Julio Castillo
3498338c87
Support iam_by_principals_additive in 0-org-setup ( #3387 )
...
* Support iam_by_principals_additive in 0-org-setup
* Fix typo
2025-10-07 06:56:35 +00:00
Julio Castillo
6b5226f16e
Document log_buckets namespace ( #3386 )
2025-10-07 07:38:17 +02:00
Ludovico Magnocavallo
51c290c9d7
add support for universe to fast project factory stage ( #3384 )
2025-10-06 07:00:00 +00:00
Ludovico Magnocavallo
5898327279
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-06 05:45:15 +00:00
Ludovico Magnocavallo
e9c3341323
support universe in fast security stage ( #3383 )
2025-10-06 07:24:50 +02:00
Ludovico Magnocavallo
b9b62eff89
Delete fast/stages/2-security/data/folders/main.tf
2025-10-05 16:15:47 +02:00
Ludovico Magnocavallo
3cc206bb5b
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-05 14:03:51 +00:00
Ludovico Magnocavallo
ae06160d58
Fix typo in fast stage 0 provider template ( #3381 )
2025-10-05 11:35:49 +00:00
Ludovico Magnocavallo
7aa4e453d7
allow FAST stage 0 provider template to work with universe ( #3379 )
2025-10-05 11:17:31 +02:00
Ludovico Magnocavallo
4db29a48eb
allow forcing jit service agents generation for universe ( #3378 )
2025-10-05 10:17:57 +02:00
Ludovico Magnocavallo
7f291e140f
Add support for output files to FAST project factory stage ( #3373 )
...
* providers
* providers
* output files
* readme
* refactor
* refactor provider names
* refactor
* gcs folders
* README
* Update fast/stages/2-project-factory/README.md
Co-authored-by: Julio Castillo <jccb@google.com >
* reword doc
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-10-03 12:20:04 +00:00
kovagoadam
505ee02fef
Add support for billing export in 0-org-setup ( #3347 )
...
* Add support for billing export in 0-org-setup
* Merge branch 'master' into add-billing-export-support
* Refactored billing export with adding support for bigquery_datasets in project_factory
* Renamed bigquery_dataset to datasets
* Fixed defaults.schema.md
* Fixed default.schema.md again
* Cleanup md's
* Fixed boilerplate
* Fixed JSON schema
* reword README, rename project file
* Moved dataset_id to the key of the map
---------
Co-authored-by: Julio Castillo <jccb@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-01 10:12:45 +00:00
norbert-loderer
e205b11954
Add missing billing viewer role for org-ro service account in org-setup stage. ( #3364 )
2025-10-01 11:53:41 +02:00
kovagoadam
c334e3c60f
Fixed small typo in project-factory module with log-buckets ( #3357 )
...
* Fixed small typo in project-factory module
* Add log_analytics and retention to log_buckets
2025-09-27 07:21:48 +00:00
Wiktor Niesiobędzki
3e0f53fb38
Fix linting / remove unnecessary screenshot
2025-09-26 15:50:58 +02:00
Julio Castillo
acae030649
Update README.md
2025-09-24 14:11:41 +03:00
Ludovico Magnocavallo
90ee0ccf12
Expose project factory stage defaults via a YAML file ( #3354 )
...
* initial implementation
* README
* tfdoc
2025-09-24 09:59:11 +00:00
norbert-loderer
2492494c68
Fixing typos and adding missing roles for Terraform and CI/CD service… ( #3351 )
...
* Fixing typos and adding missing roles for Terraform and CI/CD service accounts in 0-org-setup stage.
* Updated organization schema to allow defining custom roles under iam_by_principals and updated organization.schema.md accordingly.
2025-09-23 19:20:21 +00:00
Ludovico Magnocavallo
d0e2a54948
rationalize prefix handling for project factory automation resources ( #3345 )
2025-09-21 21:07:28 +02:00
Ludovico Magnocavallo
c0aa691052
v45.0.0
2025-09-20 12:07:40 +00:00
Ludovico Magnocavallo
177b70762f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-09-20 12:00:50 +00:00
Ludovico Magnocavallo
4801b65291
v44.2.0
2025-09-20 11:57:31 +00:00
kovagoadam
c9902668fb
Add default values for environments in stage 2, moved to variables.tf ( #3344 )
2025-09-20 11:51:44 +00:00
Wiktor Niesiobędzki
56f4513e0d
Remove unused bootstrap_user variable
2025-09-19 12:11:15 +02:00
Wiktor Niesiobędzki
3a3dd1de09
remove duplicate / misplaced policy
2025-09-19 11:43:44 +02:00
norbert-loderer
d667745c7b
Added default value for environments variable and moved it to variables.tf from variables-fast.tf ( #3337 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-09-19 08:38:59 +02:00
norbert-loderer
2aae7b3ab6
Add conditional grants on security to pf service account in FAST stage 0 ( #3338 )
2025-09-19 08:15:05 +02:00
fenyvesi-levi
4102e53588
Added 2 IAM roles for pf SA and updated test ( #3333 )
...
