1348 Commits

Author SHA1 Message Date
Julio Castillo
496e2791c1 Update README-GCD.md 2026-02-10 11:56:42 +01:00
Ludovico Magnocavallo
fd0badd870 Revert "Update billing-0.yaml in gcd dataset (#3719)" (#3721)
This reverts commit abb2b209ea.
2026-02-10 10:32:12 +01:00
Julio Castillo
abb2b209ea Update billing-0.yaml in gcd dataset (#3719) 2026-02-10 10:23:47 +01:00
Ludovico Magnocavallo
a782b3e11b Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-10 07:41:40 +00:00
Julio Castillo
518d9d96aa Expose additional workforce identity attributes (#3717) 2026-02-09 15:30:58 +01:00
Simone Ruffilli
494ecba511 Refactor subnets mgmt in net-vpc-factory (#3715)
Refactor subnets mgmt in net-vpc-factory

This commit removes the ability to define subnets inline within the VPC `.config.yaml` across `net-vpc-factory` and enforces file-based subnet definitions using the `subnets/` subdirectory pattern.

Key changes include:
- **Module Updates:** Removed standard and non-standard inline subnet arguments (`subnets`, `subnets_private_nat`, `subnets_proxy_only`, `subnets_psc`) from the factory module's internal `vpcs` instantiation.
- **Schema & Docs:** Renamed `vpc.schema.json` to `vpc-factory.schema.json`, stripping inline subnet definitions from the JSON schema, and updated the module `README.md` to reflect the new file-based only approach.
- **Stage 2 Networking Configs:** Refactored datasets to migrate inline `subnets_proxy_only` definitions into standalone files like `subnets/prod-proxy.yaml`. Added a new exported output `subnet_ips` for downstream usage.

<!--
**Breaking Changes**

```upgrade-note
`fast/stages/2-networking`: Proxy-only subnets have been renamed for consistency - unfortunately this results in a nasty create-before-destroy which needs to be handled manually (i.e. delete the existing proxy-only-subnet first, either manually or with a targeted apply, then apply again)
```
-->
2026-02-09 10:51:43 +00:00
Ludovico Magnocavallo
6ca86ed94f Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-09 09:03:16 +00:00
Luca Prete
0ae7b9cca2 Ensure fast-links works on other *nix shells. (#3711)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-02-09 09:37:04 +01:00
Ludovico Magnocavallo
465ab5499a Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-07 11:17:09 +00:00
Ludovico Magnocavallo
439fc4ad3c Remove resman mentions from FAST files (#3709)
* wip

* nuke resman mentions
2026-02-07 11:56:10 +01:00
Vannick Trinquier
d499dc6928 Add support for bucket logging configuration in module gcs and project-factory (#3699) 2026-02-06 14:14:46 +07:00
Julio Castillo
f5958b9eae Merge branch 'master' into fast-dev 2026-02-05 12:25:31 +01:00
Liam Nesteroff
9debc3df6f feat: Add schema check to custom constraints, SCC custom modules, and observability configurations, along with their respective schema definitions. (#3705) 2026-02-05 12:20:25 +01:00
Samuele Perticarari
b2cbd7a3c6 fix: Fixed external broken links (#3703) 2026-02-04 14:35:37 +01:00
Ludovico Magnocavallo
8e7253ba11 add missing IAM interface attributes to service account module (#3700) 2026-02-04 12:07:06 +01:00
Simone Ruffilli
1404fb20da Net-vpc-factory (#3696)
This PR (re :D)introduces module net-vpc-factory, a minimal factory that deals with vpcs, subnets, and firewall rules creation, meant to be embedded into other factories, starting with 2-data-platform and 2-networking.
2026-02-04 11:36:58 +01:00
Ludovico Magnocavallo
0e760c3015 fix id in service module when reusing in a universe (#3698) 2026-02-03 18:28:57 +00:00
Ludovico Magnocavallo
bfb6caa73b Update README.md 2026-02-02 09:28:36 +01:00
Ludovico Magnocavallo
cdc5e7df45 prep v52.0.0 2026-01-30 16:00:47 +00:00
Ludovico Magnocavallo
12fd675c8c Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-30 15:59:10 +00:00
Ludovico Magnocavallo
1f8c2b36da prep v51.1.0 2026-01-30 15:58:47 +00:00
Ludovico Magnocavallo
30810146cf Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-30 15:54:45 +00:00
Luca Prete
3877a40119 Add PSC-I support to Agent Engine module (#3686) 2026-01-30 07:24:06 +03:00
Julio Castillo
c1e0c0a390 Clarify GCD install process (#3683) 2026-01-28 17:12:05 +03:00
Sven
e933340e02 feat: create new dataset classic-gcd (based on dataset classic) to enable deployment on GCD (#3679)
* feat: create classic dataset for GCD deployments

