Commit Graph

480 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 34d5156eeb top-level README 2022-08-06 11:07:22 +02:00
Ludovico Magnocavallo 3745b2885e remove support for preemptible nodes 2022-08-06 11:00:46 +02:00
Ludovico Magnocavallo 0bec03b0a0 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-03 20:42:09 +02:00
Ludovico Magnocavallo bfefaf627e
refactor teams, fix #750 (#766) 2022-08-03 16:34:09 +02:00
Ludovico Magnocavallo 9b6262de41
FAST: move region trigrams to a variable in network stages (#765)
* add region trigram variable

* debug check documentation

* fix linting
2022-08-03 11:36:27 +02:00
Daniel Marzini b85b5e265a added spot vm 2022-08-02 21:41:47 +02:00
Daniel Marzini 1cf963b443 added spot vm 2022-08-02 21:41:36 +02:00
Ludovico Magnocavallo ce7e4bc59c linting 2022-08-02 19:12:52 +02:00
Daniel Marzini 170d585473 fix permissions and binauthz 2022-08-02 18:28:06 +02:00
Daniel Marzini 45723233c8 fix permissions and binauthz 2022-08-02 18:27:44 +02:00
Ludovico Magnocavallo dedddbed20 align net stages 2022-07-31 15:13:39 +02:00
Ludovico Magnocavallo cd3b4463de align net stages 2022-07-31 15:00:09 +02:00
Ludovico Magnocavallo 9b371a3d2c support GKE specific network roles in stages 01 and 02 2022-07-31 14:54:14 +02:00
Ludovico Magnocavallo 24f3545de7 add project-level iam variable 2022-07-30 16:05:39 +02:00
Ludovico Magnocavallo f51e40b60a tfdoc 2022-07-30 16:00:10 +02:00
Ludovico Magnocavallo c51ba73e38 change to binary_authorization, add support for additional services 2022-07-30 15:59:45 +02:00
Daniel Marzini c9fa0fbd55 fixes 2022-07-29 23:45:15 +02:00
Ludovico Magnocavallo f00b67ae88 linting 2022-07-29 15:11:36 +02:00
Ludovico Magnocavallo 7c23aeae58 implement dev, fix variables, add stub READMEs 2022-07-29 15:09:57 +02:00
Ludovico Magnocavallo c24e661383 fleet mcs service accounts 2022-07-29 14:01:35 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo 1260db923e
Update main.tf 2022-07-29 10:49:50 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
Agustin Ramirez 7f1a523866
FIX: Missing value to format principalSet (#759) 2022-07-27 08:18:27 +02:00
Ludovico Magnocavallo 5e0ab57f3a
Add support for IAM bindings on service accounts to project factory (#753)
* Fix #748

* fix linting

* remove trailing whitespace

* update FAST pf
2022-07-21 15:13:39 +02:00
agusramirez@google.com 5f20c11b57 FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:20:56 -05:00
Agustin Ramirez ee0b6d6b2a
FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:07:05 -05:00
Simone Ruffilli ef27d2e9d1
Use spot VMs for test VM and for NVAs (#734) 2022-07-13 13:57:03 +02:00
Julio Castillo 07c5da4283 Fix tests 2022-07-12 12:39:00 +02:00
Julio Castillo 1bc352bb7b Fix docs 2022-07-12 12:19:05 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Julio Castillo e7bc11e6b9 Add gke SAs to outputs 2022-07-12 12:10:39 +02:00
Ludovico Magnocavallo f42b0f06e4
add billing IAM for billing group (#730) 2022-07-11 08:26:13 +02:00
Simone Ruffilli 0d9fac316a
FAST: Resman: Update billing.tf (#721)
* FAST: Resman: Update billing.tf

Add billing.costsManager to the PF SAs to allow it to create billing alerts.

