Julio Castillo
d46b39b717
Add missing context interpolations ( #3659 )
2026-01-20 20:21:56 +01:00
Julio Castillo
d9e1b924a1
Add asset_feeds to resman modules ( #3658 )
...
* Add asset_feeds to resman modules
* Add examples and update readmes
* Extend pubsub_topic context to project and folder modules
* Use pubsub_topic context for pubsub_destination
* Update readmes and add project-factory asset_feed example
* Update context tests
* Update schemas
2026-01-20 14:37:35 +00:00
Ludovico Magnocavallo
04de8f7de7
Support CMEK configuration in org module logging settings, expose identities in FAST context ( #3656 )
...
* support CMEK configuration in org module logging settings, expose identities as FAST contexts
* remove hash from inventories
2026-01-19 13:35:30 +01:00
Luca Prete
ecb92b508c
Add ability to use existing source files in GCS. ( #3653 )
2026-01-15 16:39:05 +00:00
Suryansh Singhal
620551cbb1
feat(logging-bucket): support locked parameter for project parent types ( #3650 )
...
* feat(logging-bucket): support locked parameter for project parent types
- Add locked parameter to project bucket resources with default value of false.
* fixed the linting error, added the validation for project level bucket only and removed the nullable constraint
2026-01-15 11:46:32 +01:00
Suryansh Singhal
ca7e437d60
fix(artifact-registry): resolve permadiff for docker_config immutable_tags ( #3652 )
...
A persistent diff was occurring for Docker artifact registries where `immutable_tags` was set to `false`. On every `terraform plan`, Terraform would propose changing `immutable_tags` from `false` to `null`.
This was caused by the `for_each` condition in the `docker_config` dynamic block, which only created the block if `immutable_tags` was explicitly set to `true`.
The condition has been updated to check if `immutable_tags` is not null (`!= null`) instead of checking if it is true (`== true`). This ensures the `docker_config` block is correctly generated for both `true` and `false` values, aligning the configuration with the resource's state and eliminating the persistent diff.
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2026-01-15 10:56:25 +01:00
Julio Castillo
cff8a25c59
Introduce iam_by_principals_conditional ( #3649 )
...
* Introduce iam_by_principals_conditional
* Add iam_by_principals_conditional to project factory
* Update IAM ADR
* Update project factory readme
* Sync FAST schemas
* Update organization schema
* Add resman tests for iam_by_principals_conditional
* Update PF project-defaults.tf
* Update copyright
2026-01-14 11:16:07 +00:00
David Liebert
649cab0020
fixed bug where label field is ignored for policy based routes ( #3648 )
...
* fixed bug where label field is ignored for policy based routes
* Fix example and inventory
* Add missing schema
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-14 09:48:16 +00:00
Ludovico Magnocavallo
032db2f902
expose bigquery kms in project schema ( #3645 )
2026-01-13 10:30:19 +01:00
Ludovico Magnocavallo
88306fe99a
Adding missing context replacement type to project factory README, add folder_ids to project condition vars ( #3642 )
...
* Adding missing context replacement type to project factory README
* add folder ids to project context condition vars
2026-01-12 14:41:07 +01:00
labbott-hub24
5e6f9a4332
Added locality_lb_policy support to the regional ext alb module ( #3638 )
...
Added http_cookie to the session_affinity validation
doc update
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-12 12:50:53 +01:00
Julio Castillo
6febcfe136
Add support for mirroring rules to modules/net-firewall-policy ( #3636 )
...
* Add support for mirroring rules to net-firewall-policy
* Split mirroring rules
* Add schema
* Sort variables
2026-01-12 11:10:43 +00:00
Eric Zhao
c1248d328a
Allow any VPC for (secure) network_tags ( #3634 )
...
* feat: allow all for VPC networks
* feat: add examples
* feat: add header
* feat: module test
* fix: update network testing data to pass validation
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-12 09:34:18 +00:00
Vannick Trinquier
ca413b8aa8
Add support to VPC flow logs for PSC subnet ( #3639 )
2026-01-12 15:56:14 +07:00
Eric Zhao
4ea87d5e6d
feat: Implement target secure tags for hierarchical firewall policies ( #3633 )
...
