Commit Graph

306 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 462a7023cd rename iam variable in source repo module 2020-11-05 08:58:05 +01:00
Ludovico Magnocavallo 8267252031 rename iam variable in net vpc module 2020-11-05 08:49:29 +01:00
Ludovico Magnocavallo 9d0db19c5e rename iam variables in gcs module 2020-11-04 16:57:06 +01:00
Ludovico Magnocavallo bf23199724 rename iam variables in artifact registry 2020-11-04 16:56:57 +01:00
Ludovico Magnocavallo 0e1fb9bf9e rename iam variables in folder unit module 2020-11-04 16:49:29 +01:00
Ludovico Magnocavallo 02d867ff3d rename iam variables in folder module 2020-11-04 16:49:19 +01:00
Ludovico Magnocavallo d47478a466 rename iam members variable in project module 2020-11-04 16:22:00 +01:00
Ludovico Magnocavallo d0ed3b7614 rename iam additive variable in project module 2020-11-04 16:17:12 +01:00
Ludovico Magnocavallo d2c84de8ff use new variable names in organization module 2020-11-04 15:44:28 +01:00
Ludovico Magnocavallo 627f86219f rename iam variable in secret manager module, add tests 2020-11-04 14:19:16 +01:00
Ludovico Magnocavallo c372980e15 update service directory module to 0.13 2020-11-04 14:08:33 +01:00
Ludovico Magnocavallo 8dc131550f fix variable validation in project module to allow for null values 2020-11-04 12:06:01 +01:00
Julio Castillo 7bd31ccf52 Added some basic variable validation 2020-11-03 08:12:11 +01:00
Julio Castillo 352b7a0645 Use description variable in dns module 2020-11-03 07:59:52 +01:00
Julio Castillo c75230adf3 Remove iam_roles from net-vpc 2020-10-30 19:19:40 +01:00
Julio Castillo 405a3c23d5 Update project README 2020-10-30 19:06:20 +01:00
Julio Castillo 82a1fe3c20 Removing iam_roles from multiple modules
This commits removes the iam_roles variables from the modules:
 - artifact-registry
 - bigtable-instance
 - cloud-function
 - container-registry
 - endopoints
 - pubsub
 - source-repository
2020-10-30 18:58:07 +01:00
Julio Castillo 96dba2256e Remove iam_roles from secret_manager 2020-10-30 18:25:17 +01:00
Julio Castillo 53cb8359ee Remove *_roles variables in kms module 2020-10-30 17:58:45 +01:00
Julio Castillo fc5017cc24 Remove dependency hooks to net-vpc-peerings. 2020-10-30 00:19:28 +01:00
Julio Castillo b13a10efe5 Remove iam_roles from compute-vm module 2020-10-30 00:18:10 +01:00
Julio Castillo 1a7b9836ea Update folder and service account READMEs 2020-10-29 23:54:40 +01:00
Julio Castillo 78efb63b4a Remove iam_roles from project module 2020-10-29 23:51:34 +01:00
Julio Castillo 6e81125c6a Remove useless calls to toset 2020-10-29 23:29:41 +01:00
Julio Castillo 61d402fece Update gcs module to terraform 0.13 2020-10-29 23:26:03 +01:00
Julio Castillo 85fda5b1fe Remove iam_roles from service accounts, folder and organization modules 2020-10-21 09:37:05 +02:00
Julio Castillo 13ed799a8b Update service account module to Terraform 0.13 2020-10-20 22:36:03 +02:00
Julio Castillo 2e7876b4c7 Update folders module to Terraform 0.13
With this commit the folders module (now called simply 'folder') only
creates a single google_folder resource. Support for creating multiple
folders is no longer needed since Terraform 0.13 added for_each support
to modules.
2020-10-20 15:41:03 +02:00
Julio Castillo 7ab87d0790
Fix typo in iam-service-account README 2020-10-20 10:50:08 +02:00
Julio Castillo db330fe063 Add support for single-sided peerings. 2020-10-12 16:16:24 +02:00
Julio Castillo ab39c9e4d4 Update compute-vm variable documentation 2020-10-12 13:10:13 +02:00
Julio Castillo 2bef92da57 Fixes to `compute-vm` module 2020-10-12 12:26:00 +02:00
Julio Castillo 0b34b9fa71 Bring back firewall logging 2020-10-07 10:30:26 +02:00
Ludovico Magnocavallo 09301cf7bd
Bump Terraform version used in tests, increase pytest verbosity (#147)
* update Terraform version used for tests

