Commit Graph

201 Commits

Author SHA1 Message Date
alexmeissner 6df4fc1cff Added Gitlab CI Template
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 73db258a38 Use new variable subnets_proxy_only instead of subnets_l7ilb for fast 2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo eec0fd2fdf
FAST: allow changing tag names from variables in resman (#628) 2022-04-13 10:22:33 +02:00
Julio Castillo 2644627837 Remove broken link and ignore globals in fast stages 2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo 9bb2f91458
Fix a few import errors in FAST (#620)
* fix import errors in stage 0

* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Simone Ruffilli c889ce8426
Updated DNS documentation (#611) 2022-04-05 10:02:26 +02:00
Lorenzo Caggioni 6f00caaaab Handle Service Identity SA. Update IAM.md 2022-04-04 00:38:34 +02:00
Lorenzo Caggioni e008fde9bb Update READMEs and separate demo pipelines 2022-04-03 22:03:35 +02:00
lcaggio ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag 2022-04-01 19:19:17 +02:00
Lorenzo Caggioni 15ba9559c5 Update READMEs 2022-04-01 18:44:18 +02:00
Lorenzo Caggioni 6d1207e1d7 Update FAST data foundation integration 2022-04-01 18:38:56 +02:00
Julio Castillo 0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker 2022-03-30 12:23:13 +02:00
Elia 1bc9929c81
Update vpn-spoke-prod.tf (#602)
Fixed region ew4
2022-03-30 10:20:10 +02:00
Luca Prete 2bb9e3f64e [#597] Fix link_checker 2022-03-28 09:43:00 +02:00
Julio Castillo 03c871097c Remove moved blocks 2022-03-18 10:44:44 +01:00
Ludovico Magnocavallo 78664f3ba4 update fast net docs 2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo 01ee503c38 allow psa disabling in fast 2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo 22deb378a6 disable PSA in fast 2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Simone Ruffilli 6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. (#574)
* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Simone Ruffilli 2a4c3dc913
Update outputs.tf (#571) 2022-03-06 09:19:31 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Julio Castillo cdecc199a4
Update README.md 2022-02-28 14:19:00 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli 0d08c7d56a Re-aligning PF vars post varpocalypse 2022-02-27 19:04:47 +01:00
Simone Ruffilli 26df0468b6 Adds autohealing to NVA MIGs 2022-02-27 10:57:21 +01:00
Simone Ruffilli c21a59a490 FAST: use preemptable instances for demo NVA. Comment out test VMs. 2022-02-27 10:04:20 +01:00
Julio Castillo e157a52d97 Rename sample project in fast project factory 2022-02-25 16:56:13 +01:00
Julio Castillo 31bf9b98d1 Swap xpnAdmin with custom xpnServiceAdmin for service projects 2022-02-25 12:19:10 +01:00
Simone Ruffilli 0d5d43b061 linter fixes 2022-02-24 15:13:34 +01:00
Simone Ruffilli dc3a2ad7be Fix tests on stages 2022-02-24 15:05:18 +01:00
Simone Ruffilli c1390d3a6a FAST PF: delete placeholder 2022-02-24 12:21:44 +01:00
Simone Ruffilli 3bab8d3ab9 FAST: Data Platform README.md fixes 2022-02-24 12:17:49 +01:00
Simone Ruffilli 62ae1cb7a1 FAST: Project Factory README.md fixes 2022-02-24 12:15:12 +01:00
Simone Ruffilli fb039d1bb7 FAST: Security README.md fixes 2022-02-24 12:10:36 +01:00
Simone Ruffilli d3d29836b8 FAST: Networking NVA stage fix 2022-02-24 12:01:54 +01:00
Simone Ruffilli 7ca1e6af5a FAST: Networking README.md fixes 2022-02-24 11:48:56 +01:00
Simone Ruffilli 1af71244f3 FAST: Resman README.md fixes 2022-02-24 11:28:13 +01:00
Simone Ruffilli ab4a8eb78a FAST: README.md fixes 2022-02-24 11:21:06 +01:00
Ludovico Magnocavallo c4b2f85a3b README tweaks 2022-02-21 20:41:40 +01:00
Ludovico Magnocavallo c74ea67987 minimal README tweaks 2022-02-21 14:52:25 +01:00
Ludovico Magnocavallo 7d8299b837 fix tag environment binding names in fast 2022-02-21 13:28:36 +01:00
Ludovico Magnocavallo 474bcbdd0e
Use tags and tag-based IAM conditions in FAST (#553)
* organization module

* folder module

* project module

* fix project binding

* environment tags

* use id instead of name for references

* environment bindings

* conditional org policy admin binding via tags

* rename pf service accounts and buckets

* update IAM docs

* kms module

* compute-vm

* fix compute-vm

* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo 4cb46fa19d
Update README.md 2022-02-19 08:28:35 +01:00
Ludovico Magnocavallo 98056b4457
Update README.md 2022-02-19 08:27:32 +01:00
Ludovico Magnocavallo f258ff1998 fw rules 2022-02-19 07:59:30 +01:00