Commit Graph

2815 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
a4eb4d24fd Compute VM module refactor (#3805)
* add ad for compute-vm refactor

* Exclue nic_type from validated fields, add split of main.tf and template.tf

* boot disk

* fix examples and fixtures

* attached disks

* fix further examples and module-level tests

* remove extra file

* fix mig examples

* finish refactoring variables

* align fast and other modules

* refactor(compute-vm): align examples and ADR with the newly implemented interface

This commit addresses the remaining references of the `instance_type` and `confidential_compute` parameters in the testing environment and updates the ADR.

* feat(compute-vm): add network_performance_config to instance and templates

This change implements the usage of the `network_performance_tier` variable we added earlier into the actual Terraform resources.

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2026-03-26 11:31:40 +00:00
Josh Myers
2c39df6453 Fix Logging folder settings folder (#3811)
* Fix: google_logging_folder_settings takes a folder number not folder id

* chore(project-factory): Conditionally pass through logging_settings

Only pass through logging_settings to the folder module if any of the following are true:

- logging.storage_location      is not null
- logging.disable_default_sink  is not null
- logging.kms_key_name          is not null

Else we are triggering [1] when we don't want to.

[1] https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/folder/logging.tf#L59-L69
2026-03-26 05:56:08 +00:00
Luca Prete
e33f2ba52d [#3806] Fix Agent Engine class methods: update variable to optional(string) (#3808) 2026-03-25 11:02:19 +01:00
Taneli Leppä
9592b5558b Clarify documentation wrt. backend service vs backend (#3804)
* Clarify documentation wrt. backend service vs backend

* Fix links
2026-03-19 14:50:39 +01:00
jnahelou
78e00682f8 Ignored condition attribute in IAM tag bindings within the organisation/project modules (#3762)
* fix(modules/organization): conditions ignored in tags

* fix(modules/project): conditions ignored in tags

* fix(modules/project): Tags:1 test skipped due to bad markdown block

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-03-18 17:12:46 +00:00
Andrea382
1a23853a2c Alloydb module: enable 1-72 vcpu for C4A (#3799)
* fix(alloydb): allow 1 vCPU in machine_config validation

* fix(alloydb): allow 72 vCPU in machine_config validation and cross_region_replication

* fix(alloydb): allow 1 and 72 vCPU in Read Pool. Run terraform -fmt

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-03-18 13:35:35 +00:00
Vannick Trinquier
38e885a47c Add support of organizational based service agents in VPC-SC stage (#3802) 2026-03-18 16:08:08 +07:00
Wiktor Niesiobędzki
36b58781ed Use e2-micro instead of f1-micro as default 2026-03-17 14:46:52 +01:00
David Ferguson
ea4469e19c Add support for cipher suite configuration on net-vpn-* modules (#3790) 2026-03-17 09:39:07 +01:00
Samuele Perticarari
bd87710eea feat: Add new compliance regime options for Assured Workloads (#3794)
* feat: Add new compliance regime options to folder schemas for assured workloads configurations.

* terraform fmt

* Update Folder README with `tools/tfdoc.py` tool
2026-03-16 17:59:25 +00:00
Simone Ruffilli
1caeacec20 Support for net-vlan-attachments in 2-networking (#3789) 2026-03-16 15:03:14 +01:00
Suryansh Singhal
761399f055 Allow compute-vm disks to have custom names (#3792)
* module support custom name if provided instead of just {vm_name}-boot

* updated readme.md
2026-03-16 11:22:34 +00:00
Simone Ruffilli
5bb0862638 Add context support to vlan-attachments (#3787) 2026-03-13 08:12:04 +01:00
Wiktor Niesiobędzki
7c3b08b1d1 Fix Cloud SQL E2E test 2026-03-12 11:10:25 +01:00
Ludovico Magnocavallo
a6c284a273 Add context support to artifact-registry, net-lb-app-int, cloudsql modules (#3784)
* artifact-registry

* net-lb-app-int

* copyright

* cloudsql

* fix linting
2026-03-11 12:35:09 +01:00
Nathan McGuirt
8c07d09eab Fix typo in example (#3783)
Update key to match the one used in the asset_search block
2026-03-06 10:47:48 +00:00
Ludovico Magnocavallo
dd95efc53e prep v54.0.0 2026-03-05 11:11:25 +00:00
Ludovico Magnocavallo
a935ab6643 Merge remote-tracking branch 'origin/master' into fast-dev 2026-03-05 11:08:38 +00:00
Ludovico Magnocavallo
e282f4bb4f prep v53.1.0 2026-03-05 10:55:44 +00:00
Daniel Chan
27b43b7c75 fix(cloudsql): always render backup_configuration block to allow disabling backups (#3780)
* fix(cloudsql): always render backup_configuration block to allow disabling backups

* refactor(cloudsql): use nullable backup_configuration variable for explicit don't-manage semantics

* fix(cloudsql): force point_in_time_recovery_enabled=false when backups disabled

* fix(cloudsql): guard binary_log_enabled and point_in_time_recovery_enabled when backups disabled

* formatting

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-03-05 10:12:10 +00:00
Ludovico Magnocavallo
7a5664f475 Additional changes to folder module and project factory (#3782)
* allow null name, use basepath for factories in pf folders

* fix id in folder schema
2026-03-05 09:32:35 +00:00
Rob Rankin
da85eda9b7 Add Cilium Clusterwide Network Policy and FQDN Network Policy for Autopilot Clusters (#3778)
* Add Cilium Clusterwide Network Policy and FQDN Network Policy