* increase verbosity of test runs

* delete stale experimental cloud function module
2020-09-27 15:31:19 +02:00
Chinmay Dorlikar 9bd1d5bb79
Updated the main.tf for bigquery-datasets (#146)
Added the "depends_on" attribute for views to be created only after all the tables are created to avoid failure.
2020-09-27 15:16:09 +02:00
Ludovico Magnocavallo bd00eec1be
decouple cloudrun from istio in gke cluster module (#144) 2020-09-25 22:02:17 +02:00
Julio Castillo 5fd8720c7a
Add service project configuration options to project module (#142) 2020-09-24 10:41:44 +02:00
Luca Prete f2c80e17f1
[#138] Update copyright headers to 2020 (#139)
Co-authored-by: Luca Prete <lucaprete@google.com>
2020-09-23 11:07:03 +02:00
Sumeet Chaurasia bbb14886fd
provider version update (#140) 2020-09-23 10:09:41 +02:00
vanessabodard-voi 435d64d81a
Change bucket_policy_only into uniform_bucket_level_access in GCS module (#135)
* Change bucket_policy_only into bucket_policy_only

* Update changelog
2020-09-15 19:33:40 +02:00
Ludovico Magnocavallo 120e1be1d9 extend gcs module tests to cover new variables 2020-09-03 19:19:41 +02:00
Ludovico Magnocavallo 9e32b32b3d reformat GCS module and update README 2020-09-03 19:08:29 +02:00
vanessabodard-voi e8c227fdd6
Add bucket logging (#134)
* Add logging

* Improve syntax

* Add example

* Improve type for retention policy
2020-09-03 19:06:35 +02:00
Ludovico Magnocavallo 0265ba0951
Refactor net-address variables, add support for internal address purpose
* add support for internal address purpose
* update gcs module README
* refactor net address module interface and add tests
* add more examples in net-address README
2020-09-01 18:49:21 +02:00
vanessabodard-voi daf3dc41e7
Add retention policy (#133) 2020-09-01 17:48:02 +02:00
Aleksandr Averbukh d45934e544
Merge pull request #132 from terraform-google-modules/vpn-ha-optional-gateway
Make VPN Gateway creation optional for the net-vpn-ha module
2020-09-01 16:32:14 +02:00
Aleksandr Averbukh 4626dafcc8 Make VPN Gateway creation optional for the module. 2020-09-01 12:38:25 +02:00
Julio Castillo 21aee6f0aa Reference VPC name from module variable 2020-08-31 14:54:05 +02:00
Julio Castillo 067f072c26 Make VPC creation optional in `net-vpc` module 2020-08-31 14:09:28 +02:00
Ludovico Magnocavallo 86bee0ff70 update input variable table in dns module README 2020-08-29 11:16:42 +02:00
vanessabodard-voi 9c59a03052
Add the option to not create a DNS managed zone (#126)
* Add zone_create variable

* Update readme

* Update dns_keys
2020-08-29 11:09:57 +02:00
Julio Castillo 5ae489f50d
Add alias IP support in `compute-vm` (#127)
* Add alias IP support in `compute-vm`

* Fix tests

* add end to end tests for data solutions examples and fix example errors

* update changelog

* add missing boilerplate

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-08-29 10:12:30 +02:00
Julio Castillo 1c0dd4dd13
Fix project outputs.tf 2020-08-26 12:15:44 +02:00
Ludovico Magnocavallo 849b50b95b don't raise error on incremental destroys in cf module outputs 2020-08-17 12:46:04 +02:00
Ludovico Magnocavallo 2e644a3333 streamline gke module peering project id 2020-08-16 20:36:52 +02:00
Roberto Rojas a3962dcaf7
#123: Proposal to extend gke-module (#124)
* allows the use of shared VPC network

