Commit Graph

6440 Commits

Author SHA1 Message Date
Luca Prete
64738a1808 Add Agent Engine module. (#3429) 2025-10-20 17:02:39 +02:00
Julio Castillo
48f6b4cd49 Add PAM support (#3438)
* PAM first pass

* Add factory and extend to organization

* Extend to project, add examples

* Add additionalProperties to all objects

* Fix boilerplate

* Expose pam_entitlements to project-factory

* Fix readme

* Move entitlements to second folder/project pass

* extend tests

* Fix readme

* Remove timeouts from inventories
2025-10-20 12:50:37 +00:00
Wiktor Niesiobędzki
0759cf5454 fix Terraform version linter 2025-10-20 13:52:11 +02:00
Ludovico Magnocavallo
c6b66ee80b changelog 2025-10-20 06:32:42 +00:00
Vannick Trinquier
30f46f09d6 Apply alerts and log based metrics after log buckets creation (#3442) 2025-10-20 06:13:42 +00:00
Ludovico Magnocavallo
d0f109f42b changelog 2025-10-18 14:16:07 +00:00
Ludovico Magnocavallo
4113da128b Support resource-level factories config in project factory module and FAST stages (#3440)
* support resource-level factories in project factory module

* align folder and project schemas across modules and fast

* schema docs
2025-10-18 10:41:19 +00:00
Zsolt Molnar
30ea120dcf Bump Terraform version used in Github CICD templates to match fabric/modules requirements introduced at #3332 (#3439) 2025-10-18 08:00:14 +00:00
Ludovico Magnocavallo
7cc9e4707f changelog 2025-10-18 07:10:22 +00:00
Julio Castillo
1566711c3a Add service agent outputs to folder and organization (#3436)
* Add service agent outputs to folder and organization

* Fix tests
2025-10-17 17:23:08 +02:00
Ludovico Magnocavallo
a3b86b9426 Revert "Added audience to workflow local in 0-org-setup (#3418)" (#3432)
This reverts commit 4dfcb9cf51.
2025-10-17 12:38:08 +00:00
kovagoadam
4dfcb9cf51 Added audience to workflow local in 0-org-setup (#3418)
* Added missing audiences to fast_0_org_setup

* Run terraform fmt

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 08:13:28 +00:00
norbert-loderer
1839a08581 Add missing project number variable to outputs in 0-org-setup stage (#3427)
* Add missing project number variable to outputs in 0-org-setup stage

* Fixed typo

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 06:51:04 +00:00
lcaggio
9bbd453024 bigquery-connection module (#3423)
Implement bq-connection module
2025-10-16 15:15:36 +00:00
Julio Castillo
f12fe9ea9d gitignore update (#3428)
* gitignore update

* bring back */venv/*
2025-10-16 14:14:54 +00:00
Taneli Leppä
7c6211a494 bigquery-dataset: fix issues (#3425)
* bigquery-dataset: add missing return_type to routines, fix view schema
encode, add dependency between routines and views

* Fix test.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-16 13:12:23 +00:00
Simone Ruffilli
5be136e2ea Always use local.project_id in net-vpc 2025-10-16 14:37:07 +02:00
Ludovico Magnocavallo
e068d6cf31 changelog 2025-10-16 09:03:00 +00:00
Ludovico Magnocavallo
8e8be1eda5 Support CIDR range sets in firewall modules context (#3424) 2025-10-16 09:01:05 +00:00
Simone Ruffilli
509b715a09 Adds network_id to net-vpc outputs (#3421)
* Adds network_id to net-vpc outputs

* Fixes description
2025-10-16 09:44:33 +02:00
Ludovico Magnocavallo
4c3aeda338 changelog 2025-10-16 07:09:07 +00:00
Ludovico Magnocavallo
45d4674ae8 net-vpn-ha (#3420) 2025-10-16 09:08:17 +02:00
Ludovico Magnocavallo
ccecb0dd24 changelog 2025-10-16 05:56:41 +00:00
Ludovico Magnocavallo
7c920d7d35 Add support for context to net-lb-int net-vpc-firewall and net-vpc module (#3419)
* net-lb-int

