Commit Graph

4149 Commits

Author SHA1 Message Date
Julio Castillo 563b5fa0cb Update net-vpc README 2023-05-26 12:46:16 +02:00
Julio Castillo 1e8c58c88e Reuse existing logic to create default routes 2023-05-26 12:01:38 +02:00
Julio Castillo 7a91a7e41c Add default googleapi route creation to net-vpc 2023-05-26 10:55:35 +02:00
Julio Castillo 868507e932 Update changelo 2023-05-24 19:48:18 +02:00
Julio Castillo 8a3c81b022 Update changelog 2023-05-24 19:44:45 +02:00
Julio Castillo 7b9e2aeb09 Update changelog 2023-05-24 19:28:41 +02:00
Julio Castillo 584a2e055b
Merge pull request #1393 from GoogleCloudPlatform/juliocc-patch-1
Update README.md
2023-05-24 12:59:13 +02:00
Julio Castillo e479d9815b
Merge branch 'master' into juliocc-patch-1 2023-05-24 12:46:04 +02:00
Benoît Sauvère aa80109081
allow to configure `stack_type` in the GKE modules (#1395)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-24 10:19:43 +00:00
Ludovico Magnocavallo 4aa99ea829
allow setting identities in egress policies (#1394) 2023-05-24 12:05:16 +02:00
Julio Castillo d22bf2ec6b
Update README.md 2023-05-24 11:34:21 +02:00
Gustavo Valverde 00cac9148a
fix(stages): only add sandbox SA when `sandbox` feature is enabled (#1391)
If you have the `project_factory` feature enabled, but not the `sandbox` feature (as it's not a requirement on your org), when doing a `terraform apply` on `1-resman` it raises this errors as it's expecting the wrong feature when creating the sandbox SA

```
│ Error: Invalid index
│ 
│   on branch-sandbox.tf line 68, in resource "google_organization_iam_member" "org_policy_admin_sandbox":
│   68:   member = module.branch-sandbox-sa.0.iam_email
│     ├────────────────
│     │ module.branch-sandbox-sa is empty tuple
│ 
│ The given key does not identify an element in this collection value: the collection has no elements.
```
2023-05-24 05:17:35 +00:00
dependabot[bot] d245088fa1
Bump requests in /blueprints/cloud-operations/network-dashboard/src (#1389)
Bumps [requests](https://github.com/psf/requests) from 2.28.1 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.28.1...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 05:37:15 +00:00
Julio Castillo aa850ead5f
Merge pull request #1387 from GoogleCloudPlatform/jccb/cb-default-sa
Add default Cloud Build SA to project module
2023-05-22 19:25:17 +02:00
Julio Castillo fddf8b52bc Fix sort order 2023-05-22 19:11:33 +02:00
Julio Castillo 3e67fc00ca Add default Cloud Build SA to project module 2023-05-22 19:11:33 +02:00
Ana Fernandez 00efd6099f
Merge pull request #1388 from GoogleCloudPlatform/afda16/firewall-validator-argument
Firewall Validator fix target_service_accounts ref
2023-05-22 15:49:38 +01:00
Ana Fernandez del Alamo 4129eb11ae Firewall Validator fix target_service_accounts ref
The Firewall Validator schema configuration contains a field
`target_service_account`. This should be updated to
`target_service_accounts` to match the `google_compute_firewall`
Terraform resource argument:

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_firewall#target_service_accounts
2023-05-22 15:28:48 +01:00
Ana Fernandez 8254303dc3
Merge pull request #1386 from GoogleCloudPlatform/afda16/logging-bucket-cmek
Support CMEK encryption in logging-bucket module
2023-05-22 15:28:15 +01:00
Ana Fernandez del Alamo a5bbd09776 Support CMEK encryption in logging-bucket module
We have a use case, Local Controls, that requires to configure
CMEK with Logging buckets. This commit adds an optional variable to
configure CMEK in the `logging-bucket` module. By default the Logging
bucket won't use CMEK encryption.

