Commit Graph

5587 Commits

Author SHA1 Message Date
Simone Ruffilli
7f8a02a405 Add support for google provider 6.x (#2536)
* Add support for google provider 6.x

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-05 10:35:58 +00:00
Julio Castillo
21f85a837c Update changelog 2024-09-05 12:19:59 +02:00
Julio Castillo
80085a468e Update changelog 2024-09-05 12:00:56 +02:00
Julio Castillo
ba3e1be416 Bump provider to 5.43.1 ahead of next release (#2557) 2024-09-04 19:58:07 +02:00
oluakingcp
8a56836078 Updated the auto pilot gke security posture configuration (#2556)
* updates the auto-pilot cluster configuration for security posture vulnerability mode

* updates the auto-pilot cluster configuration for security posture vulnerability mode

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:53:07 +02:00
oluakingcp
0e2127979f included the security_posture configuration (#2553)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:29:18 +02:00
Wiktor Niesiobędzki
44a4268afc Fix E2E tests 2024-09-04 12:16:50 +02:00
Wiktor Niesiobędzki
e1c1ed3a23 Add IAM dependencies to outputs 2024-09-04 12:16:50 +02:00
Wiktor Niesiobędzki
51ef390d04 Upload hidden files 2024-09-03 17:18:21 +02:00
Ludovico Magnocavallo
e4413dbbd1 add documentation instructions for corner cases in github and bootstrap (#2545) 2024-08-30 14:04:43 +02:00
Ludo
3191a041e3 tfdoc 2024-08-30 10:43:04 +02:00
Ludo
e6bd1c62b8 update changelog 2024-08-30 10:42:34 +02:00
Ludo
e8c80babd8 update changelog 2024-08-30 10:09:24 +02:00
Ludovico Magnocavallo
eb89c62b5f prepare v34.0.0 release (#2543) 2024-08-30 10:06:33 +02:00
Ludovico Magnocavallo
579c7296db moved blocks and fixes for FAST v33-v34 transition (#2541) 2024-08-30 07:44:27 +00:00
Julio Castillo
80343fa07b Use generic project name in HA VPN over IC blueprint (#2542) 2024-08-30 07:32:21 +00:00
Luca Prete
3ca0525039 [FAST] TLS inspection support for NGFW Enterprise (#2484) 2024-08-30 09:15:17 +02:00
jamesdalf
8ca3bc390f Module net-vpc fix for reserved ranges (#2538)
* fix the reserved ranges

* updated readme

* formatting

* fix example test

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-08-30 05:10:28 +00:00
okguru1
dc0a27b8c2 Exposing aws_v4_authentication configuration in global external alb (#2539)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes

* expose aws_v4_authentication configuration option

* terraform fmt

* update readme

* use dynamic block and optional for new variable
2024-08-29 13:45:50 +00:00
Simone Ruffilli
09de7d67ff Add send_secondary_ip_range_if_empty=true to google_compute_subnetwork (#2537) 2024-08-28 14:00:08 +00:00
luigi-bitonti
815abc0afa Added max_run_duration field to compute_vm modules (#2533)
Co-authored-by: Luigi Bitonti <luigi.bitonti@nttdata.com>
2024-08-28 09:36:45 +00:00
Ludovico Magnocavallo
cecce6b3a0 Allow customizable prefix in net-vpc module PSA configs (#2535)
* allow customizable prefix in net-vpc module PSA configs

* fix peered domain key
2024-08-28 09:24:13 +00:00
kejti23
864a41cb20 Added ownership_scope argument for billing account (#2528)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-08-28 09:08:14 +00:00
Julio Castillo
f57635d044 Add managed folders suports to gcs module (#2530)
* Add RPO, make versioning dynamic

* Add manaed folders

* Change autoclass and cors defaults to null

* Update README

* Add iam_by_principals

* Add managed folders var description

* Remove need for managed folders to end in /

* Add inventory to example

* Update readme

* Fix FAST tests
2024-08-28 07:30:52 +00:00
Julio Castillo
d4e727a482 Update stable provider too (#2531) 2024-08-28 08:49:46 +02:00
Julio Castillo
b3f272915e Update 20230816-iam-refactor.md 2024-08-27 18:34:05 +02:00
Julio Castillo
bab85c88ba Bump provider to last release of version 5 (#2525)
* Bump provider to last release of version 5

* Remove default-versions copy in test env setup

* Use file instead of symlink in tools/lookfile

* Remove default-version reference

* Removed unused code
2024-08-27 16:50:59 +02:00
Emile Hofsink
6cf0e5754b feat: Add security_policy to backend service configuration (#2523)
* feat: Add security_policy to backend service configuration

* chore: updated README from tfdoc.py
2024-08-27 14:19:14 +02:00
jamesdalf
cc5c04f62a net-vpc module add overlap CIDR subnet attribute (#2521)
* add subnet allow_subnet_cidr_routes_overlap

