Wiktor Niesiobędzki
3ddfd59b88
Merge remote-tracking branch 'origin/master' into fast-dev
2025-02-18 20:30:14 +00:00
Julio Castillo
4c6e6d6791
Add breaking changes to changelog ( #2908 )
2025-02-18 18:09:13 +00:00
Ludovico Magnocavallo
1a4b298cc9
Project factory additions, project module reuse implementation ( #2899 )
...
* add support for buckets
* add project-level interpolation for own SAs
* docs
* project reuse changes
* fix example
* tfdoc
* update check documentation tool
* fast tests
* blueprints
* typo
2025-02-15 20:37:45 +01:00
Julio Castillo
d0c3f04c10
Make service agents work in different universes ( #2894 )
...
* Make service agents work in different universes
* Use templatestring and two passes for service agent emails
* Fix tests
2025-02-14 12:16:07 +00:00
Ludovico Magnocavallo
9148e76087
Add support for project-level log sinks to FAST stage 0 ( #2893 )
...
* Fix ipv6 and align loadbalancer address types
* Release v37.3.0
* add support for project-level log sinks to stage 0
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2025-02-14 11:58:18 +01:00
Wiktor Niesiobędzki
5e31633f34
Release v37.3.0
2025-02-12 13:16:16 +00:00
Ludo
c7262a7a87
prepare v37.2.0 release
2025-02-11 18:15:19 +01:00
Wiktor Niesiobędzki
4e5c0ac9da
Create var.prefix in sandbox, copy all files for setup
2025-02-10 00:56:19 +01:00
Julio Castillo
e4a1218d46
Bump provider version
2025-02-07 10:55:05 +01:00
Ludo
25bacee2e6
prepare for v37.1.0
2025-01-26 10:41:13 +01:00
Julio Castillo
680d68411a
Fix versions.tf
2025-01-24 17:05:34 +01:00
Ludo
15c8669188
Merge remote-tracking branch 'origin/master' into fast-dev
2025-01-24 16:55:46 +01:00
Julio Castillo
752b77f52e
Update module metadata format and prep v36.2.0 ( #2837 )
...
* Update module metadata format and prep v36.2.0
* Fix pattern
2025-01-24 16:45:17 +01:00
Ludo
fd7292710a
Merge remote-tracking branch 'origin/master' into fast-dev
2025-01-23 08:51:07 +01:00
Julio Castillo
8a2320311d
Add bucket_create to modules/gcs ( #2827 )
...
* Add `bucket_create` to `modules/gcs`
* Create local with bucket name
* Update variable description
* Fix bucket output
* Fix tests
* Fix tests
* Bump OpenTofu to 1.9.0 (needed for multi-var validations)
2025-01-21 23:48:36 +01:00
Ludo
0b6bcdccf8
prepare v37.0.0-rc2 release
2025-01-18 08:36:26 +01:00
Ludo
206fd28419
Merge remote-tracking branch 'origin/master' into fast-dev
2025-01-14 17:04:18 +01:00
Julio Castillo
7eff7b19dc
Add iam_by_principals_additive to project, organization and folder modules ( #2814 )
...
* First attempt at iam_by_principals_additive
* Remove validation
* Update IAM ADR
* Apply to organization and project modules
* Update READMEs
* Add tests
* Remove "cycle errors"
2025-01-14 12:32:19 +00:00
Ludo
ef5e228f42
fix conflict
2025-01-13 15:01:09 +01:00
Julio Castillo
0cea946ced
Simplify versions tf and update FAST workflows ( #2812 )
...
* Simplify versions tf and update FAST workflows
* Fix typos
2025-01-12 20:39:01 +00:00
Ludo
d250c4e726
prepare v37.0.0-rc1
2025-01-10 17:09:08 +01:00
Ludo
21045cb333
prepare for v36.1.0
2025-01-10 16:56:01 +01:00
Julio Castillo
cf173701b6
New tool versions.py to manage versions.tf/tofu ( #2803 )
...
* Add provider_metadata to all modules
* Fix linting version check
* Another way
* Fix syntax
* Add fabric prefix to all provider meta
* Fix linting.yml
2025-01-09 09:57:48 +01:00
Julio Castillo
c73f912d43
Fabric e2e fixes ( #2791 )
...
