Google Cloud

GCP infrastructure modules covering project governance, networking, compute, storage, and Datadog observability integration. All modules consume pt-arche-core-helpers for environment detection, labels, and team data.

Modules

pt-arche-core-helpers

OpenTofu module for helpers providing core platform functionality including workspace parsing, resource labeling, and logos integration for team and project management

pt-arche-google-project

OpenTofu module that creates a GCP project with CIS GCP Benchmark compliance controls, billing budget alerts, Cloud Monitoring notification channels, and GCP API enablement

pt-arche-google-network

OpenTofu module that creates a Shared VPC host project network with configurable firewall rules, regional subnetworks, VPC flow logging, optional Cloud NAT, and Cloud DNS managed zones

pt-arche-google-kubernetes-engine

OpenTofu module that provisions a GKE cluster with Workload Identity, KMS encryption, CIS GKE Benchmark hardening, and GKE Fleet support for multi-cluster service discovery and ingress

pt-arche-google-storage-bucket

OpenTofu module that creates a Google Cloud Storage bucket with uniform bucket-level access, public access prevention, optional object versioning, and customer-managed encryption key support

pt-arche-google-cloud-sql

OpenTofu module that provisions a Google Cloud SQL instance with configurable database version, high availability, automated backups, query insights, and private IP connectivity

pt-arche-datadog-google-integration

OpenTofu module that configures Datadog's GCP integration using Workload Identity Federation, Pub/Sub log export, Cloud Asset project feeds, and optional BigQuery and GCS for Cloud Cost Management

Components

These modules cover the Google Cloud layer of Arche. The Consumed By column identifies which platform team primarily consumes each module.

Module	Consumed By	Purpose
pt-arche-core-helpers	All	Workspace parsing, labels, team data, environment detection
pt-arche-google-project	Corpus	CIS-compliant GCP project with billing, APIs, and monitoring
pt-arche-google-network	Corpus	Shared VPC with subnets, firewall rules, Cloud NAT, DNS
pt-arche-google-kubernetes-engine	Pneuma	GKE cluster with Workload Identity, KMS, CIS hardening, Fleet
pt-arche-google-storage-bucket	Corpus	GCS bucket with CMEK, uniform access, versioning
pt-arche-google-cloud-sql	Stream-aligned teams	Cloud SQL with HA, backups, private IP
pt-arche-datadog-google-integration	Corpus	Datadog GCP integration via Workload Identity, Pub/Sub, Cloud Asset