6f1e531af0
added example for source&destination ranges usage in fw rules
2023-04-11 10:45:45 +00:00
b809b315f6
added example for source&destination ranges usage in fw rules
2023-04-11 10:43:32 +00:00
660da5b585
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall
2023-04-11 12:24:06 +02:00
4ccf9f9361
included an empty list as default in the ingress_rules.destination_ranges variable
2023-04-11 10:22:08 +00:00
33e8b42842
Use labels var in cloud-run module ( #1310 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-04-11 03:06:13 +00:00
adb88d8a87
allow destination_range variable in ingress rules and source_range in egress rules
2023-04-10 14:00:55 +00:00
18f1e8ebb1
added source and destination ranges to both ingress and egress fw rules
2023-04-10 10:47:51 +00:00
db3c48736c
add firewall enforcement variable to VPC
2023-04-10 01:28:12 +10:00
865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider ( #1306 )
...
* add support for new attributes to bigquery module
* bump provider versions
2023-04-05 14:22:52 +00:00
70aefc2ddb
Add ability to run vtysh from simple-nva vm directly when frr is active ( #1301 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 21:37:02 +02:00
07f60fb0b9
Fix vtysh ( #1300 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 14:37:46 +00:00
bc2d9372aa
Fix urlmap in ILB L7 module ( #1299 )
...
* port tests to new format
* add test to catch error and fix urlmap
* boilerplate
* boilerplate
2023-04-03 15:47:37 +02:00
bf14d2da23
Add sample vtysh file to remove warnings ( #1298 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 15:10:46 +02:00
92b71a5098
Refactor cloud run module to use optionals and support all features ( #1293 )
...
* refactor cloud run resource and variables
* vpc connector variables and resource
* refactor env variable, combine and fix env examples
* fix volume example
* fix traffic split example
* fix eventarc/pubsub example
* fix eventarc/audit log example
* fix SA examples, fix examples formatting
* refactor eventarc variable
* tfdoc
* add IAM to example
* add examples for revision annotations and serverless connector
* fix new examples
* remove legacy module tests
* blueprint tests
* Add tests to cloud-run module
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-04-01 14:06:29 +02:00
c5db50d1d7
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
6204787226
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
0a20bc4f2d
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
1fb7e114fd
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
596acb63e4
removing deprecated field from gke-hub
2023-03-30 12:47:39 +02:00
44d2e9e50e
removing deprecated field from gke-hub
2023-03-30 12:47:39 +02:00
64a9952656
add Backup for GKE support
2023-03-30 12:47:39 +02:00
7135c9015f
Add boilerplate
2023-03-30 09:36:14 +03:00
b503bde544
Load all service agents identities from yaml
...
Source: https://cloud.google.com/iam/docs/service-agents
2023-03-30 09:36:14 +03:00
c76e95e7e8
Add Cloud Batch service identity ( #1294 )
2023-03-30 08:05:12 +02:00
d64b5779e4
Merge branch 'master' into dataplex
2023-03-27 21:44:24 +02:00
039d10b287
Merge branch 'master' into dataplex
2023-03-27 16:18:38 +02:00
dfa1fce274
Merge branch 'master' into bruzz/nva-firewall-mgmt
2023-03-27 16:04:55 +02:00
d68476ba07
fixes
2023-03-27 15:46:37 +02:00
cf2fd119b5
small fixes
2023-03-27 15:35:00 +02:00
9005a51a95
Use example testing instead custom test
2023-03-27 14:13:38 +02:00
d105ed59d3
Resolve review comments
2023-03-27 14:13:38 +02:00
082301c09c
Use unique bundle name for Cloud Function
...
When cloud-function module is used multiple times within project and
default `bundle_config.output_path` is used then all the instances try
to use filename and result is undefined without guarantee to converge to
desired state (i.e. multiple functions may share the same code).
2023-03-27 14:13:38 +02:00
a93b80cf95
linting
2023-03-27 11:49:01 +02:00
41570d2840
update documentation
2023-03-27 11:42:17 +02:00
021fb84765
add firewall mgmt on simple-nva module
2023-03-27 09:54:01 +02:00
58bc576ddb
Add dataplex SA
2023-03-27 07:37:40 +00:00
987ea34d93
DNS policy module fixes ( #1278 )
...
* dns response policy module
* tfdoc
* Add dns policy tests
* fix copyright, var description, initial wording
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-03-26 18:39:07 +02:00
28da881c3f
DNS Response Policy module ( #1276 )
...
