ed4b301a17
align subnets between vpn and peering network stages
2022-06-23 09:05:20 +02:00
fb1d31551f
fix tfdoc
2022-06-23 08:55:28 +02:00
744417f22f
fix boilerplate
2022-06-23 08:52:36 +02:00
666d8a469c
Merge branch 'master' into fast/gke2
2022-06-23 08:34:09 +02:00
f9775f61c9
Merge branch 'master' into lcaggio/data-p-200622
2022-06-23 08:11:47 +02:00
c59ce76e97
Add repository_owner to GitHub identity attributes ( #699 )
...
* add repository_owner to GitHub identity attributes
* fix errors on null identity provider custom settings
2022-06-23 08:06:25 +02:00
b10d091a98
Fix README
2022-06-23 07:16:59 +02:00
ceb611bb81
Remove custom role and rely on conditions.
2022-06-23 07:04:35 +02:00
5c653638bc
Merge branch 'master' into lcaggio/data-p-200622
2022-06-22 16:13:28 +02:00
c3fdc62ff2
Allow creating repositories in Gitlab via Terraform.
2022-06-21 15:12:03 +02:00
d9ad654281
Merge branch 'master' into lcaggio/fix-readme-20220620
2022-06-21 07:54:42 +02:00
9691577638
Fast/group creation gif ( #676 )
...
* Updated Readme with Group creation GIF
Added visual representation of checklist group creation.
* Update README.md
Added v1 version of group creation GIF.
* localize gif
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-06-21 07:19:52 +02:00
2ce4b002f1
Rename role
2022-06-20 22:23:18 +02:00
7625773dea
Fix tests
2022-06-20 22:05:22 +02:00
0b6f98db78
Add output logic
2022-06-20 17:48:39 +02:00
6edc80e282
Update READMEs
2022-06-20 17:27:28 +02:00
c464a3c8cc
Improve KMS: add custom role to handle keys
2022-06-20 17:13:25 +02:00
a1c61f089d
Add location support
2022-06-20 15:21:03 +02:00
d4eef71887
Fix links
2022-06-20 09:52:46 +02:00
26d8f0cf65
Fix stage-02 tfvars links
2022-06-20 09:11:09 +02:00
4492b0cff7
corrected the wrong name reference
2022-06-17 10:36:19 +00:00
aaa2bf2aca
Merge branch 'master' into master
2022-06-17 09:57:58 +02:00
a09eb39a96
disable provider data source when not needed, explicitly depend on CI/CD SAs
2022-06-16 23:11:08 +02:00
a35ed1ca0f
allow using cicd service accounts in build triggers
2022-06-16 22:16:43 +02:00
da17d57863
fix tfdoc
2022-06-16 21:59:44 +02:00
2b61efb722
add project number to sgae 1 values
2022-06-16 21:57:09 +02:00
c87c645bf0
add missing try to stage 1 outputs
2022-06-16 21:56:48 +02:00
f163bad220
add automation project number to stage 0 outputs
2022-06-16 21:56:18 +02:00
e3d91e84e4
sourcerepo and cloudbuild at 01-resman
2022-06-15 21:34:26 -05:00
2eb996d33d
sourcerepo and cloudbuild at 01-resman
2022-06-15 19:12:11 -05:00
c91ec944f9
solved another link issue
2022-06-10 18:34:00 +02:00
1a2bdcf6b7
Merge branch 'GoogleCloudPlatform:master' into master
2022-06-10 18:23:16 +02:00
822e4b987a
solved links issue
2022-06-10 18:21:44 +02:00
4658e5faa7
added variables required to be modified before applying again
2022-06-10 17:29:04 +02:00
8da7fbd351
cleanup reference in readme
2022-06-10 17:16:11 +02:00
a37af01203
fichero movido a fast/stages
2022-06-10 16:57:40 +02:00
1dbd13fc4b
fichero movido a fast/stages
2022-06-10 16:47:24 +02:00
a1a5011cd1
Update CLEANUP.md
...
link to gcloud beta compute shared-vpc associated-projects remove doc
2022-06-10 16:41:10 +02:00
77f3048a8c
Update CLEANUP.md
...
include comments in PR
2022-06-10 16:34:46 +02:00
a262ed3941
Update CLEANUP.md
2022-06-10 16:20:29 +02:00
21cfb69797
Update CLEANUP.md
...
delete spaces in headers
2022-06-10 16:03:10 +02:00
29ce5f666d
Simplify log_sink local
2022-06-10 12:25:26 +02:00
0bf1880431
Fix FAST audit logs when using pubsub as destination
...
