Commit Graph

5600 Commits

Author SHA1 Message Date
apichick
8e0dac84f9 Bigquery dataset routines (#2570)
* Added routines to bigquery-dataset module

* Fixes after review
2024-09-19 09:13:32 +00:00
Ludovico Magnocavallo
cf5bba8b7f support secret-level expire time in secret manager module (#2583) 2024-09-19 10:35:43 +02:00
Ludovico Magnocavallo
c2a9cb7d09 make it explicit that stages need to be run once before CI/CD setup (#2582) 2024-09-19 09:43:35 +02:00
Ludovico Magnocavallo
9441eed410 fixed diagrams (#2581) 2024-09-19 09:39:35 +02:00
Ludovico Magnocavallo
2fc2f8fb92 FAST resman mt fixes (#2579)
* resman mt fixes

* fix custom roles var
2024-09-19 09:02:04 +02:00
Simon Roberts
9a51c4d196 Update a few references from 3-project-factory to 2-project-factory (#2568)
* Move project-factory to stage 2, fix path. Remove other trailing whitespace.

* Update 3-project-factory to 2-project-factory

* ./tools/tfdoc.py fast/stages/0-bootstrap
2024-09-19 05:11:32 +00:00
dependabot[bot]
68d6db51a8 Bump path-to-regexp and express (#2574)
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.10)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-18 08:21:22 +00:00
dependabot[bot]
c73b5420e4 Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2573)
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.10 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.10)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-18 08:09:06 +00:00
Elia
0e14cd5249 Update variables.tf (#2558)
* Update variables.tf

Hi Team,
the default ranges for the dmz are not valid ranges that contain the default subnets.

This is the subnetting:
https://visualsubnetcalc.com/index.html?c=1N4IgbiBcIIwgNCAzlUMAMA6LOD0AOVWHbbXATiI1LwyIH0A7KEBEegYxZAF9FqAbABYauOpDRZhomHAnFM02gCYqUkbQDMaxRrIwhOpfoCsRvejEDzMgOwNm0AC4AnAK5InAUwAmAAgAHFwBLAFsAQxcATzZObj4FaRhlfH17eSYWH1CAL0CQiOjYrmheBMETGWt5CrsHbkQ40vKpSuTUyxh00EzSxpLWHiH+KQEZMwzHVn74lsUO-UMaqQXOicl5qvroHy8wfLDImJnmkcVyLcmG9gGys9sSNe3pm9m522UZbWXMD5kljZ-WjrBRA-TVHpTIIAe38QUORROg3umkukOuTUG7wsYhBvRemLuoLGtAB7CmxTeZ3wjzEqh+NK+OkZpOZtJgIOoLPBbLqV2c7k8vj8SC8HGhjB8R0ppwUjPaaWe2TyovFkulSKJXJgaLlOto3XJGNuc3wOoVnUN+JlWNNn2BzxtWqw+BxBmZbs5LrdEKNOz2IrFEqliNesq5lVovutmuGcpJpkdsbjXNWYm+G3wafdDOzXswWd1+Jh-lVwY1YeRcouUaTledmHI7LxFOTZ3I9sWdcJQxTWHICc6cnRfXrvbOFrIlH5BJNvaAA

* fixed readme file
2024-09-16 08:28:21 +00:00
Simone Ruffilli
8090fe66aa Fix format typo for essential contacts domains in bootstrap 2024-09-13 11:32:47 +02:00
Simone Ruffilli
9905e1dc69 Enables compute.setNewProjectDefaultToZonalDNSOnly and essentialcontacts.allowedContactDomains (#2564)
* Enables setNewProjectDefaultToZonalDNSOnly policy
* Add support for essentialcontacts.allowedContactDomains
2024-09-13 11:09:55 +02:00
Simone Ruffilli
ca9ec30114 Update list of org policies imported by FAST bootstrap stage 2024-09-13 07:05:01 +00:00
Wiktor Niesiobędzki
679218cde3 Fix e2e testsss for cloud run 2024-09-10 12:04:39 +02:00
Simone Ruffilli
7f8a02a405 Add support for google provider 6.x (#2536)
* Add support for google provider 6.x

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-05 10:35:58 +00:00
Julio Castillo
21f85a837c Update changelog 2024-09-05 12:19:59 +02:00
Julio Castillo
80085a468e Update changelog 2024-09-05 12:00:56 +02:00
Julio Castillo
ba3e1be416 Bump provider to 5.43.1 ahead of next release (#2557) 2024-09-04 19:58:07 +02:00
oluakingcp
8a56836078 Updated the auto pilot gke security posture configuration (#2556)
* updates the auto-pilot cluster configuration for security posture vulnerability mode

* updates the auto-pilot cluster configuration for security posture vulnerability mode

