kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,494 Commits 1 Branch 1 Tag
80988c0bbf4b96a7ecde45a7c6b30767b54b6c2a
Commit Graph

1352 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
80988c0bbf Fix issues with FAST CI/CD support (#3454) 
* wip, broken

* wip

* streamline locals

* tfdoc

* update yaml files

* refactor
 2025-10-23 16:40:06 +02:00
Simone Ruffilli
393e99194a 2-networking - NCC Dataset (#3457) 
Dataset for 2-networking which implements a simple NCC full mesh topology with 2 spokes.
 2025-10-23 12:59:46 +00:00
Simone Ruffilli
23f8326665 Factory based FAST Networking stage (#3435) 
New factory based networking stage, shipping with a single dataset (peering) to keep the PR size somewhat manageable.
 2025-10-23 14:17:44 +02:00
Ludovico Magnocavallo
b0bc896a68 Allow null project id in service account module when reusing service account (#3452) 
* allow null project id for service account reuse

* fix pf
 2025-10-22 16:51:06 +00:00
Simone Ruffilli
de8ebefe17 Start the deprecation process of the old networking stages (#3451) 
This PR renames `2-networking-foo` stages to `2-networking-legacy-foo` - including references of stages in docs and tests.

**Breaking Changes**

```upgrade-note
`fast/stages/2-networking-a-simple`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-b-nva`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-c-separate-envs`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
`modules/net-vpc-factory`:  The module has been deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
```
 2025-10-22 16:31:14 +02:00
Ludovico Magnocavallo
7ea9612b07 Allow skipping data source in service account module (#3450) 
* test implementation

* wip

* service account reuse

* fix fast stage test

* revert cicd changes

* remove unused dep

* add comment on extra condition
 2025-10-22 13:04:00 +02:00
Ludovico Magnocavallo
7b272da6b6 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-21 18:38:50 +00:00
Julio Castillo
772d064e1c Skip IAM grants for service agents that are not created on API activation (#3448) 
* Skip IAM grants for service agents that are not created on API activation

* Fix tests
 2025-10-21 14:31:32 +00:00
Julio Castillo
b8aa4b5578 Merge branch 'master' into fast-dev 2025-10-21 08:14:42 +02:00
Julio Castillo
792003ff97 Remove Netsec Authz Service Agent (#3445) 
* Remove Netsec Authz Service Agent

* fix tests
 2025-10-20 19:36:03 +00:00
Ludovico Magnocavallo
32ca4498ad Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-20 17:56:31 +00:00
Luca Prete
64738a1808 Add Agent Engine module. (#3429) 2025-10-20 17:02:39 +02:00
Ludovico Magnocavallo
ec09414823 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-20 13:58:44 +00:00
Julio Castillo
48f6b4cd49 Add PAM support (#3438) 
* PAM first pass

* Add factory and extend to organization

* Extend to project, add examples

* Add additionalProperties to all objects

* Fix boilerplate

* Expose pam_entitlements to project-factory

* Fix readme

* Move entitlements to second folder/project pass

* extend tests

* Fix readme

* Remove timeouts from inventories
 2025-10-20 12:50:37 +00:00
Ludovico Magnocavallo
2753196ca2 fix merge 2025-10-18 14:54:53 +00:00
Ludovico Magnocavallo
5e05044306 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
4113da128b Support resource-level factories config in project factory module and FAST stages (#3440) 
* support resource-level factories in project factory module

* align folder and project schemas across modules and fast

* schema docs
 2025-10-18 10:41:19 +00:00
Julio Castillo
1566711c3a Add service agent outputs to folder and organization (#3436) 
* Add service agent outputs to folder and organization

* Fix tests
 2025-10-17 17:23:08 +02:00
Ludovico Magnocavallo
0eb90e437f Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 17:28:11 +00:00
lcaggio
9bbd453024 bigquery-connection module (#3423) 
Implement bq-connection module
 2025-10-16 15:15:36 +00:00
Simone Ruffilli
37455277d4 Adds context support to peering zones (#3426) 2025-10-16 15:58:27 +02:00
Taneli Leppä
7c6211a494 bigquery-dataset: fix issues (#3425) 
* bigquery-dataset: add missing return_type to routines, fix view schema
encode, add dependency between routines and views

