Ludovico Magnocavallo
85b0871085
Add net-vpc-factory and starter-gcd dataset to 0-org-setup, fix context in net-vpc-factory ( #3860 )
...
* feat(fast/0-org-setup): integrate net-vpc-factory into stage 0
* initial starter dataset
* starter pack
* fix(fast/0-org-setup): correct factory vpcs paths definition and update test inventory
* feat(fast/0-org-setup): add VPC and subnet outputs and update stage tfvars
* test(fast/0-org-setup): update gcd starter defaults and regenerate inventory
* fix(modules/net-vpc-factory): remove internal defaults logic and pass context correctly
* fix typo in dataset fw rule, add missing boilerplate, set sane defaults for net vpc factory
* terraform fmt
* tfdoc, copyright year
* schema docs
* yamllint
2026-04-13 09:42:03 +02:00
Julio Castillo
1e82683b15
Add service connection policies to net-vpc ( #3667 )
2026-01-23 12:51:00 +00:00
Vannick Trinquier
ca413b8aa8
Add support to VPC flow logs for PSC subnet ( #3639 )
2026-01-12 15:56:14 +07:00
David Liebert
5374899b36
added support for labels with google_compute_global_address resource ( #3622 )
...
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-07 13:19:48 +00:00
Ludovico Magnocavallo
7c920d7d35
Add support for context to net-lb-int net-vpc-firewall and net-vpc module ( #3419 )
...
* net-lb-int
* net-vpc-firewall
* net-vpc
* net-vpc
2025-10-16 05:54:14 +00:00
Julio Castillo
ea445fa7e4
Add support for VPC internal ranges to modules/net-vpc ( #3318 )
...
* Add support for VPC internal ranges to modules/net-vpc
* Fix linting
* Fix variable order
* Fix README
* Sort outputs.
* Fix validation for terraform < 1.13
2025-09-11 17:42:54 +00:00
Ludovico Magnocavallo
36648b6b63
FAST light implementation ( #3255 )
...
* data wip
* wip data
* update org schema, add note on expansion
* all schemas, workload notes
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* wip
* data wip
* wip
* wip
* wip
* wip
* org module IAM context (using lookup)
* new-style context expansion in project IAM
* remove spurious file
* project module contexts
* finalize context replacement format for project module
* revert org module changes
* fix tag id interpolation in project
* fix tag id interpolation in project
* organization module context
* organization context test
* context expansion for folder tag bindings
* test context expansion for tag bindings
* service account module context
* simplify context local
* context for iam service account
* nuke blueprints
* remove links to blueprints
* vpc sc context in project module
* Add context to GCS module
* Add inline deps to plan_summary script
* Make context a top-level variable for folder, organization, sa
* Add add context top-level to VPC-SC
* move context out of factories_config variable
* tfdoc
* fix merge
* fix merge
* fix examples
* net-vpc module context
* add parent ids to folder context
* rename folder parent context
* fix folder parent check
* new project factory stub
* wip
* wip
* refactor defaults
* project iam
* bueckts and service accounts
* start adding context replacements
* better test data
* automation resources for folders and projects
* automation
* add support for project id interpolation
* first tested apply
* improve IAM description in gcs module
* add context to billing account module
* add notification channels to billing account module context
* add billing budgets to new pf
* schemas and defaults
* bootstrap wip
* bootstrap wip
* bootstrap wip
* pf outputs
* pf fixes
* fix pf sample data
* bootstrap lite fixes
* add locations to organization module contexts
* bootstrap lite fixes
* org fixes, billing accounts
* fix default project parent
* bootstrap lite wip
* add locations to gcs module context
* add context support to logging bucket module
* add context to pubsub module
* split out iam variables in gcs module
* fix logging bucket context test
* bootstrap log sink destinations
* streamline logging-bucket module variables
* fix logging bucket context test
* align logging bucket module interface in fast bootstrap
* add support for project-level log buckets to project factory
* support full context expansion in organization module log sinks
* log buckets in fast-lite bootstrap
* make og sink type optional in organization module
* log sinks in fast-lite bootstrap
* set tag values in factory context
* bootstrap lite data
* output files schema
* billing account schema
* output files
* output providers
* gcs output files
* boilerplate
* tflint
* check documentation
* check docs
