Commit Graph

937 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki 755ff7b1d2 Add trigger service account creation 2022-11-16 16:44:01 +01:00
Wiktor Niesiobędzki 9e37a915c8 Review fixes.
* Refactor trigger_config and trigger_config_v2 into one structure
* bump default python version to 3.10
* typo fixes
2022-11-16 16:44:01 +01:00
Wiktor Niesiobędzki 303b51a0a9 Add triggers to cloud functions v2
* add `trigger_config_v2` for v2 functions
* add optional for objects in variables.tf
* make examples in README runnable
* add example for Cloud Function v2
* add exapmle for trigger for Cloud Function v2
* remove optional variables from examples with `null` value
2022-11-16 16:44:01 +01:00
Sebastian Kunze df539b5e18
Have Squid log to /dev/stdout to stream logs to Cloud Logging (#980) 2022-11-16 14:41:26 +01:00
Ludovico Magnocavallo ea360072b8
Update README.md 2022-11-16 14:14:43 +01:00
Ludovico Magnocavallo 5f710f21dc
Add support for serverless NEGs to ILB L7 module (#983)
* refactor neg variable for serverless

* cloudrun negs

* cloudrun negs

* serverless neg test

* re-enable forwarding rule output
2022-11-16 14:14:05 +01:00
Maurizio Noseda Pedraglio b2bd0009b9 restored tfskip 2022-11-15 16:21:23 +01:00
Maurizio Noseda Pedraglio a47726741d enablid tests 2022-11-15 15:42:10 +01:00
Maurizio Noseda Pedraglio 4cbf0272f9 linting 2022-11-15 15:12:50 +01:00
Maurizio Noseda Pedraglio 7c874660a8 restored validation 2022-11-15 15:10:42 +01:00
maunope 09fba581a8
Update README.md
fix
2022-11-15 14:49:16 +01:00
maunope f514ab0371
Update README.md
restored sample
2022-11-15 14:48:48 +01:00
maunope fbfbb93783
Update README.md
linting fix
2022-11-15 14:47:11 +01:00
maunope a199214970
Update variables.tf
fixed test
2022-11-15 14:42:19 +01:00
maunope 7f9c29c4ba
Merge branch 'master' into maunope/cf_module_update 2022-11-15 13:53:31 +01:00
maunope 099ac6ea7e
Update main.tf
removed comment
2022-11-15 13:52:52 +01:00
Sebastian Kunze 5125a5ad03
Replace Docker's `gcplogs` driver with the GCP COS logging agent (#977) 2022-11-15 13:19:52 +01:00
maunope a661dad67c
Update variables.tf
added worker pool variable
2022-11-15 12:24:59 +01:00
maunope f00c7da926
Update main.tf
added worker pool parameter
2022-11-15 12:24:19 +01:00
maunope fc0c8bd175
Update README.md
added sample
2022-11-15 12:23:44 +01:00
maunope 251703c63c
Update README.md
md file update
2022-11-15 12:18:00 +01:00
Ludovico Magnocavallo e957797aa6
add validation for health check port specification (#975) 2022-11-14 15:20:01 +00:00
Ludovico Magnocavallo 40a37e9328
Refactor net-ilb-l7 module for Terraform 1.3 (#974)
* wip

* wip

* minimal example test

* wip

* instance group example

* neg examples

* example tests

* tfdoc

* readme

* tested

* example

* default urlmap value, remove stale variable

* tests
2022-11-14 14:39:00 +01:00
Julio Castillo 4a25129765 Update readme 2022-11-12 19:25:41 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo b37ef3a90a Update folder readme 2022-11-12 12:22:09 +01:00
Julio Castillo daf0fef7cd Fix folder variables 2022-11-12 12:07:48 +01:00
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo c7fe6da12e Update READMEs 2022-11-11 19:28:02 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Natalia Strelkova d96f95c2b6 cannot instead of can not 2022-11-11 11:56:47 +00:00
Natalia Strelkova c640695e1a
Merge branch 'master' into nstrelkova-prefix-consistency 2022-11-11 07:41:31 +01:00
Ludovico Magnocavallo a9c47681d8
Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Natalia Strelkova d5d1d9eb34 terraform formatting fixed 2022-11-10 15:11:38 +00:00
Natalia Strelkova 68c3b13d6a prefix variable consistency across modules 2022-11-10 15:05:53 +00:00
Aleksandr Averbukh b04cfbf980
Merge branch 'master' into org-policy-custom 2022-11-09 08:53:38 +01:00
Valerio Ponza 8282b6c0e2
Fix README typo in firewall module (#960)
* fixing readme in firewall module

