Commit Graph

45 Commits

Author SHA1 Message Date
Michael Woodham
bc5732357c Updates to GKE modules to support Secret Sync (#3562)
* Updates to add secret_sync to GKE module in CFF

* updated READMEs against the python tfdoc command

* updated version for secret_sync to reflect 7.12.0

* update provider versions to 7.12.0

* Updated READMEs which got clobbered by merge with main

* Fixed test errors in secret-manager module

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-12-05 15:30:49 +00:00
Vannick Trinquier
171a2c6690 Add support for CMEK in logging bucket, big query dataset and gke notifications (#3558) 2025-12-04 10:01:32 +00:00
Vannick Trinquier
15a5486a1e Add hardened controls for gke, networking and monitoring alerts recommended in CIS Benchmarks for GCP (#3484) 2025-11-10 11:06:25 +00:00
Daniel Strebel
c672298834 feat: add GKE fleet property (#3477) 2025-10-27 09:58:46 +01:00
Taneli Leppä
f1762a5465 Add resource_manager_tags to gke-standard-cluster, gke-autopilot-cluster and gke-nodepool (#3350)
* Add resource_manager_tags to gke-nodepool, gke-standard-cluster's node_config and gke-autopilot
2025-09-23 15:51:37 +02:00
Ludovico Magnocavallo
dc24cd10b6 add support for permissive mode to GKE cluster modules backup plans (#3331) 2025-09-17 07:15:20 +00:00
Ludovico Magnocavallo
75906c4e9e add support for upgrade notification filters to gke cluster modules (#3316) 2025-09-10 16:03:32 +02:00
jacklever-hub24
e3b73b8867 Bring back master ipv4 cidr block (#3153)
* Re-added master_ipv4_cidr_block to fix issue 3152

* Regenerate tfdoc

* Extend to GKE Autopilot

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-06-11 11:51:47 +02:00
Julio Castillo
a4e157a237 Expose private_endpoint_enforcement_enabled in gke modules (#3119) 2025-05-29 12:33:03 +02:00
Jai Srivastav
41eaeb8ea0 Remove default values for access_config.ip_config for gke cluster modules (#3083)
* Change default values for authorized_ranges from {} to null and
gcp_public_cidrs_access_enabled from false to null in the
access_config.ip_access variable. This ensures the dynamic
master_authorized_networks_config block is properly
conditional on user input.

Previously, these fields would never be null due to their
default values, causing the block to always be initialized
even when users didn't intend to configure authorized networks.

* remove explicit null

* Remove all defaults for access_config.ip_access. Fix permadiff.

* Fix tests

* Swap try with coalesce

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-28 20:07:36 +00:00
Maciej Sikora
2e3335630a Enable multi-network GKE (#3096)
* feat: enable multi networking feature

* enable multi nerworking

* enable multi nerworking

* fmt

* regenerate docs

* feat: enables multinetwork in autopilot clusters
2025-05-19 16:43:59 +00:00
6uellerBpanda
c0afa55b3b feat(gke): add kubelet_readonly_port_enabled (#3092)
Thanks for this!
2025-05-19 11:07:15 +02:00
Julio Castillo
bd829e6ba3 Allow disabling GKE IP endpoints and setting GKE VPC scope DNS domain (#2997)
* Allow disabling IP access to GKE control plane

* Add additive VPC scope DNS domain to gke clusters

* Fix typo

* Bump provider to 6.27.0

* Update readme
2025-04-02 07:03:58 +00:00
Marco Cadetg
2b2e52fecd feat: add gcp_public_cidrs_access_enabled to gke-cluster-{autopilot,standard} (#2993) 2025-04-01 06:17:44 +00:00
Federico Preli
acaac300ae Adding enterprise_config -> desired_tier feature to GKE autopilot and standard (#2962)
Add
2025-03-17 16:41:48 +00:00
HeiglAnna
efa1ef6f7e Add cAdvisor Metrics to Autopilot/Standard GKE Cluster (#2841)
* Add cAdvisor Metrics to Autopilot/Standard GKE Cluster

* Fix tests

---------

Co-authored-by: AnnaHeigl <85624888+AnnaHeigl@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2025-01-30 13:29:07 +00:00
Ludovico Magnocavallo
d86b8d565c Refactor GKE cluster modules access configurations, add support for DNS endpoint (#2761)
* stub