* fix project module parent variable validation
* fix log bucket examples
* allow null parent in project module
* silence folder test errors
* fix billing account sink example
* fix project example
* fix billing account module
* fix folder tests
* fix FAST
* fix fast
* tfvars outputs
* wif
* cicd service accounts
* cicd
* allow defaults in context, minimal org policies
* support gcs managed folders in project factory and bootstrap lite
* support prefix in provider output files
* rename bootstrap stage
* gitignore
* gitignore
* security folder, billing IAM
* wip tfvars
* fix typo
* security IAM
* control tag iam/context via variables in organization module
* split tag creation from tag IAM to avoid circular refs
* port organization module tag changes to project module
* implement new-style context expansion in vpc-sc module
* fix fast vpc-sc tests
* boilerplate
* vpc sc stage
* schemas
* fast-lite compatibility for vpc sc stage
* make log project number optional in vpc-sc stage
* networking
* networking
* networking
* networking
* rename and move new stage under fast
* clone pf tests
* use context replacement for internal notification channels in billing account module
* support service agents in project module iam context replacements
* support service agents in project module iam context replacements
* add support for kms keys to project module context
* experimental pf example test and fixes
* fix schemas
* fix tests
* tfdoc
* tfdoc
* pf config
* experimental pf
* remove redundant dot from gcs managed folder IAM keys
* bootstrap experimental test
* project factory exp stage test
* skip tflint for bootstrap experimental test
* tflint
* fix gcs test
* documentation work
* documentation work
* Update README.md
* tfdoc
* tfdoc
* readme
* tfdoc
* readme
* readme
* readme
* readme
* support universe in pf exp projects
* missing universe service agents
* org policies import, non-admin billing IAM
* todo
* fix test
* custom constraints
* fast classic dataset
* fix test data
* context replacements in billing module log sinks
* fix typo
* add support for billing log sinks
* update docs
* readme
* cicd fix and test
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-09-02 08:38:57 +02:00
Liam Nesteroff
f07e4f64e9
Standardise reuse variable from project module and implement for net-vpc ( #3205 )
...
* exposing the network_id from the net-vpc module for use with tag bindings
* convert vpc_create to vpc_reuse
* Changed the reuse vars to standardised attributes
* fixed readme tests and schemas
* modified apigee blueprint to use vpc_reuse with network_id passthrough
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-07-03 09:12:05 +10:00
Chris McCoy
c33a4b57c1
Add support for IPv6 only subnets and IP collections
2025-06-20 18:22:08 +02:00
Ludovico Magnocavallo
c8e4179f2b
Add custom routes for directpath to net-vpc module ( #2966 )
...
* add custom routes for directpath to net-vpc module
* blueprint tests
* blueprint tests
* blueprint tests
* fast tests
* tfdoc
* module examples
2025-03-19 10:22:47 +00:00
Ludovico Magnocavallo
cecce6b3a0
Allow customizable prefix in net-vpc module PSA configs ( #2535 )
...
* allow customizable prefix in net-vpc module PSA configs
* fix peered domain key
2024-08-28 09:24:13 +00:00
jamesdalf
cc5c04f62a
net-vpc module add overlap CIDR subnet attribute ( #2521 )
...
* add subnet allow_subnet_cidr_routes_overlap
* allow_subnet_cidr_routes_overlap default null
* set default null for factory subnets
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2024-08-26 19:48:26 +00:00
Simone Ruffilli
d66a358b6d
Add context to net-vpc (subnets) factory ( #2444 )
2024-07-24 15:54:20 +02:00
Simone Ruffilli
9a26fe8635
Add support for reserved_internal_range in net-vpc ( #2275 )
...
Adds support for reserved_internal_range to net-vpc
2024-05-14 22:19:45 +03:00
Julio Castillo
c58850c096
Add Hybrid NAT support ( #2261 )
...
* Updates to support hybid NAT
* Fix readme
* Fix variable order
2024-05-09 13:24:41 +00:00
simonebruzzechesse
b6771ae7ad
fix cloud sql PSA after module upgrade ( #2226 )
...
* fix cloud sql PSA after module upgrade
add proxy subnet for ILB
* fix cloud run service accessible from public url in case the service is privately deployed
* add deletion_policy variable in psa_configs for net-vpc module
fix destroy issue with phpIPAM blueprint
2024-04-19 12:41:02 +02:00
Ludovico Magnocavallo
9414779cc2
Allow multiple PSA service providers in net-vpc module ( #2218 )
...
