kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,020 Commits 1 Branch 1 Tag
76c6d4f4042db8fe72ecd94ec7f9c575cdd290dc
Commit Graph

1642 Commits

Author SHA1 Message Date
Julio Castillo
1e82683b15 Add service connection policies to net-vpc (#3667) 2026-01-23 12:51:00 +00:00
lopezvit
6db25b1a08 Add support for the Assured Workloads in the project factory (#3666) 
* Add support for the Assured Workloads in the project factory

* Fix test after requiring organization as a var
 2026-01-23 13:21:48 +01:00
Vannick Trinquier
2ea4c27fe8 Add context support for constraints and additional controls for hardened datasets (IAM, GKE and others) (#3661) 2026-01-23 08:28:02 +07:00
Julio Castillo
d46b39b717 Add missing context interpolations (#3659) 2026-01-20 20:21:56 +01:00
Julio Castillo
d9e1b924a1 Add asset_feeds to resman modules (#3658) 
* Add asset_feeds to resman modules

* Add examples and update readmes

* Extend pubsub_topic context to project and folder modules

* Use pubsub_topic context for pubsub_destination

* Update readmes and add project-factory asset_feed example

* Update context tests

* Update schemas
 2026-01-20 14:37:35 +00:00
Ludovico Magnocavallo
9d486022bf Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-20 08:47:01 +00:00
Ludovico Magnocavallo
04de8f7de7 Support CMEK configuration in org module logging settings, expose identities in FAST context (#3656) 
* support CMEK configuration in org module logging settings, expose identities as FAST contexts

* remove hash from inventories
 2026-01-19 13:35:30 +01:00
Vannick Trinquier
8342558732 Implement various compliance configuration and principle of least privilege for hardened dataset (#3635) 2026-01-19 15:46:15 +07:00
Luca Prete
ecb92b508c Add ability to use existing source files in GCS. (#3653) 2026-01-15 16:39:05 +00:00
Ludovico Magnocavallo
86268888b4 Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-14 15:06:31 +00:00
Julio Castillo
cff8a25c59 Introduce iam_by_principals_conditional (#3649) 
* Introduce iam_by_principals_conditional

* Add iam_by_principals_conditional to project factory

* Update IAM ADR

* Update project factory readme

* Sync FAST schemas

* Update organization schema

* Add resman tests for iam_by_principals_conditional

* Update PF project-defaults.tf

* Update copyright
 2026-01-14 11:16:07 +00:00
David Liebert
649cab0020 fixed bug where label field is ignored for policy based routes (#3648) 
* fixed bug where label field is ignored for policy based routes

* Fix example and inventory

* Add missing schema

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2026-01-14 09:48:16 +00:00
Ludovico Magnocavallo
66bbaeb854 fix observability in stage 0 (#3646) 2026-01-13 09:34:59 +00:00
Ludovico Magnocavallo
88306fe99a Adding missing context replacement type to project factory README, add folder_ids to project condition vars (#3642) 
* Adding missing context replacement type to project factory README

* add folder ids to project context condition vars
 2026-01-12 14:41:07 +01:00
Julio Castillo
6febcfe136 Add support for mirroring rules to modules/net-firewall-policy (#3636) 
* Add support for mirroring rules to net-firewall-policy

* Split mirroring rules

* Add schema

* Sort variables
 2026-01-12 11:10:43 +00:00
Eric Zhao
c1248d328a Allow any VPC for (secure) network_tags (#3634) 
* feat: allow all for VPC networks

* feat: add examples

* feat: add header

* feat: module test

* fix: update network testing data to pass validation

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2026-01-12 09:34:18 +00:00
Vannick Trinquier
ca413b8aa8 Add support to VPC flow logs for PSC subnet (#3639) 2026-01-12 15:56:14 +07:00
Ludovico Magnocavallo
f8f856c9ac reinstate v51.0.0 2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
da29af53c9 Revert "Use additive resource for perimeter resources in vpc-sc module when i…" (#3631) 
This reverts commit a3e09197c7.
 2026-01-08 14:29:40 +01:00
Ludovico Magnocavallo
12d0bbf2fc Revert "fix previous change to vpc sc module (#3629)" (#3630) 
This reverts commit dc35ce15ee.
 2026-01-08 14:28:57 +01:00
Ludovico Magnocavallo
1b4930513f prep v51.1.1 2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
f99920a69b fix previous change to vpc sc module 2026-01-08 12:35:27 +00:00
Ludovico Magnocavallo
6ab071da8d prep v51.1.0 2026-01-08 12:12:43 +00:00
Ludovico Magnocavallo
a3e09197c7 Use additive resource for perimeter resources in vpc-sc module when ignore changes is set (#3628) 
* module changes

* fix module
 2026-01-08 12:09:09 +00:00
David Liebert
5374899b36 added support for labels with google_compute_global_address resource (#3622) 
Co-authored-by: Julio Castillo <jccb@google.com>
 2026-01-07 13:19:48 +00:00
ooshrioo
ccad5654d9 Fix workforce identity federation provider configuration (#3626) 
* Fix workforce identity federation provider configuration

Remove redundant 'organizations/' prefix from parent parameter as
var.organization_id already contains the full organization path.