* Added 2 IAM roles for pf SA and updated test
* Updated role grant with condition
2025-09-17 13:37:07 +00:00
Ludovico Magnocavallo
c6cdc9c98c
Incremental improvements to project factory and underlying modules ( #3325 )
...
* incremental improvements to project factory and underlying modules
* fix org policies diff test
2025-09-16 23:21:18 +02:00
fenyvesi-levi
589a2b088a
dev-platform.yaml secondary_ip_ranges syntax fix ( #3326 )
2025-09-16 13:57:40 +00:00
Ludovico Magnocavallo
9b3291c395
Merge remote-tracking branch 'origin/master' into fast-dev
2025-09-16 10:42:32 +00:00
norbert-loderer
659472d487
Added read-only providers to 0-org-setup stage, and fixed CI/CD parameters in the generated workflow file (WIF_PROVIDER, provider files etc.) ( #3322 )
2025-09-16 08:02:02 +00:00
Ludovico Magnocavallo
768e6c6d16
Merge remote-tracking branch 'origin/master' into fast-dev
2025-09-15 08:17:54 +00:00
Julio Castillo
ea445fa7e4
Add support for VPC internal ranges to modules/net-vpc ( #3318 )
...
* Add support for VPC internal ranges to modules/net-vpc
* Fix linting
* Fix variable order
* Fix README
* Sort outputs.
* Fix validation for terraform < 1.13
2025-09-11 17:42:54 +00:00
Ludovico Magnocavallo
78966f66c3
Add support for project templates to project factory module ( #3317 )
...
* add support for project templates to project factory module
* align project factory features in FAST org setup stage
2025-09-11 09:56:01 +02:00
Ludovico Magnocavallo
37695cca98
Merge remote-tracking branch 'origin/master' into fast-dev
2025-09-10 11:51:46 +00:00
Ludovico Magnocavallo
63a22cd9a2
Refactor secret manager module ( #3315 )
...
* wip
* wip
* wip
* wip
* tested, missing versions
* working
* fix secops stage
* readme
* tests
* tflint
2025-09-10 11:47:35 +00:00
Ludovico Magnocavallo
c93b628979
New security stage leveraging project factory and contexts ( #3311 )
...
* wip
* wip
* fix contexts
* cas factory
* add support for context to cas module
* cas module contexts and tests
* cas factory
* rename legacy security stage, add test for new stage
* readmes
* doc
* tfdoc
* doc, outputs
* update inventory
2025-09-08 18:59:16 +02:00
Ludovico Magnocavallo
68955ff809
Improve context support in vpc-sc module and stage / new FAST stages small fixes ( #3305 )
...
* improve context support in vpc-sc module and stage
* fix stage env files
* fix stage env files
* fix FAST variables comments
* tfdoc
* fix locations order
* fix tests
2025-09-07 14:59:46 +02:00
Ludovico Magnocavallo
894a0f5975
prep v44.1.0
2025-09-06 09:15:41 +00:00
Ludovico Magnocavallo
d6f0a168f6
pf outputs ( #3301 )
2025-09-05 22:21:27 +02:00
Ludovico Magnocavallo
58643a8ab4
merge fast-dev and prepare v44.0.0
2025-09-05 09:18:21 +00:00
Ludovico Magnocavallo
711436cb71
Final changes to new org setup stage ( #3300 )
...
* add provider id field to wif
* readme
* readme
* tfdoc
2025-09-05 09:39:22 +02:00
Ludovico Magnocavallo
756c02c21a
Rename new botstrap stage to org-setup ( #3299 )
...
* readme changes
* rename stage 0
* rename stage 0
* complete rename of stage 0
* tfdoc
* tfdoc
* tfdoc
2025-09-04 13:34:16 +02:00
Ludovico Magnocavallo
bc6950e205
Rename FAST stages preparing for eventual deprecation ( #3298 )
...
* renames
* links
* readme
* docs
* update pf modules tests for renames
* condition_vars context in modules
* data platform dataset
* fix links in stage 3 docs
* schema changes
* schema docs
* tfdoc
* update duplicates check
* fast legacy tests
* legacy schema
* fix tests
2025-09-04 08:24:11 +02:00
Ludovico Magnocavallo
1f59fd6bc7
Merge remote-tracking branch 'origin/master' into fast-dev
2025-09-03 14:33:52 +02:00
Kósa Márkó
7b8ad07b29
gke-hub.tf update local to use cluster.fleet_config.configmanagement_template instead of the highest level block ( #3297 )
2025-09-03 11:29:27 +00:00
Ludovico Magnocavallo
36648b6b63
FAST light implementation ( #3255 )
...