* fix typo

Co-authored-by: Valerio Ponza <vponza@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2022-11-09 00:25:34 +01:00
Aleksandr Averbukh 1419a04147 Update module readme 2022-11-08 18:17:05 +01:00
Aleksandr Averbukh aae6ab132c Add tests for org policy custom constraints 2022-11-08 18:13:49 +01:00
Aleksandr Averbukh 3bd2e1c0ea
Merge branch 'master' into org-policy-custom 2022-11-08 09:37:23 +01:00
Aleksandr Averbukh 3562c52520 Add support for org policy custom constraints 2022-11-08 09:34:38 +01:00
Catalin Muresan 4e2762098f Updated README.md 2022-11-07 12:47:35 +00:00
Catalin Muresan 31bb4476d1 Added IAM Additive and converted some outputs to static 2022-11-07 12:41:41 +00:00
Wiktor Niesiobędzki 0d80ad3f29
cloud-functions v2 - fix reference to bucket_name (#951)
* Fix reference to bucket when no bucket_config is provided

* Copy tests to check v2 cloud-functions
2022-11-06 08:32:38 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo 649bedc291
Update README.md 2022-11-03 13:19:02 +01:00
Julio Castillo e29957c394
Update README.md 2022-11-03 13:18:21 +01:00
Julio Castillo 4b278a1533 Update variable description 2022-11-03 12:35:50 +01:00
Julio Castillo d91a0835f7 Remove organization-policy module (now included in the resman modules) 2022-11-03 12:35:50 +01:00
Julio Castillo 5b1873775a Fix internal links 2022-11-03 12:14:47 +01:00
Julio Castillo f64c43e893 Add org policy factory example 2022-11-03 12:12:50 +01:00
Julio Castillo 3e18575fad Add factory support for new org policies 2022-11-03 11:41:53 +01:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Julio Castillo 38e761c3a8 Add test that ensures the implementation of org policies is consistent 2022-11-02 10:41:38 +01:00
Ludovico Magnocavallo 8c51a2a386
Enable org policy service and add README notice to modules (#936)
* enable org policy service and add README notice to modules

* fix tests
2022-11-01 14:25:07 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo b6c40dcdb3 Update readmes 2022-10-28 17:49:44 +02:00
Julio Castillo b56b57b974 Fix more copy/past badness 2022-10-28 17:49:44 +02:00
Julio Castillo c1fe477f88 Remove bad copy/paste 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo ad420138ad Fix readme examples 2022-10-28 17:49:44 +02:00
Julio Castillo f44f4a74dc Fix module tests 2022-10-28 17:49:44 +02:00
Julio Castillo b23d07b0c6 Update project/folder/module to use new org policies API and tf1.3 optionals. 2022-10-28 17:49:44 +02:00
Ludovico Magnocavallo 29cde275f0
fix backwards compatibility for vpc subnet descriptions (#926) 2022-10-28 08:13:04 +02:00
Julio Castillo 798fd6cc54
Merge branch 'master' into kmucha555/f_apigee_env_deployment 2022-10-27 21:46:31 +02:00
Krzysztof Mucha 74b17703cd Add support for deployment type and api proxy type for Apigee organization 2022-10-27 21:04:50 +02:00
Ludovico Magnocavallo e20de3b86a
fix service account create (#923) 2022-10-27 15:12:04 +00:00
Ludovico Magnocavallo ed9fd6b08d
Align documentation, move glb blueprint (#921)
* aling documentation, move glb blueprint

