Commit Graph

630 Commits

Author SHA1 Message Date
Ludovico Magnocavallo c6310173a4
Update README.md 2022-02-01 19:01:08 +01:00
Ludovico Magnocavallo 9c9f13a81d
Update README.md 2022-02-01 19:00:47 +01:00
Ludovico Magnocavallo b0d32af600
Experimental module to derive DNS inbound policy addresses (#482)
* first version

* add README
2022-02-01 18:32:47 +01:00
Caio Tavares 666c5dd82e
feat: added missing addons gke (#481) 2022-02-01 07:23:00 +01:00
Simone Ruffilli abb6b50a46
Add periods at the end of each description field where missing (#478) 2022-01-31 10:45:34 +01:00
Julio Castillo e2abd772f2
Update resman modules (#475)
* Make logging sinks in different resources use the same API

* Split resman modules in multiple files. Add nullables where applicable
2022-01-29 19:35:33 +01:00
Julio Castillo eb0ab2c1ec Split organization module in files, add nullables 2022-01-29 10:55:47 +01:00
Ludovico Magnocavallo 9b5961f1c0
Net GLB module: add tfdoc to README, add file descriptions, fix markdown errors (#472)
* add tfdoc to README, add file descriptions, fix markdown errors

* remove broken link
2022-01-29 10:41:30 +01:00
Julio Castillo 3dd6e3fc0d Define nullable variables in SA module 2022-01-29 09:51:02 +01:00
Julio Castillo bb6674ea19 Split SA module in multiple files 2022-01-29 09:51:02 +01:00
Julio Castillo cf423998f0 Align tftest syntax with tdoc
This commit changes the token separator for inline examples from a
semicolon to a space
2022-01-28 21:34:15 +01:00
Ludovico Magnocavallo 1cc59a368d
Update README.md 2022-01-28 08:53:21 +01:00
apichick f3a7b8bc17
Removed unused key ingress_settings in function_config (#463)
Co-authored-by: apichick <apichick@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-28 08:45:32 +01:00
lcaggio 8203ebdc64
VPC-SC: Fix README (#462)
* fix VPC-SC README.

* fix VPC-SC README.

* Update README.md

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-28 08:44:07 +01:00
apichick 6dbb7fc6b2 removed boolean flag used to authorize the sink writer identity on the destination 2022-01-27 17:44:27 +01:00
Luca Prete 51cd70ce9a
[#459] net-glb: add serverless backend example 2022-01-25 14:42:48 +01:00
Luca Prete c30d29bf9b
[#455] net-glb: add support for null health_checks_config_defaults (#456) 2022-01-25 14:06:02 +01:00
Luca Prete f40d89776e [#457] Fix url map default service selection 2022-01-25 11:07:22 +01:00
Ludovico Magnocavallo 3717548c25 edit variable description so table does not overflow 2022-01-22 16:12:03 +01:00
Julio Castillo 31f625f149 Link vars and outputs from README 2022-01-22 14:15:16 +01:00
Ludovico Magnocavallo 9a533180a0
Refactor project module, support per-file tags in tfdoc (#450)
* add support for in-doc tfdoc options overrides

* clean up project module

* add file description tags

* only output module and resource columns in tfdoc file table if they exist

* update fast READMEs

* fix check docs
2022-01-22 11:34:18 +01:00
lcaggio a97c606253
Support service dependencies for crypto key bindings in project module (#443)
* Support services that require crypto/decrypt role on robot service accounts

* delete test and upload refactored implementation

* fix duplicate key on dependent services, add tests

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-22 08:32:13 +01:00
apichick 7bbe3d0b6d fixed README in iam-service-account module 2022-01-21 21:01:48 +01:00
Roberto Jung Drebes b99e33ce5b fix recreation of resources that depend on project_id on pre-existing projects when data source refresh is triggered 2022-01-21 17:16:20 +00:00
apichick 5ac828dd85 replaced firewall_policy_attachments with firewall_policy_association in example 2022-01-19 20:55:55 +01:00
Lorenzo Caggioni 27383fa0a2 Add missing Service Identity Accounts 2022-01-17 09:04:19 +01:00
Ludovico Magnocavallo 70d8d1f890 refactor and test apply/destroy on existing project 2022-01-14 16:53:15 +01:00
Julio Castillo 5cc6a62dec Remove unused variables, use regional resources, generate command as output 2022-01-14 16:53:15 +01:00
Luca Prete 4f79e12365
Rename net-xlb module to net-glb (#433) 2022-01-14 16:52:03 +01:00
Luca Prete ca82d5157a
GLB - Module tests and fixes (#431)
* GLB - Module tests and fixes

