Ludovico Magnocavallo
447420f173
enable source tag support for hierarchical firewall rules ( #3673 )
2026-01-24 09:41:13 +00:00
Julio Castillo
6febcfe136
Add support for mirroring rules to modules/net-firewall-policy ( #3636 )
...
* Add support for mirroring rules to net-firewall-policy
* Split mirroring rules
* Add schema
* Sort variables
2026-01-12 11:10:43 +00:00
Eric Zhao
4ea87d5e6d
feat: Implement target secure tags for hierarchical firewall policies ( #3633 )
...
* feat: Implement target secure tags for hierarchical firewall policies by integrating tag values and refining tag purpose data.
* docs: update variable
2026-01-09 09:11:04 +01:00
Ludovico Magnocavallo
8e8be1eda5
Support CIDR range sets in firewall modules context ( #3424 )
2025-10-16 09:01:05 +00:00
Ludovico Magnocavallo
ecdc248f3f
Add support for context to net-cloudnat, net-firewall-policy modules ( #3414 )
...
* net-cloudnat
* net firewall policy
2025-10-15 13:59:51 +02:00
Ludovico Magnocavallo
36648b6b63
FAST light implementation ( #3255 )
...
* data wip
* wip data
* update org schema, add note on expansion
* all schemas, workload notes
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* wip
* data wip
* wip
* wip
* wip
* wip
* org module IAM context (using lookup)
* new-style context expansion in project IAM
* remove spurious file
* project module contexts
* finalize context replacement format for project module
* revert org module changes
* fix tag id interpolation in project
* fix tag id interpolation in project
* organization module context
* organization context test
* context expansion for folder tag bindings
* test context expansion for tag bindings
* service account module context
* simplify context local
* context for iam service account
* nuke blueprints
* remove links to blueprints
* vpc sc context in project module
* Add context to GCS module
* Add inline deps to plan_summary script
* Make context a top-level variable for folder, organization, sa
* Add add context top-level to VPC-SC
* move context out of factories_config variable
* tfdoc
* fix merge
* fix merge
* fix examples
* net-vpc module context
* add parent ids to folder context
* rename folder parent context
* fix folder parent check
* new project factory stub
* wip
* wip
* refactor defaults
* project iam
* bueckts and service accounts
* start adding context replacements
* better test data
* automation resources for folders and projects
* automation
* add support for project id interpolation
* first tested apply
* improve IAM description in gcs module
* add context to billing account module
* add notification channels to billing account module context
* add billing budgets to new pf
* schemas and defaults
* bootstrap wip
* bootstrap wip
* bootstrap wip
* pf outputs
* pf fixes
* fix pf sample data
* bootstrap lite fixes
* add locations to organization module contexts
* bootstrap lite fixes
* org fixes, billing accounts
* fix default project parent
* bootstrap lite wip
* add locations to gcs module context
* add context support to logging bucket module
* add context to pubsub module
* split out iam variables in gcs module
* fix logging bucket context test
* bootstrap log sink destinations
* streamline logging-bucket module variables
* fix logging bucket context test
* align logging bucket module interface in fast bootstrap
* add support for project-level log buckets to project factory
* support full context expansion in organization module log sinks
* log buckets in fast-lite bootstrap
* make og sink type optional in organization module
* log sinks in fast-lite bootstrap
* set tag values in factory context
* bootstrap lite data
* output files schema
* billing account schema
* output files
* output providers
* gcs output files
* boilerplate
* tflint
* check documentation
* check docs
* fix project module parent variable validation
* fix log bucket examples
* allow null parent in project module
* silence folder test errors
* fix billing account sink example
* fix project example
* fix billing account module
* fix folder tests
* fix FAST
* fix fast
* tfvars outputs
* wif
* cicd service accounts
* cicd
* allow defaults in context, minimal org policies
* support gcs managed folders in project factory and bootstrap lite
* support prefix in provider output files
* rename bootstrap stage
* gitignore
* gitignore
* security folder, billing IAM
* wip tfvars
* fix typo
* security IAM
* control tag iam/context via variables in organization module
* split tag creation from tag IAM to avoid circular refs
* port organization module tag changes to project module
* implement new-style context expansion in vpc-sc module
* fix fast vpc-sc tests
* boilerplate
* vpc sc stage
* schemas
* fast-lite compatibility for vpc sc stage
* make log project number optional in vpc-sc stage
* networking
* networking
* networking
* networking
* rename and move new stage under fast
* clone pf tests
* use context replacement for internal notification channels in billing account module
* support service agents in project module iam context replacements
* support service agents in project module iam context replacements
* add support for kms keys to project module context
* experimental pf example test and fixes
* fix schemas
* fix tests
* tfdoc
* tfdoc
* pf config
* experimental pf
* remove redundant dot from gcs managed folder IAM keys
* bootstrap experimental test
* project factory exp stage test
* skip tflint for bootstrap experimental test
* tflint
* fix gcs test
* documentation work
* documentation work
* Update README.md
* tfdoc
* tfdoc
* readme
* tfdoc
* readme
* readme
* readme
* readme
* support universe in pf exp projects
* missing universe service agents
* org policies import, non-admin billing IAM
* todo
* fix test
* custom constraints
* fast classic dataset
* fix test data
* context replacements in billing module log sinks
* fix typo
* add support for billing log sinks
* update docs
* readme
* cicd fix and test
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-09-02 08:38:57 +02:00
la-luce
45b30a1581
La luce/net firewall policy doc update ( #3232 )
...
