Commit Graph

648 Commits

Author SHA1 Message Date
Julio Castillo c3e6a03eaa Allow fleet project to be specified by the user 2022-08-25 14:24:39 +02:00
Julio Castillo fa8990dc76 gke stage docs 2022-08-24 16:43:48 +02:00
Julio Castillo 909739039b Fix internal links 2022-08-24 15:53:55 +02:00
Julio Castillo d345cf8223 Update gke multitenant README 2022-08-24 15:40:42 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Stefan Tomm 5b7f6ab91a
fix data-platform-dev folder in stage 03-data-platform (#774) 2022-08-16 09:36:24 +02:00
Ludovico Magnocavallo a285569998 Merge branch 'fast/gke2' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/gke2 2022-08-12 11:25:26 +02:00
Ludovico Magnocavallo 95b12ac2f7 rename example folder 2022-08-12 11:24:46 +02:00
Ludovico Magnocavallo 5762d5925d rename example folder, add diagram 2022-08-12 11:24:21 +02:00
Daniel Marzini 00e8666063 TODO: adjust external load balancer policy 2022-08-11 17:04:45 +02:00
Ludovico Magnocavallo ac575119c6 wip 2022-08-10 15:59:56 +02:00
Ludovico Magnocavallo c2b0782c18 wip
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
2022-08-10 15:59:51 +02:00
Ludovico Magnocavallo af336f82fe move gke fat module to examples 2022-08-10 15:37:20 +02:00
Ludovico Magnocavallo a16cf9e2a8 documentation WIP 2022-08-08 13:54:06 +02:00
Daniel Marzini 6af9953a49 Update README.md
README WIP
2022-08-08 11:04:46 +02:00
Ludovico Magnocavallo dcc2700008
Merge branch 'master' into fast/gke2 2022-08-07 07:43:16 +00:00
Daisuke b953424aec
fixing to move without output_location (#770) 2022-08-07 09:00:27 +02:00
Ludovico Magnocavallo 34d5156eeb top-level README 2022-08-06 11:07:22 +02:00
Ludovico Magnocavallo 3745b2885e remove support for preemptible nodes 2022-08-06 11:00:46 +02:00
Ludovico Magnocavallo 0bec03b0a0 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-03 20:42:09 +02:00
Ludovico Magnocavallo bfefaf627e
refactor teams, fix #750 (#766) 2022-08-03 16:34:09 +02:00
Ludovico Magnocavallo 9b6262de41
FAST: move region trigrams to a variable in network stages (#765)
* add region trigram variable

* debug check documentation

* fix linting
2022-08-03 11:36:27 +02:00
Daniel Marzini b85b5e265a added spot vm 2022-08-02 21:41:47 +02:00
Daniel Marzini 1cf963b443 added spot vm 2022-08-02 21:41:36 +02:00
Ludovico Magnocavallo ce7e4bc59c linting 2022-08-02 19:12:52 +02:00
Daniel Marzini 170d585473 fix permissions and binauthz 2022-08-02 18:28:06 +02:00
Daniel Marzini 45723233c8 fix permissions and binauthz 2022-08-02 18:27:44 +02:00
Ludovico Magnocavallo dedddbed20 align net stages 2022-07-31 15:13:39 +02:00
Ludovico Magnocavallo cd3b4463de align net stages 2022-07-31 15:00:09 +02:00
Ludovico Magnocavallo 9b371a3d2c support GKE specific network roles in stages 01 and 02 2022-07-31 14:54:14 +02:00
Ludovico Magnocavallo 24f3545de7 add project-level iam variable 2022-07-30 16:05:39 +02:00
Ludovico Magnocavallo f51e40b60a tfdoc 2022-07-30 16:00:10 +02:00
Ludovico Magnocavallo c51ba73e38 change to binary_authorization, add support for additional services 2022-07-30 15:59:45 +02:00
Daniel Marzini c9fa0fbd55 fixes 2022-07-29 23:45:15 +02:00
Ludovico Magnocavallo f00b67ae88 linting 2022-07-29 15:11:36 +02:00
Ludovico Magnocavallo 7c23aeae58 implement dev, fix variables, add stub READMEs 2022-07-29 15:09:57 +02:00
Ludovico Magnocavallo c24e661383 fleet mcs service accounts 2022-07-29 14:01:35 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo 1260db923e
Update main.tf 2022-07-29 10:49:50 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
Agustin Ramirez 7f1a523866
FIX: Missing value to format principalSet (#759) 2022-07-27 08:18:27 +02:00
Ludovico Magnocavallo 5e0ab57f3a
Add support for IAM bindings on service accounts to project factory (#753)
* Fix #748

* fix linting

* remove trailing whitespace

* update FAST pf
2022-07-21 15:13:39 +02:00
agusramirez@google.com 5f20c11b57 FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:20:56 -05:00
Agustin Ramirez ee0b6d6b2a
FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:07:05 -05:00
Simone Ruffilli ef27d2e9d1
Use spot VMs for test VM and for NVAs (#734) 2022-07-13 13:57:03 +02:00
Julio Castillo 07c5da4283 Fix tests 2022-07-12 12:39:00 +02:00
Julio Castillo 1bc352bb7b Fix docs 2022-07-12 12:19:05 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Julio Castillo e7bc11e6b9 Add gke SAs to outputs 2022-07-12 12:10:39 +02:00
Ludovico Magnocavallo f42b0f06e4
add billing IAM for billing group (#730) 2022-07-11 08:26:13 +02:00
Simone Ruffilli 0d9fac316a
FAST: Resman: Update billing.tf (#721)
* FAST: Resman: Update billing.tf

Add billing.costsManager to the PF SAs to allow it to create billing alerts.

