Commit Graph

976 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki
7fe999562a codespell fixes 2025-10-26 11:56:41 +01:00
Wiktor Niesiobędzki
b27b8f8291 yamllint fast 2025-10-24 13:11:17 +02:00
Ludovico Magnocavallo
4113da128b Support resource-level factories config in project factory module and FAST stages (#3440)
* support resource-level factories in project factory module

* align folder and project schemas across modules and fast

* schema docs
2025-10-18 10:41:19 +00:00
Zsolt Molnar
30ea120dcf Bump Terraform version used in Github CICD templates to match fabric/modules requirements introduced at #3332 (#3439) 2025-10-18 08:00:14 +00:00
Ludovico Magnocavallo
a3b86b9426 Revert "Added audience to workflow local in 0-org-setup (#3418)" (#3432)
This reverts commit 4dfcb9cf51.
2025-10-17 12:38:08 +00:00
kovagoadam
4dfcb9cf51 Added audience to workflow local in 0-org-setup (#3418)
* Added missing audiences to fast_0_org_setup

* Run terraform fmt

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 08:13:28 +00:00
norbert-loderer
1839a08581 Add missing project number variable to outputs in 0-org-setup stage (#3427)
* Add missing project number variable to outputs in 0-org-setup stage

* Fixed typo

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 06:51:04 +00:00
Julio Castillo
9b9ad76ced Update gke-hub module to use new Policy Controller API (#3332)
* Update gke-hub to use new Policy Controller API

Fixes #3287

* Use same config format for servicemesh

* remove useless trys

* use ternaries as in the rest of the repo

* Update docs and fix tests

* Update variables

* Bump tofu version

* Bump terraform version 1.12
2025-10-13 09:47:39 +02:00
Ludovico Magnocavallo
6a79d0f74c Remove unavailable service from VPC-SC stage services list (#3400) 2025-10-10 05:58:08 +00:00
Victor Voisin
452060961a fix: expose missing audiences variable for gitlab workflow file generation (#3385)
In 0-org-setup, when using gitlab cicd, workflow-gitlab.yaml expects an
audiences variable.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-07 11:37:20 +00:00
Ludovico Magnocavallo
51c290c9d7 add support for universe to fast project factory stage (#3384) 2025-10-06 07:00:00 +00:00
Ludovico Magnocavallo
e9c3341323 support universe in fast security stage (#3383) 2025-10-06 07:24:50 +02:00
Ludovico Magnocavallo
b9b62eff89 Delete fast/stages/2-security/data/folders/main.tf 2025-10-05 16:15:47 +02:00
Ludovico Magnocavallo
ae06160d58 Fix typo in fast stage 0 provider template (#3381) 2025-10-05 11:35:49 +00:00
Ludovico Magnocavallo
7aa4e453d7 allow FAST stage 0 provider template to work with universe (#3379) 2025-10-05 11:17:31 +02:00
Ludovico Magnocavallo
4db29a48eb allow forcing jit service agents generation for universe (#3378) 2025-10-05 10:17:57 +02:00
kovagoadam
505ee02fef Add support for billing export in 0-org-setup (#3347)
* Add support for billing export in 0-org-setup

* Merge branch 'master' into add-billing-export-support

* Refactored billing export with adding support for bigquery_datasets in project_factory

* Renamed bigquery_dataset to datasets

* Fixed defaults.schema.md

* Fixed default.schema.md again

* Cleanup md's

* Fixed boilerplate

* Fixed JSON schema

* reword README, rename project file

* Moved dataset_id to the key of the map

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-01 10:12:45 +00:00
norbert-loderer
e205b11954 Add missing billing viewer role for org-ro service account in org-setup stage. (#3364) 2025-10-01 11:53:41 +02:00
kovagoadam
c334e3c60f Fixed small typo in project-factory module with log-buckets (#3357)
* Fixed small typo in project-factory module

* Add log_analytics and retention to log_buckets
2025-09-27 07:21:48 +00:00
Wiktor Niesiobędzki
3e0f53fb38 Fix linting / remove unnecessary screenshot 2025-09-26 15:50:58 +02:00
Julio Castillo
acae030649 Update README.md 2025-09-24 14:11:41 +03:00
Ludovico Magnocavallo
90ee0ccf12 Expose project factory stage defaults via a YAML file (#3354)
* initial implementation

* README

* tfdoc
2025-09-24 09:59:11 +00:00
norbert-loderer
2492494c68 Fixing typos and adding missing roles for Terraform and CI/CD service… (#3351)
* Fixing typos and adding missing roles for Terraform and CI/CD service accounts in 0-org-setup stage.