* Fixing linting

* Fix ssl cert id vs self_link

* Simplify syntax
2022-01-14 16:05:10 +01:00
Luca Prete 19565c5bad
[#411] XLB module - Initial commit (#416)
* [#411] XLB module - Initial commit

* formatting

* Refactoring and examples tests

* Update copyright to 2022

* Remove splat syntax from outputs

* Fix linting
2022-01-14 08:19:02 +01:00
Julio Castillo 2728c4aac1 Fix all internal links 2022-01-11 11:53:19 +01:00
Julio Castillo b2fe01c4fb Fix vpc subnet factory for yamls with different shapes. 2022-01-11 11:16:16 +01:00
Ludovico Magnocavallo 4b500c2366
add support for additive IAM roles to KMS (#417) 2022-01-10 16:35:02 +01:00
Ludovico Magnocavallo 682041b369 add versions to vpc-sc module 2022-01-05 08:55:05 +01:00
Ludovico Magnocavallo aff758b3a5 depend bridge from regular perimeters in vpc sc module 2022-01-05 03:14:30 +01:00
Ludovico Magnocavallo 79b7a6f40f disable device policy support in vpc-sc module 2022-01-04 16:22:15 +01:00
Ludovico Magnocavallo c17b23b665 fix ingress policies in vpc sc module 2022-01-04 16:01:03 +01:00
Ludovico Magnocavallo 91b40dc9c3
Interpolate access levels by key in vpc sc module (#414)
* interpolate access levels by key

* fix access level reference

* fix num resources in last README test
2022-01-04 13:02:38 +01:00
yuryninog a3da60bc71
Merge branch 'master' into yuryninog-patch-1 2022-01-03 10:47:27 -05:00
Ludovico Magnocavallo 347a4c6b69
remove lifecycle block from vpc sc perimeters (#412) 2022-01-03 15:27:00 +01:00
Simone Ruffilli ee25965c89
Copyright bump (#410) 2022-01-01 15:52:31 +01:00
Ludovico Magnocavallo b9f00bf259
fix cases where bridge perimeter status resources are null (#408) 2021-12-31 16:47:39 +01:00
Ludovico Magnocavallo ea2f92cfff
Update README.md 2021-12-31 15:14:33 +01:00
Ludovico Magnocavallo 2c7dab3bb2
New vpc-sc module implementation (#406)
* first implementation

* minimal output

* split service perimeters in regular and bridge

* tests and fixes

* new vpc-sc implementation

* remove providers file used for testing

* remove provider used during development
2021-12-31 13:29:22 +01:00
Julio Castillo d4adcaced0 Fix typo. 2021-12-31 13:20:21 +01:00
Julio Castillo f78902aee8 Update hierarchical firewall resource
This replaces all the `google_compute_organization_security_*`
resources with the newer `google_compute_firewall_*` resources.
2021-12-31 13:06:35 +01:00
Simone Ruffilli 640a5fe39c
Org/Folder: Allow for policy association when using rule factory (#405)
* Org/Folder: Allow for policy association when using rule factory

* Fix linting issue
2021-12-31 12:20:42 +01:00
Ludovico Magnocavallo 2bc5f7d33c
update tfdoc (#404) 2021-12-30 10:56:19 +01:00
Ludovico Magnocavallo 197e7cbe19
Fix ignore changes for hfw rules (#401)
* fix tfdoc replacement

* ignore changes to rule description

* add folder example, fixes #339

* fix ignore changes in org and folder module
2021-12-22 11:00:44 +01:00
Ludovico Magnocavallo e2f5b96f4a
Ludo hfw fixes (#400)
* fix tfdoc replacement

* ignore changes to rule description

* add folder example, fixes #339
2021-12-22 10:46:27 +01:00
Julio Castillo 0c21fecff8
Add metric scopes support (#397)
* Add metric scopes support

* Fix typo

* new tfdoc block in README

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-21 09:22:10 +01:00
Ludovico Magnocavallo 1ac3fe4460
New tfdoc version (#396)
* update tfdoc

* rewrite check docs, refactor tfdoc replace, regenerate modules READMEs

* remove dead code from check docs

* do not fail on missing variable files in check docs

* fix typos
2021-12-21 08:51:51 +01:00
Simone Ruffilli d2cbf800fc Fixes typo 2021-12-16 18:11:40 +01:00
Simone Ruffilli 794ca6cb6c Update outputs.tf 2021-12-16 18:11:40 +01:00
Simone Ruffilli eeaca4023d net-address: Added support for PSA ranges 2021-12-16 18:11:40 +01:00
sergiotejon 6a42929df3
Linux sysctls configuration and Kubelet config (#388)
* Linux sysctls configuration and Kubelet config

