Commit Graph

4285 Commits

Author SHA1 Message Date
Julio Castillo fddf8b52bc Fix sort order 2023-05-22 19:11:33 +02:00
Julio Castillo 3e67fc00ca Add default Cloud Build SA to project module 2023-05-22 19:11:33 +02:00
Ana Fernandez 00efd6099f
Merge pull request #1388 from GoogleCloudPlatform/afda16/firewall-validator-argument
Firewall Validator fix target_service_accounts ref
2023-05-22 15:49:38 +01:00
Ana Fernandez del Alamo 4129eb11ae Firewall Validator fix target_service_accounts ref
The Firewall Validator schema configuration contains a field
`target_service_account`. This should be updated to
`target_service_accounts` to match the `google_compute_firewall`
Terraform resource argument:

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_firewall#target_service_accounts
2023-05-22 15:28:48 +01:00
Ana Fernandez 8254303dc3
Merge pull request #1386 from GoogleCloudPlatform/afda16/logging-bucket-cmek
Support CMEK encryption in logging-bucket module
2023-05-22 15:28:15 +01:00
Ana Fernandez del Alamo a5bbd09776 Support CMEK encryption in logging-bucket module
We have a use case, Local Controls, that requires to configure
CMEK with Logging buckets. This commit adds an optional variable to
configure CMEK in the `logging-bucket` module. By default the Logging
bucket won't use CMEK encryption.

To configure CMEK for Logging buckets it's also required to add the
correct permissions to the bucket service account. For more information
and a Terraform example, see:

https://cloud.google.com/logging/docs/routing/managed-encryption-storage

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/logging_project_bucket_config#example-usage
2023-05-22 15:12:27 +01:00
Ludovico Magnocavallo e0911c6291
Add conditional org admin role to sandbox SA (#1385)
* add org admin conditional role to sandbox SA

* tfdoc
2023-05-21 10:48:41 +02:00
Roberto Jung Drebes d2f0b17ec4
Allows groups from other orgs/domains (#1383)
* Allows groups from other orgs
2023-05-17 11:07:47 +02:00
Bharath KKB 47ae6dc7c3
chore: update mlops blueprint metadata (#1382) 2023-05-17 07:41:57 +00:00
lcaggio 40656a23de
Minimal Data Platform - Make components optional (#1380)
make some components optional: Composer and Data Proc history server.
2023-05-16 14:08:03 +02:00
Alejandro Leal 6a89d71e96
Update to multiple README.md (#1379)
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
Julio Castillo 56132ffb03
Merge pull request #1378 from bluPhy/master
Updates to blueprints/data-solutions/shielded-folder
2023-05-16 07:28:33 +02:00
Alejandro Leal 31c1c8534a Updates to blueprints/data-solutions/vertex-mlops
Updates to blueprints/data-solutions/vertex-mlops
2023-05-15 19:41:55 -04:00
Alejandro Leal a0beec747e README to blueprints/data-solutions/shielded-folder 2023-05-15 17:46:48 -04:00
Julio Castillo 5bd3aa4d5f
Merge pull request #1375 from bluPhy/master
Several updates
2023-05-15 23:08:18 +02:00
Alejandro Leal 11f7f3efed Reverted variables.tf metadata.yaml README.md to commit 85407109c8 2023-05-15 16:45:13 -04:00
Alejandro Leal 65e6ef98fa Reverted README.md to commit 85407109c8 2023-05-15 16:34:18 -04:00
Alejandro Leal a2a2942e2c Update README.md 2023-05-15 14:50:47 -04:00
Alejandro Leal 0ad21351c0
Merge branch 'master' into master 2023-05-15 14:25:42 -04:00
Natalia Strelkova 85407109c8
Merge pull request #1377 from GoogleCloudPlatform/fast-home-path-fix
Fixed home path
2023-05-15 13:29:02 +02:00
Natalia Strelkova c4ec4868c2
Merge branch 'master' into fast-home-path-fix 2023-05-15 13:16:55 +02:00
Natalia Strelkova f5b10fa3da
Fixed home path 2023-05-15 12:55:43 +02:00
Alex Ostapenko 7861ea74b8
fixed permissions for security stage SA (#1376)
it should be able to use automation project
as a quota project, hence it needs `serviceusage.serviceUsageConsumer`
role
2023-05-15 10:20:33 +00:00
Julio Castillo 78ed6a8af6
Merge pull request #1372 from GoogleCloudPlatform/jccb/nat-rules
Cloud NAT rules support
2023-05-14 15:42:34 +02:00
Ludovico Magnocavallo 2cbd85c8e0
Merge branch 'master' into jccb/nat-rules 2023-05-14 15:29:52 +02:00
Manuel Aller dd1e5dc463
added the export_public_ip_routes variable in the net-vpc-peering mod… (#1374)
* added the export_public_ip_routes variable in the net-vpc-peering module to control the google_compute_network_peering resource created

