Commit Graph

1346 Commits

Author SHA1 Message Date
Luca Prete 07f60fb0b9
Fix vtysh (#1300)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 14:37:46 +00:00
Ludovico Magnocavallo bc2d9372aa
Fix urlmap in ILB L7 module (#1299)
* port tests to new format

* add test to catch error and fix urlmap

* boilerplate

* boilerplate
2023-04-03 15:47:37 +02:00
Luca Prete bf14d2da23
Add sample vtysh file to remove warnings (#1298)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 15:10:46 +02:00
Ludovico Magnocavallo 92b71a5098
Refactor cloud run module to use optionals and support all features (#1293)
* refactor cloud run resource and variables

* vpc connector variables and resource

* refactor env variable, combine and fix env examples

* fix volume example

* fix traffic split example

* fix eventarc/pubsub example

* fix eventarc/audit log example

* fix SA examples, fix examples formatting

* refactor eventarc variable

* tfdoc

* add IAM to example

* add examples for revision annotations and serverless connector

* fix new examples

* remove legacy module tests

* blueprint tests

* Add tests to cloud-run module

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-04-01 14:06:29 +02:00
Valerio Ponza c5db50d1d7 fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 6204787226 fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 0a20bc4f2d fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 1fb7e114fd fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 596acb63e4 removing deprecated field from gke-hub 2023-03-30 12:47:39 +02:00
Valerio Ponza 44d2e9e50e removing deprecated field from gke-hub 2023-03-30 12:47:39 +02:00
Valerio Ponza 64a9952656 add Backup for GKE support 2023-03-30 12:47:39 +02:00
Julio Castillo 7135c9015f Add boilerplate 2023-03-30 09:36:14 +03:00
Julio Castillo b503bde544 Load all service agents identities from yaml
Source: https://cloud.google.com/iam/docs/service-agents
2023-03-30 09:36:14 +03:00
Wiktor Niesiobędzki c76e95e7e8
Add Cloud Batch service identity (#1294) 2023-03-30 08:05:12 +02:00
Julio Castillo d64b5779e4
Merge branch 'master' into dataplex 2023-03-27 21:44:24 +02:00
Julio Castillo 039d10b287
Merge branch 'master' into dataplex 2023-03-27 16:18:38 +02:00
Luca Prete dfa1fce274
Merge branch 'master' into bruzz/nva-firewall-mgmt 2023-03-27 16:04:55 +02:00
bruzzechesse d68476ba07 fixes 2023-03-27 15:46:37 +02:00
bruzzechesse cf2fd119b5 small fixes 2023-03-27 15:35:00 +02:00
Wiktor Niesiobędzki 9005a51a95 Use example testing instead custom test 2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki d105ed59d3 Resolve review comments 2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki 082301c09c Use unique bundle name for Cloud Function
When cloud-function module is used multiple times within project and
default `bundle_config.output_path` is used then all the instances try
to use filename and result is undefined without guarantee to converge to
desired state (i.e. multiple functions may share the same code).
2023-03-27 14:13:38 +02:00
bruzzechesse a93b80cf95 linting 2023-03-27 11:49:01 +02:00
bruzzechesse 41570d2840 update documentation 2023-03-27 11:42:17 +02:00
bruzzechesse 021fb84765 add firewall mgmt on simple-nva module 2023-03-27 09:54:01 +02:00
Wiktor Niesiobędzki 58bc576ddb Add dataplex SA 2023-03-27 07:37:40 +00:00
Ludovico Magnocavallo 987ea34d93
DNS policy module fixes (#1278)
* dns response policy module

* tfdoc

* Add dns policy tests

* fix copyright, var description, initial wording

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-03-26 18:39:07 +02:00
Ludovico Magnocavallo 28da881c3f
DNS Response Policy module (#1276)
* dns response policy module

* tfdoc
2023-03-26 17:42:57 +02:00
Ludovico Magnocavallo 60261a6352
add static gateway id to outputs (#1270) 2023-03-21 18:08:45 +01:00
Julio Castillo 3d425b7d9c Ignore changes to metadata.0.annotations in Cloud Run module
Fixes #1173
2023-03-21 11:54:07 +01:00
Luca Prete 3b20d617dc
Improvements to NCC-RA spoke module. (#1267) 2023-03-21 07:07:44 +00:00
Luca Prete 6e49e94749
simple-nva: add ability to parse BGP configs as strings. (#1268)
* Add ability to parse BGP configs as strings.

* Fix var name

* Refresh tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
2023-03-21 07:41:12 +01:00
Taneli Leppä 4b15fe4744
Add backend service names to outputs for net-glb and net-ilb-l7 (some things like (#1258)
autoneg require names).

