Commit Graph

850 Commits

Author SHA1 Message Date
Aleksandr Averbukh 1419a04147 Update module readme 2022-11-08 18:17:05 +01:00
Aleksandr Averbukh aae6ab132c Add tests for org policy custom constraints 2022-11-08 18:13:49 +01:00
Aleksandr Averbukh 3bd2e1c0ea
Merge branch 'master' into org-policy-custom 2022-11-08 09:37:23 +01:00
Aleksandr Averbukh 3562c52520 Add support for org policy custom constraints 2022-11-08 09:34:38 +01:00
Catalin Muresan 4e2762098f Updated README.md 2022-11-07 12:47:35 +00:00
Catalin Muresan 31bb4476d1 Added IAM Additive and converted some outputs to static 2022-11-07 12:41:41 +00:00
Wiktor Niesiobędzki 0d80ad3f29
cloud-functions v2 - fix reference to bucket_name (#951)
* Fix reference to bucket when no bucket_config is provided

* Copy tests to check v2 cloud-functions
2022-11-06 08:32:38 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo 649bedc291
Update README.md 2022-11-03 13:19:02 +01:00
Julio Castillo e29957c394
Update README.md 2022-11-03 13:18:21 +01:00
Julio Castillo 4b278a1533 Update variable description 2022-11-03 12:35:50 +01:00
Julio Castillo d91a0835f7 Remove organization-policy module (now included in the resman modules) 2022-11-03 12:35:50 +01:00
Julio Castillo 5b1873775a Fix internal links 2022-11-03 12:14:47 +01:00
Julio Castillo f64c43e893 Add org policy factory example 2022-11-03 12:12:50 +01:00
Julio Castillo 3e18575fad Add factory support for new org policies 2022-11-03 11:41:53 +01:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Julio Castillo 38e761c3a8 Add test that ensures the implementation of org policies is consistent 2022-11-02 10:41:38 +01:00
Ludovico Magnocavallo 8c51a2a386
Enable org policy service and add README notice to modules (#936)
* enable org policy service and add README notice to modules

* fix tests
2022-11-01 14:25:07 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo b6c40dcdb3 Update readmes 2022-10-28 17:49:44 +02:00
Julio Castillo b56b57b974 Fix more copy/past badness 2022-10-28 17:49:44 +02:00
Julio Castillo c1fe477f88 Remove bad copy/paste 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo ad420138ad Fix readme examples 2022-10-28 17:49:44 +02:00
Julio Castillo f44f4a74dc Fix module tests 2022-10-28 17:49:44 +02:00
Julio Castillo b23d07b0c6 Update project/folder/module to use new org policies API and tf1.3 optionals. 2022-10-28 17:49:44 +02:00
Ludovico Magnocavallo 29cde275f0
fix backwards compatibility for vpc subnet descriptions (#926) 2022-10-28 08:13:04 +02:00
Julio Castillo 798fd6cc54
Merge branch 'master' into kmucha555/f_apigee_env_deployment 2022-10-27 21:46:31 +02:00
Krzysztof Mucha 74b17703cd Add support for deployment type and api proxy type for Apigee organization 2022-10-27 21:04:50 +02:00
Ludovico Magnocavallo e20de3b86a
fix service account create (#923) 2022-10-27 15:12:04 +00:00
Ludovico Magnocavallo ed9fd6b08d
Align documentation, move glb blueprint (#921)
* aling documentation, move glb blueprint