* data wip
* wip data
* update org schema, add note on expansion
* all schemas, workload notes
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* wip
* data wip
* wip
* wip
* wip
* wip
* org module IAM context (using lookup)
* new-style context expansion in project IAM
* remove spurious file
* project module contexts
* finalize context replacement format for project module
* revert org module changes
* fix tag id interpolation in project
* fix tag id interpolation in project
* organization module context
* organization context test
* context expansion for folder tag bindings
* test context expansion for tag bindings
* service account module context
* simplify context local
* context for iam service account
* nuke blueprints
* remove links to blueprints
* vpc sc context in project module
* Add context to GCS module
* Add inline deps to plan_summary script
* Make context a top-level variable for folder, organization, sa
* Add add context top-level to VPC-SC
* move context out of factories_config variable
* tfdoc
* fix merge
* fix merge
* fix examples
* net-vpc module context
* add parent ids to folder context
* rename folder parent context
* fix folder parent check
* new project factory stub
* wip
* wip
* refactor defaults
* project iam
* bueckts and service accounts
* start adding context replacements
* better test data
* automation resources for folders and projects
* automation
* add support for project id interpolation
* first tested apply
* improve IAM description in gcs module
* add context to billing account module
* add notification channels to billing account module context
* add billing budgets to new pf
* schemas and defaults
* bootstrap wip
* bootstrap wip
* bootstrap wip
* pf outputs
* pf fixes
* fix pf sample data
* bootstrap lite fixes
* add locations to organization module contexts
* bootstrap lite fixes
* org fixes, billing accounts
* fix default project parent
* bootstrap lite wip
* add locations to gcs module context
* add context support to logging bucket module
* add context to pubsub module
* split out iam variables in gcs module
* fix logging bucket context test
* bootstrap log sink destinations
* streamline logging-bucket module variables
* fix logging bucket context test
* align logging bucket module interface in fast bootstrap
* add support for project-level log buckets to project factory
* support full context expansion in organization module log sinks
* log buckets in fast-lite bootstrap
* make og sink type optional in organization module
* log sinks in fast-lite bootstrap
* set tag values in factory context
* bootstrap lite data
* output files schema
* billing account schema
* output files
* output providers
* gcs output files
* boilerplate
* tflint
* check documentation
* check docs
* fix project module parent variable validation
* fix log bucket examples
* allow null parent in project module
* silence folder test errors
* fix billing account sink example
* fix project example
* fix billing account module
* fix folder tests
* fix FAST
* fix fast
* tfvars outputs
* wif
* cicd service accounts
* cicd
* allow defaults in context, minimal org policies
* support gcs managed folders in project factory and bootstrap lite
* support prefix in provider output files
* rename bootstrap stage
* gitignore
* gitignore
* security folder, billing IAM
* wip tfvars
* fix typo
* security IAM
* control tag iam/context via variables in organization module
* split tag creation from tag IAM to avoid circular refs
* port organization module tag changes to project module
* implement new-style context expansion in vpc-sc module
* fix fast vpc-sc tests
* boilerplate
* vpc sc stage
* schemas
* fast-lite compatibility for vpc sc stage
* make log project number optional in vpc-sc stage
* networking
* networking
* networking
* networking
* rename and move new stage under fast
* clone pf tests
* use context replacement for internal notification channels in billing account module
* support service agents in project module iam context replacements
* support service agents in project module iam context replacements
* add support for kms keys to project module context
* experimental pf example test and fixes
* fix schemas
* fix tests
* tfdoc
* tfdoc
* pf config
* experimental pf
* remove redundant dot from gcs managed folder IAM keys
* bootstrap experimental test
* project factory exp stage test
* skip tflint for bootstrap experimental test
* tflint
* fix gcs test
* documentation work
* documentation work
* Update README.md
* tfdoc
* tfdoc
* readme
* tfdoc
* readme
* readme
* readme
* readme
* support universe in pf exp projects
* missing universe service agents
* org policies import, non-admin billing IAM
* todo
* fix test
* custom constraints
* fast classic dataset
* fix test data
* context replacements in billing module log sinks
* fix typo
* add support for billing log sinks
* update docs
* readme
* cicd fix and test
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-09-02 08:38:57 +02:00
Ludovico Magnocavallo
dcd762370c
Merge remote-tracking branch 'origin/master' into fast-dev
2025-09-01 15:41:36 +00:00
Julio Castillo
d3f0dc984e
Upgrade provider to version 7.0.1 ( #3291 )
...
* Upgrade provider to version 7.0.1
* Update READMEs
* Bring back depends_on for services and jobs
2025-09-01 17:29:20 +02:00