* fix linting

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-06 16:10:14 +03:00
Michael Gfeller ea7827d1ad FAST - added missing format argument in branch-pf-dev-sa-cicd
In the module branch-pf-dev-sa-cicd, the calls to the "format" function were missing the argument var.automation.federated_identity_pool.
2022-07-05 11:44:33 +02:00
Ludovico Magnocavallo 8585852ae6
fix #714 (#715) 2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
Ludovico Magnocavallo 9a3128e716 wip 2022-06-30 20:20:14 +02:00
Ludovico Magnocavallo 7b5ced7e15 stage 01 2022-06-30 18:22:57 +02:00
Ludovico Magnocavallo 7786dd3d90
Merge branch 'master' into fast/gke2 2022-06-30 11:30:52 +02:00
Ludovico Magnocavallo d6a81fb662 wip 2022-06-30 11:00:57 +02:00
Ludovico Magnocavallo ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Michael Gfeller c66bb0e1c3 Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into mgfeller/fast-readme-tfvars-auto 2022-06-29 15:29:43 +02:00
Ludovico Magnocavallo 66c4fffd76
FAST: configuration switches for features (#703)
* example implementation of top-level switches

* data platform as a fast feature

* decouple teams and project factory

* teams disable fixes

* optional pf

* networking stage

* remove var from stage 2s, security
2022-06-28 17:33:37 +02:00
Julio Castillo 2da28e5954
Update CLEANUP.md 2022-06-28 11:28:57 +02:00
Michael Gfeller 34650ae621 FAST - updated some READMEs about usage of *.auto.tfvars files
Updated information about using the auto generated tfvars files in the "Variable configuration" section for some stages.
Mainly about using globals.auto.tfvars.json instead of copying terraform.tfvars from bootstrap stage.
2022-06-28 11:27:21 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Michael Gfeller df9bdc2fb0
FAST - trigger GitHub workflow also on PR synchronize event (#702)
Add synchronize to the pull_request trigger so that the workflow is also run when the source branch is updated.
2022-06-27 10:13:41 +02:00
Ludovico Magnocavallo dfb447a2c4
Merge branch 'master' into fast/gke2 2022-06-23 13:50:28 +02:00
Ludovico Magnocavallo ed4b301a17 align subnets between vpn and peering network stages 2022-06-23 09:05:20 +02:00
Ludovico Magnocavallo fb1d31551f fix tfdoc 2022-06-23 08:55:28 +02:00
Ludovico Magnocavallo 744417f22f fix boilerplate 2022-06-23 08:52:36 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Ludovico Magnocavallo f9775f61c9
Merge branch 'master' into lcaggio/data-p-200622 2022-06-23 08:11:47 +02:00
Ludovico Magnocavallo c59ce76e97
Add repository_owner to GitHub identity attributes (#699)
* add repository_owner to GitHub identity attributes

* fix errors on null identity provider custom settings
2022-06-23 08:06:25 +02:00
Lorenzo Caggioni b10d091a98 Fix README 2022-06-23 07:16:59 +02:00
Lorenzo Caggioni ceb611bb81 Remove custom role and rely on conditions. 2022-06-23 07:04:35 +02:00
lcaggio 5c653638bc
Merge branch 'master' into lcaggio/data-p-200622 2022-06-22 16:13:28 +02:00
Taneli Leppä c3fdc62ff2 Allow creating repositories in Gitlab via Terraform. 2022-06-21 15:12:03 +02:00
lcaggio d9ad654281
Merge branch 'master' into lcaggio/fix-readme-20220620 2022-06-21 07:54:42 +02:00
Alexander Meissner 9691577638
Fast/group creation gif (#676)
* Updated Readme with Group creation GIF

Added visual representation of checklist group creation.

* Update README.md

Added v1 version of group creation GIF.

