Commit Graph

81 Commits

Author SHA1 Message Date
Ludovico Magnocavallo ab646f38ed
Bump provider versions to >= 4.17.0, terraform to >= 1.1.0 (#634)
* bump provider versions to >= 4.17.0, terraform to >= 1.1.0

* bump teraform version in lint check, edit CHANGELOG
2022-04-17 13:55:40 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Julio Castillo 3dd6e3fc0d Define nullable variables in SA module 2022-01-29 09:51:02 +01:00
Julio Castillo bb6674ea19 Split SA module in multiple files 2022-01-29 09:51:02 +01:00
Julio Castillo cf423998f0 Align tftest syntax with tdoc
This commit changes the token separator for inline examples from a
semicolon to a space
2022-01-28 21:34:15 +01:00
Julio Castillo 31f625f149 Link vars and outputs from README 2022-01-22 14:15:16 +01:00
apichick 7bbe3d0b6d fixed README in iam-service-account module 2022-01-21 21:01:48 +01:00
Julio Castillo 2728c4aac1 Fix all internal links 2022-01-11 11:53:19 +01:00
Simone Ruffilli ee25965c89
Copyright bump (#410) 2022-01-01 15:52:31 +01:00
Ludovico Magnocavallo 2bc5f7d33c
update tfdoc (#404) 2021-12-30 10:56:19 +01:00
Ludovico Magnocavallo 1ac3fe4460
New tfdoc version (#396)
* update tfdoc

* rewrite check docs, refactor tfdoc replace, regenerate modules READMEs

* remove dead code from check docs

* do not fail on missing variable files in check docs

* fix typos
2021-12-21 08:51:51 +01:00
averbukh 39b7756958 Rewording, fix typos 2021-12-15 18:26:44 +01:00
Aleksandr Averbukh 4fd1ccb982 Update iam-sa docs 2021-12-06 17:30:56 +01:00
Aleksandr Averbukh 0e5fdda107 TF fmt 2021-12-06 17:23:53 +01:00
Aleksandr Averbukh 2d9c2fe774 Fix typo in the SA module readme 2021-12-06 17:09:48 +01:00
Aleksandr Averbukh 205975ff39 SA key uploading and credentials json generation with terraform. 2021-12-06 17:02:56 +01:00
Ludovico Magnocavallo f6775aca1b
Use the same versions file everywhere, pin to tf 1.0+ provider 4.0+ (#355)
* add default versions file, remove old providers and versions

* use default versions file everywhere

* fix kms module

* re-add provider configuration for data platform step 2

* update kms module outputs sorting

* update kms documentation

* fix data solutions tests

* fix GKE workload identity attribute name

* work around firewall provider issue in datafusion example
2021-11-03 15:05:43 +01:00
Roberto Jung Drebes b96cebc3fa Fix SA IAM dynamic interpolation 2021-11-01 19:28:58 +01:00
Ludovico Magnocavallo 555de95f48 iam-service-account 2021-10-19 21:05:09 +02:00
Julio Castillo 1d13e3e624 Add more validations to linter
- Ensure all variables and outputs are sorted
- Ensure all variables and outputs have a description
- Add data-solutions/data-platform-foundations to linter

Fix all modules to follow these new conventions.
2021-10-08 18:26:04 +02:00
Julio Castillo 75418bbbd0 Compute service account email statically
Generate the service account output statically based on the service
account name and parent project. This allows, among other things, to use
service accounts as map keys (e.g. to be used in the `iam` argument in
other modules).
2021-08-10 10:50:44 +02:00
Julio Castillo 875b786171 Optional create for service accounts 2021-05-06 12:07:39 +02:00
Julio Castillo 1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Ludovico Magnocavallo 0ce058e04f
Fix tests for 0.14 compatibility (#191)
* remove sensitive attribute from VPN modules key output

* fix type error in service account example

* update CI Terraform version

* update VPN modules docs

* require version in compute mig module

* require version in compute mig module for scaling_schedules

* update compute mig test, move provider version requirement in fixture
2021-01-29 14:55:50 +01:00
Julio Castillo eecdee63e6 Make examples in READMEs runnable and testable 2020-11-07 10:28:33 +01:00
Ludovico Magnocavallo c33e68ecd0 use list in service account module variable types 2020-11-05 09:26:24 +01:00
Ludovico Magnocavallo cb54ff77a1 rename iam variable in service account module 2020-11-05 09:22:13 +01:00
Julio Castillo 1a7b9836ea Update folder and service account READMEs 2020-10-29 23:54:40 +01:00
Julio Castillo 6e81125c6a Remove useless calls to toset 2020-10-29 23:29:41 +01:00
Julio Castillo 85fda5b1fe Remove iam_roles from service accounts, folder and organization modules 2020-10-21 09:37:05 +02:00
Julio Castillo 13ed799a8b Update service account module to Terraform 0.13 2020-10-20 22:36:03 +02:00