* gke standard module and tests

* blueprints

* tfdoc

* autopilot

* blueprints

* tfdoc

* gke hub module examples

* dataproc and gke fixture
2024-12-12 11:02:24 +01:00
Ludovico Magnocavallo
e3cdde35b6 Add support for secret manager config to gke cluster modules (#2741)
* add secret manager config to gke cluster

* fix variable default
2024-11-29 09:24:18 +01:00
oluakingcp
8a56836078 Updated the auto pilot gke security posture configuration (#2556)
* updates the auto-pilot cluster configuration for security posture vulnerability mode

* updates the auto-pilot cluster configuration for security posture vulnerability mode

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:53:07 +02:00
okguru1
fe55217887 Add support for disable default snat (#2508)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes
2024-08-21 09:43:27 +00:00
luigi-bitonti
750cff01cd Added private_endpoint_subnetwork parameters to GKE module (#2380) 2024-06-25 16:16:00 +02:00
luigi-bitonti
9b095a540e Added additional range field to GKE standand and autopilot (#2366)
* Added additional range field to GKE standand and autopilot

* Bug fix

* Bug fix
2024-06-18 12:17:08 +00:00
Ludovico Magnocavallo
fdcd309729 add support for labels to GKE backup plans (#2252) 2024-05-01 20:20:21 +02:00
cmalpe
1563a76011 added missing option for exclusion scope (#2224)
* added missing option for exclusion scope

* added validation and changes for gke autopilot
2024-04-18 14:12:16 +03:00
Julio Castillo
3af7e257d2 Add tflint to pipelines (#2220)
* Fix terraform_deprecated_index

https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md

* Fix terraform_deprecated_interpolation

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md

* Fix more indexing

* Remove unused variable

* Enable TFLint for modules

* Add tflint config file

* Fix chdir

* Lint modules

* TFLint fixes

* TFLint

* Fixes binauthz README

* Fixes DNS response policy tests. Restores MIG outputs.

* Fixes other DNS response policy tests.

* Update tests for fast 2-e

* Moar fixed tests

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-04-17 10:23:48 +02:00
luigi-bitonti
0ef7ee4670 Added beta apis feature (#1999) 2024-01-23 11:09:22 +00:00
luigi-bitonti
cec11d2d55 Add support for service_external_ips_config to GKE cluster modules (#1970)
* Added variable in gke standard and autopilot modules

* Changed variable position

* Added dynamic block
2024-01-12 11:50:53 +01:00
Ludovico Magnocavallo
637926fb68 Support boot disk KMS key in GKE cluster modules (#1881)
* gke cluster standard

* tfdoc

* gke cluster autopilot

* fix autopilot tags test
2023-11-23 11:52:13 +00:00
luigi-bitonti
3503e028ae Module autopilot bug fixes (#1746)
* Removed unused variables and bug fix

* Ran fmt

* Fix README.md

* Added comments to code
2023-10-12 12:40:28 +02:00
Julio Castillo
dfc5023e0b Make deletion protection consistent across all modules (#1735)
* Expose deletion_protection in GKE modules

* Make deletion protection consistent across all modules

* Add deletion_protection option to blueprints

* Fix blueprints tests

* Fix types

* Update READMEs

* Fix dp readme

* Fix cmek blueprint default deletion_protection

* Fix blueprints tests
2023-10-05 17:31:07 +02:00
Ludovico Magnocavallo
789328ff5a Bump provider versions to v5.0.0 (#1724)
* bump provider versions to 5.0.0

* fix cloud run, logging and vpc-sc

* Fix secret manager

* fix gke nodepool

* fix gke multitenant stage and blueprint

* Moving alloydb module to experimental.

* Add project to bare resources in examples

* tfdoc

* fix svpc blueprint test

* Revert "fix svpc blueprint test"

This reverts commit 14f02659098070136e64ead600580dd52c23c339.

