Commit Graph

5996 Commits

Author SHA1 Message Date
Ludo
fb300f9e58 v38.0.0 2025-02-21 09:40:35 +01:00
Ludo
93f2a3f272 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-21 09:36:51 +01:00
Ludo
79ee5e8dd7 v37.4.0 2025-02-21 09:29:51 +01:00
Wiktor Niesiobędzki
2427b2e0fd Add error messages for failing interpolations 2025-02-21 09:20:44 +01:00
Peter Norton
24b7297f58 Add support for custom error response policies to net_lb_app_ext module (#2916)
* Add support for default custom error response policy

This update introduces the ability to define a default custom error response policy in the URL map module. It includes support for specifying error services and error response rules with match response codes, paths, and override response codes. This enhancement increases flexibility in handling custom error responses.

* Update error_service handling in URL map

Modified the error_service assignment to include a fallback lookup mechanism for backend IDs when the value is not null. This ensures robustness and avoids null references while maintaining existing behavior.

* Add custom error response policies in lower levels of URL map

* Update net-lb-app-ext README.md
2025-02-20 20:32:24 +01:00
Ludo
1c0d191386 linting 2025-02-20 16:29:03 +01:00
Ludo
7aad81d97f move ilb as next hop blueprint to module-level recipe 2025-02-20 16:26:38 +01:00
Ludo
82f1cf965f Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-20 15:04:07 +01:00
Nathalie
a15d1a3c2a output dns_keys instead of a list (#2915)
* output dns_keys instead of a list

* access list items with square brackets according to linter
2025-02-20 09:56:57 +00:00
Julio Castillo
21253a1768 Add title to VPC-SC directional policies (#2909)
* Add title to VPC-SC directional policies

* Ignore versions.tf in diffs

* Update versions.tf

* Fail if a perimeter uses unknown directional policies
2025-02-20 08:48:08 +00:00
Ludo
411b2f6e6c Merge branch 'master' into fast-dev 2025-02-20 07:58:33 +01:00
Ludovico Magnocavallo
5312767be4 Add provider output files to project factory stage, single automation bucket in module (#2914)
* single automation bucket, provider output files for project factory

* tfdoc

* fix outputs
2025-02-19 17:45:56 +00:00
Daniel Strebel
aab282bf19 feat: adding generated_id for backends to net-lb-app-ext (#2913) 2025-02-19 18:16:05 +01:00
Wiktor Niesiobędzki
58051e48e7 Fix tests 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
fd07db5000 Add tftests for project factory 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
0a1b6c6e0f Add ability to refer to other project service accounts in Project Factory 2025-02-19 16:47:15 +01:00
Ludo
d6f4c5cea6 update changelog 2025-02-19 10:47:17 +01:00
Ludovico Magnocavallo
427763f7e6 add support for max workstations, refactor timeouts in workstation-cluster module (#2911) 2025-02-19 09:45:38 +00:00
Simone Ruffilli
942ef8fe3d Add ssl_mode support to cloudsql-instance replicas (#2910)
* Add ssl_mode support for cloudsql-instance replicas

* Rename var.ssl.ssl_mode to var.ssl.mode
2025-02-19 10:31:35 +01:00
Julio Castillo
009e03d55d Update pull_request_template.md 2025-02-18 21:44:13 +01:00
Julio Castillo
064fc0e280 Update pull_request_template.md 2025-02-18 21:41:40 +01:00
Wiktor Niesiobędzki
3ddfd59b88 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-18 20:30:14 +00:00
Julio Castillo
4c6e6d6791 Add breaking changes to changelog (#2908) 2025-02-18 18:09:13 +00:00
Julio Castillo
4e965f1b62 Fix tests 2025-02-18 18:02:38 +01:00
Wiktor Niesiobędzki
c1ab3bf710 Remove Service Account key generation 2025-02-18 18:02:38 +01:00
Julio Castillo
51bd19bc30 Update default FAST org policies (#2906)
* Update org default org policies

* Update default FAST org policies
2025-02-18 16:34:44 +01:00
Julio Castillo
348e4df081 Fix default compute.restrictProtocolForwardingCreationForTypes value (#2904) 2025-02-18 14:28:33 +01:00
Simon Roberts
642ebfe9e9 Increase the default complexity of Cloud SQL DB passwords (#2886)
* Increase the default complexity of DB passwords in order to meet password_validation_policy.default_complexity

* Use password_validation_policy.min_length if provided

* Explicitly generate a root_password if not provided

* Use object (password, random_password) for root_password config

* Make root_password non-nullable, and add validation against specifying both a password and `random_password`.
Fix test for stronger password generation.

