kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,590 Commits 1 Branch 1 Tag
192788cdb4222f33deedf3bbcdc2871fc5a888ee
Commit Graph

6590 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ludovico Magnocavallo
192788cdb4 Update README.md 2025-11-11 07:40:55 +01:00
Ludovico Magnocavallo
fc7aa71ada Add support for KMS key creation to project factory (#3518) 
* initial implementation

* context

* tfdoc

* add support for autokey to projects

* fix typo
 2025-11-11 07:23:50 +01:00
Vannick Trinquier
15a5486a1e Add hardened controls for gke, networking and monitoring alerts recommended in CIS Benchmarks for GCP (#3484) 2025-11-10 11:06:25 +00:00
Ludovico Magnocavallo
ba77c6170c Allow configuring data access logs from org/folder/project schemas (#3516) 
* modules and FAST support

* module tests

* fast stage 0 dataset

* tfdoc
 2025-11-10 10:19:21 +00:00
Ludovico Magnocavallo
7e32058010 [WIP] Add support for KMS autokey (#3515) 
* wip

* folder module

* project factory schema

* remove spurious project template

* gcs and compute-vm modules

* variable order
 2025-11-09 10:46:28 +01:00
Ludovico Magnocavallo
16da9ffaad Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-08 17:07:49 +00:00
Ludovico Magnocavallo
81010a97c0 Rename project and VPC resources in net stage datasets (#3513) 
* vpcsc tfvars optional in net

* net project/vpc renames

* fix provider diffs in inventories
 2025-11-08 13:38:28 +01:00
Simone Ruffilli
1363d2f765 Sets a default for delete_default_routes_on_create in 2-networking (#3511) 2025-11-07 08:31:45 +00:00
Wiktor Niesiobędzki
b3df16fee8 Add support for ARM based VMs 2025-11-07 08:46:11 +01:00
Wiktor Niesiobędzki
6567d63d92 Add support for hyperdisk performance options 2025-11-07 08:46:11 +01:00
Luca Prete
e25d5881f9 [FAST] fix host project names in sample yaml files in project factory (#3508) 2025-11-06 23:02:20 +01:00
Ludovico Magnocavallo
6f644c886f Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-06 17:20:17 +00:00
Wiktor Niesiobędzki
fb4dfccd17 Another reason not to try 2025-11-06 15:10:30 +01:00
Julio Castillo
002349c35b Allow defining org-level pam_entitlements in 0-org-setup (#3506) 2025-11-05 19:27:59 +01:00
Ludovico Magnocavallo
68c8538fd6 Refactor FAST VPC-SC docs, ensure cooperative VPC-SC resource control works (#3504) 
* stage README

* vpc-sc in security stage

* vpc-sc for networking

* vpc-sc for net

* vpc-sc for pf

* vpc-sc for pf

* spelling

* inventory
 2025-11-05 13:19:02 +00:00
Wiktor Niesiobędzki
2a03c1b97e Password for initial_user for AlloyDB is now rquired 
Details: https://github.com/GoogleCloudPlatform/magic-modules/pull/15596

Note: as of now, validation doesn't allow `known after apply` values for
passwords
 2025-11-05 13:08:11 +01:00
Ludovico Magnocavallo
5946433737 prep v47.0.0 2025-11-05 08:28:44 +00:00
Ludovico Magnocavallo
fc538a15cc Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-05 08:26:53 +00:00
Ludovico Magnocavallo
adec737e2a prep v46.1.0 2025-11-05 08:24:06 +00:00
Ludovico Magnocavallo
f4a70aecbd changelog 2025-11-05 06:54:52 +00:00
Ludovico Magnocavallo
a4ff84838a Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-05 06:53:32 +00:00
Ludovico Magnocavallo
8691a1e21d changelog 2025-11-05 06:52:18 +00:00
Ludovico Magnocavallo
f50a78d2da changelog 2025-11-05 06:51:06 +00:00
Wiktor Niesiobędzki
d5bc59a238 Fix E2E tests. 
* Disable tests for VPC connector and Cloud Functions, CFs are not
  supporrted in the default region
* fix permissions to secrets for Cloud Run
* add permissions admin permissions to any SA within project to
  `var.bucket`
* add permissions to access the secret to any SA within project to
  secrets created by fixture
* disable custom roles in E2E tests, as `var.organization_id` is not the
  same org, within which projects are created in E2E
 2025-11-04 10:23:55 +01:00
lcaggio
64632eb957 BigQuery reservation (#3441) 
* First Commit.

* Improve

* Fix README

* Fix lint

* fix

* Fix Tests.

