Cloud Foundation Deployment

The foundation-level resources are deployed to the GCP project with project id likvid-prod-management.

Automation

The Service Account likvid-foundation-gha@likvid-prod-management.iam.gserviceaccount.com has been set up for the automated validation a GitHub actions pipeline. This user has read-only access to terraform state and read only access to the entire landing zone architecture.

GitHub actions can authenticate as this service account using Workload Identity Federation

Platform Engineer Access Management

The likvid-foundation-platform-engineers group is used to grant privileged access to members of the cloud foundation team. The group has the following members:

• ckraus@meshcloud.io
• fnowarre@meshcloud.io
• hdettmer@meshcloud.io
• jrudolph@meshcloud.io
• jschwandke@meshcloud.io

Compliance Statements

no compliance statements provided