HeiglAnna
efa1ef6f7e
Add cAdvisor Metrics to Autopilot/Standard GKE Cluster ( #2841 )
...
* Add cAdvisor Metrics to Autopilot/Standard GKE Cluster
* Fix tests
---------
Co-authored-by: AnnaHeigl <85624888+AnnaHeigl@users.noreply.github.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2025-01-30 13:29:07 +00:00
Julio Castillo
c73035f4e5
Allow universe-bound projects to exclude services ( #2852 )
...
* Allow universe-bound projects to exclude services
* Update README
2025-01-30 08:48:58 +01:00
Julio Castillo
29e7669385
Support project creation in different universes ( #2848 )
...
* Support project creation in different universes
* Fix typo
* Revert prefix validation
* Add test
* Call new test
* Do not override project name
2025-01-29 12:40:41 +01:00
frits-v
43e6daca8f
fix(certificate-manager): reference dns_authz by fully qualified id ( #2833 )
2025-01-22 22:49:12 +01:00
Julio Castillo
8a2320311d
Add bucket_create to modules/gcs ( #2827 )
...
* Add `bucket_create` to `modules/gcs`
* Create local with bucket name
* Update variable description
* Fix bucket output
* Fix tests
* Fix tests
* Bump OpenTofu to 1.9.0 (needed for multi-var validations)
2025-01-21 23:48:36 +01:00
Wiktor Niesiobędzki
10cc3d8079
modules/compute-vm end-to-end tests and fixes
2025-01-16 10:54:52 +01:00
Julio Castillo
7eff7b19dc
Add iam_by_principals_additive to project, organization and folder modules ( #2814 )
...
* First attempt at iam_by_principals_additive
* Remove validation
* Update IAM ADR
* Apply to organization and project modules
* Update READMEs
* Add tests
* Remove "cycle errors"
2025-01-14 12:32:19 +00:00
Julio Castillo
f1acc92864
Add support for log views and log scopes ( #2776 )
...
* Add views and tags to logging bucket
* Add logs scopes to project
* Add missing inventory
2024-12-18 18:29:44 +01:00
Ludovico Magnocavallo
d86b8d565c
Refactor GKE cluster modules access configurations, add support for DNS endpoint ( #2761 )
...
* stub
* gke standard module and tests
* blueprints
* tfdoc
* autopilot
* blueprints
* tfdoc
* gke hub module examples
* dataproc and gke fixture
2024-12-12 11:02:24 +01:00
Luca Prete
c6c6bbfffa
Add ability to autogenerate md5 keys in net-vpn-ha ( #2748 )
...
* Add ability to optionally generate MD5 secrets in VPN module
* Add ability to autogenerate MD5 keys in net-vpn-ha module
* restore missing output
* fix test counts
---------
Co-authored-by: Luca Prete <lucaprete@google.com >
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2024-12-06 07:34:56 +00:00
Ludovico Magnocavallo
5e0878903c
SWP module refactor ( #2737 )
...
* new swp interface and factory
* outputs
* tests and fixes
2024-11-27 12:54:59 +00:00
Ludo
028721059c
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-22 15:45:35 +01:00
fulyagonultas
be0f2e58b2
enable_private_path_for_google_cloud_services added to CloudSQL ( #2726 )
...
* enable_private_path_for_google_cloud_services added to CloudSQL
* name of the variable changed
* new feature added to the replica as well
* Update simple.yaml enable_private_path_for_google_cloud_services: false
2024-11-22 13:08:33 +00:00
Ludo
a3bffbbcbf
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-22 07:39:09 +01:00
Luca Prete
404e5a3b3e
Add location to cert-manager issuance config and fix issuance config reference ( #2720 )
2024-11-19 13:27:11 +01:00
Julio Castillo
8714b7a713
Merge branch 'master' into fast-dev
2024-11-18 15:19:55 +01:00
Julio Castillo
c60d152f4a
Add hierarchical namespace support to GCS module ( #2712 )
...
