Commit Graph

2812 Commits

Author SHA1 Message Date
Julio Castillo
cff8a25c59 Introduce iam_by_principals_conditional (#3649)
* Introduce iam_by_principals_conditional

* Add iam_by_principals_conditional to project factory

* Update IAM ADR

* Update project factory readme

* Sync FAST schemas

* Update organization schema

* Add resman tests for iam_by_principals_conditional

* Update PF project-defaults.tf

* Update copyright
2026-01-14 11:16:07 +00:00
David Liebert
649cab0020 fixed bug where label field is ignored for policy based routes (#3648)
* fixed bug where label field is ignored for policy based routes

* Fix example and inventory

* Add missing schema

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-14 09:48:16 +00:00
Ludovico Magnocavallo
032db2f902 expose bigquery kms in project schema (#3645) 2026-01-13 10:30:19 +01:00
Ludovico Magnocavallo
88306fe99a Adding missing context replacement type to project factory README, add folder_ids to project condition vars (#3642)
* Adding missing context replacement type to project factory README

* add folder ids to project context condition vars
2026-01-12 14:41:07 +01:00
labbott-hub24
5e6f9a4332 Added locality_lb_policy support to the regional ext alb module (#3638)
Added http_cookie to the session_affinity validation
doc update

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-12 12:50:53 +01:00
Julio Castillo
6febcfe136 Add support for mirroring rules to modules/net-firewall-policy (#3636)
* Add support for mirroring rules to net-firewall-policy

* Split mirroring rules

* Add schema

* Sort variables
2026-01-12 11:10:43 +00:00
Eric Zhao
c1248d328a Allow any VPC for (secure) network_tags (#3634)
* feat: allow all for VPC networks

* feat: add examples

* feat: add header

* feat: module test

* fix: update network testing data to pass validation

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-12 09:34:18 +00:00
Vannick Trinquier
ca413b8aa8 Add support to VPC flow logs for PSC subnet (#3639) 2026-01-12 15:56:14 +07:00
Eric Zhao
4ea87d5e6d feat: Implement target secure tags for hierarchical firewall policies (#3633)
* feat: Implement target secure tags for hierarchical firewall policies by integrating tag values and refining tag purpose data.

* docs: update variable
2026-01-09 09:11:04 +01:00
Ludovico Magnocavallo
f8f856c9ac reinstate v51.0.0 2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
da29af53c9 Revert "Use additive resource for perimeter resources in vpc-sc module when i…" (#3631)
This reverts commit a3e09197c7.
2026-01-08 14:29:40 +01:00
Ludovico Magnocavallo
12d0bbf2fc Revert "fix previous change to vpc sc module (#3629)" (#3630)
This reverts commit dc35ce15ee.
2026-01-08 14:28:57 +01:00
Ludovico Magnocavallo
1b4930513f prep v51.1.1 2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
f99920a69b fix previous change to vpc sc module 2026-01-08 12:35:27 +00:00
Ludovico Magnocavallo
6ab071da8d prep v51.1.0 2026-01-08 12:12:43 +00:00
Ludovico Magnocavallo
a3e09197c7 Use additive resource for perimeter resources in vpc-sc module when ignore changes is set (#3628)
* module changes

* fix module
2026-01-08 12:09:09 +00:00
David Liebert
5374899b36 added support for labels with google_compute_global_address resource (#3622)
Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-07 13:19:48 +00:00
ooshrioo
ccad5654d9 Fix workforce identity federation provider configuration (#3626)
* Fix workforce identity federation provider configuration

Remove redundant 'organizations/' prefix from parent parameter as
var.organization_id already contains the full organization path.

* Update test to match corrected parent parameter

The test expected the redundant 'organizations/' prefix, but the fix
correctly removes this duplication.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-07 14:02:13 +01:00
Ludovico Magnocavallo
ef027ad5b5 prep v51.0.0 2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d prep v50.1.0 2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
cb68dfda2a Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-06 08:42:25 +00:00
Suryansh Singhal
ba304518f1 Prevent recreation for key_revocation_action in compute-vm module (#3620)
* fix(compute-vm): prevent instance recreation for key_revocation_action_type

The `key_revocation_action_type` attribute in the `google_compute_instance`
resource defaults to `NONE` on the provider side.

When this optional attribute was not explicitly set in the module's
`options` variable, it resolved to `null` in the Terraform configuration.
This caused Terraform to detect a change from `null` to `NONE` on every
plan, leading to unnecessary instance recreation.

This change applies `coalesce` to
`var.options.key_revocation_action_type` in the resource definition so
that it defaults to `NONE` when unset, aligning the configuration with
provider behavior and preventing a permadiff.

