Ludovico Magnocavallo
fae5654e33
Refactor VPC firewall module for Terraform 1.3 ( #949 )
...
* module and module tests/examples
* align blueprints and fast
* fix null ranges
* make ports optional
* tfdoc
* make rules optional defaulting to all protocols
* review comments
* last round of comments
* invert precedence of template variables
* add option to disable all default rules
* add option to disable all default rules
* split egress/ingress
* tests
* fix tests
2022-11-04 13:56:07 +01:00
Simone Ruffilli
7b2a82a7d6
PGA DNS records ( #911 )
...
Additional PGA DNS records
2022-10-25 14:28:28 +02:00
Julio Castillo
192edf2b75
Remove redundant ttls
2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo
4fa1dc431d
Refactor net-vpc module for Terraform 1.3 ( #880 )
...
* module tests pass
* doc examples
* refactor blueprints
* fast stages
* fix comment typo
* fix module factory test
2022-10-14 11:02:33 +02:00
Ludovico Magnocavallo
e66340c4db
Refactor compute-vm for Terraform 1.3 ( #860 )
...
* refactor compute-vm for Terraform 1.3
* bump Terraform version in CI tests config
* fix optional null handling (ht jccb)
* tfdoc
* update blueprints
* align fast
* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo
894647ff9e
Leverage new shared VPC project config defaults across the repo
2022-10-07 08:55:47 +02:00
lcaggio
149d84d41d
Fix NVA and VPC firewall rules.
2022-09-20 17:08:24 +02:00
Julio Castillo
f8e2fdaf19
Remove project.service_config instances using the new default
2022-09-09 09:38:09 +02:00
Julio Castillo
52e7e0517a
Merge branch 'master' into fast/gke2
2022-08-24 15:37:15 +02:00
Simone Ruffilli
a29faa7f8c
instance_termination_action must be set for compute-vm spot instances ( #778 )
...
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo
0bec03b0a0
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-08-03 20:42:09 +02:00
Ludovico Magnocavallo
9b6262de41
FAST: move region trigrams to a variable in network stages ( #765 )
...
* add region trigram variable
* debug check documentation
* fix linting
2022-08-03 11:36:27 +02:00
Ludovico Magnocavallo
dedddbed20
align net stages
2022-07-31 15:13:39 +02:00
Ludovico Magnocavallo
cd3b4463de
align net stages
2022-07-31 15:00:09 +02:00
Ludovico Magnocavallo
9b371a3d2c
support GKE specific network roles in stages 01 and 02
2022-07-31 14:54:14 +02:00
Ludovico Magnocavallo
366f28a519
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-07-29 10:57:25 +02:00
Simone Ruffilli
ef27d2e9d1
Use spot VMs for test VM and for NVAs ( #734 )
2022-07-13 13:57:03 +02:00
Julio Castillo
07c5da4283
Fix tests
2022-07-12 12:39:00 +02:00
Julio Castillo
1bc352bb7b
Fix docs
2022-07-12 12:19:05 +02:00
Julio Castillo
25955b158a
Merge branch 'master' into fast/gke2
2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo
8585852ae6
fix #714 ( #715 )
2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo
7b5ced7e15
stage 01
2022-06-30 18:22:57 +02:00
Ludovico Magnocavallo
7786dd3d90
Merge branch 'master' into fast/gke2
2022-06-30 11:30:52 +02:00
Ludovico Magnocavallo
ee7a615a58
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-06-29 17:06:55 +02:00
Michael Gfeller
c66bb0e1c3
Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into mgfeller/fast-readme-tfvars-auto
2022-06-29 15:29:43 +02:00
Ludovico Magnocavallo
66c4fffd76
FAST: configuration switches for features ( #703 )
...
* example implementation of top-level switches
* data platform as a fast feature
* decouple teams and project factory
* teams disable fixes
* optional pf
* networking stage
* remove var from stage 2s, security
2022-06-28 17:33:37 +02:00
Michael Gfeller
34650ae621
FAST - updated some READMEs about usage of *.auto.tfvars files
...
Updated information about using the auto generated tfvars files in the "Variable configuration" section for some stages.
Mainly about using globals.auto.tfvars.json instead of copying terraform.tfvars from bootstrap stage.
2022-06-28 11:27:21 +02:00
Julio Castillo
9fabfafc63
Update gke stage to use contract setup
2022-06-08 11:42:02 +02:00
Julio Castillo
a4c0b22f4e
Move GKE example to dev
2022-06-08 11:41:52 +02:00
Julio Castillo
f3f9a4a88c
GKE multitenant
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
Ludovico Magnocavallo
1d7b442642
FAST - Refactor VPN tunnels ( #644 )
...