* modules README, sort modules

* reorder modules

* fix bp links

* fix moved blueprint test

* use a single cloud shell image in the repo
2022-10-26 14:31:04 +02:00
Julio Castillo 6242607e1b
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:24:20 +02:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Julio Castillo b1dfbe29c2
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:07:28 +02:00
Simone Ruffilli 384756a8a7 SimpleNVA: updated example 2022-10-25 18:09:31 +02:00
Simone Ruffilli 0611d66be7 SimpleNVA: add the option to create additional files 2022-10-25 18:07:38 +02:00
Julio Castillo 9e03ddbf6e Update README 2022-10-25 16:08:17 +02:00
Julio Castillo d759ac2ff1 Make dnssec not nullable 2022-10-25 15:47:18 +02:00
Julio Castillo 442f87e60e Rename local for consistency 2022-10-25 15:08:55 +02:00
Julio Castillo b5cee10dca Remove useless dynamic blocks 2022-10-25 15:07:56 +02:00
Julio Castillo 6340286fa4 DRY up resource name for recordsets 2022-10-25 15:07:56 +02:00
Julio Castillo 8bacd8f5d5 Add support for DNS routing policies 2022-10-25 15:07:56 +02:00
Simone Ruffilli c4d599f321
Fix race condition (#918)
The cloud-init runcmd had a race condition where the script could run before the network interfaces were ready.
Changed the script to a systemd unit and added a dependency on network ready.
2022-10-25 15:04:38 +02:00
Julio Castillo 1a3bb25917 Update provider version (needed for dns logging support). 2022-10-25 12:15:02 +02:00
Julio Castillo a676c0f64c Update readme 2022-10-25 12:11:07 +02:00
Julio Castillo 3b89d370a1 Simplify DNSSEC config 2022-10-25 12:11:07 +02:00
Julio Castillo ab11920bee Add cloud logging option 2022-10-25 12:11:07 +02:00
Julio Castillo 625eeb4d7f Make dns ttl optional 2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo 68f5719036
gke module datapath for autopilot 2022-10-25 07:23:38 +02:00
Julio Castillo 341ad5ef87
Update README.md 2022-10-24 12:55:32 +02:00
dsbutler101 3c40fc8fce
Add missing description field
Important so we can flag these groups are TF managed and must not be manually updated.
2022-10-21 15:38:07 +01:00
Luca Prete 9aea79fd31
Add internal_ips output to compute-vm module 2022-10-21 10:38:25 +02:00
Ludovico Magnocavallo d0ccd9ac31
Update README.md 2022-10-17 16:31:16 +02:00
Giovanni Baratta ca1dc3659a
Add auto_delete and instance_redistribution_type to compute-vm and compute-mig modules. (#890)
* Add auto_delete parameter to compute-vm module

* Add instance_redistribution_type in compute-mig module
2022-10-16 21:19:46 +02:00
Daniel Marzini 49d5e21a4b
Fix csi-driver, logging and monitoring default values when autopilot … (#883)
* Fix csi-driver, logging and monitoring default values when autopilot is used
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-14 17:30:54 +02:00
Ludovico Magnocavallo 41c416b55e
make mtu default explicit in variable description 2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Somnath Shukla a12da693a3
added support 2nd generation cloud function (#872)
* added support 2nd generation cloud function

* changed function_version to a simple boolean v2
removed memory_2ndGen

* will use the var.v2 to add the invoker role

* removed the list uisng compact and formated the code

* formated the code and added conditional feature

* formated the code

* added formating

* resolved the merge conflict

* Update readme

* Create local function object

* added secret_volumes
and secret_environment_variables for CF V2

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-13 08:09:00 +02:00
Ludovico Magnocavallo bc8f0c90b7
fix autoscaling block (#877)
* fix autoscaling block

* invert autoscaling block condition

* add autoscaling test
2022-10-12 16:44:47 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Ludovico Magnocavallo f080794167
Merge branch 'master' into tmp_revert_to_1.3.1 2022-10-10 11:21:26 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Julio Castillo 08b1dfdb8e Fix optionals for resource_usage_export field in `gke-cluster` 2022-10-10 10:47:51 +02:00
Ludovico Magnocavallo 16822e94ab
Refactor GKE module for Terraform 1.3 (#868)
* wip

* module and module tests

* doc examples

* gke-hub doc examples

* gke blueprints

* hub and spoke peering blueprint

* Rename some keys of some optional objects

* Fix readme

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-10 09:38:21 +02:00
Simone Ruffilli b5ee78c22d
Update ipprefix_by_netmask.sh (#866)
When code was moved from terraform template to separate file, "$$" (used to print $ on a tf template) was wrongly left behind.
2022-10-09 17:26:54 +02:00
Simone Ruffilli 67577ee80b
Update README.md 2022-10-09 15:41:56 +02:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 07249194dd Fix README 2022-10-06 15:52:09 +02:00
Julio Castillo 1955a61159 Make project shared vpc fields optional 2022-10-06 15:48:37 +02:00
Taneli Leppä b65beef20d
Merge branch 'master' into nginx-reverse-proxy-cluster 2022-10-04 15:39:09 +02:00
Taneli Leppä 4feb3514fd Added an example of a Nginx reverse proxy cluster using RMIGs. 2022-10-04 15:38:52 +02:00
Simone Ruffilli 201f6b1aab
Fixes NVA issue when health checks are not enabled (#853)
* Fixes NVA issue when health checks are not enabled

* Update cloud-config.yaml
2022-10-04 07:55:10 +02:00
Simone Ruffilli 5950797385
COS based simple networking appliance (#846) 2022-09-30 18:43:24 +02:00
Taneli Leppä 8072be5619 nginx-tls: only use hostname part for certificate as the FQDN might be too long (>64 chars). 2022-09-30 13:39:14 +02:00
ddaluka 9c2a53f7a9
Management of GCP project default service accounts (#844)
* Added change for default service account deprivilege setting

* Updated readme and variable name

* Updated readme and variable name
2022-09-29 15:10:07 +02:00
cmalpe 2e51bdd8c4 added root password support for MS SQL Server 2022-09-29 10:57:19 +00:00
Ludovico Magnocavallo 1842586241
Bjbloemker-google/master (#843)
* Add ability to add KMS encryption to google_compute_instance_template

