Commit Graph

6063 Commits

Author SHA1 Message Date
Ludo
4b9fd89642 update changelog 2025-01-29 17:50:58 +01:00
Julio Castillo
e7cc8377df Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-29 15:08:39 +01:00
Ludovico Magnocavallo
95ec5ee3b5 Flexible stage 2s in FAST resource manager (#2840)
* wip

* WIP

* wip

* wip

* apply untested

* tests

* support tag expansion for tenant-level installations in IAM conditions

* fix stage config output

* inventories

* remove dev files

* tfdoc

* enable org policies for stage folders

* resman README

* tfdoc

* stage 3 documentation

* inventory

* support extra_dirs in testing franework

* remove org policy files from stage 1

* Add principal interpolation to iam_by_principals (#2847)

* Add principal interpolation to iam_by_principals

* Fix tests

* relax schemas

* relax schemas

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-01-29 12:16:35 +00:00
Julio Castillo
29e7669385 Support project creation in different universes (#2848)
* Support project creation in different universes

* Fix typo

* Revert prefix validation

* Add test

* Call new test

* Do not override project name
2025-01-29 12:40:41 +01:00
Ludovico Magnocavallo
1009dd248b refactor (#2842) 2025-01-28 10:30:42 +01:00
Ludo
25bacee2e6 prepare for v37.1.0 2025-01-26 10:41:13 +01:00
Ludovico Magnocavallo
fcb4ff54ee Revert "Allow multiple stage-2 project factories (#2834)" (#2839)
This reverts commit f6a8190946.
2025-01-26 10:37:43 +01:00
Julio Castillo
680d68411a Fix versions.tf 2025-01-24 17:05:34 +01:00
Ludo
1d0cb4e145 update changelog 2025-01-24 16:59:12 +01:00
Ludo
15c8669188 Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-24 16:55:46 +01:00
Ludo
329cebba47 update changelog 2025-01-24 16:50:22 +01:00
Julio Castillo
752b77f52e Update module metadata format and prep v36.2.0 (#2837)
* Update module metadata format and prep v36.2.0

* Fix pattern
2025-01-24 16:45:17 +01:00
Julio Castillo
bee7e30b2b Interpolate SAs in tag-level iam (#2836) 2025-01-24 10:39:03 +01:00
Julio Castillo
f6a8190946 Allow multiple stage-2 project factories (#2834)
* Allow multiple stage 2 project factories

* Fix bindings and rename default project factory

* Remove debug

* Update readme
2025-01-24 00:38:22 +01:00
Ludo
c059e99963 update changelog 2025-01-23 08:53:13 +01:00
Ludo
fd7292710a Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-23 08:51:07 +01:00
Ludo
a4e9444368 update changelog 2025-01-23 08:48:22 +01:00
frits-v
43e6daca8f fix(certificate-manager): reference dns_authz by fully qualified id (#2833) 2025-01-22 22:49:12 +01:00
Julio Castillo
cbd66f8462 Allow networking stage to be disabled (#2831) 2025-01-22 07:45:22 +01:00
Julio Castillo
8a2320311d Add bucket_create to modules/gcs (#2827)
* Add `bucket_create` to `modules/gcs`

* Create local with bucket name

* Update variable description

* Fix bucket output

* Fix tests

* Fix tests

* Bump OpenTofu to 1.9.0 (needed for multi-var validations)
2025-01-21 23:48:36 +01:00
frits-v
bb1325403e feat(certificate-manager): add dns_authorizations output (#2830) 2025-01-21 22:14:45 +00:00
Ludovico Magnocavallo
42a3ee44d0 Small fix to net test add-on context expansion (#2828)
* Small fix to net test add-on context expansion

* linting
2025-01-21 11:14:43 +01:00
Julio Castillo
9c22337ed1 Fix stage-1 addons provider files (#2826) 2025-01-21 07:55:40 +01:00
Ludovico Magnocavallo
6aed84f070 FAST add-on for networking test resources (#2825)
* needs testing

* add-on README, test, remove test resources from net stages

* tfdoc
2025-01-20 09:41:35 +01:00
Ludovico Magnocavallo
1c2e3c5677 Update service activation in ngfw add-on (#2823)
* align services use in ngfw add-on with swp

