Commit Graph

6632 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
a4cc7cd979 Align schemas (#3447)
* enforce schema uniqueness

* schemas

* fix tests
2025-10-21 14:03:40 +02:00
Vannick Trinquier
c60ae3652a Adding hardened datasets for preventive and detective Compliance Controls (#3410)
* Adding hardened datasets for preventive and detective Compliance Controls in stage 0 and stage 1 VPC-SC

* Move observability to factory file

* Update documentation

* Update local variable for use

* Update observability factory to use other module

* Add raw diagram file for hardened datasets

* Retrofit change

* Rename log_buckets context variable to be consistent across modules

* Update stage 0 documentation to mention hardened dataset

* Update customer ids list

* Update documentation, path to schema add ID to access level

* Comment organization policy gcp.resourceLocation by default

* Prevent duplicate key error by merging principal roles

* Adding ngfw roles files in hardened datasets

* Update script to validate files differences to support folder and datasets

* Format duplicate-diff python script

* Remove .config.yaml from duplicates

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-21 10:34:25 +00:00
Ludovico Magnocavallo
3c9caceeb8 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-21 06:28:18 +00:00
Ludovico Magnocavallo
5a3a7f3602 changelog 2025-10-21 06:27:57 +00:00
Julio Castillo
b8aa4b5578 Merge branch 'master' into fast-dev 2025-10-21 08:14:42 +02:00
Julio Castillo
792003ff97 Remove Netsec Authz Service Agent (#3445)
* Remove Netsec Authz Service Agent

* fix tests
2025-10-20 19:36:03 +00:00
Ludovico Magnocavallo
32ca4498ad Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-20 17:56:31 +00:00
Ludovico Magnocavallo
0faaba4e45 changelog 2025-10-20 17:55:41 +00:00
Luca Prete
64738a1808 Add Agent Engine module. (#3429) 2025-10-20 17:02:39 +02:00
Ludovico Magnocavallo
6fe142608d fix merge 2025-10-20 13:59:18 +00:00
Ludovico Magnocavallo
ec09414823 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-20 13:58:44 +00:00
Julio Castillo
48f6b4cd49 Add PAM support (#3438)
* PAM first pass

* Add factory and extend to organization

* Extend to project, add examples

* Add additionalProperties to all objects

* Fix boilerplate

* Expose pam_entitlements to project-factory

* Fix readme

* Move entitlements to second folder/project pass

* extend tests

* Fix readme

* Remove timeouts from inventories
2025-10-20 12:50:37 +00:00
Wiktor Niesiobędzki
0759cf5454 fix Terraform version linter 2025-10-20 13:52:11 +02:00
Ludovico Magnocavallo
a4f9924680 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-20 06:33:53 +00:00
Ludovico Magnocavallo
c6b66ee80b changelog 2025-10-20 06:32:42 +00:00
Vannick Trinquier
30f46f09d6 Apply alerts and log based metrics after log buckets creation (#3442) 2025-10-20 06:13:42 +00:00
Ludovico Magnocavallo
2753196ca2 fix merge 2025-10-18 14:54:53 +00:00
Ludovico Magnocavallo
ff71c9f1a3 fix pf merge 2025-10-18 14:30:57 +00:00
Ludovico Magnocavallo
2f9234547c fix pf merge 2025-10-18 14:30:46 +00:00
Ludovico Magnocavallo
f5a05b3097 fix pf merge 2025-10-18 14:27:24 +00:00
Ludovico Magnocavallo
5e05044306 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
d0f109f42b changelog 2025-10-18 14:16:07 +00:00
Ludovico Magnocavallo
4113da128b Support resource-level factories config in project factory module and FAST stages (#3440)
* support resource-level factories in project factory module

* align folder and project schemas across modules and fast

* schema docs
2025-10-18 10:41:19 +00:00
Zsolt Molnar
30ea120dcf Bump Terraform version used in Github CICD templates to match fabric/modules requirements introduced at #3332 (#3439) 2025-10-18 08:00:14 +00:00
Ludovico Magnocavallo
7cc9e4707f changelog 2025-10-18 07:10:22 +00:00
Julio Castillo
1566711c3a Add service agent outputs to folder and organization (#3436)
* Add service agent outputs to folder and organization

