Simone Ruffilli
393e99194a
2-networking - NCC Dataset ( #3457 )
...
Dataset for 2-networking which implements a simple NCC full mesh topology with 2 spokes.
2025-10-23 12:59:46 +00:00
Simone Ruffilli
23f8326665
Factory based FAST Networking stage ( #3435 )
...
New factory based networking stage, shipping with a single dataset (peering) to keep the PR size somewhat manageable.
2025-10-23 14:17:44 +02:00
Ludovico Magnocavallo
b0bc896a68
Allow null project id in service account module when reusing service account ( #3452 )
...
* allow null project id for service account reuse
* fix pf
2025-10-22 16:51:06 +00:00
Simone Ruffilli
de8ebefe17
Start the deprecation process of the old networking stages ( #3451 )
...
This PR renames `2-networking-foo` stages to `2-networking-legacy-foo` - including references of stages in docs and tests.
**Breaking Changes**
```upgrade-note
`fast/stages/2-networking-a-simple`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
`fast/stages/2-networking-b-nva`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
`fast/stages/2-networking-c-separate-envs`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
`modules/net-vpc-factory`: The module has been deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
```
2025-10-22 16:31:14 +02:00
Ludovico Magnocavallo
7ea9612b07
Allow skipping data source in service account module ( #3450 )
...
* test implementation
* wip
* service account reuse
* fix fast stage test
* revert cicd changes
* remove unused dep
* add comment on extra condition
2025-10-22 13:04:00 +02:00
Ludovico Magnocavallo
7b272da6b6
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-21 18:38:50 +00:00
Julio Castillo
772d064e1c
Skip IAM grants for service agents that are not created on API activation ( #3448 )
...
* Skip IAM grants for service agents that are not created on API activation
* Fix tests
2025-10-21 14:31:32 +00:00
Julio Castillo
b8aa4b5578
Merge branch 'master' into fast-dev
2025-10-21 08:14:42 +02:00
Julio Castillo
792003ff97
Remove Netsec Authz Service Agent ( #3445 )
...
* Remove Netsec Authz Service Agent
* fix tests
2025-10-20 19:36:03 +00:00
Ludovico Magnocavallo
32ca4498ad
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 17:56:31 +00:00
Luca Prete
64738a1808
Add Agent Engine module. ( #3429 )
2025-10-20 17:02:39 +02:00
Ludovico Magnocavallo
ec09414823
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 13:58:44 +00:00
Julio Castillo
48f6b4cd49
Add PAM support ( #3438 )
...
* PAM first pass
* Add factory and extend to organization
* Extend to project, add examples
* Add additionalProperties to all objects
* Fix boilerplate
* Expose pam_entitlements to project-factory
* Fix readme
* Move entitlements to second folder/project pass
* extend tests
* Fix readme
* Remove timeouts from inventories
2025-10-20 12:50:37 +00:00
Ludovico Magnocavallo
2753196ca2
fix merge
2025-10-18 14:54:53 +00:00
Ludovico Magnocavallo
5e05044306
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
4113da128b
Support resource-level factories config in project factory module and FAST stages ( #3440 )
...
* support resource-level factories in project factory module
* align folder and project schemas across modules and fast
* schema docs
2025-10-18 10:41:19 +00:00
Julio Castillo
1566711c3a
Add service agent outputs to folder and organization ( #3436 )
...
* Add service agent outputs to folder and organization
* Fix tests
2025-10-17 17:23:08 +02:00
Ludovico Magnocavallo
0eb90e437f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 17:28:11 +00:00
lcaggio
9bbd453024
bigquery-connection module ( #3423 )
...
Implement bq-connection module
2025-10-16 15:15:36 +00:00
Simone Ruffilli
37455277d4
Adds context support to peering zones ( #3426 )
2025-10-16 15:58:27 +02:00
Taneli Leppä
7c6211a494
bigquery-dataset: fix issues ( #3425 )
...
* bigquery-dataset: add missing return_type to routines, fix view schema
encode, add dependency between routines and views
* Fix test.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-10-16 13:12:23 +00:00
Ludovico Magnocavallo
e9dd48f5e7
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 09:03:15 +00:00
Ludovico Magnocavallo
8e8be1eda5
Support CIDR range sets in firewall modules context ( #3424 )
2025-10-16 09:01:05 +00:00
Ludovico Magnocavallo
01001c9a64
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 07:09:27 +00:00
Ludovico Magnocavallo
45d4674ae8
net-vpn-ha ( #3420 )
2025-10-16 09:08:17 +02:00
Ludovico Magnocavallo
cc947777ce
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 05:57:02 +00:00
Ludovico Magnocavallo
7c920d7d35
Add support for context to net-lb-int net-vpc-firewall and net-vpc module ( #3419 )
...
