Commit Graph

85 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 7e9843d445 tfdoc for real 2022-02-16 00:48:13 +01:00
Ludovico Magnocavallo 8c684124da Merge branch 'fast/var-contracts' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/var-contracts 2022-02-16 00:44:24 +01:00
Ludovico Magnocavallo b50deb68a7 tfdoc 2022-02-16 00:44:14 +01:00
Ludovico Magnocavallo d3c95e5784
Merge branch 'master' into fast/var-contracts 2022-02-15 23:42:30 +00:00
Ludovico Magnocavallo cd52f7c34c stage 01 2022-02-16 00:35:50 +01:00
Ludovico Magnocavallo 742a08ba17 add tfvars output 2022-02-16 00:35:44 +01:00
Ludovico Magnocavallo 369253cc3a write providers to a common folder 2022-02-16 00:14:49 +01:00
Ludovico Magnocavallo 8dd5060779 file permissions 2022-02-16 00:08:09 +01:00
Ludovico Magnocavallo ad247e9435 bootstrap outputs 2022-02-16 00:03:10 +01:00
Simone Ruffilli 1d187ddd23
FAST: PF example implementation changed to dev. Tests updated (#544)
* FAST: PF example implementation changed to dev. Tests updated
* FAST: simplified teams folder names
2022-02-15 12:22:08 +01:00
Ludovico Magnocavallo c91802f501
Change psa type in net-vpc, fix psa in fast net stages (#545)
* change psn type in net-vpc, fix psa in fast net stages

* fix doc examples

* psn ---> psa
2022-02-15 09:24:27 +01:00
Ludovico Magnocavallo 00f24698d0 refactor DRS org policy 2022-02-13 10:40:23 +01:00
Ludovico Magnocavallo 2d27d20f1a update IAM docs 2022-02-12 15:47:31 +01:00
Ludovico Magnocavallo 54c7d8a5c6 fix perimeter definition in locals 2022-02-12 15:41:13 +01:00
Ludovico Magnocavallo fbf4d29c88
Fix FAST names (#539)
* name checker, initial names fix

* fix name parser

* sdbx -> sbox

* explicit names

* show total name length

* check names in linting action

* validate prefix length

* fix typo
2022-02-12 13:29:22 +01:00
Julio Castillo 9076c2f2b0 Fix external billing org 2022-02-11 17:10:44 +01:00
Simone Ruffilli a978000e31
Renamed vpc-(.*) files to (#538) 2022-02-11 10:23:57 +01:00
Julio Castillo 547ded37b2 Update networking folder names to match teams folder 2022-02-11 08:29:46 +01:00
Ludovico Magnocavallo 53144713aa
update bootstrap commands (#536) 2022-02-11 08:20:33 +01:00
Julio Castillo 096dce08e9 Use prefix for PF projects 2022-02-11 00:43:14 +01:00
Julio Castillo fd599ea286 Fix renamed argument to project factory module 2022-02-11 00:30:46 +01:00
Ludovico Magnocavallo bb97486987 tfdoc 2022-02-10 19:17:35 +01:00
Ludovico Magnocavallo 677f3c8df1 use custom role name for billing org too 2022-02-10 19:16:13 +01:00
Ludovico Magnocavallo 3246d1c08d fix variable 2022-02-10 19:13:55 +01:00
Ludovico Magnocavallo c4d36cc66b Allow specifying custom role names 2022-02-10 19:12:07 +01:00
Ludovico Magnocavallo ae49074921
Update terraform.tfvars.sample 2022-02-10 17:25:38 +01:00
Simone Ruffilli 2696af1a7e
Update vpc-sc.tf - manage empty perimeters. (#530)
* Update vpc-sc.tf - manage empty perimeters.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-10 16:24:14 +01:00
Julio Castillo 6700faf662 Document log sinks in stage 0 2022-02-10 13:00:43 +01:00
lcaggio b377b30910
Update README (#517)
Update path to config folder

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-09 13:05:46 +01:00
eeaton a18bea7f2c
Add Zonal DNS Only org policy (#527)
This is a safe and sane org policy that should be recommended for most customers to prevent them from accidentally configuring internal dns in a way that has reduced availability
https://cloud.google.com/compute/docs/internal-dns#enforce_dns_by_policy
2022-02-09 12:21:43 +01:00
Ludovico Magnocavallo 40cb46e1cc
Add support for Shared VPC service IAM to project module (#525)
* project module changes

* fix examples

* add comments in module code

* re-enable nullable on svpc variables

* project factory

* Tests still failing (#526)

* fix pf

* tfdoc

* pf test boilerplate

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2022-02-09 11:06:51 +01:00
Ludovico Magnocavallo d21304267b revert dry-run to true as default 2022-02-08 13:43:37 +01:00
Ludovico Magnocavallo 02dc9de9b0
make it simpler to switch from/ry run mode (#524) 2022-02-08 13:26:44 +01:00
Ludovico Magnocavallo 4567b788a2 add org policy role to cloud admins 2022-02-08 11:31:39 +01:00
Luca Prete be33a7f880
FAST - Fixes 498 - 02-networking-nva stage 2022-02-07 13:22:58 +01:00
Simone Ruffilli 40142572f8
Update variables.tf example for team_folders 2022-02-07 11:15:13 +01:00
Ludovico Magnocavallo 8f1639a3c5 sample tfvars file 2022-02-07 11:07:13 +01:00
Ludovico Magnocavallo e5440f98a2
use prod folder for landing project (#514) 2022-02-06 19:25:05 +01:00
Ludovico Magnocavallo d711a93397
fix previous merge (#513) 2022-02-06 18:34:32 +01:00
Ludovico Magnocavallo c4533503a6
Fast: use pathexpand for output location (#512)
* use pathexpand for output location

* tfdoc
2022-02-06 18:24:46 +01:00
Simone Ruffilli 1aa5d5d93f
Misc documentation fixes (#493) 2022-02-06 10:50:23 +01:00
Ludovico Magnocavallo 6c1c943600 fix org id 2022-02-06 10:05:31 +01:00
Ludovico Magnocavallo 769fc73e83 remove unused roles on automation project 2022-02-06 09:47:40 +01:00
Ludovico Magnocavallo c8cbf9b7d7
Add utility to extract IAM bindings from state (#503)
* add utility to extract IAM bindings from state

* TODO

* TODO

* output one row per role/member pairs

* sorting

* rename, delete spurious file

* generalize output functions

* generate IAM.md

* fix org id

* add link to role in markdown

* fix org id

* replace organization ids
2022-02-05 17:34:43 +01:00
Simone Ruffilli 75aff4081f
default=null for `shared_vpc_self_link ` and `vpc_host_project` (#502)
* Update variables.tf

* Update README.md
2022-02-04 19:57:06 +01:00
Julio Castillo 0c0614e12f Fix typo in stage2 variable
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:54:09 +01:00
Julio Castillo 18adf869ae Update networking stages to use multiple folders
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:21:00 +01:00
Julio Castillo ed4fc477a7 Update resman outputs and projects 2022-02-04 16:21:00 +01:00
Julio Castillo f184ced544 Add xpnAdmin to diffent folders 2022-02-04 16:21:00 +01:00
Simone Ruffilli 190442da9d
FAST-02-nva: uniformed l7 and PSA CIDRs (#497)
* FAST-02-nva: uniformed l7 and PSA CIDRs

* Update variables.tf

* Fixes README.md

* Fixes typo in variables.tf

* Fixes README.md
2022-02-04 14:40:24 +01:00