* feat: Implement target secure tags for hierarchical firewall policies by integrating tag values and refining tag purpose data.
* docs: update variable
2026-01-09 09:11:04 +01:00
Ludovico Magnocavallo
f8f856c9ac
reinstate v51.0.0
2026-01-08 13:32:59 +00:00
Ludovico Magnocavallo
da29af53c9
Revert "Use additive resource for perimeter resources in vpc-sc module when i…" ( #3631 )
...
This reverts commit a3e09197c7 .
2026-01-08 14:29:40 +01:00
Ludovico Magnocavallo
12d0bbf2fc
Revert "fix previous change to vpc sc module ( #3629 )" ( #3630 )
...
This reverts commit dc35ce15ee .
2026-01-08 14:28:57 +01:00
Ludovico Magnocavallo
1b4930513f
prep v51.1.1
2026-01-08 13:21:22 +00:00
Ludovico Magnocavallo
f99920a69b
fix previous change to vpc sc module
2026-01-08 12:35:27 +00:00
Ludovico Magnocavallo
6ab071da8d
prep v51.1.0
2026-01-08 12:12:43 +00:00
Ludovico Magnocavallo
a3e09197c7
Use additive resource for perimeter resources in vpc-sc module when ignore changes is set ( #3628 )
...
* module changes
* fix module
2026-01-08 12:09:09 +00:00
David Liebert
5374899b36
added support for labels with google_compute_global_address resource ( #3622 )
...
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-07 13:19:48 +00:00
ooshrioo
ccad5654d9
Fix workforce identity federation provider configuration ( #3626 )
...
* Fix workforce identity federation provider configuration
Remove redundant 'organizations/' prefix from parent parameter as
var.organization_id already contains the full organization path.
* Update test to match corrected parent parameter
The test expected the redundant 'organizations/' prefix, but the fix
correctly removes this duplication.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2026-01-07 14:02:13 +01:00
Ludovico Magnocavallo
ef027ad5b5
prep v51.0.0
2026-01-07 11:23:41 +00:00
Ludovico Magnocavallo
9135406aab
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-07 11:22:19 +00:00
Ludovico Magnocavallo
7a3387d64d
prep v50.1.0
2026-01-07 09:57:10 +00:00
Ludovico Magnocavallo
cb68dfda2a
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-06 08:42:25 +00:00
Suryansh Singhal
ba304518f1
Prevent recreation for key_revocation_action in compute-vm module ( #3620 )
...
* fix(compute-vm): prevent instance recreation for key_revocation_action_type
The `key_revocation_action_type` attribute in the `google_compute_instance`
resource defaults to `NONE` on the provider side.
When this optional attribute was not explicitly set in the module's
`options` variable, it resolved to `null` in the Terraform configuration.
This caused Terraform to detect a change from `null` to `NONE` on every
plan, leading to unnecessary instance recreation.
This change applies `coalesce` to
`var.options.key_revocation_action_type` in the resource definition so
that it defaults to `NONE` when unset, aligning the configuration with
provider behavior and preventing a permadiff.
* updated the regional compute template too with the key_revocation_action_type
* fixed the formatting
2026-01-05 11:53:47 +01:00
Ludovico Magnocavallo
502d953d03
Merge remote-tracking branch 'origin/master' into fast-dev
2026-01-04 11:23:59 +00:00
Luca Prete
d0d7c64670
Refactor Agent Engine module to support new source based deployments ( #3609 )
...
* Refactor Agent Engine module to support new source based deployments
* Fix linting
* Fix tests
* Fix tests
* Remove generated_pickle line from examples
* Fix indentation
* Delete modules/agent-engine/terraform.atfvars
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2026-01-04 08:11:46 +00:00
RamBSn
c4447993d3
AlloyDB - Enable multiple automated backup per day ( #3604 )
...
* update alloydb automated backup with multiple times per day
* Revert "update alloydb automated backup with multiple times per day"
This reverts commit ea42ba7ba1b63492f812e6614cf4d4d558078069.
