Commit Graph

2393 Commits

Author SHA1 Message Date
Ludo
4c7ff3381e Merge branch 'master' into fast-dev 2025-05-02 14:39:28 +02:00
Tyler Sommer
e547d4d29c Add deletion_policy to project-factory module (#3060)
* Add deletion_policy to project-factory module

* Use project deletion_policy in object normalization

* Replicate changes in net-vpc-factory

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-04-30 16:10:11 +00:00
Ludo
311f7a5bdf Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-29 14:30:30 +02:00
Ludovico Magnocavallo
2b20654f8c better cert manager examples (#3059) 2025-04-29 12:12:39 +00:00
Luca Prete
763b917b78 [cloud-run-v2] Add ability to control code deployments outside Terraform 2025-04-29 10:32:57 +02:00
Ludovico Magnocavallo
8cba2ba64d default scanning to null (#3056) 2025-04-29 09:54:18 +02:00
Julio Castillo
fdf9191460 New Managed Kafka module (#3054) 2025-04-24 06:52:03 +00:00
Ludovico Magnocavallo
9e6d1030d0 rename dataplex aspects module (#3053) 2025-04-22 13:06:40 +00:00
apichick
a39874413d Updated network config variables in GKE node pool (#3052) 2025-04-21 20:44:39 +02:00
Luca Prete
89d1b5aa8b Add ability to reuse existing projects in project factory (#3051) 2025-04-21 08:57:53 +00:00
Luca Prete
1490b92285 Fix serverless NEG example in net-lb-app-ext (#3049) 2025-04-20 19:17:16 +00:00
Ludovico Magnocavallo
5adba9a018 New Dataplex Aspect Types module (#3050)
* README and tests missing

* default location value

* tested

* READMEs
2025-04-20 11:25:13 +02:00
Ludo
205a43a96f prepare v39.0.0 2025-04-18 17:44:29 +02:00
Ludo
2b0a9db8ed Merge branch 'fast-dev' 2025-04-18 17:34:08 +02:00
Ludo
89e68a8e22 prepare v38.2.0 2025-04-18 17:32:51 +02:00
Ludovico Magnocavallo
177a9ed8bf fix names in project factory automation resources (#3046) 2025-04-18 15:42:45 +02:00
Simone Ruffilli
c6c4cc71d5 Pathexpand all factory data paths (#3033)
* Pathexpand all factory data paths

* fix net monitoring paths

* fix file paths

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-04-16 13:28:10 +02:00
Ludo
4821ac2c07 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-16 12:13:35 +02:00
Luca Prete
ea807a36a5 Add vulnerability scanning to artifact registry module (#3040)
* Add vulnerability scanning to artifact registry module

* make variable nullable = false

* tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
2025-04-14 18:33:35 +02:00
apichick
ff7e7d299c Added recipe HA VPN between AWS and GCP (#3034)
* Added recipe HA VPN between AWS and GCP

* Fix typo

* Update providers to work without credentials

* Add AWS resource to tools/lockfile/main.tf

* Fixed error in recipe docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-04-14 12:47:21 +02:00
Wiktor Niesiobędzki
2d54911415 Use path as keys in project factory 2025-04-11 22:50:50 +02:00
Wiktor Niesiobędzki
086fe2c914 Use path as keys in project factory 2025-04-11 22:30:39 +02:00
Stefano Tribioli
ffe1fbdfea Allow IAP configuration with default IdP
Load balancers can be configured with IAP-enabled backends.
They can either be configured to use external Identity Providers (IdP)
or to use Cloud Identity. The latter is the default and is used when
the OAuth2 parameters are not specified.

The iap_config parameter in the backend_service_configs variable
already supported the external IdP option, but did not support the
default one.
2025-04-11 16:19:17 +00:00
Wiktor Niesiobędzki
dddd42dd07 Apply recent changes to factory-projects-object.tf to vpc-factory 2025-04-11 16:28:33 +02:00
Ludo
594a9695ab Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-11 15:52:37 +02:00
simonebruzzechesse
03db2e45cf secops-rules module (#3023)
* secops-rules module
2025-04-11 15:44:31 +02:00
Simone Ruffilli
3c91acd181 Replace all instances of stackdriver.googleapis.com with log+mon (#3022)
Replace all instances of stackdriver.googleapis.com with logging.googleapis.com  and monitoring.googleapis.com.
Fixes #2932
2025-04-11 12:04:50 +00:00
Wiktor Niesiobędzki
f1a3cac8ca Use factory-projects-object to normalize inputs for project module 2025-04-11 10:53:08 +02:00
Simone Ruffilli
fc84c4f60d Module: net-vpc-factory (#2982)
This pull request introduces the `net-vpc-factory` module. This new factory handles: 