* net-lb-int
* net-vpc-firewall
* net-vpc
* net-vpc
2025-10-16 05:54:14 +00:00
Ludovico Magnocavallo
ecdc248f3f
Add support for context to net-cloudnat, net-firewall-policy modules ( #3414 )
...
* net-cloudnat
* net firewall policy
2025-10-15 13:59:51 +02:00
Julio Castillo
9c61b1c30c
Make SSM gitignores a list ( #3413 )
...
Fixes #3395
2025-10-15 11:35:44 +02:00
Ludovico Magnocavallo
6e02fd1136
Add support for context to DNS modules ( #3412 )
...
* dns-response-policy
* add context to dns modules
2025-10-14 16:07:29 +00:00
Wiktor Niesiobędzki
9f2beb1ee6
Use fixture custom role for modules/project tests
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
849e856437
Use email from variables in tests
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
b10d31ef98
Add unique suffix to custom role
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
ad9d52a7da
Use context prefixes for auto service grants
2025-10-13 18:58:52 +02:00
Ludovico Magnocavallo
489b21f8cc
fix ngfw add-on instructions ( #3409 )
2025-10-13 16:52:54 +00:00
Luca Prete
142ad6488e
NGFW Enterprise custom roles ( #3408 )
2025-10-13 16:29:27 +00:00
Ludovico Magnocavallo
6045cf6ae2
Add support for contexts to compute-vm module ( #3406 )
2025-10-13 16:54:13 +02:00
Ludovico Magnocavallo
e9b121153a
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-13 09:45:29 +00:00
Julio Castillo
9b9ad76ced
Update gke-hub module to use new Policy Controller API ( #3332 )
...
* Update gke-hub to use new Policy Controller API
Fixes #3287
* Use same config format for servicemesh
* remove useless trys
* use ternaries as in the rest of the repo
* Update docs and fix tests
* Update variables
* Bump tofu version
* Bump terraform version 1.12
2025-10-13 09:47:39 +02:00
Wiktor Niesiobędzki
802a25279a
Test service_iam_grants along service_agent_iam
2025-10-12 15:02:12 +02:00
Wiktor Niesiobędzki
12c0c04e1c
Add tests for service agents iam_emails
2025-10-12 15:02:12 +02:00
Ludovico Magnocavallo
c996285b26
Support context and add configurations factory to workstation cluster module, add FAST project template ( #3401 )
...
* add context to workstation-cluster module
* context test
* workstations project template
2025-10-10 18:59:37 +02:00
Ludovico Magnocavallo
9cf67755de
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-10 06:32:03 +00:00
Ludovico Magnocavallo
6a79d0f74c
Remove unavailable service from VPC-SC stage services list ( #3400 )
2025-10-10 05:58:08 +00:00
Ludovico Magnocavallo
d3c80ce18b
Rationalize location defaults across project factory module and FAST stages ( #3392 )
...
* group default/overrides locations in a single object in pf module
* org setup
* project factory stage
* fix defaults
* pf defaults
* security stage defaults
2025-10-08 07:12:15 +00:00
Ludovico Magnocavallo
7b70177459
add context to bigquery module ( #3388 )
2025-10-07 07:57:42 +00:00
Nishant Raghav
81c7213f92
feat(bigquery-dataset): add optional schema support for views ( #3377 )
...
* feat: add optional schema to BigQuery views for descriptions
* feat: add schema support for view definitions in BigQuery dataset module
* fix: encode schema as JSON for BigQuery views
* feat: add population schema and update query for population view in BigQuery dataset
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-06 05:40:39 +00:00
Ludovico Magnocavallo
7aa4e453d7
allow FAST stage 0 provider template to work with universe ( #3379 )
2025-10-05 11:17:31 +02:00
Vannick Trinquier
cfe2e21ce7
feat: add support for SCC Custom Security Health Analytics module in … ( #3372 )
...
* feat: add support for SCC Custom Security Health Analytics module in organization, folder and project modules
* fix: update description and docs
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-10-03 13:47:50 +02:00
Ludovico Magnocavallo
08ccec3922
Make project id optional in GCS module ( #3369 )
...
* make project id optional in GCS module
* tfdoc
2025-10-02 16:23:23 +00:00