* Add hierarchical namespace support to GCS module
* remove empty iap block from inventories
* Fix tests
* Add new hns inventory
---------
Co-authored-by: Ludo <ludomagno@google.com >
2024-11-18 11:41:49 +00:00
Ludo
104306e0c2
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-17 16:31:59 +01:00
Wiktor Niesiobędzki
6b0745deed
Add gcs mount_options, move direct vpc out of BETA
2024-11-16 12:52:50 +01:00
Wiktor Niesiobędzki
9e6b114b8c
Fix E2E tests
2024-11-16 11:02:16 +01:00
Wiktor Niesiobędzki
e0d6f0eadb
Fix examples
2024-11-15 09:58:01 +01:00
Ludo
3acbf59c58
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-14 13:57:17 +01:00
Wiktor Niesiobędzki
fe52a9102b
Fix gcs mounts for cloud-run-v2, closes #2684
2024-11-14 13:33:20 +01:00
Ludovico Magnocavallo
2b378f4b3a
port and fix changes from #2677 ( #2682 )
2024-11-14 11:05:36 +00:00
Ludo
1ea2b61df3
Merge remote-tracking branch 'origin/master' into fast-dev
2024-11-12 10:15:59 +01:00
Wiktor Niesiobędzki
b85711e81b
Additional examples
...
- Cloud Run - mounting Cloud SQL
- Cloud SQL - creating users for IAM service account
2024-11-10 07:02:29 +01:00
Luca Prete
02d14da4db
Update SWP ( #2666 )
2024-11-09 13:54:13 +01:00
Ludovico Magnocavallo
50ac3a5013
Refactor of FAST resource management and subsequent stages ( #2648 )
...
* untested
* pllan testing
* fix stage 2s
* move providers to their own file
* single-environment stage 3
* fixes and moved blocks
* stage3 factory
* doc
* review comments
* review comments
* tfdoc
* fasts tage 1 tests
* netsec as stage 2
* fix backported roles
* fix backported roles
* tfdoc
* fixes
* fix tag value roles in stage 1
* remove checklist, fix stage 1 tests
* inventory
* Small bugfix
* refactor context tag values
* fix previous merge
* fix previous merge
* fix previous merge
* support short names for top level automation resources, change top level context variable
* fix new top level context
* roll back merge changes to stage 0 outputs
* roll back more merge changes
* linting errors
* tfdoc
* fix tests, roll back merge in tenants stage
* tfdoc
* fix inventory
* optional stage 2 env folders and tag bindings
* tflint
* damn tflint
* damn tflint
* tfdoc
* fix networking tests
* tflint
* fix test inventories
* tfdoc
* use coalesce for project parents
* fix billing role conditions
* fix billing role conditions
* security stage tested (ngw resources need fixing/porting)
* boilerplate
* fix inventory
* stage envs and stage linking script
* initial work on resman docs, update diagram, improve teams folder
* resman README
* fix stage 2 IAM delegation
* remove checklist from bootstrap
* stage 1 tests
* stage 0 1 and 2 tests
* tflint
* tflint
* tfdoc
* GCVE stage refactor (untested)
* GCVE stage refactor (untested)
* GCVE stage 3
* gcve tests
* tflint
* tfdoc
* fix links
* module tests
* stages README
* move network security to stage 2
* network security tests
* replace stage links in README files
* minimal netsec stage refactor
* use factory for iac org policies, add configurable drs org policy for iac
* test mt stage
* tfdoc
* fix cicd workflows
* fix cicd workflows
* gke-dev stage
* tflint
* remove data platform stage
* exclude provider files via tfdoc opts
* remove data platform tests and links
* fix merge
* fix resman inventory
* boilerplate
* inventory
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com >
2024-10-31 16:55:54 +01:00
Benoît Sauvère
cb234fd35b
feat: implement the new iam interface in artifact-registry ( #2606 )
...
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com >
2024-10-04 13:49:48 +00:00
Liam Nesteroff
163a0eab2b
Allow manage existing SSM instance ( #2595 )
...
* added option to manage an existing SSM instance
* switched depends on to try for instance iam
* added resource instance keys
* add instance keys to tests
* changed label default to null
* updated readme
* replaced try functions with conditional expressions for IAM
2024-09-27 12:13:30 +02:00
apichick
3fad96436c
Added biglake-catalog module ( #2572 )
2024-09-24 17:39:29 +02:00
simonebruzzechesse
1f2bdd0033
New looker core module ( #2565 )
...
* new looker core module
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-09-20 12:12:09 +02:00
apichick
0f28d266dd
Secure source manager ( #2569 )
...
* Added secure-source-manager-instance module
* Fixes after review
2024-09-19 10:29:01 +00:00
apichick
8e0dac84f9
Bigquery dataset routines ( #2570 )
...
