Commit Graph

55 Commits

Author SHA1 Message Date
Julio Castillo
c58850c096 Add Hybrid NAT support (#2261)
* Updates to support hybid NAT

* Fix readme

* Fix variable order
2024-05-09 13:24:41 +00:00
simonebruzzechesse
b6771ae7ad fix cloud sql PSA after module upgrade (#2226)
* fix cloud sql PSA after module upgrade
add proxy subnet for ILB
* fix cloud run service accessible from public url in case the service is privately deployed
* add deletion_policy variable in psa_configs for net-vpc module
fix destroy issue with phpIPAM blueprint
2024-04-19 12:41:02 +02:00
Ludovico Magnocavallo
9414779cc2 Allow multiple PSA service providers in net-vpc module (#2218)
* allowing multiple PSA service providers in net-vpc module

* tfdoc

* tfdoc

* Add tfvars/yaml tests

* fix module and tests

* re-enable inventory

* merge fix

* Add multiple PSA test case

* fix cloudsql example

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-04-16 15:02:36 +00:00
Amela Spica
fb4a661f54 VPC module - PSA configurable service producer (#2190)
* added configurable service provider for PSA in VPC module

* fmt

* readme update

* description fix based on PR comment

* readme regenerated
2024-04-02 20:23:25 +02:00
Ludovico Magnocavallo
da68d3cfc4 Add support for PSC network attachments and interfaces in modules (#2125)
* support network attachments in net-vpc module

* support network attachments in net-address module

* fix examples

* fix examples

* add support for psc interfaces to compute-vm module
2024-03-04 10:12:11 +01:00
Simone Ruffilli
ca3c86cb5c Add support for policy based routes to net-vpc (#1926)
* Add support for PBR to net-vpc
2023-12-13 15:19:40 +00:00
Julio Castillo
9ab3b49f69 Add PSA peered domains support to net-vpc (#1741)
* Add PSA peered domains support to `net-vpc`

* Fix tests
2023-10-06 15:31:32 +00:00
Julio Castillo
616c6fbc48 Fix subnet iam_bindings to use arbitrary keys 2023-09-15 14:30:27 +02:00
Julio Castillo
f19ab4872f Embed subnet-level IAM in the variables controlling creation of subnets
This moves the top-level `iam`, `iam_bindings` and
`iam_bindings_additive` variables into subnet-level attributes. This
change also allows setting permissions to PSC or proxy-only subnets

As part of this change, the factory interface is more aligned with the
rest of the modules using a `factories_config` variable. In the future
we can add a cidrs template similar to the firewall policy module
2023-09-15 00:27:55 +02:00
Dave Gulli
5f2bc7fa92 refactored to recommended method 2023-09-12 14:58:49 +10:00
Dave Gulli
adff09aa24 linting error 2023-09-11 20:45:32 +10:00
Dave Gulli
7e0827db53 re-ordered variables per lint error 2023-09-11 20:33:08 +10:00
Dave Gulli
8c264da200 small commits to add variables, append tests 2023-09-11 20:14:17 +10:00
Julio Castillo
a6640e5959 Make net-vpc variables nullable 2023-09-06 09:57:34 +02:00
Ludovico Magnocavallo
819894d2ba IAM interface refactor (#1595)
* IAM modules refactor proposal

* policy

* subheading

* Update 20230816-iam-refactor.md

* log Julio's +1

* data-catalog-policy-tag

* dataproc

* dataproc

* folder

* folder

* folder

* folder

* project

* better filtering in test examples

* project

* folder

* folder

* organization

* fix variable descriptions

* kms

* net-vpc

* dataplex-datascan

* modules/iam-service-account

* modules/source-repository/

* blueprints/cloud-operations/vm-migration/

* blueprints/third-party-solutions/wordpress

* dataplex-datascan

* blueprints/cloud-operations/workload-identity-federation

* blueprints/data-solutions/cloudsql-multiregion/

* blueprints/data-solutions/composer-2

* Update 20230816-iam-refactor.md

* Update 20230816-iam-refactor.md

* capture discussion in architectural doc

* update variable names and refactor proposal

* project

* blueprints first round

* folder

* organization

* data-catalog-policy-tag

* re-enable folder inventory

* project module style fix

* dataproc

* source-repository

* source-repository tests

* dataplex-datascan

* dataplex-datascan tests

* net-vpc

* net-vpc test examples

* iam-service-account

* iam-service-account test examples

* kms

* boilerplate

* tfdoc

* fix module tests

* more blueprint fixes

* fix typo in data blueprints

* incomplete refactor of data platform foundations

* tfdoc

* data platform foundation

* refactor data platform foundation iam locals

* remove redundant example test

* shielded folder fix

* fix typo

* project factory

* project factory outputs

* tfdoc

* test workflow: less verbose tests, fix tf version

* re-enable -vv, shorter traceback, fix action version

* ignore github extension warning, re-enable action version

* fast bootstrap IAM, untested

* bootstrap stage IAM fixes

* stage 0 tests

* fast stage 1

* tenant stage 1

* minor changes to fast stage 0 and 1

* fast security stage

* fast mt stage 0

* fast mt stage 0

* fast pf
2023-08-20 09:44:20 +02:00
Ludovico Magnocavallo
def2f476d1 Add support for conditions to iam_members module variables (#1594)
* project