* Fix test.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2025-10-16 13:12:23 +00:00
Ludovico Magnocavallo
e9dd48f5e7 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 09:03:15 +00:00
Ludovico Magnocavallo
8e8be1eda5 Support CIDR range sets in firewall modules context (#3424) 2025-10-16 09:01:05 +00:00
Ludovico Magnocavallo
01001c9a64 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 07:09:27 +00:00
Ludovico Magnocavallo
45d4674ae8 net-vpn-ha (#3420) 2025-10-16 09:08:17 +02:00
Ludovico Magnocavallo
cc947777ce Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-16 05:57:02 +00:00
Ludovico Magnocavallo
7c920d7d35 Add support for context to net-lb-int net-vpc-firewall and net-vpc module (#3419) 
* net-lb-int

* net-vpc-firewall

* net-vpc

* net-vpc
 2025-10-16 05:54:14 +00:00
Ludovico Magnocavallo
ecdc248f3f Add support for context to net-cloudnat, net-firewall-policy modules (#3414) 
* net-cloudnat

* net firewall policy
 2025-10-15 13:59:51 +02:00
Julio Castillo
9c61b1c30c Make SSM gitignores a list (#3413) 
Fixes #3395
 2025-10-15 11:35:44 +02:00
Ludovico Magnocavallo
6e02fd1136 Add support for context to DNS modules (#3412) 
* dns-response-policy

* add context to dns modules
 2025-10-14 16:07:29 +00:00
Wiktor Niesiobędzki
9f2beb1ee6 Use fixture custom role for modules/project tests 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
849e856437 Use email from variables in tests 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
b10d31ef98 Add unique suffix to custom role 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
ad9d52a7da Use context prefixes for auto service grants 2025-10-13 18:58:52 +02:00
Ludovico Magnocavallo
489b21f8cc fix ngfw add-on instructions (#3409) 2025-10-13 16:52:54 +00:00
Luca Prete
142ad6488e NGFW Enterprise custom roles (#3408) 2025-10-13 16:29:27 +00:00
Ludovico Magnocavallo
6045cf6ae2 Add support for contexts to compute-vm module (#3406) 2025-10-13 16:54:13 +02:00
Ludovico Magnocavallo
e9b121153a Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-13 09:45:29 +00:00
Julio Castillo
9b9ad76ced Update gke-hub module to use new Policy Controller API (#3332) 
* Update gke-hub to use new Policy Controller API

Fixes #3287

* Use same config format for servicemesh

* remove useless trys

* use ternaries as in the rest of the repo

* Update docs and fix tests

* Update variables

* Bump tofu version

* Bump terraform version 1.12
 2025-10-13 09:47:39 +02:00
Wiktor Niesiobędzki
802a25279a Test service_iam_grants along service_agent_iam 2025-10-12 15:02:12 +02:00
Wiktor Niesiobędzki
12c0c04e1c Add tests for service agents iam_emails 2025-10-12 15:02:12 +02:00
Ludovico Magnocavallo
c996285b26 Support context and add configurations factory to workstation cluster module, add FAST project template (#3401) 
* add context to workstation-cluster module

* context test

* workstations project template
 2025-10-10 18:59:37 +02:00
Ludovico Magnocavallo
9cf67755de Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-10 06:32:03 +00:00
Ludovico Magnocavallo
6a79d0f74c Remove unavailable service from VPC-SC stage services list (#3400) 2025-10-10 05:58:08 +00:00
Ludovico Magnocavallo
d3c80ce18b Rationalize location defaults across project factory module and FAST stages (#3392) 
* group default/overrides locations in a single object in pf module

* org setup

* project factory stage

* fix defaults

* pf defaults

* security stage defaults
 2025-10-08 07:12:15 +00:00
Ludovico Magnocavallo
7b70177459 add context to bigquery module (#3388) 2025-10-07 07:57:42 +00:00
Nishant Raghav
81c7213f92 feat(bigquery-dataset): add optional schema support for views (#3377) 
* feat: add optional schema to BigQuery views for descriptions

* feat: add schema support for view definitions in BigQuery dataset module

* fix: encode schema as JSON for BigQuery views

* feat: add population schema and update query for population view in BigQuery dataset

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2025-10-06 05:40:39 +00:00
Ludovico Magnocavallo
7aa4e453d7 allow FAST stage 0 provider template to work with universe (#3379) 2025-10-05 11:17:31 +02:00
Vannick Trinquier
cfe2e21ce7 feat: add support for SCC Custom Security Health Analytics module in … (#3372) 
* feat: add support for SCC Custom Security Health Analytics module in organization, folder and project modules

* fix: update description and docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2025-10-03 13:47:50 +02:00