• ref

For the purposes of the demo, I prepared the environment with the following:

• app-pipeline project

  • 2 GCS buckets for the dev and prod state files
  • 2 service accounts with the permissions necessary in their target environment
  • connected this repo to cloudbuild
  • 2 CloudBuild triggers. One for each branch

• target-dev project

  • 1 service account for the demo that has no permissions (we'll use this to assign the storage.admin permission)

• target-prod project

  • 1 service account for the demo that has no permissions (we'll use this to assign the storage.admin permission)

.
├── w-app-repo
   └── backend.tf -- contains the gcs bucket where we can store the state file
   └── cloudbuild.yaml -- used by CloudBuild as a set of instructions in what to do end to end
   └── main.tf -- the terraform file to inspect and deploy.
   └── variables.tf ** -- does not exist but can be used to make the deployment cleaner and easier
   └── README.md