Ludovico Magnocavallo
9e94a0836a
Improve and document org policy tags use in FAST resman stage ( #3162 )
...
* improve and document org policy tags use in resman
* tfdoc, tests
2025-06-13 15:57:48 +02:00
jnahelou
d6004f0cd0
CMEK service agents mapping breaks Composer v2 backward compatibility ( #3156 )
...
* allow backward compatibility for unmapped service agents
* docs(modules/project): provide a fallback mechanism in cmek for users to specify additional service agents when needed
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-06-12 20:27:41 +02:00
Ludo
c073f9ead4
Merge remote-tracking branch 'origin/master' into fast-dev
2025-06-12 15:38:26 +02:00
apichick
42641397e3
Fixed problem with backend preference, changed it to boolean. Backend preference can only be PREFERRED or null
2025-06-12 07:40:39 +02:00
Ludo
4a2eaec353
Merge remote-tracking branch 'origin/master' into fast-dev
2025-06-11 14:30:03 +02:00
Ludovico Magnocavallo
7d008be2cb
Allow configuring project key format in project factory ( #3154 )
...
* Configurable project key in project-factory module
* Configurable project key in project-factory module
* add tests
2025-06-11 13:18:03 +02:00
jacklever-hub24
e3b73b8867
Bring back master ipv4 cidr block ( #3153 )
...
* Re-added master_ipv4_cidr_block to fix issue 3152
* Regenerate tfdoc
* Extend to GKE Autopilot
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-06-11 11:51:47 +02:00
apichick
a2f4d9185b
Added recipe for Apigee X with SWP
2025-06-11 07:40:17 +02:00
apichick
077d8719dd
Added default compute network tier to project module ( #3150 )
2025-06-10 21:44:38 +00:00
apichick
108258746b
Added network tier to network interfaces in compute-vm module ( #3151 )
2025-06-10 23:26:44 +02:00
Ludovico Magnocavallo
468c0ab49a
fix IAM delegation for project factory on security KMS keys ( #3147 )
2025-06-10 12:56:29 +02:00
dependabot[bot]
8e0ea57c80
Bump requests ( #3146 )
...
Bumps [requests](https://github.com/psf/requests ) from 2.32.2 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.32.2...v2.32.4 )
---
updated-dependencies:
- dependency-name: requests
dependency-version: 2.32.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-10 08:51:35 +00:00
Ludovico Magnocavallo
3c38bc643e
add KMS keys interpolation to project factory ( #3145 )
2025-06-10 10:24:25 +02:00
apichick
12b206a72f
Added backend preference to global application load balancers ( #3139 )
2025-06-10 06:49:47 +00:00
Julio Castillo
df0ed1a73c
Fix #3142 ( #3144 )
2025-06-10 08:08:44 +02:00
apichick
a544c542c2
Fixed mistake in net-vpn-ha module docs ( #3143 )
2025-06-09 21:45:18 +02:00
Wiktor Niesiobędzki
29c144ac1c
Improve SWP transparent gateway example
2025-06-09 09:43:23 +02:00
apichick
665641ba7d
Cloud Run with IAP recipe ( #3129 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-06-08 12:51:08 +00:00
Krzysztof Kluska
6923c2bd1e
Return instance ID not IP address ( #3137 )
...
Return correct value for cloudsql primary instance id
2025-06-06 11:21:34 +00:00
Wiktor Niesiobędzki
aecc4d53b9
Create random passwords only when needed, use write-only attribute for passwords
2025-06-05 16:28:58 +02:00
Jacek Jabłoński
e6ec5de733
fix additional pod networks config creation in GKE node pool ( #3134 )
...
* fix additional pod networks config creation
* fix doc
* Replicate change in gke stage
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-06-05 11:41:51 +00:00
Julio Castillo
77244e9bd1
Add explicit errors when VPC-SC perimeters reference undefined directional policies ( #3133 )
...
* Add explicit errors when VPC-SC perimeters reference undefined directional policies
* Fix try calls
* Update defaults
2025-06-04 20:50:33 +02:00
apichick
d913a02a7c
Added multi-region API Gateway recipe, that was removed by accident ( #3128 )
2025-06-01 11:26:16 +00:00
Julio Castillo
a5b786c2e0
Interpolate egress_to resources in enforced perimeter config ( #3127 )
2025-05-31 18:11:07 +02:00
Ludovico Magnocavallo
6b04ce769d
Allow multiple types in JSON schema docs tool ( #3126 )
...
* allow multiple types in JSON schema docs tool
* support pattern
* support pattern
2025-05-31 11:58:20 +02:00
Ludo
6090198b50
update changelog
2025-05-31 08:43:37 +02:00
Simone Ruffilli
8a7c796ca6
Document x-referencing HCs in net-lb-int ( #3125 )
...
Adds an extended description to var.health_check to prevent terraform errors being triggered when x-referencing HCs between two net-lb-int.
2025-05-30 16:34:30 +00:00
Ludovico Magnocavallo
e391a3ff75
Allow explicit definition of automation prefix in project factory ( #3124 )
...