* dns response policy module
* tfdoc
2023-03-26 17:42:57 +02:00
60261a6352
add static gateway id to outputs ( #1270 )
2023-03-21 18:08:45 +01:00
3d425b7d9c
Ignore changes to metadata.0.annotations in Cloud Run module
...
Fixes #1173
2023-03-21 11:54:07 +01:00
3b20d617dc
Improvements to NCC-RA spoke module. ( #1267 )
2023-03-21 07:07:44 +00:00
6e49e94749
simple-nva: add ability to parse BGP configs as strings. ( #1268 )
...
* Add ability to parse BGP configs as strings.
* Fix var name
* Refresh tfdoc
---------
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-03-21 07:41:12 +01:00
4b15fe4744
Add backend service names to outputs for net-glb and net-ilb-l7 (some things like ( #1258 )
...
autoneg require names).
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-03-17 10:40:11 +00:00
8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module ( #1259 )
...
* initial implementation, no tests
* change interface, align tests
* add examples ToC
* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
50adf1da2a
change target_vpcs variable to support dynamic values ( #1255 )
2023-03-17 07:14:09 +00:00
21fa6d1f13
Fixes related to boot_disk in compute-vm module
2023-03-16 15:58:39 +01:00
79a6e9b191
pin local provider ( #1256 )
2023-03-16 10:59:06 +00:00
c82f142d2d
Delay creation of SVPC host bindings until APIs and JIT SAs are done
2023-03-14 14:51:17 +01:00
112d9a8d9c
Allow using existing boot disk in compute-vm module ( #1241 )
...
* allow using existing boot disk in compute-vm module
* allow setting initialize params to null
* tests
* fast
* blueprints
2023-03-12 10:53:59 +01:00
6ba0f8b0ba
allow overriding name in net-vpc subnet factory ( #1239 )
2023-03-11 09:30:42 +01:00
510db1b36f
Fix policy_based_routing.sh script on simple-nva module ( #1226 )
2023-03-10 18:36:07 +01:00
1c3645f3a3
Fix dataproc modules variables
2023-03-10 16:54:09 +01:00
7595508bd4
fix variable
2023-03-10 12:03:54 +01:00
3ffda9c8c9
terraform fmt
2023-03-10 10:45:39 +01:00
f688b9a47d
realign logic to boolean variable
2023-03-10 10:43:37 +01:00
7781b72690
replace track_per_session with tracking_mode and fixed connection tracking conf for backends
2023-03-10 10:03:45 +01:00
45c12e233b
Network firewall policy module ( #1232 )
...
* validated, untested
* tested
* typo in README
2023-03-10 08:21:49 +00:00
d0f346f6c6
Add resources created as outputs
2023-03-09 15:35:52 +01:00
f82b5284c9
Change semantics of custom_advertise
2023-03-09 15:35:52 +01:00
7eb9fbf676
Merge branch 'master' into ncc
2023-03-09 13:10:36 +01:00
3e85175f67
Adapt README examples to the variables config
2023-03-09 13:06:02 +01:00
0cf254f91e
Update variable and output tables
2023-03-09 13:06:02 +01:00
7e6635f535
Alphabetical order and better naming
2023-03-09 13:06:02 +01:00
eef6a48876
Make ip_interfaceX not optional
...
These IP values are optional, if you don't specify a value Google will try to
find a free IP address. But this is a bad idea because setting them to 'null'
forces a replacement even without any changes to make.
2023-03-09 13:06:02 +01:00
84d3b83f81
Group router information under router_config
2023-03-09 13:06:02 +01:00
b25ee97d15
Group vpc and subnet under vpc_config
2023-03-09 13:06:02 +01:00
e9312e4dba
var ras -> router_appliances
2023-03-09 13:06:02 +01:00
cc6ee44759
Add aiplatform robot service account
2023-03-09 08:17:26 +01:00
5489162b75
Merge branch 'master' into ncc
2023-03-08 20:33:53 +01:00
96f35c53a5
Fix README variables to pass pytest
2023-03-08 20:00:55 +01:00
93bb809a40
Rename module net-ncc -> ncc-spoke-ra
2023-03-08 20:00:55 +01:00
62539508a5
Update README for the new implementation
2023-03-08 20:00:55 +01:00
6196851d3f
Output the name of the hub if created
2023-03-08 20:00:55 +01:00
34c6a6aee1
Make creation of the hub optional
2023-03-08 20:00:55 +01:00
1b4ba11dcd
Make IPs for the CR interfaces optional
2023-03-08 20:00:55 +01:00
0da0f33525
Make keepalive optional
2023-03-08 20:00:55 +01:00
81121f4aa6
data_transfer default to false
2023-03-08 20:00:55 +01:00
d5d743174e
Make custom_advertise optional
2023-03-08 20:00:55 +01:00
2f64fcd5f4
Reimplement the module to manage only one spoke
2023-03-08 20:00:55 +01:00
e213f156ad
Fix Jit notebook service account.
