Commit Graph

601 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 96e829bdf3
Billing exclusion support for FAST mt resman (#1209)
* fix files resource parsing in tfdoc

* fix tfdoc generated output

* billing exclusion support in mt bootstrap
2023-03-03 16:23:36 +00:00
Ludovico Magnocavallo 2217abe5f0
Allow preventing creation of billing IAM roles in FAST, add instructions on delayed billing association (#1207)
* stage 0

* resman and networking stages

* tfdoc

* security stage
2023-03-03 09:24:41 +01:00
Ludovico Magnocavallo 6320c53baf
Allow multiple peer gateways in vpn ha module (#1184)
* allow multiple peer gateways in vpn ha module

* align blueprints

* fast
2023-02-27 10:18:59 +00:00
lcaggio 47855cb682
Merge branch 'master' into lcaggio/dp-projectcreate 2023-02-23 11:54:48 +01:00
Wiktor Niesiobędzki ad0840656b Add documentation about referring modules stored on CSR 2023-02-22 10:02:54 +01:00
lcaggio ac75cbe71a Fix lint. 2023-02-22 01:38:44 +01:00
lcaggio 2108b4650d Fix Tests, rely on iam additive. 2023-02-22 01:36:01 +01:00
Julio Castillo a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo d3bcf625f9 Update yaml org policies 2023-02-21 15:49:16 +01:00
lcaggio 2564c9b06a Fix README 2023-02-20 01:17:08 +01:00
lcaggio 970b8ff255 Fix DP Fast variables. 2023-02-20 01:16:22 +01:00
lcaggio 63a81a9b9b Fix Fast test 2023-02-20 01:12:19 +01:00
lcaggio f4c1fa6c20 Fix tests. 2023-02-20 00:56:32 +01:00
Ludovico Magnocavallo 36a7347744
FAST stage docs cleanup (#1145)
* top-level and stage 0

* stage 1

* net peering

* networking

* networking

* security

* gke, dp

* checks
2023-02-15 05:42:14 +00:00
Julio Castillo 742b5bab62 Fix tfvars sample for fast bootstrap stage 2023-02-14 11:29:19 +02:00
Ludovico Magnocavallo 8708f490ce
Allow configuring regions from tfvars in FAST networking stages (#1137)
* configurable regions

* vpn, tests

* tfdoc

* separate envs

* nva

* test resources

* add new custom role for tenant network service accounts

* allow setting firewall policy name in networking stages

* fix stage links script

* set custom role to tenant networking service account

* rename tenant stage 1 provider files

* remove extra file

* fix peering and vpn

* tfdoc

* fix variable order

* tests
2023-02-08 09:59:43 +01:00
simonebruzzechesse 779c635682
Merged old bgp_peer_config parameter into bgp_peer aligning with newer version of tunnels variable available in the net-vpn-ha module (#1133)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-07 22:58:28 +00:00
Ludovico Magnocavallo 2471e25c2c
post PR message on init or validate failure (#1135) 2023-02-07 10:04:03 +01:00
Ludovico Magnocavallo 9b8de3e415
fix stage links, fix stage 1 output file names (#1134) 2023-02-06 20:51:26 +01:00
Natalia Strelkova 803c9c3163 Merge branch 'master' into fast-networking-nva-no-peering-files 2023-02-04 16:12:35 +01:00
Ludovico Magnocavallo 5453c585e0
FAST multitenant bootstrap and resource management, rename org-level FAST stages (#1052)
* rename stages

