Commit Graph

5521 Commits

Author SHA1 Message Date
Simone Ruffilli
3151b02eda FAST: IAM cleanups to reflect PF changes (#2430)
* FAST: IAM cleanups to reflect PF changes
2024-07-18 14:59:28 +02:00
Wiktor Niesiobędzki
fa3817be6b E2E tests for ncc-spoke-ra 2024-07-13 13:54:34 +02:00
Wiktor Niesiobędzki
c47a76a74e fix Cloud Build E2E test 2024-07-13 13:43:04 +02:00
Wiktor Niesiobędzki
17a08c1fe7 Fix Artifact Registry service account missing 2024-07-13 13:43:04 +02:00
Nathalie
454a30b037 fix cloudbuild service account email (#2421)
The correct format for the service account is documented in
https://cloud.google.com/build/docs/cloud-build-service-account
2024-07-11 15:31:04 +02:00
Aurélien Legrand
78069eeffb Adding support for DWS for GKE nodepools (#2418)
* Adding TPU limits for GKE cluster node auto-provisioning (NAP)

* rework of the cluster autoscaling configuration

* updated README

* adding queued_provisioning (DWS) attribute

* Adding support for DWS for GKE nodepools

* typo

* adding test for DWS

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-07-10 15:18:12 +02:00
Jay Bana
2a2c4a96ce Add support for sqlAssertion AutoDQ rule type in dataplex-datascan (#2416)
* Add sql_assertion rule type to Dataplex AutoDQ data_quality_spec

* Fix broken link to API reference public doc for DQ spec

* Update README.md after linting

* Add example tests for dataplex-datascan

* Bump provider versions

* Bump provider versions everywhere
2024-07-09 21:29:45 +00:00
Julio Castillo
cb9945a83d Allow description to be set for FAST-managed tags (#2417) 2024-07-09 18:55:20 +02:00
Aurélien Legrand
59657415be Adding TPU limits for GKE cluster node auto-provisioning (NAP) (#2406)
* Adding TPU limits for GKE cluster node auto-provisioning (NAP)

* rework of the cluster autoscaling configuration

* updated README

* fixing README

* Update modules/gke-cluster-standard/README.md

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>

* fixing indentation

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-07-09 09:26:30 +00:00
apichick
c81bc84e3a Added certificate_manager_certificates to app load balancers (#2415)
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint

* Added certificate_manager_certificates to app load balancers
2024-07-09 07:36:06 +02:00
Wiktor Niesiobędzki
01904c3397 Fix CFv2 tests 2024-07-08 16:14:21 +02:00
Wiktor Niesiobędzki
1d76bfc3ff Add E2E tests for Cloud Functions and fix perma-diff 2024-07-08 16:14:21 +02:00
Jay Bana
a514ce0ef5 [FAST] Housekeeping in CICD workflow templates and extra stage (#2412)
* Sync GitHub workflow template in assets with rest of the repo

* Remove trailing whitespace in 1-tenant-factory GitHub workflow template

* Update actions/github-script version as per NodeJS deprecation warnings

* Remove redundant Source Repo templates given #2352

* Update gh file content to handle base64 png in line with #2286

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-07-08 14:40:32 +02:00
Ludo
8149e6e669 update changelog 2024-07-08 13:37:04 +02:00
Jay Bana
1aad2c682c Fix IAM bindings to impersonate resman CICD SAs at bootstrap stage (#2411) 2024-07-08 11:58:41 +01:00
Luca Prete
1bd3380a3f Adds support for external SPGs to net-firewall-policy (#2409)
- Added support to reference external SPGs in factories in net-firewall-policy
- Added missing tls_inspect argument to hierarchical and global network firewall policies
- Fixed regional firewall policy rules, removing security profile groups and ngfw actions (given they're not supported)
- Updated copyright
2024-07-06 10:33:09 +00:00
Wiktor Niesiobędzki
afa6e7425c Test different versions of Terraform (#2399)
Add capability to run tests using terraform version 1.5.7 and OpenTofu. 

Automatic checks are run with  Terraform 1.7.4 and OpenTofu 1.7.2, it should be possible to override terraform version when Tests workflow is run manually.
2024-07-05 13:21:41 +02:00
Julio Castillo
45fd48db42 Allow project factory projects to override name (#2407) 2024-07-04 20:14:04 +02:00
Aurélien Legrand
1f07cb72f2 Adding placement_policy for GKE nodepools (ex: GPU compact placement or TPU topology) (#2405)
* Adding placement policy to gke-nodepool module

