Commit Graph

647 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki
d63a425b62 Allow same filename in different directories
As long, as they do override default project name using `name`.
2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
c90005553a Add tests for data_defaults / data_overrides 2025-04-06 20:17:22 +02:00
Julio Castillo
e04079e334 Add support to attach tags to service accounts (#3008)
* Remove service account key upload. Add create_ignore_already_exists

* Add tag bindings to service accounts

* Add description to create_ignore_already_exists

* Remove broken links
2025-04-04 12:31:19 +00:00
Julio Castillo
0c334a6128 Add roles support to VPC-SC (#3000) 2025-04-02 09:39:04 +02:00
Julio Castillo
bd829e6ba3 Allow disabling GKE IP endpoints and setting GKE VPC scope DNS domain (#2997)
* Allow disabling IP access to GKE control plane

* Add additive VPC scope DNS domain to gke clusters

* Fix typo

* Bump provider to 6.27.0

* Update readme
2025-04-02 07:03:58 +00:00
Tim Hiatt
762841da79 Fr/timhiatt/invoker iam disable (#2994)
* Staging the New Variable change and the flag endablement for 'invoker_iam_disabled' in the 'google_cloud_run_v2_service' resouece associated with the 'cloud-run-v2' module.

* Updating tfdocs to include the new variables for the 'invoker_iam_disabled' flag in the 'google_cloud_run_v2_service' resource in module 'cloud-run-v2'

* Updating the testing in the readme for the cloud-run-v2 module.

* Fixing an issue with links in README.md Docs

* Fixing README.md linting.
2025-04-01 11:41:08 +02:00
Marco Cadetg
2b2e52fecd feat: add gcp_public_cidrs_access_enabled to gke-cluster-{autopilot,standard} (#2993) 2025-04-01 06:17:44 +00:00
Wiktor Niesiobędzki
eba82f67c5 Add example with transparent proxy and E2E test 2025-03-19 12:00:21 +01:00
Ludovico Magnocavallo
c8e4179f2b Add custom routes for directpath to net-vpc module (#2966)
* add custom routes for directpath to net-vpc module

* blueprint tests

* blueprint tests

* blueprint tests

* fast tests

* tfdoc

* module examples
2025-03-19 10:22:47 +00:00
Wiktor Niesiobędzki
fc256165a4 Pass edition and other parameters to replicas 2025-03-17 11:46:01 +01:00
Julio Castillo
34e7d90448 Update GKE addons and features (#2956)
* Update GKE addons and features

* Fix tests
2025-03-14 19:07:16 +00:00
Simone Ruffilli
be816fd882 net-vpc: fix permadiff in docs (#2949) 2025-03-12 10:09:08 +01:00
Wiktor Niesiobędzki
6b6f5d86b2 Allow unmanaged reverse lookup zones 2025-03-06 08:28:51 +01:00
Wiktor Niesiobędzki
6af479706d Fix failing E2E test 2025-02-28 18:45:14 +01:00
Wiktor Niesiobędzki
2809570651 Fix E2E tests 2025-02-23 18:19:28 +01:00
Ludo
411b2f6e6c Merge branch 'master' into fast-dev 2025-02-20 07:58:33 +01:00
Ludovico Magnocavallo
5312767be4 Add provider output files to project factory stage, single automation bucket in module (#2914)
* single automation bucket, provider output files for project factory

* tfdoc

* fix outputs
2025-02-19 17:45:56 +00:00
Daniel Strebel
aab282bf19 feat: adding generated_id for backends to net-lb-app-ext (#2913) 2025-02-19 18:16:05 +01:00
Wiktor Niesiobędzki
58051e48e7 Fix tests 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
fd07db5000 Add tftests for project factory 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
0a1b6c6e0f Add ability to refer to other project service accounts in Project Factory 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
3ddfd59b88 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-18 20:30:14 +00:00
Simon Roberts
642ebfe9e9 Increase the default complexity of Cloud SQL DB passwords (#2886)
* Increase the default complexity of DB passwords in order to meet password_validation_policy.default_complexity

* Use password_validation_policy.min_length if provided

* Explicitly generate a root_password if not provided

* Use object (password, random_password) for root_password config

* Make root_password non-nullable, and add validation against specifying both a password and `random_password`.
Fix test for stronger password generation.

