-
Notifications
You must be signed in to change notification settings - Fork 19
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[Documentation] path-to-authorization.md advertises FedRAMP Moderate baselines for the SCTM and Policies and Procedures templates, but the published template set is FedRAMP High and IL5 only
documentationImprovements or additions to documentationImprovements or additions to documentationLevel of Effort - HighComplex task taking a week or more; consider breaking this down into smaller issues.Complex task taking a week or more; consider breaking this down into smaller issues.Priority - MediumStandard features and non-blocking bugs; important for the current milestone but not urgentStandard features and non-blocking bugs; important for the current milestone but not urgentStatus: Open.#232 In google/stellar-engine;[Bug] kms_protection_level is required by four FAST stages but is set by nothing, and 0-bootstrap builds its keys from the raw variable instead of the regime-aware local it computes
bugSomething isn't workingSomething isn't workingLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - HighCritical issues blocking development or users; urgent bugs or core features for releaseCritical issues blocking development or users; urgent bugs or core features for releasesecuritySomething is insecure or can be securedSomething is insecure or can be securedStatus: Open.[Bug] Brownfield discovery offers the wrong Terraform state bucket: it looks for gs://<prefix>-tn-<env>-<tenant>-0, but a tenant's own stage state lives in gs://<prefix>-<env>-<tenant>-iac-0
bugSomething isn't workingSomething isn't workinggemini for governmentGemini for Government (G4G) relatedGemini for Government (G4G) relatedLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - HighCritical issues blocking development or users; urgent bugs or core features for releaseCritical issues blocking development or users; urgent bugs or core features for releaseStatus: Open.[Bug] gemini-enterprise deploy.sh still writes kms_project_id and us_keyring_name into gemini-stage-0/terraform.tfvars, which stage 0 no longer declares
bugSomething isn't workingSomething isn't workinggemini for governmentGemini for Government (G4G) relatedGemini for Government (G4G) relatedLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - LowMinor polish, typo fixes, or technical debt; nice to have; pick up when time permitsMinor polish, typo fixes, or technical debt; nice to have; pick up when time permitsStatus: Open.[Bug] modules/project and modules/iam-service-account silently truncate over-length IDs instead of failing, and the documented prefix limit of 7 characters now leaves zero margin (naming-convention.md still says 6)
bugSomething isn't workingSomething isn't workingLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - LowMinor polish, typo fixes, or technical debt; nice to have; pick up when time permitsMinor polish, typo fixes, or technical debt; nice to have; pick up when time permitsStatus: Open.[Bug] 2-networking-a-fedramp: the NVA cluster runs on Spot VMs with automatic_restart disabled, so a preemption removes the organization's only internet egress path — the IL5 stage runs the equivalent appliances on-demand
bugSomething isn't workingSomething isn't workingLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - MediumStandard features and non-blocking bugs; important for the current milestone but not urgentStandard features and non-blocking bugs; important for the current milestone but not urgentStatus: Open.[Feature Request] Remove Source Repo references and modules and replace with SSM
enhancementNew feature or requestNew feature or requestStatus: Open.#198 In google/stellar-engine;[Feature Request]Customize Org Policy Enforcement Based on Regime Setting
enhancementNew feature or requestNew feature or requestStatus: Open.[Bug] docs/ddg.md points at fast/stages-aw/2-networking-a-fedramp-high, which v3.0.0 renamed — the deployment guide's networking step cannot be followed
bugSomething isn't workingSomething isn't workingLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - MediumStandard features and non-blocking bugs; important for the current milestone but not urgentStandard features and non-blocking bugs; important for the current milestone but not urgentStatus: Open.[Documentation] FedRAMP Moderate networking: record whether a Moderate-specific network pattern was superseded, which regions it supports, and where IL2 lands
documentationImprovements or additions to documentationImprovements or additions to documentationLevel of Effort - MediumModerate task requiring thought and testing; typically takes a couple of days to a weekModerate task requiring thought and testing; typically takes a couple of days to a weekPriority - MediumStandard features and non-blocking bugs; important for the current milestone but not urgentStandard features and non-blocking bugs; important for the current milestone but not urgentStatus: Open.#195 In google/stellar-engine;[Feature Request] No FedRAMP Moderate blueprint family — the platform supports FRM but every workload blueprint is still FedRAMP High or IL5 only
enhancementNew feature or requestNew feature or requestLevel of Effort - HighComplex task taking a week or more; consider breaking this down into smaller issues.Complex task taking a week or more; consider breaking this down into smaller issues.Priority - MediumStandard features and non-blocking bugs; important for the current milestone but not urgentStandard features and non-blocking bugs; important for the current milestone but not urgentStatus: Open.[Documentation] fast/stages-aw README misdescribes the networking stage: it advertises VPN connectivity neither option implements, and calls VPC-level firewall rules and subnets "YAML-based factories" when both are plain tfvars variables
documentationImprovements or additions to documentationImprovements or additions to documentationLevel of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completeQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - MediumStandard features and non-blocking bugs; important for the current milestone but not urgentStandard features and non-blocking bugs; important for the current milestone but not urgentStatus: Open.#191 In google/stellar-engine;