Julio Castillo
8fe19ad7c2
Rename bigquery_use_partitioned_table
2022-11-12 11:30:34 +01:00
Julio Castillo
486d398c7d
Update logging sink to tf1.3 in resman modules
2022-11-11 19:22:05 +01:00
Ludovico Magnocavallo
4a1465ae32
Comment redundant role in bootstrap stage, align IAM.md files, improve IAM tool ( #842 )
...
* comment redundant role
* account for duplicate folder names
* update IAM.md files
2022-09-29 08:30:01 +02:00
Julio Castillo
76e49d5891
Merge remote-tracking branch 'origin/master' into fast/gke2
2022-09-08 22:38:05 +02:00
Ludovico Magnocavallo
6035dc1491
FAST: add support for project parents to bootstrap stage ( #799 )
...
* FAST: add support for project parents to bootstrap stage
* change as per review comments
2022-09-08 15:11:46 +02:00
Julio Castillo
2ddd68ee2a
Fix comment exaplaining serviceProjectAdmin permissions
2022-08-30 20:41:34 +02:00
Julio Castillo
25955b158a
Merge branch 'master' into fast/gke2
2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo
f42b0f06e4
add billing IAM for billing group ( #730 )
2022-07-11 08:26:13 +02:00
Ludovico Magnocavallo
d6a81fb662
wip
2022-06-30 11:00:57 +02:00
Ludovico Magnocavallo
666d8a469c
Merge branch 'master' into fast/gke2
2022-06-23 08:34:09 +02:00
Julio Castillo
29ce5f666d
Simplify log_sink local
2022-06-10 12:25:26 +02:00
Julio Castillo
0bf1880431
Fix FAST audit logs when using pubsub as destination
...
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Julio Castillo
f3f9a4a88c
GKE multitenant
...
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:41:50 +02:00
Ludovico Magnocavallo
8040a4538c
clarify some admin bindings via comments ( #663 )
2022-06-05 19:48:26 +02:00
Ludovico Magnocavallo
474bcbdd0e
Use tags and tag-based IAM conditions in FAST ( #553 )
...
* organization module
* folder module
* project module
* fix project binding
* environment tags
* use id instead of name for references
* environment bindings
* conditional org policy admin binding via tags
* rename pf service accounts and buckets
* update IAM docs
* kms module
* compute-vm
* fix compute-vm
* tfdoc
2022-02-20 11:26:30 +01:00
Ludovico Magnocavallo
c4d36cc66b
Allow specifying custom role names
2022-02-10 19:12:07 +01:00
Ludovico Magnocavallo
4567b788a2
add org policy role to cloud admins
2022-02-08 11:31:39 +01:00
Simone Ruffilli
a82f107f54
FAST-00: Adds projectCreator to resman SA. Always create delegated role grants. ( #496 )
2022-02-04 13:59:32 +01:00
Daniel Marzini
2291e0643a
remove module.organization.custom_role_id.xpnServiceAdmin
...
to be discussed with jccb
2022-02-04 08:45:49 +01:00
Julio Castillo
c8f59c105e
Remove unneeded delegated grants
2022-02-03 19:22:32 +01:00
Julio Castillo
76d3ed41f1
Add org level role for networking delegated grants
2022-02-03 19:22:32 +01:00
Simone Ruffilli
abb6b50a46
Add periods at the end of each description field where missing ( #478 )
2022-01-31 10:45:34 +01:00
Luca Prete
0da20063c8
Fix fast org policies ( #444 )
...
* Fix fast org policies
* Generate tfdoc
* Minor refactoring of resman organization org policies
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-21 19:38:18 +01:00
Ludovico Magnocavallo
e866db2c88
Merge Fabric FAST ( #435 )
...
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-01-19 14:19:39 +01:00