26 lines
873 B
Markdown
26 lines
873 B
Markdown
# Completed Tasks - TYR
|
|
|
|
- **Phase 1.1: Deploy step-ca**
|
|
- Status: **Complete**
|
|
- Notes: `step ca init` was successful and the `step-ca` systemd service is active.
|
|
|
|
- **Phase 1.2: Bootstrap SPIRE**
|
|
- Status: **Complete**
|
|
- Notes: `install_spire.sh` executed and daemons are running.
|
|
|
|
- **Phase 1.4: Binary Authorization**
|
|
- Status: **Complete**
|
|
- Notes: KMS key, attestor, and policy are created and active.
|
|
|
|
- **Task 2.1: Establish VPC-SC Perimeter**
|
|
- Status: **Complete**
|
|
- Notes: Created `tyr_perimeter` to restrict Cloud Run and Artifact Registry.
|
|
|
|
- **Task 2.2: Enable Private Google Access**
|
|
- Status: **Complete**
|
|
- Notes: Enabled Private Google Access on the default subnet in `us-central1`.
|
|
|
|
- **Task 2.3: Deploy Cloud Armor WAF**
|
|
- Status: **Complete**
|
|
- Notes: Created `tyr-armor-policy` with XSS, rate-limiting, and default-deny rules.
|