* Fix GKE peering project

* Disable tests in alloydb module

* Bring back secret ids in secret manager tests

* Remove duplicate key

* last push

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-10-03 12:15:36 +00:00
Oliver Frolovs
6eb862a775 GKE cluster modules: add optional kube state metrics (#1682)
* `gke-cluster-standard`: add optional kube state metrics
* `gke-cluster-autopilot`: add optional kube state metrics

* FAST: add kube state metrics support for GKE
* blueprints/gke: add kube state metrics support

* Bump up the provider version to `v4.82.0`
2023-09-15 12:18:45 +01:00
Oliver Frolovs
b3dc91b5cd Upgrades to monitoring_config in gke-cluster-*, docs update, and cosmetics fixes to GKE cluster modules (#1680)
* gke-cluster-standard: upgrade `monitoring_config` to use object style. Add tests.
* gke-cluster-standard: update docs

* gke-cluster-autopilot: move gateway_api_config block (cosmetic change)
* gke-cluster-autopilot: update docs and fix typos

* Update blueprints due to `monitoring_config` changes in `gke-cluster-standard`.
* Update FAST due to `monitoring_config` changes in `gke-cluster-standard`.
* Update docs for affected blueprints and FAST stages
2023-09-14 23:25:57 +01:00
Julio Castillo
7516a778ed Remove useless try() 2023-09-14 12:52:43 +02:00
Oliver Frolovs
05c0195a06 GKE Autopilot module: add network tags (#1675)
* gke-cluster-autopilot: add support for network tags

* gke-cluster-autopilot: add validation for network tags

* gke-cluster-autopilot: expand README and fix some typos

* gke-cluster-autopilot: fix Cloud DNS section in README

Removed a reference to Standard clusters and updated the section to include a warning because the new versions of Autopilot clusters can only use Cloud DNS and it is pre-configured by default so the example in the README does not apply to them.

* gke-cluster-autopilot: cosmetic fixes in README

* gke-cluster-autopilot: rollback validation on network tags var

* gke-cluster-autopilot: rollback docs string update for network tags var

* gke-cluster-autopilot: rollback some updates to README

* gke-cluster-autopilot: remove dead code

* gke-cluster-autopilot: add a tftest for network tags

* gke-cluster-autopilot: fix a tftest
2023-09-14 09:34:51 +00:00
Oliver Frolovs
9f23d504ec gke-cluster-autopilot: add monitoring configuration (#1646)
* gke-cluster-autopilot: add monitoring configuration block (monitoring_config)
2023-09-04 16:43:59 +01:00
Oliver Frolovs
42ebbccad9 gke-cluster-autopilot: validation for release_channel (#1645) 2023-09-03 00:37:49 +00:00
Oliver Frolovs
80e85ad343 gke-cluster-autopilot: add logging configuration (#1625)
Although one cannot disable Cloud Logging and Cloud Monitoring integration in GKE Autopilot clusters, one has some flexibility over which control plane components' logs should be ingested. This commit adds a new variable and a block to the cluster resource to facilitate that.

* gke-cluster-autopilot: update logging configuration and add an example to module README
2023-08-31 12:06:57 +01:00
Eunan Hardy
dd3a298892 Moved allow_net_admin to enable_features flag. Bumped provider version to 4.76 2023-08-07 14:27:20 +01:00
Eunan Hardy
69ea9dd3be Linting with terraform fmt 2023-08-07 12:46:54 +01:00
Eunan Hardy
10e3184451 Expose allow_net_admin feature in gke-cluster-autopilot 2023-08-07 12:44:59 +01:00
Ludovico Magnocavallo
83d2976949 add support for cost management to GKE module (#1569) 2023-08-05 11:46:52 +00:00
Benoît Sauvère
aa80109081 allow to configure stack_type in the GKE modules (#1395)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-24 10:19:43 +00:00
Brent Walker
5763eb53d4 Enhance GKE Backup Configuration Support (#1349)
* Add more support for backup configuration

* Update docs

* Remove redundant lookups
2023-05-02 14:59:12 +00:00
Avinash Jha
e881537f87 Separating GKE Standard and Autopilot Modules (#1330)
* separating GKE Standard and Autopilot Modules

* Changes for Updating the terraform and provide versions

* Changes for Autopilot Readme

* Changes for Autopilot Variable

* Changes for Autopilot Readme

* Changes for Autopilot Readme

* Changes for Blueprint

* Changes for Blueprint ReadMe

* Changes for gke-standard-cluster dependency

* Changes for gke-standard-cluster in gke-fleet

* Changes for gke-standard-cluster in cluster-mesh-gke-fleet-api

* python formatting

* python formatting

* python formatting

* GKE module naming convention

* Readme Changes

* test module

* Removing comment code from Autopilot
2023-04-21 12:08:13 +00:00