71a64487d5
Extend FAST to support different principal types ( #2064 )
...
* add doc draft
* typos
* typo
* typo
* typos
* rewording
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* move iam variables to a separate file
* move billing-account module to iam_principals
* move data-catalog-policy-tag module to iam_principals
* move dataplex-datascan module to iam_principals
* move dataproc module to iam_principals
* move folder module to iam_principals
* copyright
* move organization module to iam_principals
* move project module to iam_principals
* move source-repository module to iam_principals
* update blueprints for iam_principals interface
* FAST bootstrap
* module READMEs fixes
* FAST bootstrap
* FAST networking stages
* FAST security stage
* FAST gke stage
* FAST multitenant bootstrap stage
* FAST multitenant resman stage
* tfdoc
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* fix module test
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Rename iam_principals to iam_by_principals
* Update IAM template to include iam_by_principals
* Update Resman README
* Fix ADR link format
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-02-12 14:35:30 +01:00
c50b732c79
Allow granting network user role on host project from project module and factory ( #1930 )
...
* Update shared vpc config for project factory and project module for more granular Shared VPC configuration
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-12-15 14:39:21 +01:00
f548b65b1c
Add support for subnet-level service network user grants to project module, improve docs ( #1907 )
...
* improve project factory example
* light refactor of project modules shared vpc internals and docs
* add support for subnet-level grants on host project
2023-12-07 09:07:48 +00:00
82c74e4ab6
Dataproc module bug fix ( #1848 )
...
* bug fix
* bug fix
* fix dinamic for_each
---------
Co-authored-by: Francesco Spinelli <francesco.spinelli@nttdata.com>
2023-11-09 15:48:29 +00:00
03937f2b6e
Support multilevel data and allow overriding project id in project factory ( #1851 )
2023-11-09 08:29:46 +00:00
2664161c24
Simplify #1836 fix, Avoid map-related casting errors in project factory
2023-11-02 09:12:38 +00:00
de0325b3a3
Avoid map-related casting errors in project factory ( #1836 )
...
* try to repro pf example error
* repro
* repro
* pf fix
* remove extra file
* FAST stage
2023-11-02 08:24:50 +01:00
30d7126b83
Allow specifying arbitrary project roles for service accounts in project factory ( #1814 )
...
* allow specifying arbitrary project roles for service accounts in project factory
* tfdoc
2023-10-26 14:09:03 +00:00
1ed48b556f
make extended shared vpc attributes optional in pf ( #1796 )
2023-10-23 13:45:48 +00:00
aa5d883deb
add support for org policies to project factory ( #1722 )
2023-10-02 14:13:56 +00:00
e141b86f79
merge labels from data_merges in project factory ( #1662 )
...
* merge labels from data_merges in project factory
* fix project factory test for labels
2023-09-08 10:27:46 +00:00
12e78af055
Fix project factory blueprint and fast stage ( #1654 )
2023-09-07 12:48:39 +00:00
819894d2ba
IAM interface refactor ( #1595 )
...
