Commit Graph

48 Commits

Author SHA1 Message Date
Simone Ruffilli 6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. (#574)
* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli c21a59a490 FAST: use preemptable instances for demo NVA. Comment out test VMs. 2022-02-27 10:04:20 +01:00
Julio Castillo 31bf9b98d1 Swap xpnAdmin with custom xpnServiceAdmin for service projects 2022-02-25 12:19:10 +01:00
Simone Ruffilli 7ca1e6af5a FAST: Networking README.md fixes 2022-02-24 11:48:56 +01:00
Ludovico Magnocavallo f258ff1998 fw rules 2022-02-19 07:59:30 +01:00
Lorenzo Caggioni 29e839e3a6 Fix 2022-02-18 22:20:32 +01:00
Lorenzo Caggioni 55c78a132f Add network tag. Add KMS support in the DAG example. 2022-02-18 22:09:48 +01:00
Ludovico Magnocavallo fb5d1adf9e composer working 2022-02-18 19:17:58 +01:00
Ludovico Magnocavallo 21a901c1dc assign net delegated grants by env 2022-02-18 08:38:36 +01:00
Ludovico Magnocavallo b147a4cc44 use all service accounts from stage1 in networking delegated grants 2022-02-18 08:21:25 +01:00
Ludovico Magnocavallo 4eca2ac11d
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-18 06:45:05 +00:00
Lorenzo Caggioni 04f054478d Fix poliscy admin role 2022-02-18 00:34:51 +01:00
Simone Ruffilli 8e48fdaf54
FAST: Net: remove landing from its metric_scope (#551)
* Update landing.tf
2022-02-17 18:13:40 +01:00
Julio Castillo 73c2233b9b Small fixes to DP 2022-02-16 18:52:17 +01:00
Ludovico Magnocavallo c24abed18d tfdoc networking 2022-02-16 14:13:18 +01:00
Ludovico Magnocavallo c5fa5d62e4 fix remaining issues, align variables 2022-02-16 14:12:39 +01:00
Ludovico Magnocavallo 36a5eade36 remove dp service accounts variable 2022-02-16 13:03:33 +01:00
Ludovico Magnocavallo 08770babdb fix subnet ranges 2022-02-16 13:01:10 +01:00
Ludovico Magnocavallo d5d0554972 remove redundant firewall rules and subnets 2022-02-16 12:54:49 +01:00
Ludovico Magnocavallo 9c736ea337
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-16 11:47:41 +00:00
Julio Castillo dda86119f9
Fix typo 2022-02-16 11:33:43 +01:00
Ludovico Magnocavallo 4b73cc4de6 tfdoc, stages README 2022-02-16 10:14:51 +01:00
lcaggio 8e8378fb28
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-16 09:56:42 +01:00
Julio Castillo 0544456462 Use local for tfvar outputs 2022-02-16 09:07:07 +01:00
Ludovico Magnocavallo c0f73cb3be replace : with - in output keys 2022-02-16 08:20:22 +01:00
Ludovico Magnocavallo 442e647caf 02-networking-nva 2022-02-16 08:07:58 +01:00
Ludovico Magnocavallo 5c46d351d5 02-networking-vpn 2022-02-16 07:52:20 +01:00
Lorenzo Caggioni c3a6ebee20 Fix roles 2022-02-16 06:55:45 +01:00
Ludovico Magnocavallo c91802f501
Change psa type in net-vpc, fix psa in fast net stages (#545)
* change psn type in net-vpc, fix psa in fast net stages

* fix doc examples

* psn ---> psa
2022-02-15 09:24:27 +01:00
Lorenzo Caggioni 7252e7ec01 Fix review comments. 2022-02-14 16:54:42 +01:00
Ludovico Magnocavallo d8f4f37c48 tfdoc 2022-02-14 13:57:07 +01:00
Lorenzo Caggioni 2646f7bcd8 Rever router asn config 2022-02-14 10:47:09 +01:00
lcaggio f98d690516
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-14 10:12:35 +01:00
Ludovico Magnocavallo fbf4d29c88
Fix FAST names (#539)
* name checker, initial names fix

* fix name parser

* sdbx -> sbox

* explicit names

* show total name length

* check names in linting action

* validate prefix length

* fix typo
2022-02-12 13:29:22 +01:00
lcaggio bf64a3dfda
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* merge tools changes

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* add bolierplate to validate_schema

Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>

* stage 02-security

* Import Fast from dev repository.

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* Copy FAST top level README

* Copy FAST top level README

* TODO list

* TODO list

* fix linting action to account for fast

* remove providers file

* add missing boilerplate

* update factory README

* align examples tfdoc

* fast readmes tfdoc

* disable markdown link check

* really disable markdown link check

* update TODO

* switch to local module refs in stage0

* replace module refs in 02-sec

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* merge tools changes

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* add bolierplate to validate_schema

Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>

* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* stage 02-security

* Import Fast from dev repository.

