Commit Graph

601 Commits

Author SHA1 Message Date
Ludovico Magnocavallo ab646f38ed
Bump provider versions to >= 4.17.0, terraform to >= 1.1.0 (#634)
* bump provider versions to >= 4.17.0, terraform to >= 1.1.0

* bump teraform version in lint check, edit CHANGELOG
2022-04-17 13:55:40 +02:00
Ludovico Magnocavallo a34823e2d0
Add monitoring notification service identity to project module (#630)
* add monitoring notification service identity

* linting
2022-04-15 01:59:00 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 62a299a6f5 Deprecate subnets_l7ilb variable, add support for proxy_only and psc subnets. 2022-04-13 16:38:47 +02:00
lcaggio 15cdd179c6
Merge branch 'master' into lcaggio/sql-kms 2022-04-13 09:12:48 +02:00
Ludovico Magnocavallo 420c4de437
Update README.md 2022-04-13 09:10:56 +02:00
Ludovico Magnocavallo 4e1d06fd75
Update README.md 2022-04-13 09:08:01 +02:00
Ludovico Magnocavallo 874e9a57c7
Update README.md 2022-04-13 09:06:18 +02:00
Ludovico Magnocavallo 53c9431c98
Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 09:05:28 +02:00
Lorenzo Caggioni b415d824c9 Fix README, bye bye pippo :-) 2022-04-13 08:59:14 +02:00
Julio Castillo 1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Lorenzo Caggioni c7c77541fb Add KMS on CloudSQL module 2022-04-12 19:01:34 +02:00
Aleksandr Averbukh 6ab121a836 Add support for Private Service Connect and Reginal Managed Proxy subnets for net-vpc module 2022-04-12 12:57:33 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
javiergp 86357c2ed5
CloudSQL-instance: Fixed terraform change detection when backup is disabled. (#615)
* Update variables.tf

When backup is not enabled, if location is set to a null value (i.e."EU"), each time you do `terraform apply` it will detect a configuration change (+ location  = "EU"). Setting this variable to null fixes the issue.

* Update README.md
2022-04-10 12:33:00 +02:00
Daniel Strebel 63097dd224 Allow multiple CIDR blocks in the ip_range parameter and rely on the Google API for validation 2022-04-07 15:08:24 +02:00
Luca Prete cd0f09b748
[#593] Add HTTP ILB module (net-ilb-l7) 2022-04-05 08:58:55 +02:00
Julio Castillo f1dd84389c
Merge branch 'master' into 597-fix-link-checker 2022-04-01 00:37:25 +02:00
Daniel Strebel 7fdea13321
Merge branch 'master' into feature/apigee-org-billingtype 2022-03-31 11:49:01 +02:00
Lorenzo Caggioni 42fa28b075 Fix data catalog policy tag output. 2022-03-31 10:36:47 +02:00
Daniel Strebel 59bb09b03e Add billing_type for Apigee Organization Module 2022-03-31 08:47:34 +02:00
Luca Prete 6d00965e0d
Merge branch 'master' into 597-fix-link-checker 2022-03-29 08:56:05 +02:00
Wiktor Niesiobędzki 29d65811f3
Use uniform access on Cloud Functions buckets. (#596)
* Use uniform access on Cloud Functions buckets.

* Add ALLOW_INTERNAL_AND_GCLB as allowed ingress_settings.

* Enable versiniong if there is lifecycle rule

* Remove only non-current version of objects
2022-03-29 07:42:15 +02:00
Julio Castillo ba30ceb5c1
Simplify link checker and recurse into all elements with children (#599) 2022-03-28 16:54:06 +02:00
Luca Prete 2bb9e3f64e [#597] Fix link_checker 2022-03-28 09:43:00 +02:00
Ludovico Magnocavallo b0b9f9607c
Optionally turn off gcplogs driver in COS examples (#592)
* add new variable

* trigger checks

* actually pass new variable to template

* fix templates
2022-03-24 16:17:24 +01:00
John Tracy 22f03bd5d5
Update README for bigquery module (#569)
* Update README

Some variables that no longer exist. Table format is broken for view/table access.