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-03-17 10:40:11 +00:00
Ludovico Magnocavallo 8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo 50adf1da2a
change target_vpcs variable to support dynamic values (#1255) 2023-03-17 07:14:09 +00:00
Miren Esnaola 21fa6d1f13 Fixes related to boot_disk in compute-vm module 2023-03-16 15:58:39 +01:00
Ludovico Magnocavallo 79a6e9b191
pin local provider (#1256) 2023-03-16 10:59:06 +00:00
Julio Castillo c82f142d2d Delay creation of SVPC host bindings until APIs and JIT SAs are done 2023-03-14 14:51:17 +01:00
Ludovico Magnocavallo 112d9a8d9c
Allow using existing boot disk in compute-vm module (#1241)
* allow using existing boot disk in compute-vm module

* allow setting initialize params to null

* tests

* fast

* blueprints
2023-03-12 10:53:59 +01:00
Ludovico Magnocavallo 6ba0f8b0ba
allow overriding name in net-vpc subnet factory (#1239) 2023-03-11 09:30:42 +01:00
simonebruzzechesse 510db1b36f
Fix policy_based_routing.sh script on simple-nva module (#1226) 2023-03-10 18:36:07 +01:00
Julio Castillo 1c3645f3a3 Fix dataproc modules variables 2023-03-10 16:54:09 +01:00
bruzzechesse 7595508bd4 fix variable 2023-03-10 12:03:54 +01:00
bruzzechesse 3ffda9c8c9 terraform fmt 2023-03-10 10:45:39 +01:00
bruzzechesse f688b9a47d realign logic to boolean variable 2023-03-10 10:43:37 +01:00
bruzzechesse 7781b72690 replace track_per_session with tracking_mode and fixed connection tracking conf for backends 2023-03-10 10:03:45 +01:00
Ludovico Magnocavallo 45c12e233b
Network firewall policy module (#1232)
* validated, untested

