Commit Graph

4340 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
4aa99ea829 allow setting identities in egress policies (#1394) 2023-05-24 12:05:16 +02:00
Julio Castillo
d22bf2ec6b Update README.md 2023-05-24 11:34:21 +02:00
Gustavo Valverde
00cac9148a fix(stages): only add sandbox SA when sandbox feature is enabled (#1391)
If you have the `project_factory` feature enabled, but not the `sandbox` feature (as it's not a requirement on your org), when doing a `terraform apply` on `1-resman` it raises this errors as it's expecting the wrong feature when creating the sandbox SA

```
│ Error: Invalid index
│ 
│   on branch-sandbox.tf line 68, in resource "google_organization_iam_member" "org_policy_admin_sandbox":
│   68:   member = module.branch-sandbox-sa.0.iam_email
│     ├────────────────
│     │ module.branch-sandbox-sa is empty tuple
│ 
│ The given key does not identify an element in this collection value: the collection has no elements.
```
2023-05-24 05:17:35 +00:00
dependabot[bot]
d245088fa1 Bump requests in /blueprints/cloud-operations/network-dashboard/src (#1389)
Bumps [requests](https://github.com/psf/requests) from 2.28.1 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.28.1...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 05:37:15 +00:00
Julio Castillo
aa850ead5f Merge pull request #1387 from GoogleCloudPlatform/jccb/cb-default-sa
Add default Cloud Build SA to project module
2023-05-22 19:25:17 +02:00
Julio Castillo
fddf8b52bc Fix sort order 2023-05-22 19:11:33 +02:00
Julio Castillo
3e67fc00ca Add default Cloud Build SA to project module 2023-05-22 19:11:33 +02:00
Ana Fernandez
00efd6099f Merge pull request #1388 from GoogleCloudPlatform/afda16/firewall-validator-argument
Firewall Validator fix target_service_accounts ref
2023-05-22 15:49:38 +01:00
Ana Fernandez del Alamo
4129eb11ae Firewall Validator fix target_service_accounts ref
The Firewall Validator schema configuration contains a field
`target_service_account`. This should be updated to
`target_service_accounts` to match the `google_compute_firewall`
Terraform resource argument:

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_firewall#target_service_accounts
2023-05-22 15:28:48 +01:00
Ana Fernandez
8254303dc3 Merge pull request #1386 from GoogleCloudPlatform/afda16/logging-bucket-cmek
Support CMEK encryption in logging-bucket module
2023-05-22 15:28:15 +01:00
Ana Fernandez del Alamo
a5bbd09776 Support CMEK encryption in logging-bucket module
We have a use case, Local Controls, that requires to configure
CMEK with Logging buckets. This commit adds an optional variable to
configure CMEK in the `logging-bucket` module. By default the Logging
bucket won't use CMEK encryption.

To configure CMEK for Logging buckets it's also required to add the
correct permissions to the bucket service account. For more information
and a Terraform example, see:

https://cloud.google.com/logging/docs/routing/managed-encryption-storage

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/logging_project_bucket_config#example-usage
2023-05-22 15:12:27 +01:00
Ludovico Magnocavallo
e0911c6291 Add conditional org admin role to sandbox SA (#1385)
* add org admin conditional role to sandbox SA

