Julio Castillo
25955b158a
Merge branch 'master' into fast/gke2
2022-07-12 12:16:04 +02:00
Julio Castillo
e7bc11e6b9
Add gke SAs to outputs
2022-07-12 12:10:39 +02:00
Ludovico Magnocavallo
f42b0f06e4
add billing IAM for billing group ( #730 )
2022-07-11 08:26:13 +02:00
Simone Ruffilli
0d9fac316a
FAST: Resman: Update billing.tf ( #721 )
...
* FAST: Resman: Update billing.tf
Add billing.costsManager to the PF SAs to allow it to create billing alerts.
* fix linting
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-06 16:10:14 +03:00
Michael Gfeller
ea7827d1ad
FAST - added missing format argument in branch-pf-dev-sa-cicd
...
In the module branch-pf-dev-sa-cicd, the calls to the "format" function were missing the argument var.automation.federated_identity_pool.
2022-07-05 11:44:33 +02:00
Ludovico Magnocavallo
8585852ae6
fix #714 ( #715 )
2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo
a3ea8bed8b
wip
2022-07-05 10:07:50 +03:00
Ludovico Magnocavallo
9a3128e716
wip
2022-06-30 20:20:14 +02:00
Ludovico Magnocavallo
7b5ced7e15
stage 01
2022-06-30 18:22:57 +02:00
Ludovico Magnocavallo
7786dd3d90
Merge branch 'master' into fast/gke2
2022-06-30 11:30:52 +02:00
Ludovico Magnocavallo
d6a81fb662
wip
2022-06-30 11:00:57 +02:00
Ludovico Magnocavallo
ee7a615a58
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-06-29 17:06:55 +02:00
Michael Gfeller
c66bb0e1c3
Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into mgfeller/fast-readme-tfvars-auto
2022-06-29 15:29:43 +02:00
Ludovico Magnocavallo
66c4fffd76
FAST: configuration switches for features ( #703 )
...
* example implementation of top-level switches
* data platform as a fast feature
* decouple teams and project factory
* teams disable fixes
* optional pf
* networking stage
* remove var from stage 2s, security
2022-06-28 17:33:37 +02:00
Julio Castillo
2da28e5954
Update CLEANUP.md
2022-06-28 11:28:57 +02:00
Michael Gfeller
34650ae621
FAST - updated some READMEs about usage of *.auto.tfvars files
...
Updated information about using the auto generated tfvars files in the "Variable configuration" section for some stages.
Mainly about using globals.auto.tfvars.json instead of copying terraform.tfvars from bootstrap stage.
2022-06-28 11:27:21 +02:00
Julio Castillo
07b00c34fe
Bump providers versions and pin versions for tests
2022-06-28 10:20:40 +02:00
Michael Gfeller
df9bdc2fb0
FAST - trigger GitHub workflow also on PR synchronize event ( #702 )
...
Add synchronize to the pull_request trigger so that the workflow is also run when the source branch is updated.
2022-06-27 10:13:41 +02:00
Ludovico Magnocavallo
dfb447a2c4
Merge branch 'master' into fast/gke2
2022-06-23 13:50:28 +02:00
Ludovico Magnocavallo
ed4b301a17
align subnets between vpn and peering network stages
2022-06-23 09:05:20 +02:00
Ludovico Magnocavallo
fb1d31551f
fix tfdoc
2022-06-23 08:55:28 +02:00
Ludovico Magnocavallo
744417f22f
fix boilerplate
2022-06-23 08:52:36 +02:00
Ludovico Magnocavallo
666d8a469c
Merge branch 'master' into fast/gke2
2022-06-23 08:34:09 +02:00
Ludovico Magnocavallo
f9775f61c9
Merge branch 'master' into lcaggio/data-p-200622
2022-06-23 08:11:47 +02:00
Ludovico Magnocavallo
c59ce76e97
Add repository_owner to GitHub identity attributes ( #699 )
...
* add repository_owner to GitHub identity attributes
* fix errors on null identity provider custom settings
2022-06-23 08:06:25 +02:00
Lorenzo Caggioni
b10d091a98
Fix README
2022-06-23 07:16:59 +02:00
Lorenzo Caggioni
ceb611bb81
Remove custom role and rely on conditions.
2022-06-23 07:04:35 +02:00
lcaggio
5c653638bc
Merge branch 'master' into lcaggio/data-p-200622
2022-06-22 16:13:28 +02:00
Taneli Leppä
c3fdc62ff2
Allow creating repositories in Gitlab via Terraform.
