Julio Castillo
cff8a25c59
Introduce iam_by_principals_conditional ( #3649 )
...
* Introduce iam_by_principals_conditional
* Add iam_by_principals_conditional to project factory
* Update IAM ADR
* Update project factory readme
* Sync FAST schemas
* Update organization schema
* Add resman tests for iam_by_principals_conditional
* Update PF project-defaults.tf
* Update copyright
2026-01-14 11:16:07 +00:00
Ludovico Magnocavallo
032db2f902
expose bigquery kms in project schema ( #3645 )
2026-01-13 10:30:19 +01:00
Ludovico Magnocavallo
fedf90d25f
Add support for pubsub to project factory ( #3608 )
...
* add support for pubsub to project factory
* remove duplicate data access log definitions from folders
* tfdoc
* schemas
* fix example
* add pubsub topics context to org in stage 0
2025-12-23 10:24:33 +00:00
Ludovico Magnocavallo
ab0f55216a
Add support for descriptive name to projects ( #3591 )
...
* add support for descriptive name to projects
* boilerplate
* fmt
2025-12-12 09:06:47 +01:00
Ludovico Magnocavallo
7c05299540
Implement additional GCS attributes in project factory ( #3583 )
...
* implement additional bucket attributes in project factory
* update FAST schemas
* fmt/tfdoc
2025-12-10 16:12:58 +01:00
Ludovico Magnocavallo
897c6ef8c3
Add support for Workload Identity to project module and project factory ( #3531 )
...
* module-level support
* fast stage 0
* fix inventory, add outputs/tfvars
* wip
* project factory
* pf outputs
* iam templates will be added where ci/cd configs are managed
* fix merge conflicts
2025-11-17 07:31:21 +00:00
Ludovico Magnocavallo
5270586a8e
fix schema doc tool, fix schema errors, regenerate schema docs ( #3524 )
2025-11-12 08:50:52 +01:00
Ludovico Magnocavallo
ec09414823
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 13:58:44 +00:00
Julio Castillo
48f6b4cd49
Add PAM support ( #3438 )
...
* PAM first pass
* Add factory and extend to organization
* Extend to project, add examples
* Add additionalProperties to all objects
* Fix boilerplate
* Expose pam_entitlements to project-factory
* Fix readme
* Move entitlements to second folder/project pass
* extend tests
* Fix readme
* Remove timeouts from inventories
2025-10-20 12:50:37 +00:00
Ludovico Magnocavallo
5e05044306
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
4113da128b
Support resource-level factories config in project factory module and FAST stages ( #3440 )
...
* support resource-level factories in project factory module
* align folder and project schemas across modules and fast
* schema docs
2025-10-18 10:41:19 +00:00
kovagoadam
84a258e247
Add retention support for project-factory buckets ( #3417 )
...
* Added retention support for project-factory buckets
* Cleanup
* Added retention_policy to project.schema.md in PF stage
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-17 10:30:20 +00:00
kovagoadam
505ee02fef
Add support for billing export in 0-org-setup ( #3347 )
...
* Add support for billing export in 0-org-setup
* Merge branch 'master' into add-billing-export-support
* Refactored billing export with adding support for bigquery_datasets in project_factory
* Renamed bigquery_dataset to datasets
* Fixed defaults.schema.md
* Fixed default.schema.md again
* Cleanup md's
* Fixed boilerplate
* Fixed JSON schema
* reword README, rename project file
* Moved dataset_id to the key of the map
---------
Co-authored-by: Julio Castillo <jccb@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-01 10:12:45 +00:00
Ludovico Magnocavallo
bc6950e205
Rename FAST stages preparing for eventual deprecation ( #3298 )
...
* renames
* links
* readme
* docs
* update pf modules tests for renames
* condition_vars context in modules
* data platform dataset
* fix links in stage 3 docs
* schema changes
* schema docs
* tfdoc
* update duplicates check
* fast legacy tests
* legacy schema
* fix tests
2025-09-04 08:24:11 +02:00
Ludovico Magnocavallo
36648b6b63
FAST light implementation ( #3255 )
...