* tested
* tfdoc
2022-05-04 08:11:17 +02:00
Aleksandr Averbukh
73db258a38
Use new variable subnets_proxy_only instead of subnets_l7ilb for fast
2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo
725f7effce
Initial MVP for CI/CD ( #608 )
...
* preliminary support for wif in stage 0
* IAM wif role
* IAM wif role TODO
* add support for external SA IAM to SA module
* add name output to SA module
* separate cicd SA
* tfdoc
* GITLAB principal (untested)
* make GCS name output static
* outputs bucket
* fix stage 1 test
* tweak outputs
* tfdoc
* move wif_pool to automation variable
* add support for top-level and repository providers
* add missing boilerplate
* fix branchless principal
* initial workflow
* symlink provider template in stages
* remove service accounts from stage 0 cicd tfvars
* add cicd interface variable to resman stage
* fix cicd variable in resman stage
* better condition on outputs_location
* fix last change
* change outputs_location type
* revert outputs_location change
* split outputs in stage 0
* update ci/cd temporary notes
* rename additive IAM resource in SA module
* split outputs in stage 1
* remove unused locals
* fix stage 1 tests
* tfdoc
* Upload action files to outputs_bucket
* Fix tests and README
* rename template, streamline outputs
* local templates and gcs output for all stage 2
* add workflows to local output files
* Use lowercase WIF providers everywhere
* Bring back suffix for workflow files
* Remove unused files
* Update READMEs
* preliminary CI/CD implementation for stage 1
* fix stage 1
* stage 1 cicd
* tfdoc
* fix tests
* readme and links for cicd and wif
* refactor wif providers
* refactor cicd for stage 1
* fix stage 1
* wif org policies
* split identity provider configuration from cicd
* add type attribute to cicd repositories
* valid cicd repositories have a workflow template
* refactor stage 01
* fix stage 01 tests
* minimal CI/CD documentation
* better check_links error reporting
* fix links
* Added Gitlab specific configurations
Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.
* Fixed TF formatting in identity providers.
* Changing identity provider audience to null
Changing identity provider audience to default to null.
* add instructions for renaming workflows
* address Julio's comments
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Simone Ruffilli
c889ce8426
Updated DNS documentation ( #611 )
2022-04-05 10:02:26 +02:00
Julio Castillo
0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker
2022-03-30 12:23:13 +02:00
Elia
1bc9929c81
Update vpn-spoke-prod.tf ( #602 )
...
Fixed region ew4
2022-03-30 10:20:10 +02:00
Luca Prete
2bb9e3f64e
[ #597 ] Fix link_checker
2022-03-28 09:43:00 +02:00
Ludovico Magnocavallo
78664f3ba4
update fast net docs
2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo
01ee503c38
allow psa disabling in fast
2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo
22deb378a6
disable PSA in fast
2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo
fef3ed8c93
Fix missing service networking identity in project, PSA ( #585 )
...
* test
* test
* test
* fix
* tfdoc
* fix tests
* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo
a22cf80b60
Fix PSA ( #584 )
...
* Fix PSA
* fix typo
* fix vpn/peering diff
* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete
7c3d9beced
[ #576 ] net-vpc - Add the ability to export/import custom routes throu… ( #577 )
2022-03-11 14:40:44 +01:00
Simone Ruffilli
6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. ( #574 )
...
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Julio Castillo
ea79b339e9
Doc updates to reference new peering stage ( #565 )
...
* Few updates to reference new peering stage
* More updates to peering stage
* VPN -> HA VPN
* Fix broken links
2022-02-28 16:29:38 +01:00
Simone Ruffilli
fb90500adc
FAST: add 02-networking-peering stage. ( #561 )
...
* Networking with peering - initial commit
* README and tests
* Linter fixes
* Linter fixes
* Linter fixes
* Update README.md
* split out vpn/peering in separate files so the rest is identical
* fix dns for vpn and peering
* update tfdoc to support multiple outputs/variables files
* add peering variables
* update tfdoc for modules
* make it easier to spot errored docs
* fix doc
* yapf
* fix permadiff in firewall module source ranges
* FAST: Networking: DNS Fixes
* FAST: ability to toggle on-prem vpn creation
* FAST: fix outputs
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli
c21a59a490
FAST: use preemptable instances for demo NVA. Comment out test VMs.
2022-02-27 10:04:20 +01:00
Julio Castillo
31bf9b98d1
Swap xpnAdmin with custom xpnServiceAdmin for service projects
2022-02-25 12:19:10 +01:00
Simone Ruffilli
7ca1e6af5a
FAST: Networking README.md fixes
2022-02-24 11:48:56 +01:00
Ludovico Magnocavallo
f258ff1998
fw rules
2022-02-19 07:59:30 +01:00