Wiktor Niesiobędzki
6d51c8da4d
Use separate versions.tofu for OpenTofu constraints
2024-12-17 12:29:04 +01:00
Ludovico Magnocavallo
0fa257e6b1
Support customizable resource names in FAST stage 0 ( #2768 )
...
* support customizable resource names in FAST stage 0
* tfdoc
* tflint
* remove comment
* use object type
* tfdoc
* bump tf version
* bump terraform version in versions files
* tf version in ci
* trigger workflow
2024-12-16 17:46:34 +01:00
Jason Steenblik
90360c591e
Add confidential compute support to google_dataproc_cluster in the da… ( #2736 )
...
* Add confidential compute support to google_dataproc_cluster in the dataproc module
* fix parent id lookup for networking and security stages (#2744 )
* Add optional automated MD5 generation in net-vlan-attachment module (#2745 )
* Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2749 )
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp ) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express ). These dependencies need to be updated together.
Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases )
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md )
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12 )
Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2 )
---
updated-dependencies:
- dependency-name: path-to-regexp
dependency-type: indirect
- dependency-name: express
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add ability to autogenerate md5 keys in net-vpn-ha (#2748 )
* Add ability to optionally generate MD5 secrets in VPN module
* Add ability to autogenerate MD5 keys in net-vpn-ha module
* restore missing output
* fix test counts
---------
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
* update changelog
* Bump path-to-regexp and express (#2752 )
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp ) and [express](https://github.com/expressjs/express ). These dependencies needed to be updated together.
Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases )
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md )
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12 )
Updates `express` from 4.21.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2 )
---
updated-dependencies:
- dependency-name: path-to-regexp
dependency-type: indirect
- dependency-name: express
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* add support for routing mode to net-swp module (#2751 )
Co-authored-by: Julio Castillo <jccb@google.com >
* remove default location in tag value - cloud-run-v2 tags.tf (#2755 )
The Parent resource has a default to europe-west1 when it should be for the resource block from where the cloud run actually is.
Changed to use the var.region instead
* Add path_template_match and path_template_rewrite support to net-lb-app-ext (required for React apps for example).
* Add rest of load balancers.
* Add path_template_match and path_template_rewrite support to internal load balancers
* Add disk encyption key to the google_compute_instance_template - Sovereign support (#2750 )
* add disk encyption key to the google_compute_instance_template
* add a condition to the kms_key_self_link
* use dynamic variable for disk_encryption_key
* remove the getpip from the repo
---------
Co-authored-by: Julio Castillo <jccb@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
* Add support for password validation policy to cloudsql module (#2740 )
* add support for password validation policy to cloudsql module
* fix defaults
* update changelog
* bump provider version constraint
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Luca Prete <preteluca@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
Co-authored-by: Matthew Callinan <47421139+Mattible@users.noreply.github.com >
Co-authored-by: Taneli Leppä <taneli@google.com >
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Kovács Dávid <david-kovacs@t-systems.com >
2024-12-10 16:39:48 +01:00
Ludo
477cdc55fd
Prepare v36.0.1
2024-11-23 09:38:39 +01:00
Ludo
2552146e69
fix versions
2024-11-22 17:01:02 +01:00
Ludo
a6b0540c38
merge fast-dev
2024-11-22 16:02:23 +01:00
Ludo
c97b6192f5
prepare v35.1.0
2024-11-22 15:54:25 +01:00
Julio Castillo
8714b7a713
Merge branch 'master' into fast-dev
2024-11-18 15:19:55 +01:00
Julio Castillo
c60d152f4a
Add hierarchical namespace support to GCS module ( #2712 )
...
* Add hierarchical namespace support to GCS module
* remove empty iap block from inventories
* Fix tests
* Add new hns inventory
---------
Co-authored-by: Ludo <ludomagno@google.com >
2024-11-18 11:41:49 +00:00
Ludo
78f4e5c98d
boilerplate for v36.0.0-rc1
2024-10-31 17:52:09 +01:00
Ludovico Magnocavallo
50ac3a5013
Refactor of FAST resource management and subsequent stages ( #2648 )
...