* remove support for external org billing, rename output files

* resman: make groups optional, align on new billing account variable

* bootstrap: multitenant outputs

* tenant bootstrap stage, untested

* fix folder name

* fix stage 0 output names

* optional creation for tag keys in organization module

* single tenant bootstrap minus tag

* rename output files, add tenant tag key

* fix organization module tag values output

* test skipping creation for tags in organization module

* single tenant bootstrap plan working

* multitenant bootstrap

* tfdoc

* fix check links error messages

* fix links

* tfdoc

* fix links

* rename fast tests, fix bootstrap tests

* multitenant stages have their own folder, simplify stage numbering

* stage renumbering

* wip

* rename tests

* exclude fast providers in fixture

* stage 0 tests

* stage 1 tests

* network stages tests

* stage tests

* tfdoc

* fix links

* tfdoc

* multitenant tests

* remove local files

* stage links command

* fix links script, TODO

* wip

* wip single tenant bootstrap

* working tenant bootstrap

* update gitignore

* remove local files

* tfdoc

* remove local files

* allow tests for tenant bootstrap stage

* tenant bootstrap proxies stage 1 tfvars

* stage 2 and 3 service accounts and IAM in tenant bootstrap

* wip

* wip

* wip

* drop multitenant bootstrap

* tfdoc

* add missing stage 2 SAs, fix org-level IAM condition

* wip

* wip

* optional tag value creation in organization module

* stage 1 working

* linting

* linting

* READMEs

* wip

* Make stage-links script work in old macos bash

* stage links command help

* fix output file names

* diagrams

* fix svg

* stage 0 skeleton and diagram

* test svg

* test svg

* test diagram

* diagram

* readme

* fix stage links script

* stage 0 readme

* README changes

* stage readmes

* fix outputs order

* fix link

* fix tests

* stage 1 test

* skip stage example

* boilerplate

* fix tftest skip

* default bootstrap stage log sinks to log buckets

* add logging to tenant bootstrap

* move iam variables out of tenant config

* fix cicd, reintroduce missing variable

* use optional in stage 1 cicd variable

* rename extras stage

* rename and move identity providers local, use optional for cicd variable

* tfdoc

* add support for wif pool and providers, ci/cd

* tfdoc

* fix links

* better handling of modules repository

* add missing role on logging project

* fix cicd pools in locals, test cicd

* fix workflow extension

* fix module source replacement

* allow tenant bootstrap cicd sa to impersonate resman sa

* tenant workflow templates fix for no providers file

* fix output files, push github workflow template to new repository

* remove try from outpout files

* align stage 1 cicd internals to stage 0

* tfdoc

* tests

* fix tests

* tests

* improve variable descriptions

* use optional in fast features

* actually create tenant log sinks, and allow the resman sa to do it

* test

* tests

* aaaand tests again

* fast features tenant override

* fast features tenant override

* fix wording

* add missing comment

* configure pf service accounts

* add missing comment

* tfdoc

* tests

* IAM docs

* update copyright

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-02-04 15:00:45 +01:00
Natalia Strelkova 2958063625
Remove info about non-existing vpc-peering-*.tf files 2023-02-03 15:39:00 +01:00
Ludovico Magnocavallo 7b96ed429c
add missing role for initial user (#1118) 2023-01-28 08:41:22 +00:00
Ludo 83a0916bff
add missing newline 2023-01-28 09:27:31 +01:00
Ludovico Magnocavallo c1d3736b06
fix destroy in stage 1 outputs (#1099) 2023-01-19 09:35:40 +00:00
lcaggio a5f4e0883d Fix FAST documentation. 2023-01-11 08:56:58 +01:00
lcaggio 488b6d4dc0 Remove plg project, composer 2 2023-01-11 00:31:52 +01:00
Roberto Jung Drebes e234aa68b4 fix restricted services not being added to the perimeter configurations 2023-01-06 13:07:33 +01:00
agutta 7c3768d338
Update FAQ.md 2022-12-29 09:37:17 -06:00
agutta 5120df1615
Adding new section for Authentication issues
Common error when we have multiple identities
2022-12-28 12:06:13 -06:00
agutta a128333223
Adding new file FAQ and an image
Adding a new file to capture and address frequently asked questions.
2022-12-19 16:07:41 -06:00
Julio Castillo 4f7cb39a06 Simplify readme discovery 2022-12-18 14:00:20 +01:00
agutta e3ac488827
Updating a small typo
Updating "THe" to "The"
2022-12-16 09:30:47 -06:00
Kartheek c297d1061f
FAST: add instructions for billing export to stage 0 README (#1051)
* Readme updated with Billing data export API Limitations 

Because of the billing API limitations, Though BigQuery dataset will be created within billing project, it will be empty.  BigQuery export have to be manually enabled in order for the data to be populated within the dataset. Since the Readme doesn't capture this, a note and reference link was added.

