David Liebert
5374899b36
added support for labels with google_compute_global_address resource ( #3622 )
...
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-07 13:19:48 +00:00
ooshrioo
ccad5654d9
Fix workforce identity federation provider configuration ( #3626 )
...
* Fix workforce identity federation provider configuration
Remove redundant 'organizations/' prefix from parent parameter as
var.organization_id already contains the full organization path.
* Update test to match corrected parent parameter
The test expected the redundant 'organizations/' prefix, but the fix
correctly removes this duplication.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-07 14:02:13 +01:00
Ludovico Magnocavallo
ef027ad5b5
prep v51.0.0
2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d
prep v50.1.0
2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
cb68dfda2a
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-06 08:42:25 +00:00
Suryansh Singhal
ba304518f1
Prevent recreation for key_revocation_action in compute-vm module ( #3620 )
...
* fix(compute-vm): prevent instance recreation for key_revocation_action_type
The `key_revocation_action_type` attribute in the `google_compute_instance`
resource defaults to `NONE` on the provider side.
When this optional attribute was not explicitly set in the module's
`options` variable, it resolved to `null` in the Terraform configuration.
This caused Terraform to detect a change from `null` to `NONE` on every
plan, leading to unnecessary instance recreation.
This change applies `coalesce` to
`var.options.key_revocation_action_type` in the resource definition so
that it defaults to `NONE` when unset, aligning the configuration with
provider behavior and preventing a permadiff.
* updated the regional compute template too with the key_revocation_action_type
* fixed the formatting
2026-01-05 11:53:47 +01:00
Ludovico Magnocavallo
502d953d03
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-04 11:23:59 +00:00
Luca Prete
d0d7c64670
Refactor Agent Engine module to support new source based deployments ( #3609 )
...
* Refactor Agent Engine module to support new source based deployments
* Fix linting
* Fix tests
* Fix tests
* Remove generated_pickle line from examples
* Fix indentation
* Delete modules/agent-engine/terraform.atfvars
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2026-01-04 08:11:46 +00:00
Ludovico Magnocavallo
fedf90d25f
Add support for pubsub to project factory ( #3608 )
...
* add support for pubsub to project factory
* remove duplicate data access log definitions from folders
* tfdoc
* schemas
* fix example
* add pubsub topics context to org in stage 0
2025-12-23 10:24:33 +00:00
Wiktor Niesiobędzki
e811daaff7
fix bucket name for versions file in 0-org-setup
2025-12-23 07:32:56 +01:00
Ludovico Magnocavallo
a554971563
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-22 06:36:05 +00:00
Wiktor Niesiobędzki
2687dd2b97
make a test self-link look like a self-link and fix tests
2025-12-19 11:05:25 +01:00
Wiktor Niesiobędzki
73664615a4
Correct test for Direct VPC egress for CFv2
2025-12-19 11:05:25 +01:00
Luca Prete
0ac51b6050
Password for initial_user for AlloyDB is no longer required ( #3596 )
2025-12-18 11:57:32 +01:00
Luca Prete
c193fb37ee
Upgrade Terraform provider to 7.13 ( #3600 )
2025-12-18 11:29:48 +01:00
Wiktor Niesiobędzki
85ebc4bc6f
fix tests
2025-12-18 11:20:31 +01:00
Vannick Trinquier
cc24046be8
Add CMEK support to FAST and controls for CMEK encryption ( #3556 )
2025-12-14 12:14:08 +07:00
Ludovico Magnocavallo
ab0f55216a
Add support for descriptive name to projects ( #3591 )
...
* add support for descriptive name to projects
* boilerplate
* fmt
2025-12-12 09:06:47 +01:00
Ludovico Magnocavallo
216a12eae5
Fix CI/CD dataset files and provider workflow variable in FAST stage 0 ( #3587 )
...
* fix CI/CD dataset files and provider workflow variable
* IAM principals use pool, sts uses provider
* tfdoc
* fix variable description
2025-12-11 15:05:39 +01:00
Ludovico Magnocavallo
d21e9c51e8
prep v50.0.0
2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
7cc12da6b3
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-10 18:19:11 +00:00
Ludovico Magnocavallo
5e606d0fff
prep v49.3.0
2025-12-10 17:51:43 +00:00
kovagoadam
4e88bec299
Use project numbers in billing budget filter ( #3555 )
...
* Fixed project level billing budget filter
* Moved project_numbers local to concat block
* Fixed with try block
* fix project replacement
* tfdoc
* fix test
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-12-10 17:35:06 +00:00
Ludovico Magnocavallo
dd6b1ea493
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-09 17:14:59 +00:00
aumohr
33bf7ab157
added role required for support ticket creation ( #3578 )
...
* added role required for support ticket creation
* updated tests for role count
* updated tests for resource count
2025-12-09 14:09:06 +04:00
Ludovico Magnocavallo
66b9106e6e
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-08 08:09:55 +00:00
Ludovico Magnocavallo
ac68262733
prep v49.2.0
2025-12-08 07:58:58 +00:00
Wiktor Niesiobędzki
d370121245
move c4* tests to c zone
2025-12-07 15:15:44 +01:00
Julio Castillo
8d51ccd491
Add Direct VPC Egress support to modules/cloud-function-v2 ( #3567 )
...