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:53:07 +02:00
oluakingcp
0e2127979f included the security_posture configuration (#2553)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-04 15:29:18 +02:00
Wiktor Niesiobędzki
44a4268afc Fix E2E tests 2024-09-04 12:16:50 +02:00
Wiktor Niesiobędzki
e1c1ed3a23 Add IAM dependencies to outputs 2024-09-04 12:16:50 +02:00
Wiktor Niesiobędzki
51ef390d04 Upload hidden files 2024-09-03 17:18:21 +02:00
Ludovico Magnocavallo
e4413dbbd1 add documentation instructions for corner cases in github and bootstrap (#2545) 2024-08-30 14:04:43 +02:00
Ludo
3191a041e3 tfdoc 2024-08-30 10:43:04 +02:00
Ludo
e6bd1c62b8 update changelog 2024-08-30 10:42:34 +02:00
Ludo
e8c80babd8 update changelog 2024-08-30 10:09:24 +02:00
Ludovico Magnocavallo
eb89c62b5f prepare v34.0.0 release (#2543) 2024-08-30 10:06:33 +02:00
Ludovico Magnocavallo
579c7296db moved blocks and fixes for FAST v33-v34 transition (#2541) 2024-08-30 07:44:27 +00:00
Julio Castillo
80343fa07b Use generic project name in HA VPN over IC blueprint (#2542) 2024-08-30 07:32:21 +00:00
Luca Prete
3ca0525039 [FAST] TLS inspection support for NGFW Enterprise (#2484) 2024-08-30 09:15:17 +02:00
jamesdalf
8ca3bc390f Module net-vpc fix for reserved ranges (#2538)
* fix the reserved ranges

* updated readme

* formatting

* fix example test

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-08-30 05:10:28 +00:00
okguru1
dc0a27b8c2 Exposing aws_v4_authentication configuration in global external alb (#2539)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes

* expose aws_v4_authentication configuration option

* terraform fmt

* update readme

* use dynamic block and optional for new variable
2024-08-29 13:45:50 +00:00
Simone Ruffilli
09de7d67ff Add send_secondary_ip_range_if_empty=true to google_compute_subnetwork (#2537) 2024-08-28 14:00:08 +00:00
luigi-bitonti
815abc0afa Added max_run_duration field to compute_vm modules (#2533)
Co-authored-by: Luigi Bitonti <luigi.bitonti@nttdata.com>
2024-08-28 09:36:45 +00:00
Ludovico Magnocavallo
cecce6b3a0 Allow customizable prefix in net-vpc module PSA configs (#2535)
* allow customizable prefix in net-vpc module PSA configs

* fix peered domain key
2024-08-28 09:24:13 +00:00
kejti23
864a41cb20 Added ownership_scope argument for billing account (#2528)
Co-authored-by: Julio Castillo <jccb@google.com>
2024-08-28 09:08:14 +00:00
Julio Castillo
f57635d044 Add managed folders suports to gcs module (#2530)
* Add RPO, make versioning dynamic

* Add manaed folders

* Change autoclass and cors defaults to null

* Update README

* Add iam_by_principals

* Add managed folders var description

* Remove need for managed folders to end in /

* Add inventory to example

* Update readme

* Fix FAST tests
2024-08-28 07:30:52 +00:00
Julio Castillo
d4e727a482 Update stable provider too (#2531) 2024-08-28 08:49:46 +02:00
Julio Castillo
b3f272915e Update 20230816-iam-refactor.md 2024-08-27 18:34:05 +02:00
Julio Castillo
bab85c88ba Bump provider to last release of version 5 (#2525)
* Bump provider to last release of version 5

* Remove default-versions copy in test env setup

* Use file instead of symlink in tools/lookfile

* Remove default-version reference

* Removed unused code
2024-08-27 16:50:59 +02:00
Emile Hofsink
6cf0e5754b feat: Add security_policy to backend service configuration (#2523)
* feat: Add security_policy to backend service configuration

* chore: updated README from tfdoc.py
2024-08-27 14:19:14 +02:00
jamesdalf
cc5c04f62a net-vpc module add overlap CIDR subnet attribute (#2521)
* add subnet allow_subnet_cidr_routes_overlap

* allow_subnet_cidr_routes_overlap default null

* set default null for factory subnets

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-08-26 19:48:26 +00:00
Julio Castillo
58bee2a63d Add pubusb to default jitsi sas (#2520) 2024-08-26 19:55:32 +02:00
Artem Bogdantsev
1331e5655b project-module-cmek (#2518)
Yet another typo was found
2024-08-23 17:16:17 +00:00
Artem Bogdantsev
38c87debde project-cmek-smallfix (#2517)
A nasty typo which causes the module to crash
2024-08-23 18:39:21 +02:00
V0idC0de
548788dba1 fix: Make keys for local.projects consistent (#2516)
Projects configured in `folders_data_path` have their filename as key, whereas those from `projects_data_path` have their path, relative to `projects_data_path` as key.
This causes different behavior when defining `local.projects` and subsequently calling `module.projects`, unless `name` is specified.
2024-08-23 15:47:51 +00:00
Luca Prete
7f460c425b Add ca pool object to certification-authority-service module (#2515) 2024-08-23 09:43:01 +00:00
Simone Ruffilli
9eafd201dd Fixes gateway_security_policy in net-swp 2024-08-22 10:25:09 +02:00
Luca Prete
17667ce205 [FAST] Add permissions to nsec-r SA (#2511) 2024-08-21 20:26:32 +02:00
okguru1
fe55217887 Add support for disable default snat (#2508)
* added disable_default_snat variable

* add an option to disable default snat

* tfdoc readme

* change order of variables

* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability

* defining disable snat variable in autopilot as it is also an option

* fix conditional

* update readme

* null is implied in optional bool

* update readmes
2024-08-21 09:43:27 +00:00