* Fix terraform linting issues

* Updated README.md

* Updated Kubelet config object type

* Update readme

Co-authored-by: Sergio Tejón <stejon@freepik.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2021-12-16 13:32:17 +01:00
averbukh c2b364a7ac Merge branch 'sa-upload-crt' of https://github.com/terraform-google-modules/cloud-foundation-fabric into sa-upload-crt 2021-12-15 18:26:53 +01:00
averbukh 39b7756958 Rewording, fix typos 2021-12-15 18:26:44 +01:00
Aleksandr Averbukh 9d54e5a073
Merge branch 'master' into sa-upload-crt 2021-12-15 18:22:04 +01:00
Julio Castillo a22169dcd2
Merge branch 'master' into yuryninog-patch-1 2021-12-15 15:27:26 +01:00
Stenio Ferreira 601ebd028e
Added support for Stateful Managed Instance Groups (#367)
* First iteration updates

* All tests passing

* Updated README and var descriptions

* Updated README

* Updated example README

* Consolidated stateful vars

* consolidated stateful vars

* Updated README

* Requested changes to try

* Fixed README examples and try

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-15 14:56:53 +01:00
Julio Castillo d2859a295f
Merge branch 'master' into yuryninog-patch-1 2021-12-15 11:46:46 +01:00
Aleksandr Averbukh aab78ece8b
Merge branch 'master' into sa-upload-crt 2021-12-13 22:50:13 +01:00
lcaggio 38b8ea1757
Fix VPC-SC module, add example (#387) 2021-12-13 11:26:09 +01:00
Ludovico Magnocavallo 174de3a087
Organization module refactor, in-module firewall policy factory for organization and folder (#385)
* move iam and logging to separate files, minimal refactoring

* update README

* fix example

* factory

* tfdoc

* boilerplate

* remove data_folder variable

* tfdoc

* fix default factory name

* add firewall policy to folder module

* add factory example
2021-12-13 08:41:02 +01:00
Yury Nino 63019316e1 Remove location from local.prefix 2021-12-12 16:15:21 -05:00
Ludovico Magnocavallo 3758c8f3b0
Improve PSN support in net-vpc module (#384)
* improve PSN support

* fix variable order

* fix example test

* fix cloudsql example
2021-12-09 17:26:37 +01:00
lcaggio 546385d3ee
Add support for partitioned tables on Organization sinks (#380)
* Add support for partioned tables on Organization sinks

