GoogleCloudPlatform · juliocc · Mar 8, 2024 · Mar 5, 2024 · Mar 5, 2024 · Mar 5, 2024
diff --git a/blueprints/README.md b/blueprints/README.md
@@ -9,7 +9,7 @@ Currently available blueprints:
 - **data solutions** - [GCE and GCS CMEK via centralized Cloud KMS](./data-solutions/cmek-via-centralized-kms), [Cloud Composer version 2 private instance, supporting Shared VPC and external CMEK key](./data-solutions/composer-2), [Cloud SQL instance with multi-region read replicas](./data-solutions/cloudsql-multiregion), [Data Platform](./data-solutions/data-platform-foundations), [Minimal Data Platform](./data-solutions/data-platform-minimal), [Spinning up a foundation data pipeline on Google Cloud using Cloud Storage, Dataflow and BigQuery](./data-solutions/gcs-to-bq-with-least-privileges), [#SQL Server Always On Groups blueprint](./data-solutions/sqlserver-alwayson), [Data Playground](./data-solutions/data-playground), [MLOps with Vertex AI](./data-solutions/vertex-mlops), [Shielded Folder](./data-solutions/shielded-folder), [BigQuery ML and Vertex AI Pipeline](./data-solutions/bq-ml)
 - **factories** - [Fabric resource factories](./factories)
 - **GKE** - [Binary Authorization Pipeline Blueprint](./gke/binauthz), [Storage API](./gke/binauthz/image), [Multi-cluster mesh on GKE (fleet API)](./gke/multi-cluster-mesh-gke-fleet-api), [GKE Multitenant Blueprint](./gke/multitenant-fleet), [Shared VPC with GKE support](./networking/shared-vpc-gke/), [GKE Autopilot](./gke/autopilot)
-- **networking** - [Calling a private Cloud Function from On-premises](./networking/private-cloud-function-from-onprem), [HA VPN over Interconnect](./networking/ha-vpn-over-interconnect/), [GLB and multi-regional daisy-chaining through hybrid NEGs](./networking/glb-hybrid-neg-internal), [Hybrid connectivity to on-premise services through PSC](./networking/psc-hybrid), [HTTP Load Balancer with Cloud Armor](./networking/glb-and-armor), [Hub and Spoke via VPN](./networking/hub-and-spoke-vpn), [Hub and Spoke via VPC Peering](./networking/hub-and-spoke-peering), [Internal Load Balancer as Next Hop](./networking/ilb-next-hop), On-prem DNS and Google Private Access,  [PSC Producer](./networking/psc-hybrid/psc-producer), [PSC Consumer](./networking/psc-hybrid/psc-consumer), [Shared VPC with optional GKE cluster](./networking/shared-vpc-gke), [VPC Connectivity Lab](./networking/vpc-connectivity-lab/)
+- **networking** - [Calling a private Cloud Function from On-premises](./networking/private-cloud-function-from-onprem), [HA VPN over Interconnect](./networking/ha-vpn-over-interconnect/), [GLB and multi-regional daisy-chaining through hybrid NEGs](./networking/glb-hybrid-neg-internal), [Hybrid connectivity to on-premise services through PSC](./networking/psc-hybrid), [HTTP Load Balancer with Cloud Armor](./networking/glb-and-armor), [Internal Load Balancer as Next Hop](./networking/ilb-next-hop), On-prem DNS and Google Private Access,  [PSC Producer](./networking/psc-hybrid/psc-producer), [PSC Consumer](./networking/psc-hybrid/psc-consumer), [Shared VPC with optional GKE cluster](./networking/shared-vpc-gke), [VPC Connectivity Lab](./networking/vpc-connectivity-lab/)
 - **serverless** - [Cloud Run series](./serverless/cloud-run-explore)
 - **third party solutions** - [OpenShift on GCP user-provisioned infrastructure](./third-party-solutions/openshift), [Wordpress deployment on Cloud Run](./third-party-solutions/wordpress/cloudrun)
 