Fixes #3561
2025-12-05 18:36:52 +01:00
Michael Woodham
bc5732357c
Updates to GKE modules to support Secret Sync ( #3562 )
...
* Updates to add secret_sync to GKE module in CFF
* updated READMEs against the python tfdoc command
* updated version for secret_sync to reflect 7.12.0
* update provider versions to 7.12.0
* Updated READMEs which got clobbered by merge with main
* Fixed test errors in secret-manager module
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-12-05 15:30:49 +00:00
Roberto Jung Drebes
229b294886
feat(net-lb-app): support Google-Managed IAP and add tests ( #3564 )
...
Updates the dynamic block in load balancer modules to make OAuth2 client fields optional.
This allows enabling Google-Managed IAP by omitting these fields or passing .
Supports migration path by passing as per Google documentation.
Added test case to to verify configuration.
2025-12-04 17:49:01 +01:00
Vannick Trinquier
171a2c6690
Add support for CMEK in logging bucket, big query dataset and gke notifications ( #3558 )
2025-12-04 10:01:32 +00:00
Vannick Trinquier
33df0bba4a
Align locations in networking stage with other stages ( #3559 )
2025-12-04 14:28:05 +07:00
Ludovico Magnocavallo
26d43d8ec5
re-enable project billing association in project factory, extends to folder ( #3554 )
2025-11-27 20:51:20 +00:00
Wiktor Niesiobędzki
e623c01d83
fix http2 and ssl health-checks for load balancers
2025-11-26 15:20:08 +01:00
Ludovico Magnocavallo
6f8097d2eb
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-24 09:56:12 +00:00
Ludovico Magnocavallo
3daba73d0b
add default routes / delete default ( #3549 )
2025-11-24 09:28:57 +00:00
Ludovico Magnocavallo
bd4f2e317a
prep v49.1.0
2025-11-24 08:37:06 +00:00
Ludovico Magnocavallo
10e29e1eeb
Context improvements: "all service accounts" principal in folder, org, project modules; custom roles in factory condition vars for FAST stage 0 ( #3548 )
...
* iam principalsets
* fix folder
* add custom roles to factory condition vars in stage 0
* project shared vpc IAM
2025-11-24 08:28:41 +00:00
Wiktor Niesiobędzki
5ee09daddc
Update service-agents.yaml
2025-11-24 09:06:24 +01:00
Vannick Trinquier
ba4ed1a7a9
Add additional hardened controls for gke, firewall, cloudrun and others ( #3541 )
2025-11-21 15:38:53 +07:00
Ludovico Magnocavallo
5bef0064a4
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-21 07:25:51 +00:00
Vannick Trinquier
b686a6f730
Fix org policy service to be enabled before organization policies applied ( #3547 )
...
* Fix org policy service to be enabled before organization policies applied
2025-11-21 14:22:17 +07:00
Zsolt Molnar
9f51c4b555
Configure ADMIN_READ for sts.googleapis.com to enable Workforce Identity logging ( #3545 )
...
* Configure ADMIN_READ for sts.googleapis.com to enable Workforce Identity logging
* Updated test results
2025-11-21 07:40:45 +01:00
Ludovico Magnocavallo
a2a9be2593
dataplex aspect types module refactor ( #3544 )
2025-11-20 15:12:16 +00:00
Yashwant Mahawar
b412fafd6c
Add backup vault backup plan module ( #3536 )
...
* ft/adding backup vault backup plan module
* ft/adding missing licence
* resource name updated
* corrected the variable sequece in readme.md
* corrected lint error
* corrected lint error
* addressed the comments
* fixing the lint issues
* addressed comments
* updated readme.md, changed sample project id in example
* updated readme.md
* added other resource [managment server, associations, default backup plan]
* new example added in readme
* ft/pass test cases
* fix: change the variables.tf file sequence
* fix: change module versions
* fix: change module versions
* fix: change module versions
* fix: change module versions
* updated varaible structure
* module name in version.tf
* added missing empyt line
* corrected readme.md tests
* remove project id to genric id
* removed extra file
* corrected syntex error
* applied terraform fmt
* fix/lint issue
* changed as per github comments
* Add inventories
---------
Co-authored-by: Yashwant Mahawar <myashwant@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2025-11-20 00:18:37 +05:30
Sergey Shcherbakov
844ef0b44f
Add optional secondary read pool support to the alloydb module ( #3529 )
...
* Add optinal secondary read pool support to the alloydb module
* Fix formatting
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-11-18 23:15:42 +00:00
Ludovico Magnocavallo
3392953188
prep v49.0.0
2025-11-18 13:51:02 +00:00
Ludovico Magnocavallo
da5726324d
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-18 13:49:13 +00:00