* fix linting

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-06 16:10:14 +03:00
Michael Gfeller ea7827d1ad FAST - added missing format argument in branch-pf-dev-sa-cicd
In the module branch-pf-dev-sa-cicd, the calls to the "format" function were missing the argument var.automation.federated_identity_pool.
2022-07-05 11:44:33 +02:00
Ludovico Magnocavallo 8585852ae6
fix #714 (#715) 2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
Ludovico Magnocavallo 9a3128e716 wip 2022-06-30 20:20:14 +02:00
Ludovico Magnocavallo 7b5ced7e15 stage 01 2022-06-30 18:22:57 +02:00
Ludovico Magnocavallo 7786dd3d90
Merge branch 'master' into fast/gke2 2022-06-30 11:30:52 +02:00
Ludovico Magnocavallo d6a81fb662 wip 2022-06-30 11:00:57 +02:00
Ludovico Magnocavallo ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Michael Gfeller c66bb0e1c3 Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into mgfeller/fast-readme-tfvars-auto 2022-06-29 15:29:43 +02:00
Ludovico Magnocavallo 66c4fffd76
FAST: configuration switches for features (#703)
* example implementation of top-level switches

* data platform as a fast feature

* decouple teams and project factory

* teams disable fixes

* optional pf

* networking stage

* remove var from stage 2s, security
2022-06-28 17:33:37 +02:00
Julio Castillo 2da28e5954
Update CLEANUP.md 2022-06-28 11:28:57 +02:00
Michael Gfeller 34650ae621 FAST - updated some READMEs about usage of *.auto.tfvars files
Updated information about using the auto generated tfvars files in the "Variable configuration" section for some stages.
Mainly about using globals.auto.tfvars.json instead of copying terraform.tfvars from bootstrap stage.
2022-06-28 11:27:21 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Michael Gfeller df9bdc2fb0
FAST - trigger GitHub workflow also on PR synchronize event (#702)
Add synchronize to the pull_request trigger so that the workflow is also run when the source branch is updated.
2022-06-27 10:13:41 +02:00
Ludovico Magnocavallo dfb447a2c4
Merge branch 'master' into fast/gke2 2022-06-23 13:50:28 +02:00
Ludovico Magnocavallo ed4b301a17 align subnets between vpn and peering network stages 2022-06-23 09:05:20 +02:00
Ludovico Magnocavallo fb1d31551f fix tfdoc 2022-06-23 08:55:28 +02:00
Ludovico Magnocavallo 744417f22f fix boilerplate 2022-06-23 08:52:36 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Ludovico Magnocavallo f9775f61c9
Merge branch 'master' into lcaggio/data-p-200622 2022-06-23 08:11:47 +02:00
Ludovico Magnocavallo c59ce76e97
Add repository_owner to GitHub identity attributes (#699)
* add repository_owner to GitHub identity attributes

* fix errors on null identity provider custom settings
2022-06-23 08:06:25 +02:00
Lorenzo Caggioni b10d091a98 Fix README 2022-06-23 07:16:59 +02:00
Lorenzo Caggioni ceb611bb81 Remove custom role and rely on conditions. 2022-06-23 07:04:35 +02:00
lcaggio 5c653638bc
Merge branch 'master' into lcaggio/data-p-200622 2022-06-22 16:13:28 +02:00
Taneli Leppä c3fdc62ff2 Allow creating repositories in Gitlab via Terraform. 2022-06-21 15:12:03 +02:00
lcaggio d9ad654281
Merge branch 'master' into lcaggio/fix-readme-20220620 2022-06-21 07:54:42 +02:00
Alexander Meissner 9691577638
Fast/group creation gif (#676)
* Updated Readme with Group creation GIF

Added visual representation of checklist group creation.

* Update README.md

Added v1 version of group creation GIF.