* adding period to the variable description
2023-05-14 15:29:24 +02:00
Alejandro Leal 87cd83f5c0 Several updates
Several updates
2023-05-13 23:51:46 -04:00
apichick 60d579be4d
Merge pull request #1373 from apichick/cloud-functions-cpu
Made available CPUs configurable in Cloud Functions module
2023-05-13 09:59:35 +02:00
Julio Castillo 8e1e761577
Merge branch 'master' into cloud-functions-cpu 2023-05-13 09:45:10 +02:00
Miren Esnaola 4df6c90d12 Made available CPUs configurable in Cloud Functions module 2023-05-12 21:36:22 +02:00
Julio Castillo d20a078134 Cloud NAT rules support 2023-05-12 16:20:38 +02:00
Julio Castillo b153474468
Merge pull request #1365 from merit/master
feat(net-cloudnat): add toggle for independent endpoint mapping and dynamic port allocation
2023-05-12 15:38:00 +02:00
Jay Schwerberg 20b8002602
feat(net-cloudnat): add config_port_allocation configuration block 2023-05-11 12:20:43 -07:00
Julio Castillo 7d9f52298c
Merge pull request #1367 from fawzihmouda/fawzihmouda/ncc-typo
fix routes priority typo
2023-05-09 16:26:24 +02:00
Julio Castillo b8b6f0dcc2 Add versions.tf to ncc-spoke-ra module 2023-05-09 16:00:13 +02:00
Fawzi ac349332c4 fix routes priority typo 2023-05-09 21:28:56 +10:00
lcaggio 3cc6c71e96
Add Minimal Data Platform blueprint (#1362)
Minimal Data Platform blueprint
2023-05-08 10:25:06 +02:00
Julio Diez f0d928f08d
Merge pull request #1364 from juliodiez/serverless-program
Cloud Run services in service projects
2023-05-08 07:28:15 +02:00
Julio Diez 0e9b685d9d
Merge branch 'master' into serverless-program 2023-05-06 14:13:35 +02:00
Julio Diez 404920658c Adapt image width 2023-05-06 14:05:47 +02:00
Julio Diez 5454817919 Update tftest values in README 2023-05-06 14:01:28 +02:00
Julio Diez b9e7bf7aaa Add Shared VPC use case to README 2023-05-06 13:55:25 +02:00
Julio Diez eadc1c22a4 New use case: Cloud Run services in service projects
Shared VPC Ingress feature (public preview) allows to call a Cloud
Run service revision from the Shared VPC network that it is connected
to.
2023-05-06 13:03:20 +02:00
Julio Diez bf182bf600
Merge pull request #1360 from juliodiez/serverless-program
Add support for Shared VPC in Cloud Run
2023-05-05 20:17:48 +02:00
Julio Diez 8c7b6b2410 Update README tfdoc 2023-05-05 19:52:41 +02:00
Julio Diez 76ce3e8b3e
Merge branch 'master' into serverless-program 2023-05-05 19:42:59 +02:00
Jack P 491b52f023
update variables files for gke nodepool taints (#1358)
* update variables files for gke node config taints to allow passing of node objects

* forgot to run terraform fmt..

* update module docs
2023-05-05 19:42:00 +02:00
Julio Diez 252be12bd4 Update README showing the Shared VPC use case 2023-05-05 19:38:34 +02:00
Julio Diez 9eea6e3bbc Update pytest inventory file to meet module change 2023-05-05 19:36:46 +02:00
Julio Diez aec85a20c9 Add support for Shared VPC in Cloud Run
A VPC access connector in a Shared VPC needs to specify the subnet
and subnet project (the host project).
2023-05-05 18:15:19 +02:00