Commit Graph

4294 Commits

Author SHA1 Message Date
Julio Castillo 50d8d4b8b8 Add subnets id output, expand net-address outputs 2023-06-12 10:24:30 +02:00
Mark Schlagenhauf ff231bd28c Fixing issues with prior commit. 2023-06-09 17:46:14 +00:00
mark1000 7bdb69f8f8
Add newline to bottom of main.tf 2023-06-08 11:12:01 -07:00
mark1000 ef3d988da6
Merge branch 'master' into vanguard/peering-config 2023-06-08 11:08:53 -07:00
Julio Castillo eddef7e5b6
Merge pull request #1432 from GoogleCloudPlatform/jccb/fix-1431
Make internal/external addresses optional in compute-vm
2023-06-08 14:14:26 +02:00
Julio Castillo e900e9c951 Make internal/external addresses optional in compute-vm
Fixes 1431
2023-06-08 14:00:10 +02:00
apichick 6baf8720fa
Merge pull request #1428 from apichick/net-ilb-l7-psc-negs
Added support for PSC negs in net-ilb-l7 module
2023-06-08 12:50:26 +02:00
apichick d248f799d9
Merge branch 'master' into net-ilb-l7-psc-negs 2023-06-08 12:35:17 +02:00
Ludovico Magnocavallo a7b944aa8e
fix serverless neg example (#1430) 2023-06-08 12:05:54 +02:00
Miren Esnaola ebeace21dd Added support for PSC negs in net-ilb-l7 module 2023-06-08 11:18:32 +02:00
Wiktor Niesiobędzki 6b4bca10bd Use RFC6598 addresses for pods and subnets
10.128.0.0/9 is public network.

Closes: #1424
2023-06-08 07:56:31 +02:00
Mark Schlagenhauf 359b30c141 Updating hub-and-spoke peering blueprint to use HA VPN. 2023-06-07 22:53:45 +00:00
Ludo ae73274bfb
update changelog 2023-06-08 00:20:48 +02:00
Ludovico Magnocavallo c024eca320
Add custom tag support to FAST (#1426)
* initial implementation of custom tags

* depend org policies on tags

* fix test

* integrate default and custom org policy tags
2023-06-07 22:10:27 +00:00
lcaggio 39b27ac25e
Add support for Log Analytics on logging-bucket module and bump provider version (#1423)
* first commit

* Bump provider versions

* Fix tests
2023-06-07 23:23:28 +02:00
Ludovico Magnocavallo 7bd6e5d57b
Small fixes (#1425)
* fix serverless connector plugin outputs

* add internal and lb to allowed ingress org policy

* add validation condition on cloud run ingress settings

* tfdoc

* plugin tfdoc

* allow disabling googleapis routes with a single instruction in net-vpc

* fix variable def

* fix variable description

* fix cr variable validation

* fix usage of   create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
Ana Fernandez 4876161003
Merge pull request #1412 from GoogleCloudPlatform/afda16/vpn-alerts
Add VPN monitoring alerts to 2-networking and VPN usage chart
2023-06-06 14:22:59 +01:00
Ana Fernandez del Alamo 0fe3f165ed Add VPN monitoring alerts to 2-networking and VPN usage chart
The Fast stage 2-networking-* currently adds a monitoring dashboard
for VPN metrics. This change adds an additional chart to monitor the
usage of the VPN bandwidth.

This change also adds the following monitoring alerts:

* VPN tunnel established
*
[VPN bandwidth](https://cloud.google.com/network-connectivity/docs/vpn/how-to/viewing-logs-metrics#define-bandwidth-alerts)

To configure the alerts, there is a new `alert_config` variable with
defined default values.

The alerts are created in the stage `b` by default. In the stages a,
c, d, and e, the alerts are created if the user creates the On-prem
VPN.

To disable the creation of alerts, add the following to
`terraform.tfvars`:

```
alert_config = {
  vpn_tunnel_established = null
  vpn_tunnel_bandwidth = null
}
```
2023-06-06 13:49:21 +01:00
Julio Castillo 9af4db2fa0
Delete FAQ.md 2023-06-06 14:47:26 +02:00
lcaggio 7ed197aff4
Fix and improve GCS2BQ blueprint (#1416)
* Fix roles

* Implement Shared VPC roles relying on project service_identity_iam variable

* Group project variable into project_config variable

* Rely on optional variables to avoid try()
2023-06-06 09:06:58 +02:00
Ludovico Magnocavallo fedb894f97
Fix NLB module (#1419)
* net-nlb fixes

* formatting
2023-06-05 19:42:32 +02:00
Ludovico Magnocavallo ea4c00756b
Network Load Balancer module (#1418)
* wip

