Commit Graph

174 Commits

Author SHA1 Message Date
Ludovico Magnocavallo f8413cc98e
Add support for group-based IAM to resource management modules (#229)
* group_iam support for organization

* group_iam support for folder

* fix typo in variable description

* add group_iam to project module

* update project module README
2021-04-11 14:48:16 +02:00
Luca Prete 7154e2cee6
[#223] Remove unused IAM policies from shared-vpc-gke example (#224) 2021-04-09 19:35:47 +02:00
Ludovico Magnocavallo 3597769e8e
Support one group per zone in compute-vm (#218)
* support multiple groups per zone in compute-vm

* fix ilb as next hop example
2021-04-01 08:27:38 +02:00
Ludovico Magnocavallo 5149795bec
Allow using a non-suffixed name in compute-vm (#217)
* allow using a non-suffixed name in compute-vm

* update README
2021-03-31 20:01:10 +02:00
Julio Castillo 7ca2e60399 Fix tests 2021-03-31 10:45:35 +02:00
Ludovico Magnocavallo 7052cfdb08
allow DNS zones with no vpcs (#214) 2021-03-27 09:08:54 +01:00
lcaggio de5a9d747a
Add VPC-SC support for Regions, device policy and access policy dependency (#210)
* Add VPC-SC support for Regions, device policy and access policy dependency.

* fix compute mig module test

* Fixes

* Fix example

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-03-18 13:04:37 +01:00
averbukh 162be115e0 Delete file with wrong extention 2021-03-15 09:39:00 +01:00
averbukh 569252b637 Add boilerplate, formatting 2021-03-15 09:32:03 +01:00
averbukh 07cf386427 Add basic tests for nwt-vpc-firewall-yaml module 2021-03-14 19:49:07 +01:00
Julio Castillo ad68fc4dfa Support for cloud logging buckets 2021-03-03 14:23:59 +01:00
Julio Castillo d229fd5c6d Fix tests 2021-02-16 13:34:20 +01:00
Julio Castillo 077e881406 Add tests to proxy example 2021-02-15 19:08:00 +01:00
Julio Castillo 1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Julio Castillo be8c61ac2c
Cloud Identity Group module (#182)
* New Cloud Identity module

* Add tests to cloud-identity-group module

* Fix boilerplate

* Fix outputs

* Remove support for creating managers and admins

* Update cloud-identity-group README

* Small fix to cloud-identity-group README
2021-02-13 06:55:22 +01:00
Ludovico Magnocavallo 2ab64446a9
Update hub and spoke peering to optionally create project (#195)
* optionally create project, add vm in hub, export routes to gke peering

* fix typo in unrelated module

* update README

* update README

* update unrelated README for lint

* fix test
2021-02-04 12:12:56 +01:00
Ludovico Magnocavallo fff27f6003 fix legacy syntax, fix tests 2021-01-29 19:00:00 +01:00
Ludovico Magnocavallo 0ce058e04f
Fix tests for 0.14 compatibility (#191)
* remove sensitive attribute from VPN modules key output

* fix type error in service account example

* update CI Terraform version

* update VPN modules docs

* require version in compute mig module

* require version in compute mig module for scaling_schedules

* update compute mig test, move provider version requirement in fixture
2021-01-29 14:55:50 +01:00
Ludovico Magnocavallo 4e8fbbc54a fix dns peering example in doc 2021-01-11 12:29:29 +01:00
Ludovico Magnocavallo fe71be72d3
Aurelien's SVPC DNS example (#186)
* Cloud DNS and Shared VPC (#184)

* Cloud DNS and Shared VPC module to allow application teams to have their own Cloud DNS configuration.

* Cleaning up README.md

* Improving Formating.

* Adding license to all .tf files.

* Removing dead code.

* Moving this example into the Cloud Operations folder.

* Using fabric resources and refactoring. Only the 'test.example' file is not using the proper modules now.

* normalize README, use autogenerated vars table, add types to variables

* refactor

* simple tests

* add diagram, update READMEs

Co-authored-by: Aurélien Legrand <aurelien.legrand01@gmail.com>
2021-01-11 11:57:57 +01:00
Julio Castillo c6691a6140 Add include_children option folder and organization sinks 2020-12-06 17:56:27 +01:00
Julio Castillo 8d65a97b11 Add tests for logging sinks 2020-12-06 17:36:22 +01:00
Julio Castillo d4201c740d Update environments e2e example with new sinks 2020-12-05 13:24:44 +01:00
Ludovico Magnocavallo 7aaf24afd3
Add support for confidential compute to compute-vm module (#179)
* add support for confidential compute

