Commit Graph

145 Commits

Author SHA1 Message Date
Julio Castillo 616c6fbc48 Fix subnet iam_bindings to use arbitrary keys 2023-09-15 14:30:27 +02:00
Julio Castillo f3be29cbc9 Fix tests 2023-09-15 00:27:55 +02:00
Julio Castillo f19ab4872f Embed subnet-level IAM in the variables controlling creation of subnets
This moves the top-level `iam`, `iam_bindings` and
`iam_bindings_additive` variables into subnet-level attributes. This
change also allows setting permissions to PSC or proxy-only subnets

As part of this change, the factory interface is more aligned with the
rest of the modules using a `factories_config` variable. In the future
we can add a cidrs template similar to the firewall policy module
2023-09-15 00:27:55 +02:00
Dave Gulli 819b4aab5c fixed up nit from PR 1666 2023-09-14 13:15:00 +10:00
Dave Gulli ced8e498f8 terraform fmt 2023-09-13 16:58:50 +10:00
Dave Gulli 09e6e8f4d2 created passing test, fixed logic 2023-09-13 16:49:14 +10:00
Dave Gulli 3d39a3ecf1 fixed up logic. 2023-09-13 14:11:09 +10:00
Dave Gulli 3479c40735 fixing tests 2023-09-12 15:53:28 +10:00
Dave Gulli 5f2bc7fa92 refactored to recommended method 2023-09-12 14:58:49 +10:00
Dave Gulli db5030e93f adding test 2023-09-11 21:08:55 +10:00
Dave Gulli 3208bcd9d5 matched the period 2023-09-11 20:50:18 +10:00
Dave Gulli f76d8fcb52 fixed period 2023-09-11 20:48:26 +10:00
Dave Gulli dac76a900b fixed references 2023-09-11 20:47:05 +10:00
Dave Gulli adff09aa24 linting error 2023-09-11 20:45:32 +10:00
Dave Gulli c1b52b300c trying to fix linting 2023-09-11 20:41:25 +10:00
Dave Gulli 7e0827db53 re-ordered variables per lint error 2023-09-11 20:33:08 +10:00
Dave Gulli e1aff29d5c linting again 2023-09-11 20:30:11 +10:00
Dave Gulli 3cfabb32c5 fixed linter 2023-09-11 20:29:08 +10:00
Dave Gulli 3c0391db5c slight change to readme thanks to tfdoc 2023-09-11 20:24:06 +10:00
Dave Gulli 8c264da200 small commits to add variables, append tests 2023-09-11 20:14:17 +10:00
Dave Gulli a18071ed36 updated for global managed proxy 2023-09-11 17:42:34 +10:00
Dave Gulli b49984e1b9 added support for global proxy only subnets 2023-09-11 16:56:09 +10:00
Julio Castillo a6640e5959 Make net-vpc variables nullable 2023-09-06 09:57:34 +02:00
Julio Castillo 3d4cc7164a Bump provider version to 4.80.0 2023-09-05 09:48:15 +02:00
Ludovico Magnocavallo 819894d2ba
IAM interface refactor (#1595)
* IAM modules refactor proposal

* policy

* subheading

* Update 20230816-iam-refactor.md

* log Julio's +1

* data-catalog-policy-tag

* dataproc

* dataproc

* folder

* folder

* folder

* folder

* project

* better filtering in test examples

* project

* folder

* folder

* organization

* fix variable descriptions

* kms

* net-vpc

* dataplex-datascan

* modules/iam-service-account

* modules/source-repository/

* blueprints/cloud-operations/vm-migration/

* blueprints/third-party-solutions/wordpress

* dataplex-datascan

* blueprints/cloud-operations/workload-identity-federation

* blueprints/data-solutions/cloudsql-multiregion/

* blueprints/data-solutions/composer-2

* Update 20230816-iam-refactor.md

* Update 20230816-iam-refactor.md

* capture discussion in architectural doc

* update variable names and refactor proposal

* project

* blueprints first round

* folder

* organization

* data-catalog-policy-tag

* re-enable folder inventory

* project module style fix

* dataproc

* source-repository

* source-repository tests

* dataplex-datascan

* dataplex-datascan tests

* net-vpc

* net-vpc test examples

* iam-service-account

* iam-service-account test examples

* kms

* boilerplate

* tfdoc

* fix module tests

* more blueprint fixes

* fix typo in data blueprints

* incomplete refactor of data platform foundations

* tfdoc

* data platform foundation

* refactor data platform foundation iam locals

* remove redundant example test

* shielded folder fix

* fix typo

* project factory

* project factory outputs

* tfdoc

* test workflow: less verbose tests, fix tf version

* re-enable -vv, shorter traceback, fix action version

* ignore github extension warning, re-enable action version

* fast bootstrap IAM, untested

* bootstrap stage IAM fixes

* stage 0 tests

* fast stage 1

* tenant stage 1

* minor changes to fast stage 0 and 1

* fast security stage

* fast mt stage 0

* fast mt stage 0

* fast pf
2023-08-20 09:44:20 +02:00
Ludovico Magnocavallo def2f476d1
Add support for conditions to `iam_members` module variables (#1594)
* project

