Commit Graph

5775 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki
6d51c8da4d Use separate versions.tofu for OpenTofu constraints 2024-12-17 12:29:04 +01:00
Ludo
531934457e update changelog 2024-12-16 19:25:41 +01:00
Ludovico Magnocavallo
91da1c6482 Support customizable resource names to fast stage 1 (#2769)
* add support for resource names to fast stage 1

* tflint version
2024-12-16 18:07:28 +00:00
Ludovico Magnocavallo
0fa257e6b1 Support customizable resource names in FAST stage 0 (#2768)
* support customizable resource names in FAST stage 0

* tfdoc

* tflint

* remove comment

* use object type

* tfdoc

* bump tf version

* bump terraform version in versions files

* tf version in ci

* trigger workflow
2024-12-16 17:46:34 +01:00
Ludo
89a33f0a73 update changelog 2024-12-13 18:03:48 +01:00
Ludovico Magnocavallo
133a9bb133 fix workspace logs sink in FAST bootstrap stage (#2767) 2024-12-13 13:22:42 +00:00
Ludovico Magnocavallo
ae9f4c6d74 allow optional creation of billing resources in FAST boostrap stage (#2766) 2024-12-13 12:32:16 +01:00
Ludo
1ee21fae5a better org replacement in iam tool 2024-12-13 11:01:23 +01:00
Julio Castillo
b38e8bfa79 Update issue templates (#2765) 2024-12-12 12:40:47 +00:00
Ludo
9873fc41f6 update changelog 2024-12-12 12:09:37 +01:00
Ludovico Magnocavallo
d86b8d565c Refactor GKE cluster modules access configurations, add support for DNS endpoint (#2761)
* stub

* gke standard module and tests

* blueprints

* tfdoc

* autopilot

* blueprints

* tfdoc

* gke hub module examples

* dataproc and gke fixture
2024-12-12 11:02:24 +01:00
Ludovico Magnocavallo
d59d182456 ignore ssl certificates if none are passed in net-lb-app-int module (#2764) 2024-12-12 10:37:37 +01:00
Luca Prete
07e0fb895b Update net-vlan-attachment module readme (#2757)
* Update net-vlan-attachment module configuration with the correct link-local IP addresses and interconnect self-link formats.

* fix example formatting

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-12-11 08:00:28 +00:00
Ludo
76176d518c update changelog 2024-12-10 23:42:16 +01:00
Jason Steenblik
90360c591e Add confidential compute support to google_dataproc_cluster in the da… (#2736)
* Add confidential compute support to google_dataproc_cluster in the dataproc module

* fix parent id lookup for networking and security stages (#2744)

* Add optional automated MD5 generation in net-vlan-attachment module (#2745)

* Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2749)

Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add ability to autogenerate md5 keys in net-vpn-ha (#2748)

* Add ability to optionally generate MD5 secrets in VPN module

* Add ability to autogenerate MD5 keys in net-vpn-ha module

* restore missing output

* fix test counts

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* update changelog

* Bump path-to-regexp and express (#2752)

Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add support for routing mode to net-swp module (#2751)

Co-authored-by: Julio Castillo <jccb@google.com>

* remove default location in tag value - cloud-run-v2 tags.tf (#2755)

The Parent resource has a default to europe-west1 when it should be for the resource block from where the cloud run actually is.

Changed to use the var.region instead

* Add path_template_match and path_template_rewrite support to net-lb-app-ext (required for React apps for example).

* Add rest of load balancers.

* Add path_template_match and path_template_rewrite support to internal load balancers

* Add disk encyption key to the google_compute_instance_template - Sovereign support (#2750)

* add disk encyption key to the google_compute_instance_template

* add a condition to the kms_key_self_link

* use dynamic variable for disk_encryption_key

* remove the getpip from the repo

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* Add support for password validation policy to cloudsql module (#2740)

* add support for password validation policy to cloudsql module

* fix defaults

* update changelog

* bump provider version constraint

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Luca Prete <preteluca@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Matthew Callinan <47421139+Mattible@users.noreply.github.com>
Co-authored-by: Taneli Leppä <taneli@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Kovács Dávid <david-kovacs@t-systems.com>
2024-12-10 16:39:48 +01:00
Ludo
9f2c89c0eb update changelog 2024-12-09 10:46:43 +01:00
Ludovico Magnocavallo
f3b14f5e69 Add support for password validation policy to cloudsql module (#2740)
* add support for password validation policy to cloudsql module

* fix defaults
2024-12-09 09:44:15 +00:00
Kovács Dávid
2defaed545 Add disk encyption key to the google_compute_instance_template - Sovereign support (#2750)
* add disk encyption key to the google_compute_instance_template

* add a condition to the kms_key_self_link

* use dynamic variable for disk_encryption_key

* remove the getpip from the repo

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-12-09 10:30:58 +01:00
Wiktor Niesiobędzki
3f86056c78 Add path_template_match and path_template_rewrite support to internal load balancers 2024-12-09 09:32:48 +01:00
Taneli Leppä
c27da296b1 Add rest of load balancers. 2024-12-09 09:32:48 +01:00
Taneli Leppä
73b6088132 Add path_template_match and path_template_rewrite support to net-lb-app-ext (required for React apps for example). 2024-12-09 09:32:48 +01:00
Matthew Callinan
817df69ff8 remove default location in tag value - cloud-run-v2 tags.tf (#2755)
The Parent resource has a default to europe-west1 when it should be for the resource block from where the cloud run actually is.

