Commit Graph

5637 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
7a5dd4e6db FAST: add top-level folders and restructure teams/tenants in resman (#2254)
* remove teams and tenants from resman

* move fast features to stage 1, fix test inventories

* folders

* fix factory, add top level folder resources to outputs

* tfdoc

* stage 0 log sink defs

* tfdoc

* enable toc in resman readme

* simple tenants

* fast compatibility automation and logging

* testing fast-compatible tenants

* testing fast-compatible tenants

* tfdoc

* remove mt stages

* remove tests, fix links

* disable tflint

* fast tests

* make organization conditional in resman

* check names tool

* export real prefix to tfvars, prevent destroy errors

* prefix validation

* fix billing account export format

* tfdoc

* root node folder

* resman changes

* tenant resman roles

* first apply of tenant resman

* tenant log sinks in stage 1

* fix test vars

* tfdoc

* tenant vpc-sc access policy

* fix tests expected values

* tenant CI/CD

* identity providers

* wif

* tfdoc

* add comments to identity locals

* full-feature tenant resman apply

* tenant billing IAM

* stage test

* fix CI/CD comments

* tenant net stage verified

* tenant sec stage verified

* fix test

* README work

* tfdoc

* README

* README rewording

* README rewording

* tfdoc

* FAST excalidraw

* review comments

* diagram review changes

* add iam log sink for tenants

* remove redundant try from security stage

* Implement tflint-fast in Python driven by tftest.yaml files

* tflint

* test ci changes

* revert linting changes

* disable tflint for fast

* Create junit-style report for FAST tflint

* Remove junit-reporter

* YAPF tflint-fast.py

* Output tflint FAST to job summary

* Step summary

* Disable step_summary as output is not useful

* ignore tflint warning

* re-enable tflint on FAST

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-05-15 09:17:13 +00:00
Ludo
d3137be655 update changelog 2024-05-15 11:05:22 +02:00
Ludo
6c06adb96c prepare changelog for release 2024-05-15 10:59:49 +02:00
Simone Ruffilli
d3ffcc2b1c Disable reserved_internal_range in net-vpc due to provider bug (#2282) 2024-05-15 05:46:18 +00:00
Ludo
014a36d4b6 update changelog 2024-05-14 21:54:34 +02:00
Ludo
5427bfffa9 bump release in changelog 2024-05-14 21:51:28 +02:00
Ludo
09025eb895 update changelog 2024-05-14 21:49:57 +02:00
dependabot[bot]
8a9eb0f493 Bump express (#2278)
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2)

---
updated-dependencies:
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-14 21:30:35 +02:00
Simone Ruffilli
9a26fe8635 Add support for reserved_internal_range in net-vpc (#2275)
Adds support for reserved_internal_range to net-vpc
2024-05-14 22:19:45 +03:00
apichick
f41d8059ea Added missing apigee org attributes to apigee x foundations blueprint (#2277) 2024-05-14 18:48:05 +00:00
dependabot[bot]
dfbb2c0bc0 Bump protobufjs, @google-cloud/logging-bunyan and @google-cloud/monitoring (#2279)
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 7.2.6 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@google-cloud/logging-bunyan](https://github.com/googleapis/nodejs-logging-bunyan) and [@google-cloud/monitoring](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-monitoring). These dependencies need to be updated together.


Updates `protobufjs` from 7.2.4 to 7.2.6
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.2.4...protobufjs-v7.2.6)

Updates `@google-cloud/logging-bunyan` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/googleapis/nodejs-logging-bunyan/releases)
- [Changelog](https://github.com/googleapis/nodejs-logging-bunyan/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/nodejs-logging-bunyan/compare/v5.0.0...v5.1.0)

Updates `@google-cloud/monitoring` from 3.0.5 to 4.0.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-monitoring/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/kms-v4.0.0/packages/google-cloud-monitoring)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-type: indirect
- dependency-name: "@google-cloud/logging-bunyan"
  dependency-type: direct:production
- dependency-name: "@google-cloud/monitoring"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-14 20:37:16 +02:00
Ludo
c494715e9a Merge branch 'master' of github.com:GoogleCloudPlatform/cloud-foundation-fabric 2024-05-14 17:13:06 +02:00
Ludo
95d0cccff4 update changelog 2024-05-14 16:54:51 +02:00
apichick
ff6f6bb32a Added apigee-x-foundations blueprint (#2274) 2024-05-14 14:53:38 +00:00
Ludo
c854057bef update changelog 2024-05-14 15:01:43 +02:00
luigi-bitonti
a14ed9add2 Cloud function CMEK key support (#2270)
* Added support to kms key

* Updated doc

* Fix variable description.

* Updated README

* Cloud function v2 integration with kms

* Fix variables description

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-14 12:56:10 +00:00
simonebruzzechesse
4d1d3c6811 New Bindplane cloud-config-container setup (#2272)
* new bindplane cloud-config-container setup
2024-05-14 14:45:39 +02:00
Ludovico Magnocavallo
e4941c27f2 Implement the full IAM interface for tags (#2269)
* IAM authoritative bindings in org module

