kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,384 Commits 1 Branch 1 Tag
f8f18734f16e10c28f0995e67431c417c8329bc8
Commit Graph

730 Commits

Author SHA1 Message Date
Julio Castillo
23b256ac25 Fix restrictAllowedGenerations org policy example (#2325) 
Fixes #2323
 2024-05-30 12:19:24 +00:00
fulyagonultas
0d60e39aee resource_labels added to the node_config nodepool (#2317) 
* resource_labels added to the node_config nodepool

* labels added to the gke standard module

* labels set to mandatory

* Updating variables names

* Fix nodepool label variables defaults

* Fix tests

---------

Co-authored-by: Julio Castillo <jccb@google.com>
 2024-05-29 14:56:15 +02:00
Peter Brumblay
772a555b05 Pbrumblay/clarify org policy tags (#2319) 
* fix: clarify org policy tag limitations

* fix: use a more generic term to describe binding possibilities

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-29 06:19:39 +00:00
Simone Ruffilli
532f1ecfc4 Merge FAST C and E network stages into a new B stage. (#2309) 
Merge FAST C and E network stages into a new B stage.
 2024-05-28 17:27:28 +02:00
Simone Ruffilli
9e1008dcca FAST: Obsolete assets cleanup (#2315) 
Remove obsolete assets
 2024-05-28 09:35:13 +00:00
Simone Ruffilli
1f15c5123f Update README.md 2024-05-27 07:52:28 +02:00
Simone Ruffilli
11050c46cf FAST MT: Readme updates and more prefix validation (#2305) 
This change documents the process of deploying FAST on a tenant-factory bootstrapped tenant.

It also fixes changes the validation logic for prefix as follows:

- 0-bootstrap: 9 chars or less
- 1-resman/1-tenant-factory: 9 chars or less if ran at org-level, else 11
- else 11

It also uniforms across all stages the variables.tf and variables-fast.tf breakdown.
 2024-05-24 12:01:55 +02:00
Simone Ruffilli
3fe754167e FAST: Clarify max prefix len for tenant factory 2024-05-23 09:43:23 +02:00
Simone Ruffilli
b55e9320ca Update README.md 2024-05-23 08:44:07 +02:00
simonebruzzechesse
10ae9bc824 New extra stage for FAST gitlab setup (#2232) 
* new extra stage for gitlab setup

* removed wrong link

* small fixes README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-22 09:17:14 +02:00
Peter Brumblay
a04d63e991 Avoid unnecessary terraform plans for closed (unmerged) PRs (#2294) 
* Avoid unnecessary terraform plans for closed (unmerged) PRs

* fix: also update templates copied to avoid Windows symlink problems.

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-21 13:03:07 +00:00
Wiktor Niesiobędzki
3368be51bd Adjust list of policies to official docs 2024-05-21 11:27:57 +02:00
Ludovico Magnocavallo
be9214f99a add support for tenant factory CI/CD (#2297) 2024-05-21 10:39:47 +02:00
Luca Prete
0afaa84026 [FAST] fix: tenant-factory logging bucket project (#2292) 2024-05-20 16:51:12 +00:00
simonebruzzechesse
79af34b69e Add wif permissions to bootstrap tf SA (#2290) 
* add wif permissions to bootstrap tf SA
 2024-05-20 18:15:23 +02:00
Ludovico Magnocavallo
98126f2ab8 Update README.md 2024-05-20 07:55:42 +02:00
Ludovico Magnocavallo
8e8ff7825c Update README.md 2024-05-20 07:54:31 +02:00
Ludovico Magnocavallo
116c1292ab Update README.md 2024-05-20 07:54:03 +02:00
Ludovico Magnocavallo
32907924e1 update diagrams (#2289) 2024-05-18 23:53:49 +02:00
Ludovico Magnocavallo
db44be9803 Ignore test resource data in new network stage, split out fast variables (#2288) 
* ignore test resource data, split out fast vars

* tfdoc
 2024-05-17 15:30:57 +02:00
Ludovico Magnocavallo
8014121be1 switch stages 0-1s to excalidraw diagrams (#2286) 2024-05-17 09:10:13 +00:00
Simone Ruffilli
21f3b733ab FAST: Cleanup/harmonization of Simple and NVA net stages (#2287) 
Cleanup/harmonization of Simple and NVA net stages
 2024-05-16 16:49:15 +03:00
Simone Ruffilli
887c7e7926 Unify VPN and Peering FAST stages (#2284) 
* Unify VPN and Peering FAST stages
 2024-05-16 12:18:32 +03:00
Ludovico Magnocavallo
7a5dd4e6db FAST: add top-level folders and restructure teams/tenants in resman (#2254) 
* remove teams and tenants from resman

