Commit Graph

6925 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
66bbaeb854 fix observability in stage 0 (#3646) 2026-01-13 09:34:59 +00:00
Ludovico Magnocavallo
032db2f902 expose bigquery kms in project schema (#3645) 2026-01-13 10:30:19 +01:00
Ludovico Magnocavallo
88306fe99a Adding missing context replacement type to project factory README, add folder_ids to project condition vars (#3642)
* Adding missing context replacement type to project factory README

* add folder ids to project context condition vars
2026-01-12 14:41:07 +01:00
labbott-hub24
5e6f9a4332 Added locality_lb_policy support to the regional ext alb module (#3638)
Added http_cookie to the session_affinity validation
doc update

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-12 12:50:53 +01:00
Julio Castillo
6febcfe136 Add support for mirroring rules to modules/net-firewall-policy (#3636)
* Add support for mirroring rules to net-firewall-policy

* Split mirroring rules

* Add schema

* Sort variables
2026-01-12 11:10:43 +00:00
Eric Zhao
c1248d328a Allow any VPC for (secure) network_tags (#3634)
* feat: allow all for VPC networks

* feat: add examples

* feat: add header

* feat: module test

* fix: update network testing data to pass validation

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-12 09:34:18 +00:00
Vannick Trinquier
ca413b8aa8 Add support to VPC flow logs for PSC subnet (#3639) 2026-01-12 15:56:14 +07:00
Ludovico Magnocavallo
6a2a80786f Delete fast/stages/0-org-setup/WORKLOG.md 2026-01-09 13:07:46 +01:00
Eric Zhao
4ea87d5e6d feat: Implement target secure tags for hierarchical firewall policies (#3633)
* feat: Implement target secure tags for hierarchical firewall policies by integrating tag values and refining tag purpose data.

* docs: update variable
2026-01-09 09:11:04 +01:00
Julio Castillo
dd1be0fe14 Update README-GCD.md 2026-01-08 15:21:16 +01:00
Ludovico Magnocavallo
f8f856c9ac reinstate v51.0.0 2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
da29af53c9 Revert "Use additive resource for perimeter resources in vpc-sc module when i…" (#3631)
This reverts commit a3e09197c7.
2026-01-08 14:29:40 +01:00
Ludovico Magnocavallo
12d0bbf2fc Revert "fix previous change to vpc sc module (#3629)" (#3630)
This reverts commit dc35ce15ee.
2026-01-08 14:28:57 +01:00
Ludovico Magnocavallo
2fd0ef1416 Merge branch 'ludo/fix-vpc-sc-additive' 2026-01-08 13:22:38 +00:00
Ludovico Magnocavallo
1b4930513f prep v51.1.1 2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
dc35ce15ee fix previous change to vpc sc module (#3629) 2026-01-08 12:53:05 +00:00
Ludovico Magnocavallo
f99920a69b fix previous change to vpc sc module 2026-01-08 12:35:27 +00:00
Ludovico Magnocavallo
6ab071da8d prep v51.1.0 2026-01-08 12:12:43 +00:00
Ludovico Magnocavallo
a3e09197c7 Use additive resource for perimeter resources in vpc-sc module when ignore changes is set (#3628)
* module changes

* fix module
2026-01-08 12:09:09 +00:00
David Liebert
5374899b36 added support for labels with google_compute_global_address resource (#3622)
Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-07 13:19:48 +00:00
ooshrioo
ccad5654d9 Fix workforce identity federation provider configuration (#3626)
* Fix workforce identity federation provider configuration

Remove redundant 'organizations/' prefix from parent parameter as
var.organization_id already contains the full organization path.

* Update test to match corrected parent parameter

The test expected the redundant 'organizations/' prefix, but the fix
correctly removes this duplication.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-07 14:02:13 +01:00
Eric Zhao
d2aac2c743 feat: support public dns attributes (#3618)
* feat: support public dns attributes

* fix: format

* feat: Add public DNS zone type definition with logging and DNSSEC configuration, and integrate it into the schema by replacing the forwarding zone property and updating mutual exclusivity rules.

* doc: update README.md

* feat: support public dns attributes

* fix: format

* feat: Add public DNS zone type definition with logging and DNSSEC configuration, and integrate it into the schema by replacing the forwarding zone property and updating mutual exclusivity rules.

* doc: update README.md

* feat: Add forwarding DNS zone schema to networking stage.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-07 12:14:29 +00:00
Ludovico Magnocavallo
ef027ad5b5 prep v51.0.0 2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7063450392 Preliminary doc for stage 0 setup in GCD (#3623)
* GCD doc

* eu0 ---> s3ns

* Rename README-GDC.md to README-GCD.md

* Didier's suggestions for gcloud auth commands
2026-01-07 12:20:48 +01:00
Ludovico Magnocavallo
7a3387d64d prep v50.1.0 2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
cb68dfda2a Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-06 08:42:25 +00:00
Wiktor Niesiobędzki
e65a3fc0be Draft ADR on context passing 2026-01-05 22:24:58 +01:00
Eric Zhao
a9df1da89c feat: Add group attribute to NCC spoke configurations. (#3617)
Co-authored-by: Julio Castillo <jccb@google.com>
2026-01-05 14:19:54 +00:00
Suryansh Singhal
ba304518f1 Prevent recreation for key_revocation_action in compute-vm module (#3620)
* fix(compute-vm): prevent instance recreation for key_revocation_action_type

The `key_revocation_action_type` attribute in the `google_compute_instance`
resource defaults to `NONE` on the provider side.

