Martin Bergo
60ec6db9cd
docs(organization): document external IAM management for logging sinks at scale ( #3746 )
...
* docs(organization): document external IAM management for logging sinks at scale
* Update TOC
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-02-18 15:08:23 +00:00
Ludovico Magnocavallo
26e622edae
prep v53.0.0
2026-02-12 09:12:54 +00:00
Ludovico Magnocavallo
079aac1f88
Merge remote-tracking branch 'origin/master' into fast-dev
2026-02-12 09:07:04 +00:00
Ludovico Magnocavallo
5765b11a87
prep v52.1.0
2026-02-12 09:01:26 +00:00
Ludovico Magnocavallo
a782b3e11b
Merge remote-tracking branch 'origin/master' into fast-dev
2026-02-10 07:41:40 +00:00
Julio Castillo
518d9d96aa
Expose additional workforce identity attributes ( #3717 )
2026-02-09 15:30:58 +01:00
Ludovico Magnocavallo
465ab5499a
Merge remote-tracking branch 'origin/master' into fast-dev
2026-02-07 11:17:09 +00:00
Julio Castillo
7d33becacf
Add asset_search to folder, project, and organization modules. ( #3707 )
2026-02-05 12:56:27 +01:00
Julio Castillo
f5958b9eae
Merge branch 'master' into fast-dev
2026-02-05 12:25:31 +01:00
Liam Nesteroff
9debc3df6f
feat: Add schema check to custom constraints, SCC custom modules, and observability configurations, along with their respective schema definitions. ( #3705 )
2026-02-05 12:20:25 +01:00
Samuele Perticarari
b2cbd7a3c6
fix: Fixed external broken links ( #3703 )
2026-02-04 14:35:37 +01:00
Ludovico Magnocavallo
8e7253ba11
add missing IAM interface attributes to service account module ( #3700 )
2026-02-04 12:07:06 +01:00
Vannick Trinquier
2af44b0651
Add support for security command center mute rules in module organization, folder and project ( #3694 )
2026-02-04 08:31:05 +07:00
Ludovico Magnocavallo
cdc5e7df45
prep v52.0.0
2026-01-30 16:00:47 +00:00
Ludovico Magnocavallo
12fd675c8c
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-30 15:59:10 +00:00
Ludovico Magnocavallo
1f8c2b36da
prep v51.1.0
2026-01-30 15:58:47 +00:00
Ludovico Magnocavallo
30810146cf
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-30 15:54:45 +00:00
Luca Prete
3877a40119
Add PSC-I support to Agent Engine module ( #3686 )
2026-01-30 07:24:06 +03:00
Ludovico Magnocavallo
d95c4fcc3f
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-27 11:55:58 +00:00
Vannick Trinquier
2ea4c27fe8
Add context support for constraints and additional controls for hardened datasets (IAM, GKE and others) ( #3661 )
2026-01-23 08:28:02 +07:00
Julio Castillo
d46b39b717
Add missing context interpolations ( #3659 )
2026-01-20 20:21:56 +01:00
Julio Castillo
d9e1b924a1
Add asset_feeds to resman modules ( #3658 )
...
* Add asset_feeds to resman modules
* Add examples and update readmes
* Extend pubsub_topic context to project and folder modules
* Use pubsub_topic context for pubsub_destination
* Update readmes and add project-factory asset_feed example
* Update context tests
* Update schemas
2026-01-20 14:37:35 +00:00
Ludovico Magnocavallo
04de8f7de7
Support CMEK configuration in org module logging settings, expose identities in FAST context ( #3656 )
...
* support CMEK configuration in org module logging settings, expose identities as FAST contexts
* remove hash from inventories
2026-01-19 13:35:30 +01:00
Julio Castillo
cff8a25c59
Introduce iam_by_principals_conditional ( #3649 )
...
* Introduce iam_by_principals_conditional
* Add iam_by_principals_conditional to project factory
* Update IAM ADR
* Update project factory readme
* Sync FAST schemas
* Update organization schema
* Add resman tests for iam_by_principals_conditional
* Update PF project-defaults.tf
* Update copyright
2026-01-14 11:16:07 +00:00
Eric Zhao
c1248d328a
Allow any VPC for (secure) network_tags ( #3634 )
...