* localize gif

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-06-21 07:19:52 +02:00
Lorenzo Caggioni 2ce4b002f1 Rename role 2022-06-20 22:23:18 +02:00
Lorenzo Caggioni 7625773dea Fix tests 2022-06-20 22:05:22 +02:00
Lorenzo Caggioni 0b6f98db78 Add output logic 2022-06-20 17:48:39 +02:00
Lorenzo Caggioni 6edc80e282 Update READMEs 2022-06-20 17:27:28 +02:00
Lorenzo Caggioni c464a3c8cc Improve KMS: add custom role to handle keys 2022-06-20 17:13:25 +02:00
Lorenzo Caggioni a1c61f089d Add location support 2022-06-20 15:21:03 +02:00
Lorenzo Caggioni d4eef71887 Fix links 2022-06-20 09:52:46 +02:00
Lorenzo Caggioni 26d8f0cf65 Fix stage-02 tfvars links 2022-06-20 09:11:09 +02:00
temiloluwa ademuwagun 4492b0cff7 corrected the wrong name reference 2022-06-17 10:36:19 +00:00
Antonio Lopez aaa2bf2aca
Merge branch 'master' into master 2022-06-17 09:57:58 +02:00
Ludovico Magnocavallo a09eb39a96 disable provider data source when not needed, explicitly depend on CI/CD SAs 2022-06-16 23:11:08 +02:00
Ludovico Magnocavallo a35ed1ca0f allow using cicd service accounts in build triggers 2022-06-16 22:16:43 +02:00
Ludovico Magnocavallo da17d57863 fix tfdoc 2022-06-16 21:59:44 +02:00
Ludovico Magnocavallo 2b61efb722 add project number to sgae 1 values 2022-06-16 21:57:09 +02:00
Ludovico Magnocavallo c87c645bf0 add missing try to stage 1 outputs 2022-06-16 21:56:48 +02:00
Ludovico Magnocavallo f163bad220 add automation project number to stage 0 outputs 2022-06-16 21:56:18 +02:00
agusramirez@google.com e3d91e84e4 sourcerepo and cloudbuild at 01-resman 2022-06-15 21:34:26 -05:00
agusramirez@google.com 2eb996d33d sourcerepo and cloudbuild at 01-resman 2022-06-15 19:12:11 -05:00
ajlopezn c91ec944f9 solved another link issue 2022-06-10 18:34:00 +02:00
Antonio Lopez 1a2bdcf6b7
Merge branch 'GoogleCloudPlatform:master' into master 2022-06-10 18:23:16 +02:00
ajlopezn 822e4b987a solved links issue 2022-06-10 18:21:44 +02:00
ajlopezn 4658e5faa7 added variables required to be modified before applying again 2022-06-10 17:29:04 +02:00
ajlopezn 8da7fbd351 cleanup reference in readme 2022-06-10 17:16:11 +02:00
ajlopezn a37af01203 fichero movido a fast/stages 2022-06-10 16:57:40 +02:00
ajlopezn 1dbd13fc4b fichero movido a fast/stages 2022-06-10 16:47:24 +02:00
Antonio Lopez a1a5011cd1
Update CLEANUP.md
link to gcloud beta compute shared-vpc associated-projects remove doc
2022-06-10 16:41:10 +02:00
Antonio Lopez 77f3048a8c
Update CLEANUP.md
include comments in PR
2022-06-10 16:34:46 +02:00
Antonio Lopez a262ed3941
Update CLEANUP.md 2022-06-10 16:20:29 +02:00
Antonio Lopez 21cfb69797
Update CLEANUP.md
delete spaces in headers
2022-06-10 16:03:10 +02:00
Julio Castillo 29ce5f666d Simplify log_sink local 2022-06-10 12:25:26 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Ludovico Magnocavallo f75c0021a1
fix #673 (#674) 2022-06-10 10:51:26 +02:00
Ludovico Magnocavallo bb3f55fe9e
Fix Gitlab WIF attributes (#671) 2022-06-09 08:31:50 +02:00
Julio Castillo f9b808b4bc Fix permissions and update NVA and peering net stages for gke 2022-06-08 11:42:04 +02:00
Daniel Marzini 259afec97d Leave MCS and MCI disabled 2022-06-08 11:42:04 +02:00
Julio Castillo 110d94067d Squashing relevant changes from fast-dev-gke-marzi
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
Julio Castillo d28dfc40b0 Enable GKE hub apis 2022-06-08 11:42:04 +02:00
Julio Castillo 66f87903a8 Enable GKE resource metering 2022-06-08 11:42:04 +02:00
Julio Castillo 9fabfafc63 Update gke stage to use contract setup 2022-06-08 11:42:02 +02:00
Julio Castillo a4c0b22f4e Move GKE example to dev 2022-06-08 11:41:52 +02:00
Julio Castillo 46af8fa72e Use new project-level robot bindings 2022-06-08 11:41:52 +02:00
Daniel Marzini 5ff2286378 clusters creation improvement (#509)
* shared_vpc_self_link variable from stage2

