Commit Graph

1936 Commits

Author SHA1 Message Date
apichick
0f28d266dd Secure source manager (#2569)
* Added secure-source-manager-instance module

* Fixes after review
2024-09-19 10:29:01 +00:00
apichick
8e0dac84f9 Bigquery dataset routines (#2570)
* Added routines to bigquery-dataset module

* Fixes after review
2024-09-19 09:13:32 +00:00
Ludovico Magnocavallo
cf5bba8b7f support secret-level expire time in secret manager module (#2583) 2024-09-19 10:35:43 +02:00
Wiktor Niesiobędzki
679218cde3 Fix e2e testsss for cloud run 2024-09-10 12:04:39 +02:00
Simone Ruffilli
7f8a02a405 Add support for google provider 6.x (#2536)
* Add support for google provider 6.x

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-05 10:35:58 +00:00
Julio Castillo
ba3e1be416 Bump provider to 5.43.1 ahead of next release (#2557) 2024-09-04 19:58:07 +02:00
oluakingcp
8a56836078 Updated the auto pilot gke security posture configuration (#2556)
* updates the auto-pilot cluster configuration for security posture vulnerability mode

* updates the auto-pilot cluster configuration for security posture vulnerability mode

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:53:07 +02:00
oluakingcp
0e2127979f included the security_posture configuration (#2553)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:29:18 +02:00
Wiktor Niesiobędzki
44a4268afc Fix E2E tests 2024-09-04 12:16:50 +02:00
Wiktor Niesiobędzki
e1c1ed3a23 Add IAM dependencies to outputs 2024-09-04 12:16:50 +02:00
Ludovico Magnocavallo
eb89c62b5f prepare v34.0.0 release (#2543) 2024-08-30 10:06:33 +02:00
jamesdalf
8ca3bc390f Module net-vpc fix for reserved ranges (#2538)
* fix the reserved ranges

* updated readme

* formatting

* fix example test

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-08-30 05:10:28 +00:00
okguru1
dc0a27b8c2 Exposing aws_v4_authentication configuration in global external alb (#2539)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes

* expose aws_v4_authentication configuration option

* terraform fmt

* update readme

* use dynamic block and optional for new variable
2024-08-29 13:45:50 +00:00
Simone Ruffilli
09de7d67ff Add send_secondary_ip_range_if_empty=true to google_compute_subnetwork (#2537) 2024-08-28 14:00:08 +00:00
luigi-bitonti
815abc0afa Added max_run_duration field to compute_vm modules (#2533)
Co-authored-by: Luigi Bitonti <luigi.bitonti@nttdata.com>
2024-08-28 09:36:45 +00:00
Ludovico Magnocavallo
cecce6b3a0 Allow customizable prefix in net-vpc module PSA configs (#2535)
* allow customizable prefix in net-vpc module PSA configs

* fix peered domain key
2024-08-28 09:24:13 +00:00
kejti23
864a41cb20 Added ownership_scope argument for billing account (#2528)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-08-28 09:08:14 +00:00
Julio Castillo
f57635d044 Add managed folders suports to gcs module (#2530)
* Add RPO, make versioning dynamic

* Add manaed folders

* Change autoclass and cors defaults to null

* Update README

* Add iam_by_principals

* Add managed folders var description

* Remove need for managed folders to end in /

* Add inventory to example

* Update readme

* Fix FAST tests
2024-08-28 07:30:52 +00:00
Julio Castillo
d4e727a482 Update stable provider too (#2531) 2024-08-28 08:49:46 +02:00
Julio Castillo
b3f272915e Update 20230816-iam-refactor.md 2024-08-27 18:34:05 +02:00
Julio Castillo
bab85c88ba Bump provider to last release of version 5 (#2525)
* Bump provider to last release of version 5

* Remove default-versions copy in test env setup

* Use file instead of symlink in tools/lookfile

* Remove default-version reference

* Removed unused code
2024-08-27 16:50:59 +02:00
Emile Hofsink
6cf0e5754b feat: Add security_policy to backend service configuration (#2523)
* feat: Add security_policy to backend service configuration

* chore: updated README from tfdoc.py
2024-08-27 14:19:14 +02:00
jamesdalf
cc5c04f62a net-vpc module add overlap CIDR subnet attribute (#2521)
* add subnet allow_subnet_cidr_routes_overlap

* allow_subnet_cidr_routes_overlap default null

* set default null for factory subnets

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-08-26 19:48:26 +00:00
Artem Bogdantsev
1331e5655b project-module-cmek (#2518)
Yet another typo was found
2024-08-23 17:16:17 +00:00
Artem Bogdantsev
38c87debde project-cmek-smallfix (#2517)
A nasty typo which causes the module to crash
2024-08-23 18:39:21 +02:00
V0idC0de
548788dba1 fix: Make keys for local.projects consistent (#2516)
Projects configured in `folders_data_path` have their filename as key, whereas those from `projects_data_path` have their path, relative to `projects_data_path` as key.
This causes different behavior when defining `local.projects` and subsequently calling `module.projects`, unless `name` is specified.
2024-08-23 15:47:51 +00:00
Luca Prete
7f460c425b Add ca pool object to certification-authority-service module (#2515) 2024-08-23 09:43:01 +00:00
Simone Ruffilli
9eafd201dd Fixes gateway_security_policy in net-swp 2024-08-22 10:25:09 +02:00
okguru1
fe55217887 Add support for disable default snat (#2508)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes
2024-08-21 09:43:27 +00:00
Simone Ruffilli
e82cc35f50 net-swp module cleanup (#2510)
* net-swp: add support for PSC SA
* Doc updates
2024-08-21 11:28:20 +02:00
Ludovico Magnocavallo
ad5de9b7ea Refactor FAST project factory and supporting documentation (#2505)
* untested