2022-06-21 15:12:03 +02:00
lcaggio
d9ad654281
Merge branch 'master' into lcaggio/fix-readme-20220620
2022-06-21 07:54:42 +02:00
Alexander Meissner
9691577638
Fast/group creation gif ( #676 )
...
* Updated Readme with Group creation GIF
Added visual representation of checklist group creation.
* Update README.md
Added v1 version of group creation GIF.
* localize gif
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-06-21 07:19:52 +02:00
Lorenzo Caggioni
2ce4b002f1
Rename role
2022-06-20 22:23:18 +02:00
Lorenzo Caggioni
7625773dea
Fix tests
2022-06-20 22:05:22 +02:00
Lorenzo Caggioni
0b6f98db78
Add output logic
2022-06-20 17:48:39 +02:00
Lorenzo Caggioni
6edc80e282
Update READMEs
2022-06-20 17:27:28 +02:00
Lorenzo Caggioni
c464a3c8cc
Improve KMS: add custom role to handle keys
2022-06-20 17:13:25 +02:00
Lorenzo Caggioni
a1c61f089d
Add location support
2022-06-20 15:21:03 +02:00
Lorenzo Caggioni
d4eef71887
Fix links
2022-06-20 09:52:46 +02:00
Lorenzo Caggioni
26d8f0cf65
Fix stage-02 tfvars links
2022-06-20 09:11:09 +02:00
temiloluwa ademuwagun
4492b0cff7
corrected the wrong name reference
2022-06-17 10:36:19 +00:00
Antonio Lopez
aaa2bf2aca
Merge branch 'master' into master
2022-06-17 09:57:58 +02:00
Ludovico Magnocavallo
a09eb39a96
disable provider data source when not needed, explicitly depend on CI/CD SAs
2022-06-16 23:11:08 +02:00
Ludovico Magnocavallo
a35ed1ca0f
allow using cicd service accounts in build triggers
2022-06-16 22:16:43 +02:00
Ludovico Magnocavallo
da17d57863
fix tfdoc
2022-06-16 21:59:44 +02:00
Ludovico Magnocavallo
2b61efb722
add project number to sgae 1 values
2022-06-16 21:57:09 +02:00
Ludovico Magnocavallo
c87c645bf0
add missing try to stage 1 outputs
2022-06-16 21:56:48 +02:00
Ludovico Magnocavallo
f163bad220
add automation project number to stage 0 outputs
2022-06-16 21:56:18 +02:00
agusramirez@google.com
e3d91e84e4
sourcerepo and cloudbuild at 01-resman
2022-06-15 21:34:26 -05:00
agusramirez@google.com
2eb996d33d
sourcerepo and cloudbuild at 01-resman
2022-06-15 19:12:11 -05:00
ajlopezn
c91ec944f9
solved another link issue
2022-06-10 18:34:00 +02:00
Antonio Lopez
1a2bdcf6b7
Merge branch 'GoogleCloudPlatform:master' into master
2022-06-10 18:23:16 +02:00
ajlopezn
822e4b987a
solved links issue
2022-06-10 18:21:44 +02:00
ajlopezn
4658e5faa7
added variables required to be modified before applying again
2022-06-10 17:29:04 +02:00
ajlopezn
8da7fbd351
cleanup reference in readme
2022-06-10 17:16:11 +02:00
ajlopezn
a37af01203
fichero movido a fast/stages
2022-06-10 16:57:40 +02:00
ajlopezn
1dbd13fc4b
fichero movido a fast/stages
2022-06-10 16:47:24 +02:00
Antonio Lopez
a1a5011cd1
Update CLEANUP.md
...
link to gcloud beta compute shared-vpc associated-projects remove doc
2022-06-10 16:41:10 +02:00
Antonio Lopez
77f3048a8c
Update CLEANUP.md
...
include comments in PR
2022-06-10 16:34:46 +02:00
Antonio Lopez
a262ed3941
Update CLEANUP.md
2022-06-10 16:20:29 +02:00
Antonio Lopez
21cfb69797
Update CLEANUP.md
...
delete spaces in headers
2022-06-10 16:03:10 +02:00
Julio Castillo
29ce5f666d
Simplify log_sink local
2022-06-10 12:25:26 +02:00
Julio Castillo
0bf1880431
Fix FAST audit logs when using pubsub as destination
...
