* Enable ADMIN_READ audit log for sts.googleapis.com in the automation (iac) project for better workload identity debugging and auditing
* Fix FAST tests
* Test fix#2
* Test fix#3
* Final test fix
---------
Co-authored-by: Julio Castillo <jccb@google.com>
* Set node_pool_auto_config for GKE standard cluster only if auto provisioning is enabled
* handle null dereference for terraform cli less than v1.12
* fixed gke-hub test
Explicitly enable node auto provisioning
* Added cross project support for backend bucket.
* Ran terraform fmt.
* Ran tfdoc.
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
* feat: add GCS bucket trigger support for Cloud Run services 🌟
* feat: add examples for Cloud Run service with Eventarc storage triggers
* fix: update bucket name in Eventarc storage trigger example and clean up service account configuration
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
* feat: Add Service Agent substitution for `iam_by_principals`, just like the other `iam*` attributes
* feat: Add Service Agent substitution for Buckets created via `project-factory`
* fix: Service Account lookups in IAM assignments of Buckets, created by `project-factory`
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
* Added cross project NEG support
* Made neg_configs variable same as in net-lb-app-int
* Added support for cross-project negs in net-lb-app-ext-regional module
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
Co-authored-by: Julio Castillo <juliocc@gmail.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
* updated billing.tf file to conditionally creates billing sink if the billing account resides out of org
* replace resources with modules
* replace individual iam resources with billing_iam local passed in the module
* update module name and path and move iam from local to module call
* update README.md
* Add log_bucket option to billing_account variable, and update billing account IAM assignments
* update 0-bootstrap README to reflect changes to billing account module
* Update current bootstrap tests to reflect the change to billing_account variable
* Create test for the case when billing account log bucket is created
* running fmt
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
