Ludovico Magnocavallo
fae5654e33
Refactor VPC firewall module for Terraform 1.3 ( #949 )
...
* module and module tests/examples
* align blueprints and fast
* fix null ranges
* make ports optional
* tfdoc
* make rules optional defaulting to all protocols
* review comments
* last round of comments
* invert precedence of template variables
* add option to disable all default rules
* add option to disable all default rules
* split egress/ingress
* tests
* fix tests
2022-11-04 13:56:07 +01:00
Ludovico Magnocavallo
0563260678
Refactor ILB module for Terraform 1.3 ( #941 )
...
* wip
* wip
* wip
* backport health check to compute-mig
* align blueprints and fast
* fix blueprints
* tfdoc
2022-11-02 18:05:20 +01:00
Ludovico Magnocavallo
a30c186f1f
Refactor compute-mig module for Terraform 1.3 ( #931 )
...
* wip: autoscaler
* wip: fix autoscaler
* wip: health check
* wip: untested
* wip: tests and examples missing
* wip: examples
* wip: consumers
* blueprint tests
* fast
2022-11-01 09:38:59 +01:00
Simone Ruffilli
7b2a82a7d6
PGA DNS records ( #911 )
...
Additional PGA DNS records
2022-10-25 14:28:28 +02:00
Julio Castillo
192edf2b75
Remove redundant ttls
2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo
4fa1dc431d
Refactor net-vpc module for Terraform 1.3 ( #880 )
...
* module tests pass
* doc examples
* refactor blueprints
* fast stages
* fix comment typo
* fix module factory test
2022-10-14 11:02:33 +02:00
Simone Ruffilli
674deb1c4f
FAST: Replace NVAs in 02-networking-nva with COS-based VMs ( #867 )
2022-10-10 09:16:28 +02:00
Ludovico Magnocavallo
e66340c4db
Refactor compute-vm for Terraform 1.3 ( #860 )
...
* refactor compute-vm for Terraform 1.3
* bump Terraform version in CI tests config
* fix optional null handling (ht jccb)
* tfdoc
* update blueprints
* align fast
* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo
894647ff9e
Leverage new shared VPC project config defaults across the repo
2022-10-07 08:55:47 +02:00
lcaggio
149d84d41d
Fix NVA and VPC firewall rules.
2022-09-20 17:08:24 +02:00
Julio Castillo
f8e2fdaf19
Remove project.service_config instances using the new default
2022-09-09 09:38:09 +02:00
Julio Castillo
52e7e0517a
Merge branch 'master' into fast/gke2
2022-08-24 15:37:15 +02:00
Simone Ruffilli
a29faa7f8c
instance_termination_action must be set for compute-vm spot instances ( #778 )
...
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo
0bec03b0a0
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-08-03 20:42:09 +02:00
Ludovico Magnocavallo
9b6262de41
FAST: move region trigrams to a variable in network stages ( #765 )
...
* add region trigram variable
* debug check documentation
* fix linting
2022-08-03 11:36:27 +02:00
Ludovico Magnocavallo
9b371a3d2c
support GKE specific network roles in stages 01 and 02
2022-07-31 14:54:14 +02:00
Ludovico Magnocavallo
366f28a519
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-07-29 10:57:25 +02:00
Simone Ruffilli
ef27d2e9d1
Use spot VMs for test VM and for NVAs ( #734 )
2022-07-13 13:57:03 +02:00
Julio Castillo
1bc352bb7b
Fix docs
2022-07-12 12:19:05 +02:00
Julio Castillo
25955b158a
Merge branch 'master' into fast/gke2
2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo
8585852ae6
fix #714 ( #715 )
2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo
7b5ced7e15
stage 01
2022-06-30 18:22:57 +02:00
Ludovico Magnocavallo
7786dd3d90
Merge branch 'master' into fast/gke2
2022-06-30 11:30:52 +02:00
Ludovico Magnocavallo
ee7a615a58
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-06-29 17:06:55 +02:00
Michael Gfeller
c66bb0e1c3
Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into mgfeller/fast-readme-tfvars-auto
2022-06-29 15:29:43 +02:00
Ludovico Magnocavallo
66c4fffd76
FAST: configuration switches for features ( #703 )
...
* example implementation of top-level switches
* data platform as a fast feature
* decouple teams and project factory
* teams disable fixes
* optional pf
* networking stage
* remove var from stage 2s, security
2022-06-28 17:33:37 +02:00
Michael Gfeller
34650ae621
FAST - updated some READMEs about usage of *.auto.tfvars files
...
Updated information about using the auto generated tfvars files in the "Variable configuration" section for some stages.
Mainly about using globals.auto.tfvars.json instead of copying terraform.tfvars from bootstrap stage.
