Commit Graph

29 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki
2e42c1b548 service_account_config for Cloud Run v2
Additional changes:
* align vpc-connector interface to Cloud Functions
* split managed and unmanaged resources into separate files, this makes
  easier to introduce further changes
* add support for contexts
* move `vpc_connector` variable to variables.tf for Cloud Functions
* remove `create` from `vpc_connector` in Cloud Functions as it was
  sharing the meaning with `vpc_connector_create`
2025-10-27 08:03:53 +01:00
Wiktor Niesiobędzki
75fa484730 Remove support for creating SA for event arc triggers 2025-08-13 22:11:07 +02:00
Wiktor Niesiobędzki
e498f3407e Add support for GPUs in Cloud Run 2025-08-13 15:21:27 +02:00
Wiktor Niesiobędzki
b5cc01c598 Add Cloud Run Worker Pools
Refactor jobs and services parameters into separte variables
Remove prefix (not needed, namespace is local to the project)
2025-08-12 19:59:50 +02:00
fenyvesi-levi
8405527a7b Added "client_version" and "client" to ignore_changes in cloud-run-v2 module to avoid drifting terraform changes (#3245)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-07-25 16:39:42 +00:00
Maciej Sikora
f2401ed4c8 fmt 2025-06-18 12:28:54 +02:00
Maciej Sikora
1dd4873a02 fixes validation 2025-06-18 12:28:54 +02:00
Maciej Sikora
1d8e48f9e4 Apply suggestions from code review
Co-authored-by: Wiktor Niesiobędzki <github@vink.pl>
2025-06-18 12:28:54 +02:00
Maciej Sikora
d2e9c238f6 ensures tf < 1.2 compatibility 2025-06-18 12:28:54 +02:00
Maciej Sikora
9dcd0c86ab ensures tf < 1.2 compatibility 2025-06-18 12:28:54 +02:00
Maciej Sikora
fd8f659a3a docs && fmt 2025-06-18 12:28:54 +02:00
Maciej Sikora
1cc50e30ae simplifies iap configuration 2025-06-18 12:28:54 +02:00
Maciej Sikora
1aec8bb43e fixes error 2025-06-18 12:28:54 +02:00
Maciej Sikora
998919d081 fixes error 2025-06-18 12:28:54 +02:00
Maciej Sikora
c0bac5acc0 feat: adds support for direct cloud run iap 2025-06-18 12:28:54 +02:00
Maciej Sikora
6c403acf5e feat: ignores labels added by gh action in unmanaged cloud run service / job (#3161)
* feat: ingnores labels in unmanaged service

* feat: ingnores labels in unmanaged service

* ignores all labels in unmanaged version

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-06-16 08:09:14 +00:00
Maciej Sikora
ae5c12a2a3 adds revision label (#3117)
* adds revision label

* adds revision label
2025-05-28 18:32:06 +02:00
Charles Salmon
ee468514b0 [cloud-run-v2] Add ability to deploy OpenTelemetry Collector sidecar (#3071)
* [cloud-run-v2] Add ability to deploy OpenTelemetry Collector sidecar

- Adds `depends_on` flag to container definition
- Adds `port` to HTTP liveness & startup probes

* fix: add port to unmanaged resource's startup & liveness probes

* fix: add copyright boilerplate

* Fix README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-05-08 09:05:58 +00:00
Luca Prete
763b917b78 [cloud-run-v2] Add ability to control code deployments outside Terraform 2025-04-29 10:32:57 +02:00
Tim Hiatt
762841da79 Fr/timhiatt/invoker iam disable (#2994)
* Staging the New Variable change and the flag endablement for 'invoker_iam_disabled' in the 'google_cloud_run_v2_service' resouece associated with the 'cloud-run-v2' module.

* Updating tfdocs to include the new variables for the 'invoker_iam_disabled' flag in the 'google_cloud_run_v2_service' resource in module 'cloud-run-v2'

* Updating the testing in the readme for the cloud-run-v2 module.

* Fixing an issue with links in README.md Docs

* Fixing README.md linting.
2025-04-01 11:41:08 +02:00
Wiktor Niesiobędzki
9f7505d061 Allow providing network for Direct VPC access 2024-11-18 10:25:19 +01:00
Wiktor Niesiobędzki
020aa8c00c Fix non-empty plan after mixing CloudSQL with other mounts 2024-11-16 11:55:37 +01:00
Wiktor Niesiobędzki
fe52a9102b Fix gcs mounts for cloud-run-v2, closes #2684 2024-11-14 13:33:20 +01:00
Ludovico Magnocavallo
601f137c9b Fix ipv6 output in net-vpc module, add support for extra volumes in cloud run v2 module (#2638)
* fix #2637

* fix #2635
2024-10-24 08:36:20 +02:00
Simone Ruffilli
7f8a02a405 Add support for google provider 6.x (#2536)
* Add support for google provider 6.x

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-09-05 10:35:58 +00:00
apichick
110318a51d Cloud run v2 custom audiences (#2476)
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint

* Added custom audiences to Cloud Run v2 module
2024-08-07 08:54:36 +02:00
Julio Castillo
3af7e257d2 Add tflint to pipelines (#2220)
* Fix terraform_deprecated_index

https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md

* Fix terraform_deprecated_interpolation

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md

* Fix more indexing

* Remove unused variable

* Enable TFLint for modules

* Add tflint config file

* Fix chdir

* Lint modules

* TFLint fixes

* TFLint

* Fixes binauthz README

* Fixes DNS response policy tests. Restores MIG outputs.

* Fixes other DNS response policy tests.

* Update tests for fast 2-e

* Moar fixed tests

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-04-17 10:23:48 +02:00
Saleh Elnagar
136d74db4e add cmek option for cloud_run_v2 (#2177)
add cmek option for cloud_run_v2 service and job
2024-03-27 09:15:02 +00:00
Wiktor Niesiobędzki
bee3072568 Add support for Cloud Run v2 jobs (#1954)
Add support for Cloud Run v2 jobs

* create a separate file for service creation (service.tf) and job
  (job.tf) - for easy comparison
* add E2E tests where possibile
* remove default value for input variable `region`
* fix subnet range VPC Access Connector example
* add creation of service account for audit logs call (trigger requires
  service account)
* use provided trigger service account email in
  `local.trigger_sa_email`, so explicitly provided SA is passed to
  trigger
* set default value for vpc_connector_create.throughput.max, to match
  what is set by GCP API, as provider uses wrong default of 300 which
  results in perma-diff
* create inventory fiels for all examples

Global changes
* (tests) add input variable `project_number`, to allow assigning IAM permissions to Service Accounts in fixtures
* (tests) fix not outputting the path, when object is not found in inventory
* (tests) fix `create_e2e_sandbox.sh` - now it properly finds root of the repo

Secret Manager
* added `version_versions` output, to allow specifying versions in other modules. `versions` is sensitive and it makes it unsuitable for `for_each` values

New test fixtures
* `pubsub.tf` - creating one topic
* `secret-credential.tf` - creating Secret Manager `credential` secret
* `shared-vpc.tf` - creating two projects (host and service), and vpc in host project
* `vpc-connector.tf` - creating VPC Access Connector instance
2024-02-18 14:57:34 +01:00