* modules README, sort modules

* reorder modules

* fix bp links

* fix moved blueprint test

* use a single cloud shell image in the repo
2022-10-26 14:31:04 +02:00
Julio Castillo 6242607e1b
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:24:20 +02:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Julio Castillo b1dfbe29c2
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:07:28 +02:00
Simone Ruffilli 384756a8a7 SimpleNVA: updated example 2022-10-25 18:09:31 +02:00
Simone Ruffilli 0611d66be7 SimpleNVA: add the option to create additional files 2022-10-25 18:07:38 +02:00
Julio Castillo 9e03ddbf6e Update README 2022-10-25 16:08:17 +02:00
Julio Castillo d759ac2ff1 Make dnssec not nullable 2022-10-25 15:47:18 +02:00
Julio Castillo 442f87e60e Rename local for consistency 2022-10-25 15:08:55 +02:00
Julio Castillo b5cee10dca Remove useless dynamic blocks 2022-10-25 15:07:56 +02:00
Julio Castillo 6340286fa4 DRY up resource name for recordsets 2022-10-25 15:07:56 +02:00
Julio Castillo 8bacd8f5d5 Add support for DNS routing policies 2022-10-25 15:07:56 +02:00
Simone Ruffilli c4d599f321
Fix race condition (#918)
The cloud-init runcmd had a race condition where the script could run before the network interfaces were ready.
Changed the script to a systemd unit and added a dependency on network ready.
2022-10-25 15:04:38 +02:00
Julio Castillo 1a3bb25917 Update provider version (needed for dns logging support). 2022-10-25 12:15:02 +02:00
Julio Castillo a676c0f64c Update readme 2022-10-25 12:11:07 +02:00
Julio Castillo 3b89d370a1 Simplify DNSSEC config 2022-10-25 12:11:07 +02:00
Julio Castillo ab11920bee Add cloud logging option 2022-10-25 12:11:07 +02:00
Julio Castillo 625eeb4d7f Make dns ttl optional 2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo 68f5719036
gke module datapath for autopilot 2022-10-25 07:23:38 +02:00
Julio Castillo 341ad5ef87
Update README.md 2022-10-24 12:55:32 +02:00
dsbutler101 3c40fc8fce
Add missing description field
Important so we can flag these groups are TF managed and must not be manually updated.
2022-10-21 15:38:07 +01:00
Luca Prete 9aea79fd31
Add internal_ips output to compute-vm module 2022-10-21 10:38:25 +02:00
Ludovico Magnocavallo d0ccd9ac31
Update README.md 2022-10-17 16:31:16 +02:00
Giovanni Baratta ca1dc3659a
Add auto_delete and instance_redistribution_type to compute-vm and compute-mig modules. (#890)
* Add auto_delete parameter to compute-vm module

* Add instance_redistribution_type in compute-mig module
2022-10-16 21:19:46 +02:00
Daniel Marzini 49d5e21a4b
Fix csi-driver, logging and monitoring default values when autopilot … (#883)
* Fix csi-driver, logging and monitoring default values when autopilot is used
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-14 17:30:54 +02:00
Ludovico Magnocavallo 41c416b55e
make mtu default explicit in variable description 2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Somnath Shukla a12da693a3
added support 2nd generation cloud function (#872)
* added support 2nd generation cloud function

* changed function_version to a simple boolean v2
removed memory_2ndGen

* will use the var.v2 to add the invoker role

* removed the list uisng compact and formated the code

* formated the code and added conditional feature

* formated the code

* added formating

* resolved the merge conflict

* Update readme

* Create local function object

* added secret_volumes
and secret_environment_variables for CF V2

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-13 08:09:00 +02:00
Ludovico Magnocavallo bc8f0c90b7
fix autoscaling block (#877)
* fix autoscaling block

* invert autoscaling block condition

* add autoscaling test
2022-10-12 16:44:47 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Ludovico Magnocavallo f080794167
Merge branch 'master' into tmp_revert_to_1.3.1 2022-10-10 11:21:26 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Julio Castillo 08b1dfdb8e Fix optionals for resource_usage_export field in `gke-cluster` 2022-10-10 10:47:51 +02:00
Ludovico Magnocavallo 16822e94ab
Refactor GKE module for Terraform 1.3 (#868)
* wip