* move fast features to stage 1, fix test inventories

* folders

* fix factory, add top level folder resources to outputs

* tfdoc

* stage 0 log sink defs

* tfdoc

* enable toc in resman readme

* simple tenants

* fast compatibility automation and logging

* testing fast-compatible tenants

* testing fast-compatible tenants

* tfdoc

* remove mt stages

* remove tests, fix links

* disable tflint

* fast tests

* make organization conditional in resman

* check names tool

* export real prefix to tfvars, prevent destroy errors

* prefix validation

* fix billing account export format

* tfdoc

* root node folder

* resman changes

* tenant resman roles

* first apply of tenant resman

* tenant log sinks in stage 1

* fix test vars

* tfdoc

* tenant vpc-sc access policy

* fix tests expected values

* tenant CI/CD

* identity providers

* wif

* tfdoc

* add comments to identity locals

* full-feature tenant resman apply

* tenant billing IAM

* stage test

* fix CI/CD comments

* tenant net stage verified

* tenant sec stage verified

* fix test

* README work

* tfdoc

* README

* README rewording

* README rewording

* tfdoc

* FAST excalidraw

* review comments

* diagram review changes

* add iam log sink for tenants

* remove redundant try from security stage

* Implement tflint-fast in Python driven by tftest.yaml files

* tflint

* test ci changes

* revert linting changes

* disable tflint for fast

* Create junit-style report for FAST tflint

* Remove junit-reporter

* YAPF tflint-fast.py

* Output tflint FAST to job summary

* Step summary

* Disable step_summary as output is not useful

* ignore tflint warning

* re-enable tflint on FAST

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
 2024-05-15 09:17:13 +00:00
Wiktor Niesiobędzki
af253c9702 Fix 0-bootstrap iam_by_principals not taking into account all principals (#2267) 
* Fix 0-bootstrap iam_by_principals not taking into account all principals
* Add test-case for iam_by_principals for 0-bootstrap stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-05-12 21:02:04 +02:00
Wiktor Niesiobędzki
2b6c81f73d Update docs - gcp-network-admins -> gcp-vpc-network-admins 2024-05-10 10:04:24 +02:00
Ludovico Magnocavallo
c9503d5ac5 Remove data source from folder module (#2260) 
* remove data source from folder module

* fix fast tfdoc

* fix locals type error

* fix folder test

* fix fast test
 2024-05-09 13:09:54 +00:00
Julio Castillo
7aa6c7e059 Style fixes to FAST log sinks expressions 2024-05-02 22:11:33 +02:00
Julio Castillo
94c32c1d71 Misc FAST fixes (#2253) 
* Misc FAST fixes

* Fix readme

* Fix FAST nva bgp tests
 2024-05-02 06:56:26 +00:00
Julio Castillo
99129d54a3 Update FAST logging (#2235) 
* Update FAST logging

* Fix readme

* Fix tests
 2024-04-25 08:31:51 +02:00
Luca Prete
dd213ea9a9 Fix permissions for branch network dev - read sa (#2233) 
Co-authored-by: Luca Prete <lucaprete@google.com>
 2024-04-23 15:19:38 +02:00
Julio Castillo
f22837cd47 Enable TFLint in FAST stages (#2221) 2024-04-18 10:06:24 +02:00
Julio Castillo
3af7e257d2 Add tflint to pipelines (#2220) 
* Fix terraform_deprecated_index

https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md

* Fix terraform_deprecated_interpolation

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md

* Fix more indexing

* Remove unused variable

* Enable TFLint for modules

* Add tflint config file

* Fix chdir

* Lint modules

* TFLint fixes

* TFLint

* Fixes binauthz README

* Fixes DNS response policy tests. Restores MIG outputs.

* Fixes other DNS response policy tests.

