kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,011 Commits 1 Branch 1 Tag
5d57658e36892f0ebb4e47f704b222b649d87a28
Commit Graph

46 Commits

Author SHA1 Message Date
kaue
396265bb15 docs(blueprints): add deprecation notice (#3335) 
* docs(blueprints): add deprecation notice

* Update GKE module version reference to v43.0.0

* Update README to remove deprecated blueprint access

Removed instructions for accessing deprecated blueprints.

* Update README.md

* Update README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
 2025-09-19 06:58:15 +00:00
Ludovico Magnocavallo
36648b6b63 FAST light implementation (#3255) 
* data wip

* wip data

* update org schema, add note on expansion

* all schemas, workload notes

* Update WORKLOG.md

* Update WORKLOG.md

* Update WORKLOG.md

* Update WORKLOG.md

* wip

* data wip

* wip

* wip

* wip

* wip

* org module IAM context (using lookup)

* new-style context expansion in project IAM

* remove spurious file

* project module contexts

* finalize context replacement format for project module

* revert org module changes

* fix tag id interpolation in project

* fix tag id interpolation in project

* organization module context

* organization context test

* context expansion for folder tag bindings

* test context expansion for tag bindings

* service account module context

* simplify context local

* context for iam service account

* nuke blueprints

* remove links to blueprints

* vpc sc context in project module

* Add context to GCS module

* Add inline deps to plan_summary script

* Make context a top-level variable for folder, organization, sa

* Add add context top-level to VPC-SC

* move context out of factories_config variable

* tfdoc

* fix merge

* fix merge

* fix examples

* net-vpc module context

* add parent ids to folder context

* rename folder parent context

* fix folder parent check

* new project factory stub

* wip

* wip

* refactor defaults

* project iam

* bueckts and service accounts

* start adding context replacements

* better test data

* automation resources for folders and projects

* automation

* add support for project id interpolation

* first tested apply

* improve IAM description in gcs module

* add context to billing account module

* add notification channels to billing account module context

* add billing budgets to new pf

* schemas and defaults

* bootstrap wip

* bootstrap wip

* bootstrap wip

* pf outputs

* pf fixes

* fix pf sample data

* bootstrap lite fixes

* add locations to organization module contexts

* bootstrap lite fixes

* org fixes, billing accounts

* fix default project parent

* bootstrap lite wip

* add locations to gcs module context

* add context support to logging bucket module

* add context to pubsub module

* split out iam variables in gcs module

* fix logging bucket context test

* bootstrap log sink destinations

* streamline logging-bucket module variables

* fix logging bucket context test

* align logging bucket module interface in fast bootstrap

* add support for project-level log buckets to project factory

* support full context expansion in organization module log sinks

* log buckets in fast-lite bootstrap

* make og sink type optional in organization module

* log sinks in fast-lite bootstrap

* set tag values in factory context

* bootstrap lite data

* output files schema

* billing account schema

* output files

* output providers

* gcs output files

* boilerplate

* tflint

* check documentation

* check docs

* fix project module parent variable validation

* fix log bucket examples

* allow null parent in project module

* silence folder test errors

* fix billing account sink example

* fix project example

* fix billing account module

* fix folder tests

* fix FAST

* fix fast

* tfvars outputs

* wif

* cicd service accounts

* cicd

* allow defaults in context, minimal org policies

* support gcs managed folders in project factory and bootstrap lite

* support prefix in provider output files

* rename bootstrap stage

* gitignore

* gitignore

* security folder, billing IAM

* wip tfvars

* fix typo

* security IAM

* control tag iam/context via variables in organization module

* split tag creation from tag IAM to avoid circular refs

* port organization module tag changes to project module

* implement new-style context expansion in vpc-sc module

* fix fast vpc-sc tests

* boilerplate

* vpc sc stage

* schemas

* fast-lite compatibility for vpc sc stage

* make log project number optional in vpc-sc stage

* networking

* networking

* networking

* networking

* rename and move new stage under fast

* clone pf tests

* use context replacement for internal notification channels in billing account module

