Ludovico Magnocavallo
10e29e1eeb
Context improvements: "all service accounts" principal in folder, org, project modules; custom roles in factory condition vars for FAST stage 0 ( #3548 )
...
* iam principalsets
* fix folder
* add custom roles to factory condition vars in stage 0
* project shared vpc IAM
2025-11-24 08:28:41 +00:00
Ludovico Magnocavallo
3392953188
prep v49.0.0
2025-11-18 13:51:02 +00:00
Ludovico Magnocavallo
da5726324d
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-18 13:49:13 +00:00
Ludovico Magnocavallo
83ebdbbd2d
prep v48.1.0
2025-11-18 13:47:16 +00:00
Ludovico Magnocavallo
932fd82fe2
Drop the 2-secops stage and minimally refactor 3-secops-dev ( #3537 )
...
* drop 2-secops and minimally refactor 3-secops
* remove stage 2 tests
* tfdoc
2025-11-18 14:32:06 +01:00
Ludovico Magnocavallo
8c29512890
Leverage project-level workload identity in FAST CI/CD ( #3535 )
...
* Leverage project-level WIF in FAST CI/CD
* add new context namespace, improve outputs, fix tests and inventories
* make YAML linter happy
* README
2025-11-18 10:49:44 +00:00
Ludovico Magnocavallo
0ff2e8c56b
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-17 19:00:17 +00:00
kovagoadam
2567233fb7
Fix egress-policy schema by removing pattern to match the one in ingress-policy schema. ( #3533 )
2025-11-17 14:56:32 +00:00
Ludovico Magnocavallo
09367404a8
remove log buckets from security stage projects ( #3534 )
2025-11-17 14:24:58 +00:00
Ludovico Magnocavallo
6035fe89d7
assign service usage roles on iac project to automation service accounts ( #3532 )
2025-11-17 14:58:57 +01:00
Ludovico Magnocavallo
897c6ef8c3
Add support for Workload Identity to project module and project factory ( #3531 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
* wip
* project factory
* pf outputs
* iam templates will be added where ci/cd configs are managed
* fix merge conflicts
2025-11-17 07:31:21 +00:00
Ludovico Magnocavallo
87ed19bc47
Add support for Workforce Identity to organization module and org setup stage ( #3530 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
2025-11-17 08:00:30 +01:00
Vannick Trinquier
03521a5780
Prettify yaml controls ( #3525 )
2025-11-13 14:21:36 +07:00
Ludovico Magnocavallo
5270586a8e
fix schema doc tool, fix schema errors, regenerate schema docs ( #3524 )
2025-11-12 08:50:52 +01:00
Ludovico Magnocavallo
602e1731c9
Replace leftover schema links with actual files ( #3522 )
...
* replace schema links with schemas
* vpc-sc stage
2025-11-11 11:57:51 +01:00
Ludovico Magnocavallo
3289a6ff27
prep v48.0.0
2025-11-11 09:13:44 +00:00
Ludovico Magnocavallo
76eec666ea
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-11 09:10:56 +00:00
Ludovico Magnocavallo
0d0e086cfc
prep v47.1.0
2025-11-11 08:59:19 +00:00
Vannick Trinquier
1f0940a716
Update yaml controls to match max line-length ( #3520 )
...
* Update yaml controls to match max line-length
* Add test for stage 0 with hardened datasets
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-11-11 07:00:49 +00:00
Ludovico Magnocavallo
192788cdb4
Update README.md
2025-11-11 07:40:55 +01:00
Ludovico Magnocavallo
fc7aa71ada
Add support for KMS key creation to project factory ( #3518 )
...
* initial implementation
* context
* tfdoc
* add support for autokey to projects
* fix typo
2025-11-11 07:23:50 +01:00
Vannick Trinquier
15a5486a1e
Add hardened controls for gke, networking and monitoring alerts recommended in CIS Benchmarks for GCP ( #3484 )
2025-11-10 11:06:25 +00:00
Ludovico Magnocavallo
ba77c6170c
Allow configuring data access logs from org/folder/project schemas ( #3516 )
...
* modules and FAST support
* module tests
* fast stage 0 dataset
* tfdoc
2025-11-10 10:19:21 +00:00
Ludovico Magnocavallo
7e32058010
[WIP] Add support for KMS autokey ( #3515 )
...
* wip
* folder module
* project factory schema
* remove spurious project template
* gcs and compute-vm modules
* variable order
2025-11-09 10:46:28 +01:00
Ludovico Magnocavallo
16da9ffaad
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-08 17:07:49 +00:00
Ludovico Magnocavallo
81010a97c0
Rename project and VPC resources in net stage datasets ( #3513 )
...