* updated the regional compute template too with the key_revocation_action_type

* fixed the formatting
2026-01-05 11:53:47 +01:00
Ludovico Magnocavallo
502d953d03 Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-04 11:23:59 +00:00
Luca Prete
d0d7c64670 Refactor Agent Engine module to support new source based deployments (#3609)
* Refactor Agent Engine module to support new source based deployments

* Fix linting

* Fix tests

* Fix tests

* Remove generated_pickle line from examples

* Fix indentation

* Delete modules/agent-engine/terraform.atfvars

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-01-04 08:11:46 +00:00
RamBSn
c4447993d3 AlloyDB - Enable multiple automated backup per day (#3604)
* update alloydb automated backup with multiple times per day

* Revert "update alloydb automated backup with multiple times per day"

This reverts commit ea42ba7ba1b63492f812e6614cf4d4d558078069.

* update alloydb automated backup with multiple times per day

* remove unnecessary toset

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-01-02 17:05:24 +00:00
Suryansh Singhal
5eeb7b51bb Terraform allow one of X86_64, ARM64 but the validation is for x86_64 has been fixed (#3615)
Co-authored-by: suryansh.singhal <suryansh.singhal@arya.ag>
2026-01-02 12:47:55 +01:00
dependabot[bot]
8d73680472 Bump qs and @google-cloud/functions-framework
Bumps [qs](https://github.com/ljharb/qs) to 6.14.1 and updates ancestor dependency [@google-cloud/functions-framework](https://github.com/GoogleCloudPlatform/functions-framework-nodejs). These dependencies need to be updated together.


Updates `qs` from 6.13.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1)

Updates `@google-cloud/functions-framework` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/compare/v4.0.0...v4.0.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
- dependency-name: "@google-cloud/functions-framework"
  dependency-version: 4.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-02 09:31:28 +01:00
Sepehr Javid
d570260283 fix failed tests for criss regional lb 2026-01-02 09:14:53 +01:00
Sepehr Javid
de401addcb add service attachments for cross regional load balancer
add docs and cleanup

add missing toc link in readme

add domain_name field in the service attachment docs

update variable table with tfdoc.py
2026-01-02 09:14:53 +01:00
Ludovico Magnocavallo
fedf90d25f Add support for pubsub to project factory (#3608)
* add support for pubsub to project factory

* remove duplicate data access log definitions from folders

* tfdoc

* schemas

* fix example

* add pubsub topics context to org in stage 0
2025-12-23 10:24:33 +00:00
Ludovico Magnocavallo
a554971563 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-22 06:36:05 +00:00
Wiktor Niesiobędzki
73664615a4 Correct test for Direct VPC egress for CFv2 2025-12-19 11:05:25 +01:00
Josh Myers
1eb93db427 feat: project-factory folders support deletion_protection (#3595)
* feat: project-factory buckets support deletion_protection

* chore: Update all folder.schema.json

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-12-18 14:25:05 +00:00
Luca Prete
0ac51b6050 Password for initial_user for AlloyDB is no longer required (#3596) 2025-12-18 11:57:32 +01:00
Luca Prete
c193fb37ee Upgrade Terraform provider to 7.13 (#3600) 2025-12-18 11:29:48 +01:00
Vannick Trinquier
cc24046be8 Add CMEK support to FAST and controls for CMEK encryption (#3556) 2025-12-14 12:14:08 +07:00
apichick
77cdcafd3c Fixed issue with cross region load balancer IP address assigment (#3593) 2025-12-13 12:42:53 +01:00
Ludovico Magnocavallo
ab0f55216a Add support for descriptive name to projects (#3591)
* add support for descriptive name to projects

* boilerplate

* fmt
2025-12-12 09:06:47 +01:00
Ludovico Magnocavallo
216a12eae5 Fix CI/CD dataset files and provider workflow variable in FAST stage 0 (#3587)
* fix CI/CD dataset files and provider workflow variable

* IAM principals use pool, sts uses provider

* tfdoc

* fix variable description
2025-12-11 15:05:39 +01:00
Ludovico Magnocavallo
d21e9c51e8 prep v50.0.0 2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
7cc12da6b3 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-10 18:19:11 +00:00
Ludovico Magnocavallo
5e606d0fff prep v49.3.0 2025-12-10 17:51:43 +00:00
kovagoadam
4e88bec299 Use project numbers in billing budget filter (#3555)
* Fixed project level billing budget filter

* Moved project_numbers local to concat block

* Fixed with try block

* fix project replacement

* tfdoc

* fix test

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-12-10 17:35:06 +00:00
frits-v
67dba40964 fix(compute-mig): correctly map allow_changing_zone (#3585) 2025-12-10 17:06:48 +00:00
Ludovico Magnocavallo
3eac45f225 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-10 16:59:06 +00:00
Josh Myers
5ab73b9f00 feat: Allow empty prefix for project_factory buckets (#3575)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-12-10 16:41:08 +00:00
Ludovico Magnocavallo
7c05299540 Implement additional GCS attributes in project factory (#3583)
* implement additional bucket attributes in project factory

* update FAST schemas

* fmt/tfdoc
2025-12-10 16:12:58 +01:00
Ludovico Magnocavallo
dd6b1ea493 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-09 17:14:59 +00:00
frits-v
13d19ca8eb feat(compute-mig): add instance_lifecycle_policy support (#3577)
Fixes #3576
2025-12-09 16:59:08 +00:00