* Add example for root_password and password_validation_policy

* Rerun tfdoc.py

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-02-18 10:46:29 +00:00
Ludo
e8e7ad7fe9 update changelog 2025-02-18 10:28:56 +01:00
Ludovico Magnocavallo
44de36905e Allow passing explicit regions in net test addon subnets (#2902)
* allow passing explicit regions in net-test addon subnets

* checkout repo in labeler

* checkout repo in labeler

* revert labeler changes
2025-02-18 10:26:39 +01:00
Ludo
8f6cd6dedc Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-18 08:36:34 +01:00
Ludovico Magnocavallo
aee6d1e27a add chain output (#2901) 2025-02-18 07:05:28 +00:00
jacklever-hub24
a8d7d401d6 Add support for locality policies to net-lb-app-ext module (#2898)
* Fix the missing locality_lb_policy value and add validation for it

* Added variables, dynamic blocks and validation to support locality_lb_policy/ies

* Formatting

* tfdoc generation

* Fix net-lb-app-ext readme

* Fixes for Ludo, coalesce and brevity

* fmt

* Revert null check due to failing tests

---------

Co-authored-by: Jack Lever <jack@thelevers.com.au>
Co-authored-by: Ludo <ludomagno@google.com>
2025-02-18 06:25:45 +00:00
simonebruzzechesse
b0021cc0f1 New SecOps anonymization pipeline (#2794)
* new secops anonymization pipeline

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-02-17 19:23:19 +01:00
Ludovico Magnocavallo
1a4b298cc9 Project factory additions, project module reuse implementation (#2899)
* add support for buckets

* add project-level interpolation for own SAs

* docs

* project reuse changes

* fix example

* tfdoc

* update check documentation tool

* fast tests

* blueprints

* typo
2025-02-15 20:37:45 +01:00
Ludovico Magnocavallo
87383a1569 FAST project templates example (#2897)
* wip

* project factory providers

* working example

* copyright, tfdoc

* rewording

* rewording

* tfdoc

* tfdoc

* tfdoc again

* fix tests

* tests
2025-02-14 19:14:27 +00:00
Ludo
261e4137ba Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-14 16:14:34 +01:00
Julio Castillo
d0c3f04c10 Make service agents work in different universes (#2894)
* Make service agents work in different universes

* Use templatestring and two passes for service agent emails

* Fix tests
2025-02-14 12:16:07 +00:00
Ludovico Magnocavallo
9148e76087 Add support for project-level log sinks to FAST stage 0 (#2893)
* Fix ipv6 and align loadbalancer address types

* Release v37.3.0

* add support for project-level log sinks to stage 0

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2025-02-14 11:58:18 +01:00
Julio Castillo
a15f97db67 Add universe support to iam-service-accounts (#2892)
* Make service account universe aware

* Add service account universe tests
2025-02-14 09:06:23 +01:00
Julio Castillo
fd9f92324b Update VPC-SC module and FAST stage (#2887)
* Update VPC-SC module to support vpc subnets

* Update FAST VPC-SC variables

* Fix tests
2025-02-13 18:04:09 +00:00
Ludovico Magnocavallo
f22d783cf7 Address DNS issues with googleapis RPZ and forwarding (#2891)
* add empty DNS zone for googleapis to net stages

* add ipv6 records for private/restricted

* avoid permadiff in rpz ipv6 addresses
2025-02-13 16:08:27 +00:00
Julio Castillo
e5c6045de1 Add compute.restrictProtocolForwardingCreationForTypes to importable policy set (#2888) 2025-02-13 13:00:25 +00:00
Julio Castillo
d43c624f9e Add new set of org policies with managed constraints to FAST bootstrap (#2884)
* Managed org policies example

* Add folder with managed org policies

* Add tests for managed org policies

* Document new managed org policy set
2025-02-12 19:38:44 +00:00
Wiktor Niesiobędzki
5e31633f34 Release v37.3.0 2025-02-12 13:16:16 +00:00
Wiktor Niesiobędzki
62665f2475 Fix ipv6 and align loadbalancer address types 2025-02-12 14:09:31 +01:00
Ludo
2e63bf1029 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-12 06:47:44 +01:00
Ludo
c7262a7a87 prepare v37.2.0 release 2025-02-11 18:15:19 +01:00
Ludovico Magnocavallo
7f2ff08997 Address outstanding load balancer FRs (#2879)
* fix #2877

* fix #2866

* fixes #2865

* fixes #2865

* moved block

* fix standalone test

* blueprints
2025-02-11 18:09:02 +01:00
Julio Castillo
4dc61aafda Move DRS and essential contact domains to factory (#2878)
* Move DRS and essential contact domains to factory

* Update docs
2025-02-11 16:36:16 +00:00