Commit Graph

6257 Commits

Author SHA1 Message Date
Antoine Méausoone
ffeb75100c fix(bootstrap): fix custom roles billing viewer duplicate permissions (#2927) 2025-02-24 12:52:30 +01:00
Julio Castillo
5688a4da8c Use value and not key for ingress policy resources (#2926) 2025-02-24 09:22:30 +00:00
Wiktor Niesiobędzki
fea88ade66 Add limits for stage_names and environment 2025-02-23 18:33:32 +01:00
Wiktor Niesiobędzki
2809570651 Fix E2E tests 2025-02-23 18:19:28 +01:00
JayKim
1dce672d16 Fix CICD SA access (#2923) 2025-02-23 08:04:10 +01:00
karpok78
07a70eedb5 Add perimeter factory to modules/vpc-sc (#2919)
* Add perimeter factory

Proposal to allow the management of perimeters in yaml factory.
Project discovery is extended to multiple perimeters with query filtering.

Doc clean uo

* default perimeters desc to null

* linting

* Revert changes to FAST

* Remove test and schema from FAST

* Align vars and perimeter factory

* Interpolate resource_sets in more places

* Silence linter

* Update README.md

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2025-02-22 07:49:05 +01:00
Wiktor Niesiobędzki
62f789c249 Add execution/invocation commands to outputs 2025-02-21 17:53:42 +01:00
dgourillon
16727ded25 Fix KMS service agent when universe is set (#2920)
* propose the changes to the service agent config agent

* Fix formatting

* Fix typo

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-02-21 14:59:48 +00:00
dependabot[bot]
b73114c0a8 Bump requests (#2918)
Bumps [requests](https://github.com/psf/requests) from 2.27.1 to 2.32.2.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.27.1...v2.32.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-02-21 09:03:12 +00:00
Ludo
60a4179c98 fast moved file 2025-02-21 09:42:42 +01:00
Ludo
fb300f9e58 v38.0.0 2025-02-21 09:40:35 +01:00
Ludo
1abfa69ccc v38.0.0 2025-02-21 09:39:52 +01:00
Ludo
93f2a3f272 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-21 09:36:51 +01:00
Ludo
79ee5e8dd7 v37.4.0 2025-02-21 09:29:51 +01:00
Wiktor Niesiobędzki
2427b2e0fd Add error messages for failing interpolations 2025-02-21 09:20:44 +01:00
Peter Norton
24b7297f58 Add support for custom error response policies to net_lb_app_ext module (#2916)
* Add support for default custom error response policy

This update introduces the ability to define a default custom error response policy in the URL map module. It includes support for specifying error services and error response rules with match response codes, paths, and override response codes. This enhancement increases flexibility in handling custom error responses.

* Update error_service handling in URL map

Modified the error_service assignment to include a fallback lookup mechanism for backend IDs when the value is not null. This ensures robustness and avoids null references while maintaining existing behavior.

* Add custom error response policies in lower levels of URL map

* Update net-lb-app-ext README.md
2025-02-20 20:32:24 +01:00
Ludo
1c0d191386 linting 2025-02-20 16:29:03 +01:00
Ludo
7aad81d97f move ilb as next hop blueprint to module-level recipe 2025-02-20 16:26:38 +01:00
Ludo
82f1cf965f Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-20 15:04:07 +01:00
Nathalie
a15d1a3c2a output dns_keys instead of a list (#2915)
* output dns_keys instead of a list

* access list items with square brackets according to linter
2025-02-20 09:56:57 +00:00
Julio Castillo
21253a1768 Add title to VPC-SC directional policies (#2909)
* Add title to VPC-SC directional policies

* Ignore versions.tf in diffs

* Update versions.tf

* Fail if a perimeter uses unknown directional policies
2025-02-20 08:48:08 +00:00
Ludo
411b2f6e6c Merge branch 'master' into fast-dev 2025-02-20 07:58:33 +01:00
Ludovico Magnocavallo
5312767be4 Add provider output files to project factory stage, single automation bucket in module (#2914)
* single automation bucket, provider output files for project factory

* tfdoc

* fix outputs
2025-02-19 17:45:56 +00:00
Daniel Strebel
aab282bf19 feat: adding generated_id for backends to net-lb-app-ext (#2913) 2025-02-19 18:16:05 +01:00
Wiktor Niesiobędzki
58051e48e7 Fix tests 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
fd07db5000 Add tftests for project factory 2025-02-19 16:47:15 +01:00
Wiktor Niesiobędzki
0a1b6c6e0f Add ability to refer to other project service accounts in Project Factory 2025-02-19 16:47:15 +01:00
Ludo
d6f4c5cea6 update changelog 2025-02-19 10:47:17 +01:00
Ludovico Magnocavallo
427763f7e6 add support for max workstations, refactor timeouts in workstation-cluster module (#2911) 2025-02-19 09:45:38 +00:00
Simone Ruffilli
942ef8fe3d Add ssl_mode support to cloudsql-instance replicas (#2910)
* Add ssl_mode support for cloudsql-instance replicas

