Ludovico Magnocavallo
43191dbf63
prep v45.1.0
2025-10-26 15:03:03 +00:00
Wiktor Niesiobędzki
6554d18e35
Deprecate cloud-run module
2025-10-26 15:51:46 +01:00
Ludovico Magnocavallo
7b6c152755
Implement proper validation for tag value names in schema ( #3470 )
...
* implement proper validation for tag value names in schema
* fix unrelated typos surfaced by new spell check
2025-10-26 13:35:56 +01:00
Ludovico Magnocavallo
97596a0e8b
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-26 11:19:18 +00:00
Wiktor Niesiobędzki
7fe999562a
codespell fixes
2025-10-26 11:56:41 +01:00
Wiktor Niesiobędzki
269e47a565
Improve linting and fix agent-engine module name
2025-10-26 11:56:41 +01:00
Ludovico Magnocavallo
56b213a047
add fourth folder level to project factory module ( #3467 )
2025-10-26 10:34:02 +01:00
Ludovico Magnocavallo
6fafdc8780
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-25 08:08:22 +00:00
Wiktor Niesiobędzki
dc8a67b83a
yamllint modules
2025-10-24 13:11:17 +02:00
Simone Ruffilli
b13ccfe691
Use context in ilb routes ( #3462 )
...
* Use context in ilb routes
* Tests context
2025-10-24 11:06:54 +02:00
Viliam Pucik
bc31714f68
Fix identity handling in service perimeter when identity is null ( #3461 )
2025-10-24 07:00:06 +02:00
Ludovico Magnocavallo
4bf4047017
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-23 14:51:14 +00:00
Wiktor Niesiobędzki
8080192c39
Dont use provider functions, because OpenTofu doesnt like them
2025-10-23 15:50:17 +02:00
Wiktor Niesiobędzki
d9029e47a0
VPC Connector alignment to Cloud Run v2 + contexts
2025-10-23 15:50:17 +02:00
Wiktor Niesiobędzki
d1f257bcb9
align project-templates to new functions interface
2025-10-23 15:50:17 +02:00
Wiktor Niesiobędzki
36f2e65465
Cloud Function v2 - contexts and interface refactor
2025-10-23 15:50:17 +02:00
Wiktor Niesiobędzki
e17d2d1dc5
Cloud Function v1 - contexts and service account interface refactor
2025-10-23 15:50:17 +02:00
Ludovico Magnocavallo
b0bc896a68
Allow null project id in service account module when reusing service account ( #3452 )
...
* allow null project id for service account reuse
* fix pf
2025-10-22 16:51:06 +00:00
Simone Ruffilli
de8ebefe17
Start the deprecation process of the old networking stages ( #3451 )
...
This PR renames `2-networking-foo` stages to `2-networking-legacy-foo` - including references of stages in docs and tests.
**Breaking Changes**
```upgrade-note
`fast/stages/2-networking-a-simple`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
`fast/stages/2-networking-b-nva`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
`fast/stages/2-networking-c-separate-envs`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
`modules/net-vpc-factory`: The module has been deprecated, and superseded the `2-networking` FAST stage, introduced in #3435
```
2025-10-22 16:31:14 +02:00
Ludovico Magnocavallo
7ea9612b07
Allow skipping data source in service account module ( #3450 )
...
* test implementation
* wip
* service account reuse
* fix fast stage test
* revert cicd changes
* remove unused dep
* add comment on extra condition
2025-10-22 13:04:00 +02:00
Ludovico Magnocavallo
7b272da6b6
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-21 18:38:50 +00:00
Julio Castillo
772d064e1c
Skip IAM grants for service agents that are not created on API activation ( #3448 )
...
* Skip IAM grants for service agents that are not created on API activation
* Fix tests
2025-10-21 14:31:32 +00:00
Julio Castillo
367184561b
Few more typos
2025-10-21 15:13:51 +02:00
Julio Castillo
8598496f7a
Fix typo
2025-10-21 14:45:53 +02:00
Ludovico Magnocavallo
a4cc7cd979
Align schemas ( #3447 )
...
* enforce schema uniqueness
* schemas
* fix tests
2025-10-21 14:03:40 +02:00
Vannick Trinquier
c60ae3652a
Adding hardened datasets for preventive and detective Compliance Controls ( #3410 )
...
