Vannick Trinquier
2af44b0651
Add support for security command center mute rules in module organization, folder and project ( #3694 )
2026-02-04 08:31:05 +07:00
Julio Castillo
3e277d808a
Fix project-factory observability factory ( #3695 )
2026-02-02 16:02:00 +00:00
Ludovico Magnocavallo
cdc5e7df45
prep v52.0.0
2026-01-30 16:00:47 +00:00
Ludovico Magnocavallo
1f8c2b36da
prep v51.1.0
2026-01-30 15:58:47 +00:00
Luca Prete
3877a40119
Add PSC-I support to Agent Engine module ( #3686 )
2026-01-30 07:24:06 +03:00
Julio Castillo
8dde9fe773
Fix domains of default service accounts when universe is present ( #3670 )
2026-01-23 14:11:17 +00:00
Julio Castillo
d46b39b717
Add missing context interpolations ( #3659 )
2026-01-20 20:21:56 +01:00
Julio Castillo
d9e1b924a1
Add asset_feeds to resman modules ( #3658 )
...
* Add asset_feeds to resman modules
* Add examples and update readmes
* Extend pubsub_topic context to project and folder modules
* Use pubsub_topic context for pubsub_destination
* Update readmes and add project-factory asset_feed example
* Update context tests
* Update schemas
2026-01-20 14:37:35 +00:00
Julio Castillo
cff8a25c59
Introduce iam_by_principals_conditional ( #3649 )
...
* Introduce iam_by_principals_conditional
* Add iam_by_principals_conditional to project factory
* Update IAM ADR
* Update project factory readme
* Sync FAST schemas
* Update organization schema
* Add resman tests for iam_by_principals_conditional
* Update PF project-defaults.tf
* Update copyright
2026-01-14 11:16:07 +00:00
Eric Zhao
c1248d328a
Allow any VPC for (secure) network_tags ( #3634 )
...
* feat: allow all for VPC networks
* feat: add examples
* feat: add header
* feat: module test
* fix: update network testing data to pass validation
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-12 09:34:18 +00:00
Ludovico Magnocavallo
f8f856c9ac
reinstate v51.0.0
2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
1b4930513f
prep v51.1.1
2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
6ab071da8d
prep v51.1.0
2026-01-08 12:12:43 +00:00
Ludovico Magnocavallo
ef027ad5b5
prep v51.0.0
2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d
prep v50.1.0
2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
a554971563
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-22 06:36:05 +00:00
Luca Prete
c193fb37ee
Upgrade Terraform provider to 7.13 ( #3600 )
2025-12-18 11:29:48 +01:00
Vannick Trinquier
cc24046be8
Add CMEK support to FAST and controls for CMEK encryption ( #3556 )
2025-12-14 12:14:08 +07:00
Ludovico Magnocavallo
ab0f55216a
Add support for descriptive name to projects ( #3591 )
...
* add support for descriptive name to projects
* boilerplate
* fmt
2025-12-12 09:06:47 +01:00
Ludovico Magnocavallo
216a12eae5
Fix CI/CD dataset files and provider workflow variable in FAST stage 0 ( #3587 )
...
* fix CI/CD dataset files and provider workflow variable
* IAM principals use pool, sts uses provider
* tfdoc
* fix variable description
2025-12-11 15:05:39 +01:00
Ludovico Magnocavallo
d21e9c51e8
prep v50.0.0
2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
5e606d0fff
prep v49.3.0
2025-12-10 17:51:43 +00:00
Ludovico Magnocavallo
ac68262733
prep v49.2.0
2025-12-08 07:58:58 +00:00
Michael Woodham
bc5732357c
Updates to GKE modules to support Secret Sync ( #3562 )
...
* Updates to add secret_sync to GKE module in CFF
* updated READMEs against the python tfdoc command
* updated version for secret_sync to reflect 7.12.0
* update provider versions to 7.12.0
* Updated READMEs which got clobbered by merge with main
* Fixed test errors in secret-manager module
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-12-05 15:30:49 +00:00
Vannick Trinquier
171a2c6690
Add support for CMEK in logging bucket, big query dataset and gke notifications ( #3558 )
2025-12-04 10:01:32 +00:00
Ludovico Magnocavallo
a8384b85d1
Auto-grant editor role for cloudservices in project module, expand project ids context in project factory module ( #3552 )
...
