Commit Graph

6489 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
07d7a85da1 Lightly refactor service agents locals in project module (#3380)
* lightly refactor project module service agent locals

* remove debug block

* tfdoc

* revert templatestring to format for universe kms

* reinstate moved block
2025-10-05 10:25:04 +00:00
Ludovico Magnocavallo
7aa4e453d7 allow FAST stage 0 provider template to work with universe (#3379) 2025-10-05 11:17:31 +02:00
Ludovico Magnocavallo
4db29a48eb allow forcing jit service agents generation for universe (#3378) 2025-10-05 10:17:57 +02:00
Ludovico Magnocavallo
78258a8be6 changelog 2025-10-05 05:37:05 +00:00
Ludovico Magnocavallo
d1fbed59d2 allow project id with universe prefix in project module (#3376) 2025-10-04 11:57:27 +02:00
Ludovico Magnocavallo
43a2c8bce3 fix service account module datasource when universe is set (#3375) 2025-10-04 10:37:29 +02:00
Julio Castillo
66fac180a9 Fix admin_approval field access in VPC-SC module (#3374) 2025-10-03 17:10:38 +00:00
Ludovico Magnocavallo
7f291e140f Add support for output files to FAST project factory stage (#3373)
* providers

* providers

* output files

* readme

* refactor

* refactor provider names

* refactor

* gcs folders

* README

* Update fast/stages/2-project-factory/README.md

Co-authored-by: Julio Castillo <jccb@google.com>

* reword doc

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-03 12:20:04 +00:00
Vannick Trinquier
cfe2e21ce7 feat: add support for SCC Custom Security Health Analytics module in … (#3372)
* feat: add support for SCC Custom Security Health Analytics module in organization, folder and project modules

* fix: update description and docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-03 13:47:50 +02:00
Ram J A
5fb76628f6 Adding support for managed connection pooling in CloudSQL (#3365)
* added support for managed connection pooling for postgres in cloudsql

* updated readme.md and fixed formatting in variables.tf

* changed variable declaration to handle defaults and resource to remove redandent null check

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-03 09:32:08 +00:00
Ludovico Magnocavallo
777d2bc25b changelog 2025-10-03 06:03:53 +00:00
Ludovico Magnocavallo
08ccec3922 Make project id optional in GCS module (#3369)
* make project id optional in GCS module

* tfdoc
2025-10-02 16:23:23 +00:00
kovagoadam
505ee02fef Add support for billing export in 0-org-setup (#3347)
* Add support for billing export in 0-org-setup

* Merge branch 'master' into add-billing-export-support

* Refactored billing export with adding support for bigquery_datasets in project_factory

* Renamed bigquery_dataset to datasets

* Fixed defaults.schema.md

* Fixed default.schema.md again

* Cleanup md's

* Fixed boilerplate

* Fixed JSON schema

* reword README, rename project file

* Moved dataset_id to the key of the map

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-01 10:12:45 +00:00
norbert-loderer
e205b11954 Add missing billing viewer role for org-ro service account in org-setup stage. (#3364) 2025-10-01 11:53:41 +02:00
Patrick Lubach
9651e39e17 Add custom error response policy for route rules to external application load balancer module. (#3353)
* feat: Add custom_error_response_policy support for route_rules

* feat: Add custom_error_response_policy support for route_rules

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-09-27 07:38:13 +00:00
kovagoadam
c334e3c60f Fixed small typo in project-factory module with log-buckets (#3357)
* Fixed small typo in project-factory module

* Add log_analytics and retention to log_buckets
2025-09-27 07:21:48 +00:00
Wiktor Niesiobędzki
542956c848 Use pre-commit managed Python environment for pre-commit checks 2025-09-27 09:06:30 +02:00
Wiktor Niesiobędzki
3e0f53fb38 Fix linting / remove unnecessary screenshot 2025-09-26 15:50:58 +02:00
Julio Castillo
acae030649 Update README.md 2025-09-24 14:11:41 +03:00
Ludovico Magnocavallo
90ee0ccf12 Expose project factory stage defaults via a YAML file (#3354)
* initial implementation

* README

* tfdoc
2025-09-24 09:59:11 +00:00
norbert-loderer
2492494c68 Fixing typos and adding missing roles for Terraform and CI/CD service… (#3351)
* Fixing typos and adding missing roles for Terraform and CI/CD service accounts in 0-org-setup stage.