* support service agents in project module iam context replacements

* support service agents in project module iam context replacements

* add support for kms keys to project module context

* experimental pf example test and fixes

* fix schemas

* fix tests

* tfdoc

* tfdoc

* pf config

* experimental pf

* remove redundant dot from gcs managed folder IAM keys

* bootstrap experimental test

* project factory exp stage test

* skip tflint for bootstrap experimental test

* tflint

* fix gcs test

* documentation work

* documentation work

* Update README.md

* tfdoc

* tfdoc

* readme

* tfdoc

* readme

* readme

* readme

* readme

* support universe in pf exp projects

* missing universe service agents

* org policies import, non-admin billing IAM

* todo

* fix test

* custom constraints

* fast classic dataset

* fix test data

* context replacements in billing module log sinks

* fix typo

* add support for billing log sinks

* update docs

* readme

* cicd fix and test

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2025-09-02 08:38:57 +02:00
Ludovico Magnocavallo
cb7bed50e3 New FAST data platform (#3066) 
* copy from broken dp dev branch

* remove extra excalidraw file

* fix networking yaml

* tfdoc

* tfdoc

* nuke old data platform

* fix tests

* tests

* tflint

* high level diagram

* make location optional in composer schema

* add composer outputs

* docs

* remove schema docs

* tfdoc

* update service agent encryption composer def for composer 3

* encryption keys

* typo

* typo

* fix security IAM

* inventory

* tflint

* Fix roles and diagram.

* Fix tflint

* Fix test DP.

* Fix test

* Diagrams excalidraw gz

---------

Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
 2025-05-03 21:21:38 +00:00
Julio Castillo
e04079e334 Add support to attach tags to service accounts (#3008) 
* Remove service account key upload. Add create_ignore_already_exists

* Add tag bindings to service accounts

* Add description to create_ignore_already_exists

* Remove broken links
 2025-04-04 12:31:19 +00:00
Ludo
7aad81d97f move ilb as next hop blueprint to module-level recipe 2025-02-20 16:26:38 +01:00
Wiktor Niesiobędzki
5593192466 Deprecate composer-2 blueprint 2025-02-03 11:27:14 +01:00
Ludo
5eb76fc6c5 Merge remote-tracking branch 'origin/master' into fast-dev 2024-11-05 15:00:41 +01:00
simonebruzzechesse
08e4d338cd New SecOps blueprints section and SecOps GKE Forwarder (#2514) 
* new secops gke forwarder
 2024-11-05 14:41:37 +01:00
Ludovico Magnocavallo
50ac3a5013 Refactor of FAST resource management and subsequent stages (#2648) 
* untested

* pllan testing

* fix stage 2s

* move providers to their own file

* single-environment stage 3

* fixes and moved blocks

* stage3 factory

* doc

* review comments

* review comments

* tfdoc

* fasts tage 1 tests

* netsec as stage 2

* fix backported roles

* fix backported roles

* tfdoc

* fixes

* fix tag value roles in stage 1

* remove checklist, fix stage 1 tests

* inventory

* Small bugfix

* refactor context tag values

* fix previous merge

* fix previous merge

* fix previous merge

* support short names for top level automation resources, change top level context variable

* fix new top level context

* roll back merge changes to stage 0 outputs

* roll back more merge changes

* linting errors

* tfdoc

* fix tests, roll back merge in tenants stage

* tfdoc

* fix inventory

* optional stage 2 env folders and tag bindings

* tflint

* damn tflint

* damn tflint

* tfdoc

* fix networking tests

* tflint

* fix test inventories

* tfdoc

* use coalesce for project parents

* fix billing role conditions

* fix billing role conditions

* security stage tested (ngw resources need fixing/porting)

* boilerplate

* fix inventory

* stage envs and stage linking script

* initial work on resman docs, update diagram, improve teams folder

* resman README

* fix stage 2 IAM delegation

* remove checklist from bootstrap

* stage 1 tests

* stage 0 1 and 2 tests

* tflint

* tflint

* tfdoc

* GCVE stage refactor (untested)

* GCVE stage refactor (untested)