* Revert billing config to classic

* Revert GCD README

* Restore billing project in GCD

* Add basic alignment-test with classic dataset

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-27 16:59:18 +00:00
Julio Castillo
34415a8885 Update defaults.yaml (#3681) 2026-01-27 14:52:04 +00:00
Ludovico Magnocavallo
d95c4fcc3f Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-27 11:55:58 +00:00
Ludovico Magnocavallo
8490df96bf Use context syntax for VPC-SC access levels and policies (#3678)
* access levels as context

* ingress/egress context in module

* ingress/egress context in module

* update FAST

* tfdoc

* context test
2026-01-26 15:12:26 +00:00
Simone Ruffilli
75bc003960 Add KMS, Confidential Compute and Shielded VM support to 2-networking (#3676) 2026-01-26 14:11:12 +00:00
Isabel Povoa
cc10a29f78 Update README-GCD.md (#3677)
Updated names and status for clarity
2026-01-26 13:49:22 +00:00
Julio Castillo
889fad9536 Update GCD Readme (#3672) 2026-01-23 19:25:24 +01:00
lopezvit
6db25b1a08 Add support for the Assured Workloads in the project factory (#3666)
* Add support for the Assured Workloads in the project factory

* Fix test after requiring organization as a var
2026-01-23 13:21:48 +01:00
Vannick Trinquier
2ea4c27fe8 Add context support for constraints and additional controls for hardened datasets (IAM, GKE and others) (#3661) 2026-01-23 08:28:02 +07:00
kovagoadam
6f0e2ea5fb Updated documentation to better reflect fallback behaviour (#3621) 2026-01-21 11:42:54 +07:00
Roberto Jung Drebes
6e776238d9 Minor doc improvements for FAST bootstrap (#3643)
* docs(fast): improve stage 0 bootstrap and troubleshooting instructions
2026-01-20 19:43:12 +00:00
Julio Castillo
d46b39b717 Add missing context interpolations (#3659) 2026-01-20 20:21:56 +01:00
Julio Castillo
d9e1b924a1 Add asset_feeds to resman modules (#3658)
* Add asset_feeds to resman modules

* Add examples and update readmes

* Extend pubsub_topic context to project and folder modules

* Use pubsub_topic context for pubsub_destination

* Update readmes and add project-factory asset_feed example

* Update context tests

* Update schemas
2026-01-20 14:37:35 +00:00
Ludovico Magnocavallo
9d486022bf Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-20 08:47:01 +00:00
Ludovico Magnocavallo
558e552b5e Support org-level logging cmek config in schema, use context for org-level logging config, update schema docs. (#3657)
* support org-level logging cmek config in schema, update schema docs

* fix org logging identity context
2026-01-19 16:35:44 +01:00
Ludovico Magnocavallo
04de8f7de7 Support CMEK configuration in org module logging settings, expose identities in FAST context (#3656)
* support CMEK configuration in org module logging settings, expose identities as FAST contexts

* remove hash from inventories
2026-01-19 13:35:30 +01:00
Vannick Trinquier
8342558732 Implement various compliance configuration and principle of least privilege for hardened dataset (#3635) 2026-01-19 15:46:15 +07:00
Ludovico Magnocavallo
86268888b4 Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-14 15:06:31 +00:00
Julio Castillo
cff8a25c59 Introduce iam_by_principals_conditional (#3649)
* Introduce iam_by_principals_conditional

* Add iam_by_principals_conditional to project factory

* Update IAM ADR

* Update project factory readme

* Sync FAST schemas

* Update organization schema

* Add resman tests for iam_by_principals_conditional

* Update PF project-defaults.tf

* Update copyright
2026-01-14 11:16:07 +00:00
David Liebert
649cab0020 fixed bug where label field is ignored for policy based routes (#3648)
* fixed bug where label field is ignored for policy based routes

* Fix example and inventory

* Add missing schema

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-14 09:48:16 +00:00
Ludovico Magnocavallo
ed6b8529b8 Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-13 09:43:11 +00:00
Ludovico Magnocavallo
66bbaeb854 fix observability in stage 0 (#3646) 2026-01-13 09:34:59 +00:00
Ludovico Magnocavallo
032db2f902 expose bigquery kms in project schema (#3645) 2026-01-13 10:30:19 +01:00
Ludovico Magnocavallo
6a2a80786f Delete fast/stages/0-org-setup/WORKLOG.md 2026-01-09 13:07:46 +01:00
Eric Zhao
4ea87d5e6d feat: Implement target secure tags for hierarchical firewall policies (#3633)
* feat: Implement target secure tags for hierarchical firewall policies by integrating tag values and refining tag purpose data.

* docs: update variable
2026-01-09 09:11:04 +01:00
Julio Castillo
dd1be0fe14 Update README-GCD.md 2026-01-08 15:21:16 +01:00