* net-vpc-firewall

* net-vpc

* net-vpc
2025-10-16 05:54:14 +00:00
Ludovico Magnocavallo
ecdc248f3f Add support for context to net-cloudnat, net-firewall-policy modules (#3414)
* net-cloudnat

* net firewall policy
2025-10-15 13:59:51 +02:00
Julio Castillo
9c61b1c30c Make SSM gitignores a list (#3413)
Fixes #3395
2025-10-15 11:35:44 +02:00
Ludovico Magnocavallo
6e02fd1136 Add support for context to DNS modules (#3412)
* dns-response-policy

* add context to dns modules
2025-10-14 16:07:29 +00:00
Wiktor Niesiobędzki
5bc9d831be Pass deletion_protection to secondary instance 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
9f2beb1ee6 Use fixture custom role for modules/project tests 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
849e856437 Use email from variables in tests 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
6673cba773 Fix provider failure when appling example 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
b10d31ef98 Add unique suffix to custom role 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
ad9d52a7da Use context prefixes for auto service grants 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
23dd44ce62 remove tf version from matrix, to keep workflow names stable across upgrades 2025-10-13 17:40:51 +02:00
Ludovico Magnocavallo
6045cf6ae2 Add support for contexts to compute-vm module (#3406) 2025-10-13 16:54:13 +02:00
Ludovico Magnocavallo
5f4c3a0fb2 remove spurious files 2025-10-13 09:38:02 +00:00
Ludovico Magnocavallo
606b86ce7a changelog 2025-10-13 09:37:27 +00:00
Julio Castillo
9b9ad76ced Update gke-hub module to use new Policy Controller API (#3332)
* Update gke-hub to use new Policy Controller API

Fixes #3287

* Use same config format for servicemesh

* remove useless trys

* use ternaries as in the rest of the repo

* Update docs and fix tests

* Update variables

* Bump tofu version

* Bump terraform version 1.12
2025-10-13 09:47:39 +02:00
Wiktor Niesiobędzki
802a25279a Test service_iam_grants along service_agent_iam 2025-10-12 15:02:12 +02:00
Wiktor Niesiobędzki
12c0c04e1c Add tests for service agents iam_emails 2025-10-12 15:02:12 +02:00
Ludovico Magnocavallo
8749683850 fix incorrect cloudservices agent email for global universe (#3402) 2025-10-12 11:13:50 +00:00
Ludovico Magnocavallo
6a79d0f74c Remove unavailable service from VPC-SC stage services list (#3400) 2025-10-10 05:58:08 +00:00
Victor Voisin
452060961a fix: expose missing audiences variable for gitlab workflow file generation (#3385)
In 0-org-setup, when using gitlab cicd, workflow-gitlab.yaml expects an
audiences variable.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-07 11:37:20 +00:00
Ludovico Magnocavallo
ffae137088 changelog 2025-10-07 08:03:41 +00:00
Ludovico Magnocavallo
7b70177459 add context to bigquery module (#3388) 2025-10-07 07:57:42 +00:00
Ludovico Magnocavallo
51c290c9d7 add support for universe to fast project factory stage (#3384) 2025-10-06 07:00:00 +00:00
Ludovico Magnocavallo
ebc7d5ad2c changelog 2025-10-06 05:44:58 +00:00
Nishant Raghav
81c7213f92 feat(bigquery-dataset): add optional schema support for views (#3377)
* feat: add optional schema to BigQuery views for descriptions

* feat: add schema support for view definitions in BigQuery dataset module

* fix: encode schema as JSON for BigQuery views

* feat: add population schema and update query for population view in BigQuery dataset

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-06 05:40:39 +00:00
Ludovico Magnocavallo
e9c3341323 support universe in fast security stage (#3383) 2025-10-06 07:24:50 +02:00
Ludovico Magnocavallo
b9b62eff89 Delete fast/stages/2-security/data/folders/main.tf 2025-10-05 16:15:47 +02:00