Commit Graph

35 Commits

Author SHA1 Message Date
Julio Castillo
7ceb814986 VPC SC module refactor (#3062)
* Remove bridge perimeters

* Update FAST stages

* Allow project ids in perimeter definitions

* Preserve order order for ingress/egress policies

* Use CAI

* Use CAI

* Fix tests
2025-05-09 14:37:03 +02:00
Julio Castillo
f656a37c40 Merge branch 'master' into fast-dev 2025-04-02 14:07:33 +02:00
Julio Castillo
0c334a6128 Add roles support to VPC-SC (#3000) 2025-04-02 09:39:04 +02:00
Julio Castillo
3ed801c464 Use VPC-SC perimeter factory in FAST 1-vpcsc stage (#2928)
* Use VPC-SC perimeter factory in FAST 1-vpcsc stage

* Add boilerplate

* Fix linter and schema checks

* Fix tests

* Fix schemas
2025-02-24 12:29:51 +00:00
karpok78
07a70eedb5 Add perimeter factory to modules/vpc-sc (#2919)
* Add perimeter factory

Proposal to allow the management of perimeters in yaml factory.
Project discovery is extended to multiple perimeters with query filtering.

Doc clean uo

* default perimeters desc to null

* linting

* Revert changes to FAST

* Remove test and schema from FAST

* Align vars and perimeter factory

* Interpolate resource_sets in more places

* Silence linter

* Update README.md

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2025-02-22 07:49:05 +01:00
Julio Castillo
21253a1768 Add title to VPC-SC directional policies (#2909)
* Add title to VPC-SC directional policies

* Ignore versions.tf in diffs

* Update versions.tf

* Fail if a perimeter uses unknown directional policies
2025-02-20 08:48:08 +00:00
Julio Castillo
fd9f92324b Update VPC-SC module and FAST stage (#2887)
* Update VPC-SC module to support vpc subnets

* Update FAST VPC-SC variables

* Fix tests
2025-02-13 18:04:09 +00:00
Wiktor Niesiobędzki
70bd037629 Add IAM member prefix validation to variables.tf 2024-08-09 12:08:22 +02:00
Ludovico Magnocavallo
345716e576 VPC-SC as separate FAST stage 1 (#2460)
* initial commit

* README

* boilerplate

* tflint

* tfdoc

* fix security stage tests

* vpc-sc stage tests

* tflint

* fix resman stage test inventories

* security README

* stage-level README

* Update README.md

* flexible perimeter variable

* remove diagram

* change default to dry run

* default to dry run
2024-08-02 18:04:36 +02:00
Ludovico Magnocavallo
91615e0140 VPC-SC module factories (#2081)
* factory untested

* factory example test
2024-02-17 08:02:16 +01:00
Viliam Pucik
5372361b8c Proper validation of empty string value in identity_type (#1980) 2024-01-16 10:28:30 +01:00
Viliam Pucik
19eb247849 Fix identity_type (#1978)
* Allow empty string for 'identity_type' supported by Google provider and use correct value name for ingress 'identity_type'

* Sanitizing variables as the logical operators in Terraform do not short-circuit.
2024-01-15 20:40:06 +00:00
Jan Toth
d1746b8bd1 Support for ANY_USER_ACCOUNT in module vpc-sc egress rule. (#1966) 2024-01-08 14:23:07 +01:00
Ludovico Magnocavallo
c7bef582e8 add support for IAM to vpc sc module (#1846) 2023-11-08 11:27:44 +01:00
LudovicEmo
c558d9b753 Vpc sc allow null for identity type (#1632)
* vpc-sc : allow null for identity_type

* cloudsql-instance : fmt

* vpc-sc: tfdoc

* modules/vpc-sc: update the test result for the identity_type field

* cloudsql-instance: remove empty line
2023-08-29 04:28:57 +02:00
LudovicEmo
32b347b104 modules/vpc-sc: add support for method_selectors/permission (#1439)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-06-25 06:45:37 +00:00
Ludovico Magnocavallo
4aa99ea829 allow setting identities in egress policies (#1394) 2023-05-24 12:05:16 +02:00
lcaggio
00f781bd9f First commit 2023-01-17 13:39:28 +01:00
Ludovico Magnocavallo
67fca1036c Fix status ingress/egress policies in vpc-sc module (#1036)
* fix status ingress/egress policies

* fix default status/spec value
2022-12-05 09:00:00 +01:00
Ludovico Magnocavallo
a9c47681d8 Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Ludovico Magnocavallo
79b7a6f40f disable device policy support in vpc-sc module 2022-01-04 16:22:15 +01:00
Simone Ruffilli
ee25965c89 Copyright bump (#410) 2022-01-01 15:52:31 +01:00
Ludovico Magnocavallo
2c7dab3bb2 New vpc-sc module implementation (#406)
* first implementation

* minimal output

* split service perimeters in regular and bridge

* tests and fixes

* new vpc-sc implementation

* remove providers file used for testing

* remove provider used during development
2021-12-31 13:29:22 +01:00
Julio Castillo
1d13e3e624 Add more validations to linter
- Ensure all variables and outputs are sorted
- Ensure all variables and outputs have a description
- Add data-solutions/data-platform-foundations to linter

Fix all modules to follow these new conventions.
2021-10-08 18:26:04 +02:00
Daniel Marzini
d5fde0e6e1 adjusting code to reflect pr changes request 2021-09-03 18:35:06 +02:00
Daniel Marzini
4a3464fa7e Update variables.tf 2021-07-22 10:36:01 +02:00
Daniel Marzini
0f10e820f9 Enable multiple vpc-sc perimeters over multiple modules 2021-07-22 09:19:10 +02:00
lcaggio
722b3f59f8 Fix link 2021-05-17 18:41:37 +02:00
lcaggio
628ab41c33 Add Support for Ingress Egress policy 2021-05-07 09:07:36 +02:00
lcaggio
eee06bd5dc Remove device_policy, it requires BeyondCorp Enterprise Premium. we will implement it in future iterations. (#215) 2021-03-29 12:17:11 +02:00
lcaggio
de5a9d747a Add VPC-SC support for Regions, device policy and access policy dependency (#210)
* Add VPC-SC support for Regions, device policy and access policy dependency.

* fix compute mig module test

* Fixes

* Fix example

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-03-18 13:04:37 +01:00
Julio Castillo
1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Ludovico Magnocavallo
dda715670c Minor vpc-sc module corrections (#167)
* Fix #158

* fix variable type
2020-11-16 18:04:12 +01:00
Lorenzo Caggioni
7cf3990d27 - Fixes based on PR comments
- Movig module under Security
 - Formatting TF files
2020-07-10 07:22:57 +02:00
Lorenzo Caggioni
39d2d90bcd Move VPC-SC to a separate module. 2020-07-07 10:23:26 +02:00