kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,281 Commits 1 Branch 1 Tag
241b005f685708d6d6dedeef2d973760760230b7
Commit Graph

68 Commits

Author SHA1 Message Date
Simone Ruffilli
fc84c4f60d Module: net-vpc-factory (#2982) 
This pull request introduces the `net-vpc-factory` module. This new factory handles: 

* Project setup (most of what's supported by the `project` module)
* VPC setup
  * Routing
  * Subnets
* Connectivity options
  * NCC (hub, VPC spokes and VPN hybrid spokes)
  * Peerings
  * VPN (GCP-to-onprem and GCP-to-GCP)
* NAT (everything supported by the `net-cloudnat` module)
* DNS (everything supported by the `dns` module)
* Firewall (everything supported by the `net-vpc-firewall` module)
 2025-04-10 11:44:39 +02:00
Dazbo
ea33957071 well know -> well-known (#2463) 2024-08-03 07:54:55 +00:00
Alejandro Leal
0363e2cb80 Several wording and typos updates 
Several wording and typos updates
 2024-06-27 07:36:19 +02:00
Ludovico Magnocavallo
e12cf83188 add links to factories doc (#2134) 2024-03-06 08:25:43 +01:00
Ludovico Magnocavallo
6941313c7d Factories refactor (#1843) 
* factories refactor doc

* Adds file schema and filesystem organization

* Update 20231106-factories.md

* move factories out of blueprints and create new factories  README

* align factory in billing-account module

* align factory in dataplex-datascan module

* align factory in billing-account module

* align factory in net-firewall-policy module

* align factory in dns-response-policy module

* align factory in net-vpc-firewall module

* align factory in net-vpc module

* align factory variable names in FAST

* remove decentralized firewall blueprint

* bump terraform version

* bump module versions

* update top-level READMEs

* move project factory to modules

* fix variable names and tests

* tfdoc

* remove changelog link

* add project factory to top-level README

* fix cludrun eventarc diff

* fix README

* fix cludrun eventarc diff

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
 2024-02-26 10:16:52 +00:00
Ludovico Magnocavallo
71a64487d5 Extend FAST to support different principal types (#2064) 
* add doc draft

* typos

* typo

* typo

* typos

* rewording

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* move iam variables to a separate file

* move billing-account module to iam_principals

* move data-catalog-policy-tag module to iam_principals

* move dataplex-datascan module to iam_principals

* move dataproc module to iam_principals

* move folder module to iam_principals

* copyright

* move organization module to iam_principals

* move project module to iam_principals

* move source-repository module to iam_principals

* update blueprints for iam_principals interface

* FAST bootstrap

* module READMEs fixes

* FAST bootstrap

* FAST networking stages

* FAST security stage

* FAST gke stage

* FAST multitenant bootstrap stage

* FAST multitenant resman stage

* tfdoc

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* fix module test

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Rename iam_principals to iam_by_principals

* Update IAM template to include iam_by_principals

* Update Resman README

* Fix ADR link format

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2024-02-12 14:35:30 +01:00
simonebruzzechesse
c50b732c79 Allow granting network user role on host project from project module and factory (#1930) 
* Update shared vpc config for project factory and project module for more granular Shared VPC configuration

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2023-12-15 14:39:21 +01:00
Ludovico Magnocavallo
f548b65b1c Add support for subnet-level service network user grants to project module, improve docs (#1907) 
* improve project factory example

* light refactor of project modules shared vpc internals and docs

* add support for subnet-level grants on host project
 2023-12-07 09:07:48 +00:00
Francesco Spinelli
82c74e4ab6 Dataproc module bug fix (#1848) 
* bug fix

* bug fix

* fix dinamic for_each

---------

Co-authored-by: Francesco Spinelli <francesco.spinelli@nttdata.com>
 2023-11-09 15:48:29 +00:00
Ludovico Magnocavallo
03937f2b6e Support multilevel data and allow overriding project id in project factory (#1851) 2023-11-09 08:29:46 +00:00
Wiktor Niesiobędzki
2664161c24 Simplify #1836 fix, Avoid map-related casting errors in project factory 2023-11-02 09:12:38 +00:00
Ludovico Magnocavallo
de0325b3a3 Avoid map-related casting errors in project factory (#1836) 
* try to repro pf example error

