Commit Graph

1033 Commits

Author SHA1 Message Date
Ludovico Magnocavallo ea360072b8
Update README.md 2022-11-16 14:14:43 +01:00
Ludovico Magnocavallo 5f710f21dc
Add support for serverless NEGs to ILB L7 module (#983)
* refactor neg variable for serverless

* cloudrun negs

* cloudrun negs

* serverless neg test

* re-enable forwarding rule output
2022-11-16 14:14:05 +01:00
Maurizio Noseda Pedraglio b2bd0009b9 restored tfskip 2022-11-15 16:21:23 +01:00
Maurizio Noseda Pedraglio a47726741d enablid tests 2022-11-15 15:42:10 +01:00
Maurizio Noseda Pedraglio 4cbf0272f9 linting 2022-11-15 15:12:50 +01:00
Maurizio Noseda Pedraglio 7c874660a8 restored validation 2022-11-15 15:10:42 +01:00
maunope 09fba581a8
Update README.md
fix
2022-11-15 14:49:16 +01:00
maunope f514ab0371
Update README.md
restored sample
2022-11-15 14:48:48 +01:00
maunope fbfbb93783
Update README.md
linting fix
2022-11-15 14:47:11 +01:00
maunope a199214970
Update variables.tf
fixed test
2022-11-15 14:42:19 +01:00
maunope 7f9c29c4ba
Merge branch 'master' into maunope/cf_module_update 2022-11-15 13:53:31 +01:00
maunope 099ac6ea7e
Update main.tf
removed comment
2022-11-15 13:52:52 +01:00
Sebastian Kunze 5125a5ad03
Replace Docker's `gcplogs` driver with the GCP COS logging agent (#977) 2022-11-15 13:19:52 +01:00
maunope a661dad67c
Update variables.tf
added worker pool variable
2022-11-15 12:24:59 +01:00
maunope f00c7da926
Update main.tf
added worker pool parameter
2022-11-15 12:24:19 +01:00
maunope fc0c8bd175
Update README.md
added sample
2022-11-15 12:23:44 +01:00
maunope 251703c63c
Update README.md
md file update
2022-11-15 12:18:00 +01:00
Ludovico Magnocavallo e957797aa6
add validation for health check port specification (#975) 2022-11-14 15:20:01 +00:00
Ludovico Magnocavallo 40a37e9328
Refactor net-ilb-l7 module for Terraform 1.3 (#974)
* wip

* wip

* minimal example test

* wip

* instance group example

* neg examples

* example tests

* tfdoc

* readme

* tested

* example

* default urlmap value, remove stale variable

* tests
2022-11-14 14:39:00 +01:00
Julio Castillo 4a25129765 Update readme 2022-11-12 19:25:41 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo b37ef3a90a Update folder readme 2022-11-12 12:22:09 +01:00
Julio Castillo daf0fef7cd Fix folder variables 2022-11-12 12:07:48 +01:00
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo c7fe6da12e Update READMEs 2022-11-11 19:28:02 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Natalia Strelkova d96f95c2b6 cannot instead of can not 2022-11-11 11:56:47 +00:00
Natalia Strelkova c640695e1a
Merge branch 'master' into nstrelkova-prefix-consistency 2022-11-11 07:41:31 +01:00
Ludovico Magnocavallo a9c47681d8
Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Natalia Strelkova d5d1d9eb34 terraform formatting fixed 2022-11-10 15:11:38 +00:00
Natalia Strelkova 68c3b13d6a prefix variable consistency across modules 2022-11-10 15:05:53 +00:00
Aleksandr Averbukh b04cfbf980
Merge branch 'master' into org-policy-custom 2022-11-09 08:53:38 +01:00
Valerio Ponza 8282b6c0e2
Fix README typo in firewall module (#960)
* fixing readme in firewall module