* Add example for root_password and password_validation_policy

* Rerun tfdoc.py

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-02-18 10:46:29 +00:00
Ludo
8f6cd6dedc Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-18 08:36:34 +01:00
jacklever-hub24
a8d7d401d6 Add support for locality policies to net-lb-app-ext module (#2898)
* Fix the missing locality_lb_policy value and add validation for it

* Added variables, dynamic blocks and validation to support locality_lb_policy/ies

* Formatting

* tfdoc generation

* Fix net-lb-app-ext readme

* Fixes for Ludo, coalesce and brevity

* fmt

* Revert null check due to failing tests

---------

Co-authored-by: Jack Lever <jack@thelevers.com.au>
Co-authored-by: Ludo <ludomagno@google.com>
2025-02-18 06:25:45 +00:00
Ludovico Magnocavallo
1a4b298cc9 Project factory additions, project module reuse implementation (#2899)
* add support for buckets

* add project-level interpolation for own SAs

* docs

* project reuse changes

* fix example

* tfdoc

* update check documentation tool

* fast tests

* blueprints

* typo
2025-02-15 20:37:45 +01:00
Julio Castillo
d0c3f04c10 Make service agents work in different universes (#2894)
* Make service agents work in different universes

* Use templatestring and two passes for service agent emails

* Fix tests
2025-02-14 12:16:07 +00:00
Ludovico Magnocavallo
9148e76087 Add support for project-level log sinks to FAST stage 0 (#2893)
* Fix ipv6 and align loadbalancer address types

* Release v37.3.0

* add support for project-level log sinks to stage 0

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2025-02-14 11:58:18 +01:00
Julio Castillo
a15f97db67 Add universe support to iam-service-accounts (#2892)
* Make service account universe aware

* Add service account universe tests
2025-02-14 09:06:23 +01:00
Julio Castillo
fd9f92324b Update VPC-SC module and FAST stage (#2887)
* Update VPC-SC module to support vpc subnets

* Update FAST VPC-SC variables

* Fix tests
2025-02-13 18:04:09 +00:00
Wiktor Niesiobędzki
62665f2475 Fix ipv6 and align loadbalancer address types 2025-02-12 14:09:31 +01:00
Ludo
2e63bf1029 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-12 06:47:44 +01:00
Ludovico Magnocavallo
7f2ff08997 Address outstanding load balancer FRs (#2879)
* fix #2877

* fix #2866

* fixes #2865

* fixes #2865

* moved block

* fix standalone test

* blueprints
2025-02-11 18:09:02 +01:00
Julio Castillo
121ec17ca1 Merge branch 'master' into fast-dev 2025-02-10 23:26:47 +01:00
Julio Castillo
3ffe838e06 Add context to organization policiy factories (#2876) 2025-02-10 22:24:01 +00:00
Ludo
d15f1d9f43 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-10 10:14:00 +01:00
Wiktor Niesiobędzki
58f22ce647 Add prefix to KMS ring, to allow easy recreate 2025-02-10 00:56:19 +01:00
Julio Castillo
97f194e37e Make id and project_id match when universe is set 2025-02-10 00:30:13 +01:00
Julio Castillo
e08698a410 Fix tests 2025-02-07 10:55:05 +01:00
Julio Castillo
36c776ad78 Fix tests 2025-02-07 10:55:05 +01:00
Julio Castillo
3fc7144c4f Update examples and tests 2025-02-07 10:55:05 +01:00
HeiglAnna
efa1ef6f7e Add cAdvisor Metrics to Autopilot/Standard GKE Cluster (#2841)
* Add cAdvisor Metrics to Autopilot/Standard GKE Cluster

* Fix tests

---------

Co-authored-by: AnnaHeigl <85624888+AnnaHeigl@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2025-01-30 13:29:07 +00:00
Julio Castillo
c73035f4e5 Allow universe-bound projects to exclude services (#2852)
* Allow universe-bound projects to exclude services

* Update README
2025-01-30 08:48:58 +01:00
Julio Castillo
29e7669385 Support project creation in different universes (#2848)
* Support project creation in different universes

* Fix typo

* Revert prefix validation

* Add test

* Call new test

* Do not override project name
2025-01-29 12:40:41 +01:00
frits-v
43e6daca8f fix(certificate-manager): reference dns_authz by fully qualified id (#2833) 2025-01-22 22:49:12 +01:00
Julio Castillo
8a2320311d Add bucket_create to modules/gcs (#2827)
* Add `bucket_create` to `modules/gcs`

* Create local with bucket name

* Update variable description

* Fix bucket output

* Fix tests

* Fix tests

* Bump OpenTofu to 1.9.0 (needed for multi-var validations)
2025-01-21 23:48:36 +01:00
Wiktor Niesiobędzki
10cc3d8079 modules/compute-vm end-to-end tests and fixes 2025-01-16 10:54:52 +01:00
Julio Castillo
7eff7b19dc Add iam_by_principals_additive to project, organization and folder modules (#2814)
* First attempt at iam_by_principals_additive

* Remove validation

* Update IAM ADR

* Apply to organization and project modules

* Update READMEs

* Add tests

* Remove "cycle errors"
2025-01-14 12:32:19 +00:00
Julio Castillo
f1acc92864 Add support for log views and log scopes (#2776)
* Add views and tags to logging bucket

* Add logs scopes to project

* Add missing inventory
2024-12-18 18:29:44 +01:00
Ludovico Magnocavallo
d86b8d565c Refactor GKE cluster modules access configurations, add support for DNS endpoint (#2761)
* stub

* gke standard module and tests

* blueprints

* tfdoc

* autopilot

* blueprints

* tfdoc

* gke hub module examples

* dataproc and gke fixture
2024-12-12 11:02:24 +01:00