diff --git a/blueprints/apigee/bigquery-analytics/OWNERS b/blueprints/apigee/bigquery-analytics/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/apigee/hybrid-gke/OWNERS b/blueprints/apigee/hybrid-gke/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/OWNERS b/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/cloud-operations/adfs/OWNERS b/blueprints/cloud-operations/adfs/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/cloud-operations/asset-inventory-feed-remediation/OWNERS b/blueprints/cloud-operations/asset-inventory-feed-remediation/OWNERS
@@ -0,0 +1 @@
+ludoo
diff --git a/blueprints/cloud-operations/compute-quota-monitoring/OWNERS b/blueprints/cloud-operations/compute-quota-monitoring/OWNERS
@@ -0,0 +1 @@
+ludoo
diff --git a/blueprints/cloud-operations/dns-fine-grained-iam/OWNERS b/blueprints/cloud-operations/dns-fine-grained-iam/OWNERS
@@ -0,0 +1 @@
+ludoo
diff --git a/blueprints/cloud-operations/dns-shared-vpc/OWNERS b/blueprints/cloud-operations/dns-shared-vpc/OWNERS
@@ -0,0 +1 @@
+ludoo
diff --git a/blueprints/cloud-operations/iam-delegated-role-grants/OWNERS b/blueprints/cloud-operations/iam-delegated-role-grants/OWNERS
@@ -0,0 +1 @@
+juliocc
diff --git a/blueprints/cloud-operations/network-quota-monitoring/OWNERS b/blueprints/cloud-operations/network-quota-monitoring/OWNERS
@@ -0,0 +1 @@
+aurelienlegrand, ludoo
diff --git a/blueprints/cloud-operations/onprem-sa-key-management/OWNERS b/blueprints/cloud-operations/onprem-sa-key-management/OWNERS
@@ -0,0 +1 @@
+averbuks
diff --git a/blueprints/cloud-operations/packer-image-builder/OWNERS b/blueprints/cloud-operations/packer-image-builder/OWNERS
@@ -0,0 +1 @@
+mikouaj
diff --git a/blueprints/cloud-operations/scheduled-asset-inventory-export-bq/OWNERS b/blueprints/cloud-operations/scheduled-asset-inventory-export-bq/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/cloud-operations/terraform-cloud-dynamic-credentials/OWNERS b/blueprints/cloud-operations/terraform-cloud-dynamic-credentials/OWNERS
@@ -0,0 +1 @@
+averbuks
diff --git a/blueprints/cloud-operations/unmanaged-instances-healthcheck/OWNERS b/blueprints/cloud-operations/unmanaged-instances-healthcheck/OWNERS
@@ -0,0 +1 @@
+averbuks
diff --git a/blueprints/cloud-operations/vm-migration/OWNERS b/blueprints/cloud-operations/vm-migration/OWNERS
@@ -0,0 +1 @@
+eliamaldini
diff --git a/blueprints/cloud-operations/workload-identity-federation/OWNERS b/blueprints/cloud-operations/workload-identity-federation/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/data-solutions/bq-ml/OWNERS b/blueprints/data-solutions/bq-ml/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/cloudsql-multiregion/OWNERS b/blueprints/data-solutions/cloudsql-multiregion/OWNERS
@@ -0,0 +1 @@
+juliocc, lcaggio
diff --git a/blueprints/data-solutions/cmek-via-centralized-kms/OWNERS b/blueprints/data-solutions/cmek-via-centralized-kms/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/composer-2/OWNERS b/blueprints/data-solutions/composer-2/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/data-platform-foundations/OWNERS b/blueprints/data-solutions/data-platform-foundations/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/data-platform-minimal/OWNERS b/blueprints/data-solutions/data-platform-minimal/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/data-playground/OWNERS b/blueprints/data-solutions/data-playground/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/gcs-to-bq-with-least-privileges/OWNERS b/blueprints/data-solutions/gcs-to-bq-with-least-privileges/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/shielded-folder/OWNERS b/blueprints/data-solutions/shielded-folder/OWNERS
@@ -0,0 +1 @@
+lcaggio
diff --git a/blueprints/data-solutions/sqlserver-alwayson/OWNERS b/blueprints/data-solutions/sqlserver-alwayson/OWNERS
@@ -0,0 +1 @@
+rosmo
diff --git a/blueprints/data-solutions/vertex-mlops/OWNERS b/blueprints/data-solutions/vertex-mlops/OWNERS
@@ -0,0 +1 @@
+javiergp, lcaggio
diff --git a/blueprints/gke/autopilot/OWNERS b/blueprints/gke/autopilot/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/gke/binauthz/OWNERS b/blueprints/gke/binauthz/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/gke/multi-cluster-mesh-gke-fleet-api/OWNERS b/blueprints/gke/multi-cluster-mesh-gke-fleet-api/OWNERS
@@ -0,0 +1 @@
+apichick
diff --git a/blueprints/gke/multitenant-fleet/OWNERS b/blueprints/gke/multitenant-fleet/OWNERS
@@ -0,0 +1 @@
+juliocc
diff --git a/blueprints/gke/patterns/autopilot-cluster/OWNERS b/blueprints/gke/patterns/autopilot-cluster/OWNERS
@@ -0,0 +1 @@
+juliocc, ludoo
diff --git a/blueprints/gke/patterns/batch/OWNERS b/blueprints/gke/patterns/batch/OWNERS
@@ -0,0 +1 @@
+apichick, juliocc
diff --git a/blueprints/gke/patterns/kafka/OWNERS b/blueprints/gke/patterns/kafka/OWNERS
@@ -0,0 +1 @@
+danielmarzini, juliocc
diff --git a/blueprints/gke/patterns/mysql/OWNERS b/blueprints/gke/patterns/mysql/OWNERS
@@ -0,0 +1 @@
+wiktorn, juliocc
diff --git a/blueprints/gke/patterns/redis-cluster/OWNERS b/blueprints/gke/patterns/redis-cluster/OWNERS
@@ -0,0 +1 @@
+danielmarzini, juliocc
diff --git a/blueprints/networking/README.md b/blueprints/networking/README.md
@@ -30,22 +30,6 @@ They are meant to be used as minimal but complete starting points to create actu
 
