kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,892 Commits 1 Branch 1 Tag
4c6e6d6791af559de50bb9055a9ffab8f97928fa
Commit Graph

5892 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ludovico Magnocavallo
647895a928 Leverage environments for folder and project creation in FAST resman and security (#2787) 
* resman

* resman tests

* untested sec changes

* plan fixes

* tests, tfdoc, test apply

* boilerplate

* resource naming
 2024-12-27 21:03:31 +01:00
Ludovico Magnocavallo
33b129eb12 Merge remote-tracking branch 'origin/master' into fast-dev 2024-12-26 16:50:08 +01:00
Wiktor Niesiobędzki
c176ea16be Make PSA connection more robust 2024-12-26 16:37:24 +01:00
Ludo
4dd679ff80 Merge branch 'fast-dev' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast-dev 2024-12-26 08:56:17 +01:00
Ludo
c9cb93584b update changelog 2024-12-25 08:25:57 +01:00
Ludovico Magnocavallo
94c5e630e7 fix validation message (#2784) 2024-12-25 08:25:07 +01:00
Harvey Liu
59e3c87034 Update net-lb-app-ext security_settings variables (#2783) 
* updates

- set client_tls_policy as optional
- set subject_alt_names as optional

* update

run cmd ./tools/tfdoc.py modules/net-lb-app-ext to fix linting error
 2024-12-25 07:52:31 +01:00
simonebruzzechesse
bf2995d94b Fix bindplane cos module (#2781) 
Fix bindplane cos module
 2024-12-23 10:37:09 +01:00
Ludo
7cb162bfb2 update changelog 2024-12-21 11:27:26 +01:00
Sergio Rodriguez
1e4a3a4bb8 an empty ssl_certificates list should be set to null (#2780) 
An empty `ssl_certificates` list will conflict with a user-defined
`certificate_manager_certificates` value, so exclude it.
 2024-12-21 10:26:29 +00:00
Wiktor Niesiobędzki
ddd8382e7c fix failing tofu tests 2024-12-20 10:19:01 +01:00
Julio Castillo
efddd1c45e Document tag_bindings definition as map(string) (#2777) 2024-12-19 14:47:32 +01:00
Julio Castillo
f1acc92864 Add support for log views and log scopes (#2776) 
* Add views and tags to logging bucket

* Add logs scopes to project

* Add missing inventory
 2024-12-18 18:29:44 +01:00
simonebruzzechesse
e241624040 New BindPlane OP Management console on GKE SecOps blueprint (#2721) 
new bindplane on GKE secops blueprint
 2024-12-17 22:16:40 +01:00
Luca Prete
e72303a94b [FAST] Remove unused stage 1 CICD variables (#2774) 2024-12-17 17:26:02 +01:00
Wiktor Niesiobędzki
3337f0be0e Fix for perma-diff when using PSC NEGs. 
Provider issue: https://github.com/hashicorp/terraform-provider-google/issues/20576
 2024-12-17 14:28:48 +01:00
Wiktor Niesiobędzki
6d51c8da4d Use separate versions.tofu for OpenTofu constraints 2024-12-17 12:29:04 +01:00
Ludo
531934457e update changelog 2024-12-16 19:25:41 +01:00
Ludovico Magnocavallo
91da1c6482 Support customizable resource names to fast stage 1 (#2769) 
* add support for resource names to fast stage 1

* tflint version
 2024-12-16 18:07:28 +00:00
Ludovico Magnocavallo
0fa257e6b1 Support customizable resource names in FAST stage 0 (#2768) 
* support customizable resource names in FAST stage 0

* tfdoc

* tflint

* remove comment

* use object type

* tfdoc

* bump tf version

* bump terraform version in versions files

* tf version in ci

* trigger workflow
 2024-12-16 17:46:34 +01:00
Ludo
89a33f0a73 update changelog 2024-12-13 18:03:48 +01:00
Ludovico Magnocavallo
133a9bb133 fix workspace logs sink in FAST bootstrap stage (#2767) 2024-12-13 13:22:42 +00:00
Ludovico Magnocavallo
ae9f4c6d74 allow optional creation of billing resources in FAST boostrap stage (#2766) 2024-12-13 12:32:16 +01:00
Ludo
1ee21fae5a better org replacement in iam tool 2024-12-13 11:01:23 +01:00
Julio Castillo
b38e8bfa79 Update issue templates (#2765) 2024-12-12 12:40:47 +00:00
Ludo
9873fc41f6 update changelog 2024-12-12 12:09:37 +01:00
Ludovico Magnocavallo
d86b8d565c Refactor GKE cluster modules access configurations, add support for DNS endpoint (#2761) 
* stub

* gke standard module and tests

* blueprints

* tfdoc

* autopilot

* blueprints

* tfdoc

* gke hub module examples

* dataproc and gke fixture
 2024-12-12 11:02:24 +01:00
Ludovico Magnocavallo
d59d182456 ignore ssl certificates if none are passed in net-lb-app-int module (#2764) 2024-12-12 10:37:37 +01:00
Luca Prete
07e0fb895b Update net-vlan-attachment module readme (#2757) 
* Update net-vlan-attachment module configuration with the correct link-local IP addresses and interconnect self-link formats.

