Commit Graph

6767 Commits

Author SHA1 Message Date
Julio Castillo
3959bb3974 Fix aprover -> approver (#3540)
* Fix aprover -> approver

* Once again...
2025-11-19 08:50:23 +01:00
Sergey Shcherbakov
844ef0b44f Add optional secondary read pool support to the alloydb module (#3529)
* Add optinal secondary read pool support to the alloydb module

* Fix formatting

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-11-18 23:15:42 +00:00
Matthew Venne
acf2634831 Allow PSC and PSA connections on Cloud SQL (#3539)
* removed variable validation enforcing only psa OR psc connection methods.  using both is a valid and supported pattern.

* Fix README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-11-18 23:46:48 +01:00
Ludovico Magnocavallo
3392953188 prep v49.0.0 2025-11-18 13:51:02 +00:00
Ludovico Magnocavallo
da5726324d Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-18 13:49:13 +00:00
Ludovico Magnocavallo
83ebdbbd2d prep v48.1.0 2025-11-18 13:47:16 +00:00
Ludovico Magnocavallo
932fd82fe2 Drop the 2-secops stage and minimally refactor 3-secops-dev (#3537)
* drop 2-secops and minimally refactor 3-secops

* remove stage 2 tests

* tfdoc
2025-11-18 14:32:06 +01:00
Ludovico Magnocavallo
3d61542367 Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-18 13:11:44 +00:00
Wiktor Niesiobędzki
fca6b09728 Do not cancel terraform tests on tofu failure (#3538) 2025-11-18 14:10:22 +01:00
Ludovico Magnocavallo
8c29512890 Leverage project-level workload identity in FAST CI/CD (#3535)
* Leverage project-level WIF in FAST CI/CD

* add new context namespace, improve outputs, fix tests and inventories

* make YAML linter happy

* README
2025-11-18 10:49:44 +00:00
Ludovico Magnocavallo
0ff2e8c56b Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-17 19:00:17 +00:00
kovagoadam
2567233fb7 Fix egress-policy schema by removing pattern to match the one in ingress-policy schema. (#3533) 2025-11-17 14:56:32 +00:00
Ludovico Magnocavallo
09367404a8 remove log buckets from security stage projects (#3534) 2025-11-17 14:24:58 +00:00
Ludovico Magnocavallo
6035fe89d7 assign service usage roles on iac project to automation service accounts (#3532) 2025-11-17 14:58:57 +01:00
Ludovico Magnocavallo
897c6ef8c3 Add support for Workload Identity to project module and project factory (#3531)
* module-level support

* fast stage 0

* fix inventory, add outputs/tfvars

* wip

* project factory

* pf outputs

* iam templates will be added where ci/cd configs are managed

* fix merge conflicts
2025-11-17 07:31:21 +00:00
Ludovico Magnocavallo
87ed19bc47 Add support for Workforce Identity to organization module and org setup stage (#3530)
* module-level support

* fast stage 0

* fix inventory, add outputs/tfvars
2025-11-17 08:00:30 +01:00
Vannick Trinquier
03521a5780 Prettify yaml controls (#3525) 2025-11-13 14:21:36 +07:00
Ludovico Magnocavallo
5270586a8e fix schema doc tool, fix schema errors, regenerate schema docs (#3524) 2025-11-12 08:50:52 +01:00
Simone Ruffilli
e44b23111e Adds support for custom learned routes to net-vpn-ha (#3523) 2025-11-11 13:55:23 +00:00
Ludovico Magnocavallo
602e1731c9 Replace leftover schema links with actual files (#3522)
* replace schema links with schemas

* vpc-sc stage
2025-11-11 11:57:51 +01:00
Ludovico Magnocavallo
93063aaa9a changelog 2025-11-11 09:16:15 +00:00
Ludovico Magnocavallo
3289a6ff27 prep v48.0.0 2025-11-11 09:13:44 +00:00
Ludovico Magnocavallo
76eec666ea Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-11 09:10:56 +00:00
Ludovico Magnocavallo
0d0e086cfc prep v47.1.0 2025-11-11 08:59:19 +00:00
Ludovico Magnocavallo
525b7be739 module KMS autokey context namespace fixes (#3521) 2025-11-11 08:46:21 +00:00
Vannick Trinquier
1f0940a716 Update yaml controls to match max line-length (#3520)
* Update yaml controls to match max line-length