Changed to use the var.region instead
2024-12-09 08:48:23 +01:00
Ludovico Magnocavallo
36b70bd8b8 add support for routing mode to net-swp module (#2751)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-12-08 13:26:01 +00:00
dependabot[bot]
b6421ec0b7 Bump path-to-regexp and express (#2752)
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-08 09:34:19 +00:00
Ludo
d307feb043 update changelog 2024-12-06 08:37:40 +01:00
Luca Prete
c6c6bbfffa Add ability to autogenerate md5 keys in net-vpn-ha (#2748)
* Add ability to optionally generate MD5 secrets in VPN module

* Add ability to autogenerate MD5 keys in net-vpn-ha module

* restore missing output

* fix test counts

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-12-06 07:34:56 +00:00
dependabot[bot]
5842bf7407 Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2749)
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12)

Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-06 06:54:12 +01:00
Luca Prete
747b62b1e3 Add optional automated MD5 generation in net-vlan-attachment module (#2745) 2024-12-05 16:55:16 +00:00
Ludovico Magnocavallo
1a1886c551 fix parent id lookup for networking and security stages (#2744) 2024-12-04 21:08:31 +01:00
Ludo
24b9049299 update changelog 2024-12-01 06:59:30 +01:00
Ludovico Magnocavallo
e3cdde35b6 Add support for secret manager config to gke cluster modules (#2741)
* add secret manager config to gke cluster

* fix variable default
2024-11-29 09:24:18 +01:00
Ludo
ca3fbf4de3 update changelog 2024-11-28 07:50:27 +01:00
Ludo
1482286d0c update changelog 2024-11-28 07:49:20 +01:00
Rob Rankin
20a1689637 Allow override of GKE Nodepool SA Display Name (#2734)
* Allow override of Nodepool SA Display Name

* Remove comment

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-11-28 06:47:16 +00:00
simonebruzzechesse
d277c47a35 manage switchover (#2738)
* manage switchover

* manage switchover
2024-11-27 16:57:33 +01:00
Luca Prete
9d2b50eceb Add basename to SWP policy rules factory (#2739) 2024-11-27 14:42:32 +00:00
Ludovico Magnocavallo
5e0878903c SWP module refactor (#2737)
* new swp interface and factory

* outputs

* tests and fixes
2024-11-27 12:54:59 +00:00
mtndrew404
7c858f4753 Fixing yaml naming in prod subnet folder to match other lifecycles (#2733) 2024-11-26 06:40:21 +00:00
Ludo
1de21fe06d linting 2024-11-23 09:49:17 +01:00
Ludo
ec3cd62bf6 allow excluding pulls from release in changelog tool 2024-11-23 09:46:55 +01:00
Ludo
477cdc55fd Prepare v36.0.1 2024-11-23 09:38:39 +01:00
Ludo
a9db523c79 update changelog 2024-11-23 08:36:03 +01:00
Ludovico Magnocavallo
008202129b add missing role to org-level delegated IAM grants (#2731) 2024-11-23 07:58:13 +01:00
Julio Castillo
71f72761af Run test and linting when pushing to master or fast-dev (#2730)
Maintainers occasionally force push to these branches. This will allow
tests to run without the need for a dummy PR
2024-11-22 19:21:38 +00:00
Ludo
2552146e69 fix versions 2024-11-22 17:01:02 +01:00
Ludo
a6b0540c38 merge fast-dev 2024-11-22 16:02:23 +01:00
Ludo
c97b6192f5 prepare v35.1.0 2024-11-22 15:54:25 +01:00
Ludo
028721059c Merge remote-tracking branch 'origin/master' into fast-dev 2024-11-22 15:45:35 +01:00
fulyagonultas
be0f2e58b2 enable_private_path_for_google_cloud_services added to CloudSQL (#2726)
* enable_private_path_for_google_cloud_services added to CloudSQL

* name of the variable changed

* new feature added to the replica as well

* Update simple.yaml enable_private_path_for_google_cloud_services: false
2024-11-22 13:08:33 +00:00
simonebruzzechesse
2c6bc642d4 fix typo on maintenance config (#2727) 2024-11-22 10:35:45 +01:00