* adds configuration block for host project id and shared vpc

* changes based on issue discussion

* changes based on issue discussion
2020-08-16 20:32:36 +02:00
Ludovico Magnocavallo f62b9362a2
ILB for appliances example (#122)
* rename infrastructure folder to networking

* example WIP: VPCs

* move ip forwarding to its own variable in compute-vm module

* add per-instance metadata support to compute-vm module

* ipip tunnels on linux savepoint

* simple multinic gateways example

* remove stale files

* resolve conflicts

* update diagram

* rename folder

* use a template for gw cloud config, rename some resources and files

* Update README.md

* Update README.md

* add basic plan tests for all networking e2e examples

* fix test for foundations/environments e2e example

* fix shared vpc e2 example count error in gke node service account permissions

* use module path for assets in onprem e2e example

* use project id from module in ilb e2e example

* add mising boilerplates in tests

* run examples tests in ci

* update module's README

* rename ilb example

* Update README.md

* fix rp_filter configuration

* README

* Update README.md

* Update README.md

* Update README.md

* update CHANGELOG

* update CHANGELOG

* Update README.md
2020-08-15 10:12:43 +02:00
Ludovico Magnocavallo a008b1a561
Update README.md 2020-08-08 11:04:53 +02:00
Ludovico Magnocavallo 482f4464f8 depend feed id from IAM roles in pubsub module 2020-07-30 18:11:42 +02:00
chinmaydorlikar e6867b3486
Added google-beta provider for dataset-access resource and formatted the file (#118)
Co-authored-by: Chinmay Dorlikar <chinmay_dorlikar_ex@kdrp.com>
2020-07-28 18:28:59 +02:00
Ludovico Magnocavallo 9197093cb9
Update README.md 2020-07-24 15:06:11 +02:00
Ludovico Magnocavallo 3cad63285f
Add support for vpc connector and ingress settings to cloud-function (#116)
* add support for ingress/egress/vpc connector to cloud function

* refactor vpc connector support

* refactor ingress settings support

* fix vpc connector value

* fix vpc connector value
2020-07-24 08:55:58 +02:00
Ludovico Magnocavallo fc99ade009
Add support for logging in net-cloudnat (#115)
* add logging support to net-cloudnat

* use default for logging filter
2020-07-23 09:29:24 +02:00
Ludovico Magnocavallo dce2fca740
Support multiple zones in compute-vm module (#114)
* support multiple zones in compute-vm module

* update compute-vm variables in end-to-end examples

* update README examples
2020-07-18 06:39:14 +02:00
Julio Castillo 036b9ea950
Obey var.iam_billing_config.grant (#113)
* Update main.tf

* Update main.tf
2020-07-15 13:18:42 +02:00
Ludovico Magnocavallo 370eb67242 fix external IP reservation in compute-vm module 2020-07-10 17:04:53 +02:00
lcaggio ea72d4a884
Merge branch 'master' into vpc-sc 2020-07-10 07:29:21 +02:00
Lorenzo Caggioni 7cf3990d27 - Fixes based on PR comments
- Movig module under Security
 - Formatting TF files
2020-07-10 07:22:57 +02:00
Ludovico Magnocavallo 67d03fd07c
support Shared VPC in project module (#112) 2020-07-09 15:15:14 +02:00
Julio Castillo 569e52e12a
Add Shielded VM config option to compute-vm (#111)
* Add shielded config option to compute-vm

