Commit Graph

540 Commits

Author SHA1 Message Date
Natalia Strelkova 77736c13e3
Merge branch 'master' into nstrelkova-fast-fix-ew3 2022-12-07 12:45:07 +01:00
Agustin Ramirez 324311315c
Update README.md (#1032)
enviroments for vpc_sc_perimeters sample code

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-12-05 16:02:00 +01:00
Julio Castillo fa63e9d5d0 Remove optional stuff 2022-11-30 16:00:53 +01:00
Julio Castillo ef4a4b02af Fix linting 2022-11-30 11:36:58 +01:00
Julio Castillo 798d3a4136 Update VPN-HA module to tf1.3 (wip) 2022-11-30 10:52:24 +01:00
Natalia Strelkova 4654e5af39 README regenerated 2022-11-29 09:21:24 +00:00
Natalia Strelkova a68171947f europe-west4 everywhere (was west3 in some places) 2022-11-29 09:16:56 +00:00
Ludo 0a529c93a1 remove extra symlink 2022-11-25 17:33:54 +01:00
Julio Castillo 612d7283e8 Enforce nonempty descriptions ending in a colon 2022-11-24 18:56:01 +01:00
Natalia Strelkova 3b3c426633
00-cicd stage got moved to extras/
Apparently we forgot to change this particular line when moving 00-cicd to the extras/ folder
2022-11-23 15:53:18 +01:00
Julio Castillo 826ff14ef9 Sort variables and outputs 2022-11-21 13:17:55 +01:00
Ludovico Magnocavallo ad483e34c8
FAST: fixes to GitHub workflow and 02/net outputs (#976)
* fix gh workflow

* short PR message

* streamline workflow

* fix net outputs
2022-11-15 08:48:32 +01:00
Ludo aa69ef4fb9 fix resource name 2022-11-14 17:23:46 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Ludovico Magnocavallo eb27635221
FAST: improve GitHub workflow, stage 01 output fixes (#966)
* fix outputs on null output files variable

* improve GH workflow

* bring back apply status

* fix heading level

* add missing try, update IAM md files
2022-11-11 07:55:57 +00:00
Ludovico Magnocavallo a9c47681d8
Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Ludovico Magnocavallo dff7b69250
FAST: bootstrap and extra stage CI/CD improvements and fixes (#956)
* add clone commands output

* always create secret key for repos, fix module source

* optional modules ref

* tfdoc

* create secrets in the right repositories

* add publick key to modules repository

* bump Terraform version in CI templates

* add template to populated files

* tfdoc

* do not error out writing ci/cd workflows when output files are disabled

* update README

* fix apply file outputs when outputs_location is changed to null
2022-11-08 09:38:15 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo 85378ea0fb
Update README.md 2022-11-03 22:43:22 +01:00
Julio Castillo 453a55c2d0
Merge branch 'master' into patch-2 2022-11-03 22:39:44 +01:00
Kartheek 49b5b97afe
Merge branch 'master' into patch-2 2022-11-03 09:16:32 -07:00
Julio Castillo dc81b26a9b Use display_name instead of description for FAST service accounts
Fixes #944
2022-11-03 16:23:48 +01:00
Julio Castillo 8a20a14a0d Move policy to serverless.yaml 2022-11-03 14:50:53 +01:00
Julio Castillo 747ebc6f39 Use org policy factory for resman stage 2022-11-03 14:48:21 +01:00
Kartheek c7b70e42d0
Update README.md
Added a note about Project resource name to be unique and also to check if project was deleted recently.
2022-11-02 14:37:49 -07:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Ludovico Magnocavallo 559753fab5
enable org policy API, fix run.allowedIngress value (#935) 2022-11-01 09:52:03 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo 410fe1c73a Add pf example with deny all org policy 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo d80a43eabb Fix FAST org policies 2022-10-28 17:49:44 +02:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Simone Ruffilli 7b2a82a7d6
PGA DNS records (#911)
Additional PGA DNS records
2022-10-25 14:28:28 +02:00
Julio Castillo 192edf2b75 Remove redundant ttls 2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo 350a7dbf83
update README 2022-10-23 19:56:08 +02:00
Ludovico Magnocavallo fc7bf40e69
Initial replacement for CI/CD stage (#903)
* github extra stage

