jamesdalf
cc5c04f62a
net-vpc module add overlap CIDR subnet attribute ( #2521 )
...
* add subnet allow_subnet_cidr_routes_overlap
* allow_subnet_cidr_routes_overlap default null
* set default null for factory subnets
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2024-08-26 19:48:26 +00:00
Julio Castillo
58bee2a63d
Add pubusb to default jitsi sas ( #2520 )
2024-08-26 19:55:32 +02:00
Artem Bogdantsev
1331e5655b
project-module-cmek ( #2518 )
...
Yet another typo was found
2024-08-23 17:16:17 +00:00
Artem Bogdantsev
38c87debde
project-cmek-smallfix ( #2517 )
...
A nasty typo which causes the module to crash
2024-08-23 18:39:21 +02:00
V0idC0de
548788dba1
fix: Make keys for local.projects consistent ( #2516 )
...
Projects configured in `folders_data_path` have their filename as key, whereas those from `projects_data_path` have their path, relative to `projects_data_path` as key.
This causes different behavior when defining `local.projects` and subsequently calling `module.projects`, unless `name` is specified.
2024-08-23 15:47:51 +00:00
Luca Prete
7f460c425b
Add ca pool object to certification-authority-service module ( #2515 )
2024-08-23 09:43:01 +00:00
Simone Ruffilli
9eafd201dd
Fixes gateway_security_policy in net-swp
2024-08-22 10:25:09 +02:00
Luca Prete
17667ce205
[FAST] Add permissions to nsec-r SA ( #2511 )
2024-08-21 20:26:32 +02:00
okguru1
fe55217887
Add support for disable default snat ( #2508 )
...
* added disable_default_snat variable
* add an option to disable default snat
* tfdoc readme
* change order of variables
* modify variable to exist within vpc_config and have a null default,
creating a conditional dynamic block to provide backward compatability
* defining disable snat variable in autopilot as it is also an option
* fix conditional
* update readme
* null is implied in optional bool
* update readmes
2024-08-21 09:43:27 +00:00
Simone Ruffilli
e82cc35f50
net-swp module cleanup ( #2510 )
...
* net-swp: add support for PSC SA
* Doc updates
2024-08-21 11:28:20 +02:00
Ludovico Magnocavallo
13595f1499
depend network security stage from fast features in resman ( #2509 )
2024-08-21 08:38:43 +02:00
Ludo
3a29fca940
update changelog
2024-08-21 07:45:06 +02:00
Ludovico Magnocavallo
ad5de9b7ea
Refactor FAST project factory and supporting documentation ( #2505 )
...
* untested
* teams pattern
* rework doc
* README
* boierplate
* tflint
* Fix tflint for project factory
* Correct path to pf
* resman changes
* fix factory variable default
* fix links
* project factory module substitutions
* tflint
* stage test
* tfdoc
* rename schema, address review comments
* README typos and wording
* tfdoc
* review comments
* remove test from yaml
* revert output workflow changes
* fix sa reference errors
* tfdoc
* pf tag roles
* schema validation
* pf tag roles
* avoid null values in pf context
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-08-20 16:45:42 +00:00
arnodasilva
dff209f565
fix(modules/kms): use the google_tags_location_tag_binding Terraform resource to bind tags on KMS key rings ( #2501 )
2024-08-20 05:43:18 +00:00
Julio Castillo
0420dec32f
Add deletion_policy to project module ( #2502 )
...
* Replace skip_delete with deletion_policy
* Fix blueprints
* Update apigee blueprint readme
* Remove skip_delete from test inventories
2024-08-16 18:33:39 +02:00
Cooper van Wijck
3cf8889967
Add name overrides for Internal and External Load Balancers ( #2420 )
...
* Add override_name optional variable
* Add override name optional variable
* Allow override for each forwarding rule
* Add optional override_name variable to forwarding_rules_config
* Remove duplicate (unused) variable override_name
* Add optional override_name variable for network peering
* Add optional override_name variable for network peering
* Formatting
* Update VPN tunnel interface name handling for override
* Update bgp peer handling for override
* Added renaming for both sides of peering
* Fix precondition
* Remove spurious folders
* Apply suggestions to peering module
* Use coalesce and name (instead of override_name)
* remove unneeded null
* Revert windows style slashes in readme
* Fix more null checks
* Fix unneeded null checks in net-lb-int
* Change override_name back to name in the rest of the locations, bgppeer, tunnel and interface names
* Fix linter
* Update READMEs
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: unknown <jack@JACK-PC.lfn.arpa >
Co-authored-by: jacklever-hub24 <jack.lever@hub24.com.au >
Co-authored-by: Julio Castillo <jccb@google.com >
2024-08-16 08:45:29 +02:00
Ludovico Magnocavallo
d8a5c42b82
firewall policy module schema ( #2499 )
2024-08-11 10:12:03 +02:00
Ludo
cfd30745e4
update changelog
2024-08-10 19:00:57 +02:00
Ludovico Magnocavallo
7be042c706
dns rpz factory schema ( #2498 )
2024-08-10 17:19:28 +02:00
Ludovico Magnocavallo
3efb368b6c
net vpc firewall factory schema ( #2497 )
2024-08-10 15:04:50 +02:00
Luca Prete
f15442d2f4
[fix] certificate authority service returning bad pool id ( #2496 )
2024-08-09 18:20:53 +02:00
Luca Prete
d415aaf84b
[fix] Fixes errors in certificate-authority-service module ( #2493 )
2024-08-09 14:58:53 +00:00
Nathalie
d5210d599f
ensure dns_keys output freshness ( #2495 )
...
