Update README-GCD.md

This commit is contained in:
Julio Castillo
2026-02-10 11:56:42 +01:00
committed by GitHub
parent fd0badd870
commit 496e2791c1

View File

@@ -1,6 +1,6 @@
# FAST Installation on Google Cloud Dedicated (GCD) # FAST Installation on Google Cloud Dedicated (GCD)
This document serves as an extension to the main **[FAST Organization Setup README](../README.md)**, detailing the specific configurations and steps required to deploy the Fabric FAST landing zone on **Google Cloud Dedicated (GCD)**. This document serves as an extension to the main **[FAST Organization Setup README](./README.md)**, detailing the specific configurations and steps required to deploy the Fabric FAST landing zone on **Google Cloud Dedicated (GCD)**.
It assumes familiarity with the standard FAST bootstrap flow but highlights the critical divergences required for the Google Cloud Dedicated (GCD) environment. It assumes familiarity with the standard FAST bootstrap flow but highlights the critical divergences required for the Google Cloud Dedicated (GCD) environment.
@@ -31,7 +31,7 @@ The core stages are:
## 2. Prerequisites ## 2. Prerequisites
In addition to the [standard FAST prerequisites](../README.md#prerequisites), ensure the following GCD-specific requirements are met. In addition to the [standard FAST prerequisites](./README.md#prerequisites), ensure the following GCD-specific requirements are met.
### Identity Provider ### Identity Provider
@@ -84,7 +84,7 @@ gcloud auth application-default login \
## 3. Bootstrap: Manual Temporary Project ## 3. Bootstrap: Manual Temporary Project
*This step replaces the standard [Default project](../README.md#default-project) creation flow.* *This step replaces the standard [Default project](./README.md#default-project) creation flow.*
GCD requires a manual bootstrap project because organization policy services are not automatically available at the organization root during the initial setup. GCD requires a manual bootstrap project because organization policy services are not automatically available at the organization root during the initial setup.
@@ -113,7 +113,7 @@ GCD requires a manual bootstrap project because organization policy services are
## 4. Terraform Configuration Updates ## 4. Terraform Configuration Updates
*This section details specific modifications to the [Configure defaults](../README.md#configure-defaults) step.* *This section details specific modifications to the [Configure defaults](./README.md#configure-defaults) step.*
### Provider Configuration ### Provider Configuration
@@ -132,9 +132,18 @@ provider "google-beta" {
### Defaults Configuration (`defaults.yaml`) ### Defaults Configuration (`defaults.yaml`)
Update your `defaults.yaml` file to include a `universe` block within the `overrides` section. This configures the correct API domains and disables service identities that are not available in GCD. Update your `defaults.yaml` file to include a `universe` block within the `overrides` section. This configures the correct API domains and disables service identities that are not available in GCD.
Additionally, you must provide valid values for the following fields in the context section:
* `context.email_addresses.gcp-organization-admins`: used to set the [essential contact]([url](https://docs.cloud.google.com/resource-manager/docs/manage-essential-contacts)) for the core projects
* `context.iam_principals.gcp-organization-admins`: Used to grant administrative permissions to the administrators.
**Note on Principals:** If you use a group for the admin principal, ensure your user identity is a member of that group. Otherwise, set this field to your own user identity (e.g., `principal://iam.googleapis.com/locations/global/workforcePools/...`) instead of a group. For further details, refer to the [Configure defaults](./README.md#configure-defaults) section in the standard README.
Your `defaults.yaml should` contain sections that look like this:
```yaml ```yaml
# ... existing configuration ...
projects: projects:
defaults: defaults:
# customize prefix as per usual FAST instructions # customize prefix as per usual FAST instructions
@@ -154,6 +163,15 @@ projects:
- dns.googleapis.com - dns.googleapis.com
- monitoring.googleapis.com - monitoring.googleapis.com
- networksecurity.googleapis.com - networksecurity.googleapis.com
context:
email_addresses:
gcp-organization-admins: gcp-organization-admins@example.com
iam_principals:
gcp-organization-admins: group:gcp-organization-admins@example.com
locations:
# Replace with values from the Configuration Reference table
primary: <UNIVERSE_REGION>
# ... existing configuration ...
``` ```
### Switch to GCD Dataset ### Switch to GCD Dataset