Commit Graph

6094 Commits

Author SHA1 Message Date
apichick
a5895d4e7c Added auto-provisioning-locations to gke-cluster-standard module (#3103) 2025-05-20 15:42:03 +00:00
Maciej Sikora
ece9887050 feat: enables blue-green upgrades (#3102) 2025-05-20 14:43:04 +00:00
apichick
bf2814653e Simplify Cloud SQL backup enablement logic 2025-05-20 11:24:18 +00:00
Ludovico Magnocavallo
2a5e5833a9 Fix net vpc firewall module schema (#3099)
* fix ports in net vpc firewall module schema

* default ports to []
2025-05-20 10:59:34 +02:00
Maciej Sikora
2e3335630a Enable multi-network GKE (#3096)
* feat: enable multi networking feature

* enable multi nerworking

* enable multi nerworking

* fmt

* regenerate docs

* feat: enables multinetwork in autopilot clusters
2025-05-19 16:43:59 +00:00
6uellerBpanda
c0afa55b3b feat(gke): add kubelet_readonly_port_enabled (#3092)
Thanks for this!
2025-05-19 11:07:15 +02:00
Laurent Al Hossri
4a652324ee Add GitLab SaaS support in fast/extras/0-cicd-gitlab (#3088)
* feat: add support to SaaS gitlab instance

* fix: fmt terraform

* Update README.md

* fix: validation && add gitlab url local

* fix: adapt readme.md to include gitlab_config modifications

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2025-05-18 08:32:40 +00:00
Laurent Al Hossri
8cef0e8ffd fix: remove file starting by 1 and 2 to avoid copying 1-resman-provid… (#2944)
* fix: remove file starting by 1 and 2 to avoid copying 1-resman-providers.tf, 2-project-factory-providers.tf ...

* feat: add schemas to repository files

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-05-18 07:14:29 +00:00
Falcon Taylor-Carter
3a62175918 bug: mark policy_controller as optional (#3086)
* bug: mark policy_controller as optional

* Fix documentation

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-15 16:16:13 +00:00
Luca Prete
e937a562c7 Add ability to optionally update Cloud Run job containers outside Terraform.
Co-authored-by: Luca Prete <lucaprete@google.com>
2025-05-10 15:36:34 +02:00
Viliam Pucik
2ce8363812 AlloyDB read poll support and various usability fixes (#3061)
* AlloyDB read poll support and various usability fixes

* Added support for read poll instances.
* Added support for public (outbound) IPs.
* Added new arguments: `machine_type`, `skip_await_major_version_upgrade`, and `subscription_type`.
* Added outputs for key cluster attributes, including ID and name.
* Improved input variable validations and simplified configurations.
* Fixed bug where AlloyDB user accounts always had null passwords.
* Resolved Terraform state drift issues for `network_config` and `psc_config`.
* Fixed `continuous_backup_config` always being implicitly or explicitly enabled.
* Fixed `automated_backup_policy` and `maintenance_update_policy`, which do not support non-zero minutes, seconds and nanos.
* Fixed various typos.
* Aligned the format of test examples.

* Fixed invalid condition: authorized external networks require enabled public IP, however enabled public IP can have empty authorized external networks

* Formatting

* Fix PSA block

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-09 13:03:58 +02:00
Charles Salmon
ee468514b0 [cloud-run-v2] Add ability to deploy OpenTelemetry Collector sidecar (#3071)
* [cloud-run-v2] Add ability to deploy OpenTelemetry Collector sidecar

- Adds `depends_on` flag to container definition
- Adds `port` to HTTP liveness & startup probes

* fix: add port to unmanaged resource's startup & liveness probes

* fix: add copyright boilerplate

* Fix README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-08 09:05:58 +00:00
Simone Ruffilli
7ea66b0bc6 Added versions.tf to net-vpc-factory (#3073) 2025-05-08 08:40:45 +00:00
Ludo
46f4bb9d85 prep v39.1.0 2025-05-05 14:19:45 +02:00
Luca Prete
4db015f99f [cloudsql-instance] Add cloudsql_iam_authentication flag to fix example in readme (#3069)
Co-authored-by: Luca Prete <lucaprete@google.com>
2025-05-05 08:50:31 +02:00
Wiktor Niesiobędzki
303186e6d3 fix permadiff after apply 2025-05-04 16:46:39 +02:00
Ludo
7b206264df update changelog 2025-05-04 07:47:38 +02:00
Wiktor Niesiobędzki
1366e57329 fix reference to boot disk in snapshots when using independent disks 2025-05-03 14:21:38 +02:00
Ludovico Magnocavallo
623f2b0113 Enable repd tag bindings in compute-vm module (#3063)
* enable repd tag bindings in compute-vm module

* tfdoc
2025-05-03 11:29:07 +02:00
Tyler Sommer
e547d4d29c Add deletion_policy to project-factory module (#3060)
* Add deletion_policy to project-factory module

