Commit Graph

1527 Commits

Author SHA1 Message Date
John Inama 3e069ea16a changed from merge to length-based if statement 2023-09-07 08:26:40 -04:00
g-greatdevaks b98537689c add tests and update readme for apigee psc peering 2023-09-07 16:55:16 +05:30
Julio Castillo 34b37a0dc2 Remove unneeded try 2023-09-07 12:09:42 +02:00
Julio Castillo 46f4d22c87 Examples and tests 2023-09-07 11:31:40 +02:00
Julio Castillo d7dcec3389 Fix error message 2023-09-07 10:52:30 +02:00
Julio Castillo 0822531b78 Allow creating organizations/instances without VPC Peering 2023-09-07 10:51:43 +02:00
Julio Castillo 6f5a6aa06d Allow user to override instance names 2023-09-07 09:05:49 +02:00
John Inama 3941129a68 still testing 2023-09-06 17:12:31 -04:00
John Inama 822dfc0110 replaced coalesce with merge 2023-09-06 17:08:39 -04:00
John Inama 35ff529b9c swapping coalesce variables for test 2023-09-06 17:02:04 -04:00
John Inama b4979fd451 Added coalesce to local variable and to the attachment resource 2023-09-06 16:59:30 -04:00
John Inama e64cd90d4c just trying the old way first 2023-09-06 15:29:25 -04:00
John Inama c1c99a0a79 back to coalesce 2023-09-06 14:54:30 -04:00
John Inama c32e2763f0 Changed instance loop to a coalescelist function 2023-09-06 14:30:43 -04:00
John Inama 7ceaf9b513 Added environments back to instances variable 2023-09-06 13:58:41 -04:00
John Inama 401c3478ea Fixed copy/paste error from earlier commit 2023-09-06 13:48:38 -04:00
John Inama 46be7c0c1d Added original attachment loop block as local for backwards compatibility 2023-09-06 13:25:58 -04:00
Julio Castillo a6640e5959 Make net-vpc variables nullable 2023-09-06 09:57:34 +02:00
John Inama 7acb4966b2 Added optional name value to instances variable and added it to the instance resource 2023-09-05 17:23:45 -04:00
Julio Castillo 3d4cc7164a Bump provider version to 4.80.0 2023-09-05 09:48:15 +02:00
Oliver Frolovs 9f23d504ec
gke-cluster-autopilot: add monitoring configuration (#1646)
* gke-cluster-autopilot: add monitoring configuration block (monitoring_config)
2023-09-04 16:43:59 +01:00
Oliver Frolovs 42ebbccad9
gke-cluster-autopilot: validation for release_channel (#1645) 2023-09-03 00:37:49 +00:00
Oliver Frolovs 988fd2ee05
gke-cluster-standard: change logging configuration (#1638)
* Update logging configuration of this module to use object interface in harmony with `gke-cluster-autopilot` module.
* Update blueprints that use this module.
* Add "WORKLOADS" log source to logging configuration of the blueprints where the README files say so.
* Update FAST stage 3 because it uses this module.
2023-08-31 12:49:15 +01:00
Oliver Frolovs 80e85ad343
gke-cluster-autopilot: add logging configuration (#1625)
Although one cannot disable Cloud Logging and Cloud Monitoring integration in GKE Autopilot clusters, one has some flexibility over which control plane components' logs should be ingested. This commit adds a new variable and a block to the cluster resource to facilitate that.

