Commit Graph

85 Commits

Author SHA1 Message Date
Julio Castillo
f3be29cbc9 Fix tests 2023-09-15 00:27:55 +02:00
Julio Castillo
f19ab4872f Embed subnet-level IAM in the variables controlling creation of subnets
This moves the top-level `iam`, `iam_bindings` and
`iam_bindings_additive` variables into subnet-level attributes. This
change also allows setting permissions to PSC or proxy-only subnets

As part of this change, the factory interface is more aligned with the
rest of the modules using a `factories_config` variable. In the future
we can add a cidrs template similar to the firewall policy module
2023-09-15 00:27:55 +02:00
Dave Gulli
09e6e8f4d2 created passing test, fixed logic 2023-09-13 16:49:14 +10:00
Dave Gulli
5f2bc7fa92 refactored to recommended method 2023-09-12 14:58:49 +10:00
Dave Gulli
db5030e93f adding test 2023-09-11 21:08:55 +10:00
Dave Gulli
f76d8fcb52 fixed period 2023-09-11 20:48:26 +10:00
Dave Gulli
dac76a900b fixed references 2023-09-11 20:47:05 +10:00
Dave Gulli
adff09aa24 linting error 2023-09-11 20:45:32 +10:00
Dave Gulli
c1b52b300c trying to fix linting 2023-09-11 20:41:25 +10:00
Dave Gulli
e1aff29d5c linting again 2023-09-11 20:30:11 +10:00
Dave Gulli
3cfabb32c5 fixed linter 2023-09-11 20:29:08 +10:00
Dave Gulli
3c0391db5c slight change to readme thanks to tfdoc 2023-09-11 20:24:06 +10:00
Dave Gulli
a18071ed36 updated for global managed proxy 2023-09-11 17:42:34 +10:00
Dave Gulli
b49984e1b9 added support for global proxy only subnets 2023-09-11 16:56:09 +10:00
Julio Castillo
a6640e5959 Make net-vpc variables nullable 2023-09-06 09:57:34 +02:00
Ludovico Magnocavallo
819894d2ba IAM interface refactor (#1595)
* IAM modules refactor proposal

* policy

* subheading

* Update 20230816-iam-refactor.md

* log Julio's +1

* data-catalog-policy-tag

* dataproc

* dataproc

* folder

* folder

* folder

* folder

* project

* better filtering in test examples

* project

* folder

* folder

* organization

* fix variable descriptions

* kms

* net-vpc

* dataplex-datascan

* modules/iam-service-account

* modules/source-repository/

* blueprints/cloud-operations/vm-migration/

* blueprints/third-party-solutions/wordpress

* dataplex-datascan

* blueprints/cloud-operations/workload-identity-federation

* blueprints/data-solutions/cloudsql-multiregion/

* blueprints/data-solutions/composer-2

* Update 20230816-iam-refactor.md

* Update 20230816-iam-refactor.md

* capture discussion in architectural doc

* update variable names and refactor proposal

* project

* blueprints first round

* folder

* organization

* data-catalog-policy-tag

* re-enable folder inventory

* project module style fix

* dataproc

* source-repository

* source-repository tests

* dataplex-datascan

* dataplex-datascan tests

* net-vpc

* net-vpc test examples

* iam-service-account

* iam-service-account test examples

* kms

* boilerplate

* tfdoc

* fix module tests

* more blueprint fixes

* fix typo in data blueprints

* incomplete refactor of data platform foundations

* tfdoc

* data platform foundation

* refactor data platform foundation iam locals

* remove redundant example test

* shielded folder fix

* fix typo

* project factory

* project factory outputs

* tfdoc

* test workflow: less verbose tests, fix tf version

* re-enable -vv, shorter traceback, fix action version

* ignore github extension warning, re-enable action version

* fast bootstrap IAM, untested

* bootstrap stage IAM fixes

* stage 0 tests

* fast stage 1

* tenant stage 1

* minor changes to fast stage 0 and 1

* fast security stage

* fast mt stage 0

* fast mt stage 0

* fast pf
2023-08-20 09:44:20 +02:00
Ludovico Magnocavallo
def2f476d1 Add support for conditions to iam_members module variables (#1594)
* project

* data-catalog-policy-tag

* dataproc

* folder

* iam-service-account

* kms

* net-vpc

* organization

* source-repository

* dataplex-datascan
2023-08-15 16:28:23 +02:00
Ludovico Magnocavallo
adf2621727 Add new iam_members variable to IAM additive module interfaces (#1589)
* resource management modules