* Update README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-03-04 11:59:37 +01:00
Ludovico Magnocavallo
f794d764e9 Support additional dns_access attributes in GKE cluster modules (#3781) 2026-03-04 11:06:48 +01:00
Ludovico Magnocavallo
0be09646b0 Add missing folder features to project factory and align logging across folder/org modules (#3779) 2026-03-04 10:28:48 +01:00
Ludovico Magnocavallo
1e8603192c Allow reusing IAM binding key across objects in kms module (#3775)
* allow reusing IAM binding key across objects in kms module

* fix inventory
2026-03-02 08:06:37 +01:00
Cooper van Wijck
d9d0ce9002 fix(net-lb-app-ext-regional): use list(string) for route_rules cors_policy attributes (#3776)
* Update CORS policy in urlmap_config to use lists for allow_headers, allow_methods, and expose_headers

* Update README.md to clarify urlmap_config structure and options for load balancer configuration
2026-03-02 06:28:02 +00:00
Ludovico Magnocavallo
dc5a6052be Allow specifying cloudrun target without service name in net-lb-app-int module (#3771)
* Allow specifying cloudrun target without service name in net-lb-app-int neg_config

* add deprecation comment
2026-02-27 15:43:46 +01:00
Ludovico Magnocavallo
c20fe4871a Add support for regional health checks to net-lb-int module (#3770) 2026-02-27 10:32:18 +01:00
Ludovico Magnocavallo
6ec1d8f504 Support hyperdisk-balanced options on gke-nodepool module (#3767) 2026-02-25 15:10:29 +00:00
Ludovico Magnocavallo
00796b73ba Support TLS settings in app load balancer modules (#3766) 2026-02-25 14:49:37 +00:00
Ludovico Magnocavallo
6494939348 Fix support for credit types in billing module budgets (#3765)
* fix billing budgets

* tfdoc
2026-02-25 15:31:35 +01:00
Simon Roberts
81b70695ac Add parameter to modules/pubsub to support message_storage_policy.enforce_in_transit (#3761)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-02-24 17:58:43 +01:00
apichick
9d35f19ecb Fixed psc connection id in net-address module output (#3763) 2026-02-24 17:31:57 +01:00
Simon Roberts
6708731d6d Bugfix/maintenance exclusion (#3759)
* Fix default maintenance_config.maintenance_exclusions in GKE.

* tfdoc
2026-02-23 11:26:38 +00:00
kovagoadam
738e638bbe Added custom prefix support for automation SA (#3757) 2026-02-21 09:54:01 +01:00
Wiktor Niesiobędzki
a1474b2b0a Fix example for snapshot schedules 2026-02-20 14:43:23 +00:00
Ludovico Magnocavallo
67b1543e90 Support additional attributes for buckets/datasets in project factory module (#3755)
* extend attributes for project factory secondary resources

* remove extra files

* complete

* tf fmt

* tfdoc

* schemas

* fix tests

* tfdoc
2026-02-20 11:57:59 +00:00
Ludovico Magnocavallo
e58c6dd3d1 Fix regional resource policy attachment in compute-vm module (#3753)
* fix regional resource policy attachment in compute-vm module

* tfdoc
2026-02-19 10:27:04 +00:00
Luca Prete
1ba20addf6 Fix project factory service agents outputs from iamEmail to iam_email 2026-02-19 09:42:02 +00:00
Luca Prete
90d7ffc703 [project-factory] Add service_agent outputs (#3750) 2026-02-19 09:08:16 +00:00
dependabot[bot]
8b85bd33b8 Bump ajv in /modules/api-gateway/recipe-multi-region/function (#3749)
Bumps [ajv](https://github.com/ajv-validator/ajv) from 8.17.1 to 8.18.0.
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 8.18.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 09:48:02 +01:00
Martin Bergo
60ec6db9cd docs(organization): document external IAM management for logging sinks at scale (#3746)
* docs(organization): document external IAM management for logging sinks at scale

* Update TOC

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-02-18 15:08:23 +00:00
Christian Bönning
702075fec6 Allow specifying "network_tier" for Compute Engine VM Templates (#3741)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-02-16 16:50:00 +01:00
Wiktor Niesiobędzki
74516529cb Fix permadiff on E2E test 2026-02-16 13:45:38 +01:00
dependabot[bot]
f85bccd33d Bump qs in /modules/api-gateway/recipe-multi-region/function (#3737)
Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-16 09:53:49 +01:00
Ludovico Magnocavallo
26e622edae prep v53.0.0 2026-02-12 09:12:54 +00:00
Ludovico Magnocavallo
079aac1f88 Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-12 09:07:04 +00:00
Ludovico Magnocavallo
5765b11a87 prep v52.1.0 2026-02-12 09:01:26 +00:00
Ashley Abbott
c09a5d3e24 feat: pass variable for additive by principal (#3731)
* feat: pass variable for additive by principal

* fix reference
2026-02-12 08:53:30 +00:00
Ludovico Magnocavallo
fb21f6aaf8 Change factories_config type in FAST and project/vpc factory modules, add YAML schema validation (#3728)
* stage 0

* stage 1

* networking

* security

* pf stage

* tfdoc

* align schemas

* inventory

* fix observability

* pf module

* pf module budgets

* align fast stages

* align project subfactories

* tfdoc

* schema validation

* add missing schemas

* Fix observability types

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2026-02-11 15:29:49 +00:00