* Use project deletion_policy in object normalization

* Replicate changes in net-vpc-factory

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-04-30 16:10:11 +00:00
Ludo
49f0e9d2fc update changelog 2025-04-29 14:29:47 +02:00
Ludovico Magnocavallo
2b20654f8c better cert manager examples (#3059) 2025-04-29 12:12:39 +00:00
Luca Prete
763b917b78 [cloud-run-v2] Add ability to control code deployments outside Terraform 2025-04-29 10:32:57 +02:00
Ludovico Magnocavallo
8cba2ba64d default scanning to null (#3056) 2025-04-29 09:54:18 +02:00
Julio Castillo
fdf9191460 New Managed Kafka module (#3054) 2025-04-24 06:52:03 +00:00
Ludovico Magnocavallo
9e6d1030d0 rename dataplex aspects module (#3053) 2025-04-22 13:06:40 +00:00
apichick
a39874413d Updated network config variables in GKE node pool (#3052) 2025-04-21 20:44:39 +02:00
Ludo
3985808ded update changelog 2025-04-21 10:06:26 +02:00
Luca Prete
1490b92285 Fix serverless NEG example in net-lb-app-ext (#3049) 2025-04-20 19:17:16 +00:00
Ludovico Magnocavallo
5adba9a018 New Dataplex Aspect Types module (#3050)
* README and tests missing

* default location value

* tested

* READMEs
2025-04-20 11:25:13 +02:00
Ludo
205a43a96f prepare v39.0.0 2025-04-18 17:44:29 +02:00
Ludo
2b0a9db8ed Merge branch 'fast-dev' 2025-04-18 17:34:08 +02:00
Ludo
89e68a8e22 prepare v38.2.0 2025-04-18 17:32:51 +02:00
Ludo
c65a8afa6f streamline vpc-sc moved file 2025-04-18 17:28:25 +02:00
Ludovico Magnocavallo
92d2c385df Fix dependabot reported vulnerability 2025-04-18 16:13:13 +02:00
simonebruzzechesse
1e2eea1296 2-secops stage (#3038)
* new 2-secops stage
* new 3-secops-dev stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-04-18 15:57:29 +02:00
Ludovico Magnocavallo
177a9ed8bf fix names in project factory automation resources (#3046) 2025-04-18 15:42:45 +02:00
dependabot[bot]
f03a2543fd Bump golang.org/x/net (#3043)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.36.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.36.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-17 07:38:23 +02:00
Simone Ruffilli
c6c4cc71d5 Pathexpand all factory data paths (#3033)
* Pathexpand all factory data paths

* fix net monitoring paths

* fix file paths

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-04-16 13:28:10 +02:00
Ludo
4821ac2c07 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-16 12:13:35 +02:00
Ludovico Magnocavallo
ade7fb32b0 rename stage_config output/variables to stage_configs (#3042) 2025-04-16 09:34:01 +00:00
Ludo
088437fabd update changelog 2025-04-16 08:16:26 +02:00
Francisco P
41df4e09bc Add managed Kafka (#3035)
* Add managed Kafka project template with configuration and variable definitions

* Refactor managed Kafka configuration to use a single kafka_config object for improved clarity and maintainability

* Add Apache License 2.0 header to managed Kafka template files

* Update README and add project.yaml for Managed Kafka cluster setup

* Update README to skip tftest validation for managed Kafka module
2025-04-15 18:15:46 +00:00
Luca Prete
ea807a36a5 Add vulnerability scanning to artifact registry module (#3040)
* Add vulnerability scanning to artifact registry module

* make variable nullable = false

* tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
2025-04-14 18:33:35 +02:00
apichick
ff7e7d299c Added recipe HA VPN between AWS and GCP (#3034)
* Added recipe HA VPN between AWS and GCP

* Fix typo

* Update providers to work without credentials

* Add AWS resource to tools/lockfile/main.tf

* Fixed error in recipe docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-04-14 12:47:21 +02:00
karpok78
639a86e626 PF SA fix for budget alert (#3036)
Allowing PF RO SA to parse budget alerts
2025-04-13 13:14:32 +00:00
Simone Ruffilli
d20fc9333b Update CICD section of 0-bootstrap. (#3032)
Update CICD section of 0-bootstrap.
Fixes #2930
2025-04-12 09:45:58 +02:00
Wiktor Niesiobędzki
2d54911415 Use path as keys in project factory 2025-04-11 22:50:50 +02:00
Wiktor Niesiobędzki
086fe2c914 Use path as keys in project factory 2025-04-11 22:30:39 +02:00
Stefano Tribioli
ffe1fbdfea Allow IAP configuration with default IdP
Load balancers can be configured with IAP-enabled backends.
They can either be configured to use external Identity Providers (IdP)
or to use Cloud Identity. The latter is the default and is used when
the OAuth2 parameters are not specified.

The iap_config parameter in the backend_service_configs variable
already supported the external IdP option, but did not support the
default one.
2025-04-11 16:19:17 +00:00