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
f75c0021a1
fix #673 ( #674 )
2022-06-10 10:51:26 +02:00
bb3f55fe9e
Fix Gitlab WIF attributes ( #671 )
2022-06-09 08:31:50 +02:00
f9b808b4bc
Fix permissions and update NVA and peering net stages for gke
2022-06-08 11:42:04 +02:00
259afec97d
Leave MCS and MCI disabled
2022-06-08 11:42:04 +02:00
110d94067d
Squashing relevant changes from fast-dev-gke-marzi
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
d28dfc40b0
Enable GKE hub apis
2022-06-08 11:42:04 +02:00
66f87903a8
Enable GKE resource metering
2022-06-08 11:42:04 +02:00
9fabfafc63
Update gke stage to use contract setup
2022-06-08 11:42:02 +02:00
a4c0b22f4e
Move GKE example to dev
2022-06-08 11:41:52 +02:00
46af8fa72e
Use new project-level robot bindings
2022-06-08 11:41:52 +02:00
5ff2286378
clusters creation improvement ( #509 )
...
* shared_vpc_self_link variable from stage2
* removing shared_vpc_self_link
* do not initial_node_count as node_count
2022-06-08 11:41:52 +02:00
740288ea94
Remove old test project
2022-06-08 11:41:52 +02:00
801a5ed42d
Add xpn admin to gke SAs on gke folders
2022-06-08 11:41:52 +02:00
f3f9a4a88c
GKE multitenant
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
44ae2671b0
CI/CD support for Source Repository and Cloud Build ( #669 )
...
* add id to outputs
* initial cloud build implementation for stage 0
* comments
* stage 0
* stage 1, untested
* add support for IAM and CB triggers to source repository module
* refactor stage 0 to use sourcerepo module
* refactor stage 1 to use sourcerepo module
* file descriptions
* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
78becc22fa
Merge branch 'GoogleCloudPlatform:master' into master
2022-06-07 10:22:55 +02:00
8040a4538c
clarify some admin bindings via comments ( #663 )
2022-06-05 19:48:26 +02:00
fa321fc67c
Update README.md ( #667 )
...
* Update README.md
Fixed VPC SC example
* Update README.md
2022-06-05 19:43:14 +02:00
02f8986a1e
Update CLEANUP.md
2022-06-03 13:38:05 +02:00
2ace596ca8
Update CLEANUP.md
2022-06-03 13:22:49 +02:00
5701348d3d
Update CLEANUP.md
2022-06-03 13:21:30 +02:00
d7fd11b5fd
Update CLEANUP.md
2022-06-03 13:15:18 +02:00
8d4ea4ec67
Update CLEANUP.md
2022-06-03 13:06:46 +02:00
443a9b9538
Create CLEANUP.md
...
instructions to clean up FAST deployment
2022-06-03 13:02:42 +02:00
9feb938bed
Update README.md ( #653 )
2022-05-12 08:01:18 +02:00
e3ea387f0f
fix subnet schema ( #651 )
2022-05-09 11:53:57 +02:00
e9d06ba469
FAST: switch to SpotVM for NVAs
2022-05-04 09:59:47 +02:00
1d7b442642
FAST - Refactor VPN tunnels ( #644 )
...
* tested
* tfdoc
2022-05-04 08:11:17 +02:00
e487f8d731
Update naming convention
2022-04-21 23:53:16 +02:00
acd6719602
Adjusted Error Message of Supported Types
2022-04-19 11:10:21 +02:00
7b30aa2c12
Added "gitlab" type to 01-resman Stage
2022-04-19 11:09:33 +02:00
53fde432c4
Merge branch 'master' into alexmeissner/gitlab-template
2022-04-15 09:10:49 +02:00
73a9136dc6
disable some org policies ( #631 )
2022-04-15 08:10:42 +02:00
3b6de2531d
tfdoc
2022-04-15 02:20:39 +02:00
473178010a
don't error out when no repositories are set
2022-04-15 02:19:46 +02:00
74a919d203
Update variables.tf
...
