kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,063 Commits 1 Branch 1 Tag
2b0a9db8edb5d2ec936cb0ce53ef99fdb291ed93
Commit Graph

6063 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ludo
2b0a9db8ed Merge branch 'fast-dev' 2025-04-18 17:34:08 +02:00
Ludo
89e68a8e22 prepare v38.2.0 2025-04-18 17:32:51 +02:00
Ludo
c65a8afa6f streamline vpc-sc moved file 2025-04-18 17:28:25 +02:00
Ludovico Magnocavallo
92d2c385df Fix dependabot reported vulnerability 2025-04-18 16:13:13 +02:00
simonebruzzechesse
1e2eea1296 2-secops stage (#3038) 
* new 2-secops stage
* new 3-secops-dev stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2025-04-18 15:57:29 +02:00
Ludovico Magnocavallo
177a9ed8bf fix names in project factory automation resources (#3046) 2025-04-18 15:42:45 +02:00
dependabot[bot]
f03a2543fd Bump golang.org/x/net (#3043) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.36.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.36.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-17 07:38:23 +02:00
Simone Ruffilli
c6c4cc71d5 Pathexpand all factory data paths (#3033) 
* Pathexpand all factory data paths

* fix net monitoring paths

* fix file paths

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2025-04-16 13:28:10 +02:00
Ludo
4821ac2c07 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-16 12:13:35 +02:00
Ludovico Magnocavallo
ade7fb32b0 rename stage_config output/variables to stage_configs (#3042) 2025-04-16 09:34:01 +00:00
Ludo
088437fabd update changelog 2025-04-16 08:16:26 +02:00
Francisco P
41df4e09bc Add managed Kafka (#3035) 
* Add managed Kafka project template with configuration and variable definitions

* Refactor managed Kafka configuration to use a single kafka_config object for improved clarity and maintainability

* Add Apache License 2.0 header to managed Kafka template files

* Update README and add project.yaml for Managed Kafka cluster setup

* Update README to skip tftest validation for managed Kafka module
 2025-04-15 18:15:46 +00:00
Luca Prete
ea807a36a5 Add vulnerability scanning to artifact registry module (#3040) 
* Add vulnerability scanning to artifact registry module

* make variable nullable = false

* tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
 2025-04-14 18:33:35 +02:00
apichick
ff7e7d299c Added recipe HA VPN between AWS and GCP (#3034) 
* Added recipe HA VPN between AWS and GCP

* Fix typo

* Update providers to work without credentials

* Add AWS resource to tools/lockfile/main.tf

* Fixed error in recipe docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2025-04-14 12:47:21 +02:00
karpok78
639a86e626 PF SA fix for budget alert (#3036) 
Allowing PF RO SA to parse budget alerts
 2025-04-13 13:14:32 +00:00
Simone Ruffilli
d20fc9333b Update CICD section of 0-bootstrap. (#3032) 
Update CICD section of 0-bootstrap.
Fixes #2930
 2025-04-12 09:45:58 +02:00
Wiktor Niesiobędzki
2d54911415 Use path as keys in project factory 2025-04-11 22:50:50 +02:00
Wiktor Niesiobędzki
086fe2c914 Use path as keys in project factory 2025-04-11 22:30:39 +02:00
Stefano Tribioli
ffe1fbdfea Allow IAP configuration with default IdP 
Load balancers can be configured with IAP-enabled backends.
They can either be configured to use external Identity Providers (IdP)
or to use Cloud Identity. The latter is the default and is used when
the OAuth2 parameters are not specified.

The iap_config parameter in the backend_service_configs variable
already supported the external IdP option, but did not support the
default one.
 2025-04-11 16:19:17 +00:00
Sepehr Javid
8b9979d93e add tag binding for stage folder config (#3028) 
* add tag binding for stage folder config

* update readme

* address comment

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2025-04-11 15:34:47 +00:00
Ludovico Magnocavallo
4811f72a6c Add FAST to Python linting check (#3026) 
* turn on Python linting for fast
* remove secops.py

