Commit Graph

1315 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
0a2cc758ac Essential contacts in schemas, and email context substitutions (#3495)
* modules

* fast

* duplicate diff

* fix contacts in FAST stage 0 datasets, update contacts in YAML schemas
2025-11-03 08:53:29 +01:00
lhoet-google
153046307f Okta as Workload identity provider (#3494)
* Explain cursed Create Before Destroy

* okta for workload idenitty provider

* changed readme with okta wif

* fix readme for okta wif

* 0 org setup readme passing check_documentation.py

* fix error in readme for 0-org-setup

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Leonardo Hoet <leohoet98@gmail.com>
Co-authored-by: mwillig <mwillig@google.com>
2025-11-01 09:00:06 +01:00
Ludovico Magnocavallo
90b6e312d3 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-30 16:55:28 +00:00
fenyvesi-levi
e5eb13c6e4 Fenyvesi levi/fix essential contact (#3486)
* Added line to make organization module process essential contacts

* delete unnecessary line
2025-10-29 13:15:53 +00:00
Ludovico Magnocavallo
4a9085675e Align network stage defaults/outputs to other stages, add defaults schema (#3481)
* networking stage

* implement defaults for vpc defaults :)

* Rename peering test to simple

This enables tflint on 2-networking stage

* tflint

* bring peering test back

* bring peering test back

* yaml lint

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2025-10-28 07:47:28 +00:00
Ludovico Magnocavallo
b4049e0ae1 tflint 2025-10-28 07:33:15 +01:00
Ludovico Magnocavallo
717803e977 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-27 18:21:35 +00:00
Wiktor Niesiobędzki
0ec0813166 fix tflint errors for 0-org-setup 2025-10-27 15:42:37 +01:00
Simone Ruffilli
4a41a4237a Removes legacy FAST networking stages (#3479)
Removes the legacy networking stages, superseded by 2-networking.

**Breaking Changes**

```upgrade-note
`fast/stages/2-networking-legacy-a-simple`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-legacy-b-nva`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-legacy-c-separate-envs`: The stage is being removed, and superseded by the `2-networking` FAST stage, introduced in #3435 
```
2025-10-27 14:38:28 +00:00
Ludovico Magnocavallo
4b15741144 Streamline stage variables and output files for vpc-sc and security stages (#3471)
* implement fast context output var, remove tflint errors from security stage

* tfdoc

* defaults-based outputs for security stage

* fix tests

* implement defaults in vpc sc stage

* tflint
2025-10-27 13:27:09 +00:00
Vannick Trinquier
0bb490a1b1 Add CIS Benchmarks for GCP 3.0 mapping to documentation of controls (#3478) 2025-10-27 09:23:16 +00:00
Ludovico Magnocavallo
9b862c383b remove legacy security stage (#3474) 2025-10-26 16:49:52 +00:00
Ludovico Magnocavallo
3801a7c2d1 prep v46.0.0 2025-10-26 16:12:02 +00:00
Ludovico Magnocavallo
f1043a5aac fix versions file 2025-10-26 15:50:56 +00:00
Ludovico Magnocavallo
b8943cedbc Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-26 15:34:01 +00:00
Ludovico Magnocavallo
43191dbf63 prep v45.1.0 2025-10-26 15:03:03 +00:00
Ludovico Magnocavallo
7b6c152755 Implement proper validation for tag value names in schema (#3470)
* implement proper validation for tag value names in schema

* fix unrelated typos surfaced by new spell check
2025-10-26 13:35:56 +01:00
Ludovico Magnocavallo
97596a0e8b Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-26 11:19:18 +00:00
Wiktor Niesiobędzki
7fe999562a codespell fixes 2025-10-26 11:56:41 +01:00
Simone Ruffilli
da3860a908 2-networking - NVA Dataset (#3463)
This PR implements a dataset for 2-networking which implements a NVA hub and spoke topology with 2 spokes.
2025-10-26 09:51:00 +00:00
Ludovico Magnocavallo
08e6c4196a fix yaml linting (#3466) 2025-10-25 11:15:25 +02:00
Ludovico Magnocavallo
6fafdc8780 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-25 08:08:22 +00:00
Wiktor Niesiobędzki
380b75926e Make classic dataet link to hub-and-spokes-peerings 2025-10-24 15:08:17 +02:00
Wiktor Niesiobędzki
b27b8f8291 yamllint fast 2025-10-24 13:11:17 +02:00
Simone Ruffilli
885ba2fb05 Consistent subnetting across datasets + contexts (#3460) 2025-10-23 21:14:05 +02:00
Simone Ruffilli
35fcde9fa2 Fixes copy-paste error in 2-networking README.md 2025-10-23 17:28:41 +02:00
Simone Ruffilli
bfb7d0c812 2-networking - VPN Dataset (#3458)
This PR implements a dataset for 2-networking which implements a simple VPN hub and spoke topology with 2 spokes.
2025-10-23 17:21:39 +02:00
Ludovico Magnocavallo
4bf4047017 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-23 14:51:14 +00:00
Ludovico Magnocavallo
80988c0bbf Fix issues with FAST CI/CD support (#3454)
* wip, broken