Fixed formatting
2022-04-14 18:34:17 +02:00
6df4fc1cff
Added Gitlab CI Template
...
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets
2022-04-13 17:21:00 +02:00
73db258a38
Use new variable subnets_proxy_only instead of subnets_l7ilb for fast
2022-04-13 17:05:13 +02:00
eec0fd2fdf
FAST: allow changing tag names from variables in resman ( #628 )
2022-04-13 10:22:33 +02:00
2644627837
Remove broken link and ignore globals in fast stages
2022-04-12 21:33:03 +02:00
725f7effce
Initial MVP for CI/CD ( #608 )
...
* preliminary support for wif in stage 0
* IAM wif role
* IAM wif role TODO
* add support for external SA IAM to SA module
* add name output to SA module
* separate cicd SA
* tfdoc
* GITLAB principal (untested)
* make GCS name output static
* outputs bucket
* fix stage 1 test
* tweak outputs
* tfdoc
* move wif_pool to automation variable
* add support for top-level and repository providers
* add missing boilerplate
* fix branchless principal
* initial workflow
* symlink provider template in stages
* remove service accounts from stage 0 cicd tfvars
* add cicd interface variable to resman stage
* fix cicd variable in resman stage
* better condition on outputs_location
* fix last change
* change outputs_location type
* revert outputs_location change
* split outputs in stage 0
* update ci/cd temporary notes
* rename additive IAM resource in SA module
* split outputs in stage 1
* remove unused locals
* fix stage 1 tests
* tfdoc
* Upload action files to outputs_bucket
* Fix tests and README
* rename template, streamline outputs
* local templates and gcs output for all stage 2
* add workflows to local output files
* Use lowercase WIF providers everywhere
* Bring back suffix for workflow files
* Remove unused files
* Update READMEs
* preliminary CI/CD implementation for stage 1
* fix stage 1
* stage 1 cicd
* tfdoc
* fix tests
* readme and links for cicd and wif
* refactor wif providers
* refactor cicd for stage 1
* fix stage 1
* wif org policies
* split identity provider configuration from cicd
* add type attribute to cicd repositories
* valid cicd repositories have a workflow template
* refactor stage 01
* fix stage 01 tests
* minimal CI/CD documentation
* better check_links error reporting
* fix links
* Added Gitlab specific configurations
Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.
* Fixed TF formatting in identity providers.
* Changing identity provider audience to null
Changing identity provider audience to default to null.
* add instructions for renaming workflows
* address Julio's comments
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
9bb2f91458
Fix a few import errors in FAST ( #620 )
...
* fix import errors in stage 0
* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
c889ce8426
Updated DNS documentation ( #611 )
2022-04-05 10:02:26 +02:00
6f00caaaab
Handle Service Identity SA. Update IAM.md
2022-04-04 00:38:34 +02:00
e008fde9bb
Update READMEs and separate demo pipelines
2022-04-03 22:03:35 +02:00
ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag
2022-04-01 19:19:17 +02:00
15ba9559c5
Update READMEs
2022-04-01 18:44:18 +02:00
6d1207e1d7
Update FAST data foundation integration
2022-04-01 18:38:56 +02:00
0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker
2022-03-30 12:23:13 +02:00
1bc9929c81
Update vpn-spoke-prod.tf ( #602 )
...
Fixed region ew4
2022-03-30 10:20:10 +02:00
2bb9e3f64e
[ #597 ] Fix link_checker
2022-03-28 09:43:00 +02:00
03c871097c
Remove moved blocks
2022-03-18 10:44:44 +01:00
78664f3ba4
update fast net docs
2022-03-17 14:41:51 +01:00
01ee503c38
allow psa disabling in fast
2022-03-17 14:41:04 +01:00
22deb378a6
disable PSA in fast
2022-03-17 14:37:10 +01:00
fef3ed8c93
Fix missing service networking identity in project, PSA ( #585 )
...
* test
* test
* test
* fix
* tfdoc
* fix tests
* fix tests
2022-03-17 14:29:28 +01:00
a22cf80b60
Fix PSA ( #584 )
...