When this optional attribute was not explicitly set in the module's
`options` variable, it resolved to `null` in the Terraform configuration.
This caused Terraform to detect a change from `null` to `NONE` on every
plan, leading to unnecessary instance recreation.

This change applies `coalesce` to
`var.options.key_revocation_action_type` in the resource definition so
that it defaults to `NONE` when unset, aligning the configuration with
provider behavior and preventing a permadiff.

* updated the regional compute template too with the key_revocation_action_type

* fixed the formatting
2026-01-05 11:53:47 +01:00
Ludovico Magnocavallo
502d953d03 Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-04 11:23:59 +00:00
Luca Prete
d0d7c64670 Refactor Agent Engine module to support new source based deployments (#3609)
* Refactor Agent Engine module to support new source based deployments

* Fix linting

* Fix tests

* Fix tests

* Remove generated_pickle line from examples

* Fix indentation

* Delete modules/agent-engine/terraform.atfvars

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-01-04 08:11:46 +00:00
Ludovico Magnocavallo
04cf0c9d95 FAST CI/CD Azure Devops support via project template (#3616)
* azd wip

* azd wip

* azd wip

* wip

* wip

* wip

* plan/apply pipelines

* wip

* wip

* cross-repo auth, README improvements

* README

* README

* README

* module sources

* self hosted agents

* tfdoc

* tested

* test

* anonymize examples

* boilerplate

* yamllint

* yamllint
2026-01-03 11:59:24 +00:00
RamBSn
c4447993d3 AlloyDB - Enable multiple automated backup per day (#3604)
* update alloydb automated backup with multiple times per day

* Revert "update alloydb automated backup with multiple times per day"

This reverts commit ea42ba7ba1b63492f812e6614cf4d4d558078069.

* update alloydb automated backup with multiple times per day

* remove unnecessary toset

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-01-02 17:05:24 +00:00
Suryansh Singhal
5eeb7b51bb Terraform allow one of X86_64, ARM64 but the validation is for x86_64 has been fixed (#3615)
Co-authored-by: suryansh.singhal <suryansh.singhal@arya.ag>
2026-01-02 12:47:55 +01:00
dependabot[bot]
8d73680472 Bump qs and @google-cloud/functions-framework
Bumps [qs](https://github.com/ljharb/qs) to 6.14.1 and updates ancestor dependency [@google-cloud/functions-framework](https://github.com/GoogleCloudPlatform/functions-framework-nodejs). These dependencies need to be updated together.


Updates `qs` from 6.13.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1)

Updates `@google-cloud/functions-framework` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/compare/v4.0.0...v4.0.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
- dependency-name: "@google-cloud/functions-framework"
  dependency-version: 4.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-02 09:31:28 +01:00
Sepehr Javid
d570260283 fix failed tests for criss regional lb 2026-01-02 09:14:53 +01:00
Sepehr Javid
de401addcb add service attachments for cross regional load balancer
add docs and cleanup

add missing toc link in readme

add domain_name field in the service attachment docs

update variable table with tfdoc.py
2026-01-02 09:14:53 +01:00
Ludovico Magnocavallo
3c2adbec2d Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-29 10:03:33 +00:00
Luca Prete
63a3d0d250 Fix pytest -s in CONTRIBUTING.md 2025-12-29 08:02:00 +01:00
Ludovico Magnocavallo
fedf90d25f Add support for pubsub to project factory (#3608)
* add support for pubsub to project factory

* remove duplicate data access log definitions from folders

* tfdoc

* schemas

* fix example

* add pubsub topics context to org in stage 0
2025-12-23 10:24:33 +00:00
Ludovico Magnocavallo
629066f474 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-23 07:24:17 +00:00
Wiktor Niesiobędzki
e811daaff7 fix bucket name for versions file in 0-org-setup 2025-12-23 07:32:56 +01:00
kovagoadam
1cdad26eab Fix project-factory version output (#3606) 2025-12-22 06:54:34 +00:00
Ludovico Magnocavallo
a554971563 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-22 06:36:05 +00:00
Wiktor Niesiobędzki
2687dd2b97 make a test self-link look like a self-link and fix tests 2025-12-19 11:05:25 +01:00
Wiktor Niesiobędzki
73664615a4 Correct test for Direct VPC egress for CFv2 2025-12-19 11:05:25 +01:00
kovagoadam
e07db39fd5 Add audiences for cicd_workflows local (#3602) 2025-12-18 17:36:16 +00:00
Josh Myers
1eb93db427 feat: project-factory folders support deletion_protection (#3595)
* feat: project-factory buckets support deletion_protection

* chore: Update all folder.schema.json

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-12-18 14:25:05 +00:00
Luca Prete
0ac51b6050 Password for initial_user for AlloyDB is no longer required (#3596) 2025-12-18 11:57:32 +01:00