* wip

* streamline locals

* tfdoc

* update yaml files

* refactor
2025-10-23 16:40:06 +02:00
Wiktor Niesiobędzki
d1f257bcb9 align project-templates to new functions interface 2025-10-23 15:50:17 +02:00
Simone Ruffilli
393e99194a 2-networking - NCC Dataset (#3457)
Dataset for 2-networking which implements a simple NCC full mesh topology with 2 spokes.
2025-10-23 12:59:46 +00:00
Simone Ruffilli
23f8326665 Factory based FAST Networking stage (#3435)
New factory based networking stage, shipping with a single dataset (peering) to keep the PR size somewhat manageable.
2025-10-23 14:17:44 +02:00
Julio Castillo
cc6570f77c Fix typos (#3453) 2025-10-22 18:52:08 +00:00
Simone Ruffilli
de8ebefe17 Start the deprecation process of the old networking stages (#3451)
This PR renames `2-networking-foo` stages to `2-networking-legacy-foo` - including references of stages in docs and tests.

**Breaking Changes**

```upgrade-note
`fast/stages/2-networking-a-simple`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-b-nva`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
`fast/stages/2-networking-c-separate-envs`: The stage is being deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
`modules/net-vpc-factory`:  The module has been deprecated, and superseded the `2-networking` FAST stage, introduced in #3435 
```
2025-10-22 16:31:14 +02:00
Ludovico Magnocavallo
a4cc7cd979 Align schemas (#3447)
* enforce schema uniqueness

* schemas

* fix tests
2025-10-21 14:03:40 +02:00
Vannick Trinquier
c60ae3652a Adding hardened datasets for preventive and detective Compliance Controls (#3410)
* Adding hardened datasets for preventive and detective Compliance Controls in stage 0 and stage 1 VPC-SC

* Move observability to factory file

* Update documentation

* Update local variable for use

* Update observability factory to use other module

* Add raw diagram file for hardened datasets

* Retrofit change

* Rename log_buckets context variable to be consistent across modules

* Update stage 0 documentation to mention hardened dataset

* Update customer ids list

* Update documentation, path to schema add ID to access level

* Comment organization policy gcp.resourceLocation by default

* Prevent duplicate key error by merging principal roles

* Adding ngfw roles files in hardened datasets

* Update script to validate files differences to support folder and datasets

* Format duplicate-diff python script

* Remove .config.yaml from duplicates

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-21 10:34:25 +00:00
Ludovico Magnocavallo
32ca4498ad Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-20 17:56:31 +00:00
Luca Prete
64738a1808 Add Agent Engine module. (#3429) 2025-10-20 17:02:39 +02:00
Ludovico Magnocavallo
5e05044306 Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-18 14:22:57 +00:00
Ludovico Magnocavallo
4113da128b Support resource-level factories config in project factory module and FAST stages (#3440)
* support resource-level factories in project factory module

* align folder and project schemas across modules and fast

* schema docs
2025-10-18 10:41:19 +00:00
Zsolt Molnar
30ea120dcf Bump Terraform version used in Github CICD templates to match fabric/modules requirements introduced at #3332 (#3439) 2025-10-18 08:00:14 +00:00
Ludovico Magnocavallo
a3b86b9426 Revert "Added audience to workflow local in 0-org-setup (#3418)" (#3432)
This reverts commit 4dfcb9cf51.
2025-10-17 12:38:08 +00:00
kovagoadam
84a258e247 Add retention support for project-factory buckets (#3417)
* Added retention support for project-factory buckets

* Cleanup

* Added retention_policy to project.schema.md in PF stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 10:30:20 +00:00
Ludovico Magnocavallo
b581c49a31 Revert "Allow overriding organization factories from YAML (#3430)" (#3431)
This reverts commit 594c106441.
2025-10-17 11:41:31 +02:00
kovagoadam
4dfcb9cf51 Added audience to workflow local in 0-org-setup (#3418)
* Added missing audiences to fast_0_org_setup

* Run terraform fmt

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 08:13:28 +00:00
Ludovico Magnocavallo
594c106441 Allow overriding organization factories from YAML (#3430) 2025-10-17 08:51:23 +02:00
norbert-loderer
1839a08581 Add missing project number variable to outputs in 0-org-setup stage (#3427)
* Add missing project number variable to outputs in 0-org-setup stage

* Fixed typo

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-10-17 06:51:04 +00:00
Ludovico Magnocavallo
489b21f8cc fix ngfw add-on instructions (#3409) 2025-10-13 16:52:54 +00:00
Luca Prete
142ad6488e NGFW Enterprise custom roles (#3408) 2025-10-13 16:29:27 +00:00
Ludovico Magnocavallo
e9b121153a Merge remote-tracking branch 'origin/master' into fast-dev 2025-10-13 09:45:29 +00:00