* Fix PSA
* fix typo
* fix vpn/peering diff
* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
7c3d9beced
[ #576 ] net-vpc - Add the ability to export/import custom routes throu… ( #577 )
2022-03-11 14:40:44 +01:00
6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. ( #574 )
...
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
2a4c3dc913
Update outputs.tf ( #571 )
2022-03-06 09:19:31 +01:00
ea79b339e9
Doc updates to reference new peering stage ( #565 )
...
* Few updates to reference new peering stage
* More updates to peering stage
* VPN -> HA VPN
* Fix broken links
2022-02-28 16:29:38 +01:00
cdecc199a4
Update README.md
2022-02-28 14:19:00 +01:00
fb90500adc
FAST: add 02-networking-peering stage. ( #561 )
...
* Networking with peering - initial commit
* README and tests
* Linter fixes
* Linter fixes
* Linter fixes
* Update README.md
* split out vpn/peering in separate files so the rest is identical
* fix dns for vpn and peering
* update tfdoc to support multiple outputs/variables files
* add peering variables
* update tfdoc for modules
* make it easier to spot errored docs
* fix doc
* yapf
* fix permadiff in firewall module source ranges
* FAST: Networking: DNS Fixes
* FAST: ability to toggle on-prem vpn creation
* FAST: fix outputs
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
0d08c7d56a
Re-aligning PF vars post varpocalypse
2022-02-27 19:04:47 +01:00
26df0468b6
Adds autohealing to NVA MIGs
2022-02-27 10:57:21 +01:00
c21a59a490
FAST: use preemptable instances for demo NVA. Comment out test VMs.
2022-02-27 10:04:20 +01:00
e157a52d97
Rename sample project in fast project factory
2022-02-25 16:56:13 +01:00
31bf9b98d1
Swap xpnAdmin with custom xpnServiceAdmin for service projects
2022-02-25 12:19:10 +01:00
0d5d43b061
linter fixes
2022-02-24 15:13:34 +01:00
dc3a2ad7be
Fix tests on stages
2022-02-24 15:05:18 +01:00
c1390d3a6a
FAST PF: delete placeholder
2022-02-24 12:21:44 +01:00
3bab8d3ab9
FAST: Data Platform README.md fixes
2022-02-24 12:17:49 +01:00
62ae1cb7a1
FAST: Project Factory README.md fixes
2022-02-24 12:15:12 +01:00
fb039d1bb7
FAST: Security README.md fixes
2022-02-24 12:10:36 +01:00
d3d29836b8
FAST: Networking NVA stage fix
2022-02-24 12:01:54 +01:00
7ca1e6af5a
FAST: Networking README.md fixes
2022-02-24 11:48:56 +01:00
1af71244f3
FAST: Resman README.md fixes
2022-02-24 11:28:13 +01:00
ab4a8eb78a
FAST: README.md fixes
2022-02-24 11:21:06 +01:00
c4b2f85a3b
README tweaks
2022-02-21 20:41:40 +01:00
c74ea67987
minimal README tweaks
2022-02-21 14:52:25 +01:00
7d8299b837
fix tag environment binding names in fast
2022-02-21 13:28:36 +01:00
474bcbdd0e
Use tags and tag-based IAM conditions in FAST ( #553 )
...
* organization module
* folder module
* project module
* fix project binding
* environment tags
* use id instead of name for references
* environment bindings
* conditional org policy admin binding via tags
* rename pf service accounts and buckets
* update IAM docs
* kms module
* compute-vm
* fix compute-vm
* tfdoc
2022-02-20 11:26:30 +01:00
4cb46fa19d
Update README.md
2022-02-19 08:28:35 +01:00
98056b4457
Update README.md
2022-02-19 08:27:32 +01:00
f258ff1998
fw rules
2022-02-19 07:59:30 +01:00
29e839e3a6
Fix
2022-02-18 22:20:32 +01:00
55c78a132f
Add network tag. Add KMS support in the DAG example.