* data-catalog-policy-tag

* dataproc

* folder

* iam-service-account

* kms

* net-vpc

* organization

* source-repository

* dataplex-datascan
2023-08-15 16:28:23 +02:00
Ludovico Magnocavallo adf2621727
Add new `iam_members` variable to IAM additive module interfaces (#1589)
* resource management modules

* data catalog policy

* dataproc

* service account

* kms

* net-vpc

* source repository

* dataplex datascan

* service account module variable order
2023-08-14 09:54:50 +00:00
Eunan Hardy dd3a298892 Moved allow_net_admin to enable_features flag. Bumped provider version to 4.76 2023-08-07 14:27:20 +01:00
Ludovico Magnocavallo aecba0bbd0
Add support for ipv6 to net-vpc module (#1568)
* add support for ipv6

* fix test
2023-08-05 13:07:26 +02:00
Julio Castillo ce510583bf Fix default routes 2023-08-04 18:24:41 +02:00
Julio Castillo bbe778e095 Allow custom route descriptions in net-vpc module
Related: #1491
2023-08-04 14:13:03 +02:00
Julio Castillo 1fdec356e2 Update large TOCs 2023-07-28 15:43:51 +02:00
Ludovico Magnocavallo d9f7cef1e7
allow using a separate resource for boot disk (#1496) 2023-07-07 15:40:13 +00:00
Ludovico Magnocavallo 86cc6eee4c
disable googleapi routes creation when vpc is not created (#1489) 2023-07-03 09:10:12 +02:00
Taneli Leppä 81285065ca Added module for Secure Web Proxy. 2023-06-13 08:49:58 +02:00
Julio Castillo 50d8d4b8b8 Add subnets id output, expand net-address outputs 2023-06-12 10:24:30 +02:00
lcaggio 39b27ac25e
Add support for Log Analytics on logging-bucket module and bump provider version (#1423)
* first commit

* Bump provider versions

* Fix tests
2023-06-07 23:23:28 +02:00
Ludovico Magnocavallo 7bd6e5d57b
Small fixes (#1425)
* fix serverless connector plugin outputs

* add internal and lb to allowed ingress org policy

* add validation condition on cloud run ingress settings

* tfdoc

* plugin tfdoc

* allow disabling googleapis routes with a single instruction in net-vpc

* fix variable def

* fix variable description

* fix cr variable validation

* fix usage of   create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
Ludovico Magnocavallo 884cb8b4bf
Ensure all modules have an `id` output (#1410)
* net-vpc

* a-d

* complete modules

* fix error
2023-06-02 16:07:22 +02:00
Julio Castillo 0888cce3a5 Rename to `create_googleapis_routes` 2023-05-26 16:43:43 +02:00
Julio Castillo 563b5fa0cb Update net-vpc README 2023-05-26 12:46:16 +02:00
Julio Castillo 1e8c58c88e Reuse existing logic to create default routes 2023-05-26 12:01:38 +02:00
Julio Castillo 7a91a7e41c Add default googleapi route creation to net-vpc 2023-05-26 10:55:35 +02:00
jamesmao-xyz e1ebfeecad
Fix the tf error: Inconsistent conditional result types
The conditional statement, with tomap({}) will cause the following error under terraform 1.4.5

Error: Inconsistent conditional result types
│ 
│   on ../../../modules/net-vpc/subnets.tf line 20, in locals:
│   20:   _factory_data = var.data_folder == null ? tomap({}) : {
│   21:     for f in fileset(var.data_folder, "**/*.yaml") :
│   22:     trimsuffix(basename(f), ".yaml") => yamldecode(file("${var.data_folder}/${f}"))
│   23:   }
│     ├────────────────
│     │ var.data_folder is "data/subnets/common"
│ 
│ The false result value has the wrong type: element types must all match for conversion to map.
2023-04-18 19:54:37 +10:00
Fawzi ebf93a66ad add new test to README 2023-04-11 23:38:16 +10:00
Fawzi 4722efea40 bump provider versions 2023-04-11 22:18:31 +10:00
Fawzi 3c4254fc1f update firewall_policy_enforcement_order variable 2023-04-11 22:08:41 +10:00
Fawzi db3c48736c add firewall enforcement variable to VPC 2023-04-10 01:28:12 +10:00
Ludovico Magnocavallo 865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider (#1306)
* add support for new attributes to bigquery module

* bump provider versions
2023-04-05 14:22:52 +00:00
Ludovico Magnocavallo 8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00