* service agent editor role
* add internal project ids to context replacement for projects in project factory module
2025-11-27 12:45:52 +00:00
Ludovico Magnocavallo
bd4f2e317a
prep v49.1.0
2025-11-24 08:37:06 +00:00
Ludovico Magnocavallo
10e29e1eeb
Context improvements: "all service accounts" principal in folder, org, project modules; custom roles in factory condition vars for FAST stage 0 ( #3548 )
...
* iam principalsets
* fix folder
* add custom roles to factory condition vars in stage 0
* project shared vpc IAM
2025-11-24 08:28:41 +00:00
Wiktor Niesiobędzki
5ee09daddc
Update service-agents.yaml
2025-11-24 09:06:24 +01:00
Vannick Trinquier
b686a6f730
Fix org policy service to be enabled before organization policies applied ( #3547 )
...
* Fix org policy service to be enabled before organization policies applied
2025-11-21 14:22:17 +07:00
Julio Castillo
3959bb3974
Fix aprover -> approver ( #3540 )
...
* Fix aprover -> approver
* Once again...
2025-11-19 08:50:23 +01:00
Ludovico Magnocavallo
3392953188
prep v49.0.0
2025-11-18 13:51:02 +00:00
Ludovico Magnocavallo
da5726324d
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-18 13:49:13 +00:00
Ludovico Magnocavallo
83ebdbbd2d
prep v48.1.0
2025-11-18 13:47:16 +00:00
Ludovico Magnocavallo
8c29512890
Leverage project-level workload identity in FAST CI/CD ( #3535 )
...
* Leverage project-level WIF in FAST CI/CD
* add new context namespace, improve outputs, fix tests and inventories
* make YAML linter happy
* README
2025-11-18 10:49:44 +00:00
Ludovico Magnocavallo
897c6ef8c3
Add support for Workload Identity to project module and project factory ( #3531 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
* wip
* project factory
* pf outputs
* iam templates will be added where ci/cd configs are managed
* fix merge conflicts
2025-11-17 07:31:21 +00:00
Ludovico Magnocavallo
5270586a8e
fix schema doc tool, fix schema errors, regenerate schema docs ( #3524 )
2025-11-12 08:50:52 +01:00
Ludovico Magnocavallo
602e1731c9
Replace leftover schema links with actual files ( #3522 )
...
* replace schema links with schemas
* vpc-sc stage
2025-11-11 11:57:51 +01:00
Ludovico Magnocavallo
3289a6ff27
prep v48.0.0
2025-11-11 09:13:44 +00:00
Ludovico Magnocavallo
76eec666ea
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-11 09:10:56 +00:00
Ludovico Magnocavallo
0d0e086cfc
prep v47.1.0
2025-11-11 08:59:19 +00:00
Ludovico Magnocavallo
fc7aa71ada
Add support for KMS key creation to project factory ( #3518 )
...
* initial implementation
* context
* tfdoc
* add support for autokey to projects
* fix typo
2025-11-11 07:23:50 +01:00
Ludovico Magnocavallo
ba77c6170c
Allow configuring data access logs from org/folder/project schemas ( #3516 )
...
* modules and FAST support
* module tests
* fast stage 0 dataset
* tfdoc
2025-11-10 10:19:21 +00:00
Ludovico Magnocavallo
5946433737
prep v47.0.0
2025-11-05 08:28:44 +00:00
Ludovico Magnocavallo
fc538a15cc
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-05 08:26:53 +00:00
Ludovico Magnocavallo
adec737e2a
prep v46.1.0
2025-11-05 08:24:06 +00:00
Ludovico Magnocavallo
a4ff84838a
Merge remote-tracking branch 'origin/master' into fast-dev
2025-11-05 06:53:32 +00:00
Wiktor Niesiobędzki
d5bc59a238
Fix E2E tests.
...
* Disable tests for VPC connector and Cloud Functions, CFs are not
supporrted in the default region
* fix permissions to secrets for Cloud Run
* add permissions admin permissions to any SA within project to
`var.bucket`
* add permissions to access the secret to any SA within project to
secrets created by fixture
* disable custom roles in E2E tests, as `var.organization_id` is not the
same org, within which projects are created in E2E
2025-11-04 10:23:55 +01:00
lcaggio
64632eb957
BigQuery reservation ( #3441 )
...
* First Commit.
* Improve
* Fix README
* Fix lint
* fix
* Fix Tests.
* Improve output
* fix yaml lint
* Fix
* Fic test
* Fix
* Fix output
2025-11-03 11:36:42 +01:00