* localize gif

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-06-21 07:19:52 +02:00
Lorenzo Caggioni 2ce4b002f1 Rename role 2022-06-20 22:23:18 +02:00
Lorenzo Caggioni 7625773dea Fix tests 2022-06-20 22:05:22 +02:00
Lorenzo Caggioni 0b6f98db78 Add output logic 2022-06-20 17:48:39 +02:00
Lorenzo Caggioni 6edc80e282 Update READMEs 2022-06-20 17:27:28 +02:00
Lorenzo Caggioni c464a3c8cc Improve KMS: add custom role to handle keys 2022-06-20 17:13:25 +02:00
Lorenzo Caggioni a1c61f089d Add location support 2022-06-20 15:21:03 +02:00
Lorenzo Caggioni d4eef71887 Fix links 2022-06-20 09:52:46 +02:00
Lorenzo Caggioni 26d8f0cf65 Fix stage-02 tfvars links 2022-06-20 09:11:09 +02:00
temiloluwa ademuwagun 4492b0cff7 corrected the wrong name reference 2022-06-17 10:36:19 +00:00
Antonio Lopez aaa2bf2aca
Merge branch 'master' into master 2022-06-17 09:57:58 +02:00
Ludovico Magnocavallo a09eb39a96 disable provider data source when not needed, explicitly depend on CI/CD SAs 2022-06-16 23:11:08 +02:00
Ludovico Magnocavallo a35ed1ca0f allow using cicd service accounts in build triggers 2022-06-16 22:16:43 +02:00
Ludovico Magnocavallo da17d57863 fix tfdoc 2022-06-16 21:59:44 +02:00
Ludovico Magnocavallo 2b61efb722 add project number to sgae 1 values 2022-06-16 21:57:09 +02:00
Ludovico Magnocavallo c87c645bf0 add missing try to stage 1 outputs 2022-06-16 21:56:48 +02:00
Ludovico Magnocavallo f163bad220 add automation project number to stage 0 outputs 2022-06-16 21:56:18 +02:00
agusramirez@google.com e3d91e84e4 sourcerepo and cloudbuild at 01-resman 2022-06-15 21:34:26 -05:00
agusramirez@google.com 2eb996d33d sourcerepo and cloudbuild at 01-resman 2022-06-15 19:12:11 -05:00
ajlopezn c91ec944f9 solved another link issue 2022-06-10 18:34:00 +02:00
Antonio Lopez 1a2bdcf6b7
Merge branch 'GoogleCloudPlatform:master' into master 2022-06-10 18:23:16 +02:00
ajlopezn 822e4b987a solved links issue 2022-06-10 18:21:44 +02:00
ajlopezn 4658e5faa7 added variables required to be modified before applying again 2022-06-10 17:29:04 +02:00
ajlopezn 8da7fbd351 cleanup reference in readme 2022-06-10 17:16:11 +02:00
ajlopezn a37af01203 fichero movido a fast/stages 2022-06-10 16:57:40 +02:00
ajlopezn 1dbd13fc4b fichero movido a fast/stages 2022-06-10 16:47:24 +02:00
Antonio Lopez a1a5011cd1
Update CLEANUP.md
link to gcloud beta compute shared-vpc associated-projects remove doc
2022-06-10 16:41:10 +02:00
Antonio Lopez 77f3048a8c
Update CLEANUP.md
include comments in PR
2022-06-10 16:34:46 +02:00
Antonio Lopez a262ed3941
Update CLEANUP.md 2022-06-10 16:20:29 +02:00
Antonio Lopez 21cfb69797
Update CLEANUP.md
delete spaces in headers
2022-06-10 16:03:10 +02:00
Julio Castillo 29ce5f666d Simplify log_sink local 2022-06-10 12:25:26 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Ludovico Magnocavallo f75c0021a1
fix #673 (#674) 2022-06-10 10:51:26 +02:00
Ludovico Magnocavallo bb3f55fe9e
Fix Gitlab WIF attributes (#671) 2022-06-09 08:31:50 +02:00
Julio Castillo f9b808b4bc Fix permissions and update NVA and peering net stages for gke 2022-06-08 11:42:04 +02:00
Daniel Marzini 259afec97d Leave MCS and MCI disabled 2022-06-08 11:42:04 +02:00
Julio Castillo 110d94067d Squashing relevant changes from fast-dev-gke-marzi
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
Julio Castillo d28dfc40b0 Enable GKE hub apis 2022-06-08 11:42:04 +02:00
Julio Castillo 66f87903a8 Enable GKE resource metering 2022-06-08 11:42:04 +02:00
Julio Castillo 9fabfafc63 Update gke stage to use contract setup 2022-06-08 11:42:02 +02:00
Julio Castillo a4c0b22f4e Move GKE example to dev 2022-06-08 11:41:52 +02:00
Julio Castillo 46af8fa72e Use new project-level robot bindings 2022-06-08 11:41:52 +02:00
Daniel Marzini 5ff2286378 clusters creation improvement (#509)
* shared_vpc_self_link variable from stage2

* removing shared_vpc_self_link

* do not initial_node_count as node_count
2022-06-08 11:41:52 +02:00
Julio Castillo 740288ea94 Remove old test project 2022-06-08 11:41:52 +02:00
Julio Castillo 801a5ed42d Add xpn admin to gke SAs on gke folders 2022-06-08 11:41:52 +02:00
Julio Castillo f3f9a4a88c GKE multitenant
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Antonio Lopez 78becc22fa
Merge branch 'GoogleCloudPlatform:master' into master 2022-06-07 10:22:55 +02:00
Ludovico Magnocavallo 8040a4538c
clarify some admin bindings via comments (#663) 2022-06-05 19:48:26 +02:00
javiergp fa321fc67c
Update README.md (#667)
* Update README.md

Fixed VPC SC example

* Update README.md
2022-06-05 19:43:14 +02:00
Antonio Lopez 02f8986a1e
Update CLEANUP.md 2022-06-03 13:38:05 +02:00
Antonio Lopez 2ace596ca8
Update CLEANUP.md 2022-06-03 13:22:49 +02:00
Antonio Lopez 5701348d3d
Update CLEANUP.md 2022-06-03 13:21:30 +02:00
Antonio Lopez d7fd11b5fd
Update CLEANUP.md 2022-06-03 13:15:18 +02:00
Antonio Lopez 8d4ea4ec67
Update CLEANUP.md 2022-06-03 13:06:46 +02:00
Antonio Lopez 443a9b9538
Create CLEANUP.md
instructions to clean up FAST deployment
2022-06-03 13:02:42 +02:00
frits-v 9feb938bed
Update README.md (#653) 2022-05-12 08:01:18 +02:00
Ludovico Magnocavallo e3ea387f0f
fix subnet schema (#651) 2022-05-09 11:53:57 +02:00
Simone Ruffilli e9d06ba469 FAST: switch to SpotVM for NVAs 2022-05-04 09:59:47 +02:00
Ludovico Magnocavallo 1d7b442642
FAST - Refactor VPN tunnels (#644)
* tested

