Commit Graph

5637 Commits

Author SHA1 Message Date
Julio Castillo
f5d05b3c3f Reorganize ADRs and new versioning ADR (#2642)
* Reorganize ADRs and new versioning ADR

* Workflow examples

* Fix ADR links

* Changes discussed with ludoo

* Fix image reference

* Update image

* Fix typo

* Complet decision section

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-10-30 12:39:53 +01:00
Wiktor Niesiobędzki
dafb8d246d Do not run codespell on CHANGELOG.md 2024-10-30 10:30:37 +01:00
Wiktor Niesiobędzki
8b7607af63 Codespell / whitespace fixes 2024-10-30 10:30:37 +01:00
Wiktor Niesiobędzki
30d1deceee Skip tflint on fast stages as it requires extra config 2024-10-30 10:30:37 +01:00
Wiktor Niesiobędzki
a2ce318d11 Add spellchecker to pre-commit 2024-10-30 10:30:37 +01:00
Frits
b9fbdbcf7b feat(modules/secret-manager): add support for version_destroy_ttl
Closes #2644
2024-10-30 09:54:31 +01:00
Aurélien Legrand
d4b594f83a Adding DNS for GKE control plane to private google access APIs (#2641)
* Adding DNS for GKE control plane to private google access APIs

* updating tests

* updating tests
2024-10-29 14:09:26 +01:00
Usama Shujaat
6db881da34 Add option to attach multiple snapshot schedule to disks (#2639)
* Add changes to link mutiple Snapshot Schedule to a disk/boot disk

* Update Readme and fix for boot snapshot schedule

* Updating for_each expression, fix linting error

---------

Co-authored-by: usamashujaat <155731944+usamashujaat@users.noreply.github.com>
2024-10-28 18:53:43 +01:00
Ludovico Magnocavallo
601f137c9b Fix ipv6 output in net-vpc module, add support for extra volumes in cloud run v2 module (#2638)
* fix #2637

* fix #2635
2024-10-24 08:36:20 +02:00
Luca Prete
24d78de373 [FAST] Fix stage 2 simple NVA wrong location - causing test failures (#2630) 2024-10-18 14:43:03 +02:00
Joshua Wright
d4cff3eafa Add Project Factory Logging Data Option (#2625)
* Add Logging Data Defaults to Data Defaults and Data Overrides

* Run TFDoc & FMT

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-10-17 10:54:42 +00:00
dependabot[bot]
cdb26b45e7 Bump cookie and express (#2629)
Bumps [cookie](https://github.com/jshttp/cookie) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `cookie` from 0.6.0 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.1)

Updates `express` from 4.21.0 to 4.21.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.0...4.21.1)

---
updated-dependencies:
- dependency-name: cookie
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-17 09:11:44 +02:00
Liam Nesteroff
f14cd9f948 Add TFE integration for backend and CICD (#2611)
* added option for tfe_cicd

* formatting and readme

* formatting

* added terraform option for cicd_repos

* update readme

* modified provider templating for tf

* added missing resman gsa

* updated readmes

* added options for tf style write/branch structure

* added cicf_backends to tests

* added cicd_backends to tests

* Updated readme
2024-10-16 17:01:39 +11:00
dependabot[bot]
47e74a1c52 Bump cookie and express in /blueprints/gke/binauthz/image (#2623)
Bumps [cookie](https://github.com/jshttp/cookie) to 0.7.1 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `cookie` from 0.6.0 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.1)

Updates `express` from 4.21.0 to 4.21.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.0...4.21.1)

---
updated-dependencies:
- dependency-name: cookie
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 16:05:51 +02:00
Liam Nesteroff
f65dc88b6f added output for tfvars_globals (#2620) 2024-10-15 18:39:09 +11:00
Elia
81a6ff30d2 GCVE network mode for 2-networking-b-nva stage (#2544)
* GCVE network mode