* add support for confidential compute to instance template
2020-12-05 09:14:12 +01:00
Julio Castillo f56c36e2d0 Rename org_id variable to organization_id in organization module 2020-11-25 18:36:19 +01:00
Julio Castillo 0e535a3675 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 18:07:16 +01:00
Julio Castillo dc038ad71f Add tests for hierarchical firewall policy 2020-11-25 18:06:25 +01:00
Andras Gyömrey c8958c548f
monitoring is automatically enabled when monitoring.writer is enabled (#177) 2020-11-25 17:32:53 +01:00
Julio Castillo 1c3451cc35 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 14:37:36 +01:00
Julio Castillo 779f585d1d Hierarchical firewall policies for folders 2020-11-23 18:45:18 +01:00
Ludovico Magnocavallo cffc823f48
refactor access in bq module, add iam (#172) 2020-11-21 09:45:56 +01:00
Ludovico Magnocavallo 27aa0aa64c
Add support for forwarding path to dns module (#171)
* add support for forwarding path to dns module

* update README
2020-11-20 08:35:58 +01:00
Ludovico Magnocavallo cb4abcafd6 fix mig module test 2020-11-18 08:40:41 +01:00
Ludovico Magnocavallo 14fe796885
Add missing role to GKE nodepool service account, refactor test runners and parallelize tests (#164)
* add missing role to GKE nodepool service account

* refactor plan test runners

* remove spurious print statements from test

* use concurrency via locking the fixture dir

* add filelock to test requirements

* fix pytest arg in cloud build

* and yet another dep and args fix

* fix e2e runner, use correct runner in env e2e test

* revert parallel test changes, split modules and environments triggers

* I should stop experimenting in PRs
2020-11-09 21:32:09 +01:00
Ludovico Magnocavallo 6610b79b6c
Revert iam_additive behaviour (#160)
* revert iam_additive format, add iam_additive_members

* revert iam_additive format, add iam_additive_members

* update CHANGELOG
2020-11-09 11:29:08 +01:00
Julio Castillo 524416ea03 Move example test suite to its own directory 2020-11-07 18:22:03 +01:00
Julio Castillo 946822ff5c
Merge pull request #157 from terraform-google-modules/example-tests
Make examples in READMEs runnable and testable
2020-11-07 11:38:19 +01:00
Ludovico Magnocavallo b3ae7c9454
Add support for internal service account to GKE nodepool module (#156)
* add support for internal service account to GKE nodepool module, fixes #62

* update shared vpc example to use internally managed service account

* update shared vpc example to use internally managed service account

* update hub and spoke peering example to use renamed gke nodepool variables
2020-11-07 10:48:12 +01:00
Julio Castillo d56e7441ea Add boilerplate to new files.
Thanks linter ;)
2020-11-07 10:40:09 +01:00
Julio Castillo eecdee63e6 Make examples in READMEs runnable and testable 2020-11-07 10:28:33 +01:00
Ludovico Magnocavallo b4fc8167a0 use new iam variable in cloud function module 2020-11-06 08:37:44 +01:00
Ludovico Magnocavallo f1a3c3ebe8 use new iam variables in kms module 2020-11-06 08:26:50 +01:00
Ludovico Magnocavallo f72bea3f96 use new iam variable in container registry 2020-11-06 08:22:35 +01:00
Ludovico Magnocavallo 0d17007c9d new iam variable in endpoints module 2020-11-06 08:18:57 +01:00
Ludovico Magnocavallo efc694ba01 fix and streamline bigtable module, add tests, align to new iam variable name 2020-11-06 08:11:07 +01:00
Ludovico Magnocavallo 3a4938874b rename iam variables in pubsub module 2020-11-05 21:28:34 +01:00
Ludovico Magnocavallo ca931181fc bump tftest version 2020-11-05 17:58:03 +01:00
Ludovico Magnocavallo cb54ff77a1 rename iam variable in service account module 2020-11-05 09:22:13 +01:00
Ludovico Magnocavallo 44f1828c33 rename iam variable in compute vm module 2020-11-05 09:10:49 +01:00
Ludovico Magnocavallo 462a7023cd rename iam variable in source repo module 2020-11-05 08:58:05 +01:00
Ludovico Magnocavallo 7e96e899d5 rename folder module tests 2020-11-05 08:57:50 +01:00
Ludovico Magnocavallo 2828b2c455 fix skipped service directory module test 2020-11-05 08:57:18 +01:00
Ludovico Magnocavallo 8267252031 rename iam variable in net vpc module 2020-11-05 08:49:29 +01:00
Ludovico Magnocavallo 9d0db19c5e rename iam variables in gcs module 2020-11-04 16:57:06 +01:00
Ludovico Magnocavallo 25e1b8ac46 update examples and tests for project and folder modules variable changes 2020-11-04 16:49:55 +01:00
Ludovico Magnocavallo d47478a466 rename iam members variable in project module 2020-11-04 16:22:00 +01:00
Ludovico Magnocavallo d0ed3b7614 rename iam additive variable in project module 2020-11-04 16:17:12 +01:00
Ludovico Magnocavallo d2c84de8ff use new variable names in organization module 2020-11-04 15:44:28 +01:00
Ludovico Magnocavallo 627f86219f rename iam variable in secret manager module, add tests 2020-11-04 14:19:16 +01:00
Ludovico Magnocavallo c372980e15 update service directory module to 0.13 2020-11-04 14:08:33 +01:00
Julio Castillo c75230adf3 Remove iam_roles from net-vpc 2020-10-30 19:19:40 +01:00
Julio Castillo a27ec7bf61 Fix peering test cases 2020-10-30 18:07:56 +01:00
Julio Castillo 53cb8359ee Remove *_roles variables in kms module 2020-10-30 17:58:45 +01:00
Julio Castillo bf86fb8a96 Merge branch 'master' into terraform-0.13 2020-10-30 00:25:37 +01:00
Julio Castillo b13a10efe5 Remove iam_roles from compute-vm module 2020-10-30 00:18:10 +01:00
Julio Castillo 78efb63b4a Remove iam_roles from project module 2020-10-29 23:51:34 +01:00
Julio Castillo 61d402fece Update gcs module to terraform 0.13 2020-10-29 23:26:03 +01:00
Julio Castillo f919a8dba0 Update GKE SVPC example to prevent -target usage 2020-10-26 23:26:29 +01:00
Julio Castillo 85fda5b1fe Remove iam_roles from service accounts, folder and organization modules 2020-10-21 09:37:05 +02:00
Julio Castillo d624295702 Fix service account tests 2020-10-20 23:25:50 +02:00
Julio Castillo 2e7876b4c7 Update folders module to Terraform 0.13
With this commit the folders module (now called simply 'folder') only
creates a single google_folder resource. Support for creating multiple
folders is no longer needed since Terraform 0.13 added for_each support
to modules.
2020-10-20 15:41:03 +02:00
Julio Castillo 973972e5b9 Fix compute-vm tests 2020-10-12 12:36:12 +02:00
Ludovico Magnocavallo ad653c5bba
Add tests for new end to end example (#143)
* make parent_id optional

