9a95ac10ed
Once again fix e2e tests
2024-02-23 19:21:39 +01:00
8fd8ee0541
Fix too long project names on e2e tests
2024-02-23 11:41:58 +01:00
5197d5ca8d
Allow projects as destinations for log sinks ( #2102 )
...
* Add project log sink destination to project module
* Add project log sink destination to folder module
* Add project log sink destination to organization module
* Fix typos
* Add project log sink destination to billing-account module
* Make filter field optional
* Update READMEs
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-02-21 08:41:13 +01:00
71a64487d5
Extend FAST to support different principal types ( #2064 )
...
* add doc draft
* typos
* typo
* typo
* typos
* rewording
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* move iam variables to a separate file
* move billing-account module to iam_principals
* move data-catalog-policy-tag module to iam_principals
* move dataplex-datascan module to iam_principals
* move dataproc module to iam_principals
* move folder module to iam_principals
* copyright
* move organization module to iam_principals
* move project module to iam_principals
* move source-repository module to iam_principals
* update blueprints for iam_principals interface
* FAST bootstrap
* module READMEs fixes
* FAST bootstrap
* FAST networking stages
* FAST security stage
* FAST gke stage
* FAST multitenant bootstrap stage
* FAST multitenant resman stage
* tfdoc
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* fix module test
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Rename iam_principals to iam_by_principals
* Update IAM template to include iam_by_principals
* Update Resman README
* Fix ADR link format
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-02-12 14:35:30 +01:00
bf93b6fb4e
fix typo in logging sinks interface ( #2015 )
2024-01-28 10:27:28 +01:00
6d9b6403dd
add support for essential contacts to FAST ( #2010 )
2024-01-25 12:20:14 +01:00
b6e0557bbb
Simplify organization tags.tf locals ( #1932 )
...
* Simplify organization tags.tf locals
* Fix boilerplate
* Override github provider version for tests
2023-12-18 16:09:22 +00:00
bba814c091
Custom role factories for organization and project modules ( #1912 )
...
* backport custom role factories
* backport from fast ci/cd branch
* indent
* tfdoc
* fix module tests
2023-12-11 14:16:39 +00:00
d9f9410ae5
Use unique names for logging buckets in examples
...
Logging bucket name can be reused only after 7 days (when it is actually
deleted). When different tests reuse the same name, the ones that are
executed as 2nd and later will fail with message:
```
Error updating Logging Bucket Config [...]: googleapi: Error 400: Buckets
must be in an ACTIVE state to be modified
```
As their actual state is:
```
lifecycleState: DELETE_REQUESTED
```
2023-12-03 10:03:22 +00:00
55f308cbea
Fix failing E2E tests for folders ( #1884 )
...
* Run tests requiring uniqueness on org level serially (organization tags, firewall policies)
* make gcs bucket name globally unique
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-11-24 08:09:13 +00:00
2d70bb8db2
E2E tests for folder module ( #1876 )
...
E2E tests for folder module
2023-11-22 10:25:11 +01:00
0f91a964da
Added back sink iam flag as module users might not have access to the sink destination and the role might need to be granted somewhere else
2023-11-07 08:11:23 +01:00
252127bde5
Billing account module ( #1743 )
...
* initial untested draft
* readme and tests
* folder module tfdoc
* remove redundant billing cost manager role in fast stage 0
* fix FAST test
2023-10-15 15:02:50 +00:00
ec3b705f53
Change type of `iam_bindings` variable to allow multiple conditional bindings ( #1658 )
...
* modules
* fast
* dns readme
2023-09-08 08:56:31 +02:00
04721a35ef
Allow single hfw policy association in folder and organization modules
2023-08-28 16:00:48 +02:00
819894d2ba
IAM interface refactor ( #1595 )
...
* IAM modules refactor proposal
* policy
* subheading
* Update 20230816-iam-refactor.md
* log Julio's +1
* data-catalog-policy-tag
* dataproc
* dataproc
* folder
* folder
* folder
* folder
* project
* better filtering in test examples
* project
* folder
* folder
* organization
* fix variable descriptions
* kms
* net-vpc
* dataplex-datascan
* modules/iam-service-account
* modules/source-repository/
* blueprints/cloud-operations/vm-migration/
* blueprints/third-party-solutions/wordpress
* dataplex-datascan
* blueprints/cloud-operations/workload-identity-federation
* blueprints/data-solutions/cloudsql-multiregion/
* blueprints/data-solutions/composer-2
* Update 20230816-iam-refactor.md
* Update 20230816-iam-refactor.md
* capture discussion in architectural doc
* update variable names and refactor proposal
* project
* blueprints first round
* folder
* organization
* data-catalog-policy-tag
* re-enable folder inventory
* project module style fix
* dataproc
* source-repository
* source-repository tests
* dataplex-datascan
* dataplex-datascan tests
* net-vpc
* net-vpc test examples
* iam-service-account
* iam-service-account test examples
* kms
* boilerplate
* tfdoc
* fix module tests
* more blueprint fixes
* fix typo in data blueprints
* incomplete refactor of data platform foundations
* tfdoc
* data platform foundation
* refactor data platform foundation iam locals
* remove redundant example test
* shielded folder fix
* fix typo
* project factory
* project factory outputs
* tfdoc
* test workflow: less verbose tests, fix tf version
* re-enable -vv, shorter traceback, fix action version
* ignore github extension warning, re-enable action version
* fast bootstrap IAM, untested
* bootstrap stage IAM fixes
* stage 0 tests
* fast stage 1
* tenant stage 1
* minor changes to fast stage 0 and 1
* fast security stage
* fast mt stage 0
* fast mt stage 0
* fast pf
2023-08-20 09:44:20 +02:00
def2f476d1
Add support for conditions to `iam_members` module variables ( #1594 )
...
