Commit Graph

5358 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
980011806c fix permadiff in cloud nat module (#2301) 2024-05-23 08:38:03 +02:00
Ludovico Magnocavallo
ef5178c929 add support for shared vpc host to project factory (#2300) 2024-05-22 07:56:34 +00:00
simonebruzzechesse
1e149c18fc New alloydb module (#2285)
* add alloydb module

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-22 09:40:25 +02:00
simonebruzzechesse
10ae9bc824 New extra stage for FAST gitlab setup (#2232)
* new extra stage for gitlab setup

* removed wrong link

* small fixes README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-22 09:17:14 +02:00
Peter Brumblay
a04d63e991 Avoid unnecessary terraform plans for closed (unmerged) PRs (#2294)
* Avoid unnecessary terraform plans for closed (unmerged) PRs

* fix: also update templates copied to avoid Windows symlink problems.

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-21 13:03:07 +00:00
Wiktor Niesiobędzki
3368be51bd Adjust list of policies to official docs 2024-05-21 11:27:57 +02:00
Ludovico Magnocavallo
be9214f99a add support for tenant factory CI/CD (#2297) 2024-05-21 10:39:47 +02:00
dependabot[bot]
524390b641 --- (#2296)
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-21 07:20:53 +00:00
Ricardo Godoy
79b36b614b IPS support for Firewall Policy (#2291)
* Adding apply_security_profile_group as action option and be able to
provide a security_profile_group.

* Removing default null for optional variable.

* Updating README.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-05-21 04:38:43 +00:00
Wiktor Niesiobędzki
1ecd637932 Internet NEG for net-lb-app-int (#2293)
Internet NEG for net-lb-app-int
2024-05-20 21:12:39 +02:00
Luca Prete
0afaa84026 [FAST] fix: tenant-factory logging bucket project (#2292) 2024-05-20 16:51:12 +00:00
simonebruzzechesse
79af34b69e Add wif permissions to bootstrap tf SA (#2290)
* add wif permissions to bootstrap tf SA
2024-05-20 18:15:23 +02:00
Ludovico Magnocavallo
98126f2ab8 Update README.md 2024-05-20 07:55:42 +02:00
Ludovico Magnocavallo
8e8ff7825c Update README.md 2024-05-20 07:54:31 +02:00
Ludovico Magnocavallo
116c1292ab Update README.md 2024-05-20 07:54:03 +02:00
Ludovico Magnocavallo
32907924e1 update diagrams (#2289) 2024-05-18 23:53:49 +02:00
Ludovico Magnocavallo
db44be9803 Ignore test resource data in new network stage, split out fast variables (#2288)
* ignore test resource data, split out fast vars

* tfdoc
2024-05-17 15:30:57 +02:00
Ludo
92f88d6cbf update changelog 2024-05-17 12:09:37 +02:00
Ludovico Magnocavallo
8014121be1 switch stages 0-1s to excalidraw diagrams (#2286) 2024-05-17 09:10:13 +00:00
Simone Ruffilli
21f3b733ab FAST: Cleanup/harmonization of Simple and NVA net stages (#2287)
Cleanup/harmonization of Simple and NVA net stages
2024-05-16 16:49:15 +03:00
Simone Ruffilli
887c7e7926 Unify VPN and Peering FAST stages (#2284)
* Unify VPN and Peering FAST stages
2024-05-16 12:18:32 +03:00
Ludovico Magnocavallo
7a5dd4e6db FAST: add top-level folders and restructure teams/tenants in resman (#2254)
* remove teams and tenants from resman

* move fast features to stage 1, fix test inventories

* folders

* fix factory, add top level folder resources to outputs

* tfdoc

* stage 0 log sink defs

* tfdoc

* enable toc in resman readme

* simple tenants

* fast compatibility automation and logging

* testing fast-compatible tenants

* testing fast-compatible tenants

* tfdoc

* remove mt stages

* remove tests, fix links

* disable tflint

* fast tests

* make organization conditional in resman

* check names tool

* export real prefix to tfvars, prevent destroy errors

* prefix validation

* fix billing account export format

* tfdoc

* root node folder

* resman changes

* tenant resman roles

* first apply of tenant resman

* tenant log sinks in stage 1

* fix test vars

* tfdoc

* tenant vpc-sc access policy

* fix tests expected values

* tenant CI/CD

* identity providers

* wif

* tfdoc

* add comments to identity locals

* full-feature tenant resman apply

* tenant billing IAM

* stage test

* fix CI/CD comments

* tenant net stage verified

* tenant sec stage verified

* fix test

* README work

* tfdoc

* README

* README rewording

* README rewording

* tfdoc

* FAST excalidraw

* review comments

* diagram review changes

* add iam log sink for tenants

* remove redundant try from security stage

* Implement tflint-fast in Python driven by tftest.yaml files

* tflint

* test ci changes

* revert linting changes

* disable tflint for fast

* Create junit-style report for FAST tflint

* Remove junit-reporter

* YAPF tflint-fast.py

* Output tflint FAST to job summary

* Step summary

* Disable step_summary as output is not useful

* ignore tflint warning

* re-enable tflint on FAST

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-05-15 09:17:13 +00:00
Ludo
d3137be655 update changelog 2024-05-15 11:05:22 +02:00
Ludo
6c06adb96c prepare changelog for release 2024-05-15 10:59:49 +02:00
Simone Ruffilli
d3ffcc2b1c Disable reserved_internal_range in net-vpc due to provider bug (#2282) 2024-05-15 05:46:18 +00:00
Ludo
014a36d4b6 update changelog 2024-05-14 21:54:34 +02:00
Ludo
5427bfffa9 bump release in changelog 2024-05-14 21:51:28 +02:00
Ludo
09025eb895 update changelog 2024-05-14 21:49:57 +02:00
dependabot[bot]
8a9eb0f493 Bump express (#2278)
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2)