* remove extra newline

* organization module

* project module

* tfdoc
2024-05-13 20:18:51 +02:00
Ludovico Magnocavallo
604920dec9 add logging settings to folder module (#2268) 2024-05-13 09:24:17 +02:00
Wiktor Niesiobędzki
af253c9702 Fix 0-bootstrap iam_by_principals not taking into account all principals (#2267)
* Fix 0-bootstrap iam_by_principals not taking into account all principals
* Add test-case for iam_by_principals for 0-bootstrap stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-12 21:02:04 +02:00
Wiktor Niesiobędzki
6a3c7fe444 CloudSQL PSC Endpoints support (#2242)
* Add PSC endpoints consumers to net-address
* Cloud SQL E2E tests
2024-05-12 12:00:39 +02:00
Wiktor Niesiobędzki
35a17a46ba Fix failing E2E tests 2024-05-11 17:29:35 +02:00
Jan Van Bruggen
5b3ed10cda Fix bug from output typo in new project-factory module (#2264)
`local.folders` is just a map of var-based keys to string manipulations on those keys, while `local.hierarchy` is the seemingly-intended map of var-based keys to generated IDs/numbers.

see
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L32
vs.
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L39

Thank you for recently developing this convenient module!
2024-05-10 22:19:35 +00:00
Wiktor Niesiobędzki
2b6c81f73d Update docs - gcp-network-admins -> gcp-vpc-network-admins 2024-05-10 10:04:24 +02:00
Ludo
01533a4a66 update changelog 2024-05-10 07:56:11 +02:00
Julio Castillo
d838c4ac47 Make Simple NVA route IAP traffic through NIC 0 (#2262) 2024-05-09 18:29:25 +02:00
Julio Castillo
c58850c096 Add Hybrid NAT support (#2261)
* Updates to support hybid NAT

* Fix readme

* Fix variable order
2024-05-09 13:24:41 +00:00
Ludovico Magnocavallo
c9503d5ac5 Remove data source from folder module (#2260)
* remove data source from folder module

* fix fast tfdoc

* fix locals type error

* fix folder test

* fix fast test
2024-05-09 13:09:54 +00:00
Julio Castillo
7aa6c7e059 Style fixes to FAST log sinks expressions 2024-05-02 22:11:33 +02:00
Julio Castillo
94c32c1d71 Misc FAST fixes (#2253)
* Misc FAST fixes

* Fix readme

* Fix FAST nva bgp tests
2024-05-02 06:56:26 +00:00
simonebruzzechesse
dccf5735c5 fis issues with private workstation-cluster module and persistent_directories (#2247)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-02 06:09:10 +00:00
Ludovico Magnocavallo
fdcd309729 add support for labels to GKE backup plans (#2252) 2024-05-01 20:20:21 +02:00
Ludovico Magnocavallo
27a055a9cb fix factory ingress policies (#2251) 2024-05-01 18:50:30 +02:00
jnahelou
e1226676fd Added missing identity when connectors API is enabled (#2248) 2024-04-30 17:21:35 +00:00
apichick
be966c4f32 Fixed issue with service networking DNS peering (#2246)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-04-28 20:18:02 +00:00
apichick
ab174274de Added new attributes Apigee organization and bumped up providers version (#2243) 2024-04-28 17:31:42 +02:00
apichick
a95e681f05 Removed BFD settings from net-vpn-ha module as it is not supported (#2244)
* Removed bfd settings from net-vpn-ha as it is not supported

* Removed bfd settings from net-vpn-ha as it is not supported
2024-04-28 12:11:07 +02:00
Wiktor Niesiobędzki
d831d32864 Use default labels on pubsub subscription when no override is provided 2024-04-27 09:22:41 +02:00
Deepak Kumar
64ac89d59c fix: allow disabling node autoprovisioning (#2238)
- This fix allows a GKE Standard cluster to be configured with no auto-provisioned node pool,
  but allow setting autocluster profile for user-provisioned node pools like created via `gke-nodepool` module.

Co-authored-by: Julio Castillo <jccb@google.com>
2024-04-26 07:17:48 +00:00
Vince Gonzalez
2446b4dd7c Update README.md (#2239) 2024-04-26 01:14:32 +02:00
Julio Castillo
99129d54a3 Update FAST logging (#2235)
* Update FAST logging

* Fix readme

* Fix tests
2024-04-25 08:31:51 +02:00
luigi-bitonti
d901992607 Added build env vars in cloud function v1 (#2234) 2024-04-23 19:20:38 +02:00
Luca Prete
dd213ea9a9 Fix permissions for branch network dev - read sa (#2233)
Co-authored-by: Luca Prete <lucaprete@google.com>
2024-04-23 15:19:38 +02:00
Tomislav O
59084fa853 docs: 📝 fix error in phpIPAM terraform config by updating VPC peering settings (#2230) 2024-04-22 10:55:03 +00:00
Ludo
05dcda68e1 update changelog 2024-04-22 10:04:10 +02:00
Ludovico Magnocavallo
309792c559 Refactor vpc-sc support in project module, add support for dry run (#2229) 2024-04-22 09:28:01 +02:00
dependabot[bot]
0454fd681d Bump golang.org/x/net (#2227)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-04-19 14:26:14 +02:00
dependabot[bot]
55a345ebac Bump golang.org/x/net (#2228)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-19 14:25:51 +02:00
simonebruzzechesse
b6771ae7ad fix cloud sql PSA after module upgrade (#2226)
* fix cloud sql PSA after module upgrade
add proxy subnet for ILB
* fix cloud run service accessible from public url in case the service is privately deployed
* add deletion_policy variable in psa_configs for net-vpc module
fix destroy issue with phpIPAM blueprint
2024-04-19 12:41:02 +02:00
Wiktor Niesiobędzki
024d3255e6 Generalization of tflint call for FAST stages (#2225)
* Generalization of tflint call for FAST

* Fix tfvars path

* Fix tfvars path - depending where the file is

* Fix regex

* Reeanble linting

* Align test directory to stage name

* Align all fast stages to use tftest
2024-04-18 21:04:24 +02:00