Commit Graph

65 Commits

Author SHA1 Message Date
Julio Castillo
77244e9bd1 Add explicit errors when VPC-SC perimeters reference undefined directional policies (#3133)
* Add explicit errors when VPC-SC perimeters reference undefined directional policies

* Fix try calls

* Update defaults
2025-06-04 20:50:33 +02:00
Ludovico Magnocavallo
e50b02d404 Add support for additive perimeter resources to vpc-sc module (#3093)
* add support for additive perimeter resources

* FAST stage variable
2025-05-19 11:05:05 +02:00
Julio Castillo
7ceb814986 VPC SC module refactor (#3062)
* Remove bridge perimeters

* Update FAST stages

* Allow project ids in perimeter definitions

* Preserve order order for ingress/egress policies

* Use CAI

* Use CAI

* Fix tests
2025-05-09 14:37:03 +02:00
Ludo
5612040209 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-07 08:47:00 +02:00
Ludovico Magnocavallo
c8a9cd3edb Update VPC-SC README (#3006)
Fixes #2983
2025-04-04 09:06:26 +02:00
Julio Castillo
f656a37c40 Merge branch 'master' into fast-dev 2025-04-02 14:07:33 +02:00
Julio Castillo
0c334a6128 Add roles support to VPC-SC (#3000) 2025-04-02 09:39:04 +02:00
Julio Castillo
3ed801c464 Use VPC-SC perimeter factory in FAST 1-vpcsc stage (#2928)
* Use VPC-SC perimeter factory in FAST 1-vpcsc stage

* Add boilerplate

* Fix linter and schema checks

* Fix tests

* Fix schemas
2025-02-24 12:29:51 +00:00
karpok78
07a70eedb5 Add perimeter factory to modules/vpc-sc (#2919)
* Add perimeter factory

Proposal to allow the management of perimeters in yaml factory.
Project discovery is extended to multiple perimeters with query filtering.

Doc clean uo

* default perimeters desc to null

* linting

* Revert changes to FAST

* Remove test and schema from FAST

* Align vars and perimeter factory

* Interpolate resource_sets in more places

* Silence linter

* Update README.md

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2025-02-22 07:49:05 +01:00
Julio Castillo
21253a1768 Add title to VPC-SC directional policies (#2909)
* Add title to VPC-SC directional policies

* Ignore versions.tf in diffs

* Update versions.tf

* Fail if a perimeter uses unknown directional policies
2025-02-20 08:48:08 +00:00
Julio Castillo
fd9f92324b Update VPC-SC module and FAST stage (#2887)
* Update VPC-SC module to support vpc subnets

* Update FAST VPC-SC variables

* Fix tests
2025-02-13 18:04:09 +00:00
Joel Voss
6c19e96424 Fix "inconsistent conditional result types" error in modules/vpc-sc (#2676)
* Fix inconsistent conditional result types error in modules/vpc-sc

* Revert example based tests of the vpc-sc module

* Add additional example based test to the vpc-sc module readme

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-11-12 09:27:50 +00:00
Wiktor Niesiobędzki
70bd037629 Add IAM member prefix validation to variables.tf 2024-08-09 12:08:22 +02:00
Julio Castillo
9386764f66 Introduce YAML schema validation for YAML examples (#2488)
* Add schema key to yaml examples

* Update testing requirements
2024-08-08 23:09:22 +02:00
Ludovico Magnocavallo
db7cb937d1 VPC-SC factory JSON Schemas (#2477) 2024-08-07 12:09:37 +00:00
Ludovico Magnocavallo
345716e576 VPC-SC as separate FAST stage 1 (#2460)
* initial commit

* README

* boilerplate

* tflint

* tfdoc

* fix security stage tests

* vpc-sc stage tests

* tflint

* fix resman stage test inventories

* security README

* stage-level README

* Update README.md

* flexible perimeter variable

* remove diagram

* change default to dry run

* default to dry run
2024-08-02 18:04:36 +02:00
Ludovico Magnocavallo
27a055a9cb fix factory ingress policies (#2251) 2024-05-01 18:50:30 +02:00
Ludovico Magnocavallo
91615e0140 VPC-SC module factories (#2081)
* factory untested

* factory example test
2024-02-17 08:02:16 +01:00
Ludovico Magnocavallo
c7bef582e8 add support for IAM to vpc sc module (#1846) 2023-11-08 11:27:44 +01:00
LudovicEmo
c558d9b753 Vpc sc allow null for identity type (#1632)
* vpc-sc : allow null for identity_type

