Arche

Arche is the origin and first cause — the primordial source from which all platform foundations draw their initial form and essential nature. Nothing above it exists without it.

pt-arche-core-helpers

OpenTofu module for helpers providing core platform functionality including workspace parsing, resource labeling, and logos integration for team and project management

pt-arche-google-project

OpenTofu module that creates a GCP project with CIS GCP Benchmark compliance controls, billing budget alerts, Cloud Monitoring notification channels, and GCP API enablement

pt-arche-google-network

OpenTofu module that creates a Shared VPC host project network with configurable firewall rules, regional subnetworks, VPC flow logging, optional Cloud NAT, and Cloud DNS managed zones

pt-arche-google-kubernetes-engine

OpenTofu module that provisions a GKE cluster with Workload Identity, KMS encryption, CIS GKE Benchmark hardening, and GKE Fleet support for multi-cluster service discovery and ingress

pt-arche-google-storage-bucket

OpenTofu module that creates a Google Cloud Storage bucket with uniform bucket-level access, public access prevention, optional object versioning, and customer-managed encryption key support

pt-arche-google-cloud-sql

OpenTofu module that provisions a Google Cloud SQL instance with configurable database version, high availability, automated backups, query insights, and private IP connectivity

pt-arche-kubernetes-istio

OpenTofu module that deploys the Istio service mesh on GKE using Helm charts with optional ingress gateway, Cloud Armor WAF protection, and cert-manager integration for mTLS

pt-arche-kubernetes-cert-manager

OpenTofu module for cert-manager on Google Kubernetes Engine

pt-arche-kubernetes-datadog-operator

OpenTofu module for the Datadog Kubernetes Operator on Google Kubernetes Engine

pt-arche-kubernetes-opa-gatekeeper

OpenTofu module for Open Policy Agent Gatekeeper on Google Kubernetes Engine

pt-arche-datadog-google-integration

OpenTofu module that configures Datadog's GCP integration using Workload Identity Federation, Pub/Sub log export, Cloud Asset project feeds, and optional BigQuery and GCS for Cloud Cost Management