* Adding placement policy for GKE nodepool

* updated README

* variables for placement_policy

* formatting

* Updated README

* fixing typo

* removing useless trys

---------

Co-authored-by: Aurélien Legrand <legranda@google.com>
2024-07-03 10:21:30 +00:00
Elia
287fee275c Documented new GCVE design options (#2404) 2024-07-02 16:46:55 +02:00
Sudhir
3bb03c99f8 gitlab workflow fixes #2401 (#2402)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-07-01 09:42:54 +00:00
Wiktor Niesiobędzki
e58c1b8892 Add info about roles for connectors service agent 2024-06-30 20:17:50 +02:00
Wiktor Niesiobędzki
22684f49e7 Fix tutorial error.
Without versions override it fails with:
 Error: Failed to query available provider packages
│
│ Could not retrieve the list of available versions for provider hashicorp/kubectl: provider registry registry.terraform.io does not have a provider named registry.terraform.io/hashicorp/kubectl
│
│ All modules should specify their required_providers so that external consumers will get the correct providers when using a module. To see which modules are currently depending on hashicorp/kubectl, run the following command:
│     terraform providers
2024-06-29 08:55:33 +02:00
Julio Castillo
4e8adc9c43 Update modules/artifact-registry with newly-released features. (#2396)
Fixes #2377
2024-06-28 19:52:25 +02:00
Ludovico Magnocavallo
198fa01159 Add support for SSL policy to net-lb-app-int module (#2393) 2024-06-28 09:03:10 +02:00
apichick
1174604efe Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint (#2392) 2024-06-27 19:48:24 +02:00
apichick
00d4673093 Added certificate-manager module (#2387) 2024-06-27 13:05:35 +00:00
Aleksandr Averbukh
85c1b7c156 Add AssuredWorkload support to the folder module (#2390)
* Feat: Add AssuredWorkload support to the folder module

* Formatting

* Use square brackets to access list items

* Docs gen after adding an example to the readme

* Reorder variables

* Formatting

* Reordering outputs, formatting

* Remove try where not needed. Add IAM into the AW example and tests

* Fix tests

* Enable Assured Workloads in E2E tests

* Add compliance_regime and partner enum fields validation

* Rewording validation message for compliance_regime, partner fields

* Sort the list of allowed values alphabetically

* Make the organization dependant on testing environment

* fix tests

* Disable E2E for Assured Workflow example.

This example requires Access Transparency enabled on org level, even
chosing different regime, we need to have `parent` and `organization`
within the same hierarchy, which is not currently the case and requires
more rework of the test framework.

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-06-27 14:28:17 +02:00
Julio Castillo
07e519a8b7 Allow Cloud NAT to only use secondary ranges (#2384)
* Allow Cloud NAT to only use secondary ranges

* Fix secondary_ranges validation

* Fix linter
2024-06-27 08:05:45 +00:00
apichick
73d43b00db Added missing links to firestore module is READMEs. (#2388)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-27 06:54:02 +00:00
Alejandro Leal
99dd335cdf Update tutorial.md 2024-06-27 07:36:19 +02:00
Alejandro Leal
0363e2cb80 Several wording and typos updates
Several wording and typos updates
2024-06-27 07:36:19 +02:00
apichick
00080cd840 Added firestore module (#2374) 2024-06-26 14:18:42 +02:00
apichick
3933a747fe Fixes related to Apigee KMS keys (#2382)
* Fixes related to Apigee KMS keys

* tfdoc

---------

Co-authored-by: Ludo <ludomagno@google.com>
2024-06-26 06:12:26 +00:00
luigi-bitonti
750cff01cd Added private_endpoint_subnetwork parameters to GKE module (#2380) 2024-06-25 16:16:00 +02:00
Diogo Teixeira
08ff3643da Add forward_proxy_uri support (#2370)
Co-authored-by: apichick <mirene@google.com>
2024-06-25 07:50:19 +00:00
Ludovico Magnocavallo
d70cdf8393 add wording for SCC Enterprise to FAST stage 0 (#2378) 2024-06-24 19:03:07 +02:00
apichick
6c54ab69db Removed advertised_groups ALL_VPC_SUBNETS, ALL_VPC_SUBNETS as they are no longer supported (#2376)
Removed advertised_groups ALL_VPC_SUBNETS, ALL_VPC_SUBNETS as they are no longer supported
2024-06-24 07:15:19 +00:00
apichick
6358ba34e0 Minor fixes in workstations IAM (#2375) 2024-06-24 08:59:29 +02:00
apichick
73e286c0ab Added spanner-instance module (#2372) 2024-06-23 17:25:22 +00:00
Dean Sorie
270f61a75a Added expire_time option to the secret-manager module (#2373)
* Added expire_time option to the secret module

* Ran tfdoc to update the readme file

* Fixed a failed test, moved the expire_time variable to the top and ran tfdoc again
2024-06-23 17:20:10 +02:00
Ludovico Magnocavallo
0bb75f3ae1 support build service account in cloud function v2 module (#2371) 2024-06-21 20:19:29 +02:00
Wiktor Niesiobędzki
bf3f2b9367 Add example, tests and fix for Google APIs PSC endpoint (#2369)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-20 12:44:43 +02:00
Sudhir
e84d479741 Fix for plan not in sync when creating billing budgets in project factory #2365 (#2368) 2024-06-20 07:23:20 +02:00
luigi-bitonti
9b095a540e Added additional range field to GKE standand and autopilot (#2366)
* Added additional range field to GKE standand and autopilot

* Bug fix

* Bug fix
2024-06-18 12:17:08 +00:00
Ludo
b83b43b74b update changelog 2024-06-16 09:50:23 +02:00
Ludo
250ea851fd update changelog 2024-06-14 20:33:29 +02:00
Ludovico Magnocavallo
f68e423c48 Relax dataproc master config type (#2364) 2024-06-14 16:19:57 +02:00
Wiktor Niesiobędzki
1f40f2e573 Add support for different endpoint types for Cloud NAT 2024-06-14 15:37:58 +02:00
Ludovico Magnocavallo
d1f7210fa8 strip bucket name from bundle URI (#2362) 2024-06-14 12:31:01 +00:00