kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,360 Commits 1 Branch 1 Tag
3fe754167ebc20fca8221b5262372857ff0d5fbf
Commit Graph

1808 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
980011806c fix permadiff in cloud nat module (#2301) 2024-05-23 08:38:03 +02:00
Ludovico Magnocavallo
ef5178c929 add support for shared vpc host to project factory (#2300) 2024-05-22 07:56:34 +00:00
simonebruzzechesse
1e149c18fc New alloydb module (#2285) 
* add alloydb module

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-22 09:40:25 +02:00
Ricardo Godoy
79b36b614b IPS support for Firewall Policy (#2291) 
* Adding apply_security_profile_group as action option and be able to
provide a security_profile_group.

* Removing default null for optional variable.

* Updating README.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2024-05-21 04:38:43 +00:00
Wiktor Niesiobędzki
1ecd637932 Internet NEG for net-lb-app-int (#2293) 
Internet NEG for net-lb-app-int
 2024-05-20 21:12:39 +02:00
Simone Ruffilli
d3ffcc2b1c Disable reserved_internal_range in net-vpc due to provider bug (#2282) 2024-05-15 05:46:18 +00:00
Simone Ruffilli
9a26fe8635 Add support for reserved_internal_range in net-vpc (#2275) 
Adds support for reserved_internal_range to net-vpc
 2024-05-14 22:19:45 +03:00
apichick
ff6f6bb32a Added apigee-x-foundations blueprint (#2274) 2024-05-14 14:53:38 +00:00
luigi-bitonti
a14ed9add2 Cloud function CMEK key support (#2270) 
* Added support to kms key

* Updated doc

* Fix variable description.

* Updated README

* Cloud function v2 integration with kms

* Fix variables description

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-14 12:56:10 +00:00
simonebruzzechesse
4d1d3c6811 New Bindplane cloud-config-container setup (#2272) 
* new bindplane cloud-config-container setup
 2024-05-14 14:45:39 +02:00
Ludovico Magnocavallo
e4941c27f2 Implement the full IAM interface for tags (#2269) 
* IAM authoritative bindings in org module

* remove extra newline

* organization module

* project module

* tfdoc
 2024-05-13 20:18:51 +02:00
Ludovico Magnocavallo
604920dec9 add logging settings to folder module (#2268) 2024-05-13 09:24:17 +02:00
Wiktor Niesiobędzki
6a3c7fe444 CloudSQL PSC Endpoints support (#2242) 
* Add PSC endpoints consumers to net-address
* Cloud SQL E2E tests
 2024-05-12 12:00:39 +02:00
Wiktor Niesiobędzki
35a17a46ba Fix failing E2E tests 2024-05-11 17:29:35 +02:00
Jan Van Bruggen
5b3ed10cda Fix bug from output typo in new project-factory module (#2264) 
`local.folders` is just a map of var-based keys to string manipulations on those keys, while `local.hierarchy` is the seemingly-intended map of var-based keys to generated IDs/numbers.

see
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L32
vs.
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L39

Thank you for recently developing this convenient module!
 2024-05-10 22:19:35 +00:00
Julio Castillo
d838c4ac47 Make Simple NVA route IAP traffic through NIC 0 (#2262) 2024-05-09 18:29:25 +02:00
Julio Castillo
c58850c096 Add Hybrid NAT support (#2261) 
* Updates to support hybid NAT

* Fix readme

* Fix variable order
 2024-05-09 13:24:41 +00:00
Ludovico Magnocavallo
c9503d5ac5 Remove data source from folder module (#2260) 
* remove data source from folder module

* fix fast tfdoc

* fix locals type error

* fix folder test

* fix fast test
 2024-05-09 13:09:54 +00:00
simonebruzzechesse
dccf5735c5 fis issues with private workstation-cluster module and persistent_directories (#2247) 
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-02 06:09:10 +00:00
Ludovico Magnocavallo
fdcd309729 add support for labels to GKE backup plans (#2252) 2024-05-01 20:20:21 +02:00
Ludovico Magnocavallo
27a055a9cb fix factory ingress policies (#2251) 2024-05-01 18:50:30 +02:00
jnahelou
e1226676fd Added missing identity when connectors API is enabled (#2248) 2024-04-30 17:21:35 +00:00
apichick
be966c4f32 Fixed issue with service networking DNS peering (#2246) 
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-04-28 20:18:02 +00:00
apichick
ab174274de Added new attributes Apigee organization and bumped up providers version (#2243) 2024-04-28 17:31:42 +02:00
apichick
a95e681f05 Removed BFD settings from net-vpn-ha module as it is not supported (#2244) 
* Removed bfd settings from net-vpn-ha as it is not supported