* tfdoc
2022-05-04 08:11:17 +02:00
Lorenzo Caggioni e487f8d731 Update naming convention 2022-04-21 23:53:16 +02:00
Alexander Meissner acd6719602
Adjusted Error Message of Supported Types 2022-04-19 11:10:21 +02:00
Alexander Meissner 7b30aa2c12
Added "gitlab" type to 01-resman Stage 2022-04-19 11:09:33 +02:00
Ludovico Magnocavallo 53fde432c4
Merge branch 'master' into alexmeissner/gitlab-template 2022-04-15 09:10:49 +02:00
Ludovico Magnocavallo 73a9136dc6
disable some org policies (#631) 2022-04-15 08:10:42 +02:00
Ludovico Magnocavallo 3b6de2531d tfdoc 2022-04-15 02:20:39 +02:00
Ludovico Magnocavallo 473178010a don't error out when no repositories are set 2022-04-15 02:19:46 +02:00
Alexander Meissner 74a919d203
Update variables.tf
Fixed formatting
2022-04-14 18:34:17 +02:00
alexmeissner 6df4fc1cff Added Gitlab CI Template
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 73db258a38 Use new variable subnets_proxy_only instead of subnets_l7ilb for fast 2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo eec0fd2fdf
FAST: allow changing tag names from variables in resman (#628) 2022-04-13 10:22:33 +02:00
Julio Castillo 2644627837 Remove broken link and ignore globals in fast stages 2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo 9bb2f91458
Fix a few import errors in FAST (#620)
* fix import errors in stage 0

* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Simone Ruffilli c889ce8426
Updated DNS documentation (#611) 2022-04-05 10:02:26 +02:00
Lorenzo Caggioni 6f00caaaab Handle Service Identity SA. Update IAM.md 2022-04-04 00:38:34 +02:00
Lorenzo Caggioni e008fde9bb Update READMEs and separate demo pipelines 2022-04-03 22:03:35 +02:00
lcaggio ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag 2022-04-01 19:19:17 +02:00
Lorenzo Caggioni 15ba9559c5 Update READMEs 2022-04-01 18:44:18 +02:00
Lorenzo Caggioni 6d1207e1d7 Update FAST data foundation integration 2022-04-01 18:38:56 +02:00
Julio Castillo 0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker 2022-03-30 12:23:13 +02:00
Elia 1bc9929c81
Update vpn-spoke-prod.tf (#602)
Fixed region ew4
2022-03-30 10:20:10 +02:00
Luca Prete 2bb9e3f64e [#597] Fix link_checker 2022-03-28 09:43:00 +02:00
Julio Castillo 03c871097c Remove moved blocks 2022-03-18 10:44:44 +01:00
Ludovico Magnocavallo 78664f3ba4 update fast net docs 2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo 01ee503c38 allow psa disabling in fast 2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo 22deb378a6 disable PSA in fast 2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Simone Ruffilli 6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. (#574)
* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Simone Ruffilli 2a4c3dc913
Update outputs.tf (#571) 2022-03-06 09:19:31 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Julio Castillo cdecc199a4
Update README.md 2022-02-28 14:19:00 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli 0d08c7d56a Re-aligning PF vars post varpocalypse 2022-02-27 19:04:47 +01:00
Simone Ruffilli 26df0468b6 Adds autohealing to NVA MIGs 2022-02-27 10:57:21 +01:00
Simone Ruffilli c21a59a490 FAST: use preemptable instances for demo NVA. Comment out test VMs. 2022-02-27 10:04:20 +01:00
Julio Castillo e157a52d97 Rename sample project in fast project factory 2022-02-25 16:56:13 +01:00
Julio Castillo 31bf9b98d1 Swap xpnAdmin with custom xpnServiceAdmin for service projects 2022-02-25 12:19:10 +01:00
Simone Ruffilli 0d5d43b061 linter fixes 2022-02-24 15:13:34 +01:00
Simone Ruffilli dc3a2ad7be Fix tests on stages 2022-02-24 15:05:18 +01:00
Simone Ruffilli c1390d3a6a FAST PF: delete placeholder 2022-02-24 12:21:44 +01:00
Simone Ruffilli 3bab8d3ab9 FAST: Data Platform README.md fixes 2022-02-24 12:17:49 +01:00
Simone Ruffilli 62ae1cb7a1 FAST: Project Factory README.md fixes 2022-02-24 12:15:12 +01:00
Simone Ruffilli fb039d1bb7 FAST: Security README.md fixes 2022-02-24 12:10:36 +01:00
Simone Ruffilli d3d29836b8 FAST: Networking NVA stage fix 2022-02-24 12:01:54 +01:00
Simone Ruffilli 7ca1e6af5a FAST: Networking README.md fixes 2022-02-24 11:48:56 +01:00
Simone Ruffilli 1af71244f3 FAST: Resman README.md fixes 2022-02-24 11:28:13 +01:00
Simone Ruffilli ab4a8eb78a FAST: README.md fixes 2022-02-24 11:21:06 +01:00
Ludovico Magnocavallo c4b2f85a3b README tweaks 2022-02-21 20:41:40 +01:00
Ludovico Magnocavallo c74ea67987 minimal README tweaks 2022-02-21 14:52:25 +01:00
Ludovico Magnocavallo 7d8299b837 fix tag environment binding names in fast 2022-02-21 13:28:36 +01:00
Ludovico Magnocavallo 474bcbdd0e
Use tags and tag-based IAM conditions in FAST (#553)
* organization module

