Commit Graph

24 Commits

Author SHA1 Message Date
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Ludovico Magnocavallo 4a1465ae32
Comment redundant role in bootstrap stage, align IAM.md files, improve IAM tool (#842)
* comment redundant role

* account for duplicate folder names

* update IAM.md files
2022-09-29 08:30:01 +02:00
Julio Castillo 76e49d5891 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-09-08 22:38:05 +02:00
Ludovico Magnocavallo 6035dc1491
FAST: add support for project parents to bootstrap stage (#799)
* FAST: add support for project parents to bootstrap stage

* change as per review comments
2022-09-08 15:11:46 +02:00
Julio Castillo 2ddd68ee2a Fix comment exaplaining serviceProjectAdmin permissions 2022-08-30 20:41:34 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo f42b0f06e4
add billing IAM for billing group (#730) 2022-07-11 08:26:13 +02:00
Ludovico Magnocavallo d6a81fb662 wip 2022-06-30 11:00:57 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Julio Castillo 29ce5f666d Simplify log_sink local 2022-06-10 12:25:26 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Julio Castillo f3f9a4a88c GKE multitenant
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
Ludovico Magnocavallo 8040a4538c
clarify some admin bindings via comments (#663) 2022-06-05 19:48:26 +02:00
Ludovico Magnocavallo 474bcbdd0e
Use tags and tag-based IAM conditions in FAST (#553)
* organization module

* folder module

* project module

* fix project binding

* environment tags

* use id instead of name for references

* environment bindings

* conditional org policy admin binding via tags

* rename pf service accounts and buckets

* update IAM docs

* kms module

* compute-vm

* fix compute-vm

* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo c4d36cc66b Allow specifying custom role names 2022-02-10 19:12:07 +01:00
Ludovico Magnocavallo 4567b788a2 add org policy role to cloud admins 2022-02-08 11:31:39 +01:00
Simone Ruffilli a82f107f54
FAST-00: Adds projectCreator to resman SA. Always create delegated role grants. (#496) 2022-02-04 13:59:32 +01:00
Daniel Marzini 2291e0643a remove module.organization.custom_role_id.xpnServiceAdmin
to be discussed with jccb
2022-02-04 08:45:49 +01:00
Julio Castillo c8f59c105e Remove unneeded delegated grants 2022-02-03 19:22:32 +01:00
Julio Castillo 76d3ed41f1 Add org level role for networking delegated grants 2022-02-03 19:22:32 +01:00
Simone Ruffilli abb6b50a46
Add periods at the end of each description field where missing (#478) 2022-01-31 10:45:34 +01:00
Luca Prete 0da20063c8
Fix fast org policies (#444)
* Fix fast org policies

* Generate tfdoc

* Minor refactoring of resman organization org policies

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-21 19:38:18 +01:00
Ludovico Magnocavallo e866db2c88 Merge Fabric FAST (#435)
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-01-19 14:19:39 +01:00