* Remove floating role

* Fix README.md

* Fix tfdoc

* Fix tfdoc

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-03-23 16:34:45 +01:00
Ludovico Magnocavallo b0fcc94b1d
fix duplicate locals in net-vpc (#587) 2022-03-17 17:16:31 +01:00
Ludovico Magnocavallo 9a05aed0e8
fix psa peering routes, split files (#586) 2022-03-17 16:39:37 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo 976eb9fe48 shorten PSA name 2022-03-17 11:41:36 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
apichick ef1542c1f1
Fixed problem when destroying shared VPC host project (#582) 2022-03-16 07:34:09 +01:00
Daniel Marzini 00ca59030d Update README.md 2022-03-14 17:12:56 +01:00
Daniel Marzini 463edc42cc [gke-cluster] filestore csi integration 2022-03-14 17:12:56 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Ludovico Magnocavallo ecadebe90b
Add support for IAM additive to folder module (#580) 2022-03-11 09:46:32 +01:00
lcaggio a40493a433
Policy Tag: Add IAM at tag level (#579)
* Add IAM at tag level

* Fix README

* Readable variable names.

* Single tag variable.

* Fix README.

* Add Tags nullable condition.

* Update role in the example.
2022-03-10 19:21:54 +01:00
Aleksandr Averbukh 0d88fd78e8 Skip tests for projects-data-source module 2022-03-08 09:26:47 +01:00
Aleksandr Averbukh a9981d6949 Remove module tests, datasource based module cannot be tested with TFplan 2022-03-07 22:49:54 +01:00
Aleksandr Averbukh a532800ca9 Fix documentation tests 2022-03-07 22:17:51 +01:00
Aleksandr Averbukh 8e1beb0938 Add module for retrieving all projects/folders under a specific parent (recursively). 2022-03-07 22:02:18 +01:00
Julio Castillo ce6e37c1f7
Update README.md 2022-03-01 08:49:21 +01:00
Andrea Gandolfi ddc3c4655f Add note to net-vpn-ha module's README file on how to handle cycle errors when using for_each 2022-03-01 08:47:47 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Daniel Marzini e372b50d19
Add GKE Hub module to fabric (#540)
* GKE Hub initial PR commit

* variable management adjust

* comments, fixes and alphabetically ordered variables

* Update README.md

* Update README.md

* Update README.md

* fix test

* resources vs modules

still needs some love

* remove modules usage

* comments, readme update and output

* adjusting outputs and README

* fix README.md

* fix README

* adjusted based on comments

still need some love in the google_gke_hub_feature_membership variables management

* types and variable management

* optionally enable required api

* Update README.md

* reorder locals and use standard formatting

* Don't enable services from modules

* Use self links for member clusters

* Update readme

* members_clusters back to map

@juliocc let's talk about this cause we saw it together in our call and if I change it to a list than the other resources are not going to work, they need location there too.

* Forcing null feature to false due to a bug in provider

If a block is set to null the provider will crash with a "panic: interface conversion: interface {} is nil, not map[string]interface {}" a PR will follow

* Readme update

* Readme.md update

* Update README.md

* bring back tolist, WIP

* Update main.tf

* Readme.md update

* Update README.md

* Update main.tf

* Update main.tf

* Add id and self_links output to gke-cluster

* Use try and make all member feature blocks dynamic/optional

* Change member clusters to map

* Add gke-hub tests

* Address PR comments

* Update gke-hub readme

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-28 12:40:48 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
John Tracy 25707adfba
Fix broken link (#555)
dnssec config link was broken
2022-02-24 06:21:43 +00:00
Julio Castillo ccb6c81a9a
Update README.md 2022-02-23 09:56:00 +01:00
Julio Castillo c012d92058
Update README.md 2022-02-22 17:31:50 +01:00