* fix example formatting

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-12-11 08:00:28 +00:00
Ludo
76176d518c update changelog 2024-12-10 23:42:16 +01:00
Jason Steenblik
90360c591e Add confidential compute support to google_dataproc_cluster in the da… (#2736) 
* Add confidential compute support to google_dataproc_cluster in the dataproc module

* fix parent id lookup for networking and security stages (#2744)

* Add optional automated MD5 generation in net-vlan-attachment module (#2745)

* Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2749)

Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add ability to autogenerate md5 keys in net-vpn-ha (#2748)

* Add ability to optionally generate MD5 secrets in VPN module

* Add ability to autogenerate MD5 keys in net-vpn-ha module

* restore missing output

* fix test counts

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* update changelog

* Bump path-to-regexp and express (#2752)

Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add support for routing mode to net-swp module (#2751)

Co-authored-by: Julio Castillo <jccb@google.com>

* remove default location in tag value - cloud-run-v2 tags.tf (#2755)

The Parent resource has a default to europe-west1 when it should be for the resource block from where the cloud run actually is.

Changed to use the var.region instead

* Add path_template_match and path_template_rewrite support to net-lb-app-ext (required for React apps for example).

* Add rest of load balancers.

* Add path_template_match and path_template_rewrite support to internal load balancers

* Add disk encyption key to the google_compute_instance_template - Sovereign support (#2750)

* add disk encyption key to the google_compute_instance_template

* add a condition to the kms_key_self_link

* use dynamic variable for disk_encryption_key

* remove the getpip from the repo

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* Add support for password validation policy to cloudsql module (#2740)

* add support for password validation policy to cloudsql module

* fix defaults

* update changelog

* bump provider version constraint

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Luca Prete <preteluca@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Matthew Callinan <47421139+Mattible@users.noreply.github.com>
Co-authored-by: Taneli Leppä <taneli@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Kovács Dávid <david-kovacs@t-systems.com>
 2024-12-10 16:39:48 +01:00
Ludo
9f2c89c0eb update changelog 2024-12-09 10:46:43 +01:00
Ludovico Magnocavallo
f3b14f5e69 Add support for password validation policy to cloudsql module (#2740) 
* add support for password validation policy to cloudsql module

* fix defaults
 2024-12-09 09:44:15 +00:00
Kovács Dávid
2defaed545 Add disk encyption key to the google_compute_instance_template - Sovereign support (#2750) 
* add disk encyption key to the google_compute_instance_template

* add a condition to the kms_key_self_link

* use dynamic variable for disk_encryption_key

* remove the getpip from the repo

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-12-09 10:30:58 +01:00
Wiktor Niesiobędzki
3f86056c78 Add path_template_match and path_template_rewrite support to internal load balancers 2024-12-09 09:32:48 +01:00
Taneli Leppä
c27da296b1 Add rest of load balancers. 2024-12-09 09:32:48 +01:00
Taneli Leppä
73b6088132 Add path_template_match and path_template_rewrite support to net-lb-app-ext (required for React apps for example). 2024-12-09 09:32:48 +01:00
Matthew Callinan
817df69ff8 remove default location in tag value - cloud-run-v2 tags.tf (#2755) 
The Parent resource has a default to europe-west1 when it should be for the resource block from where the cloud run actually is.

Changed to use the var.region instead
 2024-12-09 08:48:23 +01:00
Ludovico Magnocavallo
36b70bd8b8 add support for routing mode to net-swp module (#2751) 
Co-authored-by: Julio Castillo <jccb@google.com>
 2024-12-08 13:26:01 +00:00
dependabot[bot]
b6421ec0b7 Bump path-to-regexp and express (#2752) 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-08 09:34:19 +00:00
Ludo
d307feb043 update changelog 2024-12-06 08:37:40 +01:00
Luca Prete
c6c6bbfffa Add ability to autogenerate md5 keys in net-vpn-ha (#2748) 
* Add ability to optionally generate MD5 secrets in VPN module

* Add ability to autogenerate MD5 keys in net-vpn-ha module

* restore missing output

* fix test counts

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-12-06 07:34:56 +00:00
dependabot[bot]
5842bf7407 Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2749) 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-06 06:54:12 +01:00
Luca Prete
747b62b1e3 Add optional automated MD5 generation in net-vlan-attachment module (#2745) 2024-12-05 16:55:16 +00:00
Ludovico Magnocavallo
1a1886c551 fix parent id lookup for networking and security stages (#2744) 2024-12-04 21:08:31 +01:00
Ludo
24b9049299 update changelog 2024-12-01 06:59:30 +01:00
Ludovico Magnocavallo
e3cdde35b6 Add support for secret manager config to gke cluster modules (#2741) 
* add secret manager config to gke cluster

* fix variable default
 2024-11-29 09:24:18 +01:00
Ludo
ca3fbf4de3 update changelog 2024-11-28 07:50:27 +01:00
Ludo
1482286d0c update changelog 2024-11-28 07:49:20 +01:00
Rob Rankin
20a1689637 Allow override of GKE Nodepool SA Display Name (#2734) 
* Allow override of Nodepool SA Display Name

* Remove comment

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-11-28 06:47:16 +00:00