* Update test to match corrected parent parameter

The test expected the redundant 'organizations/' prefix, but the fix
correctly removes this duplication.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2026-01-07 14:02:13 +01:00
Ludovico Magnocavallo
ef027ad5b5 prep v51.0.0 2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d prep v50.1.0 2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
cb68dfda2a Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-06 08:42:25 +00:00
Suryansh Singhal
ba304518f1 Prevent recreation for key_revocation_action in compute-vm module (#3620) 
* fix(compute-vm): prevent instance recreation for key_revocation_action_type

The `key_revocation_action_type` attribute in the `google_compute_instance`
resource defaults to `NONE` on the provider side.

When this optional attribute was not explicitly set in the module's
`options` variable, it resolved to `null` in the Terraform configuration.
This caused Terraform to detect a change from `null` to `NONE` on every
plan, leading to unnecessary instance recreation.

This change applies `coalesce` to
`var.options.key_revocation_action_type` in the resource definition so
that it defaults to `NONE` when unset, aligning the configuration with
provider behavior and preventing a permadiff.

* updated the regional compute template too with the key_revocation_action_type

* fixed the formatting
 2026-01-05 11:53:47 +01:00
Ludovico Magnocavallo
502d953d03 Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-04 11:23:59 +00:00
Luca Prete
d0d7c64670 Refactor Agent Engine module to support new source based deployments (#3609) 
* Refactor Agent Engine module to support new source based deployments

* Fix linting

* Fix tests

* Fix tests

* Remove generated_pickle line from examples

* Fix indentation

* Delete modules/agent-engine/terraform.atfvars

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2026-01-04 08:11:46 +00:00
Ludovico Magnocavallo
fedf90d25f Add support for pubsub to project factory (#3608) 
* add support for pubsub to project factory

* remove duplicate data access log definitions from folders

* tfdoc

* schemas

* fix example

* add pubsub topics context to org in stage 0
 2025-12-23 10:24:33 +00:00
Wiktor Niesiobędzki
e811daaff7 fix bucket name for versions file in 0-org-setup 2025-12-23 07:32:56 +01:00
Ludovico Magnocavallo
a554971563 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-22 06:36:05 +00:00
Wiktor Niesiobędzki
2687dd2b97 make a test self-link look like a self-link and fix tests 2025-12-19 11:05:25 +01:00
Wiktor Niesiobędzki
73664615a4 Correct test for Direct VPC egress for CFv2 2025-12-19 11:05:25 +01:00
Luca Prete
0ac51b6050 Password for initial_user for AlloyDB is no longer required (#3596) 2025-12-18 11:57:32 +01:00
Luca Prete
c193fb37ee Upgrade Terraform provider to 7.13 (#3600) 2025-12-18 11:29:48 +01:00
Wiktor Niesiobędzki
85ebc4bc6f fix tests 2025-12-18 11:20:31 +01:00
Vannick Trinquier
cc24046be8 Add CMEK support to FAST and controls for CMEK encryption (#3556) 2025-12-14 12:14:08 +07:00
Ludovico Magnocavallo
ab0f55216a Add support for descriptive name to projects (#3591) 
* add support for descriptive name to projects

* boilerplate

* fmt
 2025-12-12 09:06:47 +01:00
Ludovico Magnocavallo
216a12eae5 Fix CI/CD dataset files and provider workflow variable in FAST stage 0 (#3587) 
* fix CI/CD dataset files and provider workflow variable

* IAM principals use pool, sts uses provider

* tfdoc

* fix variable description
 2025-12-11 15:05:39 +01:00
Ludovico Magnocavallo
d21e9c51e8 prep v50.0.0 2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
7cc12da6b3 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-10 18:19:11 +00:00
Ludovico Magnocavallo
5e606d0fff prep v49.3.0 2025-12-10 17:51:43 +00:00
kovagoadam
4e88bec299 Use project numbers in billing budget filter (#3555) 
* Fixed project level billing budget filter

* Moved project_numbers local to concat block

* Fixed with try block

* fix project replacement

* tfdoc

* fix test

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2025-12-10 17:35:06 +00:00
Ludovico Magnocavallo
dd6b1ea493 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-09 17:14:59 +00:00
aumohr
33bf7ab157 added role required for support ticket creation (#3578) 
* added role required for support ticket creation

* updated tests for role count

* updated tests for resource count
 2025-12-09 14:09:06 +04:00