Julio Castillo
772d064e1c
Skip IAM grants for service agents that are not created on API activation ( #3448 )
...
* Skip IAM grants for service agents that are not created on API activation
* Fix tests
2025-10-21 14:31:32 +00:00
Julio Castillo
367184561b
Few more typos
2025-10-21 15:13:51 +02:00
Julio Castillo
8598496f7a
Fix typo
2025-10-21 14:45:53 +02:00
Ludovico Magnocavallo
a4cc7cd979
Align schemas ( #3447 )
...
* enforce schema uniqueness
* schemas
* fix tests
2025-10-21 14:03:40 +02:00
Vannick Trinquier
c60ae3652a
Adding hardened datasets for preventive and detective Compliance Controls ( #3410 )
...
* Adding hardened datasets for preventive and detective Compliance Controls in stage 0 and stage 1 VPC-SC
* Move observability to factory file
* Update documentation
* Update local variable for use
* Update observability factory to use other module
* Add raw diagram file for hardened datasets
* Retrofit change
* Rename log_buckets context variable to be consistent across modules
* Update stage 0 documentation to mention hardened dataset
* Update customer ids list
* Update documentation, path to schema add ID to access level
* Comment organization policy gcp.resourceLocation by default
* Prevent duplicate key error by merging principal roles
* Adding ngfw roles files in hardened datasets
* Update script to validate files differences to support folder and datasets
* Format duplicate-diff python script
* Remove .config.yaml from duplicates
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-21 10:34:25 +00:00
Julio Castillo
b8aa4b5578
Merge branch 'master' into fast-dev
2025-10-21 08:14:42 +02:00
Julio Castillo
792003ff97
Remove Netsec Authz Service Agent ( #3445 )
...
* Remove Netsec Authz Service Agent
* fix tests
2025-10-20 19:36:03 +00:00
Ludovico Magnocavallo
32ca4498ad
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 17:56:31 +00:00
Luca Prete
64738a1808
Add Agent Engine module. ( #3429 )
2025-10-20 17:02:39 +02:00
Ludovico Magnocavallo
6fe142608d
fix merge
2025-10-20 13:59:18 +00:00
Ludovico Magnocavallo
ec09414823
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 13:58:44 +00:00
Julio Castillo
48f6b4cd49
Add PAM support ( #3438 )
...
* PAM first pass
* Add factory and extend to organization
* Extend to project, add examples
* Add additionalProperties to all objects
* Fix boilerplate
* Expose pam_entitlements to project-factory
* Fix readme
* Move entitlements to second folder/project pass
* extend tests
* Fix readme
* Remove timeouts from inventories
2025-10-20 12:50:37 +00:00
Ludovico Magnocavallo
a4f9924680
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 06:33:53 +00:00
Vannick Trinquier
30f46f09d6
Apply alerts and log based metrics after log buckets creation ( #3442 )
2025-10-20 06:13:42 +00:00
Ludovico Magnocavallo
ff71c9f1a3
fix pf merge
2025-10-18 14:30:57 +00:00
Ludovico Magnocavallo
2f9234547c
fix pf merge
2025-10-18 14:30:46 +00:00
Ludovico Magnocavallo
f5a05b3097
fix pf merge
2025-10-18 14:27:24 +00:00
Ludovico Magnocavallo
5e05044306
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
4113da128b
Support resource-level factories config in project factory module and FAST stages ( #3440 )
...
* support resource-level factories in project factory module
* align folder and project schemas across modules and fast
* schema docs
2025-10-18 10:41:19 +00:00
Julio Castillo
1566711c3a
Add service agent outputs to folder and organization ( #3436 )
...
* Add service agent outputs to folder and organization
* Fix tests
2025-10-17 17:23:08 +02:00
kovagoadam
84a258e247
Add retention support for project-factory buckets ( #3417 )
...
* Added retention support for project-factory buckets
* Cleanup
* Added retention_policy to project.schema.md in PF stage
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-17 10:30:20 +00:00
Ludovico Magnocavallo
0eb90e437f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 17:28:11 +00:00
lcaggio
9bbd453024
bigquery-connection module ( #3423 )
...
