eliamaldini
5a298780c1
changed variable name
2023-08-18 11:19:35 +02:00
eliamaldini
8e9d544be6
fixed description
2023-08-17 12:04:48 +02:00
Ludovico Magnocavallo
def2f476d1
Add support for conditions to `iam_members` module variables ( #1594 )
...
* project
* data-catalog-policy-tag
* dataproc
* folder
* iam-service-account
* kms
* net-vpc
* organization
* source-repository
* dataplex-datascan
2023-08-15 16:28:23 +02:00
Ludovico Magnocavallo
5689aacac2
Merge branch 'master' into elia-gcve
2023-08-14 11:56:47 +02:00
Ludovico Magnocavallo
adf2621727
Add new `iam_members` variable to IAM additive module interfaces ( #1589 )
...
* resource management modules
* data catalog policy
* dataproc
* service account
* kms
* net-vpc
* source repository
* dataplex datascan
* service account module variable order
2023-08-14 09:54:50 +00:00
eliamaldini
a509756f1b
GCVE module first release
2023-08-14 11:48:27 +02:00
Ludovico Magnocavallo
841459a059
Fix factory rules key in net firewall policy module ( #1587 )
...
* fix factory rules key in net firewall policy
* fix test
2023-08-14 07:52:36 +02:00
Erin Horning
2fa6369ba0
Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into ehorning/support-gcs-object-upload
2023-08-11 11:19:21 -06:00
Sam Bentley
b1679ad21a
Fix: Instance level stateful disk config ( #1578 )
...
* update doco
* fix bug in TF code
* change instance name in README to fix test
* revert disk name
* Update stateful.yaml
* fix examples and tests
---------
Co-authored-by: Julio Castillo <juliocc@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-08-11 15:25:17 +00:00
Ludovico Magnocavallo
f2e26b6a2c
Merge branch 'master' into jccb/test-print-failed-inventory
2023-08-11 12:10:31 +02:00
Julio Castillo
4d6574e0a1
Print inventory path when a test fails
2023-08-11 12:07:07 +02:00
Erin Horning
df1fded669
add support for object upload to gcs module
2023-08-10 21:43:53 -06:00
Mikhail Filipchuk
78095063f7
feat(modules/cloud-run): add gen2 exec env support ( #1582 )
2023-08-09 23:04:16 +02:00
Ludovico Magnocavallo
79373721df
Remove firewall policy management from resource management modules ( #1581 )
...
* rename firewall policy module, fix outputs
* add TOC to firewall policy module
* don't depend policy on parent id
* remove firewall policy from resource management modules
* remove factory conditionals
* fast net a and b
* fast stages
* fast tfdoc
* fast tfdoc
* remove unused test
* fix shielded folder blueprint
* fix shielded folder blueprint
2023-08-09 11:23:07 +00:00
Ludovico Magnocavallo
80ada0e8dd
Refactor firewall policy module ( #1576 )
...
* refactor module interface
* hierarchical attachment and example
* hierarchical rules and TODO
* split rules resources
* additional fields
* keep using a single resource for rules
* factory
* factory test
* boilerplate
* Prefix ingress and egress rule ids
* Tests for other firewall policy types
* Fix rule id and names
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-08-08 16:57:59 +00:00
Julio Castillo
959012e93e
Fix cloud run tests
2023-08-07 16:46:20 +02:00
Julio Castillo
42fdd08411
Fix cloud sql tests
2023-08-07 16:23:10 +02:00
Ludovico Magnocavallo
aecba0bbd0
Add support for ipv6 to net-vpc module ( #1568 )
...
* add support for ipv6
* fix test
2023-08-05 13:07:26 +02:00
Julio Castillo
bbe778e095
Allow custom route descriptions in net-vpc module
...
