Julio Castillo
8dde9fe773
Fix domains of default service accounts when universe is present ( #3670 )
2026-01-23 14:11:17 +00:00
Vannick Trinquier
cc24046be8
Add CMEK support to FAST and controls for CMEK encryption ( #3556 )
2025-12-14 12:14:08 +07:00
Julio Castillo
772d064e1c
Skip IAM grants for service agents that are not created on API activation ( #3448 )
...
* Skip IAM grants for service agents that are not created on API activation
* Fix tests
2025-10-21 14:31:32 +00:00
Ludovico Magnocavallo
8749683850
fix incorrect cloudservices agent email for global universe ( #3402 )
2025-10-12 11:13:50 +00:00
Ludovico Magnocavallo
07d7a85da1
Lightly refactor service agents locals in project module ( #3380 )
...
* lightly refactor project module service agent locals
* remove debug block
* tfdoc
* revert templatestring to format for universe kms
* reinstate moved block
2025-10-05 10:25:04 +00:00
Ludovico Magnocavallo
4db29a48eb
allow forcing jit service agents generation for universe ( #3378 )
2025-10-05 10:17:57 +02:00
Ludovico Magnocavallo
36648b6b63
FAST light implementation ( #3255 )
...
* data wip
* wip data
* update org schema, add note on expansion
* all schemas, workload notes
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* wip
* data wip
* wip
* wip
* wip
* wip
* org module IAM context (using lookup)
* new-style context expansion in project IAM
* remove spurious file
* project module contexts
* finalize context replacement format for project module
* revert org module changes
* fix tag id interpolation in project
* fix tag id interpolation in project
* organization module context
* organization context test
* context expansion for folder tag bindings
* test context expansion for tag bindings
* service account module context
* simplify context local
* context for iam service account
* nuke blueprints
* remove links to blueprints
* vpc sc context in project module
* Add context to GCS module
* Add inline deps to plan_summary script
* Make context a top-level variable for folder, organization, sa
* Add add context top-level to VPC-SC
* move context out of factories_config variable
* tfdoc
* fix merge
* fix merge
* fix examples
* net-vpc module context
* add parent ids to folder context
* rename folder parent context
* fix folder parent check
* new project factory stub
* wip
* wip
* refactor defaults
* project iam
* bueckts and service accounts
* start adding context replacements
* better test data
* automation resources for folders and projects
* automation
* add support for project id interpolation
* first tested apply
* improve IAM description in gcs module
* add context to billing account module
* add notification channels to billing account module context
* add billing budgets to new pf
* schemas and defaults
* bootstrap wip
* bootstrap wip
* bootstrap wip
* pf outputs
* pf fixes
* fix pf sample data
* bootstrap lite fixes
* add locations to organization module contexts
* bootstrap lite fixes
* org fixes, billing accounts
* fix default project parent
* bootstrap lite wip
* add locations to gcs module context
* add context support to logging bucket module
* add context to pubsub module
* split out iam variables in gcs module
* fix logging bucket context test
* bootstrap log sink destinations
* streamline logging-bucket module variables
* fix logging bucket context test
* align logging bucket module interface in fast bootstrap
* add support for project-level log buckets to project factory
* support full context expansion in organization module log sinks
* log buckets in fast-lite bootstrap
* make og sink type optional in organization module
* log sinks in fast-lite bootstrap
* set tag values in factory context
* bootstrap lite data
* output files schema
* billing account schema
* output files
* output providers
* gcs output files
* boilerplate
* tflint
* check documentation
* check docs
* fix project module parent variable validation
* fix log bucket examples
* allow null parent in project module
* silence folder test errors
* fix billing account sink example
* fix project example
* fix billing account module
* fix folder tests
* fix FAST
* fix fast
* tfvars outputs
* wif
* cicd service accounts
* cicd
* allow defaults in context, minimal org policies
