Commit Graph

1315 Commits

Author SHA1 Message Date
Liam Nesteroff
f5ee82ab3a Add DNS Armor support (#3874)
* add dns armor module

* add dns armor to pf

* added missing/optional attributes

* Update project schemas

* Set version file copyright year to 2025

* replace module with single resource

* moved into it's own file

* Added tests and defaulting enabled to false

* Add optional name parameter and updated schemas

* make dns_threat_detector.enabled optional in project schemas

---------

Co-authored-by: Luca Prete <preteluca@gmail.com>
2026-04-24 08:58:48 +02:00
Simone Ruffilli
9eb69ffaa3 Add attachment groups factory to 2-networking (#3871)
* feat(fast): add attachment groups factory to 2-networking

Adds support for `google_compute_interconnect_attachment_group` in the `2-networking` stage.

By implementing this at the factory level alongside `vlan-attachments`, users can now declaratively aggregate VLAN attachments across multiple VPCs and natively reference them using the `$attachment_groups:<key>` context identifier in their configuration YAMLs.

Includes:
- Factory implementation in `factory-vlan-attachments.tf`.
- New JSON schemas for `attachment-groups` and updates to `vlan-attachments` to support context linkage.
- Test coverage with new inventory generations.

Fixes #3791
2026-04-22 10:22:50 +00:00
Hemanand
eaa420534b Add agent engine BYOC support (#3885)
* feat(agent-engine): add support for container and custom image specs

- Add container_config to deployment_files.
- Add image_spec with build_args to source_config.
- Make agent_framework optional and document supported values.
- Implement dynamic specs for container and source deployments.
- Add examples and automated tests for new deployment types.

* chore: update Google provider version to 7.28.0 across modules

Mechanical update of versions.tf and versions.tofu files using tools/versions.py.

* feat(agent-engine): refactor for container deployments and API alignment

- Group deployment settings under 'deployment_config' (renamed from 'deployment_files').
- Support container-based deployments via 'container_config' and 'image_spec'.
- Refactor 'source_files_config' (renamed from 'source_config') to include mutually exclusive 'python_spec' and 'image_spec'.
- Support 'developer_connect_config' as a source code type.
- Group engine settings (framework, env, secrets) under 'agent_engine_config'.
- Add support for 'memory_bank_config' persistent memory.
- Overhaul reasoning engine resources with dynamic blocks to match provider schema.
- Update all documentation examples, add TOC, and refresh test inventories.

* Update dynamic python_spec block and related example yamls

* Ignore changes setting for developer_connect_source under lifecycle management

* fixing review comments for `try` and default path for `source_path`

---------

Co-authored-by: Hemanand <hemr@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-21 17:46:20 +00:00
Ludovico Magnocavallo
25bd428d17 prep v55.1.0 2026-04-20 14:22:29 +00:00
Luca Prete
f2d4e937d1 Fix pre-commit hook (#3882) 2026-04-18 10:07:14 +02:00
Ludovico Magnocavallo
8076220648 Fix regression in compute-vm module (#3872)
* fix(compute-vm): purge key_revocation_action_type from tests and update schema link

* fix schema link
2026-04-15 17:17:42 +00:00
Ludovico Magnocavallo
9c40f56332 prep v55.0.0 2026-04-14 11:42:34 +00:00
Ludovico Magnocavallo
037fcb565b Merge remote-tracking branch 'origin/fast-dev' 2026-04-14 08:53:46 +00:00
Ludovico Magnocavallo
920eaf128b prep v54.4.0 2026-04-14 08:47:07 +00:00
kovagoadam
1050daff71 Add support for creating multiple workforce identity pools (#3846)
* Added support for multiple workforce identity pools

* Fixed organization module workforce identity federation outputs

* tfdoc

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-14 06:55:18 +00:00
Ludovico Magnocavallo
85b0871085 Add net-vpc-factory and starter-gcd dataset to 0-org-setup, fix context in net-vpc-factory (#3860)
* feat(fast/0-org-setup): integrate net-vpc-factory into stage 0

* initial starter dataset

* starter pack

* fix(fast/0-org-setup): correct factory vpcs paths definition and update test inventory