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Ludovico Magnocavallo
f75c0021a1
fix #673 ( #674 )
2022-06-10 10:51:26 +02:00
Ludovico Magnocavallo
bb3f55fe9e
Fix Gitlab WIF attributes ( #671 )
2022-06-09 08:31:50 +02:00
Julio Castillo
f9b808b4bc
Fix permissions and update NVA and peering net stages for gke
2022-06-08 11:42:04 +02:00
Daniel Marzini
259afec97d
Leave MCS and MCI disabled
2022-06-08 11:42:04 +02:00
Julio Castillo
110d94067d
Squashing relevant changes from fast-dev-gke-marzi
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
Julio Castillo
d28dfc40b0
Enable GKE hub apis
2022-06-08 11:42:04 +02:00
Julio Castillo
66f87903a8
Enable GKE resource metering
2022-06-08 11:42:04 +02:00
Julio Castillo
9fabfafc63
Update gke stage to use contract setup
2022-06-08 11:42:02 +02:00
Julio Castillo
a4c0b22f4e
Move GKE example to dev
2022-06-08 11:41:52 +02:00
Julio Castillo
46af8fa72e
Use new project-level robot bindings
2022-06-08 11:41:52 +02:00
Daniel Marzini
5ff2286378
clusters creation improvement ( #509 )
...
* shared_vpc_self_link variable from stage2
* removing shared_vpc_self_link
* do not initial_node_count as node_count
2022-06-08 11:41:52 +02:00
Julio Castillo
740288ea94
Remove old test project
2022-06-08 11:41:52 +02:00
Julio Castillo
801a5ed42d
Add xpn admin to gke SAs on gke folders
2022-06-08 11:41:52 +02:00
Julio Castillo
f3f9a4a88c
GKE multitenant
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
Ludovico Magnocavallo
44ae2671b0
CI/CD support for Source Repository and Cloud Build ( #669 )
...
* add id to outputs
* initial cloud build implementation for stage 0
* comments
* stage 0
* stage 1, untested
* add support for IAM and CB triggers to source repository module
* refactor stage 0 to use sourcerepo module
* refactor stage 1 to use sourcerepo module
* file descriptions
* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Antonio Lopez
78becc22fa
Merge branch 'GoogleCloudPlatform:master' into master
2022-06-07 10:22:55 +02:00
Ludovico Magnocavallo
8040a4538c
clarify some admin bindings via comments ( #663 )
2022-06-05 19:48:26 +02:00
javiergp
fa321fc67c
Update README.md ( #667 )
...
* Update README.md
Fixed VPC SC example
* Update README.md
2022-06-05 19:43:14 +02:00
Antonio Lopez
02f8986a1e
Update CLEANUP.md
2022-06-03 13:38:05 +02:00
Antonio Lopez
2ace596ca8
Update CLEANUP.md
2022-06-03 13:22:49 +02:00
Antonio Lopez
5701348d3d
Update CLEANUP.md
2022-06-03 13:21:30 +02:00
Antonio Lopez
d7fd11b5fd
Update CLEANUP.md
2022-06-03 13:15:18 +02:00
Antonio Lopez
8d4ea4ec67
Update CLEANUP.md
2022-06-03 13:06:46 +02:00
Antonio Lopez
443a9b9538
Create CLEANUP.md
...
instructions to clean up FAST deployment
2022-06-03 13:02:42 +02:00
frits-v
9feb938bed
Update README.md ( #653 )
2022-05-12 08:01:18 +02:00
Ludovico Magnocavallo
e3ea387f0f
fix subnet schema ( #651 )
2022-05-09 11:53:57 +02:00
Simone Ruffilli
e9d06ba469
FAST: switch to SpotVM for NVAs
2022-05-04 09:59:47 +02:00
Ludovico Magnocavallo
1d7b442642
FAST - Refactor VPN tunnels ( #644 )
...
* tested
* tfdoc
2022-05-04 08:11:17 +02:00
Lorenzo Caggioni
e487f8d731
Update naming convention
2022-04-21 23:53:16 +02:00
Alexander Meissner
acd6719602
Adjusted Error Message of Supported Types
2022-04-19 11:10:21 +02:00
Alexander Meissner
7b30aa2c12
Added "gitlab" type to 01-resman Stage
2022-04-19 11:09:33 +02:00
Ludovico Magnocavallo
53fde432c4
Merge branch 'master' into alexmeissner/gitlab-template
2022-04-15 09:10:49 +02:00
Ludovico Magnocavallo
73a9136dc6
disable some org policies ( #631 )
2022-04-15 08:10:42 +02:00
Ludovico Magnocavallo
3b6de2531d
tfdoc
2022-04-15 02:20:39 +02:00
Ludovico Magnocavallo
473178010a
don't error out when no repositories are set
2022-04-15 02:19:46 +02:00
Alexander Meissner
74a919d203
Update variables.tf
...