* tested

* typo in README
2023-03-10 08:21:49 +00:00
Julio Diez d0f346f6c6 Add resources created as outputs 2023-03-09 15:35:52 +01:00
Julio Diez f82b5284c9 Change semantics of custom_advertise 2023-03-09 15:35:52 +01:00
Julio Diez 7eb9fbf676
Merge branch 'master' into ncc 2023-03-09 13:10:36 +01:00
Julio Diez 3e85175f67 Adapt README examples to the variables config 2023-03-09 13:06:02 +01:00
Julio Diez 0cf254f91e Update variable and output tables 2023-03-09 13:06:02 +01:00
Julio Diez 7e6635f535 Alphabetical order and better naming 2023-03-09 13:06:02 +01:00
Julio Diez eef6a48876 Make ip_interfaceX not optional
These IP values are optional, if you don't specify a value Google will try to
find a free IP address. But this is a bad idea because setting them to 'null'
forces a replacement even without any changes to make.
2023-03-09 13:06:02 +01:00
Julio Diez 84d3b83f81 Group router information under router_config 2023-03-09 13:06:02 +01:00
Julio Diez b25ee97d15 Group vpc and subnet under vpc_config 2023-03-09 13:06:02 +01:00
Julio Diez e9312e4dba var ras -> router_appliances 2023-03-09 13:06:02 +01:00
lcaggio cc6ee44759 Add aiplatform robot service account 2023-03-09 08:17:26 +01:00
Ludovico Magnocavallo 5489162b75
Merge branch 'master' into ncc 2023-03-08 20:33:53 +01:00
Julio Diez 96f35c53a5 Fix README variables to pass pytest 2023-03-08 20:00:55 +01:00
Julio Diez 93bb809a40 Rename module net-ncc -> ncc-spoke-ra 2023-03-08 20:00:55 +01:00
Julio Diez 62539508a5 Update README for the new implementation 2023-03-08 20:00:55 +01:00
Julio Diez 6196851d3f Output the name of the hub if created 2023-03-08 20:00:55 +01:00
Julio Diez 34c6a6aee1 Make creation of the hub optional 2023-03-08 20:00:55 +01:00
Julio Diez 1b4ba11dcd Make IPs for the CR interfaces optional 2023-03-08 20:00:55 +01:00
Julio Diez 0da0f33525 Make keepalive optional 2023-03-08 20:00:55 +01:00
Julio Diez 81121f4aa6 data_transfer default to false 2023-03-08 20:00:55 +01:00
Julio Diez d5d743174e Make custom_advertise optional 2023-03-08 20:00:55 +01:00
Julio Diez 2f64fcd5f4 Reimplement the module to manage only one spoke 2023-03-08 20:00:55 +01:00
lcaggio e213f156ad Fix Jit notebook service account. 2023-03-08 16:06:27 +01:00
simonebruzzechesse fd07c444cb
Extended simple-nva module to manage BGP service running on FR routing docker container (#1195) 2023-03-08 09:43:13 +01:00
Julio Diez 6eb82a2214
Merge pull request #16 from juliodiez/master
Sync branch
2023-03-07 13:13:35 +01:00
Julio Diez d9eaa59862 Generated variable table via tfdoc 2023-03-07 13:04:15 +01:00
Julio Diez ac224ad11c Add tftest to README 2023-03-07 12:29:20 +01:00
Julio Diez 94f3a08129 Add example of custom route advertisements 2023-03-07 11:54:34 +01:00
Julio Diez 9b5bc407ba Add image for load-balanced router appliances example 2023-03-07 11:10:19 +01:00
Julio Diez 58c90feca2 Add example of load-balanced router appliances 2023-03-07 11:06:23 +01:00
Julio Diez 3e0a8c4c0a Add image for site to two VPCs example 2023-03-07 10:43:51 +01:00
Julio Diez 76972d5804 Add example of site to two VPCs 2023-03-07 10:37:58 +01:00
Julio Diez 449f5cbb56 Adapt example to use only allowed chars for resource names 2023-03-07 10:28:29 +01:00
Julio Diez 87107ba3e0 Set a unique name to CRs linked to spokes 2023-03-07 10:11:02 +01:00