* Allow explicit definition of automation prefix in project factory
* update schema doc
2025-05-30 14:30:53 +02:00
Ludo
46c97f1847
update changelog
2025-05-30 11:24:59 +02:00
Julio Castillo
a4e157a237
Expose private_endpoint_enforcement_enabled in gke modules ( #3119 )
2025-05-29 12:33:03 +02:00
Julio Castillo
271942f2ed
Bump Terraform to 1.11 ( #3120 )
...
* Bump Terraform version to 1.11
* Update workflows
2025-05-29 11:11:39 +02:00
Jai Srivastav
41eaeb8ea0
Remove default values for access_config.ip_config for gke cluster modules ( #3083 )
...
* Change default values for authorized_ranges from {} to null and
gcp_public_cidrs_access_enabled from false to null in the
access_config.ip_access variable. This ensures the dynamic
master_authorized_networks_config block is properly
conditional on user input.
Previously, these fields would never be null due to their
default values, causing the block to always be initialized
even when users didn't intend to configure authorized networks.
* remove explicit null
* Remove all defaults for access_config.ip_access. Fix permadiff.
* Fix tests
* Swap try with coalesce
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-05-28 20:07:36 +00:00
Maciej Sikora
ae5c12a2a3
adds revision label ( #3117 )
...
* adds revision label
* adds revision label
2025-05-28 18:32:06 +02:00
Ludovico Magnocavallo
d4a9cafda4
add support for binary authorization policy to cloud function v2 module ( #3116 )
2025-05-28 17:01:42 +02:00
Ludovico Magnocavallo
b9ea8a6c26
Allow creation of regional templates in compute-vm module ( #3114 )
...
* allow creation of regional templates in compute-vm module
* tfdoc
* fix blueprint
2025-05-27 14:18:40 +02:00
Ludovico Magnocavallo
8af9b4c845
Allow creating disks with no name in compute-vm ( #3113 )
...
* allow creating disks with no name
* update template example
* tfdoc
2025-05-27 07:19:13 +00:00
Ludo
8fe81d9a99
update changelog
2025-05-25 08:02:58 +02:00
Ludovico Magnocavallo
7ce4381ac3
add support for service agent expansion to project factory IAM ( #3112 )
2025-05-24 12:33:20 +02:00
Alexey Stepanenko
ddfc88ffed
Add option to specifi any port on https protocol ( #3105 )
...
Net app lb int support any port at https protocol also.
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-05-24 06:31:17 +00:00
Ludo
041cc4dd98
update changelog
2025-05-22 14:57:25 +02:00
Ludovico Magnocavallo
e38a82f36f
Support iam_sa_roles in project factory service accounts ( #3110 )
...
* support iam_sa_roles to project factory service accounts
* README
2025-05-22 08:22:31 +00:00
Julio Castillo
1eeaf21b14
Prep release 40.1.0
2025-05-21 16:20:42 +02:00
Ludovico Magnocavallo
743f771adb
Add version tracking files to FAST ( #3108 )
...
* Add version tracking files to FAST
* tfdoc
* Update test counts
* inventories
* tfdoc
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-05-21 16:14:06 +02:00
Julio Castillo
94cdce4467
Add fast_version.txt to FAST stages ( #3107 )
...
* Add fast_versions.txt file
* Fix versions.tf module path
* Fix linter
2025-05-21 15:10:57 +02:00
Ludovico Magnocavallo
4195c3a5af
Revert "Make automation project in project factory module optional ( #3091 )" ( #3106 )
...
This reverts commit 33493b3597 .
2025-05-21 15:01:39 +02:00
Ludo
e4f83431bc
prep v40.0.0
2025-05-21 10:25:45 +02:00
Jay Bana
0411074a73
Improves fast/data-platform-ng README for clarity ( #3074 )
...
* Improves Data Platform README for clarity
* Quick fix to table of contents capitalization
* Fix broken link to stages README.md
* Fix broken link to stages README.md
* Add 2 diagrams.
* Update README.
* Update README.
* Fix section headings in README for consistency
* Clarify implementation details in README regarding Data Mesh principles and FAST stage integration
* Reposition folder structure diagram
* Remove Resource Hierarchy Overview section from README
* Remove diagram_resman.png from data platform development stage
* Update diagrams in README for Data Platform stage
* Refine descriptions of logical components in Data Platform architecture
* Refine README and configuration files for Data Platform stage, enhancing clarity and consistency in descriptions and structure.
* Add section for Provider and Terraform variables in README
* Remove demo files and configurations for Data Platform stage
* Fix file paths in IAM management references in README
* Add IAM principal for dp-platform and update resource counts in test files
* Update README to fix folder structure diagram order and alignment
* Fix capitalization and team naming inconsistencies in README
* Add note on IAM permissions review for production deployment in README
* Refactor IAM roles for dp-platform group in terraform.tfvars.sample
* Fix bucket name in product-0.yaml from 'exposed-ew8' to 'exposed'
---------
Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-05-21 07:30:25 +00:00
Ludo
4a66fbf680
prep v39.2.0
2025-05-21 09:23:49 +02:00
apichick
a5895d4e7c
Added auto-provisioning-locations to gke-cluster-standard module ( #3103 )
2025-05-20 15:42:03 +00:00
Maciej Sikora
ece9887050
feat: enables blue-green upgrades ( #3102 )
2025-05-20 14:43:04 +00:00