Commit Graph

324 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 86b88e0634
fix modules version constraints (#206) 2021-03-05 08:41:59 +01:00
Ludovico Magnocavallo 8e44734fe5
set version for google-beta provider (#205) 2021-03-05 08:20:48 +01:00
Ludovico Magnocavallo 605ec7c4d1
depend org module resources for policy etc from IAM bindings (#204) 2021-03-05 08:19:39 +01:00
Julio Castillo ad68fc4dfa Support for cloud logging buckets 2021-03-03 14:23:59 +01:00
Ludovico Magnocavallo 54955b3e6d
Add support for per-tunnel routers to VPN dynamic and HA (#202)
* add optional per-tunnel router to vpn dynamic module

* add support for per-tunnel router to VPN HA

* fix onprem tests
2021-03-02 07:36:06 +01:00
Julio Castillo 2d9d81e061 Add support for essential contacts 2021-02-24 18:34:17 +01:00
Ludovico Magnocavallo 7e429425fe
Fix IAM additive (#200)
* Fix wrong iam_addictive variable input (#197)

iam_additive variable from Project module expect { "roles" = list(string) } input

Co-authored-by: Emre Turan <emre@unl.global>

* fix project example

Co-authored-by: Emre Turan <turan.emre@gmail.com>
Co-authored-by: Emre Turan <emre@unl.global>
2021-02-16 20:01:18 +01:00
Julio Castillo abf61fa7e2 Add support for allow- and deny-lists 2021-02-15 17:32:39 +01:00
Julio Castillo d32937f263 Add Squid Docker images 2021-02-15 17:32:39 +01:00
Julio Castillo 1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Julio Castillo 5e983f55a7 Make `project_id` output non-dynamic 2021-02-15 09:22:19 +01:00
Julio Castillo be8c61ac2c
Cloud Identity Group module (#182)
* New Cloud Identity module

* Add tests to cloud-identity-group module

* Fix boilerplate

* Fix outputs

* Remove support for creating managers and admins

* Update cloud-identity-group README

* Small fix to cloud-identity-group README
2021-02-13 06:55:22 +01:00
Ludovico Magnocavallo e3a03a76ff
Add support for rePD and existing disk attachment to compute VM (#194)
* initial untested support for repd in compute-vm

* fix repd reference in instance disks

* add support for snapshot source, change disk variable

* fix attach existing disk to instance

* fix examples, add documentation on disk sources

* fix attaching disk for instance templates, add examples

* fix data e2e examples

* update vars table in README
2021-02-03 08:00:08 +01:00
averbukh aec1f3df96 Adjusting second region for on-prem-in-a-box for testing more use cases 2021-01-29 18:43:53 +01:00
Ludovico Magnocavallo 0ce058e04f
Fix tests for 0.14 compatibility (#191)
* remove sensitive attribute from VPN modules key output

* fix type error in service account example

* update CI Terraform version

* update VPN modules docs

* require version in compute mig module

* require version in compute mig module for scaling_schedules

* update compute mig test, move provider version requirement in fixture
2021-01-29 14:55:50 +01:00
Ludovico Magnocavallo 2aa72c91f5 add provider constraint for net-vpc, fixes #185 2021-01-15 19:01:28 +01:00
Ludovico Magnocavallo 4e8fbbc54a fix dns peering example in doc 2021-01-11 12:29:29 +01:00
Aurélien Legrand dcbbf924f3
Update README.md in modules/dns
Adding an example for DNS Peering zones.
2021-01-11 12:11:20 +01:00
Roberto Jung Drebes 177a4d7f2c update README.md for org module with new parameters 2020-12-10 09:36:32 +00:00
Roberto Jung Drebes 91febe4cd1 Authoritative IAM for organization 2020-12-09 22:58:17 +00:00
Julio Castillo 452669fed1 Update README and CHANGELOG 2020-12-06 18:05:57 +01:00
Julio Castillo c6691a6140 Add include_children option folder and organization sinks 2020-12-06 17:56:27 +01:00
Julio Castillo d4201c740d Update environments e2e example with new sinks 2020-12-05 13:24:44 +01:00
Julio Castillo 1af70c748c Rename "grant" to "iam" in sink variables 2020-12-05 12:39:06 +01:00
Ludovico Magnocavallo 7aaf24afd3
Add support for confidential compute to compute-vm module (#179)
* add support for confidential compute

* add support for confidential compute to instance template
2020-12-05 09:14:12 +01:00
Julio Castillo 2c0f949f07
Logging sinks and exclusions (#178)
* Add sink support to folder module

* Make folder creation optional.