* Fix tests
2025-10-17 17:23:08 +02:00
Ludovico Magnocavallo
a3b86b9426 Revert "Added audience to workflow local in 0-org-setup (#3418)" (#3432)
This reverts commit 4dfcb9cf51.
2025-10-17 12:38:08 +00:00
kovagoadam
84a258e247 Add retention support for project-factory buckets (#3417)
* Added retention support for project-factory buckets

* Cleanup

* Added retention_policy to project.schema.md in PF stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 10:30:20 +00:00
Ludovico Magnocavallo
b581c49a31 Revert "Allow overriding organization factories from YAML (#3430)" (#3431)
This reverts commit 594c106441.
2025-10-17 11:41:31 +02:00
kovagoadam
4dfcb9cf51 Added audience to workflow local in 0-org-setup (#3418)
* Added missing audiences to fast_0_org_setup

* Run terraform fmt

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 08:13:28 +00:00
Ludovico Magnocavallo
594c106441 Allow overriding organization factories from YAML (#3430) 2025-10-17 08:51:23 +02:00
norbert-loderer
1839a08581 Add missing project number variable to outputs in 0-org-setup stage (#3427)
* Add missing project number variable to outputs in 0-org-setup stage

* Fixed typo

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 06:51:04 +00:00
Ludovico Magnocavallo
0eb90e437f Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 17:28:11 +00:00
lcaggio
9bbd453024 bigquery-connection module (#3423)
Implement bq-connection module
2025-10-16 15:15:36 +00:00
Julio Castillo
f12fe9ea9d gitignore update (#3428)
* gitignore update

* bring back */venv/*
2025-10-16 14:14:54 +00:00
Simone Ruffilli
37455277d4 Adds context support to peering zones (#3426) 2025-10-16 15:58:27 +02:00
Taneli Leppä
7c6211a494 bigquery-dataset: fix issues (#3425)
* bigquery-dataset: add missing return_type to routines, fix view schema
encode, add dependency between routines and views

* Fix test.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-16 13:12:23 +00:00
Simone Ruffilli
5be136e2ea Always use local.project_id in net-vpc 2025-10-16 14:37:07 +02:00
Ludovico Magnocavallo
e9dd48f5e7 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 09:03:15 +00:00
Ludovico Magnocavallo
e068d6cf31 changelog 2025-10-16 09:03:00 +00:00
Ludovico Magnocavallo
8e8be1eda5 Support CIDR range sets in firewall modules context (#3424) 2025-10-16 09:01:05 +00:00
Ludovico Magnocavallo
ba2247b96f Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 07:45:00 +00:00
Simone Ruffilli
509b715a09 Adds network_id to net-vpc outputs (#3421)
* Adds network_id to net-vpc outputs

* Fixes description
2025-10-16 09:44:33 +02:00
Ludovico Magnocavallo
01001c9a64 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 07:09:27 +00:00
Ludovico Magnocavallo
4c3aeda338 changelog 2025-10-16 07:09:07 +00:00
Ludovico Magnocavallo
45d4674ae8 net-vpn-ha (#3420) 2025-10-16 09:08:17 +02:00
Ludovico Magnocavallo
cc947777ce Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 05:57:02 +00:00
Ludovico Magnocavallo
ccecb0dd24 changelog 2025-10-16 05:56:41 +00:00
Ludovico Magnocavallo
7c920d7d35 Add support for context to net-lb-int net-vpc-firewall and net-vpc module (#3419)
* net-lb-int

* net-vpc-firewall

* net-vpc

* net-vpc
2025-10-16 05:54:14 +00:00
Ludovico Magnocavallo
ecdc248f3f Add support for context to net-cloudnat, net-firewall-policy modules (#3414)
* net-cloudnat

* net firewall policy
2025-10-15 13:59:51 +02:00