zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
764 Commits 3 Branches 352 Tags 59 MiB
Commit Graph

52 Commits

Author SHA1 Message Date
Julio Castillo 0ce81743f2
Update CAI example (#274) 
* Add Asset Inventory API to project module

* Create feed from terraform in CAI example

* Fix tests

* sort services

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2021-07-08 08:57:27 +02:00
lcaggio 3d84897b4b
Create pubsub service identity if service is enabled (#270) 
* Create  service identity if service is enabled

* remove dry run mode

* fix tests

* Improve for_each logic
 2021-06-25 09:26:33 +02:00
Lorenzo Caggioni f3390839ab Fix dependencies 2021-06-15 09:44:15 +02:00
Lorenzo Caggioni d03773df46 Fix dependencies 
Fix role
 2021-06-15 00:54:59 +02:00
Lorenzo Caggioni 741de90eed Fix test 2021-06-14 19:03:02 +02:00
Lorenzo Caggioni 12e69c71e3 Add Service Identity for Secret Manager 2021-06-14 18:35:53 +02:00
lcaggio 1a7fe48c46
Merge pull request #263 from terraform-google-modules/lcaggio-kms-prj 
Add IAM cryptDecrypt role to robot service account on specified keys
 2021-06-11 18:12:58 +02:00
Lorenzo Caggioni 4a2ba0c36c Add example 2021-06-11 18:02:35 +02:00
Lorenzo Caggioni 136fe03e1d Remove extralines 2021-06-11 17:41:19 +02:00
Lorenzo Caggioni dc01db0426 Update Readme and rename variable 2021-06-11 17:38:27 +02:00
Lorenzo Caggioni 476d2c79e9 Add IAM cryptDecrypt role to robo service account on specified keys 2021-06-11 16:00:20 +02:00
lcaggio efb52eeb6c
Move `bq` robot service account into the robot service account project output (#262) 2021-06-11 13:02:30 +02:00
Ludovico Magnocavallo f8413cc98e
Add support for group-based IAM to resource management modules (#229) 
* group_iam support for organization

* group_iam support for folder

* fix typo in variable description

* add group_iam to project module

* update project module README
 2021-04-11 14:48:16 +02:00
Julio Castillo 7ca2e60399 Fix tests 2021-03-31 10:45:35 +02:00
Julio Castillo 94b1a439ee Fix IAM bindings for logging sinks 
- Move to non-authoritative bindings to allow multiple sinks to write to
  the same destination
- Allow automatically adding logging bucket IAM bindings
 2021-03-31 09:59:28 +02:00
lcaggio 2916f4e078
Project Module: add VPC-SC support (#212) 
* Add VPC-SC support for Regions, device policy and access policy dependency.

* fix compute mig module test

* Fixes

* Fix example

* Add VPC-SC support in the project module.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2021-03-19 20:12:29 +01:00
Julio Castillo f5fb28b4b2
Merge pull request #203 from terraform-google-modules/jccb/log-buckets 
Support for Cloud Logging buckets
 2021-03-05 08:43:38 +01:00
Ludovico Magnocavallo 86b88e0634
fix modules version constraints (#206) 2021-03-05 08:41:59 +01:00
Ludovico Magnocavallo 8e44734fe5
set version for google-beta provider (#205) 2021-03-05 08:20:48 +01:00
Julio Castillo ad68fc4dfa Support for cloud logging buckets 2021-03-03 14:23:59 +01:00
Julio Castillo 2d9d81e061 Add support for essential contacts 2021-02-24 18:34:17 +01:00
Ludovico Magnocavallo 7e429425fe
Fix IAM additive (#200) 
* Fix wrong iam_addictive variable input (#197)

iam_additive variable from Project module expect { "roles" = list(string) } input

Co-authored-by: Emre Turan <emre@unl.global>

* fix project example

Co-authored-by: Emre Turan <turan.emre@gmail.com>
Co-authored-by: Emre Turan <emre@unl.global>
 2021-02-16 20:01:18 +01:00
Julio Castillo 1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Julio Castillo 5e983f55a7 Make `project_id` output non-dynamic 2021-02-15 09:22:19 +01:00
Julio Castillo 1af70c748c Rename "grant" to "iam" in sink variables 2020-12-05 12:39:06 +01:00
Julio Castillo 2c0f949f07
Logging sinks and exclusions (#178) 
* Add sink support to folder module

* Make folder creation optional.