* feat(fast/0-org-setup): add VPC and subnet outputs and update stage tfvars

* test(fast/0-org-setup): update gcd starter defaults and regenerate inventory

* fix(modules/net-vpc-factory): remove internal defaults logic and pass context correctly

* fix typo in dataset fw rule, add missing boilerplate, set sane defaults for net vpc factory

* terraform fmt

* tfdoc, copyright year

* schema docs

* yamllint
2026-04-13 09:42:03 +02:00
Julio Castillo
1cb643b3c1 Decouple logging sinks in FAST stages 0 and 1 (#3858)
* Decouple logging sinks in FAST stages 0 and 1

* Fix ternary

* Fix tests

* Fix vpcsc tests

* Fix typo

* remove filenames
2026-04-11 00:14:15 +02:00
Ludovico Magnocavallo
1e34ae3bc8 align vpc factory module factories_config to project factory (#3855) 2026-04-10 19:21:21 +02:00
Ludovico Magnocavallo
e72210f43e Remove leftover datasets for data platform (#3854) 2026-04-10 15:41:55 +00:00
Ludovico Magnocavallo
304dd73642 Update boilerplate and project services in 2-networking (#3852)
* chore(fast): update boilerplate in 2-networking yaml files

* chore(fast): replace stackdriver.googleapis.com with logging and monitoring services

* fix(net-vpc-factory): correct description for secondary subnet example
2026-04-10 15:20:22 +00:00
Ludovico Magnocavallo
118b70d456 Remove the FAST data platform stage (#3851)
* chore: remove data platform stage and references

* fix checks
2026-04-10 10:19:20 +02:00
Julio Castillo
74d9e6020d Remove GKE and GCVE stages (#3850) 2026-04-10 09:51:21 +02:00
davidspielmann
8b2fb39efe use ephemeral google_client_config in secops provider (#3832)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-04-10 06:34:51 +00:00
Ludovico Magnocavallo
fa1e390af7 prep v54.3.0 2026-04-09 12:30:25 +00:00
Hemanand
92d591a9b6 Add memory bank to modules/agent-engine (#3844)
* feat(agent-engine): add support for memory bank configuration

* refactor(agent-engine): remove source_path_override and revert to standard source_path

* provider version upgrade from 7.17 to 7.27

* docs(agent-engine): fix README validation and update tables

---------

Co-authored-by: Hemanand <hemr@google.com>
2026-04-08 17:09:27 +00:00
Julio Castillo
bc5b203a8f Add toggle to tfdoc to remove type hints (#3842)
* Add toggle to tfdoc to remove type hints

* Update all readmes

* Fix python formatting
2026-04-08 11:08:18 +00:00
Ludovico Magnocavallo
409c088c2c enforce schema docs in linting (#3843) 2026-04-08 10:20:50 +00:00
Simon Roberts
5e5cfbf736 Add support for bucket custom_placement_config to project-factory (#3839)
* Add support for bucket custom_placement_config to project-factory

* Copy modules/project-factory/schemas/project.schema.json to fast stages

* Add custom_placement_config (only) to schema markdown

* Update module project.schema.md
2026-04-08 06:32:24 +00:00
Ludovico Magnocavallo
0cc97937be prep v54.2.0 2026-04-02 12:56:36 +00:00
Simone Ruffilli
a6b98bac28 Add support for attachment-level BGP sessions and candidate_*_router_ip_address (#3827)
* Support VLAN-attachment-level bgp advertisements
* Support for candidate_cloud_router_ip_address and candidate_customer_router_ip_address
2026-04-01 12:21:18 +00:00
lopezvit
956ada4ddd feat(2-networking): add NS And DS record dynamically from sub-zones records (#3818)
* feat(2-networking): add NS And DS record dynamically from sub-zones records

* tfdoc

* feat(test): 2-networking adding dns_delegations test with and without DSSEC

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2026-03-31 08:54:54 +00:00
Ludovico Magnocavallo
2fe082f7d1 Merge remote-tracking branch 'origin/master' into fast-dev 2026-03-26 16:15:17 +00:00
Ludovico Magnocavallo
774ca376e6 prep v54.1.0 2026-03-26 15:53:38 +00:00
dependabot[bot]
e2ee991a04 Bump requests (#3813)
Bumps [requests](https://github.com/psf/requests) from 2.32.4 to 2.33.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.4...v2.33.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-26 15:13:55 +00:00
Ludovico Magnocavallo
a4eb4d24fd Compute VM module refactor (#3805)
* add ad for compute-vm refactor