* remove original cicd stage

* allow setting commit attributes via variabes

* remove reference to deleted stage

* optional repo creation, documentation
2022-10-23 19:52:45 +02:00
Michael Malet fe6fd3d7ec feat(project-factory): allow folder_id to be defined in defaults_file 2022-10-20 15:52:32 +01:00
Julio Castillo 2333bf58f1
Update README.md (#898)
* Update README.md

* Update terraform.tfvars.sample

* Update README.md

* Update README.md
2022-10-19 17:15:36 +02:00
Simone Ruffilli 1c24e921b3
Added 02-networking-separate-envs to stages doc. 2022-10-14 16:00:30 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Simone Ruffilli 24c3ffe66b
FAST: Separate network environment (#566) 2022-10-10 11:50:07 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Simone Ruffilli 674deb1c4f
FAST: Replace NVAs in 02-networking-nva with COS-based VMs (#867) 2022-10-10 09:16:28 +02:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 60cb3a4dc8 Default gcp-support to gcp-devops 2022-10-06 14:18:58 +02:00
Julio Castillo e4b32c17d0
Update README.md 2022-10-06 13:59:44 +02:00
Ludovico Magnocavallo 4a1465ae32
Comment redundant role in bootstrap stage, align IAM.md files, improve IAM tool (#842)
* comment redundant role

* account for duplicate folder names

* update IAM.md files
2022-09-29 08:30:01 +02:00
Ludovico Magnocavallo f2eb424d55 FAST: revert 00-cicd provider changes 2022-09-28 14:27:17 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Catalin Muresan c54103cb9a Fix workflow-gitlab.yaml template rendering 2022-09-22 13:06:36 +01:00
lcaggio 149d84d41d Fix NVA and VPC firewall rules. 2022-09-20 17:08:24 +02:00
lcaggio ee309ecc06 Update firewall rules. 2022-09-20 16:57:35 +02:00
Julio Castillo bc383f6039
Update COMPANION.md 2022-09-12 21:30:24 +02:00
Ludovico Magnocavallo 91af0e8535 fix links in gke stage readmes 2022-09-12 10:30:19 +02:00
Julio Castillo 72da12e377 Rename gke-serverless to gke and add test for fast gke stage 2022-09-12 09:56:25 +02:00
Julio Castillo 4d83dcf490
Merge branch 'master' into master 2022-09-12 08:54:16 +02:00
Ludovico Magnocavallo 6253df72c9
working (#807) 2022-09-12 07:26:48 +02:00
Antonio Lopez f8c971773f
Merge branch 'master' into master 2022-09-09 18:22:08 +02:00
ajlopezn 4afd01e6a2 corrections to companion.md 2022-09-09 18:20:00 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Antonio Lopez 77d3302405
Merge branch 'GoogleCloudPlatform:master' into master 2022-09-09 12:23:10 +02:00
Julio Castillo f8e2fdaf19 Remove project.service_config instances using the new default 2022-09-09 09:38:09 +02:00
Ludovico Magnocavallo a18a3c92b3
GKE CI/CD (#804) 2022-09-09 08:33:25 +02:00
Ludovico Magnocavallo 7982cee871
Update README.md 2022-09-09 07:24:42 +02:00
Ludovico Magnocavallo 126e27a976
Update README.md 2022-09-09 07:24:06 +02:00
Ludovico Magnocavallo 26ebeb8db2
Update README.md 2022-09-09 07:21:24 +02:00
Miklos Niedermayer b0b6510aed
Fix automation gcs location (#803)
* Fix automation gcs location

* also apply change to stage 01

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-09-09 07:18:44 +02:00
Julio Castillo 76e49d5891 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-09-08 22:38:05 +02:00
Julio Castillo a530620f4d Fixing typos 2022-09-08 22:35:01 +02:00
Julio Castillo ff7e39828d Finished readme of fast gke stage 2022-09-08 22:33:14 +02:00
Ludovico Magnocavallo 353706150e
FAST: add support for storage locations in stages 0 and 1 (#800)
* FAST: add support for storage locations in stages 0 and 1