Related: #1491
2023-08-04 14:13:03 +02:00
Daniel Strebel
a0bd0d4414
Merge branch 'master' into feature/apigee-add-retention
2023-08-03 14:28:40 +02:00
Daniel Strebel
0906ddb8df
feat(apigee): add retention variable
2023-08-02 15:13:43 +02:00
Thinh Ha
43e73aba9a
add dataplex datascan base module ( #1545 )
2023-08-02 11:16:32 +00:00
Miren Esnaola
3b7e62990c
Added IPSEC_INTERCONNECT addresses to net-address module
2023-08-02 12:12:14 +02:00
Natalia Strelkova
4bb51a42ce
renaming net-vpc-swp to net-swp
2023-08-01 16:23:12 +02:00
Natalia Strelkova
f09d32a703
Merge branch 'master' into net-vpc-swp-optional-description
2023-08-01 13:05:04 +02:00
Ludovico Magnocavallo
b524aa137c
Peering module refactor ( #1547 )
...
* refactor net-vpc-peering module
* hub and spoke peering blueprint
* fast stages
* boilerplate
* fast tfdoc
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-07-29 21:33:57 +02:00
Wiktor Niesiobędzki
4998f1d376
Grant IAM rights to service identities in host project ( #1542 )
...
* [module/project] Grant IAM rights to service identities based on used services in host project
* [blueprints/factories/project-factory] enable granting IAM permissions in host VPC for service identities directly or by specifying services in use
2023-07-29 20:07:21 +02:00
Thinh Ha
0415cf64f1
rename cloud-dataplex to dataplex ( #1546 )
2023-07-29 14:31:18 +02:00
Ludovico Magnocavallo
5a534edf5c
update and refactor artifact registry module ( #1536 )
2023-07-28 09:54:36 +00:00
Mikhail Filipchuk
ec74f351f5
feat(cloudsql-instance): Add query insights config ( #1520 )
2023-07-21 20:14:34 +02:00
Natalia Strelkova
fde498800c
optional description attribute in variables
2023-07-20 12:14:39 +02:00
Wiktor Niesiobędzki
94daeab14b
Fail if run with Python below 3.10
2023-07-19 14:18:54 +02:00
Miren Esnaola
cacb0c02e2
Refactoring of dns module
2023-07-19 12:57:44 +02:00
Ludovico Magnocavallo
551dc581e8
Implement proper support for data access logs in resource manager modules ( #1497 )
...
* organization module
* rename iam_bindings_authoritative to iam_policy, fix tests
* add support for data access logs and iam policy to folder module
* test inventories
* add support for data access logs and iam policy to project module
2023-07-10 08:08:02 +00:00
Ludovico Magnocavallo
d9f7cef1e7
allow using a separate resource for boot disk ( #1496 )
2023-07-07 15:40:13 +00:00
Aurélien Legrand
623c886e95
Peering dashboard ( #1492 )
...
* Adding dashboard to monitor VPC and VPC peering group quotas
* Adding 1 ressource to the tests (dashboard)
* Adding dashboard and tests for other networking architecture
* Update test
2023-07-05 18:25:31 +02:00
Thinh Ha
10e15356ea
Add bigquery authorized resources ( #1480 )
...
* add bq authorized views, datasets, and routines
* fmt
* add backwards compatible test case
* minor docs clarification
* add docs table and fix lint tests
* fix docs
* fix tests
* fix more lint issues
* fix lint issue
* fix tests
* fix lint
* fix tests
* alphabetical order
* add detailed example to docs and corresponding test
* clarify docs for variables
* remove unnecessary depends_on
2023-06-30 18:44:57 +02:00
Ludovico Magnocavallo
638841c8d1
Rename network load balancer modules ( #1466 )
...
* update LB modules to new names
* update LB modules names
* update test paths
2023-06-26 07:50:10 +00:00
Ludovico Magnocavallo
ce647647cc
Add support for resource policies to compute vm module ( #1467 )
...
* instance schedule
* snapshot resource policy variable and resource
* tfdoc
* snapshot schedules
2023-06-26 06:49:05 +00:00
apichick
f6e918ffbd
Merge branch 'master' into dns-managed-zone-iam
2023-06-20 12:19:13 +02:00
Albert Lloveras
7cacc46b4b
fixup(project-factory): Use the correct KMS Service Agents attribute … ( #1446 )
...
