Skip to main content

Introduction

Our Promise: One PR to provision all the assets and resources you need to begin Building Agents of Change.

The AI Platform provides an automated, modular landing zone and infrastructure framework on Google Cloud. It enables teams to rapidly scaffold, build, and deploy production-ready AI agents, platform services, and sandboxes with enterprise-grade security, governance, and CI/CD automation.


Core Component Types​

The platform is organized into four distinct component types:

  • Foundations: Core landing zone services including bootstrap infrastructure, Workload Identity Federation (WIF), shared Secret Manager, KMS CMEK encryption, security baselines, and documentation.
  • Services: Shared enterprise services such as API management (Apigee), Data Foundations, and LLM Gateways.
  • Agents: Production AI Agent workloads, ADK services, and Agent Runtime environments.
  • Sandboxes: Isolated, self-contained development and experimentation environments for team members.

Key Capabilities​

  1. Central Infrastructure & Scaffolding: Platform landing zone infrastructure and component scaffolding are managed within uk-dvt-gcloud-core-projects.

  2. Automated Component Scaffolding: Define new components using declarative OpenTofu/Terraform templates to automatically provision GCP projects, APIs, IAM permissions, and dedicated GitHub repositories using the standardized naming pattern:

    uk-dvt-gcloud-<component_name>-<repo_name>
  3. Secure Workload Identity Federation: All CI/CD workflows authenticate passwordlessly to Google Cloud using Workload Identity Federation (WIF), eliminating long-lived service account keys.

  4. Multi-Environment Delivery: Each component cleanly separates shared configuration (envs/common) from environment-specific deployments (envs/development, envs/staging, envs/production).


Getting Started​

  1. Copy the desired template folder to components/<component_type>/<component_name>/.
  2. Configure config_component.tfvars with the component name, code, team access and other required inputs.
  3. Submit a pull request to uk-dvt-gcloud-core-projects for automated plan and apply.