* fix typo

* fix typo on logging

* tfdoc
2022-09-08 15:24:42 +02:00
Ludovico Magnocavallo 6035dc1491
FAST: add support for project parents to bootstrap stage (#799)
* FAST: add support for project parents to bootstrap stage

* change as per review comments
2022-09-08 15:11:46 +02:00
Antonio Lopez 953cda6462
Merge branch 'GoogleCloudPlatform:master' into master 2022-09-07 17:00:37 +02:00
ajlopezn ad75ec4ee0 solved content issues 2022-09-07 16:08:48 +02:00
ajlopezn 2dc2f669a3 added required step to execute networking stage: tfvars with output variable is needed to generate network.tfvars for proyect factory 2022-09-07 15:08:10 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
ajlopezn a7d663ca37 edited companion guide 2022-09-05 14:26:38 +02:00
ajlopezn 4c2da1903f edited companion guide 2022-09-05 14:24:01 +02:00
ajlopezn 544650c988 first version of companion guide 2022-09-05 10:30:05 +02:00
Fawzi 4bbe83ee75
update outputs.tf (#793)
Fixing typo
2022-09-04 13:50:36 +02:00
ajlopezn 4d58526928 pre-requisites added to companion guide 2022-09-02 12:28:47 +02:00
Antonio Lopez 12ce656390
Create COMPANION.md
creating file index
2022-09-02 11:00:25 +02:00
Julio Castillo 2ddd68ee2a Fix comment exaplaining serviceProjectAdmin permissions 2022-08-30 20:41:34 +02:00
Julio Castillo b1d9b27ac3 Allow peering configuration to be passed as variable to fleet example. 2022-08-30 20:39:47 +02:00
Julio Castillo fd06a841b7 Update gke multitenant README 2022-08-25 18:37:55 +02:00
Julio Castillo cad37158b7 Fix dependencies in gke multitenant stage 2022-08-25 17:35:51 +02:00
Julio Castillo a82ef7550e Allow gke stage to write to automation bucket 2022-08-25 15:11:44 +02:00
Julio Castillo c3e6a03eaa Allow fleet project to be specified by the user 2022-08-25 14:24:39 +02:00
Julio Castillo fa8990dc76 gke stage docs 2022-08-24 16:43:48 +02:00
Julio Castillo 909739039b Fix internal links 2022-08-24 15:53:55 +02:00
Julio Castillo d345cf8223 Update gke multitenant README 2022-08-24 15:40:42 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Stefan Tomm 5b7f6ab91a
fix data-platform-dev folder in stage 03-data-platform (#774) 2022-08-16 09:36:24 +02:00
Ludovico Magnocavallo a285569998 Merge branch 'fast/gke2' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into fast/gke2 2022-08-12 11:25:26 +02:00
Ludovico Magnocavallo 95b12ac2f7 rename example folder 2022-08-12 11:24:46 +02:00
Ludovico Magnocavallo 5762d5925d rename example folder, add diagram 2022-08-12 11:24:21 +02:00
Daniel Marzini 00e8666063 TODO: adjust external load balancer policy 2022-08-11 17:04:45 +02:00
Ludovico Magnocavallo ac575119c6 wip 2022-08-10 15:59:56 +02:00
Ludovico Magnocavallo c2b0782c18 wip
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
2022-08-10 15:59:51 +02:00
Ludovico Magnocavallo af336f82fe move gke fat module to examples 2022-08-10 15:37:20 +02:00
Ludovico Magnocavallo a16cf9e2a8 documentation WIP 2022-08-08 13:54:06 +02:00
Daniel Marzini 6af9953a49 Update README.md
README WIP
2022-08-08 11:04:46 +02:00
Ludovico Magnocavallo dcc2700008
Merge branch 'master' into fast/gke2 2022-08-07 07:43:16 +00:00
Daisuke b953424aec
fixing to move without output_location (#770) 2022-08-07 09:00:27 +02:00
Ludovico Magnocavallo 34d5156eeb top-level README 2022-08-06 11:07:22 +02:00
Ludovico Magnocavallo 3745b2885e remove support for preemptible nodes 2022-08-06 11:00:46 +02:00
Ludovico Magnocavallo 0bec03b0a0 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-03 20:42:09 +02:00
Ludovico Magnocavallo bfefaf627e
refactor teams, fix #750 (#766) 2022-08-03 16:34:09 +02:00
Ludovico Magnocavallo 9b6262de41
FAST: move region trigrams to a variable in network stages (#765)
* add region trigram variable