* Project setup (most of what's supported by the `project` module)
* VPC setup
  * Routing
  * Subnets
* Connectivity options
  * NCC (hub, VPC spokes and VPN hybrid spokes)
  * Peerings
  * VPN (GCP-to-onprem and GCP-to-GCP)
* NAT (everything supported by the `net-cloudnat` module)
* DNS (everything supported by the `dns` module)
* Firewall (everything supported by the `net-vpc-firewall` module)
2025-04-10 11:44:39 +02:00
jacklever-hub24
2390124877 Added variable for activating nat and implementation in google_apigee… (#2999)
* Added variable for activating nat and implementation in google_apigee_net_address resource

* Regenerated readme

* Added tests for nat & activation

* Removed unnecessary coalesce

* Fixed test params

* Added test to confirm activate is working
2025-04-08 12:31:33 +00:00
Ludovico Magnocavallo
bdc97a54c7 Properly support org policy tags in resman/project factory (#3014)
* allow setting IAM for org policy tags, add org policy tags to pf context

* allow tag id substitution

* tfdoc
2025-04-08 14:24:46 +02:00
Ludo
7e5c319aeb fix merge 2025-04-07 08:49:28 +02:00
Ludo
5612040209 Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-07 08:47:00 +02:00
Wiktor Niesiobędzki
6d2173aada Ensure vpc_sc has correct type for overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
d63a425b62 Allow same filename in different directories
As long, as they do override default project name using `name`.
2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
4769dc3dd7 Allow null parent and prefix 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
46f731fee0 Use null values for data_overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
ce05505a2c Add type information to project_config attributes 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
6d54ff9a45 Use the same keys in output as in input for projects 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
1c87246583 Use factory-projects-object for project object normalization 2025-04-06 20:17:22 +02:00
Julio Castillo
e04079e334 Add support to attach tags to service accounts (#3008)
* Remove service account key upload. Add create_ignore_already_exists

* Add tag bindings to service accounts

* Add description to create_ignore_already_exists

* Remove broken links
2025-04-04 12:31:19 +00:00
Ludovico Magnocavallo
69188fa9d9 Implement support for VPC-SC perimeter membership from project factory (#3007)
* support project factory-level vpc-sc perimeter interpolation

* fix ro role

* add support for IAM on service accounts

* fix typo
2025-04-04 11:45:22 +00:00
Ludovico Magnocavallo
c8a9cd3edb Update VPC-SC README (#3006)
Fixes #2983
2025-04-04 09:06:26 +02:00
Ludo
728d9aee6e Merge remote-tracking branch 'origin/master' into fast-dev 2025-04-03 19:51:57 +02:00
Ludovico Magnocavallo
dde3c1abf2 Add support for non-destructive tag bindings to compute-vm module (#3004)
* wip

* add support for tag bindings

* tfdoc

* improve example

* tfdoc
2025-04-03 18:20:00 +02:00
Ludovico Magnocavallo
8b774f1fba cross-project serverless neg example (#3003) 2025-04-03 08:53:47 +00:00
Julio Castillo
f656a37c40 Merge branch 'master' into fast-dev 2025-04-02 14:07:33 +02:00
Julio Castillo
0c334a6128 Add roles support to VPC-SC (#3000) 2025-04-02 09:39:04 +02:00
Julio Castillo
bd829e6ba3 Allow disabling GKE IP endpoints and setting GKE VPC scope DNS domain (#2997)
* Allow disabling IP access to GKE control plane

* Add additive VPC scope DNS domain to gke clusters

* Fix typo

* Bump provider to 6.27.0

* Update readme
2025-04-02 07:03:58 +00:00
Tim Hiatt
762841da79 Fr/timhiatt/invoker iam disable (#2994)
* Staging the New Variable change and the flag endablement for 'invoker_iam_disabled' in the 'google_cloud_run_v2_service' resouece associated with the 'cloud-run-v2' module.

* Updating tfdocs to include the new variables for the 'invoker_iam_disabled' flag in the 'google_cloud_run_v2_service' resource in module 'cloud-run-v2'

* Updating the testing in the readme for the cloud-run-v2 module.

* Fixing an issue with links in README.md Docs

* Fixing README.md linting.
2025-04-01 11:41:08 +02:00