* Update CHANGELOG
2020-07-09 08:09:47 +02:00
Ludovico Magnocavallo 4beedc5ba8
Update README.md 2020-07-08 21:39:50 +02:00
lcaggio e07d45d407
Merge branch 'master' into vpc-sc 2020-07-07 11:00:09 +02:00
Lorenzo Caggioni 9073703a25 Update READMEs and CHANGELOG 2020-07-07 10:56:11 +02:00
Lorenzo Caggioni 31ac6ee094 Remove Project level VPC-SC handling. The configuration option is too
limited (for example: no dry_run mode supported).
2020-07-07 10:49:06 +02:00
Lorenzo Caggioni 39d2d90bcd Move VPC-SC to a separate module. 2020-07-07 10:23:26 +02:00
Lorenzo Caggioni 0d7f35b0ae Fix variable name based on PR feedback 2020-07-06 21:58:40 +02:00
Lorenzo Caggioni 43e4ffc95d Support Access Levels - Perimeters mapping 2020-07-06 18:35:42 +02:00
Ludovico Magnocavallo 9f547266e9 really fix external address reservation in compute-vm module 2020-07-06 18:32:41 +02:00
Ludovico Magnocavallo 6af350341f fix external address reservation in compute-vm module 2020-07-06 18:28:57 +02:00
Lorenzo Caggioni 3e2706be10 Add basic Access Level support 2020-07-06 18:12:25 +02:00
Lorenzo Caggioni 96808b89ff Add dry run mode support 2020-07-06 16:53:02 +02:00
Lorenzo Caggioni 35571096ca Update READMEs 2020-07-06 15:30:29 +02:00
Lorenzo Caggioni 07b3b5f4d0 Remove create/no_create logic. I will add it in a future PR. 2020-07-06 15:28:23 +02:00
Lorenzo Caggioni ccc4e0076a Merge branch 'vpc-sc' of https://github.com/terraform-google-modules/cloud-foundation-fabric into vpc-sc 2020-07-06 14:37:13 +02:00
Lorenzo Caggioni c414ca5505 Fixes based on PR comments:
- fix typos
 - use for_each
 - fix code layout
2020-07-06 14:30:25 +02:00
Ludovico Magnocavallo 29b34c0a2d
Update README.md 2020-07-04 10:07:45 +02:00
Ludovico Magnocavallo b4affad49d
Update README.md 2020-07-04 10:06:34 +02:00
Ludovico Magnocavallo f045d4334c
Update README.md 2020-07-04 10:04:53 +02:00
lcaggio 7acdfdc53b
Merge branch 'master' into vpc-sc 2020-07-02 19:07:17 +02:00
Lorenzo Caggioni bef0f77e67 Add Project level support for VPC-SC 2020-07-02 19:01:36 +02:00
Lorenzo Caggioni b0bb441df5 Add VPC-SC perimeters support 2020-07-02 18:12:34 +02:00
Sumeet Chaurasia ceb725bb84
Reserved External IP-Compute VM (#107) 2020-07-02 11:41:42 +02:00
Ludovico Magnocavallo 5fa4ea5518 regenerate variables/outputs tables in modules 2020-07-02 08:29:38 +02:00
vanessabodard-voi 5af022a3ee
refactor IAM additive bindings variables (#103)
* Invert the list for role/member mapping so that member is the key

* Add iam_additive_bindings to replace iam_additive_members and iam_additive_roles, change test suite accordingly

* attribute 'mode' added as it would error without

* Update Readme to reflect the new variable iam_additive_bindings

* test branch access

* iam_additive_bindings to replace iam_additive roles and iam_additive_members

* update foundation samples to new additive bindings format

* set bq dataset options in foundation environments to allow destroying

* trap exceptions raised during destroy in project module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-07-02 08:28:26 +02:00
Lorenzo Caggioni 8b252fc261 Fix 2020-06-30 18:05:37 +02:00
lcaggio 22f3451573
Merge branch 'master' into gcs-to-bq 2020-06-30 16:58:57 +02:00
Ludovico Magnocavallo c4850b8391
Cloud functions module (#102)
* wip

* cloud function module

* wip

* cloud function module

* update top-level READMEs and CHANGELOG

* update top-level READMEs and CHANGELOG

* remove duplicate boilerplate in variables

* implement suggestions in PR review
2020-06-29 08:05:44 +02:00
Ludovico Magnocavallo 21758f399d
Update README.md 2020-06-28 12:11:54 +02:00
Ludovico Magnocavallo d3fe52ef3a fix minimum required version of google-beta provider in dns module 2020-06-28 11:19:15 +02:00
Lorenzo Caggioni 9a4ec24093 First commit.
TODO:
 - fix error on destroy
 - improve robot service account handling
2020-06-26 21:45:41 +02:00
Ludovico Magnocavallo ec765857cb
Make project creation optional in project module (#99)
* make project creation optional in project module

