Ludovico Magnocavallo
a09eb39a96
disable provider data source when not needed, explicitly depend on CI/CD SAs
2022-06-16 23:11:08 +02:00
Ludovico Magnocavallo
a35ed1ca0f
allow using cicd service accounts in build triggers
2022-06-16 22:16:43 +02:00
Ludovico Magnocavallo
da17d57863
fix tfdoc
2022-06-16 21:59:44 +02:00
Ludovico Magnocavallo
2b61efb722
add project number to sgae 1 values
2022-06-16 21:57:09 +02:00
Ludovico Magnocavallo
c87c645bf0
add missing try to stage 1 outputs
2022-06-16 21:56:48 +02:00
agusramirez@google.com
e3d91e84e4
sourcerepo and cloudbuild at 01-resman
2022-06-15 21:34:26 -05:00
agusramirez@google.com
2eb996d33d
sourcerepo and cloudbuild at 01-resman
2022-06-15 19:12:11 -05:00
Ludovico Magnocavallo
f75c0021a1
fix #673 ( #674 )
2022-06-10 10:51:26 +02:00
Ludovico Magnocavallo
44ae2671b0
CI/CD support for Source Repository and Cloud Build ( #669 )
...
* add id to outputs
* initial cloud build implementation for stage 0
* comments
* stage 0
* stage 1, untested
* add support for IAM and CB triggers to source repository module
* refactor stage 0 to use sourcerepo module
* refactor stage 1 to use sourcerepo module
* file descriptions
* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Alexander Meissner
7b30aa2c12
Added "gitlab" type to 01-resman Stage
2022-04-19 11:09:33 +02:00
Ludovico Magnocavallo
73a9136dc6
disable some org policies ( #631 )
2022-04-15 08:10:42 +02:00
Ludovico Magnocavallo
eec0fd2fdf
FAST: allow changing tag names from variables in resman ( #628 )
2022-04-13 10:22:33 +02:00
Julio Castillo
2644627837
Remove broken link and ignore globals in fast stages
2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo
725f7effce
Initial MVP for CI/CD ( #608 )
...
* preliminary support for wif in stage 0
* IAM wif role
* IAM wif role TODO
* add support for external SA IAM to SA module
* add name output to SA module
* separate cicd SA
* tfdoc
* GITLAB principal (untested)
* make GCS name output static
* outputs bucket
* fix stage 1 test
* tweak outputs
* tfdoc
* move wif_pool to automation variable
* add support for top-level and repository providers
* add missing boilerplate
* fix branchless principal
* initial workflow
* symlink provider template in stages
* remove service accounts from stage 0 cicd tfvars
* add cicd interface variable to resman stage
* fix cicd variable in resman stage
* better condition on outputs_location
* fix last change
* change outputs_location type
* revert outputs_location change
* split outputs in stage 0
* update ci/cd temporary notes
* rename additive IAM resource in SA module
* split outputs in stage 1
* remove unused locals
* fix stage 1 tests
* tfdoc
* Upload action files to outputs_bucket
* Fix tests and README
* rename template, streamline outputs
* local templates and gcs output for all stage 2
* add workflows to local output files
* Use lowercase WIF providers everywhere
* Bring back suffix for workflow files
* Remove unused files
* Update READMEs
* preliminary CI/CD implementation for stage 1
* fix stage 1
* stage 1 cicd
* tfdoc
* fix tests
* readme and links for cicd and wif
* refactor wif providers
* refactor cicd for stage 1
* fix stage 1
* wif org policies
* split identity provider configuration from cicd
* add type attribute to cicd repositories
* valid cicd repositories have a workflow template
* refactor stage 01
* fix stage 01 tests
* minimal CI/CD documentation
* better check_links error reporting
* fix links
* Added Gitlab specific configurations
Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.
* Fixed TF formatting in identity providers.
* Changing identity provider audience to null
Changing identity provider audience to default to null.
* add instructions for renaming workflows
* address Julio's comments
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo
9bb2f91458
Fix a few import errors in FAST ( #620 )
...