* removing shared_vpc_self_link

* do not initial_node_count as node_count
2022-06-08 11:41:52 +02:00
Julio Castillo 740288ea94 Remove old test project 2022-06-08 11:41:52 +02:00
Julio Castillo 801a5ed42d Add xpn admin to gke SAs on gke folders 2022-06-08 11:41:52 +02:00
Julio Castillo f3f9a4a88c GKE multitenant
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Antonio Lopez 78becc22fa
Merge branch 'GoogleCloudPlatform:master' into master 2022-06-07 10:22:55 +02:00
Ludovico Magnocavallo 8040a4538c
clarify some admin bindings via comments (#663) 2022-06-05 19:48:26 +02:00
javiergp fa321fc67c
Update README.md (#667)
* Update README.md

Fixed VPC SC example

* Update README.md
2022-06-05 19:43:14 +02:00
Antonio Lopez 02f8986a1e
Update CLEANUP.md 2022-06-03 13:38:05 +02:00
Antonio Lopez 2ace596ca8
Update CLEANUP.md 2022-06-03 13:22:49 +02:00
Antonio Lopez 5701348d3d
Update CLEANUP.md 2022-06-03 13:21:30 +02:00
Antonio Lopez d7fd11b5fd
Update CLEANUP.md 2022-06-03 13:15:18 +02:00
Antonio Lopez 8d4ea4ec67
Update CLEANUP.md 2022-06-03 13:06:46 +02:00
Antonio Lopez 443a9b9538
Create CLEANUP.md
instructions to clean up FAST deployment
2022-06-03 13:02:42 +02:00
frits-v 9feb938bed
Update README.md (#653) 2022-05-12 08:01:18 +02:00
Ludovico Magnocavallo e3ea387f0f
fix subnet schema (#651) 2022-05-09 11:53:57 +02:00
Simone Ruffilli e9d06ba469 FAST: switch to SpotVM for NVAs 2022-05-04 09:59:47 +02:00
Ludovico Magnocavallo 1d7b442642
FAST - Refactor VPN tunnels (#644)
* tested

* tfdoc
2022-05-04 08:11:17 +02:00
Lorenzo Caggioni e487f8d731 Update naming convention 2022-04-21 23:53:16 +02:00
Alexander Meissner acd6719602
Adjusted Error Message of Supported Types 2022-04-19 11:10:21 +02:00
Alexander Meissner 7b30aa2c12
Added "gitlab" type to 01-resman Stage 2022-04-19 11:09:33 +02:00
Ludovico Magnocavallo 53fde432c4
Merge branch 'master' into alexmeissner/gitlab-template 2022-04-15 09:10:49 +02:00
Ludovico Magnocavallo 73a9136dc6
disable some org policies (#631) 2022-04-15 08:10:42 +02:00
Ludovico Magnocavallo 3b6de2531d tfdoc 2022-04-15 02:20:39 +02:00
Ludovico Magnocavallo 473178010a don't error out when no repositories are set 2022-04-15 02:19:46 +02:00
Alexander Meissner 74a919d203
Update variables.tf
Fixed formatting
2022-04-14 18:34:17 +02:00
alexmeissner 6df4fc1cff Added Gitlab CI Template
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 73db258a38 Use new variable subnets_proxy_only instead of subnets_l7ilb for fast 2022-04-13 17:05:13 +02:00
Ludovico Magnocavallo eec0fd2fdf
FAST: allow changing tag names from variables in resman (#628) 2022-04-13 10:22:33 +02:00
Julio Castillo 2644627837 Remove broken link and ignore globals in fast stages 2022-04-12 21:33:03 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Ludovico Magnocavallo 9bb2f91458
Fix a few import errors in FAST (#620)
* fix import errors in stage 0

* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
Simone Ruffilli c889ce8426
Updated DNS documentation (#611) 2022-04-05 10:02:26 +02:00
Lorenzo Caggioni 6f00caaaab Handle Service Identity SA. Update IAM.md 2022-04-04 00:38:34 +02:00
Lorenzo Caggioni e008fde9bb Update READMEs and separate demo pipelines 2022-04-03 22:03:35 +02:00
lcaggio ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag 2022-04-01 19:19:17 +02:00
Lorenzo Caggioni 15ba9559c5 Update READMEs 2022-04-01 18:44:18 +02:00
Lorenzo Caggioni 6d1207e1d7 Update FAST data foundation integration 2022-04-01 18:38:56 +02:00
Julio Castillo 0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker 2022-03-30 12:23:13 +02:00
Elia 1bc9929c81
Update vpn-spoke-prod.tf (#602)
Fixed region ew4
2022-03-30 10:20:10 +02:00
Luca Prete 2bb9e3f64e [#597] Fix link_checker 2022-03-28 09:43:00 +02:00
Julio Castillo 03c871097c Remove moved blocks 2022-03-18 10:44:44 +01:00
Ludovico Magnocavallo 78664f3ba4 update fast net docs 2022-03-17 14:41:51 +01:00
Ludovico Magnocavallo 01ee503c38 allow psa disabling in fast 2022-03-17 14:41:04 +01:00
Ludovico Magnocavallo 22deb378a6 disable PSA in fast 2022-03-17 14:37:10 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Simone Ruffilli 6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. (#574)
* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf

* Update spoke-dev.tf

* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
Simone Ruffilli 2a4c3dc913
Update outputs.tf (#571) 2022-03-06 09:19:31 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Julio Castillo cdecc199a4
Update README.md 2022-02-28 14:19:00 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
Simone Ruffilli 0d08c7d56a Re-aligning PF vars post varpocalypse 2022-02-27 19:04:47 +01:00
Simone Ruffilli 26df0468b6 Adds autohealing to NVA MIGs 2022-02-27 10:57:21 +01:00
Simone Ruffilli c21a59a490 FAST: use preemptable instances for demo NVA. Comment out test VMs. 2022-02-27 10:04:20 +01:00
Julio Castillo e157a52d97 Rename sample project in fast project factory 2022-02-25 16:56:13 +01:00
Julio Castillo 31bf9b98d1 Swap xpnAdmin with custom xpnServiceAdmin for service projects 2022-02-25 12:19:10 +01:00
Simone Ruffilli 0d5d43b061 linter fixes 2022-02-24 15:13:34 +01:00
Simone Ruffilli dc3a2ad7be Fix tests on stages 2022-02-24 15:05:18 +01:00
Simone Ruffilli c1390d3a6a FAST PF: delete placeholder 2022-02-24 12:21:44 +01:00
Simone Ruffilli 3bab8d3ab9 FAST: Data Platform README.md fixes 2022-02-24 12:17:49 +01:00
Simone Ruffilli 62ae1cb7a1 FAST: Project Factory README.md fixes 2022-02-24 12:15:12 +01:00
Simone Ruffilli fb039d1bb7 FAST: Security README.md fixes 2022-02-24 12:10:36 +01:00
Simone Ruffilli d3d29836b8 FAST: Networking NVA stage fix 2022-02-24 12:01:54 +01:00
Simone Ruffilli 7ca1e6af5a FAST: Networking README.md fixes 2022-02-24 11:48:56 +01:00
Simone Ruffilli 1af71244f3 FAST: Resman README.md fixes 2022-02-24 11:28:13 +01:00
Simone Ruffilli ab4a8eb78a FAST: README.md fixes 2022-02-24 11:21:06 +01:00
Ludovico Magnocavallo c4b2f85a3b README tweaks 2022-02-21 20:41:40 +01:00
Ludovico Magnocavallo c74ea67987 minimal README tweaks 2022-02-21 14:52:25 +01:00
Ludovico Magnocavallo 7d8299b837 fix tag environment binding names in fast 2022-02-21 13:28:36 +01:00
Ludovico Magnocavallo 474bcbdd0e
Use tags and tag-based IAM conditions in FAST (#553)
* organization module