* add variable to optionally configure project activation

* add explicit dependency on custom roles to additive bindings

* make parent variable optional

* add test for null parent

* fix custom roles output
2020-06-25 10:04:57 +02:00
lcaggio c5fc3798c6
Merge branch 'master' into endpoints 2020-06-24 18:19:03 +02:00
Lorenzo Caggioni 72c2b9a54a Fix Variable description 2020-06-24 18:13:45 +02:00
Lorenzo Caggioni c1eb78c746 Fix Example 2020-06-24 18:12:10 +02:00
Lorenzo Caggioni 9c85f9e647 Delete old folder 2020-06-24 18:08:09 +02:00
Lorenzo Caggioni 825a159990 Correct typos
Rename module to be consistent with the real name of the GCP service
Add link to the module on READMEs
2020-06-24 17:59:57 +02:00
Lorenzo Caggioni 6356ce628c Fixes based on comments on the PR 2020-06-24 15:52:30 +02:00
Lorenzo Caggioni 30da293c0a Fix Readme 2020-06-24 10:31:10 +02:00
Lorenzo Caggioni c4bbba4fbf Fixes 2020-06-23 18:22:54 +02:00
Lorenzo Caggioni 908371ab91 Module to handle Cloud Endpoints 2020-06-23 18:12:10 +02:00
Ludovico Magnocavallo 9f3500bff3 IAM bindings in compute-vm need to depend on the instance resource 2020-06-22 16:16:19 +02:00
Ludovico Magnocavallo e2a9e3d415
Update README.md 2020-06-19 11:16:22 +02:00
Ludovico Magnocavallo 6524563747
Add optional unmanaged instance groups to net-ilb (#98)
* add optional unmanaged instance groups to net-ilb

* depend health check creation on the health_check variable

* add example for self-managed group

* update changelog
2020-06-19 09:49:37 +02:00
Aleksandr Averbukh ddc2f9c20d
dns_keys output added to the dns module (#97)
* dns_keys output added to the dns module, so DNSSEC attributes like DS entry will be outputed if DNSSEC configuration is provided

* Fix confition for dns_keys data source
2020-06-17 11:43:46 +02:00
Ludovico Magnocavallo 7a100d08d4
Move top-level docker images folder to the onprem module (#96)
* move docker folder to the onprme module

* update CHANGELOG
2020-06-17 05:41:13 +02:00
Ludovico Magnocavallo ae2e4dc3ad interpolate vpc name in routes 2020-06-12 12:07:28 +02:00
Ludovico Magnocavallo c1c96cac7f interpolate gateway name in route name for static vpn 2020-06-11 15:51:25 +02:00
Ludovico Magnocavallo 25d3b2ebdd
add iam support to compute-vm module (#95) 2020-06-10 07:55:18 +02:00
Ludovico Magnocavallo 61bf03d143
Update README.md 2020-06-09 17:21:07 +02:00
Lorenzo Caggioni 1484118049 update top-level README
update modules/README
update CHANGELOG
2020-06-09 16:25:05 +02:00
Lorenzo Caggioni 2f97d246f6 Fix README 2020-06-09 16:03:10 +02:00
Lorenzo Caggioni 8d75a278a6 Fixes 2020-06-09 15:55:22 +02:00
Lorenzo Caggioni 9706d2c386 Add BigTable module 2020-06-09 02:40:26 +02:00
Julio Castillo 2e597e2c58
Add Network Endpoint Group module (#91)
* Add Network Endpoint Group module

* Update CHANGELOG

* Move neg to experimental

* Revert "Update CHANGELOG"

This reverts commit 9282932f88655089e642a9e9954504f19528621e.

* Revert README changes
2020-06-08 13:43:13 +02:00
Ludovico Magnocavallo cf79c65d3b
Set instance zone in net vpc route to avoid recreation (#90) 2020-06-07 18:06:15 +02:00
lcaggio 1b450fe444
Add Cloud KMS support to GCS module (#87)
* Add support to Cloud KMS

* Fixes

* Fix tests

* Fix tests

* - change variable name to be consistent with BQ module
 - remove output, not needed
 - change string default value to null