* update ngfw README example
2025-01-18 14:23:23 +01:00
Ludo
0b6bcdccf8 prepare v37.0.0-rc2 release 2025-01-18 08:36:26 +01:00
Ludo
97893f601d update changelog 2025-01-18 08:23:33 +01:00
Ludo
98c8697a08 Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-18 08:18:05 +01:00
Ludo
662405c133 update changelog 2025-01-18 08:13:28 +01:00
Ludovico Magnocavallo
f646e85301 FAST SWP networking add-on (#2821)
* prototype implementation, untested

* halfway through refactor

* refactor cas module pool variable

* apply cas module refactor to ngfw fast addon

* untested

* test

* tflint

* tflint

* tfdoc

* fix brainfarts

* tfdoc

* update ca pool type in security stage
2025-01-18 07:12:40 +00:00
Ludovico Magnocavallo
0a72d26f49 don't create resources for aservice agents not in services (#2820) 2025-01-17 16:55:41 +01:00
Wiktor Niesiobędzki
10cc3d8079 modules/compute-vm end-to-end tests and fixes 2025-01-16 10:54:52 +01:00
Simone Ruffilli
8b31a006c7 Top level folder factory support for automation SA IAM (#2818)
* Top level folder factory support for automation SA IAM

* Fixes iam_bindings and iam_bindings_additive for top-level-folder

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-01-16 10:32:59 +01:00
Ludo
fcf254dddf Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-16 09:43:27 +01:00
Ludovico Magnocavallo
b608e3756e Fix permadiff in stage 0 vpc-sc service account, add schemas to hierarchical policy YAML files (#2817)
* fix permadiff in stage 0

* add missing schema

* update test inventories
2025-01-15 09:47:04 +00:00
Ludo
04511e688c update changelog 2025-01-14 17:05:48 +01:00
Ludo
206fd28419 Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-14 17:04:18 +01:00
Julio Castillo
c59470a4fb Update logging_data_access type (#2816)
* Update logging_data_access variables to use types

* Fix dependencies

* fix schema

* Add missing comma

* Fix try
2025-01-14 16:00:35 +00:00
Julio Castillo
7eff7b19dc Add iam_by_principals_additive to project, organization and folder modules (#2814)
* First attempt at iam_by_principals_additive

* Remove validation

* Update IAM ADR

* Apply to organization and project modules

* Update READMEs

* Add tests

* Remove "cycle errors"
2025-01-14 12:32:19 +00:00
Luca Prete
bf528ec89d [FAST] Add missing permission to ngfwEnterpriseAdmin role (#2815)
Co-authored-by: Luca Prete <lucaprete@google.com>
2025-01-14 08:40:57 +00:00
Liam Johnston
ec59f70a5c feat: include network tfvars in project factory (#2813) 2025-01-14 07:29:38 +01:00
Ludo
ef5e228f42 fix conflict 2025-01-13 15:01:09 +01:00
Julio Castillo
0cea946ced Simplify versions tf and update FAST workflows (#2812)
* Simplify versions tf and update FAST workflows

* Fix typos
2025-01-12 20:39:01 +00:00
Ludovico Magnocavallo
962fd34e76 Small fixes and improvements to FAST netsec/net (#2810)
* remove obsolete stage-links script

* update networking stages fast envs

* add security policy groups FAST variable and context to net stages

* small networking/ngfw fixes
2025-01-11 13:48:44 +01:00
Ludo
d250c4e726 prepare v37.0.0-rc1 2025-01-10 17:09:08 +01:00
Ludo
2d09d2ea74 Merge remote-tracking branch 'origin/master' into fast-dev 2025-01-10 17:04:06 +01:00
Ludo
21045cb333 prepare for v36.1.0 2025-01-10 16:56:01 +01:00
Ludo
96d881aa57 update changelog 2025-01-10 16:52:15 +01:00
dependabot[bot]
e64ba759fd Bump golang.org/x/net (#2808)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.33.0.
- [Commits](https://github.com/golang/net/compare/v0.23.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-10 15:48:39 +00:00
Ludo
39efcc1104 update changelog 2025-01-10 16:34:55 +01:00