* Removed bfd settings from net-vpn-ha as it is not supported
 2024-04-28 12:11:07 +02:00
Wiktor Niesiobędzki
d831d32864 Use default labels on pubsub subscription when no override is provided 2024-04-27 09:22:41 +02:00
Deepak Kumar
64ac89d59c fix: allow disabling node autoprovisioning (#2238) 
- This fix allows a GKE Standard cluster to be configured with no auto-provisioned node pool,
  but allow setting autocluster profile for user-provisioned node pools like created via `gke-nodepool` module.

Co-authored-by: Julio Castillo <jccb@google.com>
 2024-04-26 07:17:48 +00:00
luigi-bitonti
d901992607 Added build env vars in cloud function v1 (#2234) 2024-04-23 19:20:38 +02:00
Ludovico Magnocavallo
309792c559 Refactor vpc-sc support in project module, add support for dry run (#2229) 2024-04-22 09:28:01 +02:00
simonebruzzechesse
b6771ae7ad fix cloud sql PSA after module upgrade (#2226) 
* fix cloud sql PSA after module upgrade
add proxy subnet for ILB
* fix cloud run service accessible from public url in case the service is privately deployed
* add deletion_policy variable in psa_configs for net-vpc module
fix destroy issue with phpIPAM blueprint
 2024-04-19 12:41:02 +02:00
cmalpe
1563a76011 added missing option for exclusion scope (#2224) 
* added missing option for exclusion scope

* added validation and changes for gke autopilot
 2024-04-18 14:12:16 +03:00
Julio Castillo
3af7e257d2 Add tflint to pipelines (#2220) 
* Fix terraform_deprecated_index

https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md

* Fix terraform_deprecated_interpolation

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md

* Fix more indexing

* Remove unused variable

* Enable TFLint for modules

* Add tflint config file

* Fix chdir

* Lint modules

* TFLint fixes

* TFLint

* Fixes binauthz README

* Fixes DNS response policy tests. Restores MIG outputs.

* Fixes other DNS response policy tests.

* Update tests for fast 2-e

* Moar fixed tests

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
 2024-04-17 10:23:48 +02:00
Ludovico Magnocavallo
9414779cc2 Allow multiple PSA service providers in net-vpc module (#2218) 
* allowing multiple PSA service providers in net-vpc module

* tfdoc

* tfdoc

* Add tfvars/yaml tests

* fix module and tests

* re-enable inventory

* merge fix

* Add multiple PSA test case

* fix cloudsql example

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
 2024-04-16 15:02:36 +00:00
Ludovico Magnocavallo
198d90c6fc Remove data source from net-vpc module (#2216) 
* remove data source from net-vpc module

* fix test inventories

* remove data source, fix fast inventories
 2024-04-16 14:11:12 +03:00
Ludovico Magnocavallo
fbc7e891db Net LB App Internal Cross-Region recipe (#2214) 
* reorder tfdoc methods

* add support for recipes to tfdoc

* fix repo url in tfdoc

* update module README

* validated untested recipe

* validated untested refactored recipe

* add optional proxy subnet creation, outputs, fixes

* tested

* tfdoc fix

* fix README

* exclude examples from test collector
 2024-04-14 19:38:05 +03:00
Ludovico Magnocavallo
3138eb9025 add support for tags to GCS module (#2213) 2024-04-11 13:19:05 +00:00
Wiktor Niesiobędzki
825bfca66d Document how to get quota_ids 2024-04-11 11:51:19 +02:00
Wiktor Niesiobędzki
a236222a93 Add project quotas factory 2024-04-11 11:51:19 +02:00
Simone Ruffilli
7833203d87 Add support for GCS soft-delete retention period (#2212) 
* Add support for GCS soft-delete retention period
 2024-04-11 07:31:00 +00:00
Ludovico Magnocavallo
9cace5272f Add support for quotas to project module (#2210) 
* add support for quotas to project module

* tfdoc

* better outputs

* Ensure keys in `quota_configs` are unique

* update fast tests

* Make quota E2E testable

* Remove quota project caveat

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
 2024-04-10 17:03:04 +00:00
Ludovico Magnocavallo
e08ff19cd9 add support for data cache to cloud sql module (#2209) 2024-04-10 08:24:00 +02:00
Tone
2831af09fa feat(gke-cluster-standard): Add optional CiliumClusterWideNetworkPolicy (#2207) 
* feat(gke-cluster-standard): Add optionnal `CiliumClusterWideNetworkPolicy`

Add `CiliumClusterWideNetworkPolicy` option on cluster.