* Update changelog

* Fix lint

* Fix lint

* Use simple bool instead of block

* fix README

* Fix Readme

* Rename variable

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-09 09:55:47 +01:00
Ludovico Magnocavallo cc63468176
Merge branch 'master' into sruffilli-net-vpc-firewall-minifactory 2021-12-07 19:26:58 +01:00
Ludovico Magnocavallo fcc8741cd2
refactor locals (#382) 2021-12-07 19:26:24 +01:00
Simone Ruffilli 8348504067 Fixed small bug on locals 2021-12-07 13:40:35 +01:00
Simone Ruffilli 5c8557a29d Paying tributes to the linting gods 2021-12-07 13:29:01 +01:00
Simone Ruffilli b1ff592990 net-vpc-firewall mini rules-factory 2021-12-07 13:26:21 +01:00
Simone Ruffilli a0f15931a5 Removed dead code 2021-12-07 10:08:41 +01:00
Simone Ruffilli 8a2ad25a45 Updated README.md. Added tests. 2021-12-07 09:35:24 +01:00
Simone Ruffilli 04cf75d446 Gracefully handle a null secondary_ip_range 2021-12-06 17:48:12 +01:00
Simone Ruffilli dfe1bad689 Adds support for IAM per-subnet IAM bindings via factory 2021-12-06 17:32:15 +01:00
Aleksandr Averbukh 4fd1ccb982 Update iam-sa docs 2021-12-06 17:30:56 +01:00
Aleksandr Averbukh 0e5fdda107 TF fmt 2021-12-06 17:23:53 +01:00
Aleksandr Averbukh 2d9c2fe774 Fix typo in the SA module readme 2021-12-06 17:09:48 +01:00
Aleksandr Averbukh 205975ff39 SA key uploading and credentials json generation with terraform. 2021-12-06 17:02:56 +01:00
Simone Ruffilli a2d5f6bfa7 Code cleanup 2021-12-06 16:46:46 +01:00
Simone Ruffilli ca03a8aea7 Update README.md 2021-12-06 16:44:33 +01:00
Simone Ruffilli 90718bf134 net-vpc module: added subnet mini-factory 2021-12-06 16:41:08 +01:00
Luca Prete 8e8f4d2117
[#374] Add taint when Windows node pools are created to match the one GKE implicitly adds 2021-12-03 14:15:51 +01:00
Ludovico Magnocavallo 7bf372305e
Update README.md 2021-12-02 08:50:30 +01:00
Ludovico Magnocavallo 357f6d5939 depend log sinks from IAM roles, fixes #371 2021-12-01 12:08:04 +01:00
caiotavaresdito c9870b44f1 defaulted to false and conditional output 2021-11-30 07:58:45 -05:00
caiotavaresdito fd4383540a removed extra lines 2021-11-30 07:50:53 -05:00
caiotavaresdito 5a9183d908 Updated variable default value 2021-11-29 23:09:36 -05:00
caiotavaresdito da296c8bfe Default creation false 2021-11-29 22:49:01 -05:00
caiotavaresdito 01e100719e Added GKE pubsub notifications 2021-11-29 22:39:44 -05:00
caiotavaresdito 40c66f9fa9 small var conditional fix 2021-11-29 22:35:07 -05:00
Daniel Strebel c484f052ec Adding Apigee Environments as output for apigee-organization module 2021-11-24 18:57:29 +01:00
Julio Castillo 7204a1ca39
Merge branch 'master' into cloud-function-vpc-connector-fix 2021-11-24 11:04:23 +01:00
caiotavaresdito 9d57c10f36 Fixed boolean variable condition 2021-11-18 14:12:13 -05:00
caiotavaresdito b09c24c736 Added dynamic block for dns_cache_config 2021-11-18 12:49:31 -05:00
apichick da0838d55a Fixed error with VPC connector. Count was referring to resource attributes that weren't known until after the configuration was applied 2021-11-17 17:36:17 +01:00
Julio Castillo 56bd8a6a21
Merge branch 'master' into jccb/bq-roles 2021-11-16 15:18:43 +01:00
caiotavaresdito 193b3f1097 added depends on topic iam binding 2021-11-14 07:21:35 -05:00
Andras Gyomrey d2ef4c3277 Allow using gVNIC in compute-vm (#211) 2021-11-08 11:18:15 +00:00
Julio Castillo 1a35ba3478 Allow custom and predefined roles in bq dataset access rules 2021-11-08 11:34:37 +01:00
Andras Gyomrey 4d278d62e4 Default for output_file_mode 2021-11-07 13:20:00 +00:00
Andras Gyomrey 1da5bde47b Support for consistent function bundles 2021-11-07 10:27:10 +00:00
Julio Castillo b062d73db5
Update README.md 2021-11-04 11:34:10 +01:00
Julio Castillo 798eac7e18
Update README.md 2021-11-04 11:33:51 +01:00
apichick e471d02810 updated doc 2021-11-04 00:23:44 +01:00
apichick bba8f6de5d added missing description 2021-11-04 00:22:14 +01:00
apichick 731688a782 parent 871dd3f5c0
author apichick <apichick@google.com> 1635979681 +0100
committer apichick <apichick@google.com> 1635980891 +0100

parent 871dd3f5c0
author apichick <apichick@google.com> 1635979681 +0100
committer apichick <apichick@google.com> 1635980849 +0100

update vpc connector variables and added options variable to containers

Updated iam variable description

Included tests for examples in README

Fixed linting
2021-11-04 00:09:28 +01:00
apichick 871dd3f5c0 Fixed linting 2021-11-03 23:50:07 +01:00
apichick e86f3e984b Added additional examples in README 2021-11-03 23:50:07 +01:00
apichick 8ab0f055da Fixed mistake with for_each in containers 2021-11-03 23:50:07 +01:00
apichick 9f8239746b Included tests for examples in README 2021-11-03 23:50:07 +01:00
apichick c2d1f245f2 Changed volume_mounts from list to map 2021-11-03 23:50:07 +01:00
apichick b5e1e7f3cf Updated iam variable description 2021-11-03 23:50:07 +01:00
apichick 7f5f5a460f Added cloud-run module 2021-11-03 23:50:07 +01:00
Ludovico Magnocavallo f6775aca1b
Use the same versions file everywhere, pin to tf 1.0+ provider 4.0+ (#355)
* add default versions file, remove old providers and versions