* cloudsql-instance : fmt

* vpc-sc: tfdoc

* modules/vpc-sc: update the test result for the identity_type field

* cloudsql-instance: remove empty line
2023-08-29 04:28:57 +02:00
LudovicEmo
32b347b104 modules/vpc-sc: add support for method_selectors/permission (#1439)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-06-25 06:45:37 +00:00
Ludovico Magnocavallo
884cb8b4bf Ensure all modules have an id output (#1410)
* net-vpc

* a-d

* complete modules

* fix error
2023-06-02 16:07:22 +02:00
Julio Castillo
f5e1717319 Migrate VPC-SC tests to examples 2023-04-17 09:17:54 +02:00
Julio Diez
0ca0b2e99b Fix variable name 2023-02-20 14:37:33 +01:00
lcaggio
00f781bd9f First commit 2023-01-17 13:39:28 +01:00
Julio Castillo
e700a27079 Enforce terraform fmt in examples 2022-12-18 14:00:19 +01:00
Ludovico Magnocavallo
67fca1036c Fix status ingress/egress policies in vpc-sc module (#1036)
* fix status ingress/egress policies

* fix default status/spec value
2022-12-05 09:00:00 +01:00
Ludovico Magnocavallo
a9c47681d8 Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Julio Castillo
a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
Ludovico Magnocavallo
086e4a2b2c add egress / ingress policy example (#768) 2022-08-04 17:00:14 +02:00
Ludovico Magnocavallo
91d7501099 Update README.md 2022-02-13 16:14:24 +01:00
Julio Castillo
cf423998f0 Align tftest syntax with tdoc
This commit changes the token separator for inline examples from a
semicolon to a space
2022-01-28 21:34:15 +01:00
lcaggio
8203ebdc64 VPC-SC: Fix README (#462)
* fix VPC-SC README.

* fix VPC-SC README.

* Update README.md

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-28 08:44:07 +01:00
Julio Castillo
31f625f149 Link vars and outputs from README 2022-01-22 14:15:16 +01:00
Ludovico Magnocavallo
79b7a6f40f disable device policy support in vpc-sc module 2022-01-04 16:22:15 +01:00
Ludovico Magnocavallo
91b40dc9c3 Interpolate access levels by key in vpc sc module (#414)
* interpolate access levels by key

* fix access level reference

* fix num resources in last README test
2022-01-04 13:02:38 +01:00
Ludovico Magnocavallo
347a4c6b69 remove lifecycle block from vpc sc perimeters (#412) 2022-01-03 15:27:00 +01:00
Ludovico Magnocavallo
b9f00bf259 fix cases where bridge perimeter status resources are null (#408) 2021-12-31 16:47:39 +01:00
Ludovico Magnocavallo
ea2f92cfff Update README.md 2021-12-31 15:14:33 +01:00
Ludovico Magnocavallo
2c7dab3bb2 New vpc-sc module implementation (#406)
* first implementation

* minimal output

* split service perimeters in regular and bridge

* tests and fixes

* new vpc-sc implementation

* remove providers file used for testing

* remove provider used during development
2021-12-31 13:29:22 +01:00
Ludovico Magnocavallo
2bc5f7d33c update tfdoc (#404) 2021-12-30 10:56:19 +01:00
Ludovico Magnocavallo
1ac3fe4460 New tfdoc version (#396)
* update tfdoc

* rewrite check docs, refactor tfdoc replace, regenerate modules READMEs

* remove dead code from check docs

* do not fail on missing variable files in check docs

* fix typos
2021-12-21 08:51:51 +01:00
lcaggio
38b8ea1757 Fix VPC-SC module, add example (#387) 2021-12-13 11:26:09 +01:00
Daniel Marzini
a220f2ab1f Update README.md 2021-09-14 15:12:06 +02:00
Daniel Marzini
10698e1d5c Update README.md 2021-09-14 14:57:20 +02:00
Daniel Marzini
6b24acbbd4 Update README.md 2021-09-14 10:21:36 +02:00
Daniel Marzini
8ed8d917a9 Update README.md 2021-09-03 18:54:53 +02:00
Daniel Marzini
996b8d2aa6 Update README.md 2021-09-03 18:53:30 +02:00
Daniel Marzini
ae2dddc192 Update README.md 2021-09-03 18:41:51 +02:00
Daniel Marzini
d5fde0e6e1 adjusting code to reflect pr changes request 2021-09-03 18:35:06 +02:00