* gke-cluster-autopilot: update logging configuration and add an example to module README
2023-08-31 12:06:57 +01:00
Zachary b784e85c60 Regenerated cloud run README tables with tfdoc.py
Updated documentation with tfdoc.py
2023-08-30 12:16:21 +01:00
Zachary a4dfd7f201 fixed grcp to grpc typo in cloud run module 2023-08-30 11:04:10 +01:00
LudovicEmo c558d9b753
Vpc sc allow null for identity type (#1632)
* vpc-sc : allow null for identity_type

* cloudsql-instance : fmt

* vpc-sc: tfdoc

* modules/vpc-sc: update the test result for the identity_type field

* cloudsql-instance: remove empty line
2023-08-29 04:28:57 +02:00
Luca Prete 9d0fd744a8
Do not set default ASN number (#1633) 2023-08-28 15:06:31 +00:00
Julio Castillo 9eb768357e Switch to count 2023-08-28 16:00:48 +02:00
Julio Castillo 04721a35ef Allow single hfw policy association in folder and organization modules 2023-08-28 16:00:48 +02:00
Luca Prete ce96ac31e7
[Fix] Add explicit dependency between CR peers and NCC RA spoke creation (#1630) 2023-08-28 15:50:46 +02:00
Carlo Maria Valla befbd190a3
Cloud SQL activation policy selectable (#1613)
* Update main.tf

added activation policy

* Update variables.tf

added activation_policy variable defaulted as ALWAYS for non regression

* corrections requested by @juliocc

* Regeneration of README.md on cloudsql-instance mod

* terraform fmt changes

* bug correctionand activation_policy on replicas

* activation_policy description change and README.md

* Bug correction
2023-08-25 12:12:08 +02:00
Julio Castillo 44c1cec041 Fix tests 2023-08-24 20:09:23 +02:00
Julio Castillo 25aa29e463 Merge remote-tracking branch 'origin/master' into billabongrob/add-nat 2023-08-24 19:52:06 +02:00
Julio Castillo 9188603365 Update key name 2023-08-24 19:46:39 +02:00
Julio Castillo d50355b01a Only create nat IP when requested 2023-08-24 19:42:20 +02:00
Julio Castillo 67c2597bcc Fix output order 2023-08-24 19:38:44 +02:00
Julio Castillo add1ac2dcc Update README 2023-08-24 19:36:42 +02:00
Julio Castillo 57d5e05d69
Merge branch 'master' into richard/nfw-policy-remove-match-var-validation 2023-08-24 19:29:13 +02:00
Julio Castillo bff5e46460 Fix apigee instance nat 2023-08-24 19:27:34 +02:00
Julio Castillo 3fdf0dfe99 Make apigee variables non-nullable 2023-08-24 18:15:15 +02:00
Rob Heckel 6c33d34c28 Adding support for NAT in Apigee 2023-08-24 09:36:15 -05:00
Richard Olson 10aeb6615a readme update 2023-08-24 20:01:47 +10:00
Julio Castillo d36c53bbae
Update README.md 2023-08-24 11:29:03 +02:00
Richard Olson 35aae372b2 remove existing validation 2023-08-24 19:06:43 +10:00
Richard Olson 2f4b141d7a switch default behaviour for ingress 2023-08-23 21:17:47 +10:00
Richard Olson def012d32e customisable rule action 2023-08-23 21:08:23 +10:00
Richard Olson 18af929331 add name to factory rules 2023-08-23 20:58:07 +10:00
Erin Horning 4885b8a7f9 objects non-nullable 2023-08-22 09:40:50 -06:00
Erin Horning 9a0f9f607f objects output 2023-08-22 09:35:39 -06:00
Erin Horning 2f3d29395f remove validation 2023-08-22 09:09:37 -06:00
Ludovico Magnocavallo 95a0c76b18
Merge branch 'master' into ehorning/support-gcs-object-upload 2023-08-22 09:48:32 +02:00
Ludovico Magnocavallo ff8eef6a6f
use cloud run bindings for cf v2 invoker role, refactor iam handling in cf v2 and cloud run (#1609) 2023-08-22 07:23:49 +00:00
Erin Horning 33d51dbee4
Merge branch 'master' into ehorning/support-gcs-object-upload 2023-08-21 16:36:35 -06:00
Erin Horning 6f1f6f5085 add additional parameters 2023-08-21 16:35:47 -06:00
Julio Castillo 49a4550b5d
Merge branch 'master' into elia-gcve 2023-08-21 08:44:37 +02:00
Ludovico Magnocavallo 0d17af7967
Update 20230816-iam-refactor.md 2023-08-21 07:11:24 +02:00
Ludovico Magnocavallo e7eeed12f8
Update 20230816-iam-refactor.md 2023-08-21 07:10:29 +02:00
Ludovico Magnocavallo 63b0480499
Update 20230816-iam-refactor.md 2023-08-21 07:09:54 +02:00
Ludovico Magnocavallo e43be5b387
Update README.md 2023-08-21 07:01:06 +02:00
Ludovico Magnocavallo 5cb4accbd0
Merge branch 'master' into elia-gcve 2023-08-20 10:19:14 +02:00
Ludovico Magnocavallo 819894d2ba
IAM interface refactor (#1595)
* IAM modules refactor proposal