2023-03-08 16:06:27 +01:00
fd07c444cb
Extended simple-nva module to manage BGP service running on FR routing docker container ( #1195 )
2023-03-08 09:43:13 +01:00
6eb82a2214
Merge pull request #16 from juliodiez/master
...
Sync branch
2023-03-07 13:13:35 +01:00
d9eaa59862
Generated variable table via tfdoc
2023-03-07 13:04:15 +01:00
ac224ad11c
Add tftest to README
2023-03-07 12:29:20 +01:00
94f3a08129
Add example of custom route advertisements
2023-03-07 11:54:34 +01:00
9b5bc407ba
Add image for load-balanced router appliances example
2023-03-07 11:10:19 +01:00
58c90feca2
Add example of load-balanced router appliances
2023-03-07 11:06:23 +01:00
3e0a8c4c0a
Add image for site to two VPCs example
2023-03-07 10:43:51 +01:00
76972d5804
Add example of site to two VPCs
2023-03-07 10:37:58 +01:00
449f5cbb56
Adapt example to use only allowed chars for resource names
2023-03-07 10:28:29 +01:00
87107ba3e0
Set a unique name to CRs linked to spokes
2023-03-07 10:11:02 +01:00
e7963eb630
Set a unique name to spokes
2023-03-07 10:01:07 +01:00
71cb18f808
Replace map key derived from resource attributes
2023-03-07 09:52:34 +01:00
0f4919a771
Add image for site to VPC example
2023-03-06 20:55:36 +01:00
69493d8a40
Add README with first example
2023-03-06 20:47:18 +01:00
65671647e7
Make optional some router config fields
2023-03-06 20:45:08 +01:00
25b14465b2
Simplify some naming
2023-03-06 19:21:09 +01:00
e835730665
Add router BGP peers
2023-03-06 18:02:50 +01:00
02707eb275
Initial commit for NCC module
2023-03-06 14:09:14 +01:00
8fc9549c58
add support for proxy and psc subnets to module factory ( #1211 )
2023-03-05 17:08:43 +01:00
88ecdbe671
Merge branch 'master' into lcaggio/dataproc-03
2023-03-02 12:18:52 +01:00
99d19d5ec8
Fix issue with GKE cluster notifications topic, change pubsub module output to static.
2023-03-02 11:23:05 +01:00
b7793f69a2
Dataproc module. Fix output.
2023-03-02 10:39:08 +01:00
2ebb21e4cc
Fix url_redirect issue on net-glb module ( #1204 )
2023-03-02 07:51:39 +01:00
b39b486cd4
Fix README
2023-03-01 10:48:33 +01:00
c4d8175d9a
Merge branch 'master' into lcaggio/dataproc-02
2023-03-01 10:44:31 +01:00
0d37fe8338
Update README
2023-03-01 10:44:01 +01:00
3a2d6e1b46
Fix secondary ranges in net-vpc readme ( #1198 )
...
Fixes #1197
2023-03-01 08:08:07 +01:00
dad3c49012
Fix linting
2023-03-01 08:00:52 +01:00
6629e5cd06
Merge branch 'master' into lcaggio/dataproc-02
2023-03-01 07:57:21 +01:00
dc37783022
Fix Variables
2023-03-01 07:54:10 +01:00
4b3b5ad1cb
Merge branch 'master' into fix-test-compute-vm-kms
2023-02-28 16:13:48 +01:00
52eb83758f
Fix compute-vm:CloudKMS test for provider>=4.54.0
...
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
`google_compute_disk.disks["attached-disk"]` (see
hashicorp/terraform-provider-google#4448 )
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
will now fail with <4.54.0, which do not return `rsa_encrypted_key`
* Updated the whole repo on advice from @ludoo
2023-02-28 15:10:22 +00:00
6bf2fb4c06
Fix https health check mismapped to http ( #1194 )
2023-02-28 15:48:13 +01:00
0f504f6b8e
Fix output variable order.