* untested
* pllan testing
* fix stage 2s
* move providers to their own file
* single-environment stage 3
* fixes and moved blocks
* stage3 factory
* doc
* review comments
* review comments
* tfdoc
* fasts tage 1 tests
* netsec as stage 2
* fix backported roles
* fix backported roles
* tfdoc
* fixes
* fix tag value roles in stage 1
* remove checklist, fix stage 1 tests
* inventory
* Small bugfix
* refactor context tag values
* fix previous merge
* fix previous merge
* fix previous merge
* support short names for top level automation resources, change top level context variable
* fix new top level context
* roll back merge changes to stage 0 outputs
* roll back more merge changes
* linting errors
* tfdoc
* fix tests, roll back merge in tenants stage
* tfdoc
* fix inventory
* optional stage 2 env folders and tag bindings
* tflint
* damn tflint
* damn tflint
* tfdoc
* fix networking tests
* tflint
* fix test inventories
* tfdoc
* use coalesce for project parents
* fix billing role conditions
* fix billing role conditions
* security stage tested (ngw resources need fixing/porting)
* boilerplate
* fix inventory
* stage envs and stage linking script
* initial work on resman docs, update diagram, improve teams folder
* resman README
* fix stage 2 IAM delegation
* remove checklist from bootstrap
* stage 1 tests
* stage 0 1 and 2 tests
* tflint
* tflint
* tfdoc
* GCVE stage refactor (untested)
* GCVE stage refactor (untested)
* GCVE stage 3
* gcve tests
* tflint
* tfdoc
* fix links
* module tests
* stages README
* move network security to stage 2
* network security tests
* replace stage links in README files
* minimal netsec stage refactor
* use factory for iac org policies, add configurable drs org policy for iac
* test mt stage
* tfdoc
* fix cicd workflows
* fix cicd workflows
* gke-dev stage
* tflint
* remove data platform stage
* exclude provider files via tfdoc opts
* remove data platform tests and links
* fix merge
* fix resman inventory
* boilerplate
* inventory
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-10-31 16:55:54 +01:00
Simone Ruffilli
7f8a02a405
Add support for google provider 6.x ( #2536 )
...
* Add support for google provider 6.x
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2024-09-05 10:35:58 +00:00
Julio Castillo
ba3e1be416
Bump provider to 5.43.1 ahead of next release ( #2557 )
2024-09-04 19:58:07 +02:00
Ludovico Magnocavallo
eb89c62b5f
prepare v34.0.0 release ( #2543 )
2024-08-30 10:06:33 +02:00
Julio Castillo
d4e727a482
Update stable provider too ( #2531 )
2024-08-28 08:49:46 +02:00
Julio Castillo
bab85c88ba
Bump provider to last release of version 5 ( #2525 )
...
* Bump provider to last release of version 5
* Remove default-versions copy in test env setup
* Use file instead of symlink in tools/lookfile
* Remove default-version reference
* Removed unused code
2024-08-27 16:50:59 +02:00
Julio Castillo
0420dec32f
Add deletion_policy to project module ( #2502 )
...
* Replace skip_delete with deletion_policy
* Fix blueprints
* Update apigee blueprint readme
* Remove skip_delete from test inventories
2024-08-16 18:33:39 +02:00
Wiktor Niesiobędzki
1daf344fe9
Bump provider version to 5.40, to resolve perma-diff with Cloud SQL instance
2024-08-06 11:49:29 +02:00
Jay Bana
2a2c4a96ce
Add support for sqlAssertion AutoDQ rule type in dataplex-datascan ( #2416 )
...
* Add sql_assertion rule type to Dataplex AutoDQ data_quality_spec
* Fix broken link to API reference public doc for DQ spec
* Update README.md after linting
* Add example tests for dataplex-datascan
* Bump provider versions
* Bump provider versions everywhere
2024-07-09 21:29:45 +00:00
apichick
73e286c0ab
Added spanner-instance module ( #2372 )
2024-06-23 17:25:22 +00:00
simonebruzzechesse
1969b02ed8
Alloydb add support for psc ( #2341 )
...