* use default versions file everywhere

* fix kms module

* re-add provider configuration for data platform step 2

* update kms module outputs sorting

* update kms documentation

* fix data solutions tests

* fix GKE workload identity attribute name

* work around firewall provider issue in datafusion example
2021-11-03 15:05:43 +01:00
Roberto Jung Drebes b96cebc3fa Fix SA IAM dynamic interpolation 2021-11-01 19:28:58 +01:00
Christopher Avila e42383eab9 update var to skip_delete per feedback 2021-11-01 11:33:24 -05:00
Christopher Avila 3663151465 format project variables 2021-11-01 11:22:30 -05:00
Christopher Avila 88c6af3dbb Add a project_skip_delete variable to optionally let the project stick around after the resources are destroyed. 2021-11-01 10:59:27 -05:00
Caio Tavares f74599a317
Added GCS notification support (#335)
* Added GCS notification support

* fixed notification output indices

* merged vars and added more conditional validation

* Terraform linting

* Added sa_email serviceAccount variable

* Fixed bool check and use try in notification var

* Fixed typo source path example block

* Fixed assert number tftest gcs example
2021-10-21 10:27:35 -04:00
Ludovico Magnocavallo 8894c40153
Merge branch 'master' into change-gke-metadata 2021-10-21 10:57:33 +02:00
Taneli Leppä ea553ec117 The node_metadata key is deprecated, switch to mode. Change your workload_metadata_config
from GKE_METADATA_SERVER to GKE_METADATA.
2021-10-21 10:44:41 +02:00
Taneli Leppä e1b79bc7f6 Added recurring maintenance window, dns config, L4ILB subsetting and monitoring/logging config to GKE cluster module. 2021-10-20 18:21:05 +02:00
Ludovico Magnocavallo e6c8fa2552 cloud-function 2021-10-19 21:10:43 +02:00
Ludovico Magnocavallo 923ba819d1 bigquery-dataset 2021-10-19 21:09:16 +02:00
Ludovico Magnocavallo 555de95f48 iam-service-account 2021-10-19 21:05:09 +02:00
caiotavaresdito 4e7a34cc5b Fixed typo README cloudsql-instance 2021-10-18 11:25:43 -04:00
caiotavaresdito 64fc4fcaf6 Fixed variable name typo 2021-10-18 10:55:37 -04:00
caiotavaresdito 9c9916744a removed backup_retention_settings var 2021-10-18 09:12:22 -04:00
caiotavaresdito dbfb5404a4 merged backup_retention_settings var 2021-10-18 09:11:24 -04:00
caiotavaresdito 7ea01e2c03 Updated doc to include backup_retention_settings 2021-10-18 09:11:24 -04:00
caiotavaresdito c26d457b55 Added additional backup settings 2021-10-18 09:11:24 -04:00
Ludovico Magnocavallo bf5e1e5b4a add l7ilb subnets to net-vpc module 2021-10-18 09:52:28 +02:00
Caio Tavares 6cb381334e
Added dynamic description of compute-vm (#328)
* Added dynamic description of compute-vm

* Re-ordered variables alphabetically
2021-10-16 16:23:11 +02:00
caiotavaresdito 75b5c91c28 Terraform linting 2021-10-15 13:39:30 -04:00
caiotavaresdito 910567ce5c removed default labels and let user pass values in 2021-10-15 13:38:23 -04:00
caiotavaresdito 06d0085edd removed name of bucket from label field 2021-10-15 13:35:40 -04:00
Ludovico Magnocavallo c8dba7f10e
Merge branch 'master' into sruffilli/factories 2021-10-15 09:33:54 +02:00
Ludovico Magnocavallo f5353d2d2c Merge branch 'master' of github.com:terraform-google-modules/cloud-foundation-fabric 2021-10-14 20:15:41 +02:00
Ludovico Magnocavallo dcb1e32097 update test params after README fix 2021-10-14 20:15:31 +02:00
Caio Tavares 7dad4496b4
Feature/added gcs website (#325)
* Added GCS website block support

* Terraform linting

* Moved variable to last and re-generated README
2021-10-14 20:11:26 +02:00
Simone Ruffilli 36fb785ea9 Resource factories 2021-10-14 17:00:04 +02:00
Ludovico Magnocavallo ead0593da4
Update README.md 2021-10-12 10:45:14 +02:00
Ludovico Magnocavallo 0f22bce9e2
Update README.md 2021-10-12 09:40:10 +02:00
Julio Castillo 1d13e3e624 Add more validations to linter
- Ensure all variables and outputs are sorted
- Ensure all variables and outputs have a description
- Add data-solutions/data-platform-foundations to linter

Fix all modules to follow these new conventions.
2021-10-08 18:26:04 +02:00
Julio Castillo 89525bed95 Add Cloud SQL module to READMEs 2021-10-07 21:52:22 +02:00
Julio Castillo cd4917f2f2 README and test fixes 2021-10-07 21:50:16 +02:00