* data-catalog-policy-tag

* dataproc

* folder

* iam-service-account

* kms

* net-vpc

* organization

* source-repository

* dataplex-datascan
2023-08-15 16:28:23 +02:00
Ludovico Magnocavallo
adf2621727 Add new iam_members variable to IAM additive module interfaces (#1589)
* resource management modules

* data catalog policy

* dataproc

* service account

* kms

* net-vpc

* source repository

* dataplex datascan

* service account module variable order
2023-08-14 09:54:50 +00:00
Ludovico Magnocavallo
aecba0bbd0 Add support for ipv6 to net-vpc module (#1568)
* add support for ipv6

* fix test
2023-08-05 13:07:26 +02:00
Julio Castillo
bbe778e095 Allow custom route descriptions in net-vpc module
Related: #1491
2023-08-04 14:13:03 +02:00
Ludovico Magnocavallo
86cc6eee4c disable googleapi routes creation when vpc is not created (#1489) 2023-07-03 09:10:12 +02:00
Ludovico Magnocavallo
7bd6e5d57b Small fixes (#1425)
* fix serverless connector plugin outputs

* add internal and lb to allowed ingress org policy

* add validation condition on cloud run ingress settings

* tfdoc

* plugin tfdoc

* allow disabling googleapis routes with a single instruction in net-vpc

* fix variable def

* fix variable description

* fix cr variable validation

* fix usage of   create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
Julio Castillo
0888cce3a5 Rename to create_googleapis_routes 2023-05-26 16:43:43 +02:00
Julio Castillo
1e8c58c88e Reuse existing logic to create default routes 2023-05-26 12:01:38 +02:00
Julio Castillo
7a91a7e41c Add default googleapi route creation to net-vpc 2023-05-26 10:55:35 +02:00
Fawzi
3c4254fc1f update firewall_policy_enforcement_order variable 2023-04-11 22:08:41 +10:00
Fawzi
db3c48736c add firewall enforcement variable to VPC 2023-04-10 01:28:12 +10:00
Ludovico Magnocavallo
8a8b7ea35f Add support for iam_additive and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo
29cde275f0 fix backwards compatibility for vpc subnet descriptions (#926) 2022-10-28 08:13:04 +02:00
Ludovico Magnocavallo
41c416b55e make mtu default explicit in variable description 2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo
4fa1dc431d Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Aleksandr Averbukh
62a299a6f5 Deprecate subnets_l7ilb variable, add support for proxy_only and psc subnets. 2022-04-13 16:38:47 +02:00
Aleksandr Averbukh
6ab121a836 Add support for Private Service Connect and Reginal Managed Proxy subnets for net-vpc module 2022-04-12 12:57:33 +02:00
Ludovico Magnocavallo
fef3ed8c93 Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Luca Prete
7c3d9beced [#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Ludovico Magnocavallo
c91802f501 Change psa type in net-vpc, fix psa in fast net stages (#545)
* change psn type in net-vpc, fix psa in fast net stages

* fix doc examples

* psn ---> psa
2022-02-15 09:24:27 +01:00
Simone Ruffilli
abb6b50a46 Add periods at the end of each description field where missing (#478) 2022-01-31 10:45:34 +01:00
Simone Ruffilli
ee25965c89 Copyright bump (#410) 2022-01-01 15:52:31 +01:00
Ludovico Magnocavallo
3758c8f3b0 Improve PSN support in net-vpc module (#384)
* improve PSN support

* fix variable order

* fix example test

* fix cloudsql example
2021-12-09 17:26:37 +01:00
Simone Ruffilli
90718bf134 net-vpc module: added subnet mini-factory 2021-12-06 16:41:08 +01:00
Ludovico Magnocavallo
bf5e1e5b4a add l7ilb subnets to net-vpc module 2021-10-18 09:52:28 +02:00
Julio Castillo
1d13e3e624 Add more validations to linter
- Ensure all variables and outputs are sorted
- Ensure all variables and outputs have a description
- Add data-solutions/data-platform-foundations to linter

Fix all modules to follow these new conventions.
2021-10-08 18:26:04 +02:00
sruffilli
36d253f1d3 DNS Policies in net-vpc module (#238) 2021-05-12 15:02:27 +02:00
Julio Castillo
140378f2f5 Add support for private service connect 2021-04-21 13:55:00 +02:00
Julio Castillo
1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Ludovico Magnocavallo
f611e99e46 add mtu (#170) 2020-11-19 16:48:08 +01:00
Ludovico Magnocavallo
8267252031 rename iam variable in net vpc module 2020-11-05 08:49:29 +01:00
Julio Castillo
7bd31ccf52 Added some basic variable validation 2020-11-03 08:12:11 +01:00
Julio Castillo
c75230adf3 Remove iam_roles from net-vpc 2020-10-30 19:19:40 +01:00
Julio Castillo
db330fe063 Add support for single-sided peerings. 2020-10-12 16:16:24 +02:00
Luca Prete
f2c80e17f1 [#138] Update copyright headers to 2020 (#139)
Co-authored-by: Luca Prete <lucaprete@google.com>
2020-09-23 11:07:03 +02:00