Julio Diez e7963eb630 Set a unique name to spokes 2023-03-07 10:01:07 +01:00
Julio Diez 71cb18f808 Replace map key derived from resource attributes 2023-03-07 09:52:34 +01:00
Julio Diez 0f4919a771 Add image for site to VPC example 2023-03-06 20:55:36 +01:00
Julio Diez 69493d8a40 Add README with first example 2023-03-06 20:47:18 +01:00
Julio Diez 65671647e7 Make optional some router config fields 2023-03-06 20:45:08 +01:00
Julio Diez 25b14465b2 Simplify some naming 2023-03-06 19:21:09 +01:00
Julio Diez e835730665 Add router BGP peers 2023-03-06 18:02:50 +01:00
Julio Diez 02707eb275 Initial commit for NCC module 2023-03-06 14:09:14 +01:00
Ludovico Magnocavallo 8fc9549c58
add support for proxy and psc subnets to module factory (#1211) 2023-03-05 17:08:43 +01:00
lcaggio 88ecdbe671
Merge branch 'master' into lcaggio/dataproc-03 2023-03-02 12:18:52 +01:00
Taneli Leppä 99d19d5ec8 Fix issue with GKE cluster notifications topic, change pubsub module output to static. 2023-03-02 11:23:05 +01:00
lcaggio b7793f69a2 Dataproc module. Fix output. 2023-03-02 10:39:08 +01:00
erabusi 2ebb21e4cc
Fix url_redirect issue on net-glb module (#1204) 2023-03-02 07:51:39 +01:00
lcaggio b39b486cd4 Fix README 2023-03-01 10:48:33 +01:00
lcaggio c4d8175d9a
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 10:44:31 +01:00
lcaggio 0d37fe8338 Update README 2023-03-01 10:44:01 +01:00
Ludovico Magnocavallo 3a2d6e1b46
Fix secondary ranges in net-vpc readme (#1198)
Fixes #1197
2023-03-01 08:08:07 +01:00
lcaggio dad3c49012 Fix linting 2023-03-01 08:00:52 +01:00
Ludovico Magnocavallo 6629e5cd06
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 07:57:21 +01:00
lcaggio dc37783022 Fix Variables 2023-03-01 07:54:10 +01:00
Ludovico Magnocavallo 4b3b5ad1cb
Merge branch 'master' into fix-test-compute-vm-kms 2023-02-28 16:13:48 +01:00
Dan Farmer 52eb83758f Fix compute-vm:CloudKMS test for provider>=4.54.0
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
  `google_compute_disk.disks["attached-disk"]` (see
  hashicorp/terraform-provider-google#4448)
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
  will now fail with <4.54.0, which do not return `rsa_encrypted_key`
  * Updated the whole repo on advice from @ludoo
2023-02-28 15:10:22 +00:00
Joshua Goldberg 6bf2fb4c06
Fix https health check mismapped to http (#1194) 2023-02-28 15:48:13 +01:00
lcaggio 0f504f6b8e Fix output variable order. 2023-02-28 10:50:58 +01:00
lcaggio ac0a140011 Fix outputs 2023-02-28 10:35:44 +01:00
Ludovico Magnocavallo 1a685e7b83
Update README.md 2023-02-28 07:49:28 +01:00
Ludovico Magnocavallo 3d2f1182d2
Update README.md 2023-02-28 07:48:47 +01:00
lcaggio 7ece884422 Fix examples. 2023-02-28 06:52:10 +01:00
lcaggio 46a99b9a9b
Merge branch 'master' into lcaggio/dataproc 2023-02-28 06:36:21 +01:00
Ludovico Magnocavallo e098568b6e
fix external gateway (#1191) 2023-02-28 00:46:50 +01:00
lcaggio fdb4f2a9fd Fix variables 2023-02-27 22:23:45 +01:00
lcaggio 51579ac7e7 Fix linting 2023-02-27 22:18:07 +01:00
lcaggio 05a85e753c First commit 2023-02-27 22:14:07 +01:00
Valerio Ponza cbe85e0605 fixing workloadidentity for anthos service mesh - authority was not created 2023-02-27 14:17:16 +00:00
Ludovico Magnocavallo 6320c53baf
Allow multiple peer gateways in vpn ha module (#1184)
* allow multiple peer gateways in vpn ha module

