Commit Graph

283 Commits

Author SHA1 Message Date
Josh Myers
2c39df6453 Fix Logging folder settings folder (#3811)
* Fix: google_logging_folder_settings takes a folder number not folder id

* chore(project-factory): Conditionally pass through logging_settings

Only pass through logging_settings to the folder module if any of the following are true:

- logging.storage_location      is not null
- logging.disable_default_sink  is not null
- logging.kms_key_name          is not null

Else we are triggering [1] when we don't want to.

[1] https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/folder/logging.tf#L59-L69
2026-03-26 05:56:08 +00:00
Samuele Perticarari
bd87710eea feat: Add new compliance regime options for Assured Workloads (#3794)
* feat: Add new compliance regime options to folder schemas for assured workloads configurations.

* terraform fmt

* Update Folder README with `tools/tfdoc.py` tool
2026-03-16 17:59:25 +00:00
Nathan McGuirt
8c07d09eab Fix typo in example (#3783)
Update key to match the one used in the asset_search block
2026-03-06 10:47:48 +00:00
Ludovico Magnocavallo
dd95efc53e prep v54.0.0 2026-03-05 11:11:25 +00:00
Ludovico Magnocavallo
e282f4bb4f prep v53.1.0 2026-03-05 10:55:44 +00:00
Ludovico Magnocavallo
0be09646b0 Add missing folder features to project factory and align logging across folder/org modules (#3779) 2026-03-04 10:28:48 +01:00
Ludovico Magnocavallo
26e622edae prep v53.0.0 2026-02-12 09:12:54 +00:00
Ludovico Magnocavallo
079aac1f88 Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-12 09:07:04 +00:00
Ludovico Magnocavallo
5765b11a87 prep v52.1.0 2026-02-12 09:01:26 +00:00
Ludovico Magnocavallo
465ab5499a Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-07 11:17:09 +00:00
Julio Castillo
7d33becacf Add asset_search to folder, project, and organization modules. (#3707) 2026-02-05 12:56:27 +01:00
Julio Castillo
f5958b9eae Merge branch 'master' into fast-dev 2026-02-05 12:25:31 +01:00
Liam Nesteroff
9debc3df6f feat: Add schema check to custom constraints, SCC custom modules, and observability configurations, along with their respective schema definitions. (#3705) 2026-02-05 12:20:25 +01:00
Samuele Perticarari
b2cbd7a3c6 fix: Fixed external broken links (#3703) 2026-02-04 14:35:37 +01:00
Ludovico Magnocavallo
8e7253ba11 add missing IAM interface attributes to service account module (#3700) 2026-02-04 12:07:06 +01:00
Vannick Trinquier
2af44b0651 Add support for security command center mute rules in module organization, folder and project (#3694) 2026-02-04 08:31:05 +07:00
Ludovico Magnocavallo
cdc5e7df45 prep v52.0.0 2026-01-30 16:00:47 +00:00
Ludovico Magnocavallo
1f8c2b36da prep v51.1.0 2026-01-30 15:58:47 +00:00
Luca Prete
3877a40119 Add PSC-I support to Agent Engine module (#3686) 2026-01-30 07:24:06 +03:00
lopezvit
6db25b1a08 Add support for the Assured Workloads in the project factory (#3666)
* Add support for the Assured Workloads in the project factory

* Fix test after requiring organization as a var
2026-01-23 13:21:48 +01:00
Julio Castillo
d46b39b717 Add missing context interpolations (#3659) 2026-01-20 20:21:56 +01:00
Julio Castillo
d9e1b924a1 Add asset_feeds to resman modules (#3658)
* Add asset_feeds to resman modules

* Add examples and update readmes

* Extend pubsub_topic context to project and folder modules

* Use pubsub_topic context for pubsub_destination

* Update readmes and add project-factory asset_feed example

* Update context tests

* Update schemas
2026-01-20 14:37:35 +00:00
Julio Castillo
cff8a25c59 Introduce iam_by_principals_conditional (#3649)
* Introduce iam_by_principals_conditional