Fixed formatting
2022-04-14 18:34:17 +02:00
alexmeissner
6df4fc1cff
Added Gitlab CI Template
...
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
Aleksandr Averbukh
2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets
2022-04-13 17:21:00 +02:00
Aleksandr Averbukh
73db258a38
Use new variable subnets_proxy_only instead of subnets_l7ilb for fast
2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo
eec0fd2fdf
FAST: allow changing tag names from variables in resman ( #628 )
2022-04-13 10:22:33 +02:00
Julio Castillo
2644627837
Remove broken link and ignore globals in fast stages
2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo
725f7effce
Initial MVP for CI/CD ( #608 )
...
* preliminary support for wif in stage 0
* IAM wif role
* IAM wif role TODO
* add support for external SA IAM to SA module
* add name output to SA module
* separate cicd SA
* tfdoc
* GITLAB principal (untested)
* make GCS name output static
* outputs bucket
* fix stage 1 test
* tweak outputs
* tfdoc
* move wif_pool to automation variable
* add support for top-level and repository providers
* add missing boilerplate
* fix branchless principal
* initial workflow
* symlink provider template in stages
* remove service accounts from stage 0 cicd tfvars
* add cicd interface variable to resman stage
* fix cicd variable in resman stage
* better condition on outputs_location
* fix last change
* change outputs_location type
* revert outputs_location change
* split outputs in stage 0
* update ci/cd temporary notes
* rename additive IAM resource in SA module
* split outputs in stage 1
* remove unused locals
* fix stage 1 tests
* tfdoc
* Upload action files to outputs_bucket
* Fix tests and README
* rename template, streamline outputs
* local templates and gcs output for all stage 2
* add workflows to local output files
* Use lowercase WIF providers everywhere
* Bring back suffix for workflow files
* Remove unused files
* Update READMEs
* preliminary CI/CD implementation for stage 1
* fix stage 1
* stage 1 cicd
* tfdoc
* fix tests
* readme and links for cicd and wif
* refactor wif providers
* refactor cicd for stage 1
* fix stage 1
* wif org policies
* split identity provider configuration from cicd
* add type attribute to cicd repositories
* valid cicd repositories have a workflow template
* refactor stage 01
* fix stage 01 tests
* minimal CI/CD documentation
* better check_links error reporting
* fix links
* Added Gitlab specific configurations
Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.
* Fixed TF formatting in identity providers.
* Changing identity provider audience to null
Changing identity provider audience to default to null.
* add instructions for renaming workflows
* address Julio's comments
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo
9bb2f91458
Fix a few import errors in FAST ( #620 )
...
* fix import errors in stage 0
* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Simone Ruffilli
c889ce8426
Updated DNS documentation ( #611 )
2022-04-05 10:02:26 +02:00
Lorenzo Caggioni
6f00caaaab
Handle Service Identity SA. Update IAM.md
2022-04-04 00:38:34 +02:00
Lorenzo Caggioni
e008fde9bb
Update READMEs and separate demo pipelines
2022-04-03 22:03:35 +02:00
lcaggio
ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag
2022-04-01 19:19:17 +02:00
Lorenzo Caggioni
15ba9559c5
Update READMEs
2022-04-01 18:44:18 +02:00
Lorenzo Caggioni
6d1207e1d7
Update FAST data foundation integration
2022-04-01 18:38:56 +02:00
Julio Castillo
0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker
2022-03-30 12:23:13 +02:00
Elia
1bc9929c81
Update vpn-spoke-prod.tf ( #602 )
...
Fixed region ew4
2022-03-30 10:20:10 +02:00
Luca Prete
2bb9e3f64e
[ #597 ] Fix link_checker
2022-03-28 09:43:00 +02:00
Julio Castillo
03c871097c
Remove moved blocks
2022-03-18 10:44:44 +01:00
Ludovico Magnocavallo
78664f3ba4
update fast net docs
2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo
01ee503c38
allow psa disabling in fast
2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo
22deb378a6
disable PSA in fast
2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo
fef3ed8c93
Fix missing service networking identity in project, PSA ( #585 )
...
* test
* test
* test
* fix
* tfdoc
* fix tests
* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo
a22cf80b60
Fix PSA ( #584 )
...