* IAM modules refactor proposal
* policy
* subheading
* Update 20230816-iam-refactor.md
* log Julio's +1
* data-catalog-policy-tag
* dataproc
* dataproc
* folder
* folder
* folder
* folder
* project
* better filtering in test examples
* project
* folder
* folder
* organization
* fix variable descriptions
* kms
* net-vpc
* dataplex-datascan
* modules/iam-service-account
* modules/source-repository/
* blueprints/cloud-operations/vm-migration/
* blueprints/third-party-solutions/wordpress
* dataplex-datascan
* blueprints/cloud-operations/workload-identity-federation
* blueprints/data-solutions/cloudsql-multiregion/
* blueprints/data-solutions/composer-2
* Update 20230816-iam-refactor.md
* Update 20230816-iam-refactor.md
* capture discussion in architectural doc
* update variable names and refactor proposal
* project
* blueprints first round
* folder
* organization
* data-catalog-policy-tag
* re-enable folder inventory
* project module style fix
* dataproc
* source-repository
* source-repository tests
* dataplex-datascan
* dataplex-datascan tests
* net-vpc
* net-vpc test examples
* iam-service-account
* iam-service-account test examples
* kms
* boilerplate
* tfdoc
* fix module tests
* more blueprint fixes
* fix typo in data blueprints
* incomplete refactor of data platform foundations
* tfdoc
* data platform foundation
* refactor data platform foundation iam locals
* remove redundant example test
* shielded folder fix
* fix typo
* project factory
* project factory outputs
* tfdoc
* test workflow: less verbose tests, fix tf version
* re-enable -vv, shorter traceback, fix action version
* ignore github extension warning, re-enable action version
* fast bootstrap IAM, untested
* bootstrap stage IAM fixes
* stage 0 tests
* fast stage 1
* tenant stage 1
* minor changes to fast stage 0 and 1
* fast security stage
* fast mt stage 0
* fast mt stage 0
* fast pf
2023-08-20 09:44:20 +02:00
4998f1d376
Grant IAM rights to service identities in host project ( #1542 )
...
* [module/project] Grant IAM rights to service identities based on used services in host project
* [blueprints/factories/project-factory] enable granting IAM permissions in host VPC for service identities directly or by specifying services in use
2023-07-29 20:07:21 +02:00
cacb0c02e2
Refactoring of dns module
2023-07-19 12:57:44 +02:00
7cacc46b4b
fixup(project-factory): Use the correct KMS Service Agents attribute … ( #1446 )
...
* fixup(project-factory): Use the correct KMS Service Agents attribute name
* Add new KMS bindings to tests
* Update test resource counts
* Update README.md resource count
2023-06-19 23:53:08 +00:00
6a89d71e96
Update to multiple README.md ( #1379 )
...
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
edce6edd28
Update factories and apigee tests
2023-02-25 19:26:11 +01:00
1696f70f47
Update PF variables for org policies
2023-02-21 15:49:16 +01:00
a5e905cb80
Update remaining org policies
2023-02-21 15:49:16 +01:00
e1e0c38236
Fix README and var order
2023-02-06 18:08:03 +01:00
c883d5ec3a
Fix README
2023-02-06 18:03:43 +01:00
bd90aa7f47
Add descriptive_name
2023-02-06 17:39:33 +01:00
f2b61b1e31
Add descriptive name as optional argument
2023-02-06 17:35:11 +01:00
e700a27079
Enforce terraform fmt in examples
2022-12-18 14:00:19 +01:00
612d7283e8
Enforce nonempty descriptions ending in a colon
2022-11-24 18:56:01 +01:00
e4fc47a063
Normalize prefix handling in blueprints ( #1003 )
2022-11-23 11:09:00 +01:00
826ff14ef9
Sort variables and outputs
2022-11-21 13:17:55 +01:00
8c51a2a386
Enable org policy service and add README notice to modules ( #936 )
...
* enable org policy service and add README notice to modules
* fix tests
2022-11-01 14:25:07 +01:00
d7e0af75b2
feat(project-factory): introduce additive iam bindings to project-factory ( #932 )
2022-10-31 18:24:25 +01:00
9262e11ebf
Fix pf example
2022-10-28 17:55:29 +02:00
410fe1c73a
Add pf example with deny all org policy
2022-10-28 17:49:44 +02:00
c714952f39
Fix tests
2022-10-28 17:49:44 +02:00
9400eed2bf
Add documentation example test for pf ( #813 )
...
* Add documentation example test for pf
* skip tmpdir for examples
2022-09-14 14:34:30 +02:00
a248602827
Rename examples folder to blueprints
2022-09-09 16:38:43 +02:00
Ludovico Magnocavallo
simonebruzzechesse
Francesco Spinelli
Wiktor Niesiobędzki
Pierre Formont
Luca Prete
Miren Esnaola
Albert Lloveras
Alejandro Leal
Julio Castillo
Paul Woelfel
Sebastian Kunze
Malet