* align blueprints

* fast
2023-02-27 10:18:59 +00:00
Carlos Alexandre aecb6fd543
Implemented conditional dynamic blocks for `google_access_context_manager_service_perimeter` `spec` and `status` (#1177)
* implemented conditional dynamic blocks

* Fix linting

* avoid setting spec in bridge perimeters if no resources are set

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 16:04:19 +00:00
Julio Castillo 899960c247 Fix tests 2023-02-24 19:14:43 +01:00
Valerio Ponza 36e6367a5c adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:11:35 +00:00
Valerio Ponza 7670a6009f adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:05:11 +00:00
Julio Diez 3b0223458b
Don't define nor use health checks with SNEGs
SNEGs don't use health checks and it's an error to add one in their backend services. 'terraform plan' doesn't detect it, only 'apply'.
2023-02-24 11:13:55 +01:00
Julio Diez 5a44baa82f
Merge branch 'master' into juliodiez-patch-1 2023-02-24 10:22:07 +01:00
Miren Esnaola ae6080ebf7 Modifications related to autopilot and workload identity. Added workload_identity_pool output to module 2023-02-24 09:59:23 +01:00
Julio Diez 08ba94aebc
Allow to not use any health check
Internet / serverless NEGs (Cloud Run) don't use them and it's an error to add one in their backend services.
2023-02-24 09:55:26 +01:00
Julio Castillo a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo 62834ca83a Update READMEs 2023-02-21 15:49:16 +01:00
Julio Castillo 6b767c9035 Simplify org policies data model in resman modules. 2023-02-21 15:49:16 +01:00
Julio Diez 4a9ce1c5ce
Update README
Remove unused field
2023-02-21 14:05:03 +01:00
Julio Diez 0ca0b2e99b
Fix variable name 2023-02-20 14:37:33 +01:00
Julio Castillo 3085922cea Fix tests 2023-02-20 12:19:36 +01:00
Ludovico Magnocavallo 840abd60e7
Merge branch 'master' into master 2023-02-20 08:14:58 +01:00
Aleksandr Averbukh f16511b8da Fix typo in readme 2023-02-19 15:22:48 +01:00
Aleksandr Averbukh ff4b2fffe2 Regenerate docs 2023-02-18 22:11:44 +01:00
Aleksandr Averbukh 8174890331 Sort variables 2023-02-18 22:04:40 +01:00
Aleksandr Averbukh 1c302c7ab3 TF formatting 2023-02-18 21:48:05 +01:00
Aleksandr Averbukh d970db0c79 Merge branch 'master' into projects-ds-new-version 2023-02-18 21:38:53 +01:00
Aleksandr Averbukh a497aef707 feat: new version of projects-data-source based on AssetInventory ds 2023-02-18 21:36:51 +01:00
Wiktor Niesiobędzki e64e8db20d Allow additive IAM grants by robots name
Regreatablly member name will be known after apply, hence changes in the
tests
2023-02-16 14:39:21 +01:00
Chema Polo e8334857ff
Update main.tf (#1158)
replaced .secondary_pod_range by var.pod_range.secondary_pod_range that is the object which contins create, cidr an name attributes.
2023-02-15 06:28:47 +01:00
lcaggio 7bbeac805e Add 'max_time_travel_hours ' on BQ module 2023-02-14 08:43:15 +01:00
James D'Alfonso 15487078d4 add missing iam properties to factory_subnets 2023-02-13 10:00:50 +01:00
Luca Prete 3a0a1e2f6d
net-ilb: add example about ref existing MIG example (#1151) 2023-02-11 17:45:16 +01:00
Ludovico Magnocavallo 98a08c159a Update README.md 2023-02-11 15:52:47 +01:00
Wiktor Niesiobędzki 9395fbc822 Add documentation about JIT-ed service accounts 2023-02-11 15:52:47 +01:00
Brent Walker e8c0b66aee Remove unnecessary ternaries 2023-02-10 07:00:12 -05:00
Brent Walker 695b34efe9 fmt 2023-02-10 07:00:12 -05:00
Brent Walker c3a7760a49 Autopilot fix
Support cluster_autoscaling configuration when using autopilot
2023-02-10 07:00:12 -05:00
Brent Walker 42514436d7 Update docs 2023-02-10 05:34:58 -05:00
Brent Walker cc7f749c2e Add defaults for backup_configuration
Mark not nullable
2023-02-10 05:34:58 -05:00
Brent Walker 560af8b02b Use optional for backup configuration map
Addition of new parameters will be backwards compatible
Better reflects the underlying resource requirements
2023-02-10 05:34:58 -05:00
Brent Walker d00f3ee0cb Add support for point_in_time_recovery in backup settings 2023-02-10 05:34:58 -05:00
Julio Castillo d6e3716815 Fix gke-cluster dns config feature
Fixes #1141
2023-02-10 11:14:07 +01:00
Wiktor Niesiobędzki fab2ad08b9 Fixes for service-mesh example in gke-hub 2023-02-09 17:56:55 +01:00
Julio Castillo 3395464754 Update TOC 2023-02-07 16:17:16 +01:00
Julio Castillo 1aba238c99 Remove empty section 2023-02-07 15:59:29 +01:00
Julio Castillo bb565b72f1 Add Disk examples 2023-02-07 15:59:29 +01:00
Julio Castillo 08f2540872 Bump provider version 2023-02-07 15:59:29 +01:00
Julio Castillo fa064ddf4d Fix typo 2023-02-07 15:59:29 +01:00
Julio Castillo 04602353ce New compute-vm examples and tests 2023-02-07 15:59:29 +01:00
Ludovico Magnocavallo 5453c585e0
FAST multitenant bootstrap and resource management, rename org-level FAST stages (#1052)
* rename stages