* folder module

* project module

* fix project binding

* environment tags

* use id instead of name for references

* environment bindings

* conditional org policy admin binding via tags

* rename pf service accounts and buckets

* update IAM docs

* kms module

* compute-vm

* fix compute-vm

* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo 4cb46fa19d
Update README.md 2022-02-19 08:28:35 +01:00
Ludovico Magnocavallo 98056b4457
Update README.md 2022-02-19 08:27:32 +01:00
Ludovico Magnocavallo f258ff1998 fw rules 2022-02-19 07:59:30 +01:00
Lorenzo Caggioni 29e839e3a6 Fix 2022-02-18 22:20:32 +01:00
Lorenzo Caggioni 55c78a132f Add network tag. Add KMS support in the DAG example. 2022-02-18 22:09:48 +01:00
Ludovico Magnocavallo fb5d1adf9e composer working 2022-02-18 19:17:58 +01:00
Ludovico Magnocavallo cde75d051c tfdoc 2022-02-18 14:52:43 +01:00
Ludovico Magnocavallo a9f8422f8b conform to FAST project naming 2022-02-18 14:40:08 +01:00
Ludovico Magnocavallo 235e22ee9f use different IP CIDR ranges for composer 2022-02-18 14:39:54 +01:00
Ludovico Magnocavallo b9804d895b re-add org policy admin role 2022-02-18 14:39:33 +01:00
Ludovico Magnocavallo f84c47d6f4 Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform 2022-02-18 10:04:24 +01:00
lcaggio f85b327a5a
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-18 08:58:21 +01:00
Lorenzo Caggioni 1429a4dde3 Update README: KMS optional, VPC-SC 2022-02-18 08:53:51 +01:00
Ludovico Magnocavallo 3a4d257f2e tfdoc 2022-02-18 08:42:23 +01:00
Ludovico Magnocavallo 21a901c1dc assign net delegated grants by env 2022-02-18 08:38:36 +01:00
Ludovico Magnocavallo b147a4cc44 use all service accounts from stage1 in networking delegated grants 2022-02-18 08:21:25 +01:00
Ludovico Magnocavallo a02179422d Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform 2022-02-18 07:56:27 +01:00
Ludovico Magnocavallo 48088dedc0 tfdoc 2022-02-18 07:56:11 +01:00
Ludovico Magnocavallo 4eca2ac11d
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-18 06:45:05 +00:00
Ludovico Magnocavallo 6f3aa4920a re-remove policy admin role from dp SAs 2022-02-18 07:29:24 +01:00
Lorenzo Caggioni ed844cdedf Add tests 2022-02-18 00:58:14 +01:00
Lorenzo Caggioni 04f054478d Fix poliscy admin role 2022-02-18 00:34:51 +01:00
Simone Ruffilli 8e48fdaf54
FAST: Net: remove landing from its metric_scope (#551)
* Update landing.tf
2022-02-17 18:13:40 +01:00
Julio Castillo 73c2233b9b Small fixes to DP 2022-02-16 18:52:17 +01:00
Ludovico Magnocavallo c63ddb96f9 resman tfdoc 2022-02-16 14:15:58 +01:00
Ludovico Magnocavallo 3da4eedbd9 remove extra outputs 2022-02-16 14:14:41 +01:00
Ludovico Magnocavallo c24abed18d tfdoc networking 2022-02-16 14:13:18 +01:00
Ludovico Magnocavallo c5fa5d62e4 fix remaining issues, align variables 2022-02-16 14:12:39 +01:00
Ludovico Magnocavallo 0c9e2a5767 align network-nva with network-vpn 2022-02-16 13:35:29 +01:00
Ludovico Magnocavallo 36a5eade36 remove dp service accounts variable 2022-02-16 13:03:33 +01:00
Ludovico Magnocavallo 08770babdb fix subnet ranges 2022-02-16 13:01:10 +01:00
Ludovico Magnocavallo d5d0554972 remove redundant firewall rules and subnets 2022-02-16 12:54:49 +01:00
Ludovico Magnocavallo 728f6485ae remove unneeded permissions in resman 2022-02-16 12:51:12 +01:00
Ludovico Magnocavallo 9c736ea337
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-16 11:47:41 +00:00
Julio Castillo dda86119f9
Fix typo 2022-02-16 11:33:43 +01:00
Julio Castillo 49f36157d5 Fix typo in stage1 outputs 2022-02-16 10:57:54 +01:00
Ludovico Magnocavallo 4b73cc4de6 tfdoc, stages README 2022-02-16 10:14:51 +01:00
lcaggio 8e8378fb28
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-16 09:56:42 +01:00
Julio Castillo 0544456462 Use local for tfvar outputs 2022-02-16 09:07:07 +01:00
Ludovico Magnocavallo 9015abfc80 stage 01 docs 2022-02-16 08:57:45 +01:00
Ludovico Magnocavallo 41a848e501 stage 00 doc 2022-02-16 08:52:19 +01:00
Ludovico Magnocavallo 748aaa1b3f tfdoc 2022-02-16 08:23:34 +01:00
Ludovico Magnocavallo 74d56700f5 03-project-factory 2022-02-16 08:20:32 +01:00
Ludovico Magnocavallo c0f73cb3be replace : with - in output keys 2022-02-16 08:20:22 +01:00
Ludovico Magnocavallo 442e647caf 02-networking-nva 2022-02-16 08:07:58 +01:00
Ludovico Magnocavallo 9c9312c4b8 tfdoc 2022-02-16 07:53:41 +01:00
Ludovico Magnocavallo 5c46d351d5 02-networking-vpn 2022-02-16 07:52:20 +01:00
Lorenzo Caggioni c3a6ebee20 Fix roles 2022-02-16 06:55:45 +01:00
Ludovico Magnocavallo ca186054df 02-security 2022-02-16 01:18:51 +01:00
Ludovico Magnocavallo 7e9843d445 tfdoc for real 2022-02-16 00:48:13 +01:00
Ludovico Magnocavallo 8c684124da Merge branch 'fast/var-contracts' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/var-contracts 2022-02-16 00:44:24 +01:00
Ludovico Magnocavallo b50deb68a7 tfdoc 2022-02-16 00:44:14 +01:00
Ludovico Magnocavallo d3c95e5784
Merge branch 'master' into fast/var-contracts 2022-02-15 23:42:30 +00:00
Ludovico Magnocavallo cd52f7c34c stage 01 2022-02-16 00:35:50 +01:00
Ludovico Magnocavallo 742a08ba17 add tfvars output 2022-02-16 00:35:44 +01:00
Ludovico Magnocavallo 369253cc3a write providers to a common folder 2022-02-16 00:14:49 +01:00
Ludovico Magnocavallo 8dd5060779 file permissions 2022-02-16 00:08:09 +01:00
Ludovico Magnocavallo ad247e9435 bootstrap outputs 2022-02-16 00:03:10 +01:00
Lorenzo Caggioni 51026e6d0f Fix xpnAdmin 2022-02-15 21:36:11 +01:00
Simone Ruffilli 1d187ddd23
FAST: PF example implementation changed to dev. Tests updated (#544)
* FAST: PF example implementation changed to dev. Tests updated
* FAST: simplified teams folder names
2022-02-15 12:22:08 +01:00
Ludovico Magnocavallo c91802f501
Change psa type in net-vpc, fix psa in fast net stages (#545)
* change psn type in net-vpc, fix psa in fast net stages