* Add test for stage 0 with hardened datasets

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-11-11 07:00:49 +00:00
Ludovico Magnocavallo
192788cdb4 Update README.md 2025-11-11 07:40:55 +01:00
apichick
0fd01c6552 Added missing parameters in trigger (#3519) 2025-11-11 06:40:32 +00:00
Ludovico Magnocavallo
fc7aa71ada Add support for KMS key creation to project factory (#3518)
* initial implementation

* context

* tfdoc

* add support for autokey to projects

* fix typo
2025-11-11 07:23:50 +01:00
Vannick Trinquier
15a5486a1e Add hardened controls for gke, networking and monitoring alerts recommended in CIS Benchmarks for GCP (#3484) 2025-11-10 11:06:25 +00:00
Ludovico Magnocavallo
ba77c6170c Allow configuring data access logs from org/folder/project schemas (#3516)
* modules and FAST support

* module tests

* fast stage 0 dataset

* tfdoc
2025-11-10 10:19:21 +00:00
Ludovico Magnocavallo
7e32058010 [WIP] Add support for KMS autokey (#3515)
* wip

* folder module

* project factory schema

* remove spurious project template

* gcs and compute-vm modules

* variable order
2025-11-09 10:46:28 +01:00
Ludovico Magnocavallo
16da9ffaad Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-08 17:07:49 +00:00
Ludovico Magnocavallo
81010a97c0 Rename project and VPC resources in net stage datasets (#3513)
* vpcsc tfvars optional in net

* net project/vpc renames

* fix provider diffs in inventories
2025-11-08 13:38:28 +01:00
Simone Ruffilli
1363d2f765 Sets a default for delete_default_routes_on_create in 2-networking (#3511) 2025-11-07 08:31:45 +00:00
Wiktor Niesiobędzki
b3df16fee8 Add support for ARM based VMs 2025-11-07 08:46:11 +01:00
Wiktor Niesiobędzki
6567d63d92 Add support for hyperdisk performance options 2025-11-07 08:46:11 +01:00
Luca Prete
e25d5881f9 [FAST] fix host project names in sample yaml files in project factory (#3508) 2025-11-06 23:02:20 +01:00
Ludovico Magnocavallo
6f644c886f Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-06 17:20:17 +00:00
Wiktor Niesiobędzki
fb4dfccd17 Another reason not to try 2025-11-06 15:10:30 +01:00
Julio Castillo
002349c35b Allow defining org-level pam_entitlements in 0-org-setup (#3506) 2025-11-05 19:27:59 +01:00
Ludovico Magnocavallo
68c8538fd6 Refactor FAST VPC-SC docs, ensure cooperative VPC-SC resource control works (#3504)
* stage README

* vpc-sc in security stage

* vpc-sc for networking

* vpc-sc for net

* vpc-sc for pf

* vpc-sc for pf

* spelling

* inventory
2025-11-05 13:19:02 +00:00
Wiktor Niesiobędzki
2a03c1b97e Password for initial_user for AlloyDB is now rquired
Details: https://github.com/GoogleCloudPlatform/magic-modules/pull/15596

Note: as of now, validation doesn't allow `known after apply` values for
passwords
2025-11-05 13:08:11 +01:00
Ludovico Magnocavallo
5946433737 prep v47.0.0 2025-11-05 08:28:44 +00:00
Ludovico Magnocavallo
fc538a15cc Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-05 08:26:53 +00:00
Ludovico Magnocavallo
adec737e2a prep v46.1.0 2025-11-05 08:24:06 +00:00
Ludovico Magnocavallo
f4a70aecbd changelog 2025-11-05 06:54:52 +00:00
Ludovico Magnocavallo
a4ff84838a Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-05 06:53:32 +00:00
Ludovico Magnocavallo
8691a1e21d changelog 2025-11-05 06:52:18 +00:00
Ludovico Magnocavallo
f50a78d2da changelog 2025-11-05 06:51:06 +00:00