---------

Co-authored-by: bruzzechesse <bruzzechesse@google.com>
 2025-04-11 16:48:17 +02:00
Wiktor Niesiobędzki
dddd42dd07 Apply recent changes to factory-projects-object.tf to vpc-factory 2025-04-11 16:28:33 +02:00
Ludo
594a9695ab Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-11 15:52:37 +02:00
simonebruzzechesse
03db2e45cf secops-rules module (#3023) 
* secops-rules module
 2025-04-11 15:44:31 +02:00
simonebruzzechesse
a747653e88 SecOps Anonymization improvements (#3013) 
* update secops anonymization pipeline with new chronicle APIs
 2025-04-11 15:14:05 +02:00
Simone Ruffilli
3c91acd181 Replace all instances of stackdriver.googleapis.com with log+mon (#3022) 
Replace all instances of stackdriver.googleapis.com with logging.googleapis.com  and monitoring.googleapis.com.
Fixes #2932
 2025-04-11 12:04:50 +00:00
Wiktor Niesiobędzki
f1a3cac8ca Use factory-projects-object to normalize inputs for project module 2025-04-11 10:53:08 +02:00
Simone Ruffilli
fc84c4f60d Module: net-vpc-factory (#2982) 
This pull request introduces the `net-vpc-factory` module. This new factory handles: 

* Project setup (most of what's supported by the `project` module)
* VPC setup
  * Routing
  * Subnets
* Connectivity options
  * NCC (hub, VPC spokes and VPN hybrid spokes)
  * Peerings
  * VPN (GCP-to-onprem and GCP-to-GCP)
* NAT (everything supported by the `net-cloudnat` module)
* DNS (everything supported by the `dns` module)
* Firewall (everything supported by the `net-vpc-firewall` module)
 2025-04-10 11:44:39 +02:00
Ludovico Magnocavallo
7b993cd2f1 allow configuring dns zone names in FAST networking stages (#3021) 2025-04-09 18:53:20 +02:00
Luca Prete
f7a0958e17 [FAST] Remove object creator permission from storage viewer custom role (#3020) 2025-04-09 16:39:20 +02:00
Julio Castillo
b2e26e50ae Enable storage.restrictAuthTypes org policy (#3017) 2025-04-08 15:43:24 +02:00
Matt
db165721f3 Add OKTA WIF provider definition (#3015) 
Co-authored-by: Julio Castillo <jccb@google.com>
 2025-04-08 12:48:06 +00:00
jacklever-hub24
2390124877 Added variable for activating nat and implementation in google_apigee… (#2999) 
* Added variable for activating nat and implementation in google_apigee_net_address resource

* Regenerated readme

* Added tests for nat & activation

* Removed unnecessary coalesce

* Fixed test params

* Added test to confirm activate is working
 2025-04-08 12:31:33 +00:00
Ludovico Magnocavallo
bdc97a54c7 Properly support org policy tags in resman/project factory (#3014) 
* allow setting IAM for org policy tags, add org policy tags to pf context

* allow tag id substitution

* tfdoc
 2025-04-08 14:24:46 +02:00
Ludo
7e5c319aeb fix merge 2025-04-07 08:49:28 +02:00
Ludo
5612040209 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-07 08:47:00 +02:00
Wiktor Niesiobędzki
6d2173aada Ensure vpc_sc has correct type for overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
d63a425b62 Allow same filename in different directories 
As long, as they do override default project name using `name`.
 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
4769dc3dd7 Allow null parent and prefix 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
c90005553a Add tests for data_defaults / data_overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
46f731fee0 Use null values for data_overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
ce05505a2c Add type information to project_config attributes 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
6d54ff9a45 Use the same keys in output as in input for projects 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
1c87246583 Use factory-projects-object for project object normalization 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
9c93c6daa4 Add trusted images projects 2025-04-06 12:49:16 +02:00
Julio Castillo
e04079e334 Add support to attach tags to service accounts (#3008) 
* Remove service account key upload. Add create_ignore_already_exists

* Add tag bindings to service accounts

* Add description to create_ignore_already_exists

* Remove broken links
 2025-04-04 12:31:19 +00:00
Ludovico Magnocavallo
7aba2c1b58 allow external config of restricted services base set in vpc-sc stage (#3009) 2025-04-04 12:04:15 +00:00
Ludovico Magnocavallo
69188fa9d9 Implement support for VPC-SC perimeter membership from project factory (#3007) 
* support project factory-level vpc-sc perimeter interpolation

* fix ro role

* add support for IAM on service accounts

* fix typo
 2025-04-04 11:45:22 +00:00
Ludovico Magnocavallo
c8a9cd3edb Update VPC-SC README (#3006) 
Fixes #2983
 2025-04-04 09:06:26 +02:00
JayKim
25b6020a14 Fix stage-3 CICD SA access (#3005) 2025-04-03 19:17:04 +00:00