finds.dev← search

// the find

GoogleCloudPlatform/cloud-foundation-fabric

★ 2,047 · HCL · Apache-2.0 · updated Jun 2026

End-to-end modular samples and landing zones toolkit for Terraform on GCP.

Cloud Foundation Fabric is Google's own Terraform module library and landing zone framework for GCP. It ships two things: a suite of ~60 reusable modules covering nearly every GCP service, and FAST — a opinionated multi-stage org bootstrap that sets up billing, IAM, networking, and CI/CD from scratch. Aimed at platform engineers standing up or hardening a GCP organization.

The module interface design is consistent: every module handles IAM alongside resource creation, accepts factory patterns for bulk resource creation via YAML files, and avoids external commands or side effects — which means modules actually compose without surprises. The FAST stages are genuinely sequenced correctly, with outputs from each stage feeding the next via Terraform remote state, so you're not manually wiring things together. The ADR directory documents non-obvious design decisions with dates, which is rare and useful when you need to understand why a module interface looks the way it does. Active daily commits from Google employees means modules track API changes faster than most community alternatives.

The 'clone the whole repo' model is the correct design choice for a toolkit, but it means your fork immediately starts diverging from upstream — rebasing in org-specific changes against a fast-moving repo is genuinely painful after a few months. FAST covers GCP organizations well but assumes you're starting from scratch; bolting it onto an existing org with pre-existing folder structure and billing is a significant re-engineering exercise. The module count has grown large enough that there's no obvious entry point for someone new — the README lists everything alphabetically with no guidance on which modules are stable versus experimental. OpenTofu support appears to be a parallel concern (there's a `default-versions.tofu` at the root) but it's not clear which modules are actually tested against it.

View on GitHub →

// want more like this?

We dig through GitHub every week and send a few repos picked for what you actually care about — each with an honest take like this one.

Get finds in your inbox → Search again →