* Updated organization schema to allow defining custom roles under iam_by_principals and updated organization.schema.md accordingly.
2025-09-23 19:20:21 +00:00
Taneli Leppä
f1762a5465 Add resource_manager_tags to gke-standard-cluster, gke-autopilot-cluster and gke-nodepool (#3350)
* Add resource_manager_tags to gke-nodepool, gke-standard-cluster's node_config and gke-autopilot
2025-09-23 15:51:37 +02:00
apichick
e23edb46fd Added Cloud Build v2 connection module (#3346)
* Added Cloud Build v2 connection module

* Removed prefix as it is not necessary

* Corrected mistake with comment_control

* Corrected trigger name and updated README
2025-09-22 15:42:13 +02:00
Ludovico Magnocavallo
d0e2a54948 rationalize prefix handling for project factory automation resources (#3345) 2025-09-21 21:07:28 +02:00
Ludovico Magnocavallo
0103c64457 fix duplicate check 2025-09-20 12:12:01 +00:00
Ludovico Magnocavallo
c0aa691052 v45.0.0 2025-09-20 12:07:40 +00:00
Ludovico Magnocavallo
177b70762f Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-20 12:00:50 +00:00
Ludovico Magnocavallo
4801b65291 v44.2.0 2025-09-20 11:57:31 +00:00
kovagoadam
c9902668fb Add default values for environments in stage 2, moved to variables.tf (#3344) 2025-09-20 11:51:44 +00:00
Wiktor Niesiobędzki
56f4513e0d Remove unused bootstrap_user variable 2025-09-19 12:11:15 +02:00
Wiktor Niesiobędzki
3a3dd1de09 remove duplicate / misplaced policy 2025-09-19 11:43:44 +02:00
kaue
396265bb15 docs(blueprints): add deprecation notice (#3335)
* docs(blueprints): add deprecation notice

* Update GKE module version reference to v43.0.0

* Update README to remove deprecated blueprint access

Removed instructions for accessing deprecated blueprints.

* Update README.md

* Update README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2025-09-19 06:58:15 +00:00
norbert-loderer
d667745c7b Added default value for environments variable and moved it to variables.tf from variables-fast.tf (#3337)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-09-19 08:38:59 +02:00
norbert-loderer
2aae7b3ab6 Add conditional grants on security to pf service account in FAST stage 0 (#3338) 2025-09-19 08:15:05 +02:00
Ludovico Magnocavallo
ec09e2800a Merge branch 'master' of github.com:GoogleCloudPlatform/cloud-foundation-fabric 2025-09-18 07:26:10 +00:00
Ludovico Magnocavallo
424ad94bf9 changelog 2025-09-18 07:26:02 +00:00
Ludovico Magnocavallo
f7e7b2ccf8 Allow setting resource policies in compute-vm module (#3336)
* allow setting resource policies in compute-vm module

* Update modules/compute-vm/resource-policies.tf

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>

* revert splat change

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2025-09-18 07:13:47 +00:00
fenyvesi-levi
4102e53588 Added 2 IAM roles for pf SA and updated test (#3333)
* Added 2 IAM roles for pf SA and updated test

* Updated role grant with condition
2025-09-17 13:37:07 +00:00
Ludovico Magnocavallo
dc24cd10b6 add support for permissive mode to GKE cluster modules backup plans (#3331) 2025-09-17 07:15:20 +00:00
Ludovico Magnocavallo
02b37c5958 Fix alert variable notification prompts type in project module (#3330) 2025-09-17 08:59:18 +02:00
Ludovico Magnocavallo
95f52e1e48 changelog 2025-09-17 05:41:43 +00:00
Ludovico Magnocavallo
c6cdc9c98c Incremental improvements to project factory and underlying modules (#3325)
* incremental improvements to project factory and underlying modules

* fix org policies diff test
2025-09-16 23:21:18 +02:00
fenyvesi-levi
589a2b088a dev-platform.yaml secondary_ip_ranges syntax fix (#3326) 2025-09-16 13:57:40 +00:00
Ludovico Magnocavallo
9b3291c395 Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-16 10:42:32 +00:00
Josh Myers
5bbd47e9ac feat: Support serverless_deployment NEG for api gateway (#3323) 2025-09-16 11:11:59 +02:00
norbert-loderer
659472d487 Added read-only providers to 0-org-setup stage, and fixed CI/CD parameters in the generated workflow file (WIF_PROVIDER, provider files etc.) (#3322) 2025-09-16 08:02:02 +00:00
Ludovico Magnocavallo
768e6c6d16 Merge remote-tracking branch 'origin/master' into fast-dev 2025-09-15 08:17:54 +00:00
Ludovico Magnocavallo
138bb981e3 add instance access logging support to apigee module (#3321) 2025-09-14 13:14:26 +02:00
Ludovico Magnocavallo
a795399142 changelog 2025-09-12 12:38:54 +00:00
Ludovico Magnocavallo
b6baf05c49 Add http_keep_alive_timeout_sec to application load balancers (#3320)
* net-lb-app-ext

* net-lb-app-int-cross-region
2025-09-12 12:17:01 +00:00