* fix typos

Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2022-12-15 09:53:56 +01:00
Natalia Strelkova 77736c13e3
Merge branch 'master' into nstrelkova-fast-fix-ew3 2022-12-07 12:45:07 +01:00
Agustin Ramirez 324311315c
Update README.md (#1032)
enviroments for vpc_sc_perimeters sample code

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-12-05 16:02:00 +01:00
Julio Castillo fa63e9d5d0 Remove optional stuff 2022-11-30 16:00:53 +01:00
Julio Castillo ef4a4b02af Fix linting 2022-11-30 11:36:58 +01:00
Julio Castillo 798d3a4136 Update VPN-HA module to tf1.3 (wip) 2022-11-30 10:52:24 +01:00
Natalia Strelkova 4654e5af39 README regenerated 2022-11-29 09:21:24 +00:00
Natalia Strelkova a68171947f europe-west4 everywhere (was west3 in some places) 2022-11-29 09:16:56 +00:00
Ludo 0a529c93a1 remove extra symlink 2022-11-25 17:33:54 +01:00
Julio Castillo 612d7283e8 Enforce nonempty descriptions ending in a colon 2022-11-24 18:56:01 +01:00
Natalia Strelkova 3b3c426633
00-cicd stage got moved to extras/
Apparently we forgot to change this particular line when moving 00-cicd to the extras/ folder
2022-11-23 15:53:18 +01:00
Julio Castillo 826ff14ef9 Sort variables and outputs 2022-11-21 13:17:55 +01:00
Ludovico Magnocavallo ad483e34c8
FAST: fixes to GitHub workflow and 02/net outputs (#976)
* fix gh workflow

* short PR message

* streamline workflow

* fix net outputs
2022-11-15 08:48:32 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Ludovico Magnocavallo eb27635221
FAST: improve GitHub workflow, stage 01 output fixes (#966)
* fix outputs on null output files variable

* improve GH workflow

* bring back apply status

* fix heading level

* add missing try, update IAM md files
2022-11-11 07:55:57 +00:00
Ludovico Magnocavallo a9c47681d8
Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Ludovico Magnocavallo dff7b69250
FAST: bootstrap and extra stage CI/CD improvements and fixes (#956)
* add clone commands output

* always create secret key for repos, fix module source

* optional modules ref

* tfdoc

* create secrets in the right repositories

* add publick key to modules repository

* bump Terraform version in CI templates

* add template to populated files

* tfdoc

* do not error out writing ci/cd workflows when output files are disabled

* update README

* fix apply file outputs when outputs_location is changed to null
2022-11-08 09:38:15 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo 85378ea0fb
Update README.md 2022-11-03 22:43:22 +01:00
Julio Castillo 453a55c2d0
Merge branch 'master' into patch-2 2022-11-03 22:39:44 +01:00
Kartheek 49b5b97afe
Merge branch 'master' into patch-2 2022-11-03 09:16:32 -07:00
Julio Castillo dc81b26a9b Use display_name instead of description for FAST service accounts
Fixes #944
2022-11-03 16:23:48 +01:00
Julio Castillo 8a20a14a0d Move policy to serverless.yaml 2022-11-03 14:50:53 +01:00
Julio Castillo 747ebc6f39 Use org policy factory for resman stage 2022-11-03 14:48:21 +01:00
Kartheek c7b70e42d0
Update README.md
Added a note about Project resource name to be unique and also to check if project was deleted recently.
2022-11-02 14:37:49 -07:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Ludovico Magnocavallo 559753fab5
enable org policy API, fix run.allowedIngress value (#935) 2022-11-01 09:52:03 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo 410fe1c73a Add pf example with deny all org policy 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo d80a43eabb Fix FAST org policies 2022-10-28 17:49:44 +02:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Simone Ruffilli 7b2a82a7d6
PGA DNS records (#911)
Additional PGA DNS records
2022-10-25 14:28:28 +02:00
Julio Castillo 192edf2b75 Remove redundant ttls 2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo 350a7dbf83
update README 2022-10-23 19:56:08 +02:00
Ludovico Magnocavallo fc7bf40e69
Initial replacement for CI/CD stage (#903)
* github extra stage

