Commit Graph

319 Commits

Author SHA1 Message Date
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
Ludovico Magnocavallo 5e0ab57f3a
Add support for IAM bindings on service accounts to project factory (#753)
* Fix #748

* fix linting

* remove trailing whitespace

* update FAST pf
2022-07-21 15:13:39 +02:00
Miren Esnaola f153ab4614 Added dependency on google_compute_shared_vpc_host_project.shared_vpc_host to project_id output and modified tests 2022-07-21 14:11:21 +02:00
Miren Esnaola 824353a42b Added servicemesh feature to GKE hub and included fleet robot service account in projectmodule 2022-07-15 17:58:39 +02:00
Ludovico Magnocavallo 1abfdacd56
Avoid setting empty IAM binding in subnet factory (#731)
* avoid setting empty IAM binding in subnet factory

* fix tests
2022-07-11 21:11:52 +02:00
Miren Esnaola 68e56058ab AD FS example 2022-07-11 09:52:35 +02:00
Ludovico Magnocavallo 263cf96d81
fix #728 (#729) 2022-07-10 11:34:41 +02:00
Ayman Farhat 54d805dac0
New example for a data playground Terraform setup (#655)
* Initial commit for adding a sample data playground

* Update README

* Add license boilerplate to variables.tf

* Apply linting rules

* rename var to ptoject_id, create prefix var, remove extra zone var

* Adds the option for using an existing project by default

* Bundles all VPC related variables in a single vpc_config variable of type object

* Add encryption_key usage example + policy_boolean

* Add tests, apply linting and todos for upcoming PRs

* Update variables in readme

* Fix formatting via fmt

* Rename test dir to fix module conflict issue

* Add high level diagram and sort vars/outputs by alphabetical

* Modify diagram and update main README under data examples with link / summary

* Line break

* Use png in diagram

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-10 09:27:18 +02:00
Aleksandr Averbukh 9c942a68d6 More experimental definition to a separate file, so CICD does not rewrite it with default-versions.tf 2022-07-08 15:19:47 +02:00
Aleksandr Averbukh b8fae0fbf0 Update fixtures variable type to follow the module experimental feature. 2022-07-08 14:55:28 +02:00
Aleksandr Averbukh 9d7ce78df2 Enable experimental feature for the test fixture 2022-07-08 12:47:05 +02:00
Aleksandr Averbukh 63ac142005 Simplified module interface, proper data structure for policies 2022-07-08 12:24:18 +02:00
Aleksandr Averbukh a34983b2e9 OrgPolicy module (factory) using new org-policy API, #698 2022-07-06 19:41:18 +02:00
Julio Castillo cf76744f95 Fix addons for autopilot clusters, add tests for gke-cluster.
Fixes second part of #702
2022-06-28 12:24:17 +02:00
Julio Castillo b6f0c1ae2b Add `consumer_accept_list` to `apigee-x-instance`
Fixes #701
2022-06-27 10:01:31 +02:00
Lorenzo Caggioni ceb611bb81 Remove custom role and rely on conditions. 2022-06-23 07:04:35 +02:00
lcaggio 5c653638bc
Merge branch 'master' into lcaggio/data-p-200622 2022-06-22 16:13:28 +02:00
Ludovico Magnocavallo 4f05d2748e
Merge branch 'master' into lcaggio/fix-readme-20220620 2022-06-21 06:55:59 +02:00
Lorenzo Caggioni bcfa324825 Fix test 2022-06-20 22:39:29 +02:00
Lorenzo Caggioni 7625773dea Fix tests 2022-06-20 22:05:22 +02:00
Lorenzo Caggioni 41d8847a60 Fix test 2022-06-20 17:56:36 +02:00
Ludovico Magnocavallo 3227bd13ce
Merge branch 'master' into binauthz 2022-06-18 08:54:16 +02:00
Miren Esnaola 2e9fdea1a4 Binary authorization module and example 2022-06-17 16:09:12 +02:00
Ludovico Magnocavallo 943d6d431e
Revert "Binary authorization module and example" (#686) 2022-06-17 12:32:42 +02:00
Julio Castillo 4c72ee701b
Merge branch 'master' into binauthz 2022-06-17 11:17:36 +02:00
Ludovico Magnocavallo 528219bbf3 fix stage1 tests 2022-06-16 22:03:08 +02:00
Miren Esnaola 073196c56e Binary authorization module and example 2022-06-16 12:29:26 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Miren Esnaola 9f5d59748d Added example with GLB and Cloud Armor 2022-05-26 15:32:11 +02:00
Ludovico Magnocavallo ff25809020
Fix tfdoc parsing on newllines in outputs (#649)
* fix

* use the right (ugly) Python formatter

* boilerplate on new file

* and do the actual tfdoc run on the original outputs file
2022-05-05 14:43:38 +02:00
Julio Castillo 4e83b5003b
Merge branch 'master' into sql-multi-region 2022-05-03 17:46:18 +02:00
Ludovico Magnocavallo 4114f9995f
Change hub and spoke VPN example to use VPN HA (#643)
* missing outputs and diagram

* fix names and outputs, update diagram

* fix vm name in example

* tfdoc files on

* fix test

* address comments
2022-05-02 09:01:05 +02:00
Lorenzo Caggioni 04bc505b70 Fix roles 2022-04-13 16:05:54 +02:00
Lorenzo Caggioni 15e5904966 Add example test 2022-04-13 15:08:37 +02:00
Julio Castillo 952e18d0f1 Add sqladmin to project jit_si and fix some documentation 2022-04-13 11:05:55 +02:00
Julio Castillo 1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Taneli Leppä d79dd7ab28 Added example of SQL Server always on groups. 2022-04-07 17:38:08 +02:00
Daniel Strebel 63097dd224 Allow multiple CIDR blocks in the ip_range parameter and rely on the Google API for validation 2022-04-07 15:08:24 +02:00
Julio Castillo 60e7da8614 Silence linter 2022-04-05 15:38:44 +02:00
Julio Castillo 5cbde0a32e Allow tests to run from root directory 2022-04-05 14:30:26 +02:00
Luca Prete cd0f09b748
[#593] Add HTTP ILB module (net-ilb-l7) 2022-04-05 08:58:55 +02:00
lcaggio ec3832760d
Merge branch 'master' into lcaggio/dp-dc-policy-tag 2022-04-04 15:38:52 +02:00
Lorenzo Caggioni 67b1715ecc Fix data_eng_principals logging role. 2022-04-04 09:16:55 +02:00
Lorenzo Caggioni 3d8c9a4b52 Fix test. 2022-04-01 18:52:30 +02:00
Lorenzo Caggioni 98a9ba2c82 Fix example test 2022-04-01 18:46:51 +02:00
Daniel Strebel 59bb09b03e Add billing_type for Apigee Organization Module 2022-03-31 08:47:34 +02:00
Ludovico Magnocavallo fa84a888c2 rename new cloud ops tests 2022-03-17 16:41:11 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00