* support gcs managed folders in project factory and bootstrap lite
* support prefix in provider output files
* rename bootstrap stage
* gitignore
* gitignore
* security folder, billing IAM
* wip tfvars
* fix typo
* security IAM
* control tag iam/context via variables in organization module
* split tag creation from tag IAM to avoid circular refs
* port organization module tag changes to project module
* implement new-style context expansion in vpc-sc module
* fix fast vpc-sc tests
* boilerplate
* vpc sc stage
* schemas
* fast-lite compatibility for vpc sc stage
* make log project number optional in vpc-sc stage
* networking
* networking
* networking
* networking
* rename and move new stage under fast
* clone pf tests
* use context replacement for internal notification channels in billing account module
* support service agents in project module iam context replacements
* support service agents in project module iam context replacements
* add support for kms keys to project module context
* experimental pf example test and fixes
* fix schemas
* fix tests
* tfdoc
* tfdoc
* pf config
* experimental pf
* remove redundant dot from gcs managed folder IAM keys
* bootstrap experimental test
* project factory exp stage test
* skip tflint for bootstrap experimental test
* tflint
* fix gcs test
* documentation work
* documentation work
* Update README.md
* tfdoc
* tfdoc
* readme
* tfdoc
* readme
* readme
* readme
* readme
* support universe in pf exp projects
* missing universe service agents
* org policies import, non-admin billing IAM
* todo
* fix test
* custom constraints
* fast classic dataset
* fix test data
* context replacements in billing module log sinks
* fix typo
* add support for billing log sinks
* update docs
* readme
* cicd fix and test
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-09-02 08:38:57 +02:00
Liam Nesteroff
f07e4f64e9
Standardise reuse variable from project module and implement for net-vpc ( #3205 )
...
* exposing the network_id from the net-vpc module for use with tag bindings
* convert vpc_create to vpc_reuse
* Changed the reuse vars to standardised attributes
* fixed readme tests and schemas
* modified apigee blueprint to use vpc_reuse with network_id passthrough
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-07-03 09:12:05 +10:00
dgourillon
16727ded25
Fix KMS service agent when universe is set ( #2920 )
...
* propose the changes to the service agent config agent
* Fix formatting
* Fix typo
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-02-21 14:59:48 +00:00
Wiktor Niesiobędzki
0a1b6c6e0f
Add ability to refer to other project service accounts in Project Factory
2025-02-19 16:47:15 +01:00
Julio Castillo
d0c3f04c10
Make service agents work in different universes ( #2894 )
...
* Make service agents work in different universes
* Use templatestring and two passes for service agent emails
* Fix tests
2025-02-14 12:16:07 +00:00
Julio Castillo
c73035f4e5
Allow universe-bound projects to exclude services ( #2852 )
...
* Allow universe-bound projects to exclude services
* Update README
2025-01-30 08:48:58 +01:00
Ludovico Magnocavallo
0a72d26f49
don't create resources for aservice agents not in services ( #2820 )
2025-01-17 16:55:41 +01:00
Julio Castillo
3237764e74
Add moved blocks for the service networking service agent and IAM ( #2449 )
2024-07-25 12:01:21 +00:00
Ludovico Magnocavallo
64b403860e
Project service agents moved block and enabled services ( #2443 )
...
* moved block for jit service agents
* allow passing in enabled services to service agent config
2024-07-24 12:02:53 +00:00
Julio Castillo
c0bf32e797
Refactor service agent management ( #2423 )
...
* Service agents script
* Service agents update
* WIP
* Update script and terraform
* Fix tests
* Fix linter
* Update docs
* Bring back pf example inventory
* Fix tests
* Fix more tests
* Fix tests
* Use dataclasses for build_service_agents.py
* Remove unneeded field() from build_service_agents
* Re-enable CMEK depends_on in project outputs
* Update tools/requirements.txt
* Enable storage in GCS example projects
* Fix tests
* Add CMEK Service Agents dependencies for services
* Fix typos and data platform cmek
* More typos
2024-07-23 22:05:38 +02:00