* remove support for external org billing, rename output files

* resman: make groups optional, align on new billing account variable

* bootstrap: multitenant outputs

* tenant bootstrap stage, untested

* fix folder name

* fix stage 0 output names

* optional creation for tag keys in organization module

* single tenant bootstrap minus tag

* rename output files, add tenant tag key

* fix organization module tag values output

* test skipping creation for tags in organization module

* single tenant bootstrap plan working

* multitenant bootstrap

* tfdoc

* fix check links error messages

* fix links

* tfdoc

* fix links

* rename fast tests, fix bootstrap tests

* multitenant stages have their own folder, simplify stage numbering

* stage renumbering

* wip

* rename tests

* exclude fast providers in fixture

* stage 0 tests

* stage 1 tests

* network stages tests

* stage tests

* tfdoc

* fix links

* tfdoc

* multitenant tests

* remove local files

* stage links command

* fix links script, TODO

* wip

* wip single tenant bootstrap

* working tenant bootstrap

* update gitignore

* remove local files

* tfdoc

* remove local files

* allow tests for tenant bootstrap stage

* tenant bootstrap proxies stage 1 tfvars

* stage 2 and 3 service accounts and IAM in tenant bootstrap

* wip

* wip

* wip

* drop multitenant bootstrap

* tfdoc

* add missing stage 2 SAs, fix org-level IAM condition

* wip

* wip

* optional tag value creation in organization module

* stage 1 working

* linting

* linting

* READMEs

* wip

* Make stage-links script work in old macos bash

* stage links command help

* fix output file names

* diagrams

* fix svg

* stage 0 skeleton and diagram

* test svg

* test svg

* test diagram

* diagram

* readme

* fix stage links script

* stage 0 readme

* README changes

* stage readmes

* fix outputs order

* fix link

* fix tests

* stage 1 test

* skip stage example

* boilerplate

* fix tftest skip

* default bootstrap stage log sinks to log buckets

* add logging to tenant bootstrap

* move iam variables out of tenant config

* fix cicd, reintroduce missing variable

* use optional in stage 1 cicd variable

* rename extras stage

* rename and move identity providers local, use optional for cicd variable

* tfdoc

* add support for wif pool and providers, ci/cd

* tfdoc

* fix links

* better handling of modules repository

* add missing role on logging project

* fix cicd pools in locals, test cicd

* fix workflow extension

* fix module source replacement

* allow tenant bootstrap cicd sa to impersonate resman sa

* tenant workflow templates fix for no providers file

* fix output files, push github workflow template to new repository

* remove try from outpout files

* align stage 1 cicd internals to stage 0

* tfdoc

* tests

* fix tests

* tests

* improve variable descriptions

* use optional in fast features

* actually create tenant log sinks, and allow the resman sa to do it

* test

* tests

* aaaand tests again

* fast features tenant override

* fast features tenant override

* fix wording

* add missing comment

* configure pf service accounts

* add missing comment

* tfdoc

* tests

* IAM docs

* update copyright

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-02-04 15:00:45 +01:00
Ludovico Magnocavallo 46ba8f5691
Skip node config for autopilot (#1127) 2023-02-02 16:13:56 +01:00
Taneli Leppä 824f873327 Added mesh_certificates setting in GKE cluster. 2023-02-02 11:02:59 +01:00
Julio Castillo e962d07e04 Fix tests/linting 2023-01-31 14:37:13 +01:00
Julio Castillo 0337b85747
Merge branch 'master' into elia-glb-mig 2023-01-31 13:19:17 +00:00
Julio Castillo 1204b0077e
Merge branch 'master' into mci_gateway 2023-01-31 11:54:31 +00:00
Miren Esnaola 1a2745b632 In the apigee module now both the /22 and /28 peering IP ranges are passed at instance creation 2023-01-31 11:32:53 +01:00
Wiktor Niesiobędzki 1a657b31d3 Bump beta provider to 4.48
This is the first version that supports `gateway_api_config` block
2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 37626c8ac7 Adapt example to optional default 2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 2976df596e Fix tests (add JIT-ed SA for multiclusteringress.googleapis.com) 2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki e47242b5c8 tfdoc 2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 135f01f191 Add aditional Multi-Cluster related services 2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 0af5399389 Add gateway_api_config, change workload_identity default value
Make the default value on `enable_features` inline with what is set by
optionals.
2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 46c52776d0 Make features optional 2023-01-29 15:50:24 +01:00
Ludovico Magnocavallo 181b072d16
Update README.md 2023-01-29 12:56:07 +01:00
Ludovico Magnocavallo b0f177a2cf
Update README.md 2023-01-29 12:35:58 +01:00
Ludovico Magnocavallo b4b2555910
Merge branch 'master' into elia-glb-mig 2023-01-29 12:32:10 +01:00
Ayman Farhat edd3a82453
Include cloudbuild API in project module (#1116)
* Include cloudbuild API in project module

* Increase number of resources
2023-01-27 21:38:01 +01:00
fdhaussy 22c26e319f fix: remove unuseful ternary 2023-01-27 17:08:35 +01:00
fdhaussy bed7e05d09 add support for deployment_type and api_proxy_type in google_apigee_environment resource 2023-01-27 15:37:57 +01:00
Julio Diez 4d6561712e Fix tftest and format 2023-01-26 17:56:20 +01:00
Julio Diez 793596c61d Add HTTPS frontend with SNEG example 2023-01-26 12:25:54 +01:00
Julio Castillo 551d45760f
Merge branch 'master' into google_gkehub_feature_membership 2023-01-23 09:11:49 +01:00
Ludovico Magnocavallo f742d66b72
Merge branch 'master' into elia-glb-mig 2023-01-20 07:50:27 +01:00
Julio Castillo f014ee5794 Fix linting 2023-01-19 18:35:00 +01:00
Julio Castillo 1820269680 Add inventories to gke-nodepool examples 2023-01-19 18:19:34 +01:00
Julio Castillo 9c9aafb3f1 Update gke-cluster tests 2023-01-19 17:47:14 +01:00
Julio Castillo 1e0d7776e1 Update DNS tests 2023-01-19 17:47:14 +01:00
Julio Castillo a12089ef8c Move VPC factory and route tests to examples. 2023-01-19 17:47:14 +01:00
Julio Castillo a0cb67e1f4 Add inventories to gcs examples 2023-01-19 17:47:14 +01:00
Julio Castillo 12f07ebeac Extend net-vpc README with more tested examples 2023-01-19 17:47:14 +01:00
Julio Castillo fd19e4a923 add inventories net-vpc examples 2023-01-19 17:47:14 +01:00
Julio Castillo 410b7f5ba3 Fix typo in net-vpc DNS policies 2023-01-19 17:47:14 +01:00
Julio Castillo de704110c9 Update api-gateway tests 2023-01-19 17:47:14 +01:00
Wiktor Niesiobędzki 0ea769e70f Revert to use each.key for membership
It's not needed to force recreation of membership when workload identity
is configured.
2023-01-19 11:46:50 +01:00
Wiktor Niesiobędzki b38ef22572 Even more test fixes 2023-01-19 09:37:48 +01:00
Wiktor Niesiobędzki 10e462d594 Fix tests for servicemesh 2023-01-19 09:37:48 +01:00
Wiktor Niesiobędzki 720213593e Use google_gkehub_feature_membership
Use google_gkehub_feature_membership to provision ASM on clusters.