* alloydb add support for psc
* add tag binding support
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-06-05 13:39:03 +02:00
Simone Ruffilli
d3ffcc2b1c
Disable reserved_internal_range in net-vpc due to provider bug ( #2282 )
2024-05-15 05:46:18 +00:00
Simone Ruffilli
9a26fe8635
Add support for reserved_internal_range in net-vpc ( #2275 )
...
Adds support for reserved_internal_range to net-vpc
2024-05-14 22:19:45 +03:00
apichick
ab174274de
Added new attributes Apigee organization and bumped up providers version ( #2243 )
2024-04-28 17:31:42 +02:00
Julio Castillo
3af7e257d2
Add tflint to pipelines ( #2220 )
...
* Fix terraform_deprecated_index
https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md
* Fix terraform_deprecated_interpolation
Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md
* Fix more indexing
* Remove unused variable
* Enable TFLint for modules
* Add tflint config file
* Fix chdir
* Lint modules
* TFLint fixes
* TFLint
* Fixes binauthz README
* Fixes DNS response policy tests. Restores MIG outputs.
* Fixes other DNS response policy tests.
* Update tests for fast 2-e
* Moar fixed tests
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-04-17 10:23:48 +02:00
Tone
2831af09fa
feat(gke-cluster-standard): Add optional CiliumClusterWideNetworkPolicy ( #2207 )
...
* feat(gke-cluster-standard): Add optionnal `CiliumClusterWideNetworkPolicy`
Add `CiliumClusterWideNetworkPolicy` option on cluster.
Ref:
- https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#enable_cilium_clusterwide_network_policy
- https://cloud.google.com/kubernetes-engine/docs/how-to/configure-cilium-network-policy
* feat(gke-cluster-standard): Update Google provider to manage new feature
* feat(gke-cluster-standard): Move `cilium_clusterwide_network_policy` to `enable_features` field
* fix(scheduled-asset-inventory-export-bq): Set `dataset_id` with underscores
* fix(bigquery-dataset): Set `dataset_id` with underscores
2024-04-09 17:08:36 +02:00
Elia
b80132a618
FAST GCVE stage ( #2191 )
...
* GCVE stage prerequisites
* fix gcve prereq
* gcve stage first deploy
* Updated readme filex
* docs updated
* some fixes after testing
* updated readme files
* elia fix
* gcve net admin custom role
* gcve net admin custom role
* elia fix
* ven peering deploy
* elia fix
* added blueprint and stage tests
* Edits to Readme files
* typo in outputs
* clean-up
* gcve stage tests fix
* readme fix
* fix sorting
* fix copyrights and readme file
* fix test
* fix copyright
* fixed gcve feature flag cond.
* removed validation
* fixed typo
* fixed typo
* fixed gcve tests
* fixed typo
* fixed typo
* fixed sorting
* fixed sorting
---------
Co-authored-by: Konrad Schieban <kschieban@google.com >
2024-04-03 17:25:12 +02:00
Wiktor Niesiobędzki
f2806f347b
Bump provider version to 5.18, so fix non-empty plan for google_notebooks_instance
2024-03-25 19:57:14 +01:00
Ludovico Magnocavallo
5ac86ecae7
Support advanced_datapath_observability in gke cluster standard module ( #2168 )
...
* support advanced_datapath_observability in gke cluster standard module
* bump provider to 5.17.0
2024-03-22 08:25:43 +01:00
Ludovico Magnocavallo
6941313c7d
Factories refactor ( #1843 )
...