* policy

* subheading

* Update 20230816-iam-refactor.md

* log Julio's +1

* data-catalog-policy-tag

* dataproc

* dataproc

* folder

* folder

* folder

* folder

* project

* better filtering in test examples

* project

* folder

* folder

* organization

* fix variable descriptions

* kms

* net-vpc

* dataplex-datascan

* modules/iam-service-account

* modules/source-repository/

* blueprints/cloud-operations/vm-migration/

* blueprints/third-party-solutions/wordpress

* dataplex-datascan

* blueprints/cloud-operations/workload-identity-federation

* blueprints/data-solutions/cloudsql-multiregion/

* blueprints/data-solutions/composer-2

* Update 20230816-iam-refactor.md

* Update 20230816-iam-refactor.md

* capture discussion in architectural doc

* update variable names and refactor proposal

* project

* blueprints first round

* folder

* organization

* data-catalog-policy-tag

* re-enable folder inventory

* project module style fix

* dataproc

* source-repository

* source-repository tests

* dataplex-datascan

* dataplex-datascan tests

* net-vpc

* net-vpc test examples

* iam-service-account

* iam-service-account test examples

* kms

* boilerplate

* tfdoc

* fix module tests

* more blueprint fixes

* fix typo in data blueprints

* incomplete refactor of data platform foundations

* tfdoc

* data platform foundation

* refactor data platform foundation iam locals

* remove redundant example test

* shielded folder fix

* fix typo

* project factory

* project factory outputs

* tfdoc

* test workflow: less verbose tests, fix tf version

* re-enable -vv, shorter traceback, fix action version

* ignore github extension warning, re-enable action version

* fast bootstrap IAM, untested

* bootstrap stage IAM fixes

* stage 0 tests

* fast stage 1

* tenant stage 1

* minor changes to fast stage 0 and 1

* fast security stage

* fast mt stage 0

* fast mt stage 0

* fast pf
2023-08-20 09:44:20 +02:00
Ludovico Magnocavallo 3a8071d93c
Merge branch 'master' into elia-gcve 2023-08-20 08:18:53 +02:00
eliamaldini 126d75a311 fixed typo 2023-08-18 17:01:12 +02:00
eliamaldini 103443dc30 fixed typo 2023-08-18 16:57:35 +02:00
eliamaldini 1b93197b87 fixed typo 2023-08-18 16:56:21 +02:00
eliamaldini c4ada40275 fixed typo 2023-08-18 16:52:58 +02:00
eliamaldini bf26580b9d fixed variables order 2023-08-18 15:52:56 +02:00
eliamaldini 9452a14ac7 output cleanup 2023-08-18 15:49:20 +02:00
eliamaldini 81b567684b outputs cleaup 2023-08-18 15:41:06 +02:00
eliamaldini 87e82244af fixed tests 2023-08-18 15:38:35 +02:00
Michael e1e3826f6d
fix(cloud-run): move cpu boost annotation to revision 2023-08-18 13:53:00 +01:00
eliamaldini d568408331 fixed variable name and regex 2023-08-18 11:20:27 +02:00
Julio Castillo 476d6eaf30
Update variables.tf 2023-08-18 10:07:23 +02:00
Julio Castillo dc78ad3493
Update outputs.tf 2023-08-18 10:06:32 +02:00
Alejandro Leal ea0de3adbb Fixing some typos 2023-08-18 05:51:00 +00:00
Jay Schwerberg 574c7548d8
feat(cloud-run): add startup cpu boost option 2023-08-17 14:43:27 -07:00