Co-authored-by: Julio Castillo <jccb@google.com >
2024-08-09 14:33:54 +00:00
Ludovico Magnocavallo
db044296e1
Additional module schemas ( #2494 )
...
* resman modules
* billing account
* net-vpc subnets
* fast schemas and subnet validation
2024-08-09 13:58:05 +00:00
Julio Castillo
6c42ac00ab
rename step
2024-08-09 15:43:11 +02:00
Julio Castillo
73fd175070
fix yaml again
2024-08-09 15:43:11 +02:00
Julio Castillo
9903c20ed9
Fix yaml
2024-08-09 15:43:11 +02:00
Julio Castillo
bb1dc40f77
Fix yaml syntax
2024-08-09 15:43:11 +02:00
Julio Castillo
714b97598f
Add schema testing to PR workflow
2024-08-09 15:43:11 +02:00
Ludo
d9bec5be54
update changelog
2024-08-09 14:49:09 +02:00
Ludovico Magnocavallo
4a61dba841
organization module factory schemas ( #2491 )
2024-08-09 10:22:57 +00:00
Wiktor Niesiobędzki
70bd037629
Add IAM member prefix validation to variables.tf
2024-08-09 12:08:22 +02:00
Wiktor Niesiobędzki
c27f634314
Bind schemas to factory files, add support for groups in VPC-SC schema
...
https://cloud.google.com/vpc-service-controls/docs/release-notes#July_31_2024
2024-08-09 12:08:22 +02:00
Julio Castillo
f1607f68a9
Extend test collector to include yaml files under tests/schemas/ and fast data files ( #2489 )
...
* Extend test collector to include yaml files in tests/schemas/
* Silence linter
* Simplify yaml schema test names
* Vaidate FAST data files schema
2024-08-09 10:59:00 +02:00
Julio Castillo
9386764f66
Introduce YAML schema validation for YAML examples ( #2488 )
...
* Add schema key to yaml examples
* Update testing requirements
2024-08-08 23:09:22 +02:00
Ludo
04c2f90351
update changelog
2024-08-08 22:43:49 +02:00
Julio Castillo
d2d345d428
example testing improvements ( #2487 )
...
* Move away from regexps to parse tftest directives
* Update tfdoc
* Use namedtuple
* Make modules and resources optional in tftest directive
* Move get_tftest_directive to a separate file
* Fix imports
* Fix e2e tests
2024-08-08 21:22:27 +02:00
Wiktor Niesiobędzki
251339de6e
Fix failing tests for CloudSQL
2024-08-08 20:16:52 +02:00
Ludovico Magnocavallo
c5fcbbfca8
Project factory module JSON schemas ( #2485 )
...
* folder and project schemas
* budget schema
2024-08-08 18:43:11 +02:00
Julio Castillo
bda83ea0ef
Add boostrap output with log destination ids ( #2483 )
...
* Add boostrap output with log destination ids
* Update readme
2024-08-08 16:23:37 +02:00
Luca Prete
cb2add1718
[FAST] Rename netsec stage to nsec ( #2482 )
2024-08-08 12:30:09 +00:00
Luca Prete
092053b517
Adds a new certification authority service (CAS) module ( #2481 )
2024-08-08 09:55:48 +02:00
Julio Castillo
9880c0b64d
Add support for PSC global access to net-address ( #2480 )
...
* Add support for PSC global access to net-address
Fixes #2479
* Fix example formatting
2024-08-07 17:27:03 +00:00
Ludovico Magnocavallo
db7cb937d1
VPC-SC factory JSON Schemas ( #2477 )
2024-08-07 12:09:37 +00:00
Luca Prete
951daad210
Pass optional location variable at certificates creation ( #2474 )
...
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2024-08-07 07:05:57 +00:00
apichick
110318a51d
Cloud run v2 custom audiences ( #2476 )
...
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint
* Added custom audiences to Cloud Run v2 module
2024-08-07 08:54:36 +02:00
apichick
0b66f61909
Cloud run v2 output uri ( #2475 )
...
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint
* Added service URI as output to Cloud Run service
2024-08-06 20:09:19 +00:00
Julio Castillo
743d3eb1ae
Fix grammar in net-vpc-peering preconditions ( #2472 )
2024-08-06 14:27:31 +02:00
Julio Castillo
912cbb8281
Rename 1-vpc-sc stage to 1-vpcsc ( #2471 )
...
* Rename 1-vpc-sc stage to 1-vpcsc
* Fix tests
2024-08-06 11:21:55 +00:00
Wiktor Niesiobędzki
2758eee4ff
Fix inventories for Cloud SQL
2024-08-06 11:49:29 +02:00
