OpenTofu example module that deploys the Istio service mesh on GKE using Helm charts with optional ingress gateway, Cloud Armor WAF protection, and cert-manager integration for mTLS.

OpenTofu example module that creates a GCP project with CIS GCP Benchmark compliance controls, billing budget alerts, Cloud Monitoring notification channels, and GCP API enablement.

OpenTofu example module that creates a Shared VPC host project network with configurable firewall rules, regional subnetworks, VPC flow logging, optional Cloud NAT, and Cloud DNS managed zones.

OpenTofu example module for cert-manager on Google Kubernetes Engine.

OpenTofu example module that provisions a GKE cluster with Workload Identity, KMS encryption, CIS GKE Benchmark hardening, and GKE Fleet support for multi-cluster service discovery and ingress.

OpenTofu example module for Open Policy Agent Gatekeeper on Google Kubernetes Engine.

OpenTofu example module that creates a Google Cloud Storage bucket with uniform bucket-level access, public access prevention, optional object versioning, and customer-managed encryption key support.

OpenTofu example module that configures Datadog's GCP integration using Workload Identity Federation, Pub/Sub log export, Cloud Asset project feeds, and optional BigQuery and GCS for Cloud Cost Management.

OpenTofu example module for helpers providing core platform functionality including workspace parsing, resource labeling, and logos integration for team and project management.

OpenTofu example module for the Datadog Kubernetes Operator on Google Kubernetes Engine.

Centralized AI context and GitHub Copilot instructions for the pt-arche team.