* fixup(project-factory): Use the correct KMS Service Agents attribute name
* Add new KMS bindings to tests
* Update test resource counts
* Update README.md resource count
2023-06-19 23:53:08 +00:00
Miren Esnaola
ddfab0a0e4
Added iam for DNS managed zone to dns module
2023-06-19 12:53:38 +02:00
Ludovico Magnocavallo
bd3296bc46
Split Cloud Function module in separate v1 and v2 modules ( #1450 )
...
* split v1
* v2
* blueprints
* remove _http
2023-06-19 12:50:36 +02:00
Miren Esnaola
a424635221
Refactored apigee module and adjusted the blueprints accordingly
2023-06-19 09:01:32 +02:00
Taneli Leppä
81285065ca
Added module for Secure Web Proxy.
2023-06-13 08:49:58 +02:00
Ludovico Magnocavallo
c024eca320
Add custom tag support to FAST ( #1426 )
...
* initial implementation of custom tags
* depend org policies on tags
* fix test
* integrate default and custom org policy tags
2023-06-07 22:10:27 +00:00
lcaggio
39b27ac25e
Add support for Log Analytics on logging-bucket module and bump provider version ( #1423 )
...
* first commit
* Bump provider versions
* Fix tests
2023-06-07 23:23:28 +02:00
Ana Fernandez del Alamo
0fe3f165ed
Add VPN monitoring alerts to 2-networking and VPN usage chart
...
The Fast stage 2-networking-* currently adds a monitoring dashboard
for VPN metrics. This change adds an additional chart to monitor the
usage of the VPN bandwidth.
This change also adds the following monitoring alerts:
* VPN tunnel established
*
[VPN bandwidth](https://cloud.google.com/network-connectivity/docs/vpn/how-to/viewing-logs-metrics#define-bandwidth-alerts )
To configure the alerts, there is a new `alert_config` variable with
defined default values.
The alerts are created in the stage `b` by default. In the stages a,
c, d, and e, the alerts are created if the user creates the On-prem
VPN.
To disable the creation of alerts, add the following to
`terraform.tfvars`:
```
alert_config = {
vpn_tunnel_established = null
vpn_tunnel_bandwidth = null
}
```
2023-06-06 13:49:21 +01:00
Prabha Arya
f2fe406a62
add alloydb module ( #1403 )
...
* add alloydb module
* fix typos
* fix typos
* Add default googleapi route creation to net-vpc
* Reuse existing logic to create default routes
* Update net-vpc README
* Fix modules and blueprints tests
* Rename to `create_googleapis_routes`
* Fix FAST tests
* Fix nva stages tests
* update changelog
* fix typos
* fix version
* rearrange variables
* fix lint
* fix lint
* fix README
* fix README
* fix comments
* fix variables
* fix READMEs
---------
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludo <ludomagno@google.com>
2023-06-04 10:12:32 +00:00
Wiktor Niesiobędzki
3ac6ceac1e
Add trigger SA for Cloud Run
2023-05-30 17:08:37 +02:00
Julio Castillo
cecbd2072c
Fix modules and blueprints tests
2023-05-26 16:38:41 +02:00
Alejandro Leal
0ad21351c0
Merge branch 'master' into master
2023-05-15 14:25:42 -04:00
Alejandro Leal
87cd83f5c0
Several updates
...
Several updates
2023-05-13 23:51:46 -04:00
Julio Castillo
d20a078134
Cloud NAT rules support
2023-05-12 16:20:38 +02:00
Julio Diez
252be12bd4
Update README showing the Shared VPC use case
2023-05-05 19:38:34 +02:00
Julio Diez
9eea6e3bbc
Update pytest inventory file to meet module change
2023-05-05 19:36:46 +02:00
Prabha Arya
23299f7bd7
Add cloud dataplex module ( #1308 )
...
