* Change default values for authorized_ranges from {} to null and
gcp_public_cidrs_access_enabled from false to null in the
access_config.ip_access variable. This ensures the dynamic
master_authorized_networks_config block is properly
conditional on user input.
Previously, these fields would never be null due to their
default values, causing the block to always be initialized
even when users didn't intend to configure authorized networks.
* remove explicit null
* Remove all defaults for access_config.ip_access. Fix permadiff.
* Fix tests
* Swap try with coalesce
---------
Co-authored-by: Julio Castillo <jccb@google.com>
* Improves Data Platform README for clarity
* Quick fix to table of contents capitalization
* Fix broken link to stages README.md
* Fix broken link to stages README.md
* Add 2 diagrams.
* Update README.
* Update README.
* Fix section headings in README for consistency
* Clarify implementation details in README regarding Data Mesh principles and FAST stage integration
* Reposition folder structure diagram
* Remove Resource Hierarchy Overview section from README
* Remove diagram_resman.png from data platform development stage
* Update diagrams in README for Data Platform stage
* Refine descriptions of logical components in Data Platform architecture
* Refine README and configuration files for Data Platform stage, enhancing clarity and consistency in descriptions and structure.
* Add section for Provider and Terraform variables in README
* Remove demo files and configurations for Data Platform stage
* Fix file paths in IAM management references in README
* Add IAM principal for dp-platform and update resource counts in test files
* Update README to fix folder structure diagram order and alignment
* Fix capitalization and team naming inconsistencies in README
* Add note on IAM permissions review for production deployment in README
* Refactor IAM roles for dp-platform group in terraform.tfvars.sample
* Fix bucket name in product-0.yaml from 'exposed-ew8' to 'exposed'
---------
Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
* PF: fix reference to automation SAs in IAM block in service accounts for PF
* add test
---------
Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Ludo <ludomagno@google.com>
* Remove bridge perimeters
* Update FAST stages
* Allow project ids in perimeter definitions
* Preserve order order for ingress/egress policies
* Use CAI
* Use CAI
* Fix tests
* AlloyDB read poll support and various usability fixes
* Added support for read poll instances.
* Added support for public (outbound) IPs.
* Added new arguments: `machine_type`, `skip_await_major_version_upgrade`, and `subscription_type`.
* Added outputs for key cluster attributes, including ID and name.
* Improved input variable validations and simplified configurations.
* Fixed bug where AlloyDB user accounts always had null passwords.
* Resolved Terraform state drift issues for `network_config` and `psc_config`.
* Fixed `continuous_backup_config` always being implicitly or explicitly enabled.
* Fixed `automated_backup_policy` and `maintenance_update_policy`, which do not support non-zero minutes, seconds and nanos.
* Fixed various typos.
* Aligned the format of test examples.
* Fixed invalid condition: authorized external networks require enabled public IP, however enabled public IP can have empty authorized external networks
* Formatting
* Fix PSA block
---------
Co-authored-by: Julio Castillo <jccb@google.com>
* Add deletion_policy to project-factory module
* Use project deletion_policy in object normalization
* Replicate changes in net-vpc-factory
---------
Co-authored-by: Julio Castillo <jccb@google.com>
This pull request introduces the `net-vpc-factory` module. This new factory handles:
* Project setup (most of what's supported by the `project` module)
* VPC setup
* Routing
* Subnets
* Connectivity options
* NCC (hub, VPC spokes and VPN hybrid spokes)
* Peerings
* VPN (GCP-to-onprem and GCP-to-GCP)
* NAT (everything supported by the `net-cloudnat` module)
* DNS (everything supported by the `dns` module)
* Firewall (everything supported by the `net-vpc-firewall` module)