2022-02-18 22:09:48 +01:00
fb5d1adf9e
composer working
2022-02-18 19:17:58 +01:00
cde75d051c
tfdoc
2022-02-18 14:52:43 +01:00
a9f8422f8b
conform to FAST project naming
2022-02-18 14:40:08 +01:00
235e22ee9f
use different IP CIDR ranges for composer
2022-02-18 14:39:54 +01:00
b9804d895b
re-add org policy admin role
2022-02-18 14:39:33 +01:00
f84c47d6f4
Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform
2022-02-18 10:04:24 +01:00
f85b327a5a
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-18 08:58:21 +01:00
1429a4dde3
Update README: KMS optional, VPC-SC
2022-02-18 08:53:51 +01:00
3a4d257f2e
tfdoc
2022-02-18 08:42:23 +01:00
21a901c1dc
assign net delegated grants by env
2022-02-18 08:38:36 +01:00
b147a4cc44
use all service accounts from stage1 in networking delegated grants
2022-02-18 08:21:25 +01:00
a02179422d
Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform
2022-02-18 07:56:27 +01:00
48088dedc0
tfdoc
2022-02-18 07:56:11 +01:00
4eca2ac11d
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-18 06:45:05 +00:00
6f3aa4920a
re-remove policy admin role from dp SAs
2022-02-18 07:29:24 +01:00
ed844cdedf
Add tests
2022-02-18 00:58:14 +01:00
04f054478d
Fix poliscy admin role
2022-02-18 00:34:51 +01:00
8e48fdaf54
FAST: Net: remove landing from its metric_scope ( #551 )
...
* Update landing.tf
2022-02-17 18:13:40 +01:00
73c2233b9b
Small fixes to DP
2022-02-16 18:52:17 +01:00
c63ddb96f9
resman tfdoc
2022-02-16 14:15:58 +01:00
3da4eedbd9
remove extra outputs
2022-02-16 14:14:41 +01:00
c24abed18d
tfdoc networking
2022-02-16 14:13:18 +01:00
c5fa5d62e4
fix remaining issues, align variables
2022-02-16 14:12:39 +01:00
0c9e2a5767
align network-nva with network-vpn
2022-02-16 13:35:29 +01:00
36a5eade36
remove dp service accounts variable
2022-02-16 13:03:33 +01:00
08770babdb
fix subnet ranges
2022-02-16 13:01:10 +01:00
d5d0554972
remove redundant firewall rules and subnets
2022-02-16 12:54:49 +01:00
728f6485ae
remove unneeded permissions in resman
2022-02-16 12:51:12 +01:00
9c736ea337
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-16 11:47:41 +00:00
dda86119f9
Fix typo
2022-02-16 11:33:43 +01:00
49f36157d5
Fix typo in stage1 outputs
2022-02-16 10:57:54 +01:00
4b73cc4de6
tfdoc, stages README
2022-02-16 10:14:51 +01:00
8e8378fb28
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-16 09:56:42 +01:00
0544456462
Use local for tfvar outputs
2022-02-16 09:07:07 +01:00
9015abfc80
stage 01 docs
2022-02-16 08:57:45 +01:00
41a848e501
stage 00 doc
2022-02-16 08:52:19 +01:00
748aaa1b3f
tfdoc
2022-02-16 08:23:34 +01:00
74d56700f5
03-project-factory
2022-02-16 08:20:32 +01:00
c0f73cb3be
replace : with - in output keys
2022-02-16 08:20:22 +01:00
442e647caf
02-networking-nva
2022-02-16 08:07:58 +01:00
9c9312c4b8
tfdoc
2022-02-16 07:53:41 +01:00
5c46d351d5
02-networking-vpn
2022-02-16 07:52:20 +01:00
c3a6ebee20
Fix roles
2022-02-16 06:55:45 +01:00
ca186054df
02-security
2022-02-16 01:18:51 +01:00
7e9843d445
tfdoc for real
2022-02-16 00:48:13 +01:00
8c684124da
Merge branch 'fast/var-contracts' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/var-contracts
2022-02-16 00:44:24 +01:00
b50deb68a7
tfdoc
2022-02-16 00:44:14 +01:00
d3c95e5784
Merge branch 'master' into fast/var-contracts
2022-02-15 23:42:30 +00:00
cd52f7c34c
stage 01
2022-02-16 00:35:50 +01:00
742a08ba17
add tfvars output
2022-02-16 00:35:44 +01:00
369253cc3a
write providers to a common folder
2022-02-16 00:14:49 +01:00
8dd5060779
file permissions
2022-02-16 00:08:09 +01:00
ad247e9435
bootstrap outputs
2022-02-16 00:03:10 +01:00
51026e6d0f
Fix xpnAdmin
2022-02-15 21:36:11 +01:00
1d187ddd23
FAST: PF example implementation changed to dev. Tests updated ( #544 )
...
