Commit Graph

1263 Commits

Author SHA1 Message Date
Zsolt Molnar
b3c7699b8c Enable ADMIN_READ audit log for sts.googleapis.com in automation (iac) project (#3290)
* Enable ADMIN_READ audit log for sts.googleapis.com in the automation (iac) project for better workload identity debugging and auditing

* Fix FAST tests

* Test fix #2

* Test fix #3

* Final test fix

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-09-01 13:58:28 +00:00
kovagoadam
44060453fb Added test for compute-vm module disks template example (#3289)
* Added test for compute-vm module disks template example

* Added licence boilerplate
2025-09-01 14:28:05 +02:00
apichick
273677be82 Added instance flexibility policy for regional MIGs (#3281) 2025-08-28 18:14:38 +02:00
Wiktor Niesiobędzki
ecb38dfd0e Provide Apache port to listen to, fixes E2E 2025-08-18 11:52:28 +02:00
Wiktor Niesiobędzki
4175512d37 Add Cloud Run recipes for updating image and IAM authentication to Cloud SQL 2025-08-14 15:42:26 +02:00
Wiktor Niesiobędzki
a106688b0e Fix references to service_account 2025-08-13 22:11:07 +02:00
Wiktor Niesiobędzki
75fa484730 Remove support for creating SA for event arc triggers 2025-08-13 22:11:07 +02:00
Wiktor Niesiobędzki
ff85f05669 E2E: Align triggers location to the bucket 2025-08-13 22:11:07 +02:00
Wiktor Niesiobędzki
e498f3407e Add support for GPUs in Cloud Run 2025-08-13 15:21:27 +02:00
Wiktor Niesiobędzki
8468fd4ebc Bump provider to 6.47.0, to allow use of gpu_zonal_redundancy_disabled in modules/cloud-run-v2 2025-08-13 15:21:27 +02:00
Wiktor Niesiobędzki
b5cc01c598 Add Cloud Run Worker Pools
Refactor jobs and services parameters into separte variables
Remove prefix (not needed, namespace is local to the project)
2025-08-12 19:59:50 +02:00
Ludovico Magnocavallo
f02aa1f63f v42.0.0 2025-08-08 06:49:11 +00:00
Ludovico Magnocavallo
241b005f68 Merge remote-tracking branch 'origin/master' into fast-dev 2025-08-08 06:46:42 +00:00
Ludovico Magnocavallo
f9c76c8a87 version 41.1.0 2025-08-08 06:43:08 +00:00
Matt
1b4dcd5b07 fix: Multi-tenant parameters from upstream bootstrap (#3265)
* fix: Multi-tenant parameters from upstream bootstrap

* Delint

* fix tests, tfdoc

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-08-08 06:35:32 +00:00
Ludovico Magnocavallo
915a1288d2 Merge remote-tracking branch 'origin/master' into fast-dev 2025-08-04 07:15:42 +00:00
Wiktor Niesiobędzki
1c46d3bcb5 Disable E2E for dataproc on GKE 2025-08-03 15:15:32 +02:00
Muhammad Elsaeed
9bd4363269 feat: add GCS bucket trigger support for Cloud Run services (#3257)
* feat: add GCS bucket trigger support for Cloud Run services 🌟

* feat: add examples for Cloud Run service with Eventarc storage triggers

* fix: update bucket name in Eventarc storage trigger example and clean up service account configuration

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-08-01 16:41:49 +00:00
Ludovico Magnocavallo
d526af2844 Merge remote-tracking branch 'origin/master' into fast-dev 2025-07-30 18:26:43 +00:00
Ali Abu Rub
4ebfe6b274 Remove unnecessary fields in branch-protection test inventory 2025-07-30 09:51:34 +02:00
Ali Abu Rub
c8c934f64f Create branch-protection-rules test 2025-07-30 09:51:34 +02:00
Wiktor Niesiobędzki
3d213e997e E2E fixes: load balancer and dataproc (#3252)
* Fix - load balancing mode must be RATE for Hybrid NEG

source: https://cloud.google.com/load-balancing/docs/negs/hybrid-neg-concepts

* Add service account and shielded configuration for GKE cluster
2025-07-29 16:30:43 +02:00
Ludo
5459280294 Merge remote-tracking branch 'origin/master' into fast-dev 2025-07-25 18:16:09 +02:00
Ali-Aburub
ae6b3ee18d Conditionally creates billing sink if the billing account is of type resource (#3130)
* updated billing.tf file to conditionally creates billing sink if the billing account resides out of org

* replace resources with modules

* replace individual iam resources with billing_iam local passed in the module

* update module name and path and move iam from local to module call

* update README.md

* Add log_bucket option to billing_account variable, and update billing account IAM assignments

* update 0-bootstrap README to reflect changes to billing account module

* Update current bootstrap tests to reflect the change to billing_account variable

* Create test for the case when billing account log bucket is created

* running fmt

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-07-21 15:09:36 +00:00
Ludovico Magnocavallo
332d8614ab Merge remote-tracking branch 'origin/master' into fast-dev 2025-07-18 15:47:46 +00:00
Ayush Gupta
4035b35af3 Allow custom names and descriptions for load balancer components (#3223)
* feat: Changes for migrating resources to GLB module

