Ludo
a6b0540c38
merge fast-dev
2024-11-22 16:02:23 +01:00
Ludo
c97b6192f5
prepare v35.1.0
2024-11-22 15:54:25 +01:00
Julio Castillo
8714b7a713
Merge branch 'master' into fast-dev
2024-11-18 15:19:55 +01:00
Julio Castillo
c60d152f4a
Add hierarchical namespace support to GCS module ( #2712 )
...
* Add hierarchical namespace support to GCS module
* remove empty iap block from inventories
* Fix tests
* Add new hns inventory
---------
Co-authored-by: Ludo <ludomagno@google.com >
2024-11-18 11:41:49 +00:00
Ludo
0d3cbfd912
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-05 12:37:34 +01:00
Julio Castillo
5daba7fa03
Update service agents spec
2024-11-05 12:10:23 +01:00
Ludo
78f4e5c98d
boilerplate for v36.0.0-rc1
2024-10-31 17:52:09 +01:00
Ludovico Magnocavallo
50ac3a5013
Refactor of FAST resource management and subsequent stages ( #2648 )
...
* untested
* pllan testing
* fix stage 2s
* move providers to their own file
* single-environment stage 3
* fixes and moved blocks
* stage3 factory
* doc
* review comments
* review comments
* tfdoc
* fasts tage 1 tests
* netsec as stage 2
* fix backported roles
* fix backported roles
* tfdoc
* fixes
* fix tag value roles in stage 1
* remove checklist, fix stage 1 tests
* inventory
* Small bugfix
* refactor context tag values
* fix previous merge
* fix previous merge
* fix previous merge
* support short names for top level automation resources, change top level context variable
* fix new top level context
* roll back merge changes to stage 0 outputs
* roll back more merge changes
* linting errors
* tfdoc
* fix tests, roll back merge in tenants stage
* tfdoc
* fix inventory
* optional stage 2 env folders and tag bindings
* tflint
* damn tflint
* damn tflint
* tfdoc
* fix networking tests
* tflint
* fix test inventories
* tfdoc
* use coalesce for project parents
* fix billing role conditions
* fix billing role conditions
* security stage tested (ngw resources need fixing/porting)
* boilerplate
* fix inventory
* stage envs and stage linking script
* initial work on resman docs, update diagram, improve teams folder
* resman README
* fix stage 2 IAM delegation
* remove checklist from bootstrap
* stage 1 tests
* stage 0 1 and 2 tests
* tflint
* tflint
* tfdoc
* GCVE stage refactor (untested)
* GCVE stage refactor (untested)
* GCVE stage 3
* gcve tests
* tflint
* tfdoc
* fix links
* module tests
* stages README
* move network security to stage 2
* network security tests
* replace stage links in README files
* minimal netsec stage refactor
* use factory for iac org policies, add configurable drs org policy for iac
* test mt stage
* tfdoc
* fix cicd workflows
* fix cicd workflows
* gke-dev stage
* tflint
* remove data platform stage
* exclude provider files via tfdoc opts
* remove data platform tests and links
* fix merge
* fix resman inventory
* boilerplate
* inventory
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-10-31 16:55:54 +01:00
Wiktor Niesiobędzki
8b7607af63
Codespell / whitespace fixes
2024-10-30 10:30:37 +01:00
Artem Bogdantsev
4bacbf5748
Project Module CMEK: added CloudRun ( #2587 )
...
Added CloudRun to the list so that CloudRun service agent gets encryptor/decryptor role on CMEK
2024-09-20 08:30:06 +00:00
Simone Ruffilli
7f8a02a405
Add support for google provider 6.x ( #2536 )
...
* Add support for google provider 6.x
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2024-09-05 10:35:58 +00:00
Julio Castillo
ba3e1be416
Bump provider to 5.43.1 ahead of next release ( #2557 )
2024-09-04 19:58:07 +02:00
Wiktor Niesiobędzki
44a4268afc
Fix E2E tests
2024-09-04 12:16:50 +02:00
Wiktor Niesiobędzki
e1c1ed3a23
Add IAM dependencies to outputs
2024-09-04 12:16:50 +02:00
Ludovico Magnocavallo
eb89c62b5f
prepare v34.0.0 release ( #2543 )
2024-08-30 10:06:33 +02:00
Julio Castillo
d4e727a482
Update stable provider too ( #2531 )
2024-08-28 08:49:46 +02:00
Julio Castillo
bab85c88ba
Bump provider to last release of version 5 ( #2525 )
...