* Add iam_by_principals_conditional to project factory

* Update IAM ADR

* Update project factory readme

* Sync FAST schemas

* Update organization schema

* Add resman tests for iam_by_principals_conditional

* Update PF project-defaults.tf

* Update copyright
2026-01-14 11:16:07 +00:00
Ludovico Magnocavallo
f8f856c9ac reinstate v51.0.0 2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
1b4930513f prep v51.1.1 2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
6ab071da8d prep v51.1.0 2026-01-08 12:12:43 +00:00
Ludovico Magnocavallo
ef027ad5b5 prep v51.0.0 2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab Merge remote-tracking branch 'origin/master' into fast-dev 2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d prep v50.1.0 2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
a554971563 Merge remote-tracking branch 'origin/master' into fast-dev 2025-12-22 06:36:05 +00:00
Luca Prete
c193fb37ee Upgrade Terraform provider to 7.13 (#3600) 2025-12-18 11:29:48 +01:00
Vannick Trinquier
cc24046be8 Add CMEK support to FAST and controls for CMEK encryption (#3556) 2025-12-14 12:14:08 +07:00
Ludovico Magnocavallo
d21e9c51e8 prep v50.0.0 2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
5e606d0fff prep v49.3.0 2025-12-10 17:51:43 +00:00
Ludovico Magnocavallo
ac68262733 prep v49.2.0 2025-12-08 07:58:58 +00:00
Michael Woodham
bc5732357c Updates to GKE modules to support Secret Sync (#3562)
* Updates to add secret_sync to GKE module in CFF

* updated READMEs against the python tfdoc command

* updated version for secret_sync to reflect 7.12.0

* update provider versions to 7.12.0

* Updated READMEs which got clobbered by merge with main

* Fixed test errors in secret-manager module

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-12-05 15:30:49 +00:00
Ludovico Magnocavallo
bd4f2e317a prep v49.1.0 2025-11-24 08:37:06 +00:00
Ludovico Magnocavallo
10e29e1eeb Context improvements: "all service accounts" principal in folder, org, project modules; custom roles in factory condition vars for FAST stage 0 (#3548)
* iam principalsets

* fix folder

* add custom roles to factory condition vars in stage 0

* project shared vpc IAM
2025-11-24 08:28:41 +00:00
Julio Castillo
3959bb3974 Fix aprover -> approver (#3540)
* Fix aprover -> approver

* Once again...
2025-11-19 08:50:23 +01:00
Ludovico Magnocavallo
3392953188 prep v49.0.0 2025-11-18 13:51:02 +00:00
Ludovico Magnocavallo
83ebdbbd2d prep v48.1.0 2025-11-18 13:47:16 +00:00
Ludovico Magnocavallo
602e1731c9 Replace leftover schema links with actual files (#3522)
* replace schema links with schemas

* vpc-sc stage
2025-11-11 11:57:51 +01:00
Ludovico Magnocavallo
3289a6ff27 prep v48.0.0 2025-11-11 09:13:44 +00:00
Ludovico Magnocavallo
76eec666ea Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-11 09:10:56 +00:00
Ludovico Magnocavallo
0d0e086cfc prep v47.1.0 2025-11-11 08:59:19 +00:00
Ludovico Magnocavallo
ba77c6170c Allow configuring data access logs from org/folder/project schemas (#3516)
* modules and FAST support

* module tests

* fast stage 0 dataset

* tfdoc
2025-11-10 10:19:21 +00:00
Ludovico Magnocavallo
7e32058010 [WIP] Add support for KMS autokey (#3515)
* wip

* folder module

* project factory schema

* remove spurious project template

* gcs and compute-vm modules

* variable order
2025-11-09 10:46:28 +01:00
Ludovico Magnocavallo
5946433737 prep v47.0.0 2025-11-05 08:28:44 +00:00
Ludovico Magnocavallo
fc538a15cc Merge remote-tracking branch 'origin/master' into fast-dev 2025-11-05 08:26:53 +00:00
Ludovico Magnocavallo
adec737e2a prep v46.1.0 2025-11-05 08:24:06 +00:00