* vpcsc tfvars optional in net
* net project/vpc renames
* fix provider diffs in inventories
2025-11-08 13:38:28 +01:00
Simone Ruffilli
1363d2f765
Sets a default for delete_default_routes_on_create in 2-networking ( #3511 )
2025-11-07 08:31:45 +00:00
Luca Prete
e25d5881f9
[FAST] fix host project names in sample yaml files in project factory ( #3508 )
2025-11-06 23:02:20 +01:00
Ludovico Magnocavallo
6f644c886f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-06 17:20:17 +00:00
Julio Castillo
002349c35b
Allow defining org-level pam_entitlements in 0-org-setup ( #3506 )
2025-11-05 19:27:59 +01:00
Ludovico Magnocavallo
68c8538fd6
Refactor FAST VPC-SC docs, ensure cooperative VPC-SC resource control works ( #3504 )
...
* stage README
* vpc-sc in security stage
* vpc-sc for networking
* vpc-sc for net
* vpc-sc for pf
* vpc-sc for pf
* spelling
* inventory
2025-11-05 13:19:02 +00:00
Ludovico Magnocavallo
5946433737
prep v47.0.0
2025-11-05 08:28:44 +00:00
Ludovico Magnocavallo
fc538a15cc
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-05 08:26:53 +00:00
Ludovico Magnocavallo
adec737e2a
prep v46.1.0
2025-11-05 08:24:06 +00:00
Ludovico Magnocavallo
dddea78e49
add resource set for org setup projects to vpc sc stage ( #3497 )
2025-11-03 10:36:40 +01:00
Ludovico Magnocavallo
8bfc3cf579
Pass email addresses context to organization module in stage 0 ( #3496 )
...
* pass email addresses context to organization module in stage 0
* depend essential contacts on org policy resource
2025-11-03 08:43:15 +00:00
Ludovico Magnocavallo
0a2cc758ac
Essential contacts in schemas, and email context substitutions ( #3495 )
...
* modules
* fast
* duplicate diff
* fix contacts in FAST stage 0 datasets, update contacts in YAML schemas
2025-11-03 08:53:29 +01:00
lhoet-google
153046307f
Okta as Workload identity provider ( #3494 )
...
* Explain cursed Create Before Destroy
* okta for workload idenitty provider
* changed readme with okta wif
* fix readme for okta wif
* 0 org setup readme passing check_documentation.py
* fix error in readme for 0-org-setup
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Leonardo Hoet <leohoet98@gmail.com >
Co-authored-by: mwillig <mwillig@google.com >
2025-11-01 09:00:06 +01:00
Ludovico Magnocavallo
90b6e312d3
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-30 16:55:28 +00:00
fenyvesi-levi
e5eb13c6e4
Fenyvesi levi/fix essential contact ( #3486 )
...
* Added line to make organization module process essential contacts
* delete unnecessary line
2025-10-29 13:15:53 +00:00
Ludovico Magnocavallo
4a9085675e
Align network stage defaults/outputs to other stages, add defaults schema ( #3481 )
...
* networking stage
* implement defaults for vpc defaults :)
* Rename peering test to simple
This enables tflint on 2-networking stage
* tflint
* bring peering test back
* bring peering test back
* yaml lint
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2025-10-28 07:47:28 +00:00
Ludovico Magnocavallo
b4049e0ae1
tflint
2025-10-28 07:33:15 +01:00
Ludovico Magnocavallo
717803e977
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-27 18:21:35 +00:00
Wiktor Niesiobędzki
0ec0813166
fix tflint errors for 0-org-setup
2025-10-27 15:42:37 +01:00
Simone Ruffilli
4a41a4237a
Removes legacy FAST networking stages ( #3479 )
...
Removes the legacy networking stages, superseded by 2-networking.
**Breaking Changes**
```upgrade-note
`fast/stages/2-networking-legacy-a-simple`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435
`fast/stages/2-networking-legacy-b-nva`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435
`fast/stages/2-networking-legacy-c-separate-envs`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435
```
2025-10-27 14:38:28 +00:00
Ludovico Magnocavallo
4b15741144
Streamline stage variables and output files for vpc-sc and security stages ( #3471 )
...
* implement fast context output var, remove tflint errors from security stage
* tfdoc
* defaults-based outputs for security stage
* fix tests
* implement defaults in vpc sc stage
* tflint
2025-10-27 13:27:09 +00:00
Vannick Trinquier
0bb490a1b1
Add CIS Benchmarks for GCP 3.0 mapping to documentation of controls ( #3478 )
2025-10-27 09:23:16 +00:00
Ludovico Magnocavallo
9b862c383b
remove legacy security stage ( #3474 )
2025-10-26 16:49:52 +00:00
Ludovico Magnocavallo
3801a7c2d1
prep v46.0.0
2025-10-26 16:12:02 +00:00
Ludovico Magnocavallo
f1043a5aac
fix versions file
2025-10-26 15:50:56 +00:00