* Add logging sinks to the organization module

* Add logging sink support to project module

* Update readme
2020-12-05 08:31:35 +01:00
Julio Castillo ca82d71468 Fix organization tests 2020-11-25 18:47:11 +01:00
Julio Castillo f56c36e2d0 Rename org_id variable to organization_id in organization module 2020-11-25 18:36:19 +01:00
Julio Castillo 0e535a3675 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 18:07:16 +01:00
Julio Castillo dc038ad71f Add tests for hierarchical firewall policy 2020-11-25 18:06:25 +01:00
Andras Gyömrey c8958c548f
monitoring is automatically enabled when monitoring.writer is enabled (#177) 2020-11-25 17:32:53 +01:00
Julio Castillo ce6311f684 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 14:45:55 +01:00
Julio Castillo b2d8052b0e
Update modules/project/README.md
Remove `project_create = false` to all tests to run
2020-11-25 14:44:31 +01:00
Julio Castillo 1c3451cc35 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 14:37:36 +01:00
Andras Gyömrey e0a45b61c5
fix README (#176) 2020-11-25 14:21:22 +01:00
Julio Castillo 6bd299190f Update variable documentation. 2020-11-23 19:10:42 +01:00
Julio Castillo 254efdd799 Hierarchical firewall support for organizations 2020-11-23 19:01:02 +01:00
Julio Castillo 779f585d1d Hierarchical firewall policies for folders 2020-11-23 18:45:18 +01:00
Ludovico Magnocavallo cffc823f48
refactor access in bq module, add iam (#172) 2020-11-21 09:45:56 +01:00
Ludovico Magnocavallo 27aa0aa64c
Add support for forwarding path to dns module (#171)
* add support for forwarding path to dns module

* update README
2020-11-20 08:35:58 +01:00
Ludovico Magnocavallo f611e99e46
add mtu (#170) 2020-11-19 16:48:08 +01:00
Ludovico Magnocavallo dda715670c
Minor vpc-sc module corrections (#167)
* Fix #158

* fix variable type
2020-11-16 18:04:12 +01:00
Ludovico Magnocavallo 2ddfaad4bc Merge branch 'master' of github.com:terraform-google-modules/cloud-foundation-fabric 2020-11-16 17:39:59 +01:00
Ludovico Magnocavallo 4cd351fa3b align firewall module README with variables 2020-11-16 17:39:51 +01:00
nikever 5bfba15acf
Add boot_disk_kms_key to node_config (#166)
* Add support for CMEK to encrypt boot disks

* Fix typo in variable name

Co-authored-by: Niccolo Raspa <niccolo@sighup.io>
2020-11-16 17:37:10 +01:00
Ludovico Magnocavallo 42a865b8fa fix provider version pinning 2020-11-14 17:47:07 +01:00
Ludovico Magnocavallo 80acb607c2
Add NLB health checks source ranges
https://cloud.google.com/load-balancing/docs/health-checks#fw-netlb
2020-11-12 13:57:56 +01:00
Samuele Chiocca 323e962fc8
Adding node taints on gke nodepool (#165)
* Adding node taints on gke nodepool. Automatic transformation via local variables from list(string) to the map google provider expects.

* Fixing readme with tfdoc.py
2020-11-10 13:41:19 +01:00
Ludovico Magnocavallo ea6c5c3fed shorten internal service account name 2020-11-09 13:28:42 +01:00
Ludovico Magnocavallo 6610b79b6c
Revert iam_additive behaviour (#160)
* revert iam_additive format, add iam_additive_members

* revert iam_additive format, add iam_additive_members

* update CHANGELOG
2020-11-09 11:29:08 +01:00
Julio Castillo af2c7bd154 Fix GKE examples 2020-11-07 16:43:18 +01:00
Julio Castillo 946822ff5c
Merge pull request #157 from terraform-google-modules/example-tests
Make examples in READMEs runnable and testable
2020-11-07 11:38:19 +01:00
Ludovico Magnocavallo b3ae7c9454
Add support for internal service account to GKE nodepool module (#156)
* add support for internal service account to GKE nodepool module, fixes #62