 <br clear="left">
 
-### Hub and Spoke via Dynamic VPN
-
-<a href="./hub-and-spoke-vpn/" title="Hub and spoke via dynamic VPN"><img src="./hub-and-spoke-vpn/diagram.png" align="left" width="280px"></a> This [blueprint](./hub-and-spoke-vpn/) implements a hub and spoke topology via dynamic VPN tunnels, a common design where peering cannot be used due to limitations on the number of spokes or connectivity to managed services.
-
-The blueprint shows how to implement spoke transitivity via BGP advertisements, how to expose hub DNS zones to spokes via DNS peering, and allows easy testing of different VPN and BGP configurations.
-
-<br clear="left">
-
-### Hub and Spoke via Peering
-
-<a href="./hub-and-spoke-peering/" title="Hub and spoke via peering blueprint"><img src="./hub-and-spoke-peering/diagram.png" align="left" width="280px"></a> This [blueprint](./hub-and-spoke-peering/) implements a hub and spoke topology via VPC peering, a common design where a landing zone VPC (hub) is connected to on-premises, and then peered with satellite VPCs (spokes) to further partition the infrastructure.
-
-The sample highlights the lack of transitivity in peering: the absence of connectivity between spokes, and the need create workarounds for private service access to managed services. One such workaround is shown for private GKE, allowing access from hub and all spokes to GKE masters via a dedicated VPN.
-
-<br clear="left">
-
 ### Internal Network LB as next hop
 
 <a href="./ilb-next-hop/" title="Internal Network LB as next hop"><img src="./ilb-next-hop/diagram.png" align="left" width="280px"></a> This [blueprint](./ilb-next-hop/) allows testing [Internal Network LB as next hop](https://cloud.google.com/load-balancing/docs/internal/ilb-next-hop-overview) using simple Linux gateway VMS between two VPCs, to emulate virtual appliances. An optional additional Internal Network LB can be enabled to test multiple load balancer configurations and hashing.

diff --git a/blueprints/networking/__need_fixing/README.md b/blueprints/networking/__need_fixing/README.md
diff --git a/blueprints/networking/__need_fixing/filtering-proxy-psc/README.md b/blueprints/networking/__need_fixing/filtering-proxy-psc/README.md
diff --git a/blueprints/networking/__need_fixing/filtering-proxy-psc/consumer.tf b/blueprints/networking/__need_fixing/filtering-proxy-psc/consumer.tf