---
updated-dependencies:
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-14 21:30:35 +02:00
Simone Ruffilli
9a26fe8635 Add support for reserved_internal_range in net-vpc (#2275)
Adds support for reserved_internal_range to net-vpc
2024-05-14 22:19:45 +03:00
apichick
f41d8059ea Added missing apigee org attributes to apigee x foundations blueprint (#2277) 2024-05-14 18:48:05 +00:00
dependabot[bot]
dfbb2c0bc0 Bump protobufjs, @google-cloud/logging-bunyan and @google-cloud/monitoring (#2279)
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 7.2.6 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@google-cloud/logging-bunyan](https://github.com/googleapis/nodejs-logging-bunyan) and [@google-cloud/monitoring](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-monitoring). These dependencies need to be updated together.


Updates `protobufjs` from 7.2.4 to 7.2.6
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.2.4...protobufjs-v7.2.6)

Updates `@google-cloud/logging-bunyan` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/googleapis/nodejs-logging-bunyan/releases)
- [Changelog](https://github.com/googleapis/nodejs-logging-bunyan/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/nodejs-logging-bunyan/compare/v5.0.0...v5.1.0)

Updates `@google-cloud/monitoring` from 3.0.5 to 4.0.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-monitoring/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/kms-v4.0.0/packages/google-cloud-monitoring)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-type: indirect
- dependency-name: "@google-cloud/logging-bunyan"
  dependency-type: direct:production
- dependency-name: "@google-cloud/monitoring"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-14 20:37:16 +02:00
Ludo
c494715e9a Merge branch 'master' of github.com:GoogleCloudPlatform/cloud-foundation-fabric 2024-05-14 17:13:06 +02:00
Ludo
95d0cccff4 update changelog 2024-05-14 16:54:51 +02:00
apichick
ff6f6bb32a Added apigee-x-foundations blueprint (#2274) 2024-05-14 14:53:38 +00:00
Ludo
c854057bef update changelog 2024-05-14 15:01:43 +02:00
luigi-bitonti
a14ed9add2 Cloud function CMEK key support (#2270)
* Added support to kms key

* Updated doc

* Fix variable description.

* Updated README

* Cloud function v2 integration with kms

* Fix variables description

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-14 12:56:10 +00:00
simonebruzzechesse
4d1d3c6811 New Bindplane cloud-config-container setup (#2272)
* new bindplane cloud-config-container setup
2024-05-14 14:45:39 +02:00
Ludovico Magnocavallo
e4941c27f2 Implement the full IAM interface for tags (#2269)
* IAM authoritative bindings in org module

* remove extra newline

* organization module

* project module

* tfdoc
2024-05-13 20:18:51 +02:00
Ludovico Magnocavallo
604920dec9 add logging settings to folder module (#2268) 2024-05-13 09:24:17 +02:00
Wiktor Niesiobędzki
af253c9702 Fix 0-bootstrap iam_by_principals not taking into account all principals (#2267)
* Fix 0-bootstrap iam_by_principals not taking into account all principals
* Add test-case for iam_by_principals for 0-bootstrap stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-12 21:02:04 +02:00
Wiktor Niesiobędzki
6a3c7fe444 CloudSQL PSC Endpoints support (#2242)
* Add PSC endpoints consumers to net-address
* Cloud SQL E2E tests
2024-05-12 12:00:39 +02:00
Wiktor Niesiobędzki
35a17a46ba Fix failing E2E tests 2024-05-11 17:29:35 +02:00
Jan Van Bruggen
5b3ed10cda Fix bug from output typo in new project-factory module (#2264)
`local.folders` is just a map of var-based keys to string manipulations on those keys, while `local.hierarchy` is the seemingly-intended map of var-based keys to generated IDs/numbers.

see
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L32
vs.
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L39

Thank you for recently developing this convenient module!
2024-05-10 22:19:35 +00:00
Wiktor Niesiobędzki
2b6c81f73d Update docs - gcp-network-admins -> gcp-vpc-network-admins 2024-05-10 10:04:24 +02:00
Ludo
01533a4a66 update changelog 2024-05-10 07:56:11 +02:00
Julio Castillo
d838c4ac47 Make Simple NVA route IAP traffic through NIC 0 (#2262) 2024-05-09 18:29:25 +02:00
Julio Castillo
c58850c096 Add Hybrid NAT support (#2261)
* Updates to support hybid NAT

* Fix readme

* Fix variable order
2024-05-09 13:24:41 +00:00
Ludovico Magnocavallo
c9503d5ac5 Remove data source from folder module (#2260)
* remove data source from folder module

* fix fast tfdoc

* fix locals type error

* fix folder test

* fix fast test
2024-05-09 13:09:54 +00:00
Julio Castillo
7aa6c7e059 Style fixes to FAST log sinks expressions 2024-05-02 22:11:33 +02:00