Commit Graph

6461 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
9e94a0836a Improve and document org policy tags use in FAST resman stage (#3162)
* improve and document org policy tags use in resman

* tfdoc, tests
2025-06-13 15:57:48 +02:00
jnahelou
d6004f0cd0 CMEK service agents mapping breaks Composer v2 backward compatibility (#3156)
* allow backward compatibility for unmapped service agents

* docs(modules/project): provide a fallback mechanism in cmek for users to specify additional service agents when needed

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-06-12 20:27:41 +02:00
Ludo
c073f9ead4 Merge remote-tracking branch 'origin/master' into fast-dev 2025-06-12 15:38:26 +02:00
apichick
42641397e3 Fixed problem with backend preference, changed it to boolean. Backend preference can only be PREFERRED or null 2025-06-12 07:40:39 +02:00
Ludo
4a2eaec353 Merge remote-tracking branch 'origin/master' into fast-dev 2025-06-11 14:30:03 +02:00
Ludovico Magnocavallo
7d008be2cb Allow configuring project key format in project factory (#3154)
* Configurable project key in project-factory module

* Configurable project key in project-factory module

* add tests
2025-06-11 13:18:03 +02:00
jacklever-hub24
e3b73b8867 Bring back master ipv4 cidr block (#3153)
* Re-added master_ipv4_cidr_block to fix issue 3152

* Regenerate tfdoc

* Extend to GKE Autopilot

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-06-11 11:51:47 +02:00
apichick
a2f4d9185b Added recipe for Apigee X with SWP 2025-06-11 07:40:17 +02:00
apichick
077d8719dd Added default compute network tier to project module (#3150) 2025-06-10 21:44:38 +00:00
apichick
108258746b Added network tier to network interfaces in compute-vm module (#3151) 2025-06-10 23:26:44 +02:00
Ludovico Magnocavallo
468c0ab49a fix IAM delegation for project factory on security KMS keys (#3147) 2025-06-10 12:56:29 +02:00
dependabot[bot]
8e0ea57c80 Bump requests (#3146)
Bumps [requests](https://github.com/psf/requests) from 2.32.2 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.2...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-10 08:51:35 +00:00
Ludovico Magnocavallo
3c38bc643e add KMS keys interpolation to project factory (#3145) 2025-06-10 10:24:25 +02:00
apichick
12b206a72f Added backend preference to global application load balancers (#3139) 2025-06-10 06:49:47 +00:00
Julio Castillo
df0ed1a73c Fix #3142 (#3144) 2025-06-10 08:08:44 +02:00
apichick
a544c542c2 Fixed mistake in net-vpn-ha module docs (#3143) 2025-06-09 21:45:18 +02:00
Wiktor Niesiobędzki
29c144ac1c Improve SWP transparent gateway example 2025-06-09 09:43:23 +02:00
apichick
665641ba7d Cloud Run with IAP recipe (#3129)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-06-08 12:51:08 +00:00
Krzysztof Kluska
6923c2bd1e Return instance ID not IP address (#3137)
Return correct value for cloudsql primary instance id
2025-06-06 11:21:34 +00:00
Wiktor Niesiobędzki
aecc4d53b9 Create random passwords only when needed, use write-only attribute for passwords 2025-06-05 16:28:58 +02:00
Jacek Jabłoński
e6ec5de733 fix additional pod networks config creation in GKE node pool (#3134)
* fix additional pod networks config creation

* fix doc

* Replicate change in gke stage

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-06-05 11:41:51 +00:00
Julio Castillo
77244e9bd1 Add explicit errors when VPC-SC perimeters reference undefined directional policies (#3133)
* Add explicit errors when VPC-SC perimeters reference undefined directional policies

* Fix try calls

* Update defaults
2025-06-04 20:50:33 +02:00
apichick
d913a02a7c Added multi-region API Gateway recipe, that was removed by accident (#3128) 2025-06-01 11:26:16 +00:00
Julio Castillo
a5b786c2e0 Interpolate egress_to resources in enforced perimeter config (#3127) 2025-05-31 18:11:07 +02:00
Ludovico Magnocavallo
6b04ce769d Allow multiple types in JSON schema docs tool (#3126)
* allow multiple types in JSON schema docs tool

* support pattern

* support pattern
2025-05-31 11:58:20 +02:00
Ludo
6090198b50 update changelog 2025-05-31 08:43:37 +02:00
Simone Ruffilli
8a7c796ca6 Document x-referencing HCs in net-lb-int (#3125)
Adds an extended description to var.health_check to prevent terraform errors being triggered when x-referencing HCs between two net-lb-int.
2025-05-30 16:34:30 +00:00
Ludovico Magnocavallo
e391a3ff75 Allow explicit definition of automation prefix in project factory (#3124)
* Allow explicit definition of automation prefix in project factory

* update schema doc
2025-05-30 14:30:53 +02:00
Ludo
46c97f1847 update changelog 2025-05-30 11:24:59 +02:00
Julio Castillo
a4e157a237 Expose private_endpoint_enforcement_enabled in gke modules (#3119) 2025-05-29 12:33:03 +02:00
Julio Castillo
271942f2ed Bump Terraform to 1.11 (#3120)
* Bump Terraform version to 1.11

* Update workflows
2025-05-29 11:11:39 +02:00
Jai Srivastav
41eaeb8ea0 Remove default values for access_config.ip_config for gke cluster modules (#3083)
* Change default values for authorized_ranges from {} to null and
gcp_public_cidrs_access_enabled from false to null in the
access_config.ip_access variable. This ensures the dynamic
master_authorized_networks_config block is properly
conditional on user input.