* fix typo

Co-authored-by: Valerio Ponza <vponza@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2022-11-09 00:25:34 +01:00
Aleksandr Averbukh 1419a04147 Update module readme 2022-11-08 18:17:05 +01:00
Aleksandr Averbukh aae6ab132c Add tests for org policy custom constraints 2022-11-08 18:13:49 +01:00
Aleksandr Averbukh 3bd2e1c0ea
Merge branch 'master' into org-policy-custom 2022-11-08 09:37:23 +01:00
Aleksandr Averbukh 3562c52520 Add support for org policy custom constraints 2022-11-08 09:34:38 +01:00
Catalin Muresan 4e2762098f Updated README.md 2022-11-07 12:47:35 +00:00
Catalin Muresan 31bb4476d1 Added IAM Additive and converted some outputs to static 2022-11-07 12:41:41 +00:00
Wiktor Niesiobędzki 0d80ad3f29
cloud-functions v2 - fix reference to bucket_name (#951)
* Fix reference to bucket when no bucket_config is provided

* Copy tests to check v2 cloud-functions
2022-11-06 08:32:38 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo 649bedc291
Update README.md 2022-11-03 13:19:02 +01:00
Julio Castillo e29957c394
Update README.md 2022-11-03 13:18:21 +01:00
Julio Castillo 4b278a1533 Update variable description 2022-11-03 12:35:50 +01:00
Julio Castillo d91a0835f7 Remove organization-policy module (now included in the resman modules) 2022-11-03 12:35:50 +01:00
Julio Castillo 5b1873775a Fix internal links 2022-11-03 12:14:47 +01:00
Julio Castillo f64c43e893 Add org policy factory example 2022-11-03 12:12:50 +01:00
Julio Castillo 3e18575fad Add factory support for new org policies 2022-11-03 11:41:53 +01:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Julio Castillo 38e761c3a8 Add test that ensures the implementation of org policies is consistent 2022-11-02 10:41:38 +01:00
Ludovico Magnocavallo 8c51a2a386
Enable org policy service and add README notice to modules (#936)
* enable org policy service and add README notice to modules

* fix tests
2022-11-01 14:25:07 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo b6c40dcdb3 Update readmes 2022-10-28 17:49:44 +02:00
Julio Castillo b56b57b974 Fix more copy/past badness 2022-10-28 17:49:44 +02:00
Julio Castillo c1fe477f88 Remove bad copy/paste 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo ad420138ad Fix readme examples 2022-10-28 17:49:44 +02:00
Julio Castillo f44f4a74dc Fix module tests 2022-10-28 17:49:44 +02:00
Julio Castillo b23d07b0c6 Update project/folder/module to use new org policies API and tf1.3 optionals. 2022-10-28 17:49:44 +02:00
Ludovico Magnocavallo 29cde275f0
fix backwards compatibility for vpc subnet descriptions (#926) 2022-10-28 08:13:04 +02:00
Julio Castillo 798fd6cc54
Merge branch 'master' into kmucha555/f_apigee_env_deployment 2022-10-27 21:46:31 +02:00
Krzysztof Mucha 74b17703cd Add support for deployment type and api proxy type for Apigee organization 2022-10-27 21:04:50 +02:00
Ludovico Magnocavallo e20de3b86a
fix service account create (#923) 2022-10-27 15:12:04 +00:00
Ludovico Magnocavallo ed9fd6b08d
Align documentation, move glb blueprint (#921)
* aling documentation, move glb blueprint