* debug check documentation

* fix linting
2022-08-03 11:36:27 +02:00
Daniel Marzini b85b5e265a added spot vm 2022-08-02 21:41:47 +02:00
Daniel Marzini 1cf963b443 added spot vm 2022-08-02 21:41:36 +02:00
Ludovico Magnocavallo ce7e4bc59c linting 2022-08-02 19:12:52 +02:00
Daniel Marzini 170d585473 fix permissions and binauthz 2022-08-02 18:28:06 +02:00
Daniel Marzini 45723233c8 fix permissions and binauthz 2022-08-02 18:27:44 +02:00
Ludovico Magnocavallo dedddbed20 align net stages 2022-07-31 15:13:39 +02:00
Ludovico Magnocavallo cd3b4463de align net stages 2022-07-31 15:00:09 +02:00
Ludovico Magnocavallo 9b371a3d2c support GKE specific network roles in stages 01 and 02 2022-07-31 14:54:14 +02:00
Ludovico Magnocavallo 24f3545de7 add project-level iam variable 2022-07-30 16:05:39 +02:00
Ludovico Magnocavallo f51e40b60a tfdoc 2022-07-30 16:00:10 +02:00
Ludovico Magnocavallo c51ba73e38 change to binary_authorization, add support for additional services 2022-07-30 15:59:45 +02:00
Daniel Marzini c9fa0fbd55 fixes 2022-07-29 23:45:15 +02:00
Ludovico Magnocavallo f00b67ae88 linting 2022-07-29 15:11:36 +02:00
Ludovico Magnocavallo 7c23aeae58 implement dev, fix variables, add stub READMEs 2022-07-29 15:09:57 +02:00
Ludovico Magnocavallo c24e661383 fleet mcs service accounts 2022-07-29 14:01:35 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo 1260db923e
Update main.tf 2022-07-29 10:49:50 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
Agustin Ramirez 7f1a523866
FIX: Missing value to format principalSet (#759) 2022-07-27 08:18:27 +02:00
Ludovico Magnocavallo 5e0ab57f3a
Add support for IAM bindings on service accounts to project factory (#753)
* Fix #748

* fix linting

* remove trailing whitespace

* update FAST pf
2022-07-21 15:13:39 +02:00
agusramirez@google.com 5f20c11b57 FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:20:56 -05:00
Agustin Ramirez ee0b6d6b2a
FIX: 00-cicd stage - Gitlab and Github providers 2022-07-19 11:07:05 -05:00
Simone Ruffilli ef27d2e9d1
Use spot VMs for test VM and for NVAs (#734) 2022-07-13 13:57:03 +02:00
Julio Castillo 07c5da4283 Fix tests 2022-07-12 12:39:00 +02:00
Julio Castillo 1bc352bb7b Fix docs 2022-07-12 12:19:05 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Julio Castillo e7bc11e6b9 Add gke SAs to outputs 2022-07-12 12:10:39 +02:00
Ludovico Magnocavallo f42b0f06e4
add billing IAM for billing group (#730) 2022-07-11 08:26:13 +02:00
Simone Ruffilli 0d9fac316a
FAST: Resman: Update billing.tf (#721)
* FAST: Resman: Update billing.tf

Add billing.costsManager to the PF SAs to allow it to create billing alerts.

* fix linting

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-06 16:10:14 +03:00
Michael Gfeller ea7827d1ad FAST - added missing format argument in branch-pf-dev-sa-cicd
In the module branch-pf-dev-sa-cicd, the calls to the "format" function were missing the argument var.automation.federated_identity_pool.
2022-07-05 11:44:33 +02:00
Ludovico Magnocavallo 8585852ae6
fix #714 (#715) 2022-07-05 09:46:53 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
Ludovico Magnocavallo 9a3128e716 wip 2022-06-30 20:20:14 +02:00
Ludovico Magnocavallo 7b5ced7e15 stage 01 2022-06-30 18:22:57 +02:00