* teams pattern

* rework doc

* README

* boierplate

* tflint

* Fix tflint for project factory

* Correct path to pf

* resman changes

* fix factory variable default

* fix links

* project factory module substitutions

* tflint

* stage test

* tfdoc

* rename schema, address review comments

* README typos and wording

* tfdoc

* review comments

* remove test from yaml

* revert output workflow changes

* fix sa reference errors

* tfdoc

* pf tag roles

* schema validation

* pf tag roles

* avoid null values in pf context

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-08-20 16:45:42 +00:00
arnodasilva
dff209f565 fix(modules/kms): use the google_tags_location_tag_binding Terraform resource to bind tags on KMS key rings (#2501) 2024-08-20 05:43:18 +00:00
Julio Castillo
0420dec32f Add deletion_policy to project module (#2502)
* Replace skip_delete with deletion_policy

* Fix blueprints

* Update apigee blueprint readme

* Remove skip_delete from test inventories
2024-08-16 18:33:39 +02:00
Cooper van Wijck
3cf8889967 Add name overrides for Internal and External Load Balancers (#2420)
* Add override_name optional variable

* Add override name optional variable

* Allow override for each forwarding rule

* Add optional override_name variable to forwarding_rules_config

* Remove duplicate (unused) variable override_name

* Add optional override_name variable for network peering

* Add optional override_name variable for network peering

* Formatting

* Update VPN tunnel interface name handling for override

* Update bgp peer handling for override

* Added renaming for both sides of peering

* Fix precondition

* Remove spurious folders

* Apply suggestions to peering module

* Use coalesce and name (instead of override_name)

* remove unneeded null

* Revert windows style slashes in readme

* Fix more null checks

* Fix unneeded null checks in net-lb-int

* Change override_name back to name in the rest of the locations, bgppeer, tunnel and interface names

* Fix linter

* Update READMEs

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: unknown <jack@JACK-PC.lfn.arpa>
Co-authored-by: jacklever-hub24 <jack.lever@hub24.com.au>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-08-16 08:45:29 +02:00
Ludovico Magnocavallo
d8a5c42b82 firewall policy module schema (#2499) 2024-08-11 10:12:03 +02:00
Ludovico Magnocavallo
7be042c706 dns rpz factory schema (#2498) 2024-08-10 17:19:28 +02:00
Ludovico Magnocavallo
3efb368b6c net vpc firewall factory schema (#2497) 2024-08-10 15:04:50 +02:00
Luca Prete
f15442d2f4 [fix] certificate authority service returning bad pool id (#2496) 2024-08-09 18:20:53 +02:00
Luca Prete
d415aaf84b [fix] Fixes errors in certificate-authority-service module (#2493) 2024-08-09 14:58:53 +00:00
Nathalie
d5210d599f ensure dns_keys output freshness (#2495)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-08-09 14:33:54 +00:00
Ludovico Magnocavallo
db044296e1 Additional module schemas (#2494)
* resman modules

* billing account

* net-vpc subnets

* fast schemas and subnet validation
2024-08-09 13:58:05 +00:00
Ludovico Magnocavallo
4a61dba841 organization module factory schemas (#2491) 2024-08-09 10:22:57 +00:00
Wiktor Niesiobędzki
70bd037629 Add IAM member prefix validation to variables.tf 2024-08-09 12:08:22 +02:00
Wiktor Niesiobędzki
c27f634314 Bind schemas to factory files, add support for groups in VPC-SC schema
https://cloud.google.com/vpc-service-controls/docs/release-notes#July_31_2024
2024-08-09 12:08:22 +02:00
Julio Castillo
f1607f68a9 Extend test collector to include yaml files under tests/schemas/ and fast data files (#2489)
* Extend test collector to include yaml files in tests/schemas/

* Silence linter

* Simplify yaml schema test names

* Vaidate FAST data files schema
2024-08-09 10:59:00 +02:00
Julio Castillo
9386764f66 Introduce YAML schema validation for YAML examples (#2488)
* Add schema key to yaml examples

* Update testing requirements
2024-08-08 23:09:22 +02:00
Wiktor Niesiobędzki
251339de6e Fix failing tests for CloudSQL 2024-08-08 20:16:52 +02:00
Ludovico Magnocavallo
c5fcbbfca8 Project factory module JSON schemas (#2485)
* folder and project schemas

* budget schema
2024-08-08 18:43:11 +02:00
Luca Prete
092053b517 Adds a new certification authority service (CAS) module (#2481) 2024-08-08 09:55:48 +02:00
Julio Castillo
9880c0b64d Add support for PSC global access to net-address (#2480)
* Add support for PSC global access to net-address

Fixes #2479

* Fix example formatting
2024-08-07 17:27:03 +00:00