* optional landing routes

* net option renamed

* minor fix

* added stage tests

* test fix

* regional-vpc mode

* fixed api

* fix readme

* drawing updated

* stage test fix

* stage test fix

* stage test fix

* stage test fix

* fix

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-10-15 08:28:15 +02:00
Benoît Sauvère
ce09c07ced fix(artifact-registry): fix a move issue with tf>1.7 (#2617)
The TF 1.8 has introduced a new feature that makes the move failing:
> Providers can now transfer the ownership of a remote object between resources of different types, for situations where there are two different resource types that represent the same remote object type.
> This extends the moved block behavior to support moving between two resources of different types only if the provider for the target resource type declares that it can convert from the source resource type. Refer to provider documentation for details on which pairs of resource types are supported.
https://github.com/hashicorp/terraform/blob/v1.8/CHANGELOG.md#180-april-10-2024
2024-10-11 11:41:05 +02:00
Ludovico Magnocavallo
8101a26652 support log exclusions in bootstrap log sinks (#2616) 2024-10-09 09:22:28 +02:00
Ludovico Magnocavallo
74427386b9 Add support for bundling net monitoring tool in a Docker image, and deploying via CR Job (#2609)
* dockerfile and reqs update

* deployment via cloud run jobs

* README

* boilerplate
2024-10-07 12:56:09 +00:00
Ludovico Magnocavallo
bbe84a5ca8 add extra job revision attributes (#2608) 2024-10-07 11:45:59 +02:00
Ludo
d832361a15 update changelog 2024-10-07 10:25:56 +02:00
simonebruzzechesse
77b8f639ed alloydb variables refactor (#2599) 2024-10-06 11:49:15 +02:00
Benoît Sauvère
cb234fd35b feat: implement the new iam interface in artifact-registry (#2606)
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
2024-10-04 13:49:48 +00:00
Liam Nesteroff
c2780fa7b0 fixed tfe wif definition variables (#2604)
* fixed tfe wif definition variables

* Added additional attributes for tfe

* kept workspaceid for google.subject as per gcp docs
2024-10-03 13:41:31 +00:00
Simone Ruffilli
fbf5ad5a8f FAST: Adds support for PSC transitivity to 2-a (#2600) 2024-10-02 11:39:23 +02:00
Liam Nesteroff
999c3acca3 added tf def to wif providers (#2598) 2024-10-02 09:12:49 +10:00
Liam Nesteroff
163a0eab2b Allow manage existing SSM instance (#2595)
* added option to manage an existing SSM instance

* switched depends on to try for instance iam

* added resource instance keys

* add instance keys to tests

* changed label default to null

* updated readme

* replaced try functions with conditional expressions for IAM
2024-09-27 12:13:30 +02:00
apichick
3fad96436c Added biglake-catalog module (#2572) 2024-09-24 17:39:29 +02:00
apichick
bb9a085b10 Apigee x foundations certificate manager (#2585)
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint

* Update to create required certificate-manager resources for cross-region LB in the blueprint using module, added more outputs and ability to pass IP addresses for LB forwarding rules

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-09-24 06:49:35 +00:00
simonebruzzechesse
7cf83842a7 Fix looker README and add custom url for looker instance module (#2593)
* fix README and add custom url for looker instance
2024-09-23 11:12:23 +02:00
Elia
dca6e383b7 Fix permadiff on iap attribute in net-lb-app-int module (#2590)
* fixed attribute default

* fix blueprint inventory

* fix outputs

---------

Co-authored-by: Ludo <ludomagno@google.com>
2024-09-20 11:35:18 +00:00
simonebruzzechesse
1f2bdd0033 New looker core module (#2565)
* new looker core module
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-09-20 12:12:09 +02:00
Artem Bogdantsev
4bacbf5748 Project Module CMEK: added CloudRun (#2587)
Added CloudRun to the list so that CloudRun service agent gets encryptor/decryptor role on CMEK
2024-09-20 08:30:06 +00:00
Liam Nesteroff
9817d17c35 Add location for each IAM resource (#2586)
Location field was missing causing an error
2024-09-20 07:30:46 +00:00
Natalia Strelkova
923a1e41dc Nstrelkova/small readme fixes (#2584)
* typo (old rename of 00-bootstrap to 0-bootstrap)

* resman purpose: not org policies, but tags

* GCVE: several typos

---------

Co-authored-by: Natalia Strelkova <nstrelkova@google.com>
2024-09-19 13:23:40 +00:00
apichick
0f28d266dd Secure source manager (#2569)
* Added secure-source-manager-instance module

