Commit Graph

637 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
ee23694fed revert service account modules changes to outputs 2022-06-16 23:09:35 +02:00
Ludovico Magnocavallo
6d8f3f7e22 depend service account outputs on iam roles 2022-06-16 22:16:20 +02:00
Ludovico Magnocavallo
cbf008fed5 add support for secrets (#684) 2022-06-16 16:34:46 +02:00
Julio Castillo
0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Ludovico Magnocavallo
44ae2671b0 CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Ludovico Magnocavallo
5e8b06fc85 Initial version of the Contributor's Guide (#666)
* fix IAM in examples

* WIP

* fix service identities IAM example

* design principles

* toc anchors

* fix ordering

* style guide

* checks

* example tests

* tests and tools

* fix project example test

* address typos

* address comments

* address last comments
2022-06-06 15:12:28 +02:00
psabhishekgoogle
668a8bb07c Update outputs.tf
makimg changes in net-glb module and correcting the output ipaddress
2022-05-25 13:36:58 +05:30
Ludovico Magnocavallo
22d0506f4d fix condition in subnet factory flow logs (#654) 2022-05-18 10:33:56 +02:00
Ludovico Magnocavallo
e3ea387f0f fix subnet schema (#651) 2022-05-09 11:53:57 +02:00
Ludovico Magnocavallo
31d87e722a fix secondary range in yaml example
fixes #650
2022-05-09 11:23:54 +02:00
Ludovico Magnocavallo
ff25809020 Fix tfdoc parsing on newllines in outputs (#649)
* fix

* use the right (ugly) Python formatter

* boilerplate on new file

* and do the actual tfdoc run on the original outputs file
2022-05-05 14:43:38 +02:00
Ludovico Magnocavallo
fcfbcee136 Merge branch 'master' into sruffilli/spot-vm 2022-05-04 18:26:45 +02:00
Julio Castillo
e6135bb323 Remove preemptible VMs in favor of spot VMs 2022-05-04 18:01:07 +02:00
Daniel Strebel
f090c037f5 Merge branch 'master' into feature/add-apigee-service-attachment 2022-05-04 17:34:44 +02:00
Julio Castillo
aee089dcd3 Add spot vm support to gke-nodepool 2022-05-04 10:05:31 +02:00
Simone Ruffilli
882c07cc19 Merge branch 'master' into sruffilli/spot-vm 2022-05-04 10:01:55 +02:00
Simone Ruffilli
e84f90f9a2 Update variables.tf 2022-05-04 10:01:28 +02:00
Simone Ruffilli
be54fe31d7 Adds Spot VM support to compute-vm 2022-05-04 09:48:31 +02:00
Julio Castillo
4e83b5003b Merge branch 'master' into sql-multi-region 2022-05-03 17:46:18 +02:00
Daniel Strebel
1a53c16365 add service_attachment to Apigee instance outputs 2022-05-03 17:02:57 +02:00
flaprimo
a1b66c2ba1 Add subscription filter support to PubSub module (#632)
* add subscription filters to pubsub module

* add tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-04-30 11:25:50 +02:00
next-davidduquehernandez
4cb814a0ae Added 'gke_backup_agent_config' option to addons in gke-cluster (#642)
* Added 'gke_backup_agent_config' option to addons in gke-cluster

* Update README.md after launch tfdoc.py
2022-04-30 10:32:49 +02:00
Aleksandr Averbukh
189ee7ae1a Add shielded_instance_config support for compute instance template 2022-04-23 08:45:04 +02:00
Julio Castillo
2ddce7b8fa Fix gke-cluster permadiff when using dns_config 2022-04-20 11:36:53 +02:00
Ludovico Magnocavallo
4c615fed85 Merge branch 'master' into sql-multi-region 2022-04-20 09:01:47 +02:00
Ludovico Magnocavallo
ab646f38ed Bump provider versions to >= 4.17.0, terraform to >= 1.1.0 (#634)
* bump provider versions to >= 4.17.0, terraform to >= 1.1.0

* bump teraform version in lint check, edit CHANGELOG
2022-04-17 13:55:40 +02:00
lcaggio
47563fdab8 Merge branch 'master' into sql-multi-region 2022-04-15 09:26:57 +02:00
Ludovico Magnocavallo
a34823e2d0 Add monitoring notification service identity to project module (#630)
* add monitoring notification service identity

* linting
2022-04-15 01:59:00 +02:00
Aleksandr Averbukh
2e207eb3a5 Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh
62a299a6f5 Deprecate subnets_l7ilb variable, add support for proxy_only and psc subnets. 2022-04-13 16:38:47 +02:00
Lorenzo Caggioni
24930ce397 Fix README, bye bye pippo :-) 2022-04-13 11:05:55 +02:00
Julio Castillo
952e18d0f1 Add sqladmin to project jit_si and fix some documentation 2022-04-13 11:05:55 +02:00
Lorenzo Caggioni
a3f03ac213 Add KMS on CloudSQL module 2022-04-13 11:05:55 +02:00
Ludovico Magnocavallo
1cfb5dcaec Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo
19027e587e Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo
4944871ad0 Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo
045806cfa4 Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 10:42:13 +02:00
lcaggio
15cdd179c6 Merge branch 'master' into lcaggio/sql-kms 2022-04-13 09:12:48 +02:00
Ludovico Magnocavallo
420c4de437 Update README.md 2022-04-13 09:10:56 +02:00
Ludovico Magnocavallo
4e1d06fd75 Update README.md 2022-04-13 09:08:01 +02:00
Ludovico Magnocavallo
874e9a57c7 Update README.md 2022-04-13 09:06:18 +02:00
Ludovico Magnocavallo
53c9431c98 Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 09:05:28 +02:00
Lorenzo Caggioni
b415d824c9 Fix README, bye bye pippo :-) 2022-04-13 08:59:14 +02:00
Julio Castillo
1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Julio Castillo
c799dcd0bb Merge branch 'master' into sql-multi-region 2022-04-12 23:45:27 +02:00
Lorenzo Caggioni
c7c77541fb Add KMS on CloudSQL module 2022-04-12 19:01:34 +02:00
Aleksandr Averbukh
6ab121a836 Add support for Private Service Connect and Reginal Managed Proxy subnets for net-vpc module 2022-04-12 12:57:33 +02:00
Ludovico Magnocavallo
725f7effce Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Lorenzo Caggioni
4cd6b1bf38 Merge branch 'master' into sql-multi-region 2022-04-11 16:02:13 +02:00
javiergp
86357c2ed5 CloudSQL-instance: Fixed terraform change detection when backup is disabled. (#615)
* Update variables.tf

When backup is not enabled, if location is set to a null value (i.e."EU"), each time you do `terraform apply` it will detect a configuration change (+ location  = "EU"). Setting this variable to null fixes the issue.

* Update README.md
2022-04-10 12:33:00 +02:00