* allow_subnet_cidr_routes_overlap default null

* set default null for factory subnets

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-08-26 19:48:26 +00:00
Julio Castillo
58bee2a63d Add pubusb to default jitsi sas (#2520) 2024-08-26 19:55:32 +02:00
Artem Bogdantsev
1331e5655b project-module-cmek (#2518)
Yet another typo was found
2024-08-23 17:16:17 +00:00
Artem Bogdantsev
38c87debde project-cmek-smallfix (#2517)
A nasty typo which causes the module to crash
2024-08-23 18:39:21 +02:00
V0idC0de
548788dba1 fix: Make keys for local.projects consistent (#2516)
Projects configured in `folders_data_path` have their filename as key, whereas those from `projects_data_path` have their path, relative to `projects_data_path` as key.
This causes different behavior when defining `local.projects` and subsequently calling `module.projects`, unless `name` is specified.
2024-08-23 15:47:51 +00:00
Luca Prete
7f460c425b Add ca pool object to certification-authority-service module (#2515) 2024-08-23 09:43:01 +00:00
Simone Ruffilli
9eafd201dd Fixes gateway_security_policy in net-swp 2024-08-22 10:25:09 +02:00
Luca Prete
17667ce205 [FAST] Add permissions to nsec-r SA (#2511) 2024-08-21 20:26:32 +02:00
okguru1
fe55217887 Add support for disable default snat (#2508)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes
2024-08-21 09:43:27 +00:00
Simone Ruffilli
e82cc35f50 net-swp module cleanup (#2510)
* net-swp: add support for PSC SA
* Doc updates
2024-08-21 11:28:20 +02:00
Ludovico Magnocavallo
13595f1499 depend network security stage from fast features in resman (#2509) 2024-08-21 08:38:43 +02:00
Ludo
3a29fca940 update changelog 2024-08-21 07:45:06 +02:00
Ludovico Magnocavallo
ad5de9b7ea Refactor FAST project factory and supporting documentation (#2505)
* untested

* teams pattern

* rework doc

* README

* boierplate

* tflint

* Fix tflint for project factory

* Correct path to pf

* resman changes

* fix factory variable default

* fix links

* project factory module substitutions

* tflint

* stage test

* tfdoc

* rename schema, address review comments

* README typos and wording

* tfdoc

* review comments

* remove test from yaml

* revert output workflow changes

* fix sa reference errors

* tfdoc

* pf tag roles

* schema validation

* pf tag roles

* avoid null values in pf context

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-08-20 16:45:42 +00:00
arnodasilva
dff209f565 fix(modules/kms): use the google_tags_location_tag_binding Terraform resource to bind tags on KMS key rings (#2501) 2024-08-20 05:43:18 +00:00
Julio Castillo
0420dec32f Add deletion_policy to project module (#2502)
* Replace skip_delete with deletion_policy

* Fix blueprints

* Update apigee blueprint readme

* Remove skip_delete from test inventories
2024-08-16 18:33:39 +02:00
Cooper van Wijck
3cf8889967 Add name overrides for Internal and External Load Balancers (#2420)
* Add override_name optional variable

* Add override name optional variable

* Allow override for each forwarding rule

* Add optional override_name variable to forwarding_rules_config

* Remove duplicate (unused) variable override_name

* Add optional override_name variable for network peering

* Add optional override_name variable for network peering

* Formatting

* Update VPN tunnel interface name handling for override

* Update bgp peer handling for override

* Added renaming for both sides of peering

* Fix precondition

* Remove spurious folders

* Apply suggestions to peering module

* Use coalesce and name (instead of override_name)

* remove unneeded null

* Revert windows style slashes in readme

* Fix more null checks

* Fix unneeded null checks in net-lb-int

* Change override_name back to name in the rest of the locations, bgppeer, tunnel and interface names

* Fix linter

* Update READMEs

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: unknown <jack@JACK-PC.lfn.arpa>
Co-authored-by: jacklever-hub24 <jack.lever@hub24.com.au>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-08-16 08:45:29 +02:00
Ludovico Magnocavallo
d8a5c42b82 firewall policy module schema (#2499) 2024-08-11 10:12:03 +02:00
Ludo
cfd30745e4 update changelog 2024-08-10 19:00:57 +02:00
Ludovico Magnocavallo
7be042c706 dns rpz factory schema (#2498) 2024-08-10 17:19:28 +02:00
Ludovico Magnocavallo
3efb368b6c net vpc firewall factory schema (#2497) 2024-08-10 15:04:50 +02:00
Luca Prete
f15442d2f4 [fix] certificate authority service returning bad pool id (#2496) 2024-08-09 18:20:53 +02:00
Luca Prete
d415aaf84b [fix] Fixes errors in certificate-authority-service module (#2493) 2024-08-09 14:58:53 +00:00