* remove original cicd stage

* allow setting commit attributes via variabes

* remove reference to deleted stage

* optional repo creation, documentation
2022-10-23 19:52:45 +02:00
Michael Malet fe6fd3d7ec feat(project-factory): allow folder_id to be defined in defaults_file 2022-10-20 15:52:32 +01:00
Julio Castillo 2333bf58f1
Update README.md (#898)
* Update README.md

* Update terraform.tfvars.sample

* Update README.md

* Update README.md
2022-10-19 17:15:36 +02:00
Simone Ruffilli 1c24e921b3
Added 02-networking-separate-envs to stages doc. 2022-10-14 16:00:30 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Simone Ruffilli 24c3ffe66b
FAST: Separate network environment (#566) 2022-10-10 11:50:07 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Simone Ruffilli 674deb1c4f
FAST: Replace NVAs in 02-networking-nva with COS-based VMs (#867) 2022-10-10 09:16:28 +02:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 60cb3a4dc8 Default gcp-support to gcp-devops 2022-10-06 14:18:58 +02:00
Julio Castillo e4b32c17d0
Update README.md 2022-10-06 13:59:44 +02:00
Ludovico Magnocavallo 4a1465ae32
Comment redundant role in bootstrap stage, align IAM.md files, improve IAM tool (#842)
* comment redundant role

* account for duplicate folder names

* update IAM.md files
2022-09-29 08:30:01 +02:00
Ludovico Magnocavallo f2eb424d55 FAST: revert 00-cicd provider changes 2022-09-28 14:27:17 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
lcaggio 149d84d41d Fix NVA and VPC firewall rules. 2022-09-20 17:08:24 +02:00
lcaggio ee309ecc06 Update firewall rules. 2022-09-20 16:57:35 +02:00
Julio Castillo bc383f6039
Update COMPANION.md 2022-09-12 21:30:24 +02:00
Ludovico Magnocavallo 91af0e8535 fix links in gke stage readmes 2022-09-12 10:30:19 +02:00
Julio Castillo 72da12e377 Rename gke-serverless to gke and add test for fast gke stage 2022-09-12 09:56:25 +02:00
Antonio Lopez f8c971773f
Merge branch 'master' into master 2022-09-09 18:22:08 +02:00
ajlopezn 4afd01e6a2 corrections to companion.md 2022-09-09 18:20:00 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Antonio Lopez 77d3302405
Merge branch 'GoogleCloudPlatform:master' into master 2022-09-09 12:23:10 +02:00
Julio Castillo f8e2fdaf19 Remove project.service_config instances using the new default 2022-09-09 09:38:09 +02:00
Ludovico Magnocavallo a18a3c92b3
GKE CI/CD (#804) 2022-09-09 08:33:25 +02:00
Ludovico Magnocavallo 7982cee871
Update README.md 2022-09-09 07:24:42 +02:00
Ludovico Magnocavallo 126e27a976
Update README.md 2022-09-09 07:24:06 +02:00
Ludovico Magnocavallo 26ebeb8db2
Update README.md 2022-09-09 07:21:24 +02:00
Miklos Niedermayer b0b6510aed
Fix automation gcs location (#803)
* Fix automation gcs location