* Adding hardened datasets for preventive and detective Compliance Controls in stage 0 and stage 1 VPC-SC
* Move observability to factory file
* Update documentation
* Update local variable for use
* Update observability factory to use other module
* Add raw diagram file for hardened datasets
* Retrofit change
* Rename log_buckets context variable to be consistent across modules
* Update stage 0 documentation to mention hardened dataset
* Update customer ids list
* Update documentation, path to schema add ID to access level
* Comment organization policy gcp.resourceLocation by default
* Prevent duplicate key error by merging principal roles
* Adding ngfw roles files in hardened datasets
* Update script to validate files differences to support folder and datasets
* Format duplicate-diff python script
* Remove .config.yaml from duplicates
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-21 10:34:25 +00:00
Julio Castillo
b8aa4b5578
Merge branch 'master' into fast-dev
2025-10-21 08:14:42 +02:00
Julio Castillo
792003ff97
Remove Netsec Authz Service Agent ( #3445 )
...
* Remove Netsec Authz Service Agent
* fix tests
2025-10-20 19:36:03 +00:00
Ludovico Magnocavallo
32ca4498ad
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 17:56:31 +00:00
Luca Prete
64738a1808
Add Agent Engine module. ( #3429 )
2025-10-20 17:02:39 +02:00
Ludovico Magnocavallo
6fe142608d
fix merge
2025-10-20 13:59:18 +00:00
Ludovico Magnocavallo
ec09414823
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 13:58:44 +00:00
Julio Castillo
48f6b4cd49
Add PAM support ( #3438 )
...
* PAM first pass
* Add factory and extend to organization
* Extend to project, add examples
* Add additionalProperties to all objects
* Fix boilerplate
* Expose pam_entitlements to project-factory
* Fix readme
* Move entitlements to second folder/project pass
* extend tests
* Fix readme
* Remove timeouts from inventories
2025-10-20 12:50:37 +00:00
Ludovico Magnocavallo
a4f9924680
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-20 06:33:53 +00:00
Vannick Trinquier
30f46f09d6
Apply alerts and log based metrics after log buckets creation ( #3442 )
2025-10-20 06:13:42 +00:00
Ludovico Magnocavallo
ff71c9f1a3
fix pf merge
2025-10-18 14:30:57 +00:00
Ludovico Magnocavallo
2f9234547c
fix pf merge
2025-10-18 14:30:46 +00:00
Ludovico Magnocavallo
f5a05b3097
fix pf merge
2025-10-18 14:27:24 +00:00
Ludovico Magnocavallo
5e05044306
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
4113da128b
Support resource-level factories config in project factory module and FAST stages ( #3440 )
...
* support resource-level factories in project factory module
* align folder and project schemas across modules and fast
* schema docs
2025-10-18 10:41:19 +00:00
Julio Castillo
1566711c3a
Add service agent outputs to folder and organization ( #3436 )
...
* Add service agent outputs to folder and organization
* Fix tests
2025-10-17 17:23:08 +02:00
kovagoadam
84a258e247
Add retention support for project-factory buckets ( #3417 )
...
* Added retention support for project-factory buckets
* Cleanup
* Added retention_policy to project.schema.md in PF stage
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2025-10-17 10:30:20 +00:00
Ludovico Magnocavallo
0eb90e437f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 17:28:11 +00:00
lcaggio
9bbd453024
bigquery-connection module ( #3423 )
...
Implement bq-connection module
2025-10-16 15:15:36 +00:00
Simone Ruffilli
37455277d4
Adds context support to peering zones ( #3426 )
2025-10-16 15:58:27 +02:00
Taneli Leppä
7c6211a494
bigquery-dataset: fix issues ( #3425 )
...
* bigquery-dataset: add missing return_type to routines, fix view schema
encode, add dependency between routines and views
* Fix test.
---------
Co-authored-by: Julio Castillo <jccb@google.com >
2025-10-16 13:12:23 +00:00
Simone Ruffilli
5be136e2ea
Always use local.project_id in net-vpc
2025-10-16 14:37:07 +02:00
Ludovico Magnocavallo
e9dd48f5e7
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 09:03:15 +00:00
Ludovico Magnocavallo
8e8be1eda5
Support CIDR range sets in firewall modules context ( #3424 )
2025-10-16 09:01:05 +00:00
Ludovico Magnocavallo
ba2247b96f
Merge remote-tracking branch 'origin/master' into fast-dev
2025-10-16 07:45:00 +00:00