* allowing multiple PSA service providers in net-vpc module
* tfdoc
* tfdoc
* Add tfvars/yaml tests
* fix module and tests
* re-enable inventory
* merge fix
* Add multiple PSA test case
* fix cloudsql example
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-04-16 15:02:36 +00:00
Amela Spica
fb4a661f54
VPC module - PSA configurable service producer ( #2190 )
...
* added configurable service provider for PSA in VPC module
* fmt
* readme update
* description fix based on PR comment
* readme regenerated
2024-04-02 20:23:25 +02:00
Ludovico Magnocavallo
da68d3cfc4
Add support for PSC network attachments and interfaces in modules ( #2125 )
...
* support network attachments in net-vpc module
* support network attachments in net-address module
* fix examples
* fix examples
* add support for psc interfaces to compute-vm module
2024-03-04 10:12:11 +01:00
Simone Ruffilli
ca3c86cb5c
Add support for policy based routes to net-vpc ( #1926 )
...
* Add support for PBR to net-vpc
2023-12-13 15:19:40 +00:00
Julio Castillo
9ab3b49f69
Add PSA peered domains support to net-vpc ( #1741 )
...
* Add PSA peered domains support to `net-vpc`
* Fix tests
2023-10-06 15:31:32 +00:00
Julio Castillo
616c6fbc48
Fix subnet iam_bindings to use arbitrary keys
2023-09-15 14:30:27 +02:00
Julio Castillo
f19ab4872f
Embed subnet-level IAM in the variables controlling creation of subnets
...
This moves the top-level `iam`, `iam_bindings` and
`iam_bindings_additive` variables into subnet-level attributes. This
change also allows setting permissions to PSC or proxy-only subnets
As part of this change, the factory interface is more aligned with the
rest of the modules using a `factories_config` variable. In the future
we can add a cidrs template similar to the firewall policy module
2023-09-15 00:27:55 +02:00
Dave Gulli
5f2bc7fa92
refactored to recommended method
2023-09-12 14:58:49 +10:00
Dave Gulli
adff09aa24
linting error
2023-09-11 20:45:32 +10:00
Dave Gulli
7e0827db53
re-ordered variables per lint error
2023-09-11 20:33:08 +10:00
Dave Gulli
8c264da200
small commits to add variables, append tests
2023-09-11 20:14:17 +10:00
Julio Castillo
a6640e5959
Make net-vpc variables nullable
2023-09-06 09:57:34 +02:00
Ludovico Magnocavallo
819894d2ba
IAM interface refactor ( #1595 )
...
* IAM modules refactor proposal
* policy
* subheading
* Update 20230816-iam-refactor.md
* log Julio's +1
* data-catalog-policy-tag
* dataproc
* dataproc
* folder
* folder
* folder
* folder
* project
* better filtering in test examples
* project
* folder
* folder
* organization
* fix variable descriptions
* kms
* net-vpc
* dataplex-datascan
* modules/iam-service-account
* modules/source-repository/
* blueprints/cloud-operations/vm-migration/
* blueprints/third-party-solutions/wordpress
* dataplex-datascan
* blueprints/cloud-operations/workload-identity-federation
* blueprints/data-solutions/cloudsql-multiregion/
* blueprints/data-solutions/composer-2
* Update 20230816-iam-refactor.md
* Update 20230816-iam-refactor.md
* capture discussion in architectural doc
* update variable names and refactor proposal
* project
* blueprints first round
* folder
* organization
* data-catalog-policy-tag
* re-enable folder inventory
* project module style fix
* dataproc
* source-repository
* source-repository tests
* dataplex-datascan
* dataplex-datascan tests
* net-vpc
* net-vpc test examples
* iam-service-account
* iam-service-account test examples
* kms
* boilerplate
* tfdoc
* fix module tests
* more blueprint fixes
* fix typo in data blueprints
* incomplete refactor of data platform foundations
* tfdoc
* data platform foundation
* refactor data platform foundation iam locals
* remove redundant example test
* shielded folder fix
* fix typo
* project factory
* project factory outputs
* tfdoc
* test workflow: less verbose tests, fix tf version
* re-enable -vv, shorter traceback, fix action version
* ignore github extension warning, re-enable action version
* fast bootstrap IAM, untested
* bootstrap stage IAM fixes
* stage 0 tests
* fast stage 1
* tenant stage 1
* minor changes to fast stage 0 and 1
* fast security stage
* fast mt stage 0
* fast mt stage 0
* fast pf
2023-08-20 09:44:20 +02:00
Ludovico Magnocavallo
def2f476d1
Add support for conditions to iam_members module variables ( #1594 )
...
