofu example module for cert-manager on Google Kubernetes Engine.

OpenTofu example module that configures Datadog's GCP integration using Workload Identity Federation, Pub/Sub log export, Cloud Asset project feeds, and optional BigQuery and GCS for Cloud Cost Management.

Local development environment setup scripts example for working with Infrastructure as Code (IaC).

Reusable GitHub Called Workflow examples for OpenTofu and Google Cloud Platform.

The breath of life animating the platform via Kubernetes, orchestrating dynamic, self-healing, and scalable services atop the Logos foundation.

Platform documentation for the pt-ekklesia team powered by Docusaurus and deployed via GitHub Pages.