Ludovico Magnocavallo
897c6ef8c3
Add support for Workload Identity to project module and project factory ( #3531 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
* wip
* project factory
* pf outputs
* iam templates will be added where ci/cd configs are managed
* fix merge conflicts
2025-11-17 07:31:21 +00:00
Ludovico Magnocavallo
87ed19bc47
Add support for Workforce Identity to organization module and org setup stage ( #3530 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
2025-11-17 08:00:30 +01:00
Vannick Trinquier
03521a5780
Prettify yaml controls ( #3525 )
2025-11-13 14:21:36 +07:00
Ludovico Magnocavallo
5270586a8e
fix schema doc tool, fix schema errors, regenerate schema docs ( #3524 )
2025-11-12 08:50:52 +01:00
Simone Ruffilli
e44b23111e
Adds support for custom learned routes to net-vpn-ha ( #3523 )
2025-11-11 13:55:23 +00:00
Ludovico Magnocavallo
602e1731c9
Replace leftover schema links with actual files ( #3522 )
...
* replace schema links with schemas
* vpc-sc stage
2025-11-11 11:57:51 +01:00
Ludovico Magnocavallo
93063aaa9a
changelog
2025-11-11 09:16:15 +00:00
Ludovico Magnocavallo
3289a6ff27
prep v48.0.0
2025-11-11 09:13:44 +00:00
Ludovico Magnocavallo
76eec666ea
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-11 09:10:56 +00:00
Ludovico Magnocavallo
0d0e086cfc
prep v47.1.0
2025-11-11 08:59:19 +00:00
Ludovico Magnocavallo
525b7be739
module KMS autokey context namespace fixes ( #3521 )
2025-11-11 08:46:21 +00:00
Vannick Trinquier
1f0940a716
Update yaml controls to match max line-length ( #3520 )
...
* Update yaml controls to match max line-length
* Add test for stage 0 with hardened datasets
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-11-11 07:00:49 +00:00
Ludovico Magnocavallo
192788cdb4
Update README.md
2025-11-11 07:40:55 +01:00
apichick
0fd01c6552
Added missing parameters in trigger ( #3519 )
2025-11-11 06:40:32 +00:00
Ludovico Magnocavallo
fc7aa71ada
Add support for KMS key creation to project factory ( #3518 )
...
* initial implementation
* context
* tfdoc
* add support for autokey to projects
* fix typo
2025-11-11 07:23:50 +01:00
Vannick Trinquier
15a5486a1e
Add hardened controls for gke, networking and monitoring alerts recommended in CIS Benchmarks for GCP ( #3484 )
2025-11-10 11:06:25 +00:00
Ludovico Magnocavallo
ba77c6170c
Allow configuring data access logs from org/folder/project schemas ( #3516 )
...
* modules and FAST support
* module tests
* fast stage 0 dataset
* tfdoc
2025-11-10 10:19:21 +00:00
Ludovico Magnocavallo
7e32058010
[WIP] Add support for KMS autokey ( #3515 )
...
* wip
* folder module
* project factory schema
* remove spurious project template
* gcs and compute-vm modules
* variable order
2025-11-09 10:46:28 +01:00
Ludovico Magnocavallo
16da9ffaad
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-08 17:07:49 +00:00
Ludovico Magnocavallo
81010a97c0
Rename project and VPC resources in net stage datasets ( #3513 )
...
* vpcsc tfvars optional in net
* net project/vpc renames
* fix provider diffs in inventories
2025-11-08 13:38:28 +01:00
Simone Ruffilli
1363d2f765
Sets a default for delete_default_routes_on_create in 2-networking ( #3511 )
2025-11-07 08:31:45 +00:00
Wiktor Niesiobędzki
b3df16fee8
Add support for ARM based VMs
2025-11-07 08:46:11 +01:00
Wiktor Niesiobędzki
6567d63d92
Add support for hyperdisk performance options
2025-11-07 08:46:11 +01:00
Luca Prete
e25d5881f9
[FAST] fix host project names in sample yaml files in project factory ( #3508 )
2025-11-06 23:02:20 +01:00
Ludovico Magnocavallo
6f644c886f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-06 17:20:17 +00:00
Wiktor Niesiobędzki
fb4dfccd17
Another reason not to try
2025-11-06 15:10:30 +01:00
Julio Castillo
002349c35b
Allow defining org-level pam_entitlements in 0-org-setup ( #3506 )
2025-11-05 19:27:59 +01:00
Ludovico Magnocavallo
68c8538fd6
Refactor FAST VPC-SC docs, ensure cooperative VPC-SC resource control works ( #3504 )
...
