Commit Graph

1614 Commits

Author SHA1 Message Date
Aleksandr Averbukh
63ac142005 Simplified module interface, proper data structure for policies 2022-07-08 12:24:18 +02:00
Aleksandr Averbukh
a34983b2e9 OrgPolicy module (factory) using new org-policy API, #698 2022-07-06 19:41:18 +02:00
Ludovico Magnocavallo
ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Julio Castillo
cf76744f95 Fix addons for autopilot clusters, add tests for gke-cluster.
Fixes second part of #702
2022-06-28 12:24:17 +02:00
Julio Castillo
b6f0c1ae2b Add consumer_accept_list to apigee-x-instance
Fixes #701
2022-06-27 10:01:31 +02:00
Ludovico Magnocavallo
dfb447a2c4 Merge branch 'master' into fast/gke2 2022-06-23 13:50:28 +02:00
Ludovico Magnocavallo
ed4b301a17 align subnets between vpn and peering network stages 2022-06-23 09:05:20 +02:00
Ludovico Magnocavallo
666d8a469c Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Lorenzo Caggioni
ceb611bb81 Remove custom role and rely on conditions. 2022-06-23 07:04:35 +02:00
lcaggio
5c653638bc Merge branch 'master' into lcaggio/data-p-200622 2022-06-22 16:13:28 +02:00
Ludovico Magnocavallo
4f05d2748e Merge branch 'master' into lcaggio/fix-readme-20220620 2022-06-21 06:55:59 +02:00
Lorenzo Caggioni
bcfa324825 Fix test 2022-06-20 22:39:29 +02:00
Lorenzo Caggioni
7625773dea Fix tests 2022-06-20 22:05:22 +02:00
Lorenzo Caggioni
41d8847a60 Fix test 2022-06-20 17:56:36 +02:00
Ludovico Magnocavallo
3227bd13ce Merge branch 'master' into binauthz 2022-06-18 08:54:16 +02:00
Miren Esnaola
2e9fdea1a4 Binary authorization module and example 2022-06-17 16:09:12 +02:00
Ludovico Magnocavallo
943d6d431e Revert "Binary authorization module and example" (#686) 2022-06-17 12:32:42 +02:00
Julio Castillo
4c72ee701b Merge branch 'master' into binauthz 2022-06-17 11:17:36 +02:00
Ludovico Magnocavallo
528219bbf3 fix stage1 tests 2022-06-16 22:03:08 +02:00
Miren Esnaola
073196c56e Binary authorization module and example 2022-06-16 12:29:26 +02:00
Julio Castillo
f9b808b4bc Fix permissions and update NVA and peering net stages for gke 2022-06-08 11:42:04 +02:00
Julio Castillo
96b01cf68c Fix networking-vpn tests 2022-06-08 11:42:04 +02:00
Ludovico Magnocavallo
44ae2671b0 CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Miren Esnaola
9f5d59748d Added example with GLB and Cloud Armor 2022-05-26 15:32:11 +02:00
Ludovico Magnocavallo
ff25809020 Fix tfdoc parsing on newllines in outputs (#649)
* fix

* use the right (ugly) Python formatter

* boilerplate on new file

* and do the actual tfdoc run on the original outputs file
2022-05-05 14:43:38 +02:00
Julio Castillo
4e83b5003b Merge branch 'master' into sql-multi-region 2022-05-03 17:46:18 +02:00
Ludovico Magnocavallo
4114f9995f Change hub and spoke VPN example to use VPN HA (#643)
* missing outputs and diagram

* fix names and outputs, update diagram

* fix vm name in example

* tfdoc files on

* fix test

* address comments
2022-05-02 09:01:05 +02:00
Lorenzo Caggioni
04bc505b70 Fix roles 2022-04-13 16:05:54 +02:00
Lorenzo Caggioni
15e5904966 Add example test 2022-04-13 15:08:37 +02:00
Julio Castillo
952e18d0f1 Add sqladmin to project jit_si and fix some documentation 2022-04-13 11:05:55 +02:00
Julio Castillo
1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Ludovico Magnocavallo
725f7effce Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Taneli Leppä
d79dd7ab28 Added example of SQL Server always on groups. 2022-04-07 17:38:08 +02:00
Daniel Strebel
63097dd224 Allow multiple CIDR blocks in the ip_range parameter and rely on the Google API for validation 2022-04-07 15:08:24 +02:00
Julio Castillo
60e7da8614 Silence linter 2022-04-05 15:38:44 +02:00
Julio Castillo
5cbde0a32e Allow tests to run from root directory 2022-04-05 14:30:26 +02:00
Luca Prete
cd0f09b748 [#593] Add HTTP ILB module (net-ilb-l7) 2022-04-05 08:58:55 +02:00
lcaggio
ec3832760d Merge branch 'master' into lcaggio/dp-dc-policy-tag 2022-04-04 15:38:52 +02:00
Lorenzo Caggioni
67b1715ecc Fix data_eng_principals logging role. 2022-04-04 09:16:55 +02:00
Lorenzo Caggioni
3d8c9a4b52 Fix test. 2022-04-01 18:52:30 +02:00
Lorenzo Caggioni
98a9ba2c82 Fix example test 2022-04-01 18:46:51 +02:00
Daniel Strebel
59bb09b03e Add billing_type for Apigee Organization Module 2022-03-31 08:47:34 +02:00
Ludovico Magnocavallo
fa84a888c2 rename new cloud ops tests 2022-03-17 16:41:11 +01:00
Ludovico Magnocavallo
fef3ed8c93 Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo
a22cf80b60 Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
averbukh
6c2c9a3833 Fix tests 2022-03-16 00:57:05 +01:00
averbukh
e98de6c453 Unmanaged GCE instances TCP healthchecker 2022-03-15 23:50:57 +01:00
Luca Prete
7c3d9beced [#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Ludovico Magnocavallo
ecadebe90b Add support for IAM additive to folder module (#580) 2022-03-11 09:46:32 +01:00
Aleksandr Averbukh
7f2d8c85f2 Fix interconnect_attachment_direct tests 2022-03-08 09:36:27 +01:00