Ref:
 - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#enable_cilium_clusterwide_network_policy
 - https://cloud.google.com/kubernetes-engine/docs/how-to/configure-cilium-network-policy

* feat(gke-cluster-standard): Update Google provider to manage new feature

* feat(gke-cluster-standard): Move `cilium_clusterwide_network_policy` to `enable_features` field

* fix(scheduled-asset-inventory-export-bq): Set `dataset_id` with underscores

* fix(bigquery-dataset): Set `dataset_id` with underscores
 2024-04-09 17:08:36 +02:00
Ludovico Magnocavallo
b472722b05 add validation rule for DNS module health check targets (#2205) 2024-04-08 11:30:42 +00:00
bluPhy
c420f17636 Updating cloud-run-v2 terraform and some typos (#2201) 
* Updating cloud-run-v2 terraform and some typos

Updating modules/cloud-run-v2/main.tf to determine the tcp_socket value

Fixin typos in:
tests/fixtures.py
modules/workstation-cluster/README.md
modules/net-lb-int/README.md
modules/dataplex/README.md
modules/dataform-repository/README.md
modules/__docs/20230816-iam-refactor.md
CONTRIBUTING.md
blueprints/third-party-solutions/f5-bigip/f5-bigip-ha-active/startup-script.tpl
blueprints/third-party-solutions/f5-bigip/f5-bigip-ha-active/README.md

* Update README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
 2024-04-07 09:49:07 +00:00
Veronika Priesner
0cae2ff08c added force_destroy to dns module (#2202) 
* added force_destroy to dns module

* ran tfdoc.py modules/dns

* set default of force_destroy to null

* reran tfdoc.py after default value change
 2024-04-05 09:20:51 +00:00
Elia
b80132a618 FAST GCVE stage (#2191) 
* GCVE stage prerequisites

* fix gcve prereq

* gcve stage first deploy

* Updated readme filex

* docs updated

* some fixes after testing

* updated readme files

* elia fix

* gcve net admin custom role

* gcve net admin custom role

* elia fix

* ven peering deploy

* elia fix

* added blueprint and stage tests

* Edits to Readme files

* typo in outputs

* clean-up

* gcve stage tests fix

* readme fix

* fix sorting

* fix copyrights and readme file

* fix test

* fix copyright

* fixed gcve feature flag cond.

* removed validation

* fixed typo

* fixed typo

* fixed gcve tests

* fixed typo

* fixed typo

* fixed sorting

* fixed sorting

---------

Co-authored-by: Konrad Schieban <kschieban@google.com>
 2024-04-03 17:25:12 +02:00
Amela Spica
fb4a661f54 VPC module - PSA configurable service producer (#2190) 
* added configurable service provider for PSA in VPC module

* fmt

* readme update

* description fix based on PR comment

* readme regenerated
 2024-04-02 20:23:25 +02:00
Wiktor Niesiobędzki
da4e5acd46 Fix failin e2e tests for Cloud Run CMEK 
* create a fixture adding IAM grants to Cloud Run service agent
* add to README.md information about required grant

Decided to add ths as a fixture though it may not be reused so:
* grant is not polluting the example
* grant is fairly easy discoverable from README.md
* setup_module is not burdened with additional grant which is used only
  for this example
 2024-03-28 15:02:56 +01:00
Ludovico Magnocavallo
f487b27aa9 Fix default nodepool defaults in gke standard module (#2182) 
* fix default nodepool defaults in gke standard module

* fix inventory
 2024-03-28 11:22:14 +01:00
Saleh Elnagar
136d74db4e add cmek option for cloud_run_v2 (#2177) 
add cmek option for cloud_run_v2 service and job
 2024-03-27 09:15:02 +00:00