To configure CMEK for Logging buckets it's also required to add the
correct permissions to the bucket service account. For more information
and a Terraform example, see:

https://cloud.google.com/logging/docs/routing/managed-encryption-storage

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/logging_project_bucket_config#example-usage
2023-05-22 15:12:27 +01:00
Ludovico Magnocavallo e0911c6291
Add conditional org admin role to sandbox SA (#1385)
* add org admin conditional role to sandbox SA

* tfdoc
2023-05-21 10:48:41 +02:00
Roberto Jung Drebes d2f0b17ec4
Allows groups from other orgs/domains (#1383)
* Allows groups from other orgs
2023-05-17 11:07:47 +02:00
Bharath KKB 47ae6dc7c3
chore: update mlops blueprint metadata (#1382) 2023-05-17 07:41:57 +00:00
lcaggio 40656a23de
Minimal Data Platform - Make components optional (#1380)
make some components optional: Composer and Data Proc history server.
2023-05-16 14:08:03 +02:00
Alejandro Leal 6a89d71e96
Update to multiple README.md (#1379)
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
Julio Castillo 56132ffb03
Merge pull request #1378 from bluPhy/master
Updates to blueprints/data-solutions/shielded-folder
2023-05-16 07:28:33 +02:00
Alejandro Leal 31c1c8534a Updates to blueprints/data-solutions/vertex-mlops
Updates to blueprints/data-solutions/vertex-mlops
2023-05-15 19:41:55 -04:00
Alejandro Leal a0beec747e README to blueprints/data-solutions/shielded-folder 2023-05-15 17:46:48 -04:00
Julio Castillo 5bd3aa4d5f
Merge pull request #1375 from bluPhy/master
Several updates
2023-05-15 23:08:18 +02:00
Alejandro Leal 11f7f3efed Reverted variables.tf metadata.yaml README.md to commit 85407109c8 2023-05-15 16:45:13 -04:00
Alejandro Leal 65e6ef98fa Reverted README.md to commit 85407109c8 2023-05-15 16:34:18 -04:00
Alejandro Leal a2a2942e2c Update README.md 2023-05-15 14:50:47 -04:00
Alejandro Leal 0ad21351c0
Merge branch 'master' into master 2023-05-15 14:25:42 -04:00
Natalia Strelkova 85407109c8
Merge pull request #1377 from GoogleCloudPlatform/fast-home-path-fix
Fixed home path
2023-05-15 13:29:02 +02:00
Natalia Strelkova c4ec4868c2
Merge branch 'master' into fast-home-path-fix 2023-05-15 13:16:55 +02:00
Natalia Strelkova f5b10fa3da
Fixed home path 2023-05-15 12:55:43 +02:00
Alex Ostapenko 7861ea74b8
fixed permissions for security stage SA (#1376)
it should be able to use automation project
as a quota project, hence it needs `serviceusage.serviceUsageConsumer`
role
2023-05-15 10:20:33 +00:00
Julio Castillo 78ed6a8af6
Merge pull request #1372 from GoogleCloudPlatform/jccb/nat-rules
Cloud NAT rules support
2023-05-14 15:42:34 +02:00
Ludovico Magnocavallo 2cbd85c8e0
Merge branch 'master' into jccb/nat-rules 2023-05-14 15:29:52 +02:00
Manuel Aller dd1e5dc463
added the export_public_ip_routes variable in the net-vpc-peering mod… (#1374)
* added the export_public_ip_routes variable in the net-vpc-peering module to control the google_compute_network_peering resource created

* adding period to the variable description
2023-05-14 15:29:24 +02:00
Alejandro Leal 87cd83f5c0 Several updates
Several updates
2023-05-13 23:51:46 -04:00
apichick 60d579be4d
Merge pull request #1373 from apichick/cloud-functions-cpu
Made available CPUs configurable in Cloud Functions module
2023-05-13 09:59:35 +02:00
Julio Castillo 8e1e761577
Merge branch 'master' into cloud-functions-cpu 2023-05-13 09:45:10 +02:00
Miren Esnaola 4df6c90d12 Made available CPUs configurable in Cloud Functions module 2023-05-12 21:36:22 +02:00
Julio Castillo d20a078134 Cloud NAT rules support 2023-05-12 16:20:38 +02:00
Julio Castillo b153474468
Merge pull request #1365 from merit/master
feat(net-cloudnat): add toggle for independent endpoint mapping and dynamic port allocation
2023-05-12 15:38:00 +02:00
Jay Schwerberg 20b8002602
feat(net-cloudnat): add config_port_allocation configuration block 2023-05-11 12:20:43 -07:00
Julio Castillo 7d9f52298c
Merge pull request #1367 from fawzihmouda/fawzihmouda/ncc-typo
fix routes priority typo
2023-05-09 16:26:24 +02:00
Julio Castillo b8b6f0dcc2 Add versions.tf to ncc-spoke-ra module 2023-05-09 16:00:13 +02:00
Fawzi ac349332c4 fix routes priority typo 2023-05-09 21:28:56 +10:00