* Add dataplex module
* fix dataplex test
* resolve comments
* python test removed
* Change variable desc
* refactor variables
* fix typos
* fix assets & zones resources
* fix linting error
* fix tests
* fix typo
2023-05-05 09:26:46 +02:00
Ludovico Magnocavallo
efb0ebe689
Switch FAST networking stages to network policies for Google domains ( #1352 )
...
* peering stage implementation
* vpn stage implementation
* tfdoc
* tests
* add most supported google domains
* align all net stages
* add support for factory to DNS response policy module
* use dns policy factory in network stages
* boilerplate
2023-05-04 07:38:40 +02:00
Julio Castillo
ee4a908b10
Remove last remaining legacy fixture
2023-04-25 15:12:32 +02:00
Julio Castillo
20ccf7416f
Enable parallel tests
2023-04-25 15:12:11 +02:00
Julio Castillo
b097d297ff
Extend tests to use lockfile if available
...
This commints allows the test framework to use a lockfile generated
within the tools/lockfile directory. This allows reusing the provider
cache and also running tests in parallel.
2023-04-25 15:12:11 +02:00
Julio Castillo
e61df0aa3b
Deprecate plan runner fixture and all its variants
2023-04-21 17:52:30 +02:00
Julio Castillo
df7cf3d278
Migrate compute-mig tests
2023-04-21 17:51:20 +02:00
Julio Castillo
cb13d481d6
Migrate cloud-function tests
2023-04-21 17:51:20 +02:00
Julio Castillo
eab9053e16
Migrate billing-budget tests
2023-04-21 17:51:20 +02:00
Julio Castillo
1649787905
Migrate kms tests
2023-04-21 17:51:20 +02:00
Julio Castillo
1c7f8f5907
Migrate bigquery-dataset tests
2023-04-21 17:51:20 +02:00
Julio Castillo
230a1034ec
Migrate net-address tests
2023-04-21 17:51:19 +02:00
Julio Castillo
924230eb12
Migrate gke-hub tests
2023-04-21 17:51:19 +02:00
Julio Castillo
4abe5e2baf
Migrate net-ilb tests
2023-04-21 17:51:19 +02:00
Julio Castillo
c819305a42
Migrate apigee tests
2023-04-21 17:51:19 +02:00
Avinash Jha
e881537f87
Separating GKE Standard and Autopilot Modules ( #1330 )
...
* separating GKE Standard and Autopilot Modules
* Changes for Updating the terraform and provide versions
* Changes for Autopilot Readme
* Changes for Autopilot Variable
* Changes for Autopilot Readme
* Changes for Autopilot Readme
* Changes for Blueprint
* Changes for Blueprint ReadMe
* Changes for gke-standard-cluster dependency
* Changes for gke-standard-cluster in gke-fleet
* Changes for gke-standard-cluster in cluster-mesh-gke-fleet-api
* python formatting
* python formatting
* python formatting
* GKE module naming convention
* Readme Changes
* test module
* Removing comment code from Autopilot
2023-04-21 12:08:13 +00:00
Julio Castillo
4770cb06fd
Migrate cloudsql-instance examples
2023-04-17 09:17:54 +02:00
Julio Castillo
461f7780c2
Migrate bigtable-instance tests
2023-04-17 09:17:54 +02:00
Julio Castillo
5f82938739
Migrate cloud-identity-group tests
2023-04-17 09:17:54 +02:00
Julio Castillo
771dd02b18
Migrate logging-bucket tests
2023-04-17 09:17:54 +02:00
Julio Castillo
0150e97e51
Migrate endpoints tests
2023-04-17 09:17:54 +02:00
Julio Castillo
3dd27b6248
Migrate container-registry tests
2023-04-17 09:17:54 +02:00
Julio Castillo
01b9921f5c
Migrate PubSub tests
2023-04-17 09:17:54 +02:00
Julio Castillo
1927b138d6
Migrate secret-manager tests
2023-04-17 09:17:54 +02:00
Julio Castillo
a2bffc7302
Migrate service-directory tests
2023-04-17 09:17:54 +02:00
Julio Castillo
ed49f3db39
Migrate source repository tests
2023-04-17 09:17:54 +02:00
Julio Castillo
f5e1717319
Migrate VPC-SC tests to examples
2023-04-17 09:17:54 +02:00
Julio Castillo
2d4bd5a244
Remove net-interconnect-attachment-direct
2023-04-14 11:01:54 +02:00
Julio Castillo
eca0a9583e
Add inventories to net-vpc-firewall tests
2023-04-12 14:04:58 +02:00
Fawzi
2ff0b47218
create firewall_policy_enforcement_order.yaml test
2023-04-11 23:40:05 +10:00
Ludovico Magnocavallo
865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider ( #1306 )
...