* module and module tests

* doc examples

* gke-hub doc examples

* gke blueprints

* hub and spoke peering blueprint

* Rename some keys of some optional objects

* Fix readme

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-10 09:38:21 +02:00
Simone Ruffilli b5ee78c22d
Update ipprefix_by_netmask.sh (#866)
When code was moved from terraform template to separate file, "$$" (used to print $ on a tf template) was wrongly left behind.
2022-10-09 17:26:54 +02:00
Simone Ruffilli 67577ee80b
Update README.md 2022-10-09 15:41:56 +02:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 07249194dd Fix README 2022-10-06 15:52:09 +02:00
Julio Castillo 1955a61159 Make project shared vpc fields optional 2022-10-06 15:48:37 +02:00
Taneli Leppä b65beef20d
Merge branch 'master' into nginx-reverse-proxy-cluster 2022-10-04 15:39:09 +02:00
Taneli Leppä 4feb3514fd Added an example of a Nginx reverse proxy cluster using RMIGs. 2022-10-04 15:38:52 +02:00
Simone Ruffilli 201f6b1aab
Fixes NVA issue when health checks are not enabled (#853)
* Fixes NVA issue when health checks are not enabled

* Update cloud-config.yaml
2022-10-04 07:55:10 +02:00
Simone Ruffilli 5950797385
COS based simple networking appliance (#846) 2022-09-30 18:43:24 +02:00
Taneli Leppä 8072be5619 nginx-tls: only use hostname part for certificate as the FQDN might be too long (>64 chars). 2022-09-30 13:39:14 +02:00
ddaluka 9c2a53f7a9
Management of GCP project default service accounts (#844)
* Added change for default service account deprivilege setting

* Updated readme and variable name

* Updated readme and variable name
2022-09-29 15:10:07 +02:00
cmalpe 2e51bdd8c4 added root password support for MS SQL Server 2022-09-29 10:57:19 +00:00
Ludovico Magnocavallo 1842586241
Bjbloemker-google/master (#843)
* Add ability to add KMS encryption to google_compute_instance_template

* fix code block

Co-authored-by: BJ Bloemker <bjbloemker@google.com>
Co-authored-by: bjbloemker-google <109173391+bjbloemker-google@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-09-29 09:01:15 +02:00
Ludovico Magnocavallo fcf71b983e
refactor net-address modules for 1.3 (#840) 2022-09-28 14:10:05 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Krzysiek Mucha 6e90af2bc3
Add support for service_label property in internal load balancer (#834)
Co-authored-by: Krzysztof Mucha <kmuch@softserveinc.com>
2022-09-21 23:30:35 +02:00
Natalia Strelkova d6c6ae943e regional MySQL DBs - automatic backup conf 2022-09-21 08:14:24 +00:00
lcaggio bdb9086f19
Merge branch 'master' into lcaggio/artifact-jit 2022-09-20 11:06:08 +02:00
lcaggio 495a5bbfff Add Artifact registry Service Identity SA creation. 2022-09-20 10:36:12 +02:00
Arindam Sirohia eb73e13b67 Updated for each condition of binary authorization in gke-cluster module 2022-09-20 00:35:06 +05:30
Arindam Sirohia 489acfdb32 Added new binary_authorization argument in gke-cluster module 2022-09-20 00:09:59 +05:30
Julio Castillo 7a4298783a Removed old and unused modules 2022-09-15 16:50:11 +02:00
Julio Castillo 7e9173d35d Create fully recursive e2e test runner 2022-09-12 13:58:11 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Julio Castillo 67c031c41c Change `modules/project` service_config default 2022-09-09 09:23:09 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
Julio Castillo a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
lcaggio a253446406 First commit 2022-08-31 11:14:18 +02:00
Julio Castillo 0e65021802 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-30 20:06:47 +02:00
ddaluka 16e14fdb0a
Secret manager flag sensitive output (#786)
* Added sensitive output value

* Updated Readme

* updated readme
2022-08-29 13:22:52 +02:00
Taneli Leppä c798625868
net-glb: Added support for regional external HTTP(s) load balancing. (#775) 2022-08-27 22:58:11 +02:00
Roberto Jung Drebes 48fcfa8233
Merge branch 'master' into master 2022-08-24 16:23:03 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Roberto Jung Drebes 1bcfa51a40 fix doc 2022-08-24 14:41:27 +02:00