* also apply change to stage 01

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-09-09 07:18:44 +02:00
Julio Castillo 76e49d5891 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-09-08 22:38:05 +02:00
Julio Castillo a530620f4d Fixing typos 2022-09-08 22:35:01 +02:00
Julio Castillo ff7e39828d Finished readme of fast gke stage 2022-09-08 22:33:14 +02:00
Ludovico Magnocavallo 353706150e
FAST: add support for storage locations in stages 0 and 1 (#800)
* FAST: add support for storage locations in stages 0 and 1

* fix typo

* fix typo on logging

* tfdoc
2022-09-08 15:24:42 +02:00
Ludovico Magnocavallo 6035dc1491
FAST: add support for project parents to bootstrap stage (#799)
* FAST: add support for project parents to bootstrap stage

* change as per review comments
2022-09-08 15:11:46 +02:00
Antonio Lopez 953cda6462
Merge branch 'GoogleCloudPlatform:master' into master 2022-09-07 17:00:37 +02:00
ajlopezn ad75ec4ee0 solved content issues 2022-09-07 16:08:48 +02:00
ajlopezn 2dc2f669a3 added required step to execute networking stage: tfvars with output variable is needed to generate network.tfvars for proyect factory 2022-09-07 15:08:10 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
ajlopezn a7d663ca37 edited companion guide 2022-09-05 14:26:38 +02:00
ajlopezn 4c2da1903f edited companion guide 2022-09-05 14:24:01 +02:00
ajlopezn 544650c988 first version of companion guide 2022-09-05 10:30:05 +02:00
Fawzi 4bbe83ee75
update outputs.tf (#793)
Fixing typo
2022-09-04 13:50:36 +02:00
ajlopezn 4d58526928 pre-requisites added to companion guide 2022-09-02 12:28:47 +02:00
Antonio Lopez 12ce656390
Create COMPANION.md
creating file index
2022-09-02 11:00:25 +02:00
Julio Castillo 2ddd68ee2a Fix comment exaplaining serviceProjectAdmin permissions 2022-08-30 20:41:34 +02:00
Julio Castillo b1d9b27ac3 Allow peering configuration to be passed as variable to fleet example. 2022-08-30 20:39:47 +02:00
Julio Castillo fd06a841b7 Update gke multitenant README 2022-08-25 18:37:55 +02:00
Julio Castillo cad37158b7 Fix dependencies in gke multitenant stage 2022-08-25 17:35:51 +02:00
Julio Castillo a82ef7550e Allow gke stage to write to automation bucket 2022-08-25 15:11:44 +02:00
Julio Castillo c3e6a03eaa Allow fleet project to be specified by the user 2022-08-25 14:24:39 +02:00
Julio Castillo fa8990dc76 gke stage docs 2022-08-24 16:43:48 +02:00
Julio Castillo 909739039b Fix internal links 2022-08-24 15:53:55 +02:00
Julio Castillo d345cf8223 Update gke multitenant README 2022-08-24 15:40:42 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Stefan Tomm 5b7f6ab91a
fix data-platform-dev folder in stage 03-data-platform (#774) 2022-08-16 09:36:24 +02:00
Ludovico Magnocavallo a285569998 Merge branch 'fast/gke2' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/gke2 2022-08-12 11:25:26 +02:00
Ludovico Magnocavallo 95b12ac2f7 rename example folder 2022-08-12 11:24:46 +02:00
Ludovico Magnocavallo 5762d5925d rename example folder, add diagram 2022-08-12 11:24:21 +02:00
Daniel Marzini 00e8666063 TODO: adjust external load balancer policy 2022-08-11 17:04:45 +02:00
Ludovico Magnocavallo ac575119c6 wip 2022-08-10 15:59:56 +02:00
Ludovico Magnocavallo c2b0782c18 wip
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
2022-08-10 15:59:51 +02:00
Ludovico Magnocavallo af336f82fe move gke fat module to examples 2022-08-10 15:37:20 +02:00
Ludovico Magnocavallo a16cf9e2a8 documentation WIP 2022-08-08 13:54:06 +02:00
Daniel Marzini 6af9953a49 Update README.md
README WIP
2022-08-08 11:04:46 +02:00
Ludovico Magnocavallo dcc2700008
Merge branch 'master' into fast/gke2 2022-08-07 07:43:16 +00:00
Daisuke b953424aec
fixing to move without output_location (#770) 2022-08-07 09:00:27 +02:00
Ludovico Magnocavallo 34d5156eeb top-level README 2022-08-06 11:07:22 +02:00
Ludovico Magnocavallo 3745b2885e remove support for preemptible nodes 2022-08-06 11:00:46 +02:00
Ludovico Magnocavallo 0bec03b0a0 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-03 20:42:09 +02:00
Ludovico Magnocavallo bfefaf627e
refactor teams, fix #750 (#766) 2022-08-03 16:34:09 +02:00
Ludovico Magnocavallo 9b6262de41
FAST: move region trigrams to a variable in network stages (#765)
* add region trigram variable