* use locals to pre-populate kms key variable for all names

* rename kms variable, fix prefix check in locals

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-06-05 21:59:34 +02:00
Ludovico Magnocavallo 474fd7364f
use "all" for admin firewall rule in net-vpc-firewall module 2020-06-05 21:24:28 +02:00
Ludovico Magnocavallo 4a40497ce6
Update README.md 2020-06-05 09:51:36 +02:00
Ludovico Magnocavallo eb4c1d5d98
Update README.md 2020-06-05 09:41:58 +02:00
Julio Castillo 99642be58a
Add option to use private GCR to cos-generic-metadata (#86) 2020-06-03 09:27:10 +02:00
Ludovico Magnocavallo 4dd927d8d7
KMS module refactoring (#85)
* first rewrite, untested

* validation fixes

* fix errors, rename variables, improve README, tested

* minimal kms module test

* README tweaks
2020-06-03 08:43:10 +02:00
Ludovico Magnocavallo af95bb3110
Update cloud-config.yaml 2020-06-02 10:14:03 +02:00
Julio Castillo c91769628b
Merge pull request #83 from terraform-google-modules/ludo-service-accounts-changes
Refactor service account module outputs
2020-06-01 11:30:57 +02:00
Ludovico Magnocavallo 778362cf95
Better service account outputs in project module (#82)
* rationalize project module product service accounts output

* fix typos in shared vpc example service accounts

* add extra robot service accounts

* update CHANGELOG
2020-06-01 09:32:47 +02:00
T.V.VIGNESH 6b0b147e7e
Added PD CSI Driver Addon support (#84)
* Added PD CSI Driver Addon support

Google supports CSI Driver for PD (https://cloud.google.com/kubernetes-engine/docs/how-to/gce-pd-csi-driver) which is also supported by TF Google Beta Provider (https://www.terraform.io/docs/providers/google/r/container_cluster.html#gce_persistent_disk_csi_driver_config).

Added the same support to this module.

* Added PD CSI Config to variables

The PD CSI config has been added to variables to support PD CSI Driver (https://www.terraform.io/docs/providers/google/r/container_cluster.html#gce_persistent_disk_csi_driver_config)
2020-06-01 07:57:14 +02:00
Ludovico Magnocavallo aaa80bb49b refactor service account module outputs 2020-05-31 09:39:03 +02:00
lcaggio 7f40aba4cd
Support Cloud KMS on Compute-VM module + Fixes (#79)
* * Add support to KMS disk encryption (boot and attached)
 * Fix Instance Group Example

* Fix

* * Fix image boot disk
 * Add example with disk encryption

* Fix Title

* Improve logic

* Fix Readme
Fix viariable description

* Update README.md

* update README variables/outputs table

* add change to CHANGELOG

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-05-30 08:57:21 +02:00
Ludovico Magnocavallo 476c41d333
Update README.md 2020-05-29 08:25:51 +02:00
Ludovico Magnocavallo 133623dee9
Update README.md 2020-05-29 08:08:09 +02:00
Ludovico Magnocavallo e2004d0c0d
Update README.md 2020-05-29 08:07:08 +02:00
Julio Castillo 840607d837
Fix another typo in GCS README 2020-05-26 12:11:27 +02:00
Julio Castillo f8cbfe9fbf
Update README.md 2020-05-26 12:10:02 +02:00
Julio Castillo e1ad77c6d9
Add Artifact Registry module (#81) 2020-05-26 12:03:15 +02:00
Ludovico Magnocavallo de6b4515c2
Update README.md 2020-05-26 07:21:52 +02:00
Julio Castillo 0f291fbde3
Add Container Registry module (#80) 2020-05-26 07:18:33 +02:00
Julio Castillo 4bf3a81463
Fix typo in folder README 2020-05-25 11:35:18 +02:00
Chris Taylor b75e6becf0
Correct the name used to reference the folders module (#78) 2020-05-22 19:47:50 +02:00
lcaggio 461662ad1d
First commit for Data Fusion module (#77)
* First commit for Data Fusion module

* Fix comments and improve ip_allocation logic.

* Add example

* generate variables and outputs table, fix example headings

* update year in boilerplates

* rename firewall variable, remove region from resource names

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-05-22 12:30:24 +02:00
Julio Castillo 2946d28727
Source repository module (#76)
* Source repository module

* Fix typos
2020-05-14 20:48:29 +02:00
Ludovico Magnocavallo b3cdca67de
Update README.md 2020-05-13 15:55:26 +02:00