* fix import errors in stage 0
* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Julio Castillo
03c871097c
Remove moved blocks
2022-03-18 10:44:44 +01:00
Julio Castillo
31bf9b98d1
Swap xpnAdmin with custom xpnServiceAdmin for service projects
2022-02-25 12:19:10 +01:00
Simone Ruffilli
7ca1e6af5a
FAST: Networking README.md fixes
2022-02-24 11:48:56 +01:00
Simone Ruffilli
1af71244f3
FAST: Resman README.md fixes
2022-02-24 11:28:13 +01:00
Ludovico Magnocavallo
7d8299b837
fix tag environment binding names in fast
2022-02-21 13:28:36 +01:00
Ludovico Magnocavallo
474bcbdd0e
Use tags and tag-based IAM conditions in FAST ( #553 )
...
* organization module
* folder module
* project module
* fix project binding
* environment tags
* use id instead of name for references
* environment bindings
* conditional org policy admin binding via tags
* rename pf service accounts and buckets
* update IAM docs
* kms module
* compute-vm
* fix compute-vm
* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo
b9804d895b
re-add org policy admin role
2022-02-18 14:39:33 +01:00
Ludovico Magnocavallo
21a901c1dc
assign net delegated grants by env
2022-02-18 08:38:36 +01:00
Ludovico Magnocavallo
6f3aa4920a
re-remove policy admin role from dp SAs
2022-02-18 07:29:24 +01:00
Lorenzo Caggioni
04f054478d
Fix poliscy admin role
2022-02-18 00:34:51 +01:00
Julio Castillo
73c2233b9b
Small fixes to DP
2022-02-16 18:52:17 +01:00
Ludovico Magnocavallo
c63ddb96f9
resman tfdoc
2022-02-16 14:15:58 +01:00
Ludovico Magnocavallo
c5fa5d62e4
fix remaining issues, align variables
2022-02-16 14:12:39 +01:00
Ludovico Magnocavallo
728f6485ae
remove unneeded permissions in resman
2022-02-16 12:51:12 +01:00
Ludovico Magnocavallo
9c736ea337
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-16 11:47:41 +00:00
Julio Castillo
49f36157d5
Fix typo in stage1 outputs
2022-02-16 10:57:54 +01:00
Ludovico Magnocavallo
4b73cc4de6
tfdoc, stages README
2022-02-16 10:14:51 +01:00
lcaggio
8e8378fb28
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-16 09:56:42 +01:00
Julio Castillo
0544456462
Use local for tfvar outputs
2022-02-16 09:07:07 +01:00
Ludovico Magnocavallo
9015abfc80
stage 01 docs
2022-02-16 08:57:45 +01:00
Ludovico Magnocavallo
9c9312c4b8
tfdoc
2022-02-16 07:53:41 +01:00
Ludovico Magnocavallo
5c46d351d5
02-networking-vpn
2022-02-16 07:52:20 +01:00
Ludovico Magnocavallo
7e9843d445
tfdoc for real
2022-02-16 00:48:13 +01:00
Ludovico Magnocavallo
8c684124da
Merge branch 'fast/var-contracts' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/var-contracts
2022-02-16 00:44:24 +01:00
Ludovico Magnocavallo
b50deb68a7
tfdoc
2022-02-16 00:44:14 +01:00
Ludovico Magnocavallo
d3c95e5784
Merge branch 'master' into fast/var-contracts
2022-02-15 23:42:30 +00:00
Ludovico Magnocavallo
cd52f7c34c
stage 01
2022-02-16 00:35:50 +01:00
Lorenzo Caggioni
51026e6d0f
Fix xpnAdmin
2022-02-15 21:36:11 +01:00
Simone Ruffilli
1d187ddd23
FAST: PF example implementation changed to dev. Tests updated ( #544 )
...
* FAST: PF example implementation changed to dev. Tests updated
* FAST: simplified teams folder names
2022-02-15 12:22:08 +01:00
Lorenzo Caggioni
8906252528
Fix
2022-02-14 23:54:53 +01:00
Lorenzo Caggioni
7252e7ec01
Fix review comments.
2022-02-14 16:54:42 +01:00
Ludovico Magnocavallo
d8f4f37c48
tfdoc
2022-02-14 13:57:07 +01:00
Lorenzo Caggioni
026cea4554
Align with master branch
2022-02-14 10:27:03 +01:00
lcaggio
f98d690516
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-14 10:12:35 +01:00
Ludovico Magnocavallo
00f24698d0
refactor DRS org policy
2022-02-13 10:40:23 +01:00