* modules README, sort modules

* reorder modules

* fix bp links

* fix moved blueprint test

* use a single cloud shell image in the repo
2022-10-26 14:31:04 +02:00
Julio Castillo 6242607e1b
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:24:20 +02:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Julio Castillo b1dfbe29c2
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:07:28 +02:00
Simone Ruffilli 384756a8a7 SimpleNVA: updated example 2022-10-25 18:09:31 +02:00
Simone Ruffilli 0611d66be7 SimpleNVA: add the option to create additional files 2022-10-25 18:07:38 +02:00
Julio Castillo 9e03ddbf6e Update README 2022-10-25 16:08:17 +02:00
Julio Castillo d759ac2ff1 Make dnssec not nullable 2022-10-25 15:47:18 +02:00
Julio Castillo 442f87e60e Rename local for consistency 2022-10-25 15:08:55 +02:00
Julio Castillo b5cee10dca Remove useless dynamic blocks 2022-10-25 15:07:56 +02:00
Julio Castillo 6340286fa4 DRY up resource name for recordsets 2022-10-25 15:07:56 +02:00
Julio Castillo 8bacd8f5d5 Add support for DNS routing policies 2022-10-25 15:07:56 +02:00
Simone Ruffilli c4d599f321
Fix race condition (#918)
The cloud-init runcmd had a race condition where the script could run before the network interfaces were ready.
Changed the script to a systemd unit and added a dependency on network ready.
2022-10-25 15:04:38 +02:00
Julio Castillo 1a3bb25917 Update provider version (needed for dns logging support). 2022-10-25 12:15:02 +02:00
Julio Castillo a676c0f64c Update readme 2022-10-25 12:11:07 +02:00
Julio Castillo 3b89d370a1 Simplify DNSSEC config 2022-10-25 12:11:07 +02:00
Julio Castillo ab11920bee Add cloud logging option 2022-10-25 12:11:07 +02:00
Julio Castillo 625eeb4d7f Make dns ttl optional 2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo 68f5719036
gke module datapath for autopilot 2022-10-25 07:23:38 +02:00
Julio Castillo 341ad5ef87
Update README.md 2022-10-24 12:55:32 +02:00
dsbutler101 3c40fc8fce
Add missing description field
Important so we can flag these groups are TF managed and must not be manually updated.
2022-10-21 15:38:07 +01:00
Luca Prete 9aea79fd31
Add internal_ips output to compute-vm module 2022-10-21 10:38:25 +02:00
Ludovico Magnocavallo d0ccd9ac31
Update README.md 2022-10-17 16:31:16 +02:00
Giovanni Baratta ca1dc3659a
Add auto_delete and instance_redistribution_type to compute-vm and compute-mig modules. (#890)
* Add auto_delete parameter to compute-vm module

* Add instance_redistribution_type in compute-mig module
2022-10-16 21:19:46 +02:00
Daniel Marzini 49d5e21a4b
Fix csi-driver, logging and monitoring default values when autopilot … (#883)
* Fix csi-driver, logging and monitoring default values when autopilot is used
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-14 17:30:54 +02:00
Ludovico Magnocavallo 41c416b55e
make mtu default explicit in variable description 2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Somnath Shukla a12da693a3
added support 2nd generation cloud function (#872)
* added support 2nd generation cloud function

* changed function_version to a simple boolean v2
removed memory_2ndGen

* will use the var.v2 to add the invoker role

* removed the list uisng compact and formated the code

* formated the code and added conditional feature

* formated the code

* added formating

* resolved the merge conflict

* Update readme

* Create local function object

* added secret_volumes
and secret_environment_variables for CF V2

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-13 08:09:00 +02:00
Ludovico Magnocavallo bc8f0c90b7
fix autoscaling block (#877)
* fix autoscaling block

* invert autoscaling block condition

* add autoscaling test
2022-10-12 16:44:47 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Ludovico Magnocavallo f080794167
Merge branch 'master' into tmp_revert_to_1.3.1 2022-10-10 11:21:26 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Julio Castillo 08b1dfdb8e Fix optionals for resource_usage_export field in `gke-cluster` 2022-10-10 10:47:51 +02:00
Ludovico Magnocavallo 16822e94ab
Refactor GKE module for Terraform 1.3 (#868)
* wip