* update README.md: explain dynamic fieldname mapping for firewall rules
* Update README.md: add firewall rule factory schema
* Update README.md to flag undocumented implicit defaults
* shorting line length
I think I failed a linting check because a line was too long / would cause readability issues
* fix tfdoc mark
* update TOC
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-07-17 08:32:24 +00:00
Ludovico Magnocavallo
c8e4179f2b
Add custom routes for directpath to net-vpc module ( #2966 )
...
* add custom routes for directpath to net-vpc module
* blueprint tests
* blueprint tests
* blueprint tests
* fast tests
* tfdoc
* module examples
2025-03-19 10:22:47 +00:00
Ludovico Magnocavallo
d8a5c42b82
firewall policy module schema ( #2499 )
2024-08-11 10:12:03 +02:00
Luca Prete
1bd3380a3f
Adds support for external SPGs to net-firewall-policy ( #2409 )
...
- Added support to reference external SPGs in factories in net-firewall-policy
- Added missing tls_inspect argument to hierarchical and global network firewall policies
- Fixed regional firewall policy rules, removing security profile groups and ngfw actions (given they're not supported)
- Updated copyright
2024-07-06 10:33:09 +00:00
Ricardo Godoy
79b36b614b
IPS support for Firewall Policy ( #2291 )
...
* Adding apply_security_profile_group as action option and be able to
provide a security_profile_group.
* Removing default null for optional variable.
* Updating README.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2024-05-21 04:38:43 +00:00
Ludovico Magnocavallo
6941313c7d
Factories refactor ( #1843 )
...
* factories refactor doc
* Adds file schema and filesystem organization
* Update 20231106-factories.md
* move factories out of blueprints and create new factories README
* align factory in billing-account module
* align factory in dataplex-datascan module
* align factory in billing-account module
* align factory in net-firewall-policy module
* align factory in dns-response-policy module
* align factory in net-vpc-firewall module
* align factory in net-vpc module
* align factory variable names in FAST
* remove decentralized firewall blueprint
* bump terraform version
* bump module versions
* update top-level READMEs
* move project factory to modules
* fix variable names and tests
* tfdoc
* remove changelog link
* add project factory to top-level README
* fix cludrun eventarc diff
* fix README
* fix cludrun eventarc diff
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-02-26 10:16:52 +00:00
Ludovico Magnocavallo
01c7f806ce
Selectively enable logging in FAST and firewall policy module rules ( #2032 )
...
* use logging in firewall policy module examples
* enable logging for selected hierarchical firewall rules
2024-01-31 09:50:35 +01:00
Blake Corbitt
9c1afa6261
Issue #2011 - add support for target_resources in hierarchical policy for net-firewall-policy module. ( #2012 )
...
* Issue #2011 - Add support for target_resources in hierarchical firewall policy
* Removing errant character in factory.tf
2024-01-25 17:56:17 +00:00
Ludovico Magnocavallo
37dc48bca4
fix factory type for firewall rule ports ( #1996 )
2024-01-21 12:38:24 +01:00
Richard Olson
10aeb6615a
readme update
2023-08-24 20:01:47 +10:00
Ludovico Magnocavallo
79373721df
Remove firewall policy management from resource management modules ( #1581 )
...
* rename firewall policy module, fix outputs
* add TOC to firewall policy module
* don't depend policy on parent id
* remove firewall policy from resource management modules
* remove factory conditionals
* fast net a and b
* fast stages
* fast tfdoc
* fast tfdoc
* remove unused test
* fix shielded folder blueprint
* fix shielded folder blueprint
2023-08-09 11:23:07 +00:00