Ensure that the cluster membership is refreshed on cluster recreation.
2023-01-19 09:37:48 +01:00
lcaggio 07a7be29e3 Add shared-vpc support on Data Playgroud blueprint 2023-01-19 00:33:31 +01:00
eliamaldini 6d8cd928ed Added an example with a MIG 2023-01-18 11:07:02 +01:00
lcaggio 00f781bd9f First commit 2023-01-17 13:39:28 +01:00
eliamaldini 92b5b1f86b Added GLB example with MIG as backend 2023-01-13 17:56:12 +01:00
Miren Esnaola 7d9dc6c28e Added tags to gke-cluster module 2023-01-13 12:58:40 +01:00
Taneli Leppä fbf42197a0
Merge branch 'master' into stateful-disks-deletion-rule-fix 2023-01-04 08:39:43 +01:00
Taneli Leppä ca4cb3b3b9 Fixed delete_rule in compute-mig module for stateful disks. 2023-01-03 21:53:31 +01:00
Taneli Leppä 8bf3764989
Merge branch 'master' into compute-vm-device-name 2023-01-03 17:36:49 +01:00
Taneli Leppä 25e0cba10a Added device_name field to compute-vm attached_disks parameter (for stateful disks). 2023-01-03 16:55:54 +01:00
Julio Castillo c8bfe892a6 Update folder tests 2023-01-03 16:52:31 +01:00
Julio Castillo 065b1471a8 Reorder org policy rules 2023-01-03 16:52:31 +01:00
Israel Herraiz a733bfe6c5 Use map for local clusters variable 2022-12-30 11:27:37 +01:00
Israel Herraiz b0955964ee Fix TF code format 2022-12-28 19:57:07 +01:00
Israel Herraiz 20579394b8 Add cluster replicas to Bigtable module.
This adds the possiblity to define several clusters in a Bigtable instance,
which enables replication in Bigtable.

Some of the configurations options are moved inside a `map` that defines the
properties of each cluster.

These changes alter the interface of the module, so any previous code using this
module will have to adapt to the new options interface.
2022-12-28 19:53:17 +01:00
Ludovico Magnocavallo 66a402083b
Allow setting no ranges in firewall module custom rules (#1073)
* allow setting no ranges in custom firewall rules

* fix blueprint

* fix example

* fix example
2022-12-23 09:03:31 +01:00
Israel Herraiz 8718fedcab Fix service account prefix after provider version bump 2022-12-23 00:45:37 +01:00
Israel Herraiz a544a9d32d Update README.md after changing variables.tf 2022-12-23 00:17:05 +01:00
Israel Herraiz 36135405c4 Remove extra blank line 2022-12-23 00:13:30 +01:00
Israel Herraiz 7df527e1ef Bump versions EVERYWHERE 2022-12-23 00:06:42 +01:00
Israel Herraiz 32bee7104e Add gc_policy to Bigtable module.
Column families have now a new property, to specify the garbage collection
policy. A new option also allows to set a default policy if none is specified.

This changes the previous syntax for column families, that was helpful since the
policy is column-family specific, the new syntax makes it easier to specify a
policy per column family.
2022-12-22 23:37:30 +01:00
Ludovico Magnocavallo a847c772b4
Fix MIG health check variable (#1070)
* fix MIG health check variable

* fix MIG health check variable
2022-12-22 17:12:17 +00:00
Israel Herraiz f0395f9a8d
Merge branch 'master' into fix_column_families 2022-12-22 17:22:12 +01:00
Israel Herraiz 801c42679e Fix linting in README.md code 2022-12-22 17:07:50 +01:00
Israel Herraiz 6009de40cb Make tables optional and forbid it to be set to null 2022-12-22 16:33:29 +01:00
Israel Herraiz 3aad78c525 Fix indentation 2022-12-22 16:30:10 +01:00
Israel Herraiz 223092bfa1 A table can have more than one column family.
This commit fixes #1064 by allowing to add more than one column family. Split
keys are also now optional, and there is no possibility to set defaults for all
tables (since keys and column families are related to the data and schema for
each table, it is difficult that several tables share the same values).