eliamaldini 6a5739bf91 gcve net requirements link 2023-08-17 12:25:33 +02:00
eliamaldini c6f5d47c66 fixed variable name 2023-08-17 12:19:47 +02:00
eliamaldini 739bbf1aef fixed variable name 2023-08-17 12:11:42 +02:00
eliamaldini 3feaad0c1c fixed variable name 2023-08-17 12:10:44 +02:00
eliamaldini 0e2ee8bceb fixed typo 2023-08-17 12:05:44 +02:00
eliamaldini 1e54ddd710 Merge branch 'elia-gcve' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into elia-gcve 2023-08-17 09:39:50 +02:00
eliamaldini e927bf3858 Fixed typo 2023-08-17 09:37:48 +02:00
eliamaldini a7fd3e2616 fixed file name 2023-08-17 09:25:44 +02:00
Ludovico Magnocavallo def2f476d1
Add support for conditions to `iam_members` module variables (#1594)
* project

* data-catalog-policy-tag

* dataproc

* folder

* iam-service-account

* kms

* net-vpc

* organization

* source-repository

* dataplex-datascan
2023-08-15 16:28:23 +02:00
Ludovico Magnocavallo acc191c58e
Merge branch 'master' into elia-gcve 2023-08-15 09:41:00 +02:00
eliamaldini 6fee2a9eb3 Merge branch 'elia-gcve' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into elia-gcve 2023-08-14 14:46:16 +02:00
eliamaldini f3d5dd8e34 Added link to GCVE module 2023-08-14 14:41:33 +02:00
erabusi b6b660f4f3
feat: 🎸 (modules/cloudsql-instance):add project_id for ssl cert (#1591) 2023-08-14 12:40:25 +02:00
Ludovico Magnocavallo 5689aacac2
Merge branch 'master' into elia-gcve 2023-08-14 11:56:47 +02:00
Ludovico Magnocavallo adf2621727
Add new `iam_members` variable to IAM additive module interfaces (#1589)
* resource management modules

* data catalog policy

* dataproc

* service account

* kms

* net-vpc

* source repository

* dataplex datascan

* service account module variable order
2023-08-14 09:54:50 +00:00
eliamaldini a509756f1b GCVE module first release 2023-08-14 11:48:27 +02:00
erabusi f9509ad6b7
feat: 🎸 (modules/cloudsql-instance): enable require_ssl cert support (#1588) 2023-08-14 11:37:03 +02:00
Ludovico Magnocavallo 841459a059
Fix factory rules key in net firewall policy module (#1587)
* fix factory rules key in net firewall policy

* fix test
2023-08-14 07:52:36 +02:00
Erin Horning 10faf82b8d linting 2023-08-11 11:20:06 -06:00
Erin Horning 2fa6369ba0 Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into ehorning/support-gcs-object-upload 2023-08-11 11:19:21 -06:00
Sam Bentley b1679ad21a
Fix: Instance level stateful disk config (#1578)
* update doco

* fix bug in TF code

* change instance name in README to fix test

* revert disk name

* Update stateful.yaml

* fix examples and tests

---------

Co-authored-by: Julio Castillo <juliocc@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-08-11 15:25:17 +00:00
Erin Horning df1fded669 add support for object upload to gcs module 2023-08-10 21:43:53 -06:00
Mikhail Filipchuk 78095063f7
feat(modules/cloud-run): add gen2 exec env support (#1582) 2023-08-09 23:04:16 +02:00
Ludovico Magnocavallo 79373721df
Remove firewall policy management from resource management modules (#1581)
* rename firewall policy module, fix outputs

