Commit Graph

6013 Commits

Author SHA1 Message Date
apichick
ff7e7d299c Added recipe HA VPN between AWS and GCP (#3034)
* Added recipe HA VPN between AWS and GCP

* Fix typo

* Update providers to work without credentials

* Add AWS resource to tools/lockfile/main.tf

* Fixed error in recipe docs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-04-14 12:47:21 +02:00
Wiktor Niesiobędzki
2d54911415 Use path as keys in project factory 2025-04-11 22:50:50 +02:00
Stefano Tribioli
ffe1fbdfea Allow IAP configuration with default IdP
Load balancers can be configured with IAP-enabled backends.
They can either be configured to use external Identity Providers (IdP)
or to use Cloud Identity. The latter is the default and is used when
the OAuth2 parameters are not specified.

The iap_config parameter in the backend_service_configs variable
already supported the external IdP option, but did not support the
default one.
2025-04-11 16:19:17 +00:00
simonebruzzechesse
03db2e45cf secops-rules module (#3023)
* secops-rules module
2025-04-11 15:44:31 +02:00
simonebruzzechesse
a747653e88 SecOps Anonymization improvements (#3013)
* update secops anonymization pipeline with new chronicle APIs
2025-04-11 15:14:05 +02:00
Wiktor Niesiobędzki
f1a3cac8ca Use factory-projects-object to normalize inputs for project module 2025-04-11 10:53:08 +02:00
Simone Ruffilli
fc84c4f60d Module: net-vpc-factory (#2982)
This pull request introduces the `net-vpc-factory` module. This new factory handles: 

* Project setup (most of what's supported by the `project` module)
* VPC setup
  * Routing
  * Subnets
* Connectivity options
  * NCC (hub, VPC spokes and VPN hybrid spokes)
  * Peerings
  * VPN (GCP-to-onprem and GCP-to-GCP)
* NAT (everything supported by the `net-cloudnat` module)
* DNS (everything supported by the `dns` module)
* Firewall (everything supported by the `net-vpc-firewall` module)
2025-04-10 11:44:39 +02:00
Luca Prete
f7a0958e17 [FAST] Remove object creator permission from storage viewer custom role (#3020) 2025-04-09 16:39:20 +02:00
jacklever-hub24
2390124877 Added variable for activating nat and implementation in google_apigee… (#2999)
* Added variable for activating nat and implementation in google_apigee_net_address resource

* Regenerated readme

* Added tests for nat & activation

* Removed unnecessary coalesce

* Fixed test params

* Added test to confirm activate is working
2025-04-08 12:31:33 +00:00
Wiktor Niesiobędzki
6d2173aada Ensure vpc_sc has correct type for overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
d63a425b62 Allow same filename in different directories
As long, as they do override default project name using `name`.
2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
4769dc3dd7 Allow null parent and prefix 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
c90005553a Add tests for data_defaults / data_overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
46f731fee0 Use null values for data_overrides 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
ce05505a2c Add type information to project_config attributes 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
6d54ff9a45 Use the same keys in output as in input for projects 2025-04-06 20:17:22 +02:00
Wiktor Niesiobędzki
1c87246583 Use factory-projects-object for project object normalization 2025-04-06 20:17:22 +02:00
Julio Castillo
e04079e334 Add support to attach tags to service accounts (#3008)
* Remove service account key upload. Add create_ignore_already_exists

* Add tag bindings to service accounts

* Add description to create_ignore_already_exists

* Remove broken links
2025-04-04 12:31:19 +00:00
Ludovico Magnocavallo
c8a9cd3edb Update VPC-SC README (#3006)
Fixes #2983
2025-04-04 09:06:26 +02:00
Ludovico Magnocavallo
dde3c1abf2 Add support for non-destructive tag bindings to compute-vm module (#3004)
* wip

* add support for tag bindings

* tfdoc

* improve example

* tfdoc
2025-04-03 18:20:00 +02:00
Ludovico Magnocavallo
8b774f1fba cross-project serverless neg example (#3003) 2025-04-03 08:53:47 +00:00
Julio Castillo
0c334a6128 Add roles support to VPC-SC (#3000) 2025-04-02 09:39:04 +02:00
Julio Castillo
bd829e6ba3 Allow disabling GKE IP endpoints and setting GKE VPC scope DNS domain (#2997)
* Allow disabling IP access to GKE control plane

* Add additive VPC scope DNS domain to gke clusters

* Fix typo

* Bump provider to 6.27.0

* Update readme
2025-04-02 07:03:58 +00:00
simonebruzzechesse
638c4d9d12 Fix Cloud SQL deployment and use local remote docker hub for pulling gitlab docker image (#2989)
fix gitlab blueprint 
add docker remote registry
2025-04-01 14:20:24 +02:00
Tim Hiatt
762841da79 Fr/timhiatt/invoker iam disable (#2994)
* Staging the New Variable change and the flag endablement for 'invoker_iam_disabled' in the 'google_cloud_run_v2_service' resouece associated with the 'cloud-run-v2' module.