* Exclue nic_type from validated fields, add split of main.tf and template.tf

* boot disk

* fix examples and fixtures

* attached disks

* fix further examples and module-level tests

* remove extra file

* fix mig examples

* finish refactoring variables

* align fast and other modules

* refactor(compute-vm): align examples and ADR with the newly implemented interface

This commit addresses the remaining references of the `instance_type` and `confidential_compute` parameters in the testing environment and updates the ADR.

* feat(compute-vm): add network_performance_config to instance and templates

This change implements the usage of the `network_performance_tier` variable we added earlier into the actual Terraform resources.

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2026-03-26 11:31:40 +00:00
Julio Castillo
03288f2b35 Update README.md 2026-03-24 14:56:15 +01:00
Samuele Perticarari
e67b2944a4 Fix network "hub-and-spokes-vpns" dataset (#3800)
* Change Hub's VPN Router ASN from 64515 to 64517
2026-03-18 10:18:55 +00:00
Vannick Trinquier
38e885a47c Add support of organizational based service agents in VPC-SC stage (#3802) 2026-03-18 16:08:08 +07:00
Vannick Trinquier
b4172ec174 Hardened datasets minor fixes (#3795) 2026-03-18 15:54:14 +07:00
Wiktor Niesiobędzki
9052e2e4e7 Add information about CI/CD seup for other stages 2026-03-17 11:51:24 +01:00
Samuele Perticarari
bd87710eea feat: Add new compliance regime options for Assured Workloads (#3794)
* feat: Add new compliance regime options to folder schemas for assured workloads configurations.

* terraform fmt

* Update Folder README with `tools/tfdoc.py` tool
2026-03-16 17:59:25 +00:00
Simone Ruffilli
1caeacec20 Support for net-vlan-attachments in 2-networking (#3789) 2026-03-16 15:03:14 +01:00
Ludovico Magnocavallo
dd95efc53e prep v54.0.0 2026-03-05 11:11:25 +00:00
Ludovico Magnocavallo
a935ab6643 Merge remote-tracking branch 'origin/master' into fast-dev 2026-03-05 11:08:38 +00:00
Ludovico Magnocavallo
e282f4bb4f prep v53.1.0 2026-03-05 10:55:44 +00:00
Ludovico Magnocavallo
7a5664f475 Additional changes to folder module and project factory (#3782)
* allow null name, use basepath for factories in pf folders

* fix id in folder schema
2026-03-05 09:32:35 +00:00
Ludovico Magnocavallo
a44fe55128 Merge remote-tracking branch 'origin/master' into fast-dev 2026-03-04 10:09:18 +00:00
Ludovico Magnocavallo
f794d764e9 Support additional dns_access attributes in GKE cluster modules (#3781) 2026-03-04 11:06:48 +01:00
Ludovico Magnocavallo
0be09646b0 Add missing folder features to project factory and align logging across folder/org modules (#3779) 2026-03-04 10:28:48 +01:00
Ludovico Magnocavallo
e45e8089ff comment alerting policy to prevent e2e errors (#3777) 2026-03-02 09:32:13 +01:00
Ludovico Magnocavallo
e121e913ab Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-27 15:09:26 +00:00
Ludovico Magnocavallo
0eb171b21e Add support for URL filtering profiles to FAST NGFW add-on (#3768)
* add support for URL filtering profiles to FAST NGFW add-on

* fix YAML linting, add yamllint to pre-commit
2026-02-26 11:54:44 +01:00
Ludovico Magnocavallo
efd8439788 Merge branch 'master' of github.com:GoogleCloudPlatform/cloud-foundation-fabric 2026-02-26 09:15:16 +00:00
Ludovico Magnocavallo
07a137a117 wip 2026-02-26 09:15:12 +00:00
Ludovico Magnocavallo
99e27b988e Merge remote-tracking branch 'origin/master' into fast-dev 2026-02-25 15:15:04 +00:00