* data wip
* wip data
* update org schema, add note on expansion
* all schemas, workload notes
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* Update WORKLOG.md
* wip
* data wip
* wip
* wip
* wip
* wip
* org module IAM context (using lookup)
* new-style context expansion in project IAM
* remove spurious file
* project module contexts
* finalize context replacement format for project module
* revert org module changes
* fix tag id interpolation in project
* fix tag id interpolation in project
* organization module context
* organization context test
* context expansion for folder tag bindings
* test context expansion for tag bindings
* service account module context
* simplify context local
* context for iam service account
* nuke blueprints
* remove links to blueprints
* vpc sc context in project module
* Add context to GCS module
* Add inline deps to plan_summary script
* Make context a top-level variable for folder, organization, sa
* Add add context top-level to VPC-SC
* move context out of factories_config variable
* tfdoc
* fix merge
* fix merge
* fix examples
* net-vpc module context
* add parent ids to folder context
* rename folder parent context
* fix folder parent check
* new project factory stub
* wip
* wip
* refactor defaults
* project iam
* bueckts and service accounts
* start adding context replacements
* better test data
* automation resources for folders and projects
* automation
* add support for project id interpolation
* first tested apply
* improve IAM description in gcs module
* add context to billing account module
* add notification channels to billing account module context
* add billing budgets to new pf
* schemas and defaults
* bootstrap wip
* bootstrap wip
* bootstrap wip
* pf outputs
* pf fixes
* fix pf sample data
* bootstrap lite fixes
* add locations to organization module contexts
* bootstrap lite fixes
* org fixes, billing accounts
* fix default project parent
* bootstrap lite wip
* add locations to gcs module context
* add context support to logging bucket module
* add context to pubsub module
* split out iam variables in gcs module
* fix logging bucket context test
* bootstrap log sink destinations
* streamline logging-bucket module variables
* fix logging bucket context test
* align logging bucket module interface in fast bootstrap
* add support for project-level log buckets to project factory
* support full context expansion in organization module log sinks
* log buckets in fast-lite bootstrap
* make og sink type optional in organization module
* log sinks in fast-lite bootstrap
* set tag values in factory context
* bootstrap lite data
* output files schema
* billing account schema
* output files
* output providers
* gcs output files
* boilerplate
* tflint
* check documentation
* check docs
* fix project module parent variable validation
* fix log bucket examples
* allow null parent in project module
* silence folder test errors
* fix billing account sink example
* fix project example
* fix billing account module
* fix folder tests
* fix FAST
* fix fast
* tfvars outputs
* wif
* cicd service accounts
* cicd
* allow defaults in context, minimal org policies
* support gcs managed folders in project factory and bootstrap lite
* support prefix in provider output files
* rename bootstrap stage
* gitignore
* gitignore
* security folder, billing IAM
* wip tfvars
* fix typo
* security IAM
* control tag iam/context via variables in organization module
* split tag creation from tag IAM to avoid circular refs
* port organization module tag changes to project module
* implement new-style context expansion in vpc-sc module
* fix fast vpc-sc tests
* boilerplate
* vpc sc stage
* schemas
* fast-lite compatibility for vpc sc stage
* make log project number optional in vpc-sc stage
* networking
* networking
* networking
* networking
* rename and move new stage under fast
* clone pf tests
* use context replacement for internal notification channels in billing account module
* support service agents in project module iam context replacements
* support service agents in project module iam context replacements
* add support for kms keys to project module context
* experimental pf example test and fixes
* fix schemas
* fix tests
* tfdoc
* tfdoc
* pf config
* experimental pf
* remove redundant dot from gcs managed folder IAM keys
* bootstrap experimental test
* project factory exp stage test
* skip tflint for bootstrap experimental test
* tflint
* fix gcs test
* documentation work
* documentation work
* Update README.md
* tfdoc
* tfdoc
* readme
* tfdoc
* readme
* readme
* readme
* readme
* support universe in pf exp projects
* missing universe service agents
* org policies import, non-admin billing IAM
* todo
* fix test
* custom constraints
* fast classic dataset
* fix test data
* context replacements in billing module log sinks
* fix typo
* add support for billing log sinks
* update docs
* readme
* cicd fix and test
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-09-02 08:38:57 +02:00
Liam Nesteroff
f07e4f64e9
Standardise reuse variable from project module and implement for net-vpc ( #3205 )
...
* exposing the network_id from the net-vpc module for use with tag bindings
* convert vpc_create to vpc_reuse
* Changed the reuse vars to standardised attributes
* fixed readme tests and schemas
* modified apigee blueprint to use vpc_reuse with network_id passthrough
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-07-03 09:12:05 +10:00
Ludo
0e052abb59
Merge remote-tracking branch 'origin/master' into fast-dev
2025-06-28 09:40:24 +02:00
Liam Nesteroff
3bfa3608d0
Added option to set force_destroy on pf buckets ( #3192 )
...
* Added option to set force_destroy on pf buckets
* added force_destroy to schema
2025-06-26 09:20:41 +10:00
Ludo
a136cc812a
update schemas
2025-06-15 18:29:05 +02:00
Ludovico Magnocavallo
6b04ce769d
Allow multiple types in JSON schema docs tool ( #3126 )
...
* allow multiple types in JSON schema docs tool
* support pattern
* support pattern
2025-05-31 11:58:20 +02:00
Ludovico Magnocavallo
e391a3ff75
Allow explicit definition of automation prefix in project factory ( #3124 )
...
* Allow explicit definition of automation prefix in project factory
* update schema doc
2025-05-30 14:30:53 +02:00
Ludovico Magnocavallo
30b390483e
JSON schema documentation tool ( #3070 )
...
* wip
* wip
* wip
* generate schema docs
* formatting
* typo
* fix details
* fix details
* revert dp change
* tfdoc
2025-05-06 08:17:46 +02:00