* Fixes after review
2024-09-19 10:29:01 +00:00
Ludo
7a90f497e9 update changelog 2024-09-19 11:59:31 +02:00
apichick
8e0dac84f9 Bigquery dataset routines (#2570)
* Added routines to bigquery-dataset module

* Fixes after review
2024-09-19 09:13:32 +00:00
Ludovico Magnocavallo
cf5bba8b7f support secret-level expire time in secret manager module (#2583) 2024-09-19 10:35:43 +02:00
Ludovico Magnocavallo
c2a9cb7d09 make it explicit that stages need to be run once before CI/CD setup (#2582) 2024-09-19 09:43:35 +02:00
Ludovico Magnocavallo
9441eed410 fixed diagrams (#2581) 2024-09-19 09:39:35 +02:00
Ludovico Magnocavallo
2fc2f8fb92 FAST resman mt fixes (#2579)
* resman mt fixes

* fix custom roles var
2024-09-19 09:02:04 +02:00
Simon Roberts
9a51c4d196 Update a few references from 3-project-factory to 2-project-factory (#2568)
* Move project-factory to stage 2, fix path. Remove other trailing whitespace.

* Update 3-project-factory to 2-project-factory

* ./tools/tfdoc.py fast/stages/0-bootstrap
2024-09-19 05:11:32 +00:00
dependabot[bot]
68d6db51a8 Bump path-to-regexp and express (#2574)
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.10)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-18 08:21:22 +00:00
dependabot[bot]
c73b5420e4 Bump path-to-regexp and express in /blueprints/gke/binauthz/image (#2573)
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.10 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.10)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-18 08:09:06 +00:00
Elia
0e14cd5249 Update variables.tf (#2558)
* Update variables.tf

Hi Team,
the default ranges for the dmz are not valid ranges that contain the default subnets.

This is the subnetting:
https://visualsubnetcalc.com/index.html?c=1N4IgbiBcIIwgNCAzlUMAMA6LOD0AOVWHbbXATiI1LwyIH0A7KEBEegYxZAF9FqAbABYauOpDRZhomHAnFM02gCYqUkbQDMaxRrIwhOpfoCsRvejEDzMgOwNm0AC4AnAK5InAUwAmAAgAHFwBLAFsAQxcATzZObj4FaRhlfH17eSYWH1CAL0CQiOjYrmheBMETGWt5CrsHbkQ40vKpSuTUyxh00EzSxpLWHiH+KQEZMwzHVn74lsUO-UMaqQXOicl5qvroHy8wfLDImJnmkcVyLcmG9gGys9sSNe3pm9m522UZbWXMD5kljZ-WjrBRA-TVHpTIIAe38QUORROg3umkukOuTUG7wsYhBvRemLuoLGtAB7CmxTeZ3wjzEqh+NK+OkZpOZtJgIOoLPBbLqV2c7k8vj8SC8HGhjB8R0ppwUjPaaWe2TyovFkulSKJXJgaLlOto3XJGNuc3wOoVnUN+JlWNNn2BzxtWqw+BxBmZbs5LrdEKNOz2IrFEqliNesq5lVovutmuGcpJpkdsbjXNWYm+G3wafdDOzXswWd1+Jh-lVwY1YeRcouUaTledmHI7LxFOTZ3I9sWdcJQxTWHICc6cnRfXrvbOFrIlH5BJNvaAA

* fixed readme file
2024-09-16 08:28:21 +00:00
Simone Ruffilli
8090fe66aa Fix format typo for essential contacts domains in bootstrap 2024-09-13 11:32:47 +02:00
Simone Ruffilli
9905e1dc69 Enables compute.setNewProjectDefaultToZonalDNSOnly and essentialcontacts.allowedContactDomains (#2564)
* Enables setNewProjectDefaultToZonalDNSOnly policy
* Add support for essentialcontacts.allowedContactDomains
2024-09-13 11:09:55 +02:00
Simone Ruffilli
ca9ec30114 Update list of org policies imported by FAST bootstrap stage 2024-09-13 07:05:01 +00:00
Wiktor Niesiobędzki
679218cde3 Fix e2e testsss for cloud run 2024-09-10 12:04:39 +02:00