* update shared vpc example to use internally managed service account

* update shared vpc example to use internally managed service account

* update hub and spoke peering example to use renamed gke nodepool variables
2020-11-07 10:48:12 +01:00
Julio Castillo eecdee63e6 Make examples in READMEs runnable and testable 2020-11-07 10:28:33 +01:00
Julio Castillo ec6b1bc8ba Update references to renamed modules 2020-11-06 10:14:30 +01:00
Julio Castillo 1df08caa7f Update READMEs with new variable names 2020-11-06 09:43:12 +01:00
Julio Castillo 8a672b1b13 Fix typo in pubsub README 2020-11-06 09:36:55 +01:00
Julio Castillo c60e37d884 Update copyright in headers 2020-11-06 09:36:09 +01:00
Ludovico Magnocavallo f9e4a1d614 bump required tf version in modules using conditions 2020-11-06 08:43:06 +01:00
Ludovico Magnocavallo b4fc8167a0 use new iam variable in cloud function module 2020-11-06 08:37:44 +01:00
Ludovico Magnocavallo f1a3c3ebe8 use new iam variables in kms module 2020-11-06 08:26:50 +01:00
Ludovico Magnocavallo f72bea3f96 use new iam variable in container registry 2020-11-06 08:22:35 +01:00
Ludovico Magnocavallo 0d17007c9d new iam variable in endpoints module 2020-11-06 08:18:57 +01:00
Ludovico Magnocavallo efc694ba01 fix and streamline bigtable module, add tests, align to new iam variable name 2020-11-06 08:11:07 +01:00
Ludovico Magnocavallo 3a4938874b rename iam variables in pubsub module 2020-11-05 21:28:34 +01:00
Ludovico Magnocavallo c33e68ecd0 use list in service account module variable types 2020-11-05 09:26:24 +01:00
Ludovico Magnocavallo cb54ff77a1 rename iam variable in service account module 2020-11-05 09:22:13 +01:00
Ludovico Magnocavallo 44f1828c33 rename iam variable in compute vm module 2020-11-05 09:10:49 +01:00
Ludovico Magnocavallo 462a7023cd rename iam variable in source repo module 2020-11-05 08:58:05 +01:00
Ludovico Magnocavallo 8267252031 rename iam variable in net vpc module 2020-11-05 08:49:29 +01:00
Ludovico Magnocavallo 9d0db19c5e rename iam variables in gcs module 2020-11-04 16:57:06 +01:00
Ludovico Magnocavallo bf23199724 rename iam variables in artifact registry 2020-11-04 16:56:57 +01:00
Ludovico Magnocavallo 0e1fb9bf9e rename iam variables in folder unit module 2020-11-04 16:49:29 +01:00
Ludovico Magnocavallo 02d867ff3d rename iam variables in folder module 2020-11-04 16:49:19 +01:00
Ludovico Magnocavallo d47478a466 rename iam members variable in project module 2020-11-04 16:22:00 +01:00
Ludovico Magnocavallo d0ed3b7614 rename iam additive variable in project module 2020-11-04 16:17:12 +01:00
Ludovico Magnocavallo d2c84de8ff use new variable names in organization module 2020-11-04 15:44:28 +01:00
Ludovico Magnocavallo 627f86219f rename iam variable in secret manager module, add tests 2020-11-04 14:19:16 +01:00
Ludovico Magnocavallo c372980e15 update service directory module to 0.13 2020-11-04 14:08:33 +01:00
Ludovico Magnocavallo 8dc131550f fix variable validation in project module to allow for null values 2020-11-04 12:06:01 +01:00
Julio Castillo 7bd31ccf52 Added some basic variable validation 2020-11-03 08:12:11 +01:00
Julio Castillo 352b7a0645 Use description variable in dns module 2020-11-03 07:59:52 +01:00
Julio Castillo c75230adf3 Remove iam_roles from net-vpc 2020-10-30 19:19:40 +01:00
Julio Castillo 405a3c23d5 Update project README 2020-10-30 19:06:20 +01:00
Julio Castillo 82a1fe3c20 Removing iam_roles from multiple modules
This commits removes the iam_roles variables from the modules:
 - artifact-registry
 - bigtable-instance
 - cloud-function
 - container-registry
 - endopoints
 - pubsub
 - source-repository
2020-10-30 18:58:07 +01:00
Julio Castillo 96dba2256e Remove iam_roles from secret_manager 2020-10-30 18:25:17 +01:00
Julio Castillo 53cb8359ee Remove *_roles variables in kms module 2020-10-30 17:58:45 +01:00
Julio Castillo fc5017cc24 Remove dependency hooks to net-vpc-peerings. 2020-10-30 00:19:28 +01:00
Julio Castillo b13a10efe5 Remove iam_roles from compute-vm module 2020-10-30 00:18:10 +01:00
Julio Castillo 1a7b9836ea Update folder and service account READMEs 2020-10-29 23:54:40 +01:00
Julio Castillo 78efb63b4a Remove iam_roles from project module 2020-10-29 23:51:34 +01:00
Julio Castillo 6e81125c6a Remove useless calls to toset 2020-10-29 23:29:41 +01:00
Julio Castillo 61d402fece Update gcs module to terraform 0.13 2020-10-29 23:26:03 +01:00
Julio Castillo 85fda5b1fe Remove iam_roles from service accounts, folder and organization modules 2020-10-21 09:37:05 +02:00
Julio Castillo 13ed799a8b Update service account module to Terraform 0.13 2020-10-20 22:36:03 +02:00
Julio Castillo 2e7876b4c7 Update folders module to Terraform 0.13
With this commit the folders module (now called simply 'folder') only
creates a single google_folder resource. Support for creating multiple
folders is no longer needed since Terraform 0.13 added for_each support
to modules.
2020-10-20 15:41:03 +02:00
Julio Castillo 7ab87d0790
Fix typo in iam-service-account README 2020-10-20 10:50:08 +02:00
Julio Castillo db330fe063 Add support for single-sided peerings. 2020-10-12 16:16:24 +02:00
Julio Castillo ab39c9e4d4 Update compute-vm variable documentation 2020-10-12 13:10:13 +02:00
Julio Castillo 2bef92da57 Fixes to `compute-vm` module 2020-10-12 12:26:00 +02:00