* factories refactor doc
* Adds file schema and filesystem organization
* Update 20231106-factories.md
* move factories out of blueprints and create new factories README
* align factory in billing-account module
* align factory in dataplex-datascan module
* align factory in billing-account module
* align factory in net-firewall-policy module
* align factory in dns-response-policy module
* align factory in net-vpc-firewall module
* align factory in net-vpc module
* align factory variable names in FAST
* remove decentralized firewall blueprint
* bump terraform version
* bump module versions
* update top-level READMEs
* move project factory to modules
* fix variable names and tests
* tfdoc
* remove changelog link
* add project factory to top-level README
* fix cludrun eventarc diff
* fix README
* fix cludrun eventarc diff
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-02-26 10:16:52 +00:00
Wiktor Niesiobędzki
2c9eb5795b
Bum terraform to version 1.7.0
2024-02-07 17:25:11 +01:00
Luca Prete
bc506795f2
compute-vm: add resource manager tags support for instance templates ( #1982 )
2024-01-16 17:40:15 +00:00
Luca Prete
44b1115b9f
Fix GCVE network policy ( #1948 )
...
Co-authored-by: Luca Prete <lucaprete@google.com >
2023-12-22 10:29:43 +00:00
Luca Prete
06b2a97291
GCVE: add network policy configuration
2023-12-22 10:02:12 +00:00
Luca Prete
df5c02aa1e
Minor fix to GCVE module readme ( #1946 )
...
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2023-12-21 18:29:30 +01:00
Luca Prete
c4123044b7
Use new resources in GCVE module, bump up provider versions ( #1941 )
2023-12-21 13:23:38 +00:00
Wiktor Niesiobędzki
c24d023c23
Sync tf version to version used by tests
2023-12-12 09:43:09 +01:00
Ludovico Magnocavallo
b65c57bcc2
bump tf version ( #1920 )
2023-12-12 09:19:46 +01:00
apichick
66bd9d5160
Added workstation-cluster module
2023-11-30 07:02:28 +01:00
Wiktor Niesiobędzki
b40ad91629
Bump provider version to 5.4.0
2023-11-03 17:02:00 +00:00
alealr
8d06afcdb8
Updating wording
2023-10-31 14:35:27 +00:00
Simone Ruffilli
6d89b88149
versions.tf maintenance + copyright notice bump ( #1782 )
...
* Bump copyright notice to 2023
* Delete versions.tf on blueprints
* Pin provider to major version 5
* Remove comment
* Fix lint
* fix bq-ml blueprint readme
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2023-10-20 18:17:47 +02:00
Ludovico Magnocavallo
789328ff5a
Bump provider versions to v5.0.0 ( #1724 )
...
* bump provider versions to 5.0.0
* fix cloud run, logging and vpc-sc
* Fix secret manager
* fix gke nodepool
* fix gke multitenant stage and blueprint
* Moving alloydb module to experimental.
* Add project to bare resources in examples
* tfdoc
* fix svpc blueprint test
* Revert "fix svpc blueprint test"
This reverts commit 14f02659098070136e64ead600580dd52c23c339.
* Fix GKE peering project
* Disable tests in alloydb module
* Bring back secret ids in secret manager tests
* Remove duplicate key
* last push
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2023-10-03 12:15:36 +00:00
Oliver Frolovs
6eb862a775
GKE cluster modules: add optional kube state metrics ( #1682 )
...
* `gke-cluster-standard`: add optional kube state metrics
* `gke-cluster-autopilot`: add optional kube state metrics
* FAST: add kube state metrics support for GKE
* blueprints/gke: add kube state metrics support
* Bump up the provider version to `v4.82.0`
2023-09-15 12:18:45 +01:00
Julio Castillo
3d4cc7164a
Bump provider version to 4.80.0
2023-09-05 09:48:15 +02:00
eliamaldini
126d75a311
fixed typo
2023-08-18 17:01:12 +02:00
eliamaldini
103443dc30
fixed typo
2023-08-18 16:57:35 +02:00
eliamaldini
1b93197b87
fixed typo
2023-08-18 16:56:21 +02:00
eliamaldini
c4ada40275
fixed typo
2023-08-18 16:52:58 +02:00
eliamaldini
bf26580b9d
fixed variables order
2023-08-18 15:52:56 +02:00