2022-06-28 11:27:21 +02:00
Ludovico Magnocavallo
fb1d31551f
fix tfdoc
2022-06-23 08:55:28 +02:00
Ludovico Magnocavallo
666d8a469c
Merge branch 'master' into fast/gke2
2022-06-23 08:34:09 +02:00
Lorenzo Caggioni
26d8f0cf65
Fix stage-02 tfvars links
2022-06-20 09:11:09 +02:00
Julio Castillo
f9b808b4bc
Fix permissions and update NVA and peering net stages for gke
2022-06-08 11:42:04 +02:00
Simone Ruffilli
e9d06ba469
FAST: switch to SpotVM for NVAs
2022-05-04 09:59:47 +02:00
Aleksandr Averbukh
73db258a38
Use new variable subnets_proxy_only instead of subnets_l7ilb for fast
2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo
725f7effce
Initial MVP for CI/CD ( #608 )
...
* preliminary support for wif in stage 0
* IAM wif role
* IAM wif role TODO
* add support for external SA IAM to SA module
* add name output to SA module
* separate cicd SA
* tfdoc
* GITLAB principal (untested)
* make GCS name output static
* outputs bucket
* fix stage 1 test
* tweak outputs
* tfdoc
* move wif_pool to automation variable
* add support for top-level and repository providers
* add missing boilerplate
* fix branchless principal
* initial workflow
* symlink provider template in stages
* remove service accounts from stage 0 cicd tfvars
* add cicd interface variable to resman stage
* fix cicd variable in resman stage
* better condition on outputs_location
* fix last change
* change outputs_location type
* revert outputs_location change
* split outputs in stage 0
* update ci/cd temporary notes
* rename additive IAM resource in SA module
* split outputs in stage 1
* remove unused locals
* fix stage 1 tests
* tfdoc
* Upload action files to outputs_bucket
* Fix tests and README
* rename template, streamline outputs
* local templates and gcs output for all stage 2
* add workflows to local output files
* Use lowercase WIF providers everywhere
* Bring back suffix for workflow files
* Remove unused files
* Update READMEs
* preliminary CI/CD implementation for stage 1
* fix stage 1
* stage 1 cicd
* tfdoc
* fix tests
* readme and links for cicd and wif
* refactor wif providers
* refactor cicd for stage 1
* fix stage 1
* wif org policies
* split identity provider configuration from cicd
* add type attribute to cicd repositories
* valid cicd repositories have a workflow template
* refactor stage 01
* fix stage 01 tests
* minimal CI/CD documentation
* better check_links error reporting
* fix links
* Added Gitlab specific configurations
Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.
* Fixed TF formatting in identity providers.
* Changing identity provider audience to null
Changing identity provider audience to default to null.
* add instructions for renaming workflows
* address Julio's comments
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Simone Ruffilli
c889ce8426
Updated DNS documentation ( #611 )
2022-04-05 10:02:26 +02:00
Luca Prete
2bb9e3f64e
[ #597 ] Fix link_checker
2022-03-28 09:43:00 +02:00
Ludovico Magnocavallo
78664f3ba4
update fast net docs
2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo
01ee503c38
allow psa disabling in fast
2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo
22deb378a6
disable PSA in fast
2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo
fef3ed8c93
Fix missing service networking identity in project, PSA ( #585 )
...
* test
* test
* test
* fix
* tfdoc
* fix tests
* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo
a22cf80b60
Fix PSA ( #584 )
...
* Fix PSA
* fix typo
* fix vpn/peering diff
* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete
7c3d9beced
[ #576 ] net-vpc - Add the ability to export/import custom routes throu… ( #577 )
2022-03-11 14:40:44 +01:00
Simone Ruffilli
6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. ( #574 )
...
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Simone Ruffilli
2a4c3dc913
Update outputs.tf ( #571 )
2022-03-06 09:19:31 +01:00
Julio Castillo
ea79b339e9
Doc updates to reference new peering stage ( #565 )
...
* Few updates to reference new peering stage
* More updates to peering stage
* VPN -> HA VPN
* Fix broken links
2022-02-28 16:29:38 +01:00
Simone Ruffilli
fb90500adc
FAST: add 02-networking-peering stage. ( #561 )
...
* Networking with peering - initial commit
* README and tests
* Linter fixes
* Linter fixes
* Linter fixes
* Update README.md
* split out vpn/peering in separate files so the rest is identical
* fix dns for vpn and peering
* update tfdoc to support multiple outputs/variables files
* add peering variables
* update tfdoc for modules
* make it easier to spot errored docs
* fix doc
* yapf
* fix permadiff in firewall module source ranges
* FAST: Networking: DNS Fixes
* FAST: ability to toggle on-prem vpn creation
* FAST: fix outputs
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli
26df0468b6
Adds autohealing to NVA MIGs
2022-02-27 10:57:21 +01:00
Simone Ruffilli
c21a59a490
FAST: use preemptable instances for demo NVA. Comment out test VMs.
2022-02-27 10:04:20 +01:00
Julio Castillo
31bf9b98d1
Swap xpnAdmin with custom xpnServiceAdmin for service projects
2022-02-25 12:19:10 +01:00
Simone Ruffilli
d3d29836b8
FAST: Networking NVA stage fix
2022-02-24 12:01:54 +01:00