Commit Graph

6416 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
ecdc248f3f Add support for context to net-cloudnat, net-firewall-policy modules (#3414)
* net-cloudnat

* net firewall policy
2025-10-15 13:59:51 +02:00
Julio Castillo
9c61b1c30c Make SSM gitignores a list (#3413)
Fixes #3395
2025-10-15 11:35:44 +02:00
Ludovico Magnocavallo
6e02fd1136 Add support for context to DNS modules (#3412)
* dns-response-policy

* add context to dns modules
2025-10-14 16:07:29 +00:00
Wiktor Niesiobędzki
5bc9d831be Pass deletion_protection to secondary instance 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
9f2beb1ee6 Use fixture custom role for modules/project tests 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
849e856437 Use email from variables in tests 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
6673cba773 Fix provider failure when appling example 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
b10d31ef98 Add unique suffix to custom role 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
ad9d52a7da Use context prefixes for auto service grants 2025-10-13 18:58:52 +02:00
Wiktor Niesiobędzki
23dd44ce62 remove tf version from matrix, to keep workflow names stable across upgrades 2025-10-13 17:40:51 +02:00
Ludovico Magnocavallo
6045cf6ae2 Add support for contexts to compute-vm module (#3406) 2025-10-13 16:54:13 +02:00
Ludovico Magnocavallo
5f4c3a0fb2 remove spurious files 2025-10-13 09:38:02 +00:00
Ludovico Magnocavallo
606b86ce7a changelog 2025-10-13 09:37:27 +00:00
Julio Castillo
9b9ad76ced Update gke-hub module to use new Policy Controller API (#3332)
* Update gke-hub to use new Policy Controller API

Fixes #3287

* Use same config format for servicemesh

* remove useless trys

* use ternaries as in the rest of the repo

* Update docs and fix tests

* Update variables

* Bump tofu version

* Bump terraform version 1.12
2025-10-13 09:47:39 +02:00
Wiktor Niesiobędzki
802a25279a Test service_iam_grants along service_agent_iam 2025-10-12 15:02:12 +02:00
Wiktor Niesiobędzki
12c0c04e1c Add tests for service agents iam_emails 2025-10-12 15:02:12 +02:00
Ludovico Magnocavallo
8749683850 fix incorrect cloudservices agent email for global universe (#3402) 2025-10-12 11:13:50 +00:00
Ludovico Magnocavallo
6a79d0f74c Remove unavailable service from VPC-SC stage services list (#3400) 2025-10-10 05:58:08 +00:00
Victor Voisin
452060961a fix: expose missing audiences variable for gitlab workflow file generation (#3385)
In 0-org-setup, when using gitlab cicd, workflow-gitlab.yaml expects an
audiences variable.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-07 11:37:20 +00:00
Ludovico Magnocavallo
ffae137088 changelog 2025-10-07 08:03:41 +00:00
Ludovico Magnocavallo
7b70177459 add context to bigquery module (#3388) 2025-10-07 07:57:42 +00:00
Ludovico Magnocavallo
51c290c9d7 add support for universe to fast project factory stage (#3384) 2025-10-06 07:00:00 +00:00
Ludovico Magnocavallo
ebc7d5ad2c changelog 2025-10-06 05:44:58 +00:00
Nishant Raghav
81c7213f92 feat(bigquery-dataset): add optional schema support for views (#3377)
* feat: add optional schema to BigQuery views for descriptions

* feat: add schema support for view definitions in BigQuery dataset module

* fix: encode schema as JSON for BigQuery views

* feat: add population schema and update query for population view in BigQuery dataset

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-06 05:40:39 +00:00
Ludovico Magnocavallo
e9c3341323 support universe in fast security stage (#3383) 2025-10-06 07:24:50 +02:00
Ludovico Magnocavallo
b9b62eff89 Delete fast/stages/2-security/data/folders/main.tf 2025-10-05 16:15:47 +02:00
Ludovico Magnocavallo
2815b90759 changelog 2025-10-05 14:03:36 +00:00
Ludovico Magnocavallo
ae06160d58 Fix typo in fast stage 0 provider template (#3381) 2025-10-05 11:35:49 +00:00
Ludovico Magnocavallo
07d7a85da1 Lightly refactor service agents locals in project module (#3380)
* lightly refactor project module service agent locals