* update alloydb automated backup with multiple times per day
* remove unnecessary toset
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2026-01-02 17:05:24 +00:00
Suryansh Singhal
5eeb7b51bb
Terraform allow one of X86_64, ARM64 but the validation is for x86_64 has been fixed ( #3615 )
...
Co-authored-by: suryansh.singhal <suryansh.singhal@arya.ag >
2026-01-02 12:47:55 +01:00
dependabot[bot]
8d73680472
Bump qs and @google-cloud/functions-framework
...
Bumps [qs](https://github.com/ljharb/qs ) to 6.14.1 and updates ancestor dependency [@google-cloud/functions-framework](https://github.com/GoogleCloudPlatform/functions-framework-nodejs ). These dependencies need to be updated together.
Updates `qs` from 6.13.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1 )
Updates `@google-cloud/functions-framework` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/releases )
- [Changelog](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/compare/v4.0.0...v4.0.1 )
---
updated-dependencies:
- dependency-name: qs
dependency-version: 6.14.1
dependency-type: indirect
- dependency-name: "@google-cloud/functions-framework"
dependency-version: 4.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-02 09:31:28 +01:00
Sepehr Javid
d570260283
fix failed tests for criss regional lb
2026-01-02 09:14:53 +01:00
Sepehr Javid
de401addcb
add service attachments for cross regional load balancer
...
add docs and cleanup
add missing toc link in readme
add domain_name field in the service attachment docs
update variable table with tfdoc.py
2026-01-02 09:14:53 +01:00
Ludovico Magnocavallo
fedf90d25f
Add support for pubsub to project factory ( #3608 )
...
* add support for pubsub to project factory
* remove duplicate data access log definitions from folders
* tfdoc
* schemas
* fix example
* add pubsub topics context to org in stage 0
2025-12-23 10:24:33 +00:00
Ludovico Magnocavallo
a554971563
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-22 06:36:05 +00:00
Wiktor Niesiobędzki
73664615a4
Correct test for Direct VPC egress for CFv2
2025-12-19 11:05:25 +01:00
Josh Myers
1eb93db427
feat: project-factory folders support deletion_protection ( #3595 )
...
* feat: project-factory buckets support deletion_protection
* chore: Update all folder.schema.json
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-12-18 14:25:05 +00:00
Luca Prete
0ac51b6050
Password for initial_user for AlloyDB is no longer required ( #3596 )
2025-12-18 11:57:32 +01:00
Luca Prete
c193fb37ee
Upgrade Terraform provider to 7.13 ( #3600 )
2025-12-18 11:29:48 +01:00
Vannick Trinquier
cc24046be8
Add CMEK support to FAST and controls for CMEK encryption ( #3556 )
2025-12-14 12:14:08 +07:00
apichick
77cdcafd3c
Fixed issue with cross region load balancer IP address assigment ( #3593 )
2025-12-13 12:42:53 +01:00
Ludovico Magnocavallo
ab0f55216a
Add support for descriptive name to projects ( #3591 )
...
* add support for descriptive name to projects
* boilerplate
* fmt
2025-12-12 09:06:47 +01:00
Ludovico Magnocavallo
216a12eae5
Fix CI/CD dataset files and provider workflow variable in FAST stage 0 ( #3587 )
...
* fix CI/CD dataset files and provider workflow variable
* IAM principals use pool, sts uses provider
* tfdoc
* fix variable description
2025-12-11 15:05:39 +01:00
Ludovico Magnocavallo
d21e9c51e8
prep v50.0.0
2025-12-10 18:22:55 +00:00
Ludovico Magnocavallo
7cc12da6b3
Merge remote-tracking branch 'origin/master' into fast-dev
2025-12-10 18:19:11 +00:00
Ludovico Magnocavallo
5e606d0fff
prep v49.3.0
2025-12-10 17:51:43 +00:00
kovagoadam
4e88bec299
Use project numbers in billing budget filter ( #3555 )
...
* Fixed project level billing budget filter
* Moved project_numbers local to concat block
* Fixed with try block
* fix project replacement
* tfdoc
* fix test
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-12-10 17:35:06 +00:00