* fix doc examples

* psn ---> psa
2022-02-15 09:24:27 +01:00
Lorenzo Caggioni 8906252528 Fix 2022-02-14 23:54:53 +01:00
Lorenzo Caggioni 7252e7ec01 Fix review comments. 2022-02-14 16:54:42 +01:00
Ludovico Magnocavallo 93ce6aac5b README 2022-02-14 14:46:32 +01:00
Ludovico Magnocavallo b44b7178ed README refactored 2022-02-14 14:44:19 +01:00
Ludovico Magnocavallo b987d9bd85 fix link 2022-02-14 14:37:46 +01:00
Ludovico Magnocavallo 4086d28b9b README refactor up to providers section 2022-02-14 14:23:19 +01:00
Ludovico Magnocavallo 96fd909141 top-level README 2022-02-14 14:07:47 +01:00
Ludovico Magnocavallo 5835d1d811 fix links 2022-02-14 14:02:29 +01:00
Ludovico Magnocavallo d8f4f37c48 tfdoc 2022-02-14 13:57:07 +01:00
Lorenzo Caggioni 2646f7bcd8 Rever router asn config 2022-02-14 10:47:09 +01:00
Lorenzo Caggioni 026cea4554 Align with master branch 2022-02-14 10:27:03 +01:00
lcaggio f98d690516
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-14 10:12:35 +01:00
Ludovico Magnocavallo 00f24698d0 refactor DRS org policy 2022-02-13 10:40:23 +01:00
Ludovico Magnocavallo 2d27d20f1a update IAM docs 2022-02-12 15:47:31 +01:00
Ludovico Magnocavallo 54c7d8a5c6 fix perimeter definition in locals 2022-02-12 15:41:13 +01:00
Ludovico Magnocavallo fbf4d29c88
Fix FAST names (#539)
* name checker, initial names fix

* fix name parser

* sdbx -> sbox

* explicit names

* show total name length

* check names in linting action

* validate prefix length

* fix typo
2022-02-12 13:29:22 +01:00
Lorenzo Caggioni e7ebaeedaf Fix Bootstrap output. 2022-02-11 23:24:00 +01:00
lcaggio bf64a3dfda
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* merge tools changes

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* add bolierplate to validate_schema

Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>

* stage 02-security

* Import Fast from dev repository.

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* Copy FAST top level README

* Copy FAST top level README

* TODO list

* TODO list

* fix linting action to account for fast

* remove providers file

* add missing boilerplate

* update factory README

* align examples tfdoc

* fast readmes tfdoc

* disable markdown link check

* really disable markdown link check

* update TODO

* switch to local module refs in stage0

* replace module refs in 02-sec

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* merge tools changes

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* add bolierplate to validate_schema

Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* stage 02-security

* Import Fast from dev repository.

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* Copy FAST top level README

* Copy FAST top level README

* TODO list

* TODO list

* fix linting action to account for fast

* remove providers file

* add missing boilerplate

* update factory README

* align examples tfdoc

* fast readmes tfdoc

* disable markdown link check

* really disable markdown link check

* update TODO

* switch to local module refs in stage0

* replace module refs in 02-sec

* Move first draft to fast branch

* Fix roles and variables. Add e2e DAG example!

* Fix example

* Fix KMS

* First draft: README

* Update README

* Add DLP, update README

* Update Readme

* README

* Add todos

* Merge master

* Merge master

* Merge master

* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README

* Fix READM and Demo

* add  on TF files

* Remove block comments

* simplify service_encryption_keys logic

* fix README

* Fix TODOs

* fix tfdoc description

* fix demo README

* fix sample files

* rename tf files

* Fix outputs file name, fix README, remove dependeces on composer resource

* Add test.

* Fix README.

* Initial README update

* README review

* Fix issues & readme

* Fix README

* Fix README

* Fix test error

* Fix test error

* Add datacatalog

* Fix test, for real? :-)

* fix readme

* support policy_boolean

* split Cloud NAT flag

* Fix README.

* Fix Shared VPC, first try :-)

* Fix tests and resource name

* fix tests

* fix tests

* README refactor

* Fix secondary range logic

* First commit

* Replace existing data platform

* Fix secondary range logic

* Fix README

* Replace DP example tests with the new one.

* Fix test module location.

* Fix test module location, for real.

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* Add PubSub encryption

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* Update READMEs

* Update README

* Fix composer roles and README.

* Fix test.

* Fixes.

* Add DLP documentation link.

* Temp commit with errors

* Refactor variables

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* rebase

* rebase

* rebase

* Rebase

* rebase

* Update READMEs

* Fixes.

* Fix new variables

* Fix misconfiguration and tests.