* folder module

* project module

* fix project binding

* environment tags

* use id instead of name for references

* environment bindings

* conditional org policy admin binding via tags

* rename pf service accounts and buckets

* update IAM docs

* kms module

* compute-vm

* fix compute-vm

* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo 4cb46fa19d
Update README.md 2022-02-19 08:28:35 +01:00
Ludovico Magnocavallo 98056b4457
Update README.md 2022-02-19 08:27:32 +01:00
Ludovico Magnocavallo f258ff1998 fw rules 2022-02-19 07:59:30 +01:00
Lorenzo Caggioni 29e839e3a6 Fix 2022-02-18 22:20:32 +01:00
Lorenzo Caggioni 55c78a132f Add network tag. Add KMS support in the DAG example. 2022-02-18 22:09:48 +01:00
Ludovico Magnocavallo fb5d1adf9e composer working 2022-02-18 19:17:58 +01:00
Ludovico Magnocavallo cde75d051c tfdoc 2022-02-18 14:52:43 +01:00
Ludovico Magnocavallo a9f8422f8b conform to FAST project naming 2022-02-18 14:40:08 +01:00
Ludovico Magnocavallo 235e22ee9f use different IP CIDR ranges for composer 2022-02-18 14:39:54 +01:00
Ludovico Magnocavallo b9804d895b re-add org policy admin role 2022-02-18 14:39:33 +01:00
Ludovico Magnocavallo f84c47d6f4 Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform 2022-02-18 10:04:24 +01:00
lcaggio f85b327a5a
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-18 08:58:21 +01:00
Lorenzo Caggioni 1429a4dde3 Update README: KMS optional, VPC-SC 2022-02-18 08:53:51 +01:00
Ludovico Magnocavallo 3a4d257f2e tfdoc 2022-02-18 08:42:23 +01:00
Ludovico Magnocavallo 21a901c1dc assign net delegated grants by env 2022-02-18 08:38:36 +01:00
Ludovico Magnocavallo b147a4cc44 use all service accounts from stage1 in networking delegated grants 2022-02-18 08:21:25 +01:00
Ludovico Magnocavallo a02179422d Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform 2022-02-18 07:56:27 +01:00
Ludovico Magnocavallo 48088dedc0 tfdoc 2022-02-18 07:56:11 +01:00
Ludovico Magnocavallo 4eca2ac11d
Merge branch 'master' into lcaggioni/fast-data-platform 2022-02-18 06:45:05 +00:00
Ludovico Magnocavallo 6f3aa4920a re-remove policy admin role from dp SAs 2022-02-18 07:29:24 +01:00
Lorenzo Caggioni ed844cdedf Add tests 2022-02-18 00:58:14 +01:00
Lorenzo Caggioni 04f054478d Fix poliscy admin role 2022-02-18 00:34:51 +01:00
Simone Ruffilli 8e48fdaf54
FAST: Net: remove landing from its metric_scope (#551)
* Update landing.tf
2022-02-17 18:13:40 +01:00
Julio Castillo 73c2233b9b Small fixes to DP 2022-02-16 18:52:17 +01:00