* project
* data-catalog-policy-tag
* dataproc
* folder
* iam-service-account
* kms
* net-vpc
* organization
* source-repository
* dataplex-datascan
2023-08-15 16:28:23 +02:00
adf2621727
Add new `iam_members` variable to IAM additive module interfaces ( #1589 )
...
* resource management modules
* data catalog policy
* dataproc
* service account
* kms
* net-vpc
* source repository
* dataplex datascan
* service account module variable order
2023-08-14 09:54:50 +00:00
79373721df
Remove firewall policy management from resource management modules ( #1581 )
...
* rename firewall policy module, fix outputs
* add TOC to firewall policy module
* don't depend policy on parent id
* remove firewall policy from resource management modules
* remove factory conditionals
* fast net a and b
* fast stages
* fast tfdoc
* fast tfdoc
* remove unused test
* fix shielded folder blueprint
* fix shielded folder blueprint
2023-08-09 11:23:07 +00:00
1fdec356e2
Update large TOCs
2023-07-28 15:43:51 +02:00
551dc581e8
Implement proper support for data access logs in resource manager modules ( #1497 )
...
* organization module
* rename iam_bindings_authoritative to iam_policy, fix tests
* add support for data access logs and iam policy to folder module
* test inventories
* add support for data access logs and iam policy to project module
2023-07-10 08:08:02 +00:00
6fcb010ff2
Add ToCs to resource manager modules ( #1471 )
...
* organization module
* folder
* project module
2023-06-27 09:36:28 +00:00
39b27ac25e
Add support for Log Analytics on logging-bucket module and bump provider version ( #1423 )
...
* first commit
* Bump provider versions
* Fix tests
2023-06-07 23:23:28 +02:00
884cb8b4bf
Ensure all modules have an `id` output ( #1410 )
...
* net-vpc
* a-d
* complete modules
* fix error
2023-06-02 16:07:22 +02:00
a5e905cb80
Update remaining org policies
2023-02-21 15:49:16 +01:00
62834ca83a
Update READMEs
2023-02-21 15:49:16 +01:00
6b767c9035
Simplify org policies data model in resman modules.
2023-02-21 15:49:16 +01:00
c8bfe892a6
Update folder tests
2023-01-03 16:52:31 +01:00
e700a27079
Enforce terraform fmt in examples
2022-12-18 14:00:19 +01:00
513fdfe91a
Make directive for supporting files in examples more explicit
2022-12-18 14:00:19 +01:00
2cd74823b1
Generate files based on readme contents
2022-11-18 17:48:52 +01:00
5cfa1062cc
Ensure inline README file match fixture files
2022-11-18 17:48:52 +01:00
7be3288cc7
Add tests for factory examples
2022-11-18 17:48:52 +01:00
c83a7de076
Remove as_logging_destination
2022-11-12 19:24:41 +01:00
b37ef3a90a
Update folder readme
2022-11-12 12:22:09 +01:00
8fe19ad7c2
Rename bigquery_use_partitioned_table
2022-11-12 11:30:34 +01:00
486d398c7d
Update logging sink to tf1.3 in resman modules
2022-11-11 19:22:05 +01:00
4b278a1533
Update variable description
2022-11-03 12:35:50 +01:00
5b1873775a
Fix internal links
2022-11-03 12:14:47 +01:00
f64c43e893
Add org policy factory example
2022-11-03 12:12:50 +01:00
3e18575fad
Add factory support for new org policies
2022-11-03 11:41:53 +01:00
8c51a2a386
Enable org policy service and add README notice to modules ( #936 )
...
* enable org policy service and add README notice to modules
* fix tests
2022-11-01 14:25:07 +01:00
b6c40dcdb3
Update readmes
2022-10-28 17:49:44 +02:00
ad420138ad
Fix readme examples
2022-10-28 17:49:44 +02:00
b23d07b0c6
Update project/folder/module to use new org policies API and tf1.3 optionals.
2022-10-28 17:49:44 +02:00
a866182161
Test documentation examples in the examples/ folder
2022-09-06 17:46:09 +02:00
0bf1880431
Fix FAST audit logs when using pubsub as destination
...
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
ecadebe90b
Add support for IAM additive to folder module ( #580 )
2022-03-11 09:46:32 +01:00
0b5ed8b7ef
Add support for resource management tags and tag bindings ( #552 )
...
* organization module
* folder module
* project module
* fix project binding
* use id instead of name for references
* kms module
* compute-vm
* fix compute-vm
2022-02-20 11:14:18 +01:00
ad82501f62
Update README.md
2022-02-15 15:13:10 +01:00
Wiktor Niesiobędzki
Julio Castillo
Ludovico Magnocavallo
dibaskar-google
apichick
lcaggio