Commit Graph

16 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki
2e42c1b548 service_account_config for Cloud Run v2
Additional changes:
* align vpc-connector interface to Cloud Functions
* split managed and unmanaged resources into separate files, this makes
  easier to introduce further changes
* add support for contexts
* move `vpc_connector` variable to variables.tf for Cloud Functions
* remove `create` from `vpc_connector` in Cloud Functions as it was
  sharing the meaning with `vpc_connector_create`
2025-10-27 08:03:53 +01:00
Wiktor Niesiobędzki
e498f3407e Add support for GPUs in Cloud Run 2025-08-13 15:21:27 +02:00
Wiktor Niesiobędzki
b5cc01c598 Add Cloud Run Worker Pools
Refactor jobs and services parameters into separte variables
Remove prefix (not needed, namespace is local to the project)
2025-08-12 19:59:50 +02:00
Maciej Sikora
6c403acf5e feat: ignores labels added by gh action in unmanaged cloud run service / job (#3161)
* feat: ingnores labels in unmanaged service

* feat: ingnores labels in unmanaged service

* ignores all labels in unmanaged version

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-06-16 08:09:14 +00:00
Maciej Sikora
ae5c12a2a3 adds revision label (#3117)
* adds revision label

* adds revision label
2025-05-28 18:32:06 +02:00
Ludovico Magnocavallo
212e587f77 Fix permadiff in FAST bootstrap IAM (#3089)
* Add ability to optionally update Cloud Run job containers outside Terraform.

Co-authored-by: Luca Prete <lucaprete@google.com>

* bug: mark policy_controller as optional (#3086)

* bug: mark policy_controller as optional

* Fix documentation

---------

Co-authored-by: Julio Castillo <jccb@google.com>

* fix bootstrap permadiff

* inventory

* inventory

---------

Co-authored-by: Luca Prete <preteluca@gmail.com>
Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Falcon Taylor-Carter <falconertc@gmail.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-16 09:10:39 +02:00
Luca Prete
763b917b78 [cloud-run-v2] Add ability to control code deployments outside Terraform 2025-04-29 10:32:57 +02:00
Wiktor Niesiobędzki
9f7505d061 Allow providing network for Direct VPC access 2024-11-18 10:25:19 +01:00
Wiktor Niesiobędzki
020aa8c00c Fix non-empty plan after mixing CloudSQL with other mounts 2024-11-16 11:55:37 +01:00
Matthew Winter
c1dfcaa9db Fix the location of the GCS and NFS attributes (#2670) 2024-11-11 10:01:15 +01:00
Ludovico Magnocavallo
601f137c9b Fix ipv6 output in net-vpc module, add support for extra volumes in cloud run v2 module (#2638)
* fix #2637

* fix #2635
2024-10-24 08:36:20 +02:00
Ludovico Magnocavallo
bbe84a5ca8 add extra job revision attributes (#2608) 2024-10-07 11:45:59 +02:00
Simone Ruffilli
7f8a02a405 Add support for google provider 6.x (#2536)
* Add support for google provider 6.x

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-05 10:35:58 +00:00
Julio Castillo
3af7e257d2 Add tflint to pipelines (#2220)
* Fix terraform_deprecated_index

https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md

* Fix terraform_deprecated_interpolation

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md

* Fix more indexing

* Remove unused variable

* Enable TFLint for modules

* Add tflint config file

* Fix chdir

* Lint modules

* TFLint fixes

* TFLint

* Fixes binauthz README

* Fixes DNS response policy tests. Restores MIG outputs.

* Fixes other DNS response policy tests.

* Update tests for fast 2-e

* Moar fixed tests

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-04-17 10:23:48 +02:00
Saleh Elnagar
136d74db4e add cmek option for cloud_run_v2 (#2177)
add cmek option for cloud_run_v2 service and job
2024-03-27 09:15:02 +00:00
Wiktor Niesiobędzki
bee3072568 Add support for Cloud Run v2 jobs (#1954)
Add support for Cloud Run v2 jobs

* create a separate file for service creation (service.tf) and job
  (job.tf) - for easy comparison
* add E2E tests where possibile
* remove default value for input variable `region`
* fix subnet range VPC Access Connector example
* add creation of service account for audit logs call (trigger requires
  service account)
* use provided trigger service account email in
  `local.trigger_sa_email`, so explicitly provided SA is passed to
  trigger
* set default value for vpc_connector_create.throughput.max, to match
  what is set by GCP API, as provider uses wrong default of 300 which
  results in perma-diff
* create inventory fiels for all examples

Global changes
* (tests) add input variable `project_number`, to allow assigning IAM permissions to Service Accounts in fixtures
* (tests) fix not outputting the path, when object is not found in inventory
* (tests) fix `create_e2e_sandbox.sh` - now it properly finds root of the repo

Secret Manager
* added `version_versions` output, to allow specifying versions in other modules. `versions` is sensitive and it makes it unsuitable for `for_each` values

New test fixtures
* `pubsub.tf` - creating one topic
* `secret-credential.tf` - creating Secret Manager `credential` secret
* `shared-vpc.tf` - creating two projects (host and service), and vpc in host project
* `vpc-connector.tf` - creating VPC Access Connector instance
2024-02-18 14:57:34 +01:00