.gitignore

@@ -1,8 +1,29 @@
+# OSX leaves these everywhere on SMB shares
+._*
 
-# Created by https://www.gitignore.io/api/terraform
-# Edit at https://www.gitignore.io/?templates=terraform
+# OSX trash
+.DS_Store
+
+# Python
+*.pyc
+
+# Emacs save files
+*~
+\#*\#
+.\#*
+
+# Vim-related files
+[._]*.s[a-w][a-z]
+[._]s[a-w][a-z]
+*.un~
+Session.vim
+.netrwhist
+
+# IntelliJ IDEA files:
+.idea/
+
+### https://raw.github.com/github/gitignore/90f149de451a5433aebd94d02d11b0e28843a1af/Terraform.gitignore
 
-### Terraform ###
 # Local .terraform directories
 **/.terraform/*
 
@@ -26,11 +47,20 @@ override.tf.json
 *_override.tf
 *_override.tf.json
 .idea/
+.vscode/
+# Kitchen files
+**/inspec.lock
+**.gem
+**/.kitchen
+**/.kitchen.local.yml
+**/Gemfile.lock
+
+test/fixtures/shared/terraform.tfvars
 
-# Include override files you do wish to add to version control using negated pattern
-# !example_override.tf
+test/integration/gcloud/config.sh
+test/integration/tmp
 
-# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
-# example: *tfplan*
+credentials.json
 
-# End of https://www.gitignore.io/api/terraform
+# File to populate env vars used by Docker test runs
+.envrc

.kitchen.yml

@@ -0,0 +1,106 @@
+# Copyright 2020 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+---
+driver:
+  name: terraform
+  command_timeout: 2700
+
+provisioner:
+  name: terraform
+
+verifier:
+  name: terraform
+
+platforms:
+  - name: default
+
+suites:
+  - name: bootstrap
+    driver:
+      root_module_directory: test/fixtures/bootstrap/
+    verifier:
+      color: false
+      systems:
+        - name: inspec-gcp
+          backend: gcp
+          controls:
+            - gcp_bootstrap
+            - gcp_cloudbuild
+        - name: local
+          backend: local
+          controls:
+            - gcloud_cloudbuild
+  - name: org
+    driver:
+      root_module_directory: test/fixtures/org/
+    verifier:
+      color: false
+      systems:
+        - name: inspec-gcp
+          backend: gcp
+          controls:
+            - gcp_logging
+            - gcp_projects
+        - name: local
+          backend: local
+          controls:
+            - gcloud_scc
+            - gcloud_policy
+  - name: envs
+    driver:
+      root_module_directory: test/fixtures/envs/
+    verifier:
+      color: false
+      systems:
+        - name: inspec-gcp
+          backend: gcp
+          controls:
+            - development
+            - non-production
+            - production
+  - name: dns_hub
+    driver:
+      root_module_directory: test/fixtures/dns_hub/
+    verifier:
+      color: false
+      systems:
+        - name: inspec-gcp
+          backend: gcp
+          controls:
+            - gcp_dns_hub
+        - name: local
+          backend: local
+          controls:
+            - gcloud_dns_hub
+  - name: networks
+    driver:
+      root_module_directory: test/fixtures/networks/
+    verifier:
+      color: false
+      systems:
+        - name: networks
+          backend: local
+          controls:
+            - networks
+  - name: projects
+    driver:
+      root_module_directory: test/fixtures/projects/
+    verifier:
+      color: false
+      systems:
+        - name: projects
+          backend: local
+          controls:
+            - projects

0-bootstrap/.gitignore

@@ -0,0 +1,61 @@
+# OSX leaves these everywhere on SMB shares
+._*
+
+# OSX trash
+.DS_Store
+
+# Python
+*.pyc
+
+# Emacs save files
+*~
+\#*\#
+.\#*
+
+# Vim-related files
+[._]*.s[a-w][a-z]
+[._]s[a-w][a-z]
+*.un~
+Session.vim
+.netrwhist
+
+# IntelliJ IDEA files:
+.idea/
+
+### https://raw.github.com/github/gitignore/90f149de451a5433aebd94d02d11b0e28843a1af/Terraform.gitignore
+
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+
+# Ignore any .tfvars files that are generated automatically for each Terraform run. Most
+# .tfvars files are managed as part of configuration and so should be included in
+# version control.
+#
+# example.tfvars
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+.idea/
+.vscode/
+# Kitchen files
+**/inspec.lock
+**.gem
+**/.kitchen
+**/.kitchen.local.yml
+**/Gemfile.lock
+
+credentials.json
+
+# File to populate env vars used by Docker test runs
+.envrc