2023-02-28 10:50:58 +01:00
ac0a140011
Fix outputs
2023-02-28 10:35:44 +01:00
1a685e7b83
Update README.md
2023-02-28 07:49:28 +01:00
3d2f1182d2
Update README.md
2023-02-28 07:48:47 +01:00
7ece884422
Fix examples.
2023-02-28 06:52:10 +01:00
46a99b9a9b
Merge branch 'master' into lcaggio/dataproc
2023-02-28 06:36:21 +01:00
e098568b6e
fix external gateway ( #1191 )
2023-02-28 00:46:50 +01:00
fdb4f2a9fd
Fix variables
2023-02-27 22:23:45 +01:00
51579ac7e7
Fix linting
2023-02-27 22:18:07 +01:00
05a85e753c
First commit
2023-02-27 22:14:07 +01:00
cbe85e0605
fixing workloadidentity for anthos service mesh - authority was not created
2023-02-27 14:17:16 +00:00
6320c53baf
Allow multiple peer gateways in vpn ha module ( #1184 )
...
* allow multiple peer gateways in vpn ha module
* align blueprints
* fast
2023-02-27 10:18:59 +00:00
aecb6fd543
Implemented conditional dynamic blocks for `google_access_context_manager_service_perimeter` `spec` and `status` ( #1177 )
...
* implemented conditional dynamic blocks
* Fix linting
* avoid setting spec in bridge perimeters if no resources are set
---------
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 16:04:19 +00:00
899960c247
Fix tests
2023-02-24 19:14:43 +01:00
36e6367a5c
adding meshconfig.googleapis.com to JIT list.
2023-02-24 16:11:35 +00:00
7670a6009f
adding meshconfig.googleapis.com to JIT list.
2023-02-24 16:05:11 +00:00
3b0223458b
Don't define nor use health checks with SNEGs
...
SNEGs don't use health checks and it's an error to add one in their backend services. 'terraform plan' doesn't detect it, only 'apply'.
2023-02-24 11:13:55 +01:00
5a44baa82f
Merge branch 'master' into juliodiez-patch-1
2023-02-24 10:22:07 +01:00
ae6080ebf7
Modifications related to autopilot and workload identity. Added workload_identity_pool output to module
2023-02-24 09:59:23 +01:00
08ba94aebc
Allow to not use any health check
...
Internet / serverless NEGs (Cloud Run) don't use them and it's an error to add one in their backend services.
2023-02-24 09:55:26 +01:00
a5e905cb80
Update remaining org policies
2023-02-21 15:49:16 +01:00
62834ca83a
Update READMEs
2023-02-21 15:49:16 +01:00
6b767c9035
Simplify org policies data model in resman modules.
2023-02-21 15:49:16 +01:00
4a9ce1c5ce
Update README
...
Remove unused field
2023-02-21 14:05:03 +01:00
0ca0b2e99b
Fix variable name
2023-02-20 14:37:33 +01:00
3085922cea
Fix tests
2023-02-20 12:19:36 +01:00
840abd60e7
Merge branch 'master' into master
2023-02-20 08:14:58 +01:00
f16511b8da
Fix typo in readme
2023-02-19 15:22:48 +01:00
ff4b2fffe2
Regenerate docs
2023-02-18 22:11:44 +01:00
8174890331
Sort variables
2023-02-18 22:04:40 +01:00
1c302c7ab3
TF formatting
2023-02-18 21:48:05 +01:00
d970db0c79
Merge branch 'master' into projects-ds-new-version
2023-02-18 21:38:53 +01:00
a497aef707
feat: new version of projects-data-source based on AssetInventory ds
2023-02-18 21:36:51 +01:00
e64e8db20d
Allow additive IAM grants by robots name
...
Regreatablly member name will be known after apply, hence changes in the
tests
2023-02-16 14:39:21 +01:00
e8334857ff
Update main.tf ( #1158 )
...
replaced .secondary_pod_range by var.pod_range.secondary_pod_range that is the object which contins create, cidr an name attributes.
2023-02-15 06:28:47 +01:00
7bbeac805e
Add 'max_time_travel_hours ' on BQ module
2023-02-14 08:43:15 +01:00
ajlopezn
Antonio Lopez
Mikhail Filipchuk
Fawzi
Ludovico Magnocavallo
Luca Prete
Valerio Ponza
Julio Castillo
Wiktor Niesiobędzki
bruzzechesse
Taneli Leppä
Miren Esnaola
simonebruzzechesse
Julio Diez
lcaggio
erabusi
Dan Farmer
Joshua Goldberg
Carlos Alexandre
Aleksandr Averbukh
Chema Polo