Also, declaring a table with no split keys nor column families requires
initializing the table to an empty map, instead of using null.
2022-12-22 16:27:41 +01:00
Miren Esnaola e1613ee03e Added endpoint_attachment_hosts output to apigee module 2022-12-22 15:43:55 +01:00
Ludovico Magnocavallo ed7235186a
Merge branch 'master' into glb-backend-service-load-balancing-scheme 2022-12-22 12:27:21 +01:00
Ludovico Magnocavallo 082c63dfc5
refactor GCS module and tests (#1066) 2022-12-22 12:27:09 +01:00
Miren Esnaola 18fa8b79b3 Corrected load balancing scheme in backend service
Corrected load balancing scheme in backend service
2022-12-22 12:22:07 +01:00
Wiktor Niesiobędzki 7e18f6d7b5 Fixes for GKE
* Fix non-empty plan when spot instances are used
* Add cluster_id and recommend its use, as this prevents inconsitencies
  when only cluster is recreated (with no changes on node pool)
2022-12-21 23:14:52 +01:00
Ludovico Magnocavallo b438e0c37a
Allow using dynamically generated address in LB modules NEGs (#1061)
* test

* fix #1055 for net-ilb-l7

* fix glb module
2022-12-21 17:04:56 +01:00
Ludo 0d7243979b
revert last commit 2022-12-21 13:12:15 +01:00
Ludo 7c95b7ce43
fix #1055 for net-ilb-l7 2022-12-21 13:07:36 +01:00
Ludovico Magnocavallo 4d0c3b40f2
Merge branch 'master' into jccb/fix-net-vpc-factory 2022-12-20 08:27:03 +01:00
Ankur Saxena b487b2c938
Feature - CloudSQL pre-allocation private IP range and GKE Cluster ignore_change lifecycle hook. (#1056)
* Update to include allocate_ip_range

* Updates to GKE Cluster module

* Add boot_disk_kms_key to ignore changes

* Update ignore lifecycle block

* Update docs

* Remove default_pool_boot_disk

* Refactor as per suggestions in PR

* Update readme

* Update variable sort

* Changes to address review comments

Co-authored-by: Ankur Saxena <ankur.saxena@nwmworld.com>
2022-12-20 07:08:00 +00:00
Julio Castillo b8ddf4c837 Read ranges from correct fields in firewall factory 2022-12-20 03:57:42 +01:00
Julio Castillo b031d7add5 Fix tests 2022-12-18 20:37:16 +01:00
Julio Castillo 4f7cb39a06 Simplify readme discovery 2022-12-18 14:00:20 +01:00
Julio Castillo 126227502e Fix tests paths for examples 2022-12-18 14:00:20 +01:00
Julio Castillo 4b77e484b1 Migrate project module to new tests 2022-12-18 14:00:19 +01:00
Julio Castillo e700a27079 Enforce terraform fmt in examples 2022-12-18 14:00:19 +01:00
Julio Castillo 5755f6e7cf Fix net-vpc factory ranges 2022-12-18 14:00:19 +01:00
Julio Castillo 513fdfe91a Make directive for supporting files in examples more explicit 2022-12-18 14:00:19 +01:00
Julio Castillo b5ca8932dc Migrate organization to example-based tests 2022-12-18 14:00:19 +01:00
Simone Ruffilli 3e5c0b5ca7
Simple NVA - Fixes race condition
Prevents a race condition where the Google agent creates the local route for the LB VIP only after this script has been run
2022-12-15 11:02:24 +01:00
Prabha Arya 031b9f3476
Add ssl certs to cloudsql instance (#1049)
* add ssl certs to cloudsql instance

* rename variable

* fix typo

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-12-12 17:14:44 +01:00
Ludo 7d61c697c3 remove stale folder 2022-12-12 16:37:20 +01:00
Ludo f29f1a562a update changelog 2022-12-11 09:41:56 +01:00
Ludovico Magnocavallo d2015b0bc3
Assorted module fixes (#1045)
* net-ilb-l7 use both neg types in backends

* run example tests on cloud-config-container modules

* streamline nginx-tls cos module

* add tests for cos modules

* tfdoc

* onprem needs fixing, links

* disable test

* test
2022-12-10 15:40:15 +01:00
Ludovico Magnocavallo 2ff14b29fd
Merge branch 'master' into patch-1 2022-12-08 18:13:19 +01:00
Chema Polo 9786dc4f39
added reverse lookup feature to module dns #1042 (#1043)
* added reverse lookup feature to module dns

* corrected readme example passed tfdoc and tests

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-12-08 18:13:05 +01:00
Julio Castillo 59687de2cb
Merge branch 'master' into patch-1 2022-12-08 18:08:20 +01:00