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* rebase

* rebase

* rebase

* Rebase

* rebase

* Update READMEs

* Fixes.

* Rebase - Fix secondary range logic

* Rebase - First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Initial fix for KMS

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Fix module path

* Initial fix for KMS

* Update READMEs

* Fixes.

* Fix new variables

* Revert VPC-SC logic

* Fix variable typos

* README fixes

* Fix Project Name logic

* Fix Linting

* READEME

* update READEME

* update READEME

* update README

* mandatory project creation, refactor

* formatting

* add TODO for service accounts descriptive name

* use project module to assign shared vpc roles

* Fix shared-vpc-project module

* Fix vpc name and tests

* README

* update to newer version

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 17:32:16 +01:00
Julio Castillo 9076c2f2b0 Fix external billing org 2022-02-11 17:10:44 +01:00
Simone Ruffilli a978000e31
Renamed vpc-(.*) files to (#538) 2022-02-11 10:23:57 +01:00
Julio Castillo 547ded37b2 Update networking folder names to match teams folder 2022-02-11 08:29:46 +01:00
Ludovico Magnocavallo 53144713aa
update bootstrap commands (#536) 2022-02-11 08:20:33 +01:00
Julio Castillo 096dce08e9 Use prefix for PF projects 2022-02-11 00:43:14 +01:00
Julio Castillo fd599ea286 Fix renamed argument to project factory module 2022-02-11 00:30:46 +01:00
Ludovico Magnocavallo bb97486987 tfdoc 2022-02-10 19:17:35 +01:00
Ludovico Magnocavallo 677f3c8df1 use custom role name for billing org too 2022-02-10 19:16:13 +01:00
Ludovico Magnocavallo 3246d1c08d fix variable 2022-02-10 19:13:55 +01:00
Ludovico Magnocavallo c4d36cc66b Allow specifying custom role names 2022-02-10 19:12:07 +01:00
Ludovico Magnocavallo ae49074921
Update terraform.tfvars.sample 2022-02-10 17:25:38 +01:00
Simone Ruffilli 2696af1a7e
Update vpc-sc.tf - manage empty perimeters. (#530)
* Update vpc-sc.tf - manage empty perimeters.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-10 16:24:14 +01:00
Julio Castillo 6700faf662 Document log sinks in stage 0 2022-02-10 13:00:43 +01:00
lcaggio b377b30910
Update README (#517)
Update path to config folder

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-09 13:05:46 +01:00
eeaton a18bea7f2c
Add Zonal DNS Only org policy (#527)
This is a safe and sane org policy that should be recommended for most customers to prevent them from accidentally configuring internal dns in a way that has reduced availability
https://cloud.google.com/compute/docs/internal-dns#enforce_dns_by_policy
2022-02-09 12:21:43 +01:00
Ludovico Magnocavallo 40cb46e1cc
Add support for Shared VPC service IAM to project module (#525)
* project module changes

* fix examples

* add comments in module code

* re-enable nullable on svpc variables

* project factory

* Tests still failing (#526)

* fix pf

* tfdoc

* pf test boilerplate

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2022-02-09 11:06:51 +01:00
Ludovico Magnocavallo d21304267b revert dry-run to true as default 2022-02-08 13:43:37 +01:00
Ludovico Magnocavallo 02dc9de9b0
make it simpler to switch from/ry run mode (#524) 2022-02-08 13:26:44 +01:00
Ludovico Magnocavallo 4567b788a2 add org policy role to cloud admins 2022-02-08 11:31:39 +01:00
Luca Prete be33a7f880
FAST - Fixes 498 - 02-networking-nva stage 2022-02-07 13:22:58 +01:00
Simone Ruffilli 40142572f8
Update variables.tf example for team_folders 2022-02-07 11:15:13 +01:00
Ludovico Magnocavallo 8f1639a3c5 sample tfvars file 2022-02-07 11:07:13 +01:00
Ludovico Magnocavallo e5440f98a2
use prod folder for landing project (#514) 2022-02-06 19:25:05 +01:00
Ludovico Magnocavallo d711a93397
fix previous merge (#513) 2022-02-06 18:34:32 +01:00
Ludovico Magnocavallo c4533503a6
Fast: use pathexpand for output location (#512)
* use pathexpand for output location

* tfdoc
2022-02-06 18:24:46 +01:00
Simone Ruffilli 1aa5d5d93f
Misc documentation fixes (#493) 2022-02-06 10:50:23 +01:00
Ludovico Magnocavallo 6c1c943600 fix org id 2022-02-06 10:05:31 +01:00
Ludovico Magnocavallo 769fc73e83 remove unused roles on automation project 2022-02-06 09:47:40 +01:00
Ludovico Magnocavallo c8cbf9b7d7
Add utility to extract IAM bindings from state (#503)
* add utility to extract IAM bindings from state

* TODO

* TODO

* output one row per role/member pairs

* sorting

* rename, delete spurious file

* generalize output functions

* generate IAM.md

* fix org id

* add link to role in markdown

* fix org id

* replace organization ids
2022-02-05 17:34:43 +01:00
Simone Ruffilli 75aff4081f
default=null for `shared_vpc_self_link ` and `vpc_host_project` (#502)
* Update variables.tf

* Update README.md
2022-02-04 19:57:06 +01:00
Julio Castillo 0c0614e12f Fix typo in stage2 variable
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:54:09 +01:00
Julio Castillo 18adf869ae Update networking stages to use multiple folders
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:21:00 +01:00
Julio Castillo ed4fc477a7 Update resman outputs and projects 2022-02-04 16:21:00 +01:00
Julio Castillo f184ced544 Add xpnAdmin to diffent folders 2022-02-04 16:21:00 +01:00
Simone Ruffilli 190442da9d
FAST-02-nva: uniformed l7 and PSA CIDRs (#497)
* FAST-02-nva: uniformed l7 and PSA CIDRs