* remove debug block

* tfdoc

* revert templatestring to format for universe kms

* reinstate moved block
2025-10-05 10:25:04 +00:00
Ludovico Magnocavallo
7aa4e453d7 allow FAST stage 0 provider template to work with universe (#3379) 2025-10-05 11:17:31 +02:00
Ludovico Magnocavallo
4db29a48eb allow forcing jit service agents generation for universe (#3378) 2025-10-05 10:17:57 +02:00
Ludovico Magnocavallo
78258a8be6 changelog 2025-10-05 05:37:05 +00:00
Ludovico Magnocavallo
d1fbed59d2 allow project id with universe prefix in project module (#3376) 2025-10-04 11:57:27 +02:00
Ludovico Magnocavallo
43a2c8bce3 fix service account module datasource when universe is set (#3375) 2025-10-04 10:37:29 +02:00
Julio Castillo
66fac180a9 Fix admin_approval field access in VPC-SC module (#3374) 2025-10-03 17:10:38 +00:00
Vannick Trinquier
cfe2e21ce7 feat: add support for SCC Custom Security Health Analytics module in … (#3372)
* feat: add support for SCC Custom Security Health Analytics module in organization, folder and project modules

* fix: update description and docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-03 13:47:50 +02:00
Ram J A
5fb76628f6 Adding support for managed connection pooling in CloudSQL (#3365)
* added support for managed connection pooling for postgres in cloudsql

* updated readme.md and fixed formatting in variables.tf

* changed variable declaration to handle defaults and resource to remove redandent null check

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-10-03 09:32:08 +00:00
Ludovico Magnocavallo
777d2bc25b changelog 2025-10-03 06:03:53 +00:00
Ludovico Magnocavallo
08ccec3922 Make project id optional in GCS module (#3369)
* make project id optional in GCS module

* tfdoc
2025-10-02 16:23:23 +00:00
kovagoadam
505ee02fef Add support for billing export in 0-org-setup (#3347)
* Add support for billing export in 0-org-setup

* Merge branch 'master' into add-billing-export-support

* Refactored billing export with adding support for bigquery_datasets in project_factory

* Renamed bigquery_dataset to datasets

* Fixed defaults.schema.md

* Fixed default.schema.md again

* Cleanup md's

* Fixed boilerplate

* Fixed JSON schema

* reword README, rename project file

* Moved dataset_id to the key of the map

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-01 10:12:45 +00:00
norbert-loderer
e205b11954 Add missing billing viewer role for org-ro service account in org-setup stage. (#3364) 2025-10-01 11:53:41 +02:00
Patrick Lubach
9651e39e17 Add custom error response policy for route rules to external application load balancer module. (#3353)
* feat: Add custom_error_response_policy support for route_rules

* feat: Add custom_error_response_policy support for route_rules

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-09-27 07:38:13 +00:00
kovagoadam
c334e3c60f Fixed small typo in project-factory module with log-buckets (#3357)
* Fixed small typo in project-factory module

* Add log_analytics and retention to log_buckets
2025-09-27 07:21:48 +00:00
Wiktor Niesiobędzki
542956c848 Use pre-commit managed Python environment for pre-commit checks 2025-09-27 09:06:30 +02:00
Wiktor Niesiobędzki
3e0f53fb38 Fix linting / remove unnecessary screenshot 2025-09-26 15:50:58 +02:00
Julio Castillo
acae030649 Update README.md 2025-09-24 14:11:41 +03:00
Ludovico Magnocavallo
90ee0ccf12 Expose project factory stage defaults via a YAML file (#3354)
* initial implementation

* README

* tfdoc
2025-09-24 09:59:11 +00:00
norbert-loderer
2492494c68 Fixing typos and adding missing roles for Terraform and CI/CD service… (#3351)
* Fixing typos and adding missing roles for Terraform and CI/CD service accounts in 0-org-setup stage.

* Updated organization schema to allow defining custom roles under iam_by_principals and updated organization.schema.md accordingly.
2025-09-23 19:20:21 +00:00
Taneli Leppä
f1762a5465 Add resource_manager_tags to gke-standard-cluster, gke-autopilot-cluster and gke-nodepool (#3350)
* Add resource_manager_tags to gke-nodepool, gke-standard-cluster's node_config and gke-autopilot
2025-09-23 15:51:37 +02:00
apichick
e23edb46fd Added Cloud Build v2 connection module (#3346)
* Added Cloud Build v2 connection module

* Removed prefix as it is not necessary

* Corrected mistake with comment_control

* Corrected trigger name and updated README
2025-09-22 15:42:13 +02:00