* module and module tests

* doc examples

* gke-hub doc examples

* gke blueprints

* hub and spoke peering blueprint

* Rename some keys of some optional objects

* Fix readme

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-10 09:38:21 +02:00
Simone Ruffilli b5ee78c22d
Update ipprefix_by_netmask.sh (#866)
When code was moved from terraform template to separate file, "$$" (used to print $ on a tf template) was wrongly left behind.
2022-10-09 17:26:54 +02:00
Simone Ruffilli 67577ee80b
Update README.md 2022-10-09 15:41:56 +02:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 07249194dd Fix README 2022-10-06 15:52:09 +02:00
Julio Castillo 1955a61159 Make project shared vpc fields optional 2022-10-06 15:48:37 +02:00
Taneli Leppä b65beef20d
Merge branch 'master' into nginx-reverse-proxy-cluster 2022-10-04 15:39:09 +02:00
Taneli Leppä 4feb3514fd Added an example of a Nginx reverse proxy cluster using RMIGs. 2022-10-04 15:38:52 +02:00
Simone Ruffilli 201f6b1aab
Fixes NVA issue when health checks are not enabled (#853)
* Fixes NVA issue when health checks are not enabled

* Update cloud-config.yaml
2022-10-04 07:55:10 +02:00
Simone Ruffilli 5950797385
COS based simple networking appliance (#846) 2022-09-30 18:43:24 +02:00
Taneli Leppä 8072be5619 nginx-tls: only use hostname part for certificate as the FQDN might be too long (>64 chars). 2022-09-30 13:39:14 +02:00
ddaluka 9c2a53f7a9
Management of GCP project default service accounts (#844)
* Added change for default service account deprivilege setting

* Updated readme and variable name

* Updated readme and variable name
2022-09-29 15:10:07 +02:00
cmalpe 2e51bdd8c4 added root password support for MS SQL Server 2022-09-29 10:57:19 +00:00
Ludovico Magnocavallo 1842586241
Bjbloemker-google/master (#843)
* Add ability to add KMS encryption to google_compute_instance_template

* fix code block

Co-authored-by: BJ Bloemker <bjbloemker@google.com>
Co-authored-by: bjbloemker-google <109173391+bjbloemker-google@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-09-29 09:01:15 +02:00
Ludovico Magnocavallo fcf71b983e
refactor net-address modules for 1.3 (#840) 2022-09-28 14:10:05 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Krzysiek Mucha 6e90af2bc3
Add support for service_label property in internal load balancer (#834)
Co-authored-by: Krzysztof Mucha <kmuch@softserveinc.com>
2022-09-21 23:30:35 +02:00
Natalia Strelkova d6c6ae943e regional MySQL DBs - automatic backup conf 2022-09-21 08:14:24 +00:00
lcaggio bdb9086f19
Merge branch 'master' into lcaggio/artifact-jit 2022-09-20 11:06:08 +02:00
lcaggio 495a5bbfff Add Artifact registry Service Identity SA creation. 2022-09-20 10:36:12 +02:00
Arindam Sirohia eb73e13b67 Updated for each condition of binary authorization in gke-cluster module 2022-09-20 00:35:06 +05:30
Arindam Sirohia 489acfdb32 Added new binary_authorization argument in gke-cluster module 2022-09-20 00:09:59 +05:30
Julio Castillo 7a4298783a Removed old and unused modules 2022-09-15 16:50:11 +02:00
Julio Castillo 7e9173d35d Create fully recursive e2e test runner 2022-09-12 13:58:11 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Julio Castillo 67c031c41c Change `modules/project` service_config default 2022-09-09 09:23:09 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
Julio Castillo a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
lcaggio a253446406 First commit 2022-08-31 11:14:18 +02:00
Julio Castillo 0e65021802 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-30 20:06:47 +02:00
ddaluka 16e14fdb0a
Secret manager flag sensitive output (#786)
* Added sensitive output value