* project
* data-catalog-policy-tag
* dataproc
* folder
* iam-service-account
* kms
* net-vpc
* organization
* source-repository
* dataplex-datascan
2023-08-15 16:28:23 +02:00
Ludovico Magnocavallo
adf2621727
Add new iam_members variable to IAM additive module interfaces ( #1589 )
...
* resource management modules
* data catalog policy
* dataproc
* service account
* kms
* net-vpc
* source repository
* dataplex datascan
* service account module variable order
2023-08-14 09:54:50 +00:00
Ludovico Magnocavallo
aecba0bbd0
Add support for ipv6 to net-vpc module ( #1568 )
...
* add support for ipv6
* fix test
2023-08-05 13:07:26 +02:00
Julio Castillo
bbe778e095
Allow custom route descriptions in net-vpc module
...
Related: #1491
2023-08-04 14:13:03 +02:00
Ludovico Magnocavallo
86cc6eee4c
disable googleapi routes creation when vpc is not created ( #1489 )
2023-07-03 09:10:12 +02:00
Ludovico Magnocavallo
7bd6e5d57b
Small fixes ( #1425 )
...
* fix serverless connector plugin outputs
* add internal and lb to allowed ingress org policy
* add validation condition on cloud run ingress settings
* tfdoc
* plugin tfdoc
* allow disabling googleapis routes with a single instruction in net-vpc
* fix variable def
* fix variable description
* fix cr variable validation
* fix usage of create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
Julio Castillo
0888cce3a5
Rename to create_googleapis_routes
2023-05-26 16:43:43 +02:00
Julio Castillo
1e8c58c88e
Reuse existing logic to create default routes
2023-05-26 12:01:38 +02:00
Julio Castillo
7a91a7e41c
Add default googleapi route creation to net-vpc
2023-05-26 10:55:35 +02:00
Fawzi
3c4254fc1f
update firewall_policy_enforcement_order variable
2023-04-11 22:08:41 +10:00
Fawzi
db3c48736c
add firewall enforcement variable to VPC
2023-04-10 01:28:12 +10:00
Ludovico Magnocavallo
8a8b7ea35f
Add support for iam_additive and simplify factory interface in net VPC module ( #1259 )
...
* initial implementation, no tests
* change interface, align tests
* add examples ToC
* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo
29cde275f0
fix backwards compatibility for vpc subnet descriptions ( #926 )
2022-10-28 08:13:04 +02:00
Ludovico Magnocavallo
41c416b55e
make mtu default explicit in variable description
2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo
4fa1dc431d
Refactor net-vpc module for Terraform 1.3 ( #880 )
...
* module tests pass
* doc examples
* refactor blueprints
* fast stages
* fix comment typo
* fix module factory test
2022-10-14 11:02:33 +02:00
Aleksandr Averbukh
62a299a6f5
Deprecate subnets_l7ilb variable, add support for proxy_only and psc subnets.
2022-04-13 16:38:47 +02:00
Aleksandr Averbukh
6ab121a836
Add support for Private Service Connect and Reginal Managed Proxy subnets for net-vpc module
2022-04-12 12:57:33 +02:00
Ludovico Magnocavallo
fef3ed8c93
Fix missing service networking identity in project, PSA ( #585 )
...
* test
* test
* test
* fix
* tfdoc
* fix tests
* fix tests
2022-03-17 14:29:28 +01:00
Luca Prete
7c3d9beced
[ #576 ] net-vpc - Add the ability to export/import custom routes throu… ( #577 )
2022-03-11 14:40:44 +01:00
Ludovico Magnocavallo
c91802f501
Change psa type in net-vpc, fix psa in fast net stages ( #545 )
...
* change psn type in net-vpc, fix psa in fast net stages
* fix doc examples
* psn ---> psa
2022-02-15 09:24:27 +01:00
Simone Ruffilli
abb6b50a46
Add periods at the end of each description field where missing ( #478 )
2022-01-31 10:45:34 +01:00