* Bump provider to last release of version 5
* Remove default-versions copy in test env setup
* Use file instead of symlink in tools/lookfile
* Remove default-version reference
* Removed unused code
2024-08-27 16:50:59 +02:00
Artem Bogdantsev
1331e5655b
project-module-cmek ( #2518 )
...
Yet another typo was found
2024-08-23 17:16:17 +00:00
Artem Bogdantsev
38c87debde
project-cmek-smallfix ( #2517 )
...
A nasty typo which causes the module to crash
2024-08-23 18:39:21 +02:00
Julio Castillo
0420dec32f
Add deletion_policy to project module ( #2502 )
...
* Replace skip_delete with deletion_policy
* Fix blueprints
* Update apigee blueprint readme
* Remove skip_delete from test inventories
2024-08-16 18:33:39 +02:00
Ludovico Magnocavallo
db044296e1
Additional module schemas ( #2494 )
...
* resman modules
* billing account
* net-vpc subnets
* fast schemas and subnet validation
2024-08-09 13:58:05 +00:00
Ludovico Magnocavallo
4a61dba841
organization module factory schemas ( #2491 )
2024-08-09 10:22:57 +00:00
Wiktor Niesiobędzki
1daf344fe9
Bump provider version to 5.40, to resolve perma-diff with Cloud SQL instance
2024-08-06 11:49:29 +02:00
Wiktor Niesiobędzki
d395e9490d
Fix quotas E2E tests
2024-08-06 11:49:29 +02:00
Julio Castillo
1bbff3cc3a
Add support for dry-run org policies ( #2454 )
2024-07-30 13:12:57 +00:00
Julio Castillo
3237764e74
Add moved blocks for the service networking service agent and IAM ( #2449 )
2024-07-25 12:01:21 +00:00
Julio Castillo
cf6b6dd645
Override primary flag for the storage transfer service agent ( #2445 )
2024-07-24 14:12:55 +00:00
Ludovico Magnocavallo
64b403860e
Project service agents moved block and enabled services ( #2443 )
...
* moved block for jit service agents
* allow passing in enabled services to service agent config
2024-07-24 12:02:53 +00:00
Julio Castillo
c0bf32e797
Refactor service agent management ( #2423 )
...
* Service agents script
* Service agents update
* WIP
* Update script and terraform
* Fix tests
* Fix linter
* Update docs
* Bring back pf example inventory
* Fix tests
* Fix more tests
* Fix tests
* Use dataclasses for build_service_agents.py
* Remove unneeded field() from build_service_agents
* Re-enable CMEK depends_on in project outputs
* Update tools/requirements.txt
* Enable storage in GCS example projects
* Fix tests
* Add CMEK Service Agents dependencies for services
* Fix typos and data platform cmek
* More typos
2024-07-23 22:05:38 +02:00
Ludovico Magnocavallo
99ab796c72
Allow disabling topic creation in GCS module notification ( #2436 )
...
* allow disabling topic creation in GCS module notification
* use proper topic name
2024-07-22 10:51:25 +00:00
Nathalie
454a30b037
fix cloudbuild service account email ( #2421 )
...
The correct format for the service account is documented in
https://cloud.google.com/build/docs/cloud-build-service-account
2024-07-11 15:31:04 +02:00
Jay Bana
2a2c4a96ce
Add support for sqlAssertion AutoDQ rule type in dataplex-datascan ( #2416 )
...
* Add sql_assertion rule type to Dataplex AutoDQ data_quality_spec
* Fix broken link to API reference public doc for DQ spec
* Update README.md after linting
* Add example tests for dataplex-datascan
* Bump provider versions
* Bump provider versions everywhere
2024-07-09 21:29:45 +00:00
Wiktor Niesiobędzki
e58c1b8892
Add info about roles for connectors service agent
2024-06-30 20:17:50 +02:00
apichick
73e286c0ab
Added spanner-instance module ( #2372 )
2024-06-23 17:25:22 +00:00
Ludovico Magnocavallo
41e583ffc9
add network tags outputs and examples to project module ( #2350 )
2024-06-09 07:52:15 +02:00
simonebruzzechesse
1969b02ed8
Alloydb add support for psc ( #2341 )
...