* Updated Readme

* updated readme
2022-08-29 13:22:52 +02:00
Taneli Leppä c798625868
net-glb: Added support for regional external HTTP(s) load balancing. (#775) 2022-08-27 22:58:11 +02:00
Roberto Jung Drebes 48fcfa8233
Merge branch 'master' into master 2022-08-24 16:23:03 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Roberto Jung Drebes 1bcfa51a40 fix doc 2022-08-24 14:41:27 +02:00
Roberto Jung Drebes a4752961db nginx-tls module 2022-08-24 14:37:53 +02:00
Roberto Jung Drebes 00f88730fe update compute-vm example 2022-08-24 12:14:10 +02:00
Roberto Jung Drebes 081e04fe2e fix envoy TD config for xDSv1.3 2022-08-24 10:44:05 +02:00
Roberto Jung Drebes 9597cabab7 fix service unit indent on cloud-config-container module 2022-08-23 21:12:09 +02:00
Natalia Strelkova ed68fb0179 typo fix (max_scale -> min_scale) 2022-08-23 15:43:07 +00:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo ff1563e078 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-11 12:04:35 +02:00
Alex Lo 307bda4fed
apigee-x-instance.ip_range cannot take Support CIDR (#727)
* Instance.ip_range cannot take Support CIDR

Current docs are incorrect. It is not possible to specify the Support range.

See https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.instances#Instance

> ipRange	
> string
> Optional. IP range represents the customer-provided CIDR block of length 22 that will be used for the Apigee instance creation. This optional range, if provided, should be freely available as part of larger named range the customer has allocated to the Service Networking peering. If this is not provided, Apigee will automatically request for any available /22 CIDR block from Service Networking. The customer should use this CIDR block for configuring their firewall needs to allow traffic from Apigee. Input format: "a.b.c.d/22", Output format: a.b.c.d/22, e.f.g.h/28"

* tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-08-11 09:55:39 +02:00
Ludovico Magnocavallo ea72c5bc29
Merge branch 'master' into fast/gke2 2022-08-10 17:18:49 +02:00
Ludovico Magnocavallo ed4d59a8b1
refactor cloud run module (#773) 2022-08-09 14:06:30 +02:00
Ludovico Magnocavallo 86d73ee686 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-09 14:04:46 +02:00
Alef Reis 97104c0098
Add support to a public access to cloudsql-instance (#754)
* feat: add support to a public access to cloudsql-instance

* doc: update cloudsql-instance doc changing the ipv4_enabled parameter description

* test: fix assertion test to ipv4_enabled
2022-08-09 13:42:42 +02:00
Ludovico Magnocavallo 7374c82dd6
Merge branch 'master' into fast/gke2 2022-08-06 08:57:53 +00:00
Ludovico Magnocavallo 086e4a2b2c
add egress / ingress policy example (#768) 2022-08-04 17:00:14 +02:00
Ludovico Magnocavallo 531acf3476 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-02 19:15:07 +02:00
Daniel Marzini 6314afb21e Fix gke-cluster enable_binary_authorization being deprecated 2022-08-02 18:26:53 +02:00
Miren Esnaola e6dbf9bf01 Shared vpc service fixes 2022-08-02 18:22:31 +02:00
Miren Esnaola 0920ac3877 Shared vpc service fixes 2022-08-02 18:21:08 +02:00
Ludovico Magnocavallo 45517045a2
Merge branch 'master' into fast/gke2 2022-07-30 13:53:48 +00:00
Ludovico Magnocavallo 3778d37d18
Fix gke hub module features condition (#761)
* fix features condition