Previously, these fields would never be null due to their
default values, causing the block to always be initialized
even when users didn't intend to configure authorized networks.

* remove explicit null

* Remove all defaults for access_config.ip_access. Fix permadiff.

* Fix tests

* Swap try with coalesce

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-28 20:07:36 +00:00
Maciej Sikora
ae5c12a2a3 adds revision label (#3117)
* adds revision label

* adds revision label
2025-05-28 18:32:06 +02:00
Ludovico Magnocavallo
d4a9cafda4 add support for binary authorization policy to cloud function v2 module (#3116) 2025-05-28 17:01:42 +02:00
Ludovico Magnocavallo
b9ea8a6c26 Allow creation of regional templates in compute-vm module (#3114)
* allow creation of regional templates in compute-vm module

* tfdoc

* fix blueprint
2025-05-27 14:18:40 +02:00
Ludovico Magnocavallo
8af9b4c845 Allow creating disks with no name in compute-vm (#3113)
* allow creating disks with no name

* update template example

* tfdoc
2025-05-27 07:19:13 +00:00
Ludo
8fe81d9a99 update changelog 2025-05-25 08:02:58 +02:00
Ludovico Magnocavallo
7ce4381ac3 add support for service agent expansion to project factory IAM (#3112) 2025-05-24 12:33:20 +02:00
Alexey Stepanenko
ddfc88ffed Add option to specifi any port on https protocol (#3105)
Net app lb int support any port at https protocol also.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-05-24 06:31:17 +00:00
Ludo
041cc4dd98 update changelog 2025-05-22 14:57:25 +02:00
Ludovico Magnocavallo
e38a82f36f Support iam_sa_roles in project factory service accounts (#3110)
* support iam_sa_roles to project factory service accounts

* README
2025-05-22 08:22:31 +00:00
Julio Castillo
1eeaf21b14 Prep release 40.1.0 2025-05-21 16:20:42 +02:00
Ludovico Magnocavallo
743f771adb Add version tracking files to FAST (#3108)
* Add version tracking files to FAST

* tfdoc

* Update test counts

* inventories

* tfdoc

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-21 16:14:06 +02:00
Julio Castillo
94cdce4467 Add fast_version.txt to FAST stages (#3107)
* Add fast_versions.txt file

* Fix versions.tf module path

* Fix linter
2025-05-21 15:10:57 +02:00
Ludovico Magnocavallo
4195c3a5af Revert "Make automation project in project factory module optional (#3091)" (#3106)
This reverts commit 33493b3597.
2025-05-21 15:01:39 +02:00
Ludo
e4f83431bc prep v40.0.0 2025-05-21 10:25:45 +02:00
Jay Bana
0411074a73 Improves fast/data-platform-ng README for clarity (#3074)
* Improves Data Platform README for clarity

* Quick fix to table of contents capitalization

* Fix broken link to stages README.md

* Fix broken link to stages README.md

* Add 2 diagrams.

* Update README.

* Update README.

* Fix section headings in README for consistency

* Clarify implementation details in README regarding Data Mesh principles and FAST stage integration

* Reposition folder structure diagram

* Remove Resource Hierarchy Overview section from README

* Remove diagram_resman.png from data platform development stage

* Update diagrams in README for Data Platform stage

* Refine descriptions of logical components in Data Platform architecture

* Refine README and configuration files for Data Platform stage, enhancing clarity and consistency in descriptions and structure.

* Add section for Provider and Terraform variables in README

* Remove demo files and configurations for Data Platform stage

* Fix file paths in IAM management references in README

* Add IAM principal for dp-platform and update resource counts in test files

* Update README to fix folder structure diagram order and alignment

* Fix capitalization and team naming inconsistencies in README

* Add note on IAM permissions review for production deployment in README

* Refactor IAM roles for dp-platform group in terraform.tfvars.sample

* Fix bucket name in product-0.yaml from 'exposed-ew8' to 'exposed'

---------

Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-05-21 07:30:25 +00:00
Ludo
4a66fbf680 prep v39.2.0 2025-05-21 09:23:49 +02:00
apichick
a5895d4e7c Added auto-provisioning-locations to gke-cluster-standard module (#3103) 2025-05-20 15:42:03 +00:00
Maciej Sikora
ece9887050 feat: enables blue-green upgrades (#3102) 2025-05-20 14:43:04 +00:00