* add TOC to firewall policy module

* don't depend policy on parent id

* remove firewall policy from resource management modules

* remove factory conditionals

* fast net a and b

* fast stages

* fast tfdoc

* fast tfdoc

* remove unused test

* fix shielded folder blueprint

* fix shielded folder blueprint
2023-08-09 11:23:07 +00:00
Miren Esnaola 6a13742e3c Apigee addons 2023-08-09 08:12:06 +02:00
Ludovico Magnocavallo 80ada0e8dd
Refactor firewall policy module (#1576)
* refactor module interface

* hierarchical attachment and example

* hierarchical rules and TODO

* split rules resources

* additional fields

* keep using a single resource for rules

* factory

* factory test

* boilerplate

* Prefix ingress and egress rule ids

* Tests for other firewall policy types

* Fix rule id and names

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-08-08 16:57:59 +00:00
Eunan Hardy 9ec38581d7 Update README.md 2023-08-07 14:33:54 +01:00
Eunan Hardy dd3a298892 Moved allow_net_admin to enable_features flag. Bumped provider version to 4.76 2023-08-07 14:27:20 +01:00
Eunan Hardy 69ea9dd3be Linting with terraform fmt 2023-08-07 12:46:54 +01:00
Eunan Hardy 10e3184451 Expose allow_net_admin feature in gke-cluster-autopilot 2023-08-07 12:44:59 +01:00
Ludovico Magnocavallo 9c75aa469c
More module descriptions (#1572)
* bigquery dataset

* data catalog policy tag

* net-address

* fix data catalog callers

* bigquery dataset views

* fix data catalog callers

* logging bucket

* net vpn ha
2023-08-06 09:25:45 +00:00
Ludovico Magnocavallo 83d2976949
add support for cost management to GKE module (#1569) 2023-08-05 11:46:52 +00:00
Ludovico Magnocavallo aecba0bbd0
Add support for ipv6 to net-vpc module (#1568)
* add support for ipv6

* fix test
2023-08-05 13:07:26 +02:00
Julio Castillo ce510583bf Fix default routes 2023-08-04 18:24:41 +02:00
Julio Castillo bbe778e095 Allow custom route descriptions in net-vpc module
Related: #1491
2023-08-04 14:13:03 +02:00
Julio Castillo 702c428da4 Update Readme 2023-08-04 13:06:59 +02:00
Daniel Strebel a0bd0d4414
Merge branch 'master' into feature/apigee-add-retention 2023-08-03 14:28:40 +02:00
Miren Esnaola fe0a9ed138 Fixed error of inconsistent conditional result types when evaluating local peer_gateway variable 2023-08-02 23:22:26 +02:00
Daniel Strebel 0906ddb8df feat(apigee): add retention variable 2023-08-02 15:13:43 +02:00
Miren Esnaola 22b661fe93 Removed unused attribute in peer_gateway_config variable 2023-08-02 15:07:05 +02:00
Thinh Ha 43e73aba9a
add dataplex datascan base module (#1545) 2023-08-02 11:16:32 +00:00
Miren Esnaola 3b7e62990c Added IPSEC_INTERCONNECT addresses to net-address module 2023-08-02 12:12:14 +02:00
Natalia Strelkova 4bb51a42ce renaming net-vpc-swp to net-swp 2023-08-01 16:23:12 +02:00
Natalia Strelkova 7acd9f624e coalesce instead of ternary operator 2023-08-01 15:07:37 +02:00
Natalia Strelkova f09d32a703 Merge branch 'master' into net-vpc-swp-optional-description 2023-08-01 13:05:04 +02:00
Natalia Strelkova bcf191ab5a description: only one main variable 2023-08-01 13:04:47 +02:00
Natalia Strelkova 915f09461e optional description for the gateway security policy - separately 2023-08-01 10:27:26 +02:00
Julio Castillo bd0fe1f928 Fix tests 2023-07-31 18:04:07 +02:00
Julio Castillo 3df98c8feb Fix permadiff in artifact-registry 2023-07-31 18:04:07 +02:00
apichick 75bd7d7c2d
Merge branch 'master' into net-lb-proxy-int 2023-07-31 17:43:07 +02:00
Miren Esnaola 63ac5710ac Added module for Regional Internal Proxy Load Balancer 2023-07-31 17:21:57 +02:00
Miren Esnaola 51bc31ae21 Fix in IAM bindings of cloud function v2 module 2023-07-31 12:39:08 +02:00
apichick 09c9e291a0
Merge branch 'master' into net-lb-hc-fix 2023-07-31 11:55:47 +02:00
Ludovico Magnocavallo fe3e8a3941
Add image path output to ar module (#1552)
* Add image path output to ar module