* debug check documentation

* fix linting
2022-08-03 11:36:27 +02:00
Daniel Marzini b85b5e265a added spot vm 2022-08-02 21:41:47 +02:00
Daniel Marzini 1cf963b443 added spot vm 2022-08-02 21:41:36 +02:00
Ludovico Magnocavallo ce7e4bc59c linting 2022-08-02 19:12:52 +02:00
Daniel Marzini 170d585473 fix permissions and binauthz 2022-08-02 18:28:06 +02:00
Daniel Marzini 45723233c8 fix permissions and binauthz 2022-08-02 18:27:44 +02:00
Ludovico Magnocavallo dedddbed20 align net stages 2022-07-31 15:13:39 +02:00
Ludovico Magnocavallo cd3b4463de align net stages 2022-07-31 15:00:09 +02:00
Ludovico Magnocavallo 9b371a3d2c support GKE specific network roles in stages 01 and 02 2022-07-31 14:54:14 +02:00
Ludovico Magnocavallo 24f3545de7 add project-level iam variable 2022-07-30 16:05:39 +02:00
Ludovico Magnocavallo f51e40b60a tfdoc 2022-07-30 16:00:10 +02:00
Ludovico Magnocavallo c51ba73e38 change to binary_authorization, add support for additional services 2022-07-30 15:59:45 +02:00
Daniel Marzini c9fa0fbd55 fixes 2022-07-29 23:45:15 +02:00
Ludovico Magnocavallo f00b67ae88 linting 2022-07-29 15:11:36 +02:00
Ludovico Magnocavallo 7c23aeae58 implement dev, fix variables, add stub READMEs 2022-07-29 15:09:57 +02:00
Ludovico Magnocavallo c24e661383 fleet mcs service accounts 2022-07-29 14:01:35 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo 1260db923e
Update main.tf 2022-07-29 10:49:50 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
Agustin Ramirez 7f1a523866
FIX: Missing value to format principalSet (#759) 2022-07-27 08:18:27 +02:00
Ludovico Magnocavallo 5e0ab57f3a
Add support for IAM bindings on service accounts to project factory (#753)
* Fix #748

* fix linting

* remove trailing whitespace

* update FAST pf
2022-07-21 15:13:39 +02:00
agusramirez@google.com 5f20c11b57 FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:20:56 -05:00
Agustin Ramirez ee0b6d6b2a
FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:07:05 -05:00
Simone Ruffilli ef27d2e9d1
Use spot VMs for test VM and for NVAs (#734) 2022-07-13 13:57:03 +02:00
Julio Castillo 07c5da4283 Fix tests 2022-07-12 12:39:00 +02:00
Julio Castillo 1bc352bb7b Fix docs 2022-07-12 12:19:05 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Julio Castillo e7bc11e6b9 Add gke SAs to outputs 2022-07-12 12:10:39 +02:00
Ludovico Magnocavallo f42b0f06e4
add billing IAM for billing group (#730) 2022-07-11 08:26:13 +02:00
Simone Ruffilli 0d9fac316a
FAST: Resman: Update billing.tf (#721)
* FAST: Resman: Update billing.tf

Add billing.costsManager to the PF SAs to allow it to create billing alerts.