* Add logging sinks to the organization module

* Add logging sink support to project module

* Update readme
 2020-12-05 08:31:35 +01:00
Julio Castillo b2d8052b0e
Update modules/project/README.md 
Remove `project_create = false` to all tests to run
 2020-11-25 14:44:31 +01:00
Andras Gyömrey e0a45b61c5
fix README (#176) 2020-11-25 14:21:22 +01:00
Ludovico Magnocavallo 6610b79b6c
Revert iam_additive behaviour (#160) 
* revert iam_additive format, add iam_additive_members

* revert iam_additive format, add iam_additive_members

* update CHANGELOG
 2020-11-09 11:29:08 +01:00
Julio Castillo eecdee63e6 Make examples in READMEs runnable and testable 2020-11-07 10:28:33 +01:00
Julio Castillo 1df08caa7f Update READMEs with new variable names 2020-11-06 09:43:12 +01:00
Ludovico Magnocavallo f9e4a1d614 bump required tf version in modules using conditions 2020-11-06 08:43:06 +01:00
Ludovico Magnocavallo d47478a466 rename iam members variable in project module 2020-11-04 16:22:00 +01:00
Ludovico Magnocavallo d0ed3b7614 rename iam additive variable in project module 2020-11-04 16:17:12 +01:00
Ludovico Magnocavallo 8dc131550f fix variable validation in project module to allow for null values 2020-11-04 12:06:01 +01:00
Julio Castillo 7bd31ccf52 Added some basic variable validation 2020-11-03 08:12:11 +01:00
Julio Castillo 405a3c23d5 Update project README 2020-10-30 19:06:20 +01:00
Julio Castillo 78efb63b4a Remove iam_roles from project module 2020-10-29 23:51:34 +01:00
Julio Castillo 5fd8720c7a
Add service project configuration options to project module (#142) 2020-09-24 10:41:44 +02:00
Luca Prete f2c80e17f1
[#138] Update copyright headers to 2020 (#139) 
Co-authored-by: Luca Prete <lucaprete@google.com>
 2020-09-23 11:07:03 +02:00
Julio Castillo 1c0dd4dd13
Fix project outputs.tf 2020-08-26 12:15:44 +02:00
Ludovico Magnocavallo 67d03fd07c
support Shared VPC in project module (#112) 2020-07-09 15:15:14 +02:00
Ludovico Magnocavallo 5fa4ea5518 regenerate variables/outputs tables in modules 2020-07-02 08:29:38 +02:00
vanessabodard-voi 5af022a3ee
refactor IAM additive bindings variables (#103) 
* Invert the list for role/member mapping so that member is the key

* Add iam_additive_bindings to replace iam_additive_members and iam_additive_roles, change test suite accordingly

* attribute 'mode' added as it would error without

* Update Readme to reflect the new variable iam_additive_bindings

* test branch access

* iam_additive_bindings to replace iam_additive roles and iam_additive_members

* update foundation samples to new additive bindings format

* set bq dataset options in foundation environments to allow destroying

* trap exceptions raised during destroy in project module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
 2020-07-02 08:28:26 +02:00
Lorenzo Caggioni 8b252fc261 Fix 2020-06-30 18:05:37 +02:00
lcaggio 22f3451573
Merge branch 'master' into gcs-to-bq 2020-06-30 16:58:57 +02:00
Lorenzo Caggioni 9a4ec24093 First commit. 
TODO:
 - fix error on destroy
 - improve robot service account handling
 2020-06-26 21:45:41 +02:00
Ludovico Magnocavallo ec765857cb
Make project creation optional in project module (#99) 
* make project creation optional in project module

* add variable to optionally configure project activation

* add explicit dependency on custom roles to additive bindings

* make parent variable optional

* add test for null parent

* fix custom roles output
 2020-06-25 10:04:57 +02:00
Ludovico Magnocavallo 778362cf95
Better service account outputs in project module (#82) 
* rationalize project module product service accounts output

* fix typos in shared vpc example service accounts

* add extra robot service accounts

* update CHANGELOG
 2020-06-01 09:32:47 +02:00
Ludovico Magnocavallo b3df6598d4 switch project service from resourceviews to container in examples 2020-05-07 21:36:37 +02:00