Implement bq-connection module
2025-10-16 15:15:36 +00:00
Simone Ruffilli
37455277d4
Adds context support to peering zones ( #3426 )
2025-10-16 15:58:27 +02:00
Taneli Leppä
7c6211a494
bigquery-dataset: fix issues ( #3425 )
...
* bigquery-dataset: add missing return_type to routines, fix view schema
encode, add dependency between routines and views
* Fix test.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-10-16 13:12:23 +00:00
Simone Ruffilli
5be136e2ea
Always use local.project_id in net-vpc
2025-10-16 14:37:07 +02:00
Ludovico Magnocavallo
e9dd48f5e7
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 09:03:15 +00:00
Ludovico Magnocavallo
8e8be1eda5
Support CIDR range sets in firewall modules context ( #3424 )
2025-10-16 09:01:05 +00:00
Ludovico Magnocavallo
ba2247b96f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 07:45:00 +00:00
Simone Ruffilli
509b715a09
Adds network_id to net-vpc outputs ( #3421 )
...
* Adds network_id to net-vpc outputs
* Fixes description
2025-10-16 09:44:33 +02:00
Ludovico Magnocavallo
01001c9a64
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 07:09:27 +00:00
Ludovico Magnocavallo
45d4674ae8
net-vpn-ha ( #3420 )
2025-10-16 09:08:17 +02:00
Ludovico Magnocavallo
cc947777ce
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 05:57:02 +00:00
Ludovico Magnocavallo
7c920d7d35
Add support for context to net-lb-int net-vpc-firewall and net-vpc module ( #3419 )
...
* net-lb-int
* net-vpc-firewall
* net-vpc
* net-vpc
2025-10-16 05:54:14 +00:00
Ludovico Magnocavallo
ecdc248f3f
Add support for context to net-cloudnat, net-firewall-policy modules ( #3414 )
...
* net-cloudnat
* net firewall policy
2025-10-15 13:59:51 +02:00
Julio Castillo
9c61b1c30c
Make SSM gitignores a list ( #3413 )
...
Fixes #3395
2025-10-15 11:35:44 +02:00
Ludovico Magnocavallo
6e02fd1136
Add support for context to DNS modules ( #3412 )
...
* dns-response-policy
* add context to dns modules
2025-10-14 16:07:29 +00:00
Wiktor Niesiobędzki
5bc9d831be
Pass deletion_protection to secondary instance
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
9f2beb1ee6
Use fixture custom role for modules/project tests
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
849e856437
Use email from variables in tests
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
6673cba773
Fix provider failure when appling example
2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
b10d31ef98
Add unique suffix to custom role
2025-10-13 18:58:52 +02:00
Ludovico Magnocavallo
6045cf6ae2
Add support for contexts to compute-vm module ( #3406 )
2025-10-13 16:54:13 +02:00
Ludovico Magnocavallo
e9b121153a
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-13 09:45:29 +00:00
Julio Castillo
9b9ad76ced
Update gke-hub module to use new Policy Controller API ( #3332 )
...
* Update gke-hub to use new Policy Controller API
Fixes #3287
* Use same config format for servicemesh
* remove useless trys
* use ternaries as in the rest of the repo
* Update docs and fix tests
* Update variables
* Bump tofu version
* Bump terraform version 1.12
2025-10-13 09:47:39 +02:00
Ludovico Magnocavallo
8749683850
fix incorrect cloudservices agent email for global universe ( #3402 )
2025-10-12 11:13:50 +00:00
Ludovico Magnocavallo
c996285b26
Support context and add configurations factory to workstation cluster module, add FAST project template ( #3401 )
...
* add context to workstation-cluster module
* context test
* workstations project template
2025-10-10 18:59:37 +02:00
Ludovico Magnocavallo
2ab471d236
pf changes ( #3398 )
2025-10-09 13:37:47 +02:00
Ludovico Magnocavallo
d3c80ce18b
Rationalize location defaults across project factory module and FAST stages ( #3392 )
...
* group default/overrides locations in a single object in pf module
* org setup
* project factory stage
* fix defaults
* pf defaults
* security stage defaults
2025-10-08 07:12:15 +00:00
Ludovico Magnocavallo
5d7fadf21a
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-07 08:05:03 +00:00