* Added routines to bigquery-dataset module
* Fixes after review
2024-09-19 09:13:32 +00:00
Simone Ruffilli
7f8a02a405
Add support for google provider 6.x ( #2536 )
...
* Add support for google provider 6.x
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
Co-authored-by: Julio Castillo <jccb@google.com >
2024-09-05 10:35:58 +00:00
Wiktor Niesiobędzki
44a4268afc
Fix E2E tests
2024-09-04 12:16:50 +02:00
jamesdalf
8ca3bc390f
Module net-vpc fix for reserved ranges ( #2538 )
...
* fix the reserved ranges
* updated readme
* formatting
* fix example test
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com >
2024-08-30 05:10:28 +00:00
Ludovico Magnocavallo
cecce6b3a0
Allow customizable prefix in net-vpc module PSA configs ( #2535 )
...
* allow customizable prefix in net-vpc module PSA configs
* fix peered domain key
2024-08-28 09:24:13 +00:00
Julio Castillo
f57635d044
Add managed folders suports to gcs module ( #2530 )
...
* Add RPO, make versioning dynamic
* Add manaed folders
* Change autoclass and cors defaults to null
* Update README
* Add iam_by_principals
* Add managed folders var description
* Remove need for managed folders to end in /
* Add inventory to example
* Update readme
* Fix FAST tests
2024-08-28 07:30:52 +00:00
Julio Castillo
d4e727a482
Update stable provider too ( #2531 )
2024-08-28 08:49:46 +02:00
Simone Ruffilli
e82cc35f50
net-swp module cleanup ( #2510 )
...
* net-swp: add support for PSC SA
* Doc updates
2024-08-21 11:28:20 +02:00
Ludovico Magnocavallo
ad5de9b7ea
Refactor FAST project factory and supporting documentation ( #2505 )
...
* untested
* teams pattern
* rework doc
* README
* boierplate
* tflint
* Fix tflint for project factory
* Correct path to pf
* resman changes
* fix factory variable default
* fix links
* project factory module substitutions
* tflint
* stage test
* tfdoc
* rename schema, address review comments
* README typos and wording
* tfdoc
* review comments
* remove test from yaml
* revert output workflow changes
* fix sa reference errors
* tfdoc
* pf tag roles
* schema validation
* pf tag roles
* avoid null values in pf context
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com >
2024-08-20 16:45:42 +00:00
Julio Castillo
0420dec32f
Add deletion_policy to project module ( #2502 )
...
* Replace skip_delete with deletion_policy
* Fix blueprints
* Update apigee blueprint readme
* Remove skip_delete from test inventories
2024-08-16 18:33:39 +02:00
Luca Prete
092053b517
Adds a new certification authority service (CAS) module ( #2481 )
2024-08-08 09:55:48 +02:00
Julio Castillo
9880c0b64d
Add support for PSC global access to net-address ( #2480 )
...
* Add support for PSC global access to net-address
Fixes #2479
* Fix example formatting
2024-08-07 17:27:03 +00:00
Wiktor Niesiobędzki
2758eee4ff
Fix inventories for Cloud SQL
2024-08-06 11:49:29 +02:00
Wiktor Niesiobędzki
d395e9490d
Fix quotas E2E tests
2024-08-06 11:49:29 +02:00
Ludovico Magnocavallo
345716e576
VPC-SC as separate FAST stage 1 ( #2460 )
...
* initial commit
* README
* boilerplate
* tflint
* tfdoc
* fix security stage tests
* vpc-sc stage tests
* tflint
* fix resman stage test inventories
* security README
* stage-level README
* Update README.md
* flexible perimeter variable
* remove diagram
* change default to dry run
* default to dry run
2024-08-02 18:04:36 +02:00
Julio Castillo
1bbff3cc3a
Add support for dry-run org policies ( #2454 )
2024-07-30 13:12:57 +00:00
Julio Castillo
c0bf32e797
Refactor service agent management ( #2423 )
...
* Service agents script
* Service agents update
* WIP
* Update script and terraform
* Fix tests
* Fix linter
* Update docs
* Bring back pf example inventory
* Fix tests
* Fix more tests
* Fix tests
* Use dataclasses for build_service_agents.py
* Remove unneeded field() from build_service_agents
* Re-enable CMEK depends_on in project outputs
* Update tools/requirements.txt
* Enable storage in GCS example projects
* Fix tests
* Add CMEK Service Agents dependencies for services
* Fix typos and data platform cmek
* More typos
2024-07-23 22:05:38 +02:00