* remove test output

* fix example tests

* fix module tests
2022-07-30 15:53:05 +02:00
Daniel Marzini e4de73febb Revert "fix mci integration in the gke-hub"
This reverts commit 171d0d1051.
2022-07-30 09:37:34 +02:00
Daniel Marzini 171d0d1051 fix mci integration in the gke-hub 2022-07-30 00:54:05 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
apichick 329b511ac3
Changed cluster id sensitivity (#756)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-25 16:13:04 +02:00
Ludovico Magnocavallo 92bd128287
remove key_algorithm from glb/ilb-l7 examples (#757) 2022-07-25 16:00:13 +02:00
apichick 4069e42b66
Merge branch 'master' into shared-vpc-host-dependency 2022-07-21 14:38:31 +02:00
Miren Esnaola f153ab4614 Added dependency on google_compute_shared_vpc_host_project.shared_vpc_host to project_id output and modified tests 2022-07-21 14:11:21 +02:00
Miren Esnaola 6275f1bafb Added gkehub.googleapis.com to jit services 2022-07-21 10:06:47 +02:00
Taneli Leppä 6f96f0af3c Fixed issue with missing project reference in Cloud DNS data source when creating a public zone. 2022-07-19 11:08:13 +02:00
Miren Esnaola 824353a42b Added servicemesh feature to GKE hub and included fleet robot service account in projectmodule 2022-07-15 17:58:39 +02:00
Seth Moon a8677ededc
Move Cloud Run VPC Connector annotations to template metadata (#735) (#737) 2022-07-13 21:06:28 +02:00
Julio Castillo 93acd595fe Merge branch 'master' into fast/gke2 2022-07-12 12:20:06 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo d9ea825ea5
add support for topic message duration (#732) 2022-07-12 09:23:23 +02:00
Ludovico Magnocavallo 1abfdacd56
Avoid setting empty IAM binding in subnet factory (#731)
* avoid setting empty IAM binding in subnet factory

* fix tests
2022-07-11 21:11:52 +02:00
Ludovico Magnocavallo 263cf96d81
fix #728 (#729) 2022-07-10 11:34:41 +02:00
Aleksandr Averbukh f3dd8692ba
Fix documentation for organization-policy module (#726) 2022-07-10 09:12:47 +02:00
Aleksandr Averbukh a1e34234ae Tf fmt for the org-policy module 2022-07-08 15:25:35 +02:00
Aleksandr Averbukh 9c942a68d6 More experimental definition to a separate file, so CICD does not rewrite it with default-versions.tf 2022-07-08 15:19:47 +02:00
Aleksandr Averbukh 9ec644d524 Mention of experimental feature in the readme file 2022-07-08 12:27:43 +02:00
Aleksandr Averbukh 63ac142005 Simplified module interface, proper data structure for policies 2022-07-08 12:24:18 +02:00
Aleksandr Averbukh e6d558e416 Add refs to the readme files. 2022-07-06 20:05:38 +02:00
Aleksandr Averbukh adac90d1bb Fix docs 2022-07-06 19:49:12 +02:00
Aleksandr Averbukh a34983b2e9 OrgPolicy module (factory) using new org-policy API, #698 2022-07-06 19:41:18 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
apichick ecee29820e
Merge branch 'master' into net_glb_ip_address 2022-07-01 18:59:28 +02:00
Ludovico Magnocavallo ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Abhishek Patil d224404424 when using managed prometheus or passing monitoring config there is error thrown as Error: googleapi: Error 400: Cannot specify logging_config or monitoring_config together with logging_service or monitoring_service., badRequest which is resolved using the fix 2022-06-29 14:54:05 +05:30
Ludovico Magnocavallo 5982fe89ff as developed with Julio 2022-06-28 17:33:54 +02:00
Julio Castillo cf76744f95 Fix addons for autopilot clusters, add tests for gke-cluster.
Fixes second part of #702
2022-06-28 12:24:17 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Julio Castillo b6f0c1ae2b Add `consumer_accept_list` to `apigee-x-instance`
Fixes #701
2022-06-27 10:01:31 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Miren Esnaola 0cf6f1d3eb Modified reserved IP address outputs 2022-06-22 13:14:28 +02:00
Ludovico Magnocavallo 3227bd13ce
Merge branch 'master' into binauthz 2022-06-18 08:54:16 +02:00
Miren Esnaola 2e9fdea1a4 Binary authorization module and example 2022-06-17 16:09:12 +02:00
Ludovico Magnocavallo 943d6d431e
Revert "Binary authorization module and example" (#686) 2022-06-17 12:32:42 +02:00
Julio Castillo 4c72ee701b
Merge branch 'master' into binauthz 2022-06-17 11:17:36 +02:00
Ludovico Magnocavallo ee23694fed revert service account modules changes to outputs 2022-06-16 23:09:35 +02:00
Ludovico Magnocavallo 6d8f3f7e22 depend service account outputs on iam roles 2022-06-16 22:16:20 +02:00
Ludovico Magnocavallo cbf008fed5
add support for secrets (#684) 2022-06-16 16:34:46 +02:00
Miren Esnaola 073196c56e Binary authorization module and example 2022-06-16 12:29:26 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Julio Castillo 110d94067d Squashing relevant changes from fast-dev-gke-marzi
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
Julio Castillo 9bcae7b180 Enable WIF issuer in gke-hub 2022-06-08 11:42:04 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Ludovico Magnocavallo 5e8b06fc85
Initial version of the Contributor's Guide (#666)
* fix IAM in examples