* alloydb add support for psc
* add tag binding support
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-06-05 13:39:03 +02:00
Ludovico Magnocavallo
dc686c3a84
Remove default location from gcs module ( #2303 )
...
* gcs module
* blueprints/apigee/bigquery-analytics
* tfdoc
* pubsub README md syntax
2024-05-24 07:02:33 +00:00
Simone Ruffilli
d3ffcc2b1c
Disable reserved_internal_range in net-vpc due to provider bug ( #2282 )
2024-05-15 05:46:18 +00:00
Simone Ruffilli
9a26fe8635
Add support for reserved_internal_range in net-vpc ( #2275 )
...
Adds support for reserved_internal_range to net-vpc
2024-05-14 22:19:45 +03:00
Ludovico Magnocavallo
e4941c27f2
Implement the full IAM interface for tags ( #2269 )
...
* IAM authoritative bindings in org module
* remove extra newline
* organization module
* project module
* tfdoc
2024-05-13 20:18:51 +02:00
jnahelou
e1226676fd
Added missing identity when connectors API is enabled ( #2248 )
2024-04-30 17:21:35 +00:00
apichick
ab174274de
Added new attributes Apigee organization and bumped up providers version ( #2243 )
2024-04-28 17:31:42 +02:00
Ludovico Magnocavallo
309792c559
Refactor vpc-sc support in project module, add support for dry run ( #2229 )
2024-04-22 09:28:01 +02:00
Julio Castillo
3af7e257d2
Add tflint to pipelines ( #2220 )
...
* Fix terraform_deprecated_index
https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md
* Fix terraform_deprecated_interpolation
Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md
* Fix more indexing
* Remove unused variable
* Enable TFLint for modules
* Add tflint config file
* Fix chdir
* Lint modules
* TFLint fixes
* TFLint
* Fixes binauthz README
* Fixes DNS response policy tests. Restores MIG outputs.
* Fixes other DNS response policy tests.
* Update tests for fast 2-e
* Moar fixed tests
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-04-17 10:23:48 +02:00
Wiktor Niesiobędzki
825bfca66d
Document how to get quota_ids
2024-04-11 11:51:19 +02:00
Wiktor Niesiobędzki
a236222a93
Add project quotas factory
2024-04-11 11:51:19 +02:00
Ludovico Magnocavallo
9cace5272f
Add support for quotas to project module ( #2210 )
...
* add support for quotas to project module
* tfdoc
* better outputs
* Ensure keys in `quota_configs` are unique
* update fast tests
* Make quota E2E testable
* Remove quota project caveat
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-04-10 17:03:04 +00:00
Tone
2831af09fa
feat(gke-cluster-standard): Add optional CiliumClusterWideNetworkPolicy ( #2207 )
...
* feat(gke-cluster-standard): Add optionnal `CiliumClusterWideNetworkPolicy`
Add `CiliumClusterWideNetworkPolicy` option on cluster.
Ref:
- https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#enable_cilium_clusterwide_network_policy
- https://cloud.google.com/kubernetes-engine/docs/how-to/configure-cilium-network-policy
* feat(gke-cluster-standard): Update Google provider to manage new feature
* feat(gke-cluster-standard): Move `cilium_clusterwide_network_policy` to `enable_features` field
* fix(scheduled-asset-inventory-export-bq): Set `dataset_id` with underscores
* fix(bigquery-dataset): Set `dataset_id` with underscores
2024-04-09 17:08:36 +02:00
Wiktor Niesiobędzki
f2806f347b
Bump provider version to 5.18, so fix non-empty plan for google_notebooks_instance
2024-03-25 19:57:14 +01:00
Ludovico Magnocavallo
5ac86ecae7
Support advanced_datapath_observability in gke cluster standard module ( #2168 )
...
* support advanced_datapath_observability in gke cluster standard module
* bump provider to 5.17.0
2024-03-22 08:25:43 +01:00