* data catalog policy

* dataproc

* service account

* kms

* net-vpc

* source repository

* dataplex datascan

* service account module variable order
2023-08-14 09:54:50 +00:00
Ludovico Magnocavallo
aecba0bbd0 Add support for ipv6 to net-vpc module (#1568)
* add support for ipv6

* fix test
2023-08-05 13:07:26 +02:00
Julio Castillo
bbe778e095 Allow custom route descriptions in net-vpc module
Related: #1491
2023-08-04 14:13:03 +02:00
Julio Castillo
1fdec356e2 Update large TOCs 2023-07-28 15:43:51 +02:00
Ludovico Magnocavallo
86cc6eee4c disable googleapi routes creation when vpc is not created (#1489) 2023-07-03 09:10:12 +02:00
Julio Castillo
50d8d4b8b8 Add subnets id output, expand net-address outputs 2023-06-12 10:24:30 +02:00
Ludovico Magnocavallo
7bd6e5d57b Small fixes (#1425)
* fix serverless connector plugin outputs

* add internal and lb to allowed ingress org policy

* add validation condition on cloud run ingress settings

* tfdoc

* plugin tfdoc

* allow disabling googleapis routes with a single instruction in net-vpc

* fix variable def

* fix variable description

* fix cr variable validation

* fix usage of   create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
Ludovico Magnocavallo
884cb8b4bf Ensure all modules have an id output (#1410)
* net-vpc

* a-d

* complete modules

* fix error
2023-06-02 16:07:22 +02:00
Julio Castillo
0888cce3a5 Rename to create_googleapis_routes 2023-05-26 16:43:43 +02:00
Julio Castillo
563b5fa0cb Update net-vpc README 2023-05-26 12:46:16 +02:00
Julio Castillo
1e8c58c88e Reuse existing logic to create default routes 2023-05-26 12:01:38 +02:00
Julio Castillo
7a91a7e41c Add default googleapi route creation to net-vpc 2023-05-26 10:55:35 +02:00
Fawzi
ebf93a66ad add new test to README 2023-04-11 23:38:16 +10:00
Fawzi
3c4254fc1f update firewall_policy_enforcement_order variable 2023-04-11 22:08:41 +10:00
Fawzi
db3c48736c add firewall enforcement variable to VPC 2023-04-10 01:28:12 +10:00
Ludovico Magnocavallo
8a8b7ea35f Add support for iam_additive and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo
6ba0f8b0ba allow overriding name in net-vpc subnet factory (#1239) 2023-03-11 09:30:42 +01:00
Ludovico Magnocavallo
8fc9549c58 add support for proxy and psc subnets to module factory (#1211) 2023-03-05 17:08:43 +01:00
Ludovico Magnocavallo
3a2d6e1b46 Fix secondary ranges in net-vpc readme (#1198)
Fixes #1197
2023-03-01 08:08:07 +01:00
Julio Castillo
3085922cea Fix tests 2023-02-20 12:19:36 +01:00
Julio Castillo
f014ee5794 Fix linting 2023-01-19 18:35:00 +01:00
Julio Castillo
a12089ef8c Move VPC factory and route tests to examples. 2023-01-19 17:47:14 +01:00
Julio Castillo
12f07ebeac Extend net-vpc README with more tested examples 2023-01-19 17:47:14 +01:00
Julio Castillo
fd19e4a923 add inventories net-vpc examples 2023-01-19 17:47:14 +01:00
Israel Herraiz
8718fedcab Fix service account prefix after provider version bump 2022-12-23 00:45:37 +01:00
Julio Castillo
e700a27079 Enforce terraform fmt in examples 2022-12-18 14:00:19 +01:00
Julio Castillo
513fdfe91a Make directive for supporting files in examples more explicit 2022-12-18 14:00:19 +01:00
Julio Castillo
2cd74823b1 Generate files based on readme contents 2022-11-18 17:48:52 +01:00
Julio Castillo
7be3288cc7 Add tests for factory examples 2022-11-18 17:48:52 +01:00
Ludovico Magnocavallo
29cde275f0 fix backwards compatibility for vpc subnet descriptions (#926) 2022-10-28 08:13:04 +02:00
Ludovico Magnocavallo
41c416b55e make mtu default explicit in variable description 2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo
4fa1dc431d Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Julio Castillo
269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00