* WIP

* fix service identities IAM example

* design principles

* toc anchors

* fix ordering

* style guide

* checks

* example tests

* tests and tools

* fix project example test

* address typos

* address comments

* address last comments
2022-06-06 15:12:28 +02:00
psabhishekgoogle 668a8bb07c
Update outputs.tf
makimg changes in net-glb module and correcting the output ipaddress
2022-05-25 13:36:58 +05:30
Ludovico Magnocavallo 22d0506f4d
fix condition in subnet factory flow logs (#654) 2022-05-18 10:33:56 +02:00
Ludovico Magnocavallo e3ea387f0f
fix subnet schema (#651) 2022-05-09 11:53:57 +02:00
Ludovico Magnocavallo 31d87e722a
fix secondary range in yaml example
fixes #650
2022-05-09 11:23:54 +02:00
Ludovico Magnocavallo ff25809020
Fix tfdoc parsing on newllines in outputs (#649)
* fix

* use the right (ugly) Python formatter

* boilerplate on new file

* and do the actual tfdoc run on the original outputs file
2022-05-05 14:43:38 +02:00
Ludovico Magnocavallo fcfbcee136
Merge branch 'master' into sruffilli/spot-vm 2022-05-04 18:26:45 +02:00
Julio Castillo e6135bb323 Remove preemptible VMs in favor of spot VMs 2022-05-04 18:01:07 +02:00
Daniel Strebel f090c037f5
Merge branch 'master' into feature/add-apigee-service-attachment 2022-05-04 17:34:44 +02:00
Julio Castillo aee089dcd3 Add spot vm support to `gke-nodepool` 2022-05-04 10:05:31 +02:00
Simone Ruffilli 882c07cc19
Merge branch 'master' into sruffilli/spot-vm 2022-05-04 10:01:55 +02:00
Simone Ruffilli e84f90f9a2
Update variables.tf 2022-05-04 10:01:28 +02:00
Simone Ruffilli be54fe31d7 Adds Spot VM support to compute-vm 2022-05-04 09:48:31 +02:00
Julio Castillo 4e83b5003b
Merge branch 'master' into sql-multi-region 2022-05-03 17:46:18 +02:00
Daniel Strebel 1a53c16365 add service_attachment to Apigee instance outputs 2022-05-03 17:02:57 +02:00
flaprimo a1b66c2ba1
Add subscription filter support to PubSub module (#632)
* add subscription filters to pubsub module

* add tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-04-30 11:25:50 +02:00
next-davidduquehernandez 4cb814a0ae
Added 'gke_backup_agent_config' option to addons in gke-cluster (#642)
* Added 'gke_backup_agent_config' option to addons in gke-cluster