* add tests for new e2e example
2020-09-24 19:07:13 +02:00
Luca Prete f2c80e17f1
[#138] Update copyright headers to 2020 (#139)
Co-authored-by: Luca Prete <lucaprete@google.com>
2020-09-23 11:07:03 +02:00
vanessabodard-voi 435d64d81a
Change bucket_policy_only into uniform_bucket_level_access in GCS module (#135)
* Change bucket_policy_only into bucket_policy_only

* Update changelog
2020-09-15 19:33:40 +02:00
Ludovico Magnocavallo 120e1be1d9 extend gcs module tests to cover new variables 2020-09-03 19:19:41 +02:00
Ludovico Magnocavallo 0265ba0951
Refactor net-address variables, add support for internal address purpose
* add support for internal address purpose
* update gcs module README
* refactor net address module interface and add tests
* add more examples in net-address README
2020-09-01 18:49:21 +02:00
Aleksandr Averbukh d45934e544
Merge pull request #132 from terraform-google-modules/vpn-ha-optional-gateway
Make VPN Gateway creation optional for the net-vpn-ha module
2020-09-01 16:32:14 +02:00
Aleksandr Averbukh aacb570ac8 Fix list of log config attributes to be tested 2020-09-01 15:00:16 +02:00
Aleksandr Averbukh 931af3e943 Fix subnet logging test 2020-09-01 14:18:37 +02:00
Ludovico Magnocavallo 088a7c569f
Quota monitor end to end example (#125)
* working example, README missing

* add missing boilerplate to outputs file

* README

* fix dynamic resources in IAM binding for_each

* add tests

* update input/output table in README

* add example to READMEs
2020-08-29 11:29:46 +02:00
Julio Castillo 5ae489f50d
Add alias IP support in `compute-vm` (#127)
* Add alias IP support in `compute-vm`

* Fix tests

* add end to end tests for data solutions examples and fix example errors

* update changelog

* add missing boilerplate

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-08-29 10:12:30 +02:00
Ludovico Magnocavallo f0ba47511c add tests for cloud operations examples 2020-08-17 12:29:13 +02:00
Ludovico Magnocavallo f62b9362a2
ILB for appliances example (#122)
* rename infrastructure folder to networking