* Fix PSA
* fix typo
* fix vpn/peering diff
* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete
7c3d9beced
[ #576 ] net-vpc - Add the ability to export/import custom routes throu… ( #577 )
2022-03-11 14:40:44 +01:00
Simone Ruffilli
6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. ( #574 )
...
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Simone Ruffilli
2a4c3dc913
Update outputs.tf ( #571 )
2022-03-06 09:19:31 +01:00
Julio Castillo
ea79b339e9
Doc updates to reference new peering stage ( #565 )
...
* Few updates to reference new peering stage
* More updates to peering stage
* VPN -> HA VPN
* Fix broken links
2022-02-28 16:29:38 +01:00
Julio Castillo
cdecc199a4
Update README.md
2022-02-28 14:19:00 +01:00
Simone Ruffilli
fb90500adc
FAST: add 02-networking-peering stage. ( #561 )
...
* Networking with peering - initial commit
* README and tests
* Linter fixes
* Linter fixes
* Linter fixes
* Update README.md
* split out vpn/peering in separate files so the rest is identical
* fix dns for vpn and peering
* update tfdoc to support multiple outputs/variables files
* add peering variables
* update tfdoc for modules
* make it easier to spot errored docs
* fix doc
* yapf
* fix permadiff in firewall module source ranges
* FAST: Networking: DNS Fixes
* FAST: ability to toggle on-prem vpn creation
* FAST: fix outputs
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli
0d08c7d56a
Re-aligning PF vars post varpocalypse
2022-02-27 19:04:47 +01:00
Simone Ruffilli
26df0468b6
Adds autohealing to NVA MIGs
2022-02-27 10:57:21 +01:00
Simone Ruffilli
c21a59a490
FAST: use preemptable instances for demo NVA. Comment out test VMs.
2022-02-27 10:04:20 +01:00
Julio Castillo
e157a52d97
Rename sample project in fast project factory
2022-02-25 16:56:13 +01:00
Julio Castillo
31bf9b98d1
Swap xpnAdmin with custom xpnServiceAdmin for service projects
2022-02-25 12:19:10 +01:00
Simone Ruffilli
0d5d43b061
linter fixes
2022-02-24 15:13:34 +01:00
Simone Ruffilli
dc3a2ad7be
Fix tests on stages
2022-02-24 15:05:18 +01:00
Simone Ruffilli
c1390d3a6a
FAST PF: delete placeholder
2022-02-24 12:21:44 +01:00
Simone Ruffilli
3bab8d3ab9
FAST: Data Platform README.md fixes
2022-02-24 12:17:49 +01:00
Simone Ruffilli
62ae1cb7a1
FAST: Project Factory README.md fixes
2022-02-24 12:15:12 +01:00
Simone Ruffilli
fb039d1bb7
FAST: Security README.md fixes
2022-02-24 12:10:36 +01:00
Simone Ruffilli
d3d29836b8
FAST: Networking NVA stage fix
2022-02-24 12:01:54 +01:00
Simone Ruffilli
7ca1e6af5a
FAST: Networking README.md fixes
2022-02-24 11:48:56 +01:00
Simone Ruffilli
1af71244f3
FAST: Resman README.md fixes
2022-02-24 11:28:13 +01:00
Simone Ruffilli
ab4a8eb78a
FAST: README.md fixes
2022-02-24 11:21:06 +01:00
Ludovico Magnocavallo
c4b2f85a3b
README tweaks
2022-02-21 20:41:40 +01:00
Ludovico Magnocavallo
c74ea67987
minimal README tweaks
2022-02-21 14:52:25 +01:00
Ludovico Magnocavallo
7d8299b837
fix tag environment binding names in fast
2022-02-21 13:28:36 +01:00
Ludovico Magnocavallo
474bcbdd0e
Use tags and tag-based IAM conditions in FAST ( #553 )
...
* organization module
* folder module
* project module
* fix project binding
* environment tags
* use id instead of name for references
* environment bindings
* conditional org policy admin binding via tags
* rename pf service accounts and buckets
* update IAM docs
* kms module
* compute-vm
* fix compute-vm
* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo
4cb46fa19d
Update README.md
2022-02-19 08:28:35 +01:00
Ludovico Magnocavallo
98056b4457
Update README.md
2022-02-19 08:27:32 +01:00
Ludovico Magnocavallo
f258ff1998
fw rules
2022-02-19 07:59:30 +01:00
Lorenzo Caggioni
29e839e3a6
Fix
2022-02-18 22:20:32 +01:00
Lorenzo Caggioni
55c78a132f
Add network tag. Add KMS support in the DAG example.
2022-02-18 22:09:48 +01:00