* repro

* repro

* pf fix

* remove extra file

* FAST stage
 2023-11-02 08:24:50 +01:00
Ludovico Magnocavallo
30d7126b83 Allow specifying arbitrary project roles for service accounts in project factory (#1814) 
* allow specifying arbitrary project roles for service accounts in project factory

* tfdoc
 2023-10-26 14:09:03 +00:00
Simone Ruffilli
4decc641bb Stop wrapping yamldecode with try() (#1812) 2023-10-25 16:16:05 +02:00
Ludovico Magnocavallo
1ed48b556f make extended shared vpc attributes optional in pf (#1796) 2023-10-23 13:45:48 +00:00
Simone Ruffilli
6d89b88149 versions.tf maintenance + copyright notice bump (#1782) 
* Bump copyright notice to 2023

* Delete versions.tf on blueprints

* Pin provider to major version 5

* Remove comment

* Fix lint

* fix bq-ml blueprint readme

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
 2023-10-20 18:17:47 +02:00
Ludovico Magnocavallo
789328ff5a Bump provider versions to v5.0.0 (#1724) 
* bump provider versions to 5.0.0

* fix cloud run, logging and vpc-sc

* Fix secret manager

* fix gke nodepool

* fix gke multitenant stage and blueprint

* Moving alloydb module to experimental.

* Add project to bare resources in examples

* tfdoc

* fix svpc blueprint test

* Revert "fix svpc blueprint test"

This reverts commit 14f02659098070136e64ead600580dd52c23c339.

* Fix GKE peering project

* Disable tests in alloydb module

* Bring back secret ids in secret manager tests

* Remove duplicate key

* last push

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2023-10-03 12:15:36 +00:00
Ludovico Magnocavallo
aa5d883deb add support for org policies to project factory (#1722) 2023-10-02 14:13:56 +00:00
Oliver Frolovs
6eb862a775 GKE cluster modules: add optional kube state metrics (#1682) 
* `gke-cluster-standard`: add optional kube state metrics
* `gke-cluster-autopilot`: add optional kube state metrics

* FAST: add kube state metrics support for GKE
* blueprints/gke: add kube state metrics support

* Bump up the provider version to `v4.82.0`
 2023-09-15 12:18:45 +01:00
Pierre Formont
e141b86f79 merge labels from data_merges in project factory (#1662) 
* merge labels from data_merges in project factory

* fix project factory test for labels
 2023-09-08 10:27:46 +00:00
Luca Prete
12e78af055 Fix project factory blueprint and fast stage (#1654) 2023-09-07 12:48:39 +00:00
Julio Castillo
3d4cc7164a Bump provider version to 4.80.0 2023-09-05 09:48:15 +02:00
Ludovico Magnocavallo
819894d2ba IAM interface refactor (#1595) 
* IAM modules refactor proposal