* FAST: PF example implementation changed to dev. Tests updated
* FAST: simplified teams folder names
2022-02-15 12:22:08 +01:00
c91802f501
Change psa type in net-vpc, fix psa in fast net stages ( #545 )
...
* change psn type in net-vpc, fix psa in fast net stages
* fix doc examples
* psn ---> psa
2022-02-15 09:24:27 +01:00
8906252528
Fix
2022-02-14 23:54:53 +01:00
7252e7ec01
Fix review comments.
2022-02-14 16:54:42 +01:00
93ce6aac5b
README
2022-02-14 14:46:32 +01:00
b44b7178ed
README refactored
2022-02-14 14:44:19 +01:00
b987d9bd85
fix link
2022-02-14 14:37:46 +01:00
4086d28b9b
README refactor up to providers section
2022-02-14 14:23:19 +01:00
96fd909141
top-level README
2022-02-14 14:07:47 +01:00
5835d1d811
fix links
2022-02-14 14:02:29 +01:00
d8f4f37c48
tfdoc
2022-02-14 13:57:07 +01:00
2646f7bcd8
Rever router asn config
2022-02-14 10:47:09 +01:00
026cea4554
Align with master branch
2022-02-14 10:27:03 +01:00
f98d690516
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-14 10:12:35 +01:00
00f24698d0
refactor DRS org policy
2022-02-13 10:40:23 +01:00
2d27d20f1a
update IAM docs
2022-02-12 15:47:31 +01:00
54c7d8a5c6
fix perimeter definition in locals
2022-02-12 15:41:13 +01:00
fbf4d29c88
Fix FAST names ( #539 )
...
* name checker, initial names fix
* fix name parser
* sdbx -> sbox
* explicit names
* show total name length
* check names in linting action
* validate prefix length
* fix typo
2022-02-12 13:29:22 +01:00
e7ebaeedaf
Fix Bootstrap output.
2022-02-11 23:24:00 +01:00
bf64a3dfda
Add Data Platform to FAST ( #510 )
...
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 17:32:16 +01:00
9076c2f2b0
Fix external billing org
2022-02-11 17:10:44 +01:00
a978000e31
Renamed vpc-(.*) files to ( #538 )
2022-02-11 10:23:57 +01:00
547ded37b2
Update networking folder names to match teams folder
2022-02-11 08:29:46 +01:00
53144713aa
update bootstrap commands ( #536 )
2022-02-11 08:20:33 +01:00
096dce08e9
Use prefix for PF projects
2022-02-11 00:43:14 +01:00
fd599ea286
Fix renamed argument to project factory module
2022-02-11 00:30:46 +01:00
bb97486987
tfdoc
2022-02-10 19:17:35 +01:00
677f3c8df1
use custom role name for billing org too
2022-02-10 19:16:13 +01:00
3246d1c08d
fix variable
2022-02-10 19:13:55 +01:00
c4d36cc66b
Allow specifying custom role names
2022-02-10 19:12:07 +01:00
ae49074921
Update terraform.tfvars.sample
2022-02-10 17:25:38 +01:00
2696af1a7e
Update vpc-sc.tf - manage empty perimeters. ( #530 )
...
* Update vpc-sc.tf - manage empty perimeters.
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-10 16:24:14 +01:00
6700faf662
Document log sinks in stage 0
2022-02-10 13:00:43 +01:00
b377b30910
Update README ( #517 )
...
Update path to config folder
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-09 13:05:46 +01:00
a18bea7f2c
Add Zonal DNS Only org policy ( #527 )
...
This is a safe and sane org policy that should be recommended for most customers to prevent them from accidentally configuring internal dns in a way that has reduced availability
https://cloud.google.com/compute/docs/internal-dns#enforce_dns_by_policy
2022-02-09 12:21:43 +01:00
40cb46e1cc
Add support for Shared VPC service IAM to project module ( #525 )
...