* Updated Readme

* Added support for null description

* Added support for empty string

* Added default optional values

* Changed Readme

* Corrected description according to readme

* Added name and description changes for net-lb-app-ext-regional

* Added name and description changes for net-lb-app-int

* Added name and description changes for net-lb-app-int-cross-region

* Added name and description changes for net-lb-proxy-int

* Added name and description changes for net-lb-ext

* Added name and description changes for net-lb-int

* Changed Readme docs
2025-07-18 08:09:50 +02:00
Ludovico Magnocavallo
27745bcb1e Merge remote-tracking branch 'origin/master' into fast-dev 2025-07-16 15:57:14 +00:00
Daniel
202d799494 Fixed gke-hub module to support regional deployment (#3218)
* Fixed gke-hub module to support regional deployment

* Co-authored-by: Julio Castillo <juliocc@gmail.com>
Adding location param for Regional Cluster Memebership,mesh feature default config for managed ASM

Updated Readme

* Updated fleet_default_member_config to match provider

* Fixed tf fmt for readme example

* Fix README

* Fix linter

* Fix variable order

* Fix tests

* Fixing tests

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-07-15 12:20:36 +00:00
Jay Bana
88051c2d5b Add Data Product Reference Example to FAST Data Platform Stage (#3211)
Add Data Product Reference Example to FAST Data Platform Stage

---------

Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
2025-07-09 08:53:49 +00:00
Ludovico Magnocavallo
53f691320e Support IAM tag factory context expansion in organization / project modules and FAST resman stage (#3226)
* tag factory context

* support tag factory contexts in resman

* schemas

* fix schema
2025-07-09 09:04:17 +02:00
Liam Nesteroff
1da9bbcfb2 Allowing multiple on-prem domains (#3219)
* Allowing multiple on-prem domains

* added on_prem domain example for tests

* Made gcp domains (gcp.example.com) optional and not created if null
2025-07-09 16:56:40 +10:00
Ludo
0a2cc6e763 Merge remote-tracking branch 'origin/master' into fast-dev 2025-07-07 10:19:23 +02:00
Julio Castillo
b8efcc5d89 Add IP filtering support to modules/gcs (#3216)
* Add IP filtering to GCS

* Bump provider version
2025-07-04 18:57:32 +00:00
Julio Castillo
7e20abc19d Update default FAST org policies (#3207) 2025-07-02 13:53:58 +00:00
Ludo
e46178c241 Merge remote-tracking branch 'origin/master' into fast-dev 2025-06-29 14:19:43 +02:00
Ludo
268c92f92d prep v40.2.0 2025-06-29 14:12:20 +02:00
Ludovico Magnocavallo
ef45aa704a Rename workflows config variable introduced in #3198 (#3199)
* rename workflows_config.tf_var_files in resman stage

* fix test result

* fix cloud deploy module versions file
2025-06-28 08:57:55 +00:00
Ludo
0e052abb59 Merge remote-tracking branch 'origin/master' into fast-dev 2025-06-28 09:40:24 +02:00
Sepehr Javid
562a7cfe17 Add default route action to internal app lb path matcher (#3195)
* add path_matcher.default_route_action

* update readme

* update versions
2025-06-26 14:21:32 +02:00
Wiktor Niesiobędzki
bebf3f0080 fix failing E2E test 2025-06-24 13:20:53 +02:00
Liam Nesteroff
1fbb2cb330 Added tag factory option for organization module (#3178)
* Added tag factory option for organization module

* added tags-factory tests

* added tag factory for project module

* missing header

* added lookup catch for org tag values and fixed incorrect link in doco

* fixed factory locals from copy/paste

* added full doco/tests for project tags factory. fixed failed test looking for ID in yamls

* added context option for factories_config to configure existing K/Vs

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-06-23 16:24:43 +10:00
Ludo
1dde5258fa Merge remote-tracking branch 'origin/master' into fast-dev 2025-06-21 17:37:53 +02:00
Chris McCoy
c33a4b57c1 Add support for IPv6 only subnets and IP collections 2025-06-20 18:22:08 +02:00
aumohr
71f969c21f Clean fast 2 security from vpcsc (#3187)
* updated fast security readme

* removed not required data file

* change org policy condition to align with best practice documentation

* aligned test
2025-06-20 13:22:22 +04:00
Ludovico Magnocavallo
fe0a8128dc Allow custom roles in context, add support for shared VPC IAM to project and project factory (#3163)
* add support for custom roles and hos tproject iam to project modules

* align vpc factory
2025-06-15 10:01:22 +02:00
Wiktor Niesiobędzki
a5af0703f6 Add notebooks, appengine and appspot to dns policy routing 2025-06-13 16:46:44 +02:00
Ludovico Magnocavallo
9e94a0836a Improve and document org policy tags use in FAST resman stage (#3162)
* improve and document org policy tags use in resman

* tfdoc, tests
2025-06-13 15:57:48 +02:00
Ludovico Magnocavallo
7d008be2cb Allow configuring project key format in project factory (#3154)
* Configurable project key in project-factory module

* Configurable project key in project-factory module

* add tests
2025-06-11 13:18:03 +02:00
Ludovico Magnocavallo
468c0ab49a fix IAM delegation for project factory on security KMS keys (#3147) 2025-06-10 12:56:29 +02:00
Ludovico Magnocavallo
3c38bc643e add KMS keys interpolation to project factory (#3145) 2025-06-10 10:24:25 +02:00