* GCVE stage 3

* gcve tests

* tflint

* tfdoc

* fix links

* module tests

* stages README

* move network security to stage 2

* network security tests

* replace stage links in README files

* minimal netsec stage refactor

* use factory for iac org policies, add configurable drs org policy for iac

* test mt stage

* tfdoc

* fix cicd workflows

* fix cicd workflows

* gke-dev stage

* tflint

* remove data platform stage

* exclude provider files via tfdoc opts

* remove data platform tests and links

* fix merge

* fix resman inventory

* boilerplate

* inventory

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
 2024-10-31 16:55:54 +01:00
apichick
ff6f6bb32a Added apigee-x-foundations blueprint (#2274) 2024-05-14 14:53:38 +00:00
Julio Castillo
993bef71aa Introduce mandatory OWNERS file for blueprint maintainership (#2131) 
* Delete deprecated/broken blueprints

* Adding OWNERS to all blueprints

* Fix links

* Update OWNERS

---------

Co-authored-by: javiergp <javiergp@users.noreply.github.com>
 2024-03-08 09:40:46 +01:00
Ludovico Magnocavallo
6941313c7d Factories refactor (#1843) 
* factories refactor doc

* Adds file schema and filesystem organization

* Update 20231106-factories.md

* move factories out of blueprints and create new factories  README

* align factory in billing-account module

* align factory in dataplex-datascan module

* align factory in billing-account module

* align factory in net-firewall-policy module

* align factory in dns-response-policy module

* align factory in net-vpc-firewall module

* align factory in net-vpc module

* align factory variable names in FAST

* remove decentralized firewall blueprint

* bump terraform version

* bump module versions

* update top-level READMEs

* move project factory to modules

* fix variable names and tests

* tfdoc

* remove changelog link

* add project factory to top-level README

* fix cludrun eventarc diff

* fix README

* fix cludrun eventarc diff

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
 2024-02-26 10:16:52 +00:00
Simone Ruffilli
87548f9739 Networking Sandbox Blueprint (#1939) 
This blueprint creates a networking playground showing a number of different VPC connectivity options:

Hub and spoke via HA VPN
Hub and spoke via VPC peering
Interconnecting two networks via a network virtual appliance (aka NVA)
On top of that, this blueprint implements Policy Based Routing (aka PBR) to show how to force all traffic within a VPC to be funneled through an internal network passthrough load balancer, to implement an Intrusion Prevention System (IPS). PBR is enabled in the hub VPC, matching all traffic originating from within that VPC.
 2023-12-21 17:50:38 +01:00
simonebruzzechesse
717f7ecad1 Blueprints naming convention update (#1942) 
* update network-dashboard and quota-monitoring naming convention
 2023-12-21 17:02:25 +01:00
Simone Ruffilli
0255c80e90 Move squid to __need_fixing (#1936) 
* Moved `modules/cloud-config-container/squid` to __need_fixing
* Moved `blueprints/networking/filtering-proxy{,-psc}` to __need_fixing
 2023-12-19 14:27:37 +00:00
Julio Diez
6ce8fd6942 Delete API Gateway from blueprint's README 2023-08-29 11:40:31 +02:00
Simone Ruffilli
7f561565e7 HA VPN over Interconnect modules and blueprint (#1390) 
Two new modules, net-ipsec-over-interconnect to establish HA VPN over existing VLAN attachments, and net-dedicated-vlan-attachment to create (optionally encrypted) vlan attachments, as well as the ha-vpn-over-interconnect blueprint that shows how to compose such modules to create a 99.9% encrypted interconnect.
 2023-05-31 10:53:38 +00:00
lcaggio
3cc6c71e96 Add Minimal Data Platform blueprint (#1362) 
Minimal Data Platform blueprint
 2023-05-08 10:25:06 +02:00
Ludovico Magnocavallo
662a9b185c Merge branch 'master' into autopilot 2023-03-07 15:51:03 +01:00
Miren Esnaola
a39fa7ca64 Added autopilot blueprint 2023-03-07 15:37:20 +01:00
lcaggio
f9acf61b81 Fix README 2023-03-05 22:42:27 +01:00
lcaggio
16f703f336 Fix typos 2023-03-05 22:30:33 +01:00
lcaggio
9e19f89608 Implement PR comments. 2023-03-05 22:02:41 +01:00
Luca Prete
a5fd32edcb Blueprint: GLB hybrid NEG internal 2023-03-02 09:53:07 +01:00
Julio Diez
bcb1d9720b Add reference to Cloud Run blueprints 2023-02-28 10:58:53 +01:00
Aleksandr Averbukh
befc73ec12 feat: Update TFC+WIF blueprint with TFC Dynamic Credentials feature. 2023-02-19 00:51:49 +01:00
lcaggio
f00d4d3edd Merge branch 'master' into lcaggio/shieldedfolder 2023-02-03 22:17:30 +01:00
javiergp
ce1f86d20b Vertex Pipelines MLOps framework blueprint (#1038) 
* First release of the MLOps blueprint
 2023-02-02 19:13:13 +01:00
lcaggio
e3daaf2503 Update READMEs 2023-02-01 13:02:07 +01:00
Miren Esnaola
66c37a4169 Fixes in Apigee blueprints README files 2023-01-05 11:31:07 +01:00
Ludovico Magnocavallo
d2015b0bc3 Assorted module fixes (#1045) 
* net-ilb-l7 use both neg types in backends

