Commit Graph

1181 Commits

Author SHA1 Message Date
Luca Prete
1490b92285 Fix serverless NEG example in net-lb-app-ext (#3049) 2025-04-20 19:17:16 +00:00
Ludo
205a43a96f prepare v39.0.0 2025-04-18 17:44:29 +02:00
Ludo
2b0a9db8ed Merge branch 'fast-dev' 2025-04-18 17:34:08 +02:00
Ludo
89e68a8e22 prepare v38.2.0 2025-04-18 17:32:51 +02:00
simonebruzzechesse
1e2eea1296 2-secops stage (#3038)
* new 2-secops stage
* new 3-secops-dev stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-04-18 15:57:29 +02:00
Wiktor Niesiobędzki
2d54911415 Use path as keys in project factory 2025-04-11 22:50:50 +02:00
Wiktor Niesiobędzki
086fe2c914 Use path as keys in project factory 2025-04-11 22:30:39 +02:00
Ludo
594a9695ab Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-11 15:52:37 +02:00
simonebruzzechesse
03db2e45cf secops-rules module (#3023)
* secops-rules module
2025-04-11 15:44:31 +02:00
Simone Ruffilli
3c91acd181 Replace all instances of stackdriver.googleapis.com with log+mon (#3022)
Replace all instances of stackdriver.googleapis.com with logging.googleapis.com  and monitoring.googleapis.com.
Fixes #2932
2025-04-11 12:04:50 +00:00
Simone Ruffilli
fc84c4f60d Module: net-vpc-factory (#2982)
This pull request introduces the `net-vpc-factory` module. This new factory handles: 

* Project setup (most of what's supported by the `project` module)
* VPC setup
  * Routing
  * Subnets
* Connectivity options
  * NCC (hub, VPC spokes and VPN hybrid spokes)
  * Peerings
  * VPN (GCP-to-onprem and GCP-to-GCP)
* NAT (everything supported by the `net-cloudnat` module)
* DNS (everything supported by the `dns` module)
* Firewall (everything supported by the `net-vpc-firewall` module)
2025-04-10 11:44:39 +02:00
Julio Castillo
b2e26e50ae Enable storage.restrictAuthTypes org policy (#3017) 2025-04-08 15:43:24 +02:00
jacklever-hub24
2390124877 Added variable for activating nat and implementation in google_apigee… (#2999)
* Added variable for activating nat and implementation in google_apigee_net_address resource

* Regenerated readme

* Added tests for nat & activation

* Removed unnecessary coalesce

* Fixed test params

* Added test to confirm activate is working
2025-04-08 12:31:33 +00:00
Ludo
5612040209 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-07 08:47:00 +02:00
Wiktor Niesiobędzki
d63a425b62 Allow same filename in different directories
As long, as they do override default project name using `name`.
2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
c90005553a Add tests for data_defaults / data_overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
9c93c6daa4 Add trusted images projects 2025-04-06 12:49:16 +02:00
Julio Castillo
e04079e334 Add support to attach tags to service accounts (#3008)
* Remove service account key upload. Add create_ignore_already_exists

* Add tag bindings to service accounts

* Add description to create_ignore_already_exists

* Remove broken links
2025-04-04 12:31:19 +00:00
Julio Castillo
f656a37c40 Merge branch 'master' into fast-dev 2025-04-02 14:07:33 +02:00
Julio Castillo
0c334a6128 Add roles support to VPC-SC (#3000) 2025-04-02 09:39:04 +02:00
Julio Castillo
bd829e6ba3 Allow disabling GKE IP endpoints and setting GKE VPC scope DNS domain (#2997)
* Allow disabling IP access to GKE control plane

* Add additive VPC scope DNS domain to gke clusters

* Fix typo

* Bump provider to 6.27.0

* Update readme
2025-04-02 07:03:58 +00:00
Tim Hiatt
762841da79 Fr/timhiatt/invoker iam disable (#2994)
* Staging the New Variable change and the flag endablement for 'invoker_iam_disabled' in the 'google_cloud_run_v2_service' resouece associated with the 'cloud-run-v2' module.

* Updating tfdocs to include the new variables for the 'invoker_iam_disabled' flag in the 'google_cloud_run_v2_service' resource in module 'cloud-run-v2'

* Updating the testing in the readme for the cloud-run-v2 module.