* feat: allow all for VPC networks
* feat: add examples
* feat: add header
* feat: module test
* fix: update network testing data to pass validation
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-12 09:34:18 +00:00
Ludovico Magnocavallo
f8f856c9ac
reinstate v51.0.0
2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
1b4930513f
prep v51.1.1
2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
6ab071da8d
prep v51.1.0
2026-01-08 12:12:43 +00:00
ooshrioo
ccad5654d9
Fix workforce identity federation provider configuration ( #3626 )
...
* Fix workforce identity federation provider configuration
Remove redundant 'organizations/' prefix from parent parameter as
var.organization_id already contains the full organization path.
* Update test to match corrected parent parameter
The test expected the redundant 'organizations/' prefix, but the fix
correctly removes this duplication.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-07 14:02:13 +01:00
Ludovico Magnocavallo
ef027ad5b5
prep v51.0.0
2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d
prep v50.1.0
2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
a554971563
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-22 06:36:05 +00:00
Luca Prete
c193fb37ee
Upgrade Terraform provider to 7.13 ( #3600 )
2025-12-18 11:29:48 +01:00
Vannick Trinquier
cc24046be8
Add CMEK support to FAST and controls for CMEK encryption ( #3556 )
2025-12-14 12:14:08 +07:00
Ludovico Magnocavallo
d21e9c51e8
prep v50.0.0
2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
5e606d0fff
prep v49.3.0
2025-12-10 17:51:43 +00:00
Ludovico Magnocavallo
ac68262733
prep v49.2.0
2025-12-08 07:58:58 +00:00
Michael Woodham
bc5732357c
Updates to GKE modules to support Secret Sync ( #3562 )
...
* Updates to add secret_sync to GKE module in CFF
* updated READMEs against the python tfdoc command
* updated version for secret_sync to reflect 7.12.0
* update provider versions to 7.12.0
* Updated READMEs which got clobbered by merge with main
* Fixed test errors in secret-manager module
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-12-05 15:30:49 +00:00
Ludovico Magnocavallo
bd4f2e317a
prep v49.1.0
2025-11-24 08:37:06 +00:00
Ludovico Magnocavallo
10e29e1eeb
Context improvements: "all service accounts" principal in folder, org, project modules; custom roles in factory condition vars for FAST stage 0 ( #3548 )
...
* iam principalsets
* fix folder
* add custom roles to factory condition vars in stage 0
* project shared vpc IAM
2025-11-24 08:28:41 +00:00
Julio Castillo
3959bb3974
Fix aprover -> approver ( #3540 )
...
* Fix aprover -> approver
* Once again...
2025-11-19 08:50:23 +01:00
Ludovico Magnocavallo
3392953188
prep v49.0.0
2025-11-18 13:51:02 +00:00
Ludovico Magnocavallo
da5726324d
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-18 13:49:13 +00:00
Ludovico Magnocavallo
83ebdbbd2d
prep v48.1.0
2025-11-18 13:47:16 +00:00
Ludovico Magnocavallo
8c29512890
Leverage project-level workload identity in FAST CI/CD ( #3535 )
...
* Leverage project-level WIF in FAST CI/CD
* add new context namespace, improve outputs, fix tests and inventories
* make YAML linter happy
* README
2025-11-18 10:49:44 +00:00
Ludovico Magnocavallo
897c6ef8c3
Add support for Workload Identity to project module and project factory ( #3531 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
* wip
* project factory
* pf outputs
* iam templates will be added where ci/cd configs are managed
* fix merge conflicts
2025-11-17 07:31:21 +00:00
Ludovico Magnocavallo
87ed19bc47
Add support for Workforce Identity to organization module and org setup stage ( #3530 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
2025-11-17 08:00:30 +01:00
Ludovico Magnocavallo
5270586a8e
fix schema doc tool, fix schema errors, regenerate schema docs ( #3524 )
2025-11-12 08:50:52 +01:00
Ludovico Magnocavallo
3289a6ff27
prep v48.0.0
2025-11-11 09:13:44 +00:00
