Best practices for deploying secure delivery pipelines
This book includes many examples of how to accomplish goals related to setting up and operating a secure delivery pipeline. This section shares the following further tips:
- Using a host project for CI/CD infrastructure
- Using VPC Service Controls (VPC-SC)
- Using private pools for Cloud Build and Cloud Deploy
- Using Cloud Logging and Cloud Monitoring
- Enabling recommended alerts
- Using GitOps
Let’s start by looking at using a dedicated project for your CI/CD resources.
Using a host project for CI/CD infrastructure
Google Cloud uses projects as a way to isolate workloads, credentials, and resources. Users, APIs, and billing are enabled and managed separately in each project. For one project to interact with another, explicit permissions must be granted on one or both of those projects. Using a host project for CI/CD infrastructure can save both time and money as you can consolidate all CI...