* Update README.md after launch tfdoc.py
2022-04-30 10:32:49 +02:00
Aleksandr Averbukh 189ee7ae1a Add shielded_instance_config support for compute instance template 2022-04-23 08:45:04 +02:00
Julio Castillo 2ddce7b8fa Fix gke-cluster permadiff when using dns_config 2022-04-20 11:36:53 +02:00
Ludovico Magnocavallo 4c615fed85
Merge branch 'master' into sql-multi-region 2022-04-20 09:01:47 +02:00
Ludovico Magnocavallo ab646f38ed
Bump provider versions to >= 4.17.0, terraform to >= 1.1.0 (#634)
* bump provider versions to >= 4.17.0, terraform to >= 1.1.0

* bump teraform version in lint check, edit CHANGELOG
2022-04-17 13:55:40 +02:00
lcaggio 47563fdab8
Merge branch 'master' into sql-multi-region 2022-04-15 09:26:57 +02:00
Ludovico Magnocavallo a34823e2d0
Add monitoring notification service identity to project module (#630)
* add monitoring notification service identity

* linting
2022-04-15 01:59:00 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 62a299a6f5 Deprecate subnets_l7ilb variable, add support for proxy_only and psc subnets. 2022-04-13 16:38:47 +02:00
Lorenzo Caggioni 24930ce397 Fix README, bye bye pippo :-) 2022-04-13 11:05:55 +02:00
Julio Castillo 952e18d0f1 Add sqladmin to project jit_si and fix some documentation 2022-04-13 11:05:55 +02:00
Lorenzo Caggioni a3f03ac213 Add KMS on CloudSQL module 2022-04-13 11:05:55 +02:00
Ludovico Magnocavallo 1cfb5dcaec Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo 19027e587e Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo 4944871ad0 Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo 045806cfa4 Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 10:42:13 +02:00
lcaggio 15cdd179c6
Merge branch 'master' into lcaggio/sql-kms 2022-04-13 09:12:48 +02:00
Ludovico Magnocavallo 420c4de437
Update README.md 2022-04-13 09:10:56 +02:00
Ludovico Magnocavallo 4e1d06fd75
Update README.md 2022-04-13 09:08:01 +02:00
Ludovico Magnocavallo 874e9a57c7
Update README.md 2022-04-13 09:06:18 +02:00
Ludovico Magnocavallo 53c9431c98
Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 09:05:28 +02:00
Lorenzo Caggioni b415d824c9 Fix README, bye bye pippo :-) 2022-04-13 08:59:14 +02:00
Julio Castillo 1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Julio Castillo c799dcd0bb Merge branch 'master' into sql-multi-region 2022-04-12 23:45:27 +02:00
Lorenzo Caggioni c7c77541fb Add KMS on CloudSQL module 2022-04-12 19:01:34 +02:00
Aleksandr Averbukh 6ab121a836 Add support for Private Service Connect and Reginal Managed Proxy subnets for net-vpc module 2022-04-12 12:57:33 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Lorenzo Caggioni 4cd6b1bf38 Merge branch 'master' into sql-multi-region 2022-04-11 16:02:13 +02:00
javiergp 86357c2ed5
CloudSQL-instance: Fixed terraform change detection when backup is disabled. (#615)
* Update variables.tf

When backup is not enabled, if location is set to a null value (i.e."EU"), each time you do `terraform apply` it will detect a configuration change (+ location  = "EU"). Setting this variable to null fixes the issue.

* Update README.md
2022-04-10 12:33:00 +02:00
Daniel Strebel 63097dd224 Allow multiple CIDR blocks in the ip_range parameter and rely on the Google API for validation 2022-04-07 15:08:24 +02:00
Luca Prete cd0f09b748
[#593] Add HTTP ILB module (net-ilb-l7) 2022-04-05 08:58:55 +02:00
Julio Castillo 166c9574a1 Multi-region Cloud-SQL example 2022-04-04 17:01:24 +02:00
Julio Castillo f1dd84389c
Merge branch 'master' into 597-fix-link-checker 2022-04-01 00:37:25 +02:00