* Updating tfdocs to include the new variables for the 'invoker_iam_disabled' flag in the 'google_cloud_run_v2_service' resource in module 'cloud-run-v2'

* Updating the testing in the readme for the cloud-run-v2 module.

* Fixing an issue with links in README.md Docs

* Fixing README.md linting.
2025-04-01 11:41:08 +02:00
Wiktor Niesiobędzki
dcccb1a1d0 Improve failure message 2025-04-01 10:40:32 +02:00
Marco Cadetg
2b2e52fecd feat: add gcp_public_cidrs_access_enabled to gke-cluster-{autopilot,standard} (#2993) 2025-04-01 06:17:44 +00:00
Ludo
196b06441b update changelog 2025-03-31 09:21:07 +02:00
Wiktor Niesiobędzki
3e84236345 Project object c14n in separte file
Create separate file for canonicalization of project factory objects and
introduce duplicate-diff lint checker.
2025-03-30 10:39:08 +02:00
Taneli Leppä
e4f3f713bb Update list of GPUs. 2025-03-26 13:51:54 +01:00
Taneli Leppä
ccecc32718 compute-vm: Add graceful shutdown configuration and some missing GPUs. 2025-03-26 13:51:54 +01:00
Ludo
d487590e01 v38.1.0 2025-03-22 13:28:10 +01:00
LFicteam
b3d95ba88b Fix issue 2978 (#2981)
* Fix issue 2978

* Fix linting
2025-03-21 22:20:36 +00:00
simonebruzzechesse
62321d3054 hotfix push subscription in pubsub module (#2974) 2025-03-20 20:22:43 +01:00
Wiktor Niesiobędzki
256ed8dc42 net-lb-app-* support any ports now 2025-03-20 11:28:17 +01:00
dependabot[bot]
70a330aff6 Bump google.golang.org/grpc (#2971)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.53.0 to 1.56.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.53.0...v1.56.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 11:51:08 +00:00
dependabot[bot]
83755da3e7 Bump google.golang.org/protobuf (#2970)
Bumps google.golang.org/protobuf from 1.28.1 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 11:37:11 +00:00
dependabot[bot]
d6f38d6779 Bump golang.org/x/net (#2969)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 11:23:21 +00:00
Ludo
0638b552e1 update changelog 2025-03-19 12:10:29 +01:00
Wiktor Niesiobędzki
eba82f67c5 Add example with transparent proxy and E2E test 2025-03-19 12:00:21 +01:00
Luca Prete
ffb1452dbd Allow to specify function egress settings without using a VPC connector (#2967) 2025-03-19 10:38:33 +00:00
Ludovico Magnocavallo
c8e4179f2b Add custom routes for directpath to net-vpc module (#2966)
* add custom routes for directpath to net-vpc module

* blueprint tests

* blueprint tests

* blueprint tests

* fast tests

* tfdoc

* module examples
2025-03-19 10:22:47 +00:00
Wiktor Niesiobędzki
73022a710a Revert "Fix broken upgrades of TF provider for routes"
This reverts commit 7f58f1ae31.
2025-03-18 11:06:46 +01:00
Wiktor Niesiobędzki
7f58f1ae31 Fix broken upgrades of TF provider for routes 2025-03-18 09:41:57 +01:00
Federico Preli
acaac300ae Adding enterprise_config -> desired_tier feature to GKE autopilot and standard (#2962)
Add
2025-03-17 16:41:48 +00:00
Wiktor Niesiobędzki
fc256165a4 Pass edition and other parameters to replicas 2025-03-17 11:46:01 +01:00
Julio Castillo
34e7d90448 Update GKE addons and features (#2956)
* Update GKE addons and features

* Fix tests
2025-03-14 19:07:16 +00:00
Tone
cca6f25d37 feat(artifact-registry): Add possibility to setup Docker common remote repository configuration (#2952)
* feat(artifact-registry): Add possibility to setup Docker common remote repository configuration

Add the possibility to setup Docker common remote repository configuration to be able to have remote of internal Artifact Registry repository.

* feat(artifact-registry): Add instructions Readme to setup simple Docker common remote repository configuration
2025-03-13 12:30:35 +00:00
dependabot[bot]
87b7650ed7 Bump golang.org/x/net (#2953)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-13 09:22:45 +01:00
Simone Ruffilli
be816fd882 net-vpc: fix permadiff in docs (#2949) 2025-03-12 10:09:08 +01:00