* tfdoc
2023-07-31 09:34:01 +00:00
Miren Esnaola f49515495c Fix in validation of healthchecks variable 2023-07-31 10:23:32 +02:00
Miren Esnaola 47a9947b18 Fix in validation of healthchecks variable 2023-07-31 10:01:35 +02:00
Ludovico Magnocavallo b524aa137c
Peering module refactor (#1547)
* refactor net-vpc-peering module

* hub and spoke peering blueprint

* fast stages

* boilerplate

* fast tfdoc

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-07-29 21:33:57 +02:00
Wiktor Niesiobędzki 4998f1d376
Grant IAM rights to service identities in host project (#1542)
* [module/project] Grant IAM rights to service identities based on used services in host project
* [blueprints/factories/project-factory] enable granting IAM permissions in host VPC for service identities directly or by specifying services in use
2023-07-29 20:07:21 +02:00
Thinh Ha 0415cf64f1
rename cloud-dataplex to dataplex (#1546) 2023-07-29 14:31:18 +02:00
Julio Castillo 32bb69caa5
Merge branch 'master' into jccb/toc 2023-07-28 17:23:18 +02:00
Miren Esnaola a89e0dac31 Fixes in cloud function v2 module for trigger service account 2023-07-28 17:02:36 +02:00
Julio Castillo 408e4eedd0 Fix artifact-registry readme 2023-07-28 16:38:26 +02:00
Julio Castillo e6be368367 Simplify whitespace handling 2023-07-28 16:32:38 +02:00
Julio Castillo 1fdec356e2 Update large TOCs 2023-07-28 15:43:51 +02:00
Julio Castillo 4f123ccc74 Extend tfdoc to generate TOCs 2023-07-28 14:18:28 +02:00
Ludovico Magnocavallo 5a534edf5c
update and refactor artifact registry module (#1536) 2023-07-28 09:54:36 +00:00
Simone Ruffilli 960c84b347
Fixed wrong ASN when using partner_interconnect. (#1537) 2023-07-28 09:16:03 +00:00
Simone Ruffilli a8d9d80d5b
Renamed output.tf in net-vlan-attachment (#1535)
* Renamed output.tf in net-vlan-attachment
2023-07-28 08:35:48 +00:00
Miren Esnaola cf567b0c43 Fix in event_filters of trigger_config 2023-07-25 16:22:09 +02:00
lcaggio d46312a7f1
Improve Dataplex (#1519)
* First commit.

* Implement fixes.

* fix google_dataplex_zone_iam_binding
2023-07-24 10:52:07 +02:00
Mikhail Filipchuk ec74f351f5
feat(cloudsql-instance): Add query insights config (#1520) 2023-07-21 20:14:34 +02:00
Natalia Strelkova fde498800c optional description attribute in variables 2023-07-20 12:14:39 +02:00
Natalia Strelkova a8c27b1b6e optional description in modules/net-vpc-swp 2023-07-20 08:45:18 +02:00