* example tests passing
2023-06-05 13:21:40 +02:00
Ludo a93a78f4e7
update changelog for v23.0.0 2023-06-05 11:40:27 +02:00
Ludo c14ab4de55
update changelog 2023-06-05 11:39:30 +02:00
Luca Prete 0d6751a5f4
Remove hardcoded description from instance groups created under net-ilb (#1417) 2023-06-05 09:35:17 +00:00
Ludo eb76a60208
update changelog 2023-06-05 11:19:45 +02:00
Ludovico Magnocavallo c439a66b27
Add notice to net-ilb module on routes (#1415)
* add support for routes

* boilerplate

* revert and add notice to README

* revert

* revert

* Fix README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-06-05 09:40:34 +02:00
Prabha Arya f2fe406a62
add alloydb module (#1403)
* add alloydb module

* fix typos

* fix typos

* Add default googleapi route creation to net-vpc

* Reuse existing logic to create default routes

* Update net-vpc README

* Fix modules and blueprints tests

* Rename to `create_googleapis_routes`

* Fix FAST tests

* Fix nva stages tests

* update changelog

* fix typos

* fix version

* rearrange variables

* fix lint

* fix lint

* fix README

* fix README

* fix comments

* fix variables

* fix READMEs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludo <ludomagno@google.com>
2023-06-04 10:12:32 +00:00
Ludo a7d694f9b0
update changelog 2023-06-03 16:21:17 +02:00
David Asaf 43ce70e1ed
Bump GH TF version to coincide with module requirements (#1414) 2023-06-03 06:20:11 +00:00
Julio Castillo d4de7219c5
Merge pull request #1411 from rosmo/jit-more
Add networksecurity to JIT identity list
2023-06-02 18:32:52 +02:00
Taneli Leppä 87db60de1f Add networksecurity to JIT identity list. 2023-06-02 16:11:16 +02:00
Ludovico Magnocavallo 884cb8b4bf
Ensure all modules have an `id` output (#1410)
* net-vpc

* a-d

* complete modules

* fix error
2023-06-02 16:07:22 +02:00
apichick f069562998
Added comment in the dns module, saying that inbound/outbound server policies are set in the net-vpc module (#1405)
Co-authored-by: Luca Prete <preteluca@gmail.com>
2023-06-02 11:35:25 +02:00
Alejandro Leal 7f4825feeb
Merge pull request #1407 from bluPhy/master
Multiple Updates in READMEs and wording
2023-05-31 13:53:00 -04:00
Alejandro Leal 6c11527762 Multiple Updates
modules/net-dedicated-vlan-attachment/variables.tf
modules/net-dedicated-vlan-attachment/README.md
CHANGELOG.md
blueprints/networking/ha-vpn-over-interconnect/README.md
2023-05-31 13:26:22 -04:00
Simone Ruffilli fda4daecff
Cosmetic documentation fixes 2023-05-31 13:51:15 +02:00
Simone Ruffilli 7f561565e7
HA VPN over Interconnect modules and blueprint (#1390)
Two new modules, net-ipsec-over-interconnect to establish HA VPN over existing VLAN attachments, and net-dedicated-vlan-attachment to create (optionally encrypted) vlan attachments, as well as the ha-vpn-over-interconnect blueprint that shows how to compose such modules to create a 99.9% encrypted interconnect.
2023-05-31 10:53:38 +00:00
Wiktor Niesiobędzki 3ac6ceac1e Add trigger SA for Cloud Run 2023-05-30 17:08:37 +02:00
Ludo 91daad5570
update changelog 2023-05-30 09:42:04 +02:00
Julio Castillo b1ea36b069
Merge pull request #1400 from GoogleCloudPlatform/jccb/default-vpc-routes
Add default googleapi route creation to net-vpc
2023-05-26 17:49:59 +02:00
Julio Castillo b6ce4222d1 Fix nva stages tests 2023-05-26 17:32:34 +02:00
Julio Castillo fb121b4d08 Fix FAST tests 2023-05-26 17:17:40 +02:00
Julio Castillo 0888cce3a5 Rename to `create_googleapis_routes` 2023-05-26 16:43:43 +02:00
Julio Castillo cecbd2072c Fix modules and blueprints tests 2023-05-26 16:38:41 +02:00
Julio Castillo 563b5fa0cb Update net-vpc README 2023-05-26 12:46:16 +02:00
Julio Castillo 1e8c58c88e Reuse existing logic to create default routes 2023-05-26 12:01:38 +02:00
Julio Castillo 7a91a7e41c Add default googleapi route creation to net-vpc 2023-05-26 10:55:35 +02:00
Julio Castillo 868507e932 Update changelo 2023-05-24 19:48:18 +02:00
Julio Castillo 8a3c81b022 Update changelog 2023-05-24 19:44:45 +02:00