Commit Graph

73 Commits

Author SHA1 Message Date
Ludovico Magnocavallo a09eb39a96 disable provider data source when not needed, explicitly depend on CI/CD SAs 2022-06-16 23:11:08 +02:00
Ludovico Magnocavallo a35ed1ca0f allow using cicd service accounts in build triggers 2022-06-16 22:16:43 +02:00
Ludovico Magnocavallo da17d57863 fix tfdoc 2022-06-16 21:59:44 +02:00
Ludovico Magnocavallo 2b61efb722 add project number to sgae 1 values 2022-06-16 21:57:09 +02:00
Ludovico Magnocavallo c87c645bf0 add missing try to stage 1 outputs 2022-06-16 21:56:48 +02:00
agusramirez@google.com e3d91e84e4 sourcerepo and cloudbuild at 01-resman 2022-06-15 21:34:26 -05:00
agusramirez@google.com 2eb996d33d sourcerepo and cloudbuild at 01-resman 2022-06-15 19:12:11 -05:00
Ludovico Magnocavallo f75c0021a1
fix #673 (#674) 2022-06-10 10:51:26 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Alexander Meissner 7b30aa2c12
Added "gitlab" type to 01-resman Stage 2022-04-19 11:09:33 +02:00
Ludovico Magnocavallo 73a9136dc6
disable some org policies (#631) 2022-04-15 08:10:42 +02:00
Ludovico Magnocavallo eec0fd2fdf
FAST: allow changing tag names from variables in resman (#628) 2022-04-13 10:22:33 +02:00
Julio Castillo 2644627837 Remove broken link and ignore globals in fast stages 2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo 9bb2f91458
Fix a few import errors in FAST (#620)
* fix import errors in stage 0

* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Julio Castillo 03c871097c Remove moved blocks 2022-03-18 10:44:44 +01:00
Julio Castillo 31bf9b98d1 Swap xpnAdmin with custom xpnServiceAdmin for service projects 2022-02-25 12:19:10 +01:00
Simone Ruffilli 7ca1e6af5a FAST: Networking README.md fixes 2022-02-24 11:48:56 +01:00
Simone Ruffilli 1af71244f3 FAST: Resman README.md fixes 2022-02-24 11:28:13 +01:00
Ludovico Magnocavallo 7d8299b837 fix tag environment binding names in fast 2022-02-21 13:28:36 +01:00
Ludovico Magnocavallo 474bcbdd0e
Use tags and tag-based IAM conditions in FAST (#553)
* organization module

* folder module

* project module

* fix project binding

* environment tags

* use id instead of name for references

* environment bindings

* conditional org policy admin binding via tags

* rename pf service accounts and buckets

* update IAM docs

* kms module

* compute-vm

* fix compute-vm

* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo b9804d895b re-add org policy admin role 2022-02-18 14:39:33 +01:00
Ludovico Magnocavallo 21a901c1dc assign net delegated grants by env 2022-02-18 08:38:36 +01:00
Ludovico Magnocavallo 6f3aa4920a re-remove policy admin role from dp SAs 2022-02-18 07:29:24 +01:00
Lorenzo Caggioni 04f054478d Fix poliscy admin role 2022-02-18 00:34:51 +01:00
Julio Castillo 73c2233b9b Small fixes to DP 2022-02-16 18:52:17 +01:00
Ludovico Magnocavallo c63ddb96f9 resman tfdoc 2022-02-16 14:15:58 +01:00
Ludovico Magnocavallo c5fa5d62e4 fix remaining issues, align variables 2022-02-16 14:12:39 +01:00
Ludovico Magnocavallo 728f6485ae remove unneeded permissions in resman 2022-02-16 12:51:12 +01:00
Ludovico Magnocavallo 9c736ea337
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-16 11:47:41 +00:00
Julio Castillo 49f36157d5 Fix typo in stage1 outputs 2022-02-16 10:57:54 +01:00
Ludovico Magnocavallo 4b73cc4de6 tfdoc, stages README 2022-02-16 10:14:51 +01:00
lcaggio 8e8378fb28
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-16 09:56:42 +01:00
Julio Castillo 0544456462 Use local for tfvar outputs 2022-02-16 09:07:07 +01:00
Ludovico Magnocavallo 9015abfc80 stage 01 docs 2022-02-16 08:57:45 +01:00
Ludovico Magnocavallo 9c9312c4b8 tfdoc 2022-02-16 07:53:41 +01:00
Ludovico Magnocavallo 5c46d351d5 02-networking-vpn 2022-02-16 07:52:20 +01:00
Ludovico Magnocavallo 7e9843d445 tfdoc for real 2022-02-16 00:48:13 +01:00
Ludovico Magnocavallo 8c684124da Merge branch 'fast/var-contracts' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/var-contracts 2022-02-16 00:44:24 +01:00
Ludovico Magnocavallo b50deb68a7 tfdoc 2022-02-16 00:44:14 +01:00
Ludovico Magnocavallo d3c95e5784
Merge branch 'master' into fast/var-contracts 2022-02-15 23:42:30 +00:00
Ludovico Magnocavallo cd52f7c34c stage 01 2022-02-16 00:35:50 +01:00
Lorenzo Caggioni 51026e6d0f Fix xpnAdmin 2022-02-15 21:36:11 +01:00
Simone Ruffilli 1d187ddd23
FAST: PF example implementation changed to dev. Tests updated (#544)
* FAST: PF example implementation changed to dev. Tests updated
* FAST: simplified teams folder names
2022-02-15 12:22:08 +01:00
Lorenzo Caggioni 8906252528 Fix 2022-02-14 23:54:53 +01:00
Lorenzo Caggioni 7252e7ec01 Fix review comments. 2022-02-14 16:54:42 +01:00
Ludovico Magnocavallo d8f4f37c48 tfdoc 2022-02-14 13:57:07 +01:00
Lorenzo Caggioni 026cea4554 Align with master branch 2022-02-14 10:27:03 +01:00
lcaggio f98d690516
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-14 10:12:35 +01:00
Ludovico Magnocavallo 00f24698d0 refactor DRS org policy 2022-02-13 10:40:23 +01:00