* add support for new attributes to bigquery module
* bump provider versions
2023-04-05 14:22:52 +00:00
Luca Prete
a9cba47ce8
Add FAST stage 2-networking-e-nva-bgp (NVA+NCC)
...
Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Simone Bruzzechesse <bruzzechesse@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2023-04-04 20:41:04 +02:00
Ludovico Magnocavallo
bc2d9372aa
Fix urlmap in ILB L7 module ( #1299 )
...
* port tests to new format
* add test to catch error and fix urlmap
* boilerplate
* boilerplate
2023-04-03 15:47:37 +02:00
Ludovico Magnocavallo
92b71a5098
Refactor cloud run module to use optionals and support all features ( #1293 )
...
* refactor cloud run resource and variables
* vpc connector variables and resource
* refactor env variable, combine and fix env examples
* fix volume example
* fix traffic split example
* fix eventarc/pubsub example
* fix eventarc/audit log example
* fix SA examples, fix examples formatting
* refactor eventarc variable
* tfdoc
* add IAM to example
* add examples for revision annotations and serverless connector
* fix new examples
* remove legacy module tests
* blueprint tests
* Add tests to cloud-run module
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-04-01 14:06:29 +02:00
Valerio Ponza
1fb7e114fd
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
Valerio Ponza
935e95de2a
add Backup for GKE support
2023-03-30 12:47:39 +02:00
Wiktor Niesiobędzki
9005a51a95
Use example testing instead custom test
2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki
9a0137bcfc
Add test veryfing multiple filenames are used by default
2023-03-27 14:13:38 +02:00
Ludovico Magnocavallo
28da881c3f
DNS Response Policy module ( #1276 )
...
* dns response policy module
* tfdoc
2023-03-26 17:42:57 +02:00
Ludovico Magnocavallo
3d41d01efc
FAST plugin system ( #1266 )
...
* plugin folder, gitignore, serverless connector example
* add support to fast plugin variables and outputs to tfdoc
* rename folder, READMEs
* add variable description
* show diffs
* check documentation, use multiple files
* debug check doc
* try a different glob
* debug tfdoc names
* more debug
* and even more debug
* fix gitignore
* fix links
* support extra files in tests
* fix fixture, switch stage 2 peering to new tests
* tfdoc
* Allow globs in extra files
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-03-24 12:28:32 +00:00
Ludovico Magnocavallo
5fb17cb3ac
Widen scope for prod project factory SA to dev ( #1263 )
...
* restrict storage role on outputs bucket for stage SAs
* grant prod project factory SA authority over prod and dev org policies
* network stages delegated grants on dev to prod pf SA
* security grants to prod pf SA on dev
* tfdoc
* tests
2023-03-17 16:24:55 +00:00
Ludovico Magnocavallo
8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module ( #1259 )
...
* initial implementation, no tests
* change interface, align tests
* add examples ToC
* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo
112d9a8d9c
Allow using existing boot disk in compute-vm module ( #1241 )
...
* allow using existing boot disk in compute-vm module
* allow setting initialize params to null
* tests
* fast
* blueprints
2023-03-12 10:53:59 +01:00
Ludovico Magnocavallo
6ba0f8b0ba
allow overriding name in net-vpc subnet factory ( #1239 )
2023-03-11 09:30:42 +01:00