* Try to fix fabric e2e tests. Update service agents
* Fix typo
* Fix syntax
* Delay PSA creation until service agents have roles assigned
* Fix tests
2024-12-31 15:25:36 +01:00
simonebruzzechesse
e241624040
New BindPlane OP Management console on GKE SecOps blueprint ( #2721 )
...
new bindplane on GKE secops blueprint
2024-12-17 22:16:40 +01:00
Wiktor Niesiobędzki
6d51c8da4d
Use separate versions.tofu for OpenTofu constraints
2024-12-17 12:29:04 +01:00
Ludovico Magnocavallo
0fa257e6b1
Support customizable resource names in FAST stage 0 ( #2768 )
...
* support customizable resource names in FAST stage 0
* tfdoc
* tflint
* remove comment
* use object type
* tfdoc
* bump tf version
* bump terraform version in versions files
* tf version in ci
* trigger workflow
2024-12-16 17:46:34 +01:00
Ludo
1ee21fae5a
better org replacement in iam tool
2024-12-13 11:01:23 +01:00
Jason Steenblik
90360c591e
Add confidential compute support to google_dataproc_cluster in the da… ( #2736 )
...
* Add confidential compute support to google_dataproc_cluster in the dataproc module
* fix parent id lookup for networking and security stages (#2744 )
* Add optional automated MD5 generation in net-vlan-attachment module (#2745 )
* Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2749 )
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp ) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express ). These dependencies need to be updated together.
Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases )
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md )
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12 )
Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2 )
---
updated-dependencies:
- dependency-name: path-to-regexp
dependency-type: indirect
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add ability to autogenerate md5 keys in net-vpn-ha (#2748 )
* Add ability to optionally generate MD5 secrets in VPN module
* Add ability to autogenerate MD5 keys in net-vpn-ha module
* restore missing output
* fix test counts
---------
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
* update changelog
* Bump path-to-regexp and express (#2752 )
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp ) and [express](https://github.com/expressjs/express ). These dependencies needed to be updated together.
Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases )
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md )
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12 )
Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2 )
---
updated-dependencies:
- dependency-name: path-to-regexp
dependency-type: indirect
- dependency-name: express
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* add support for routing mode to net-swp module (#2751 )
Co-authored-by: Julio Castillo <jccb@google.com >
* remove default location in tag value - cloud-run-v2 tags.tf (#2755 )
The Parent resource has a default to europe-west1 when it should be for the resource block from where the cloud run actually is.
Changed to use the var.region instead
* Add path_template_match and path_template_rewrite support to net-lb-app-ext (required for React apps for example).
* Add rest of load balancers.
* Add path_template_match and path_template_rewrite support to internal load balancers
* Add disk encyption key to the google_compute_instance_template - Sovereign support (#2750 )
* add disk encyption key to the google_compute_instance_template
* add a condition to the kms_key_self_link
* use dynamic variable for disk_encryption_key
* remove the getpip from the repo
---------
Co-authored-by: Julio Castillo <jccb@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
* Add support for password validation policy to cloudsql module (#2740 )
* add support for password validation policy to cloudsql module
* fix defaults
* update changelog
* bump provider version constraint
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Luca Prete <preteluca@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
Co-authored-by: Matthew Callinan <47421139+Mattible@users.noreply.github.com >
Co-authored-by: Taneli Leppä <taneli@google.com >
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Kovács Dávid <david-kovacs@t-systems.com >
2024-12-10 16:39:48 +01:00
Ludo
1482286d0c
update changelog
2024-11-28 07:49:20 +01:00
Ludo
1de21fe06d
linting
2024-11-23 09:49:17 +01:00
Ludo
ec3cd62bf6
allow excluding pulls from release in changelog tool
2024-11-23 09:46:55 +01:00
Ludo
477cdc55fd
Prepare v36.0.1
2024-11-23 09:38:39 +01:00
Ludo
a3bffbbcbf
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-22 07:39:09 +01:00
Taneli Leppä
ebc1950ec1
Change tfdoc pre-commit hook script to use while read instead of xargs. While ( #2717 )
...
probably a bit slower, this works reliably on Linux and OS X. (BSD and GNU
xargs are unfortunately with different arguments) Also added option to set
Python binary (eg. export PYTHON=python3).
2024-11-19 09:01:15 +01:00
Julio Castillo
8714b7a713
Merge branch 'master' into fast-dev
2024-11-18 15:19:55 +01:00
Julio Castillo
c60d152f4a
Add hierarchical namespace support to GCS module ( #2712 )
...