* Fixing an issue with links in README.md Docs

* Fixing README.md linting.
2025-04-01 11:41:08 +02:00
Wiktor Niesiobędzki
dcccb1a1d0 Improve failure message 2025-04-01 10:40:32 +02:00
Marco Cadetg
2b2e52fecd feat: add gcp_public_cidrs_access_enabled to gke-cluster-{autopilot,standard} (#2993) 2025-04-01 06:17:44 +00:00
Wiktor Niesiobędzki
bea36cb047 Add requireInvokerIam constraint to the polices to prevent public exposure of Cloud Run services 2025-03-31 20:46:48 +02:00
Ludo
0facab6724 Merge remote-tracking branch 'origin/master' into fast-dev 2025-03-28 09:38:22 +01:00
Ludo
d487590e01 v38.1.0 2025-03-22 13:28:10 +01:00
Wiktor Niesiobędzki
eba82f67c5 Add example with transparent proxy and E2E test 2025-03-19 12:00:21 +01:00
Ludovico Magnocavallo
c8e4179f2b Add custom routes for directpath to net-vpc module (#2966)
* add custom routes for directpath to net-vpc module

* blueprint tests

* blueprint tests

* blueprint tests

* fast tests

* tfdoc

* module examples
2025-03-19 10:22:47 +00:00
Wiktor Niesiobędzki
73022a710a Revert "Fix broken upgrades of TF provider for routes"
This reverts commit 7f58f1ae31.
2025-03-18 11:06:46 +01:00
Wiktor Niesiobędzki
7f58f1ae31 Fix broken upgrades of TF provider for routes 2025-03-18 09:41:57 +01:00
Wiktor Niesiobędzki
fc256165a4 Pass edition and other parameters to replicas 2025-03-17 11:46:01 +01:00
Ludovico Magnocavallo
717f89dc00 Rationalize project factory context interpolations for automation service accounts (#2959)
* use different keys for automation service accounts

* inventory

* improve error handling on automation buckets
2025-03-16 15:40:47 +00:00
Samuele Perticarari
b50e8a16dc Fix subnet schema in net-vpc module & hybrid subnets example implementation (#2958)
* Fixed subnet schema by adding "allow_subnet_cidr_routes_overlap" field

* Implemented hybrid subnets code example and test code
2025-03-15 17:29:44 +00:00
Julio Castillo
34e7d90448 Update GKE addons and features (#2956)
* Update GKE addons and features

* Fix tests
2025-03-14 19:07:16 +00:00
Simone Ruffilli
be816fd882 net-vpc: fix permadiff in docs (#2949) 2025-03-12 10:09:08 +01:00
Ludo
2861078898 Merge remote-tracking branch 'origin/master' into fast-dev 2025-03-10 09:52:26 +01:00
Wiktor Niesiobędzki
6b6f5d86b2 Allow unmanaged reverse lookup zones 2025-03-06 08:28:51 +01:00
Wiktor Niesiobędzki
12979e8f50 Introduce test isolation and fix missing GCS service account 2025-03-01 14:45:16 +01:00
Wiktor Niesiobędzki
6af479706d Fix failing E2E test 2025-02-28 18:45:14 +01:00
Julio Castillo
50265f2169 Expose tags in project factory (#2929)
* Expose tags in project factory

* Update readme

* Remove default and update schema

* Fix tests
2025-02-24 23:12:17 +01:00
Julio Castillo
3ed801c464 Use VPC-SC perimeter factory in FAST 1-vpcsc stage (#2928)
* Use VPC-SC perimeter factory in FAST 1-vpcsc stage

* Add boilerplate

* Fix linter and schema checks

* Fix tests

* Fix schemas
2025-02-24 12:29:51 +00:00
Wiktor Niesiobędzki
2809570651 Fix E2E tests 2025-02-23 18:19:28 +01:00
karpok78
07a70eedb5 Add perimeter factory to modules/vpc-sc (#2919)
* Add perimeter factory

Proposal to allow the management of perimeters in yaml factory.
Project discovery is extended to multiple perimeters with query filtering.

Doc clean uo

* default perimeters desc to null

* linting

* Revert changes to FAST

* Remove test and schema from FAST

* Align vars and perimeter factory

* Interpolate resource_sets in more places

* Silence linter

* Update README.md

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2025-02-22 07:49:05 +01:00
Ludo
fb300f9e58 v38.0.0 2025-02-21 09:40:35 +01:00
Ludo
1abfa69ccc v38.0.0 2025-02-21 09:39:52 +01:00
Ludo
93f2a3f272 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-21 09:36:51 +01:00
Ludo
79ee5e8dd7 v37.4.0 2025-02-21 09:29:51 +01:00
Julio Castillo
21253a1768 Add title to VPC-SC directional policies (#2909)
* Add title to VPC-SC directional policies

* Ignore versions.tf in diffs

* Update versions.tf

* Fail if a perimeter uses unknown directional policies
2025-02-20 08:48:08 +00:00
Ludo
411b2f6e6c Merge branch 'master' into fast-dev 2025-02-20 07:58:33 +01:00