* Rename var.ssl.ssl_mode to var.ssl.mode
2025-02-19 10:31:35 +01:00
Julio Castillo
009e03d55d Update pull_request_template.md 2025-02-18 21:44:13 +01:00
Julio Castillo
064fc0e280 Update pull_request_template.md 2025-02-18 21:41:40 +01:00
Wiktor Niesiobędzki
3ddfd59b88 Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-18 20:30:14 +00:00
Julio Castillo
4c6e6d6791 Add breaking changes to changelog (#2908) 2025-02-18 18:09:13 +00:00
Julio Castillo
4e965f1b62 Fix tests 2025-02-18 18:02:38 +01:00
Wiktor Niesiobędzki
c1ab3bf710 Remove Service Account key generation 2025-02-18 18:02:38 +01:00
Julio Castillo
51bd19bc30 Update default FAST org policies (#2906)
* Update org default org policies

* Update default FAST org policies
2025-02-18 16:34:44 +01:00
Julio Castillo
348e4df081 Fix default compute.restrictProtocolForwardingCreationForTypes value (#2904) 2025-02-18 14:28:33 +01:00
Simon Roberts
642ebfe9e9 Increase the default complexity of Cloud SQL DB passwords (#2886)
* Increase the default complexity of DB passwords in order to meet password_validation_policy.default_complexity

* Use password_validation_policy.min_length if provided

* Explicitly generate a root_password if not provided

* Use object (password, random_password) for root_password config

* Make root_password non-nullable, and add validation against specifying both a password and `random_password`.
Fix test for stronger password generation.

* Add example for root_password and password_validation_policy

* Rerun tfdoc.py

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-02-18 10:46:29 +00:00
Ludo
e8e7ad7fe9 update changelog 2025-02-18 10:28:56 +01:00
Ludovico Magnocavallo
44de36905e Allow passing explicit regions in net test addon subnets (#2902)
* allow passing explicit regions in net-test addon subnets

* checkout repo in labeler

* checkout repo in labeler

* revert labeler changes
2025-02-18 10:26:39 +01:00
Ludo
8f6cd6dedc Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-18 08:36:34 +01:00
Ludovico Magnocavallo
aee6d1e27a add chain output (#2901) 2025-02-18 07:05:28 +00:00
jacklever-hub24
a8d7d401d6 Add support for locality policies to net-lb-app-ext module (#2898)
* Fix the missing locality_lb_policy value and add validation for it

* Added variables, dynamic blocks and validation to support locality_lb_policy/ies

* Formatting

* tfdoc generation

* Fix net-lb-app-ext readme

* Fixes for Ludo, coalesce and brevity

* fmt

* Revert null check due to failing tests

---------

Co-authored-by: Jack Lever <jack@thelevers.com.au>
Co-authored-by: Ludo <ludomagno@google.com>
2025-02-18 06:25:45 +00:00
simonebruzzechesse
b0021cc0f1 New SecOps anonymization pipeline (#2794)
* new secops anonymization pipeline

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2025-02-17 19:23:19 +01:00
Ludovico Magnocavallo
1a4b298cc9 Project factory additions, project module reuse implementation (#2899)
* add support for buckets

* add project-level interpolation for own SAs

* docs

* project reuse changes

* fix example

* tfdoc

* update check documentation tool

* fast tests

* blueprints

* typo
2025-02-15 20:37:45 +01:00
Ludovico Magnocavallo
87383a1569 FAST project templates example (#2897)
* wip

* project factory providers

* working example

* copyright, tfdoc

* rewording

* rewording

* tfdoc

* tfdoc

* tfdoc again

* fix tests

* tests
2025-02-14 19:14:27 +00:00
Ludo
261e4137ba Merge remote-tracking branch 'origin/master' into fast-dev 2025-02-14 16:14:34 +01:00
Julio Castillo
d0c3f04c10 Make service agents work in different universes (#2894)
* Make service agents work in different universes

* Use templatestring and two passes for service agent emails

* Fix tests
2025-02-14 12:16:07 +00:00
Ludovico Magnocavallo
9148e76087 Add support for project-level log sinks to FAST stage 0 (#2893)
* Fix ipv6 and align loadbalancer address types

* Release v37.3.0

* add support for project-level log sinks to stage 0

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2025-02-14 11:58:18 +01:00