* fix linting

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-06 16:10:14 +03:00
Michael Gfeller ea7827d1ad FAST - added missing format argument in branch-pf-dev-sa-cicd
In the module branch-pf-dev-sa-cicd, the calls to the "format" function were missing the argument var.automation.federated_identity_pool.
2022-07-05 11:44:33 +02:00
Ludovico Magnocavallo 8585852ae6
fix #714 (#715) 2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
Ludovico Magnocavallo 9a3128e716 wip 2022-06-30 20:20:14 +02:00
Ludovico Magnocavallo 7b5ced7e15 stage 01 2022-06-30 18:22:57 +02:00
Ludovico Magnocavallo 7786dd3d90
Merge branch 'master' into fast/gke2 2022-06-30 11:30:52 +02:00
Ludovico Magnocavallo d6a81fb662 wip 2022-06-30 11:00:57 +02:00
Ludovico Magnocavallo ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Michael Gfeller c66bb0e1c3 Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into mgfeller/fast-readme-tfvars-auto 2022-06-29 15:29:43 +02:00
Ludovico Magnocavallo 66c4fffd76
FAST: configuration switches for features (#703)
* example implementation of top-level switches

* data platform as a fast feature

* decouple teams and project factory

* teams disable fixes

* optional pf

* networking stage

* remove var from stage 2s, security
2022-06-28 17:33:37 +02:00
Julio Castillo 2da28e5954
Update CLEANUP.md 2022-06-28 11:28:57 +02:00
Michael Gfeller 34650ae621 FAST - updated some READMEs about usage of *.auto.tfvars files
Updated information about using the auto generated tfvars files in the "Variable configuration" section for some stages.
Mainly about using globals.auto.tfvars.json instead of copying terraform.tfvars from bootstrap stage.
2022-06-28 11:27:21 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Ludovico Magnocavallo dfb447a2c4
Merge branch 'master' into fast/gke2 2022-06-23 13:50:28 +02:00
Ludovico Magnocavallo ed4b301a17 align subnets between vpn and peering network stages 2022-06-23 09:05:20 +02:00
Ludovico Magnocavallo fb1d31551f fix tfdoc 2022-06-23 08:55:28 +02:00
Ludovico Magnocavallo 744417f22f fix boilerplate 2022-06-23 08:52:36 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Ludovico Magnocavallo f9775f61c9
Merge branch 'master' into lcaggio/data-p-200622 2022-06-23 08:11:47 +02:00
Ludovico Magnocavallo c59ce76e97
Add repository_owner to GitHub identity attributes (#699)
* add repository_owner to GitHub identity attributes

* fix errors on null identity provider custom settings
2022-06-23 08:06:25 +02:00
Lorenzo Caggioni b10d091a98 Fix README 2022-06-23 07:16:59 +02:00
Lorenzo Caggioni ceb611bb81 Remove custom role and rely on conditions. 2022-06-23 07:04:35 +02:00
lcaggio 5c653638bc
Merge branch 'master' into lcaggio/data-p-200622 2022-06-22 16:13:28 +02:00
Taneli Leppä c3fdc62ff2 Allow creating repositories in Gitlab via Terraform. 2022-06-21 15:12:03 +02:00
lcaggio d9ad654281
Merge branch 'master' into lcaggio/fix-readme-20220620 2022-06-21 07:54:42 +02:00