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>

* Copy FAST top level README

* Copy FAST top level README

* TODO list

* TODO list

* fix linting action to account for fast

* remove providers file

* add missing boilerplate

* update factory README

* align examples tfdoc

* fast readmes tfdoc

* disable markdown link check

* really disable markdown link check

* update TODO

* switch to local module refs in stage0

* replace module refs in 02-sec

* Move first draft to fast branch

* Fix roles and variables. Add e2e DAG example!

* Fix example

* Fix KMS

* First draft: README

* Update README

* Add DLP, update README

* Update Readme

* README

* Add todos

* Merge master

* Merge master

* Merge master

* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README

* Fix READM and Demo

* add  on TF files

* Remove block comments

* simplify service_encryption_keys logic

* fix README

* Fix TODOs

* fix tfdoc description

* fix demo README

* fix sample files

* rename tf files

* Fix outputs file name, fix README, remove dependeces on composer resource

* Add test.

* Fix README.

* Initial README update

* README review

* Fix issues & readme

* Fix README

* Fix README

* Fix test error

* Fix test error

* Add datacatalog

* Fix test, for real? :-)

* fix readme

* support policy_boolean

* split Cloud NAT flag

* Fix README.

* Fix Shared VPC, first try :-)

* Fix tests and resource name

* fix tests

* fix tests

* README refactor

* Fix secondary range logic

* First commit

* Replace existing data platform

* Fix secondary range logic

* Fix README

* Replace DP example tests with the new one.

* Fix test module location.

* Fix test module location, for real.

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* Add PubSub encryption

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* Update READMEs

* Update README

* Fix composer roles and README.

* Fix test.

* Fixes.

* Add DLP documentation link.

* Temp commit with errors

* Refactor variables

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* rebase

* rebase

* rebase

* Rebase

* rebase

* Update READMEs

* Fixes.

* Fix new variables

* Fix misconfiguration and tests.

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Add TODO, VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Add TODO

* Fix module path

* Initial fix for KMS

* rebase

* rebase

* rebase

* Rebase

* rebase

* Update READMEs

* Fixes.

* Rebase - Fix secondary range logic

* Rebase - First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Possible improvement to handle VPC-SC perimeter projects with folder as variable

* Initial fix for KMS

* Fix secondary range logic

* First commit

* Support DataPlatform project in VPC-SC

* Fix VPC-SC

* Fix module path

* Initial fix for KMS

* Update READMEs

* Fixes.

* Fix new variables

* Revert VPC-SC logic

* Fix variable typos

* README fixes

* Fix Project Name logic

* Fix Linting

* READEME

* update READEME

* update READEME

* update README

* mandatory project creation, refactor

* formatting

* add TODO for service accounts descriptive name

* use project module to assign shared vpc roles

* Fix shared-vpc-project module

* Fix vpc name and tests

* README

* update to newer version

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 17:32:16 +01:00
Simone Ruffilli a978000e31
Renamed vpc-(.*) files to (#538) 2022-02-11 10:23:57 +01:00
Ludovico Magnocavallo c4d36cc66b Allow specifying custom role names 2022-02-10 19:12:07 +01:00
Ludovico Magnocavallo e5440f98a2
use prod folder for landing project (#514) 2022-02-06 19:25:05 +01:00
Ludovico Magnocavallo d711a93397
fix previous merge (#513) 2022-02-06 18:34:32 +01:00
Ludovico Magnocavallo c4533503a6
Fast: use pathexpand for output location (#512)
* use pathexpand for output location

* tfdoc
2022-02-06 18:24:46 +01:00
Ludovico Magnocavallo 6c1c943600 fix org id 2022-02-06 10:05:31 +01:00
Ludovico Magnocavallo c8cbf9b7d7
Add utility to extract IAM bindings from state (#503)
* add utility to extract IAM bindings from state

* TODO

* TODO

* output one row per role/member pairs

* sorting

* rename, delete spurious file

* generalize output functions

* generate IAM.md

* fix org id

* add link to role in markdown

* fix org id

* replace organization ids
2022-02-05 17:34:43 +01:00
Julio Castillo 0c0614e12f Fix typo in stage2 variable
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:54:09 +01:00
Julio Castillo 18adf869ae Update networking stages to use multiple folders
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:21:00 +01:00
Ludovico Magnocavallo 02e8a3927d
CI link checker (#494)
* CI link checker

* fix link errors

* fix ci

* wildcard on *.md
2022-02-04 13:28:07 +01:00
Simone Ruffilli 0cef15301b
Rename 02-networking to 02-networking-vpn (#492) 2022-02-04 11:03:37 +01:00