* Updated organization schema to allow defining custom roles under iam_by_principals and updated organization.schema.md accordingly.
2025-09-23 19:20:21 +00:00
Ludovico Magnocavallo
d0e2a54948 rationalize prefix handling for project factory automation resources (#3345) 2025-09-21 21:07:28 +02:00
Ludovico Magnocavallo
c0aa691052 v45.0.0 2025-09-20 12:07:40 +00:00
Ludovico Magnocavallo
177b70762f Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-20 12:00:50 +00:00
Ludovico Magnocavallo
4801b65291 v44.2.0 2025-09-20 11:57:31 +00:00
kovagoadam
c9902668fb Add default values for environments in stage 2, moved to variables.tf (#3344) 2025-09-20 11:51:44 +00:00
Wiktor Niesiobędzki
56f4513e0d Remove unused bootstrap_user variable 2025-09-19 12:11:15 +02:00
Wiktor Niesiobędzki
3a3dd1de09 remove duplicate / misplaced policy 2025-09-19 11:43:44 +02:00
norbert-loderer
d667745c7b Added default value for environments variable and moved it to variables.tf from variables-fast.tf (#3337)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-09-19 08:38:59 +02:00
norbert-loderer
2aae7b3ab6 Add conditional grants on security to pf service account in FAST stage 0 (#3338) 2025-09-19 08:15:05 +02:00
fenyvesi-levi
4102e53588 Added 2 IAM roles for pf SA and updated test (#3333)
* Added 2 IAM roles for pf SA and updated test

* Updated role grant with condition
2025-09-17 13:37:07 +00:00
Ludovico Magnocavallo
c6cdc9c98c Incremental improvements to project factory and underlying modules (#3325)
* incremental improvements to project factory and underlying modules

* fix org policies diff test
2025-09-16 23:21:18 +02:00
fenyvesi-levi
589a2b088a dev-platform.yaml secondary_ip_ranges syntax fix (#3326) 2025-09-16 13:57:40 +00:00
Ludovico Magnocavallo
9b3291c395 Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-16 10:42:32 +00:00
norbert-loderer
659472d487 Added read-only providers to 0-org-setup stage, and fixed CI/CD parameters in the generated workflow file (WIF_PROVIDER, provider files etc.) (#3322) 2025-09-16 08:02:02 +00:00
Ludovico Magnocavallo
768e6c6d16 Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-15 08:17:54 +00:00
Julio Castillo
ea445fa7e4 Add support for VPC internal ranges to modules/net-vpc (#3318)
* Add support for VPC internal ranges to modules/net-vpc

* Fix linting

* Fix variable order

* Fix README

* Sort outputs.

* Fix validation for terraform < 1.13
2025-09-11 17:42:54 +00:00
Ludovico Magnocavallo
78966f66c3 Add support for project templates to project factory module (#3317)
* add support for project templates to project factory module

* align project factory features in FAST org setup stage
2025-09-11 09:56:01 +02:00
Ludovico Magnocavallo
37695cca98 Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-10 11:51:46 +00:00
Ludovico Magnocavallo
63a22cd9a2 Refactor secret manager module (#3315)
* wip

* wip

* wip

* wip

* tested, missing versions

* working

* fix secops stage

* readme

* tests

* tflint
2025-09-10 11:47:35 +00:00
Ludovico Magnocavallo
c93b628979 New security stage leveraging project factory and contexts (#3311)
* wip

* wip

* fix contexts

* cas factory

* add support for context to cas module

* cas module contexts and tests

* cas factory

* rename legacy security stage, add test for new stage

* readmes

* doc

* tfdoc

* doc, outputs

* update inventory
2025-09-08 18:59:16 +02:00
Ludovico Magnocavallo
68955ff809 Improve context support in vpc-sc module and stage / new FAST stages small fixes (#3305)
* improve context support in vpc-sc module and stage

* fix stage env files

* fix stage env files

* fix FAST variables comments

* tfdoc

* fix locations order

* fix tests
2025-09-07 14:59:46 +02:00
Ludovico Magnocavallo
894a0f5975 prep v44.1.0 2025-09-06 09:15:41 +00:00
Ludovico Magnocavallo
d6f0a168f6 pf outputs (#3301) 2025-09-05 22:21:27 +02:00
Ludovico Magnocavallo
58643a8ab4 merge fast-dev and prepare v44.0.0 2025-09-05 09:18:21 +00:00
Ludovico Magnocavallo
711436cb71 Final changes to new org setup stage (#3300)
* add provider id field to wif

* readme

* readme

* tfdoc
2025-09-05 09:39:22 +02:00
Ludovico Magnocavallo
756c02c21a Rename new botstrap stage to org-setup (#3299)
* readme changes

* rename stage 0

* rename stage 0

* complete rename of stage 0

* tfdoc

* tfdoc

* tfdoc
2025-09-04 13:34:16 +02:00
Ludovico Magnocavallo
bc6950e205 Rename FAST stages preparing for eventual deprecation (#3298)
* renames

* links

* readme

* docs

* update pf modules tests for renames

* condition_vars context in modules

* data platform dataset

* fix links in stage 3 docs

* schema changes

* schema docs

* tfdoc

* update duplicates check

* fast legacy tests

* legacy schema

* fix tests
2025-09-04 08:24:11 +02:00