* Update variables.tf

* Fixes README.md

* Fixes typo in variables.tf

* Fixes README.md
2022-02-04 14:40:24 +01:00
Simone Ruffilli a82f107f54
FAST-00: Adds projectCreator to resman SA. Always create delegated role grants. (#496) 2022-02-04 13:59:32 +01:00
Ludovico Magnocavallo 02e8a3927d
CI link checker (#494)
* CI link checker

* fix link errors

* fix ci

* wildcard on *.md
2022-02-04 13:28:07 +01:00
Simone Ruffilli 0cef15301b
Rename 02-networking to 02-networking-vpn (#492) 2022-02-04 11:03:37 +01:00
Julio Castillo 52c4b608c2 Rename tf files to use dashes 2022-02-04 08:45:49 +01:00
Daniel Marzini 2291e0643a remove module.organization.custom_role_id.xpnServiceAdmin
to be discussed with jccb
2022-02-04 08:45:49 +01:00
Simone Ruffilli 8272694360 02-net-nva: README.md updates 2022-02-04 07:42:56 +01:00
Luca Prete 9d81e29be7
FAST - Add 02-networking-nva stage 2022-02-03 20:30:56 +01:00
Julio Castillo c8f59c105e Remove unneeded delegated grants 2022-02-03 19:22:32 +01:00
Julio Castillo 5d0c57ef0c Update stage0 readme 2022-02-03 19:22:32 +01:00
Julio Castillo 9c552f8978 Fix syntax error 2022-02-03 19:22:32 +01:00
Julio Castillo 76d3ed41f1 Add org level role for networking delegated grants 2022-02-03 19:22:32 +01:00
Julio Castillo 37f37f939d Fix stage2 readme 2022-02-03 19:22:32 +01:00
Julio Castillo 346914d315 Add delegated grants for stage 3 service accounts 2022-02-03 19:22:32 +01:00
lcaggio 6e896382d6
Fix READMEs. (#484)
* Fix READMEs.

* fix outputs location paths in READMEs

* fix output location paths in READMEs

* Update README.md

* Update README.md

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-01 18:12:57 +01:00
Ludovico Magnocavallo c727abfa3b
Update README.md 2022-02-01 13:20:19 +01:00
Ludovico Magnocavallo 8a7dda94b2
Update README.md 2022-02-01 13:19:07 +01:00
Simone Ruffilli 272401e120
Removed obsolete sentence from README.md 2022-01-31 18:35:25 +01:00
Luca Prete 3b9fb07196
Fast - stage 02-netwoking - Fix rfc1918_172 range 2022-01-31 18:17:29 +01:00
Luca Prete fd3af0d8a0
Remove unused gke variable from fast stage 02-networking 2022-01-31 16:46:55 +01:00
Simone Ruffilli abb6b50a46
Add periods at the end of each description field where missing (#478) 2022-01-31 10:45:34 +01:00
Ludovico Magnocavallo 74f9618f52 gitignore for custom lab 2022-01-28 08:30:46 +01:00
Simone Ruffilli c5ba74374b
Update subnets (#466) 2022-01-28 08:26:03 +01:00
apichick 46755ab620 Fixed README fast/stages/02-networking/README.md 2022-01-27 17:44:27 +01:00
Simone Ruffilli 0867d6f6e2
FAST - Networking - update variables.tf 2022-01-27 13:18:29 +01:00
Ludovico Magnocavallo b9e8327987
fix onprem tunnel variable (#461) 2022-01-25 15:35:01 +01:00
Luca Prete f29cc67abc
Fast: reset vm-test counter to 0 in net landing (#452) 2022-01-25 13:55:35 +01:00
Ludovico Magnocavallo f580cece1e
Update README.md 2022-01-24 20:48:21 +01:00
Julio Castillo 9ab4173968
Update README.md 2022-01-24 17:15:10 +01:00
Julio Castillo 29471079b6
Update README.md 2022-01-24 17:14:39 +01:00
Ludovico Magnocavallo d8d41638a4
Refactor onprem VPN vars (#453)
* refactor onprem VPN vars

* tfdoc

* tfdoc
2022-01-24 14:40:49 +01:00
Julio Castillo 31f625f149 Link vars and outputs from README 2022-01-22 14:15:16 +01:00
Ludovico Magnocavallo 9a533180a0
Refactor project module, support per-file tags in tfdoc (#450)
* add support for in-doc tfdoc options overrides

* clean up project module

* add file description tags

* only output module and resource columns in tfdoc file table if they exist

* update fast READMEs

* fix check docs
2022-01-22 11:34:18 +01:00
Simone Ruffilli 19c6e54298
FAST Networking: update router name for onprem vpn 2022-01-22 09:31:13 +01:00
Luca Prete 0da20063c8
Fix fast org policies (#444)
* Fix fast org policies

* Generate tfdoc

* Minor refactoring of resman organization org policies

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-21 19:38:18 +01:00
Simone Ruffilli 2267801866
Update README.md 2022-01-21 15:18:20 +01:00
Simone Ruffilli 9f5854c043
Update README.md 2022-01-21 15:17:21 +01:00
Julio Castillo bfa892eb13
Delete TODO.md 2022-01-19 19:13:42 +01:00
Ludovico Magnocavallo 4e02f4475a
Update core-dev.tf 2022-01-19 17:03:58 +01:00
Simone Ruffilli 337528066b
Update README.md 2022-01-19 14:25:06 +01:00
Ludovico Magnocavallo e866db2c88 Merge Fabric FAST (#435)
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-01-19 14:19:39 +01:00