* stage README
* vpc-sc in security stage
* vpc-sc for networking
* vpc-sc for net
* vpc-sc for pf
* vpc-sc for pf
* spelling
* inventory
2025-11-05 13:19:02 +00:00
Wiktor Niesiobędzki
2a03c1b97e
Password for initial_user for AlloyDB is now rquired
...
Details: https://github.com/GoogleCloudPlatform/magic-modules/pull/15596
Note: as of now, validation doesn't allow `known after apply` values for
passwords
2025-11-05 13:08:11 +01:00
Ludovico Magnocavallo
5946433737
prep v47.0.0
2025-11-05 08:28:44 +00:00
Ludovico Magnocavallo
fc538a15cc
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-05 08:26:53 +00:00
Ludovico Magnocavallo
adec737e2a
prep v46.1.0
2025-11-05 08:24:06 +00:00
Ludovico Magnocavallo
f4a70aecbd
changelog
2025-11-05 06:54:52 +00:00
Ludovico Magnocavallo
a4ff84838a
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-05 06:53:32 +00:00
Ludovico Magnocavallo
8691a1e21d
changelog
2025-11-05 06:52:18 +00:00
Ludovico Magnocavallo
f50a78d2da
changelog
2025-11-05 06:51:06 +00:00
Wiktor Niesiobędzki
d5bc59a238
Fix E2E tests.
...
* Disable tests for VPC connector and Cloud Functions, CFs are not
supporrted in the default region
* fix permissions to secrets for Cloud Run
* add permissions admin permissions to any SA within project to
`var.bucket`
* add permissions to access the secret to any SA within project to
secrets created by fixture
* disable custom roles in E2E tests, as `var.organization_id` is not the
same org, within which projects are created in E2E
2025-11-04 10:23:55 +01:00
lcaggio
64632eb957
BigQuery reservation ( #3441 )
...
* First Commit.
* Improve
* Fix README
* Fix lint
* fix
* Fix Tests.
* Improve output
* fix yaml lint
* Fix
* Fic test
* Fix
* Fix output
2025-11-03 11:36:42 +01:00
Ludovico Magnocavallo
cafb8f8aec
Revert "Add support for project templates to projects variable in project fac…" ( #3499 )
...
This reverts commit ecbf890889
2025-11-03 11:35:29 +01:00
Ludovico Magnocavallo
ecbf890889
Add support for project templates to projects variable in project factory module ( #3498 )
...
* support project template in projects variable
* variable defined projects go through normalization too
2025-11-03 09:53:14 +00:00
Ludovico Magnocavallo
dddea78e49
add resource set for org setup projects to vpc sc stage ( #3497 )
2025-11-03 10:36:40 +01:00
Ludovico Magnocavallo
8bfc3cf579
Pass email addresses context to organization module in stage 0 ( #3496 )
...
* pass email addresses context to organization module in stage 0
* depend essential contacts on org policy resource
2025-11-03 08:43:15 +00:00
Ludovico Magnocavallo
b6b446d5b3
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-03 07:54:50 +00:00
Ludovico Magnocavallo
0a2cc758ac
Essential contacts in schemas, and email context substitutions ( #3495 )
...
* modules
* fast
* duplicate diff
* fix contacts in FAST stage 0 datasets, update contacts in YAML schemas
2025-11-03 08:53:29 +01:00
lhoet-google
153046307f
Okta as Workload identity provider ( #3494 )
...
* Explain cursed Create Before Destroy
* okta for workload idenitty provider
* changed readme with okta wif
* fix readme for okta wif
* 0 org setup readme passing check_documentation.py
* fix error in readme for 0-org-setup
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Leonardo Hoet <leohoet98@gmail.com >
Co-authored-by: mwillig <mwillig@google.com >
2025-11-01 09:00:06 +01:00
Ludovico Magnocavallo
f9f015a692
Implement precondition check in project factory to ensure declared templates exist ( #3493 )
...
* pf template check
* tfdoc
* test inventories
2025-10-31 15:32:33 +00:00
Wiktor Niesiobędzki
0a70b9dd2c
Explain cursed Create Before Destroy
2025-10-30 19:36:40 +01:00
Ludovico Magnocavallo
90b6e312d3
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-30 16:55:28 +00:00
Ludovico Magnocavallo
c765043c5c
add the self project key to service account namespaces ( #3490 )
2025-10-30 16:42:13 +00:00
Ludovico Magnocavallo
b9f9446e38
exclude folder config files from project factory paths ( #3488 )
2025-10-30 17:25:14 +01:00