* tfdoc
2023-05-21 10:48:41 +02:00
Roberto Jung Drebes
d2f0b17ec4 Allows groups from other orgs/domains (#1383)
* Allows groups from other orgs
2023-05-17 11:07:47 +02:00
Bharath KKB
47ae6dc7c3 chore: update mlops blueprint metadata (#1382) 2023-05-17 07:41:57 +00:00
lcaggio
40656a23de Minimal Data Platform - Make components optional (#1380)
make some components optional: Composer and Data Proc history server.
2023-05-16 14:08:03 +02:00
Alejandro Leal
6a89d71e96 Update to multiple README.md (#1379)
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
Julio Castillo
56132ffb03 Merge pull request #1378 from bluPhy/master
Updates to blueprints/data-solutions/shielded-folder
2023-05-16 07:28:33 +02:00
Alejandro Leal
31c1c8534a Updates to blueprints/data-solutions/vertex-mlops
Updates to blueprints/data-solutions/vertex-mlops
2023-05-15 19:41:55 -04:00
Alejandro Leal
a0beec747e README to blueprints/data-solutions/shielded-folder 2023-05-15 17:46:48 -04:00
Julio Castillo
5bd3aa4d5f Merge pull request #1375 from bluPhy/master
Several updates
2023-05-15 23:08:18 +02:00
Alejandro Leal
11f7f3efed Reverted variables.tf metadata.yaml README.md to commit 85407109c8 2023-05-15 16:45:13 -04:00
Alejandro Leal
65e6ef98fa Reverted README.md to commit 85407109c8 2023-05-15 16:34:18 -04:00
Alejandro Leal
a2a2942e2c Update README.md 2023-05-15 14:50:47 -04:00
Alejandro Leal
0ad21351c0 Merge branch 'master' into master 2023-05-15 14:25:42 -04:00
Natalia Strelkova
85407109c8 Merge pull request #1377 from GoogleCloudPlatform/fast-home-path-fix
Fixed home path
2023-05-15 13:29:02 +02:00
Natalia Strelkova
c4ec4868c2 Merge branch 'master' into fast-home-path-fix 2023-05-15 13:16:55 +02:00
Natalia Strelkova
f5b10fa3da Fixed home path 2023-05-15 12:55:43 +02:00
Alex Ostapenko
7861ea74b8 fixed permissions for security stage SA (#1376)
it should be able to use automation project
as a quota project, hence it needs `serviceusage.serviceUsageConsumer`
role
2023-05-15 10:20:33 +00:00
Julio Castillo
78ed6a8af6 Merge pull request #1372 from GoogleCloudPlatform/jccb/nat-rules
Cloud NAT rules support
2023-05-14 15:42:34 +02:00
Ludovico Magnocavallo
2cbd85c8e0 Merge branch 'master' into jccb/nat-rules 2023-05-14 15:29:52 +02:00
Manuel Aller
dd1e5dc463 added the export_public_ip_routes variable in the net-vpc-peering mod… (#1374)
* added the export_public_ip_routes variable in the net-vpc-peering module to control the google_compute_network_peering resource created

* adding period to the variable description
2023-05-14 15:29:24 +02:00
Alejandro Leal
87cd83f5c0 Several updates
Several updates
2023-05-13 23:51:46 -04:00
apichick
60d579be4d Merge pull request #1373 from apichick/cloud-functions-cpu
Made available CPUs configurable in Cloud Functions module
2023-05-13 09:59:35 +02:00
Julio Castillo
8e1e761577 Merge branch 'master' into cloud-functions-cpu 2023-05-13 09:45:10 +02:00
Miren Esnaola
4df6c90d12 Made available CPUs configurable in Cloud Functions module 2023-05-12 21:36:22 +02:00
Julio Castillo
d20a078134 Cloud NAT rules support 2023-05-12 16:20:38 +02:00
Julio Castillo
b153474468 Merge pull request #1365 from merit/master
feat(net-cloudnat): add toggle for independent endpoint mapping and dynamic port allocation
2023-05-12 15:38:00 +02:00
Jay Schwerberg
20b8002602 feat(net-cloudnat): add config_port_allocation configuration block 2023-05-11 12:20:43 -07:00
Julio Castillo
7d9f52298c Merge pull request #1367 from fawzihmouda/fawzihmouda/ncc-typo
fix routes priority typo
2023-05-09 16:26:24 +02:00
Julio Castillo
b8b6f0dcc2 Add versions.tf to ncc-spoke-ra module 2023-05-09 16:00:13 +02:00
Fawzi
ac349332c4 fix routes priority typo 2023-05-09 21:28:56 +10:00
lcaggio
3cc6c71e96 Add Minimal Data Platform blueprint (#1362)
Minimal Data Platform blueprint
2023-05-08 10:25:06 +02:00
Julio Diez
f0d928f08d Merge pull request #1364 from juliodiez/serverless-program
Cloud Run services in service projects
2023-05-08 07:28:15 +02:00
Julio Diez
0e9b685d9d Merge branch 'master' into serverless-program 2023-05-06 14:13:35 +02:00
Julio Diez
404920658c Adapt image width 2023-05-06 14:05:47 +02:00
Julio Diez
5454817919 Update tftest values in README 2023-05-06 14:01:28 +02:00
Julio Diez
b9e7bf7aaa Add Shared VPC use case to README 2023-05-06 13:55:25 +02:00
Julio Diez
eadc1c22a4 New use case: Cloud Run services in service projects
Shared VPC Ingress feature (public preview) allows to call a Cloud
Run service revision from the Shared VPC network that it is connected
to.
2023-05-06 13:03:20 +02:00
Julio Diez
bf182bf600 Merge pull request #1360 from juliodiez/serverless-program
Add support for Shared VPC in Cloud Run
2023-05-05 20:17:48 +02:00
Julio Diez
8c7b6b2410 Update README tfdoc 2023-05-05 19:52:41 +02:00