Commit Graph

209 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 8040a4538c
clarify some admin bindings via comments (#663) 2022-06-05 19:48:26 +02:00
javiergp fa321fc67c
Update README.md (#667)
* Update README.md

Fixed VPC SC example

* Update README.md
2022-06-05 19:43:14 +02:00
frits-v 9feb938bed
Update README.md (#653) 2022-05-12 08:01:18 +02:00
Simone Ruffilli e9d06ba469 FAST: switch to SpotVM for NVAs 2022-05-04 09:59:47 +02:00
Ludovico Magnocavallo 1d7b442642
FAST - Refactor VPN tunnels (#644)
* tested

* tfdoc
2022-05-04 08:11:17 +02:00
Lorenzo Caggioni e487f8d731 Update naming convention 2022-04-21 23:53:16 +02:00
Alexander Meissner acd6719602
Adjusted Error Message of Supported Types 2022-04-19 11:10:21 +02:00
Alexander Meissner 7b30aa2c12
Added "gitlab" type to 01-resman Stage 2022-04-19 11:09:33 +02:00
Ludovico Magnocavallo 53fde432c4
Merge branch 'master' into alexmeissner/gitlab-template 2022-04-15 09:10:49 +02:00
Ludovico Magnocavallo 73a9136dc6
disable some org policies (#631) 2022-04-15 08:10:42 +02:00
Ludovico Magnocavallo 3b6de2531d tfdoc 2022-04-15 02:20:39 +02:00
Ludovico Magnocavallo 473178010a don't error out when no repositories are set 2022-04-15 02:19:46 +02:00
Alexander Meissner 74a919d203
Update variables.tf
Fixed formatting
2022-04-14 18:34:17 +02:00
alexmeissner 6df4fc1cff Added Gitlab CI Template
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 73db258a38 Use new variable subnets_proxy_only instead of subnets_l7ilb for fast 2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo eec0fd2fdf
FAST: allow changing tag names from variables in resman (#628) 2022-04-13 10:22:33 +02:00
Julio Castillo 2644627837 Remove broken link and ignore globals in fast stages 2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo 9bb2f91458
Fix a few import errors in FAST (#620)
* fix import errors in stage 0

* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Simone Ruffilli c889ce8426
Updated DNS documentation (#611) 2022-04-05 10:02:26 +02:00
Lorenzo Caggioni 6f00caaaab Handle Service Identity SA. Update IAM.md 2022-04-04 00:38:34 +02:00
Lorenzo Caggioni e008fde9bb Update READMEs and separate demo pipelines 2022-04-03 22:03:35 +02:00
lcaggio ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag 2022-04-01 19:19:17 +02:00
Lorenzo Caggioni 15ba9559c5 Update READMEs 2022-04-01 18:44:18 +02:00
Lorenzo Caggioni 6d1207e1d7 Update FAST data foundation integration 2022-04-01 18:38:56 +02:00
Julio Castillo 0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker 2022-03-30 12:23:13 +02:00
Elia 1bc9929c81
Update vpn-spoke-prod.tf (#602)
Fixed region ew4
2022-03-30 10:20:10 +02:00
Luca Prete 2bb9e3f64e [#597] Fix link_checker 2022-03-28 09:43:00 +02:00
Julio Castillo 03c871097c Remove moved blocks 2022-03-18 10:44:44 +01:00
Ludovico Magnocavallo 78664f3ba4 update fast net docs 2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo 01ee503c38 allow psa disabling in fast 2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo 22deb378a6 disable PSA in fast 2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Simone Ruffilli 6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. (#574)
* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Simone Ruffilli 2a4c3dc913
Update outputs.tf (#571) 2022-03-06 09:19:31 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Julio Castillo cdecc199a4
Update README.md 2022-02-28 14:19:00 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli 0d08c7d56a Re-aligning PF vars post varpocalypse 2022-02-27 19:04:47 +01:00
Simone Ruffilli 26df0468b6 Adds autohealing to NVA MIGs 2022-02-27 10:57:21 +01:00
Simone Ruffilli c21a59a490 FAST: use preemptable instances for demo NVA. Comment out test VMs. 2022-02-27 10:04:20 +01:00
Julio Castillo e157a52d97 Rename sample project in fast project factory 2022-02-25 16:56:13 +01:00
Julio Castillo 31bf9b98d1 Swap xpnAdmin with custom xpnServiceAdmin for service projects 2022-02-25 12:19:10 +01:00
Simone Ruffilli 0d5d43b061 linter fixes 2022-02-24 15:13:34 +01:00
Simone Ruffilli dc3a2ad7be Fix tests on stages 2022-02-24 15:05:18 +01:00
Simone Ruffilli c1390d3a6a FAST PF: delete placeholder 2022-02-24 12:21:44 +01:00
Simone Ruffilli 3bab8d3ab9 FAST: Data Platform README.md fixes 2022-02-24 12:17:49 +01:00