* Improve output

* fix yaml lint

* Fix

* Fic test

* Fix

* Fix output
 2025-11-03 11:36:42 +01:00
Ludovico Magnocavallo
cafb8f8aec Revert "Add support for project templates to projects variable in project fac…" (#3499) 
This reverts commit ecbf890889.
 2025-11-03 11:35:29 +01:00
Ludovico Magnocavallo
ecbf890889 Add support for project templates to projects variable in project factory module (#3498) 
* support project template in projects variable

* variable defined projects go through normalization too
 2025-11-03 09:53:14 +00:00
Ludovico Magnocavallo
dddea78e49 add resource set for org setup projects to vpc sc stage (#3497) 2025-11-03 10:36:40 +01:00
Ludovico Magnocavallo
8bfc3cf579 Pass email addresses context to organization module in stage 0 (#3496) 
* pass email addresses context to organization module in stage 0

* depend essential contacts on org policy resource
 2025-11-03 08:43:15 +00:00
Ludovico Magnocavallo
b6b446d5b3 Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-03 07:54:50 +00:00
Ludovico Magnocavallo
0a2cc758ac Essential contacts in schemas, and email context substitutions (#3495) 
* modules

* fast

* duplicate diff

* fix contacts in FAST stage 0 datasets, update contacts in YAML schemas
 2025-11-03 08:53:29 +01:00
lhoet-google
153046307f Okta as Workload identity provider (#3494) 
* Explain cursed Create Before Destroy

* okta for workload idenitty provider

* changed readme with okta wif

* fix readme for okta wif

* 0 org setup readme passing check_documentation.py

* fix error in readme for 0-org-setup

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Leonardo Hoet <leohoet98@gmail.com>
Co-authored-by: mwillig <mwillig@google.com>
 2025-11-01 09:00:06 +01:00
Ludovico Magnocavallo
f9f015a692 Implement precondition check in project factory to ensure declared templates exist (#3493) 
* pf template check

* tfdoc

* test inventories
 2025-10-31 15:32:33 +00:00
Wiktor Niesiobędzki
0a70b9dd2c Explain cursed Create Before Destroy 2025-10-30 19:36:40 +01:00
Ludovico Magnocavallo
90b6e312d3 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-30 16:55:28 +00:00
Ludovico Magnocavallo
c765043c5c add the self project key to service account namespaces (#3490) 2025-10-30 16:42:13 +00:00
Ludovico Magnocavallo
b9f9446e38 exclude folder config files from project factory paths (#3488) 2025-10-30 17:25:14 +01:00
fenyvesi-levi
e5eb13c6e4 Fenyvesi levi/fix essential contact (#3486) 
* Added line to make organization module process essential contacts

* delete unnecessary line
 2025-10-29 13:15:53 +00:00
Daniel Strebel
6912df21c0 chore: cleanup remove fleet output (#3482) 2025-10-28 11:40:33 +00:00
Ludovico Magnocavallo
4a9085675e Align network stage defaults/outputs to other stages, add defaults schema (#3481) 
* networking stage

* implement defaults for vpc defaults :)

* Rename peering test to simple

This enables tflint on 2-networking stage

* tflint

* bring peering test back

* bring peering test back

* yaml lint

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
 2025-10-28 07:47:28 +00:00
Wiktor Niesiobędzki
ada7df8855 Bump tflint version for performance 2025-10-28 07:33:15 +01:00
Ludovico Magnocavallo
b4049e0ae1 tflint 2025-10-28 07:33:15 +01:00
Wiktor Niesiobędzki
4c617b4729 Enable tflint on 2-security 2025-10-28 07:33:15 +01:00
Ludovico Magnocavallo
717803e977 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-27 18:21:35 +00:00
Wiktor Niesiobędzki
4f2fbcab94 Align agent-engine with interface for Cloud Functions and Cloud Run 2025-10-27 16:14:37 +01:00
Wiktor Niesiobędzki
f03aafb00d Run tflint-fast only if changes affected fast 2025-10-27 15:42:37 +01:00
Wiktor Niesiobędzki
0ec0813166 fix tflint errors for 0-org-setup 2025-10-27 15:42:37 +01:00
Wiktor Niesiobędzki
0992d117b3 Enable tflint_fast for 0-org-setup 2025-10-27 15:42:37 +01:00
Wiktor Niesiobędzki
ef093c04ab Enable extra_dirs for tflint_fast 2025-10-27 15:42:37 +01:00
Simone Ruffilli
4a41a4237a Removes legacy FAST networking stages (#3479) 
Removes the legacy networking stages, superseded by 2-networking.

**Breaking Changes**

```upgrade-note
`fast/stages/2-networking-legacy-a-simple`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-legacy-b-nva`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-legacy-c-separate-envs`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435 
```
 2025-10-27 14:38:28 +00:00