* run example tests on cloud-config-container modules

* streamline nginx-tls cos module

* add tests for cos modules

* tfdoc

* onprem needs fixing, links

* disable test

* test
 2022-12-10 15:40:15 +01:00
Ludovico Magnocavallo
46f694be08 Refactor net-glb module for Terraform 1.3 (#1044) 
* wip

* urlmaps

* wip

* tested

* fix managed certificate names

* simple HTTP and HTTPS examples

* gce and hybrid neg examples

* internet NEG example

* serverless NEG and backend bucket examples

* certificate example

* fix example tests

* remove stale test module

* module test

* adfs blueprint

* add support for non-classic GLB and PSC NEGs

* apigee blueprint

* glb and cloud armor blueprint

* deprecate non-working nginx reverse cluster

* api gateway blueprint

* tfdoc

* fix top-level READMEs

* switch to new tests

* only/at most
 2022-12-08 17:35:44 +01:00
Sebastian Kunze
ef38d238b4 Add filtering-proxy-psc blueprint (#962) 2022-11-11 11:24:37 +01:00
Kumar Dhanagopal
80b95b8f49 Update README.md 
Fixed minor typos
 2022-11-01 12:29:43 -07:00
Ludovico Magnocavallo
ed9fd6b08d Align documentation, move glb blueprint (#921) 
* aling documentation, move glb blueprint

* modules README, sort modules

* reorder modules

* fix bp links

* fix moved blueprint test

* use a single cloud shell image in the repo
 2022-10-26 14:31:04 +02:00
lcaggio
aa6cba24a3 Organize png and tpl in subfolders 2022-10-25 07:39:29 +02:00
Luca Prete
a8ddf5d1ba Add PSC hybrid blueprint 2022-10-16 10:18:40 +02:00
lcaggio
5968661e8d First commit 2022-09-19 10:34:46 +02:00
Ludovico Magnocavallo
8026eef3b7 remove stale link in blueprints readme 2022-09-12 11:06:01 +02:00
Ludovico Magnocavallo
a2849cf4a0 remove stale foundation blueprints links 2022-09-12 10:33:04 +02:00
Julio Castillo
96edc4b58f Move gke multi cluster mesh example to gke folder 2022-09-12 10:26:33 +02:00
Julio Castillo
96257871a2 Move binautz to gke folder 2022-09-12 10:21:56 +02:00
Julio Castillo
91c569268e Update readmes 2022-09-12 10:15:47 +02:00
Julio Castillo
20d5ebac40 Remove foundations blueprints in favor of FAST 2022-09-12 10:11:35 +02:00
Julio Castillo
da2f601c9a More updates 2022-09-09 16:39:01 +02:00
Julio Castillo
a248602827 Rename examples folder to blueprints 2022-09-09 16:38:43 +02:00