* policy

* subheading

* Update 20230816-iam-refactor.md

* log Julio's +1

* data-catalog-policy-tag

* dataproc

* dataproc

* folder

* folder

* folder

* folder

* project

* better filtering in test examples

* project

* folder

* folder

* organization

* fix variable descriptions

* kms

* net-vpc

* dataplex-datascan

* modules/iam-service-account

* modules/source-repository/

* blueprints/cloud-operations/vm-migration/

* blueprints/third-party-solutions/wordpress

* dataplex-datascan

* blueprints/cloud-operations/workload-identity-federation

* blueprints/data-solutions/cloudsql-multiregion/

* blueprints/data-solutions/composer-2

* Update 20230816-iam-refactor.md

* Update 20230816-iam-refactor.md

* capture discussion in architectural doc

* update variable names and refactor proposal

* project

* blueprints first round

* folder

* organization

* data-catalog-policy-tag

* re-enable folder inventory

* project module style fix

* dataproc

* source-repository

* source-repository tests

* dataplex-datascan

* dataplex-datascan tests

* net-vpc

* net-vpc test examples

* iam-service-account

* iam-service-account test examples

* kms

* boilerplate

* tfdoc

* fix module tests

* more blueprint fixes

* fix typo in data blueprints

* incomplete refactor of data platform foundations

* tfdoc

* data platform foundation

* refactor data platform foundation iam locals

* remove redundant example test

* shielded folder fix

* fix typo

* project factory

* project factory outputs

* tfdoc

* test workflow: less verbose tests, fix tf version

* re-enable -vv, shorter traceback, fix action version

* ignore github extension warning, re-enable action version

* fast bootstrap IAM, untested

* bootstrap stage IAM fixes

* stage 0 tests

* fast stage 1

* tenant stage 1

* minor changes to fast stage 0 and 1

* fast security stage

* fast mt stage 0

* fast mt stage 0

* fast pf
 2023-08-20 09:44:20 +02:00
Eunan Hardy
dd3a298892 Moved allow_net_admin to enable_features flag. Bumped provider version to 4.76 2023-08-07 14:27:20 +01:00
Wiktor Niesiobędzki
4998f1d376 Grant IAM rights to service identities in host project (#1542) 
* [module/project] Grant IAM rights to service identities based on used services in host project
* [blueprints/factories/project-factory] enable granting IAM permissions in host VPC for service identities directly or by specifying services in use
 2023-07-29 20:07:21 +02:00
Miren Esnaola
cacb0c02e2 Refactoring of dns module 2023-07-19 12:57:44 +02:00
Ludovico Magnocavallo
d9f7cef1e7 allow using a separate resource for boot disk (#1496) 2023-07-07 15:40:13 +00:00
Albert Lloveras
7cacc46b4b fixup(project-factory): Use the correct KMS Service Agents attribute … (#1446) 
* fixup(project-factory): Use the correct KMS Service Agents attribute name

* Add new KMS bindings to tests

* Update test resource counts

* Update README.md resource count
 2023-06-19 23:53:08 +00:00
Taneli Leppä
81285065ca Added module for Secure Web Proxy. 2023-06-13 08:49:58 +02:00
lcaggio
39b27ac25e Add support for Log Analytics on logging-bucket module and bump provider version (#1423) 
* first commit

* Bump provider versions

* Fix tests
 2023-06-07 23:23:28 +02:00
Alejandro Leal
6a89d71e96 Update to multiple README.md (#1379) 
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
 2023-05-16 06:11:34 +00:00
Alejandro Leal
87cd83f5c0 Several updates 
Several updates
 2023-05-13 23:51:46 -04:00
Fawzi
4722efea40 bump provider versions 2023-04-11 22:18:31 +10:00
Ludovico Magnocavallo
865ef463bb Support new fields in bigquery module, bump provider versions, unpin local provider (#1306) 
* add support for new attributes to bigquery module

* bump provider versions
 2023-04-05 14:22:52 +00:00
Ludovico Magnocavallo
79a6e9b191 pin local provider (#1256) 2023-03-16 10:59:06 +00:00
Dan Farmer
52eb83758f Fix compute-vm:CloudKMS test for provider>=4.54.0 
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
  `google_compute_disk.disks["attached-disk"]` (see
  hashicorp/terraform-provider-google#4448)
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
  will now fail with <4.54.0, which do not return `rsa_encrypted_key`
  * Updated the whole repo on advice from @ludoo
 2023-02-28 15:10:22 +00:00
Julio Castillo
526c8d9f1a Remove unneeded path.root from net-vpc-firewall-yaml 2023-02-25 19:26:11 +01:00
Julio Castillo
edce6edd28 Update factories and apigee tests 2023-02-25 19:26:11 +01:00
Julio Castillo
1696f70f47 Update PF variables for org policies 2023-02-21 15:49:16 +01:00
Julio Castillo
a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo
d7b88b7d0e Fix bq factory docs 2023-02-08 18:22:10 +01:00
Julio Castillo
08f2540872 Bump provider version 2023-02-07 15:59:29 +01:00
Julio Castillo
e1e0c38236 Fix README and var order 2023-02-06 18:08:03 +01:00
Julio Castillo
c883d5ec3a Fix README 2023-02-06 18:03:43 +01:00
Paul Woelfel
bd90aa7f47 Add descriptive_name 2023-02-06 17:39:33 +01:00
Paul Woelfel
f2b61b1e31 Add descriptive name as optional argument 2023-02-06 17:35:11 +01:00
Wiktor Niesiobędzki
1a657b31d3 Bump beta provider to 4.48 
This is the first version that supports `gateway_api_config` block
 2023-01-29 15:50:24 +01:00
Israel Herraiz
7df527e1ef Bump versions EVERYWHERE 2022-12-23 00:06:42 +01:00
Julio Castillo
b031d7add5 Fix tests 2022-12-18 20:37:16 +01:00
Julio Castillo
e700a27079 Enforce terraform fmt in examples 2022-12-18 14:00:19 +01:00