* Update tests for fast 2-e

* Moar fixed tests

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
 2024-04-17 10:23:48 +02:00
Ludovico Magnocavallo
9414779cc2 Allow multiple PSA service providers in net-vpc module (#2218) 
* allowing multiple PSA service providers in net-vpc module

* tfdoc

* tfdoc

* Add tfvars/yaml tests

* fix module and tests

* re-enable inventory

* merge fix

* Add multiple PSA test case

* fix cloudsql example

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
 2024-04-16 15:02:36 +00:00
Julio Castillo
b4b926a56e Remove unused variables/locals from FAST (#2219) 
* Remove unused variables/locals from FAST

* Fix readmes
 2024-04-16 14:14:24 +00:00
Julio Castillo
a74a106f8b Add new org policies to FAST (#2215) 
* Add new org policies to FAST

* Fix tests
 2024-04-15 15:29:24 +02:00
Ludovico Magnocavallo
9cace5272f Add support for quotas to project module (#2210) 
* add support for quotas to project module

* tfdoc

* better outputs

* Ensure keys in `quota_configs` are unique

* update fast tests

* Make quota E2E testable

* Remove quota project caveat

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
 2024-04-10 17:03:04 +00:00
Timothy Jabez
215c5cec26 Update the description and README for the tags variable (#2206) 
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2024-04-10 15:08:59 +02:00
Ludovico Magnocavallo
f0197c2662 align net stages exported tfvars, add psc and proxy only subnets (#2204) 2024-04-08 09:26:47 +02:00
Ludovico Magnocavallo
8511170412 FAST security stage refactor (#2203) 
* first working change, missing docs and tests

* fixes

* tests

* boilerplate

* tfdoc
 2024-04-07 20:14:39 -07:00
Julio Castillo
a9ac0f40cd Add variable to resman to control top-level folder IAM (#2196) 2024-04-04 10:26:35 +02:00
Ludovico Magnocavallo
33ffe2daa6 Allow r/o project factory SAs access to folder-level IAM (#2195) 
* allow project factory SAs read access to folder-level IAM

* tfdoc
 2024-04-03 21:51:46 +02:00
Elia
b80132a618 FAST GCVE stage (#2191) 
* GCVE stage prerequisites

* fix gcve prereq

* gcve stage first deploy

* Updated readme filex

* docs updated

* some fixes after testing

* updated readme files

* elia fix

* gcve net admin custom role

* gcve net admin custom role

* elia fix

* ven peering deploy

* elia fix

* added blueprint and stage tests

* Edits to Readme files

* typo in outputs

* clean-up

* gcve stage tests fix

* readme fix

* fix sorting

* fix copyrights and readme file

* fix test

* fix copyright

* fixed gcve feature flag cond.

* removed validation

* fixed typo

* fixed typo

* fixed gcve tests

* fixed typo

* fixed typo

* fixed sorting

* fixed sorting

---------

Co-authored-by: Konrad Schieban <kschieban@google.com>
 2024-04-03 17:25:12 +02:00
Ludovico Magnocavallo
f25701d79c update org viewer custom role and cicd templates (#2178) 2024-03-27 09:06:25 +01:00
Ludovico Magnocavallo
52b5bd00a9 stage c nva (#2172) 2024-03-24 12:54:29 +01:00
Julio Castillo
759e85d6af Logging updates (#2139) 
* Add support for logging settings to the organization module

* Enable log analytics on FAST-managed logging buckets

* Fix README

* Fix tests
 2024-03-08 10:07:12 +01:00
Ludovico Magnocavallo
ecf5400fe3 update FAST state IAM files (#2136) 2024-03-07 00:08:09 +01:00
Ludovico Magnocavallo
3972eb6df4 Align resource names in FAST networking stages (#2115) 
* stage c nva

* fix tests

* remove moved blocks from net c stage

* simplify subnet naming in stage 2 net e

* address most renames in stage 2 e

* address most renames in stage 2 e

* address most renames in stage 2 e

* complete renames in stage 2 e

* use non-regional names in subnets

* use non-regional names in subnets

* use non-regional names in subnets
 2024-02-29 07:45:19 +01:00
Ludovico Magnocavallo
dbabfb9ae0 Add support for billing budgets to project factory (#2112) 
* align factory variable name in project factory module

* tested

* align fast stage
 2024-02-27 18:13:49 +00:00
Ludovico Magnocavallo
6941313c7d Factories refactor (#1843) 
* factories refactor doc

* Adds file schema and filesystem organization

* Update 20231106-factories.md

* move factories out of blueprints and create new factories  README

* align factory in billing-account module

* align factory in dataplex-datascan module

* align factory in billing-account module

* align factory in net-firewall-policy module

* align factory in dns-response-policy module

* align factory in net-vpc-firewall module

* align factory in net-vpc module

* align factory variable names in FAST

* remove decentralized firewall blueprint

* bump terraform version

* bump module versions

* update top-level READMEs

* move project factory to modules

* fix variable names and tests

* tfdoc

* remove changelog link

* add project factory to top-level README

* fix cludrun eventarc diff

* fix README

* fix cludrun eventarc diff

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
 2024-02-26 10:16:52 +00:00