* Add hierarchical namespace support to GCS module
* remove empty iap block from inventories
* Fix tests
* Add new hns inventory
---------
Co-authored-by: Ludo <ludomagno@google.com >
2024-11-18 11:41:49 +00:00
Ludovico Magnocavallo
31cb391be7
Streamline environments variable across stages ( #2688 )
...
* streamline environments variable across stages
* linting
* linting
2024-11-15 10:22:18 +01:00
Ludo
a6c0bad947
changelog fix
2024-11-14 13:59:00 +01:00
Ludo
1c73ee7541
check HTTP status code in changelog requests
2024-11-12 18:20:51 +01:00
Ludovico Magnocavallo
6b11cdfcc9
refactor changelog for the new release process ( #2660 )
2024-11-11 11:59:45 +01:00
Ludo
78f4e5c98d
boilerplate for v36.0.0-rc1
2024-10-31 17:52:09 +01:00
Ludovico Magnocavallo
50ac3a5013
Refactor of FAST resource management and subsequent stages ( #2648 )
...
* untested
* pllan testing
* fix stage 2s
* move providers to their own file
* single-environment stage 3
* fixes and moved blocks
* stage3 factory
* doc
* review comments
* review comments
* tfdoc
* fasts tage 1 tests
* netsec as stage 2
* fix backported roles
* fix backported roles
* tfdoc
* fixes
* fix tag value roles in stage 1
* remove checklist, fix stage 1 tests
* inventory
* Small bugfix
* refactor context tag values
* fix previous merge
* fix previous merge
* fix previous merge
* support short names for top level automation resources, change top level context variable
* fix new top level context
* roll back merge changes to stage 0 outputs
* roll back more merge changes
* linting errors
* tfdoc
* fix tests, roll back merge in tenants stage
* tfdoc
* fix inventory
* optional stage 2 env folders and tag bindings
* tflint
* damn tflint
* damn tflint
* tfdoc
* fix networking tests
* tflint
* fix test inventories
* tfdoc
* use coalesce for project parents
* fix billing role conditions
* fix billing role conditions
* security stage tested (ngw resources need fixing/porting)
* boilerplate
* fix inventory
* stage envs and stage linking script
* initial work on resman docs, update diagram, improve teams folder
* resman README
* fix stage 2 IAM delegation
* remove checklist from bootstrap
* stage 1 tests
* stage 0 1 and 2 tests
* tflint
* tflint
* tfdoc
* GCVE stage refactor (untested)
* GCVE stage refactor (untested)
* GCVE stage 3
* gcve tests
* tflint
* tfdoc
* fix links
* module tests
* stages README
* move network security to stage 2
* network security tests
* replace stage links in README files
* minimal netsec stage refactor
* use factory for iac org policies, add configurable drs org policy for iac
* test mt stage
* tfdoc
* fix cicd workflows
* fix cicd workflows
* gke-dev stage
* tflint
* remove data platform stage
* exclude provider files via tfdoc opts
* remove data platform tests and links
* fix merge
* fix resman inventory
* boilerplate
* inventory
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-10-31 16:55:54 +01:00
Simone Ruffilli
7f8a02a405
Add support for google provider 6.x ( #2536 )
...
* Add support for google provider 6.x
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2024-09-05 10:35:58 +00:00
Julio Castillo
ba3e1be416
Bump provider to 5.43.1 ahead of next release ( #2557 )
2024-09-04 19:58:07 +02:00
Ludovico Magnocavallo
eb89c62b5f
prepare v34.0.0 release ( #2543 )
2024-08-30 10:06:33 +02:00
Julio Castillo
d4e727a482
Update stable provider too ( #2531 )
2024-08-28 08:49:46 +02:00
Julio Castillo
bab85c88ba
Bump provider to last release of version 5 ( #2525 )
...
* Bump provider to last release of version 5
* Remove default-versions copy in test env setup
* Use file instead of symlink in tools/lookfile
* Remove default-version reference
* Removed unused code
2024-08-27 16:50:59 +02:00
Julio Castillo
d2d345d428
example testing improvements ( #2487 )
...
* Move away from regexps to parse tftest directives
* Update tfdoc
* Use namedtuple
* Make modules and resources optional in tftest directive
* Move get_tftest_directive to a separate file
* Fix imports
* Fix e2e tests
2024-08-08 21:22:27 +02:00
Luca Prete
140c4e6446
Add --extra-files option to plan_summary.py cmd ( #2452 )
2024-07-30 11:29:19 +02:00