* example WIP: VPCs

* move ip forwarding to its own variable in compute-vm module

* add per-instance metadata support to compute-vm module

* ipip tunnels on linux savepoint

* simple multinic gateways example

* remove stale files

* resolve conflicts

* update diagram

* rename folder

* use a template for gw cloud config, rename some resources and files

* Update README.md

* Update README.md

* add basic plan tests for all networking e2e examples

* fix test for foundations/environments e2e example

* fix shared vpc e2 example count error in gke node service account permissions

* use module path for assets in onprem e2e example

* use project id from module in ilb e2e example

* add mising boilerplates in tests

* run examples tests in ci

* update module's README

* rename ilb example

* Update README.md

* fix rp_filter configuration

* README

* Update README.md

* Update README.md

* Update README.md

* update CHANGELOG

* update CHANGELOG

* Update README.md
2020-08-15 10:12:43 +02:00
Ludovico Magnocavallo dce2fca740
Support multiple zones in compute-vm module (#114)
* support multiple zones in compute-vm module

* update compute-vm variables in end-to-end examples

* update README examples
2020-07-18 06:39:14 +02:00
Ludovico Magnocavallo 87597a2a5f test interfaces in compute_vm test 2020-07-10 16:56:28 +02:00
vanessabodard-voi 5af022a3ee
refactor IAM additive bindings variables (#103)
* Invert the list for role/member mapping so that member is the key

* Add iam_additive_bindings to replace iam_additive_members and iam_additive_roles, change test suite accordingly

* attribute 'mode' added as it would error without

* Update Readme to reflect the new variable iam_additive_bindings

* test branch access

* iam_additive_bindings to replace iam_additive roles and iam_additive_members

* update foundation samples to new additive bindings format

* set bq dataset options in foundation environments to allow destroying

* trap exceptions raised during destroy in project module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-07-02 08:28:26 +02:00
Lorenzo Caggioni cb6258ee9f Merge branch 'gcs-to-bq' of https://github.com/terraform-google-modules/cloud-foundation-fabric into gcs-to-bq
merge
2020-06-30 18:02:17 +02:00
Lorenzo Caggioni 6bc59c602a Fix error in tests 2020-06-30 17:58:51 +02:00
Ludovico Magnocavallo ec765857cb
Make project creation optional in project module (#99)
* make project creation optional in project module

* add variable to optionally configure project activation

* add explicit dependency on custom roles to additive bindings

* make parent variable optional

* add test for null parent

* fix custom roles output
2020-06-25 10:04:57 +02:00
Ludovico Magnocavallo ae2e4dc3ad interpolate vpc name in routes 2020-06-12 12:07:28 +02:00
Ludovico Magnocavallo 25d3b2ebdd
add iam support to compute-vm module (#95) 2020-06-10 07:55:18 +02:00
lcaggio 1b450fe444
Add Cloud KMS support to GCS module (#87)
* Add support to Cloud KMS

* Fixes

* Fix tests

* Fix tests

* - change variable name to be consistent with BQ module
 - remove output, not needed
 - change string default value to null

* use locals to pre-populate kms key variable for all names

* rename kms variable, fix prefix check in locals

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-06-05 21:59:34 +02:00
Ludovico Magnocavallo 4dd927d8d7
KMS module refactoring (#85)
* first rewrite, untested

* validation fixes

* fix errors, rename variables, improve README, tested

* minimal kms module test

* README tweaks
2020-06-03 08:43:10 +02:00
Ludovico Magnocavallo aaa80bb49b refactor service account module outputs 2020-05-31 09:39:03 +02:00
Ludovico Magnocavallo fa29a8e26f
Fix health checks in net-ilb and compute-mig modules (#69)
* fix health checks in ilb module

* fix health check in compute-mig and add basic tests
2020-05-07 07:37:15 +02:00
Roberto Jung Drebes 14ec791556
subnets with the same name in different regions (#67)
* support for subnets with the same name in different regions

* fix net-vpc tests
2020-05-04 08:25:53 +02:00
Ludovico Magnocavallo 98f6b30197
Allow specifying subnet name in net-vpc module (#64)
* add name attribute to net-vpc subnet variable

* update vpc variables in infra examples

* fix old project output used in shared vpc infra example
2020-04-30 19:29:39 +02:00
Ludovico Magnocavallo be3c461cf9
MIG and ILB modules (#61)
* preliminary net-ilb module, untested

* outputs

* fix basic mistakes, add initial test

* test variable defaults on all resources

* README stub

* net-ilb module fixes and example

* compute-vm module fixes

* fix test

* remove mig from compute vm module

* split out mig from compute-vm (untested)

* split out mig from compute-vm (untested)

* fix mig versions

* small fixes and examples for mig module

* Update README.md

* Update README.md

* switch mig to using a single  variable for both region and zone
2020-04-30 17:08:18 +02:00
Ludovico Magnocavallo a280dd880d
Add support for org policies to folder and project modules (#58)
* modules/folders: add support for org policies

* update README

* update cloud config modules READMEs

* modules/project: add org policies
2020-04-08 14:54:49 +02:00