* project module changes
* fix examples
* add comments in module code
* re-enable nullable on svpc variables
* project factory
* Tests still failing (#526 )
* fix pf
* tfdoc
* pf test boilerplate
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2022-02-09 11:06:51 +01:00
d21304267b
revert dry-run to true as default
2022-02-08 13:43:37 +01:00
02dc9de9b0
make it simpler to switch from/ry run mode ( #524 )
2022-02-08 13:26:44 +01:00
4567b788a2
add org policy role to cloud admins
2022-02-08 11:31:39 +01:00
be33a7f880
FAST - Fixes 498 - 02-networking-nva stage
2022-02-07 13:22:58 +01:00
40142572f8
Update variables.tf example for team_folders
2022-02-07 11:15:13 +01:00
8f1639a3c5
sample tfvars file
2022-02-07 11:07:13 +01:00
e5440f98a2
use prod folder for landing project ( #514 )
2022-02-06 19:25:05 +01:00
d711a93397
fix previous merge ( #513 )
2022-02-06 18:34:32 +01:00
c4533503a6
Fast: use pathexpand for output location ( #512 )
...
* use pathexpand for output location
* tfdoc
2022-02-06 18:24:46 +01:00
1aa5d5d93f
Misc documentation fixes ( #493 )
2022-02-06 10:50:23 +01:00
6c1c943600
fix org id
2022-02-06 10:05:31 +01:00
769fc73e83
remove unused roles on automation project
2022-02-06 09:47:40 +01:00
c8cbf9b7d7
Add utility to extract IAM bindings from state ( #503 )
...
* add utility to extract IAM bindings from state
* TODO
* TODO
* output one row per role/member pairs
* sorting
* rename, delete spurious file
* generalize output functions
* generate IAM.md
* fix org id
* add link to role in markdown
* fix org id
* replace organization ids
2022-02-05 17:34:43 +01:00
75aff4081f
default=null for `shared_vpc_self_link ` and `vpc_host_project` ( #502 )
...
* Update variables.tf
* Update README.md
2022-02-04 19:57:06 +01:00
0c0614e12f
Fix typo in stage2 variable
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:54:09 +01:00
18adf869ae
Update networking stages to use multiple folders
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-02-04 16:21:00 +01:00
ed4fc477a7
Update resman outputs and projects
2022-02-04 16:21:00 +01:00
f184ced544
Add xpnAdmin to diffent folders
2022-02-04 16:21:00 +01:00
190442da9d
FAST-02-nva: uniformed l7 and PSA CIDRs ( #497 )
...
* FAST-02-nva: uniformed l7 and PSA CIDRs
* Update variables.tf
* Fixes README.md
* Fixes typo in variables.tf
* Fixes README.md
2022-02-04 14:40:24 +01:00
a82f107f54
FAST-00: Adds projectCreator to resman SA. Always create delegated role grants. ( #496 )
2022-02-04 13:59:32 +01:00
02e8a3927d
CI link checker ( #494 )
...
* CI link checker
* fix link errors
* fix ci
* wildcard on *.md
2022-02-04 13:28:07 +01:00
0cef15301b
Rename 02-networking to 02-networking-vpn ( #492 )
2022-02-04 11:03:37 +01:00
52c4b608c2
Rename tf files to use dashes
2022-02-04 08:45:49 +01:00
2291e0643a
remove module.organization.custom_role_id.xpnServiceAdmin
...
to be discussed with jccb
2022-02-04 08:45:49 +01:00
8272694360
02-net-nva: README.md updates
2022-02-04 07:42:56 +01:00
9d81e29be7
FAST - Add 02-networking-nva stage
2022-02-03 20:30:56 +01:00
c8f59c105e
Remove unneeded delegated grants
2022-02-03 19:22:32 +01:00
5d0c57ef0c
Update stage0 readme
2022-02-03 19:22:32 +01:00
9c552f8978
Fix syntax error
2022-02-03 19:22:32 +01:00
Ludovico Magnocavallo
Lorenzo Caggioni
Taneli Leppä
Alexander Meissner
temiloluwa ademuwagun
Antonio Lopez
agusramirez@google.com
ajlopezn
Julio Castillo
Daniel Marzini
javiergp
frits-v
Simone Ruffilli
alexmeissner
Aleksandr Averbukh
Elia
Luca Prete
Luca Prete
Simone Ruffilli
eeaton
Daniel Marzini