* fix code block

Co-authored-by: BJ Bloemker <bjbloemker@google.com>
Co-authored-by: bjbloemker-google <109173391+bjbloemker-google@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-09-29 09:01:15 +02:00
Ludovico Magnocavallo fcf71b983e
refactor net-address modules for 1.3 (#840) 2022-09-28 14:10:05 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Krzysiek Mucha 6e90af2bc3
Add support for service_label property in internal load balancer (#834)
Co-authored-by: Krzysztof Mucha <kmuch@softserveinc.com>
2022-09-21 23:30:35 +02:00
Natalia Strelkova d6c6ae943e regional MySQL DBs - automatic backup conf 2022-09-21 08:14:24 +00:00
lcaggio bdb9086f19
Merge branch 'master' into lcaggio/artifact-jit 2022-09-20 11:06:08 +02:00
lcaggio 495a5bbfff Add Artifact registry Service Identity SA creation. 2022-09-20 10:36:12 +02:00
Arindam Sirohia eb73e13b67 Updated for each condition of binary authorization in gke-cluster module 2022-09-20 00:35:06 +05:30
Arindam Sirohia 489acfdb32 Added new binary_authorization argument in gke-cluster module 2022-09-20 00:09:59 +05:30
Julio Castillo 7a4298783a Removed old and unused modules 2022-09-15 16:50:11 +02:00
Julio Castillo 7e9173d35d Create fully recursive e2e test runner 2022-09-12 13:58:11 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Julio Castillo 67c031c41c Change `modules/project` service_config default 2022-09-09 09:23:09 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
Julio Castillo a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
lcaggio a253446406 First commit 2022-08-31 11:14:18 +02:00
Julio Castillo 0e65021802 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-30 20:06:47 +02:00
ddaluka 16e14fdb0a
Secret manager flag sensitive output (#786)
* Added sensitive output value

* Updated Readme

* updated readme
2022-08-29 13:22:52 +02:00
Taneli Leppä c798625868
net-glb: Added support for regional external HTTP(s) load balancing. (#775) 2022-08-27 22:58:11 +02:00
Roberto Jung Drebes 48fcfa8233
Merge branch 'master' into master 2022-08-24 16:23:03 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Roberto Jung Drebes 1bcfa51a40 fix doc 2022-08-24 14:41:27 +02:00
Roberto Jung Drebes a4752961db nginx-tls module 2022-08-24 14:37:53 +02:00
Roberto Jung Drebes 00f88730fe update compute-vm example 2022-08-24 12:14:10 +02:00
Roberto Jung Drebes 081e04fe2e fix envoy TD config for xDSv1.3 2022-08-24 10:44:05 +02:00
Roberto Jung Drebes 9597cabab7 fix service unit indent on cloud-config-container module 2022-08-23 21:12:09 +02:00
Natalia Strelkova ed68fb0179 typo fix (max_scale -> min_scale) 2022-08-23 15:43:07 +00:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo ff1563e078 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-11 12:04:35 +02:00
Alex Lo 307bda4fed
apigee-x-instance.ip_range cannot take Support CIDR (#727)
* Instance.ip_range cannot take Support CIDR

Current docs are incorrect. It is not possible to specify the Support range.

See https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.instances#Instance

> ipRange	
> string
> Optional. IP range represents the customer-provided CIDR block of length 22 that will be used for the Apigee instance creation. This optional range, if provided, should be freely available as part of larger named range the customer has allocated to the Service Networking peering. If this is not provided, Apigee will automatically request for any available /22 CIDR block from Service Networking. The customer should use this CIDR block for configuring their firewall needs to allow traffic from Apigee. Input format: "a.b.c.d/22", Output format: a.b.c.d/22, e.f.g.h/28"

* tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-08-11 09:55:39 +02:00
Ludovico Magnocavallo ea72c5bc29
Merge branch 'master' into fast/gke2 2022-08-10 17:18:49 +02:00
Ludovico Magnocavallo ed4d59a8b1
refactor cloud run module (#773) 2022-08-09 14:06:30 +02:00
Ludovico Magnocavallo 86d73ee686 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-09 14:04:46 +02:00
Alef Reis 97104c0098
Add support to a public access to cloudsql-instance (#754)
* feat: add support to a public access to cloudsql-instance

* doc: update cloudsql-instance doc changing the ipv4_enabled parameter description

* test: fix assertion test to ipv4_enabled
2022-08-09 13:42:42 +02:00
Ludovico Magnocavallo 7374c82dd6
Merge branch 'master' into fast/gke2 2022-08-06 08:57:53 +00:00