Commit Graph

1454 Commits

Author SHA1 Message Date
Albert Lloveras 1f6f0c306d Formatting 2023-06-20 17:27:15 +10:00
Albert Lloveras c05bc41b69 feat(artifact-registry): Add support for CMEK 2023-06-20 17:27:15 +10:00
Ludovico Magnocavallo 2830e4b9e2 Split Cloud Function module in separate v1 and v2 modules (#1450)
* split v1

* v2

* blueprints

* remove _http
2023-06-20 17:27:15 +10:00
Miren Esnaola ddfab0a0e4 Added iam for DNS managed zone to dns module 2023-06-19 12:53:38 +02:00
Miren Esnaola a424635221 Refactored apigee module and adjusted the blueprints accordingly 2023-06-19 09:01:32 +02:00
Miren Esnaola 064d86511f enable_logging variable was not being used 2023-06-14 19:22:04 +02:00
Wiktor Niesiobędzki 30ae108c89 Ignore Cloud Run system annotations/labels
Ignore explicitly:
* metadata.0.annotations["run.googleapis.com/operation-id"],
* template.0.metadata.0.labels["run.googleapis.com/startupProbeType"]

To remove permdiff in terraform plan. Not ignoring all changes in
annotations as it implements some of the functionality and it prevents
detecting drift.

Related: #1435, #1269
2023-06-13 10:07:04 +02:00
Taneli Leppä 81285065ca Added module for Secure Web Proxy. 2023-06-13 08:49:58 +02:00
Miren Esnaola 500179f02f Move net-dedicated-vlan-attachment module to net-vlan-attachment and added support for Partner interconnect 2023-06-12 14:21:01 +02:00
Julio Castillo 50d8d4b8b8 Add subnets id output, expand net-address outputs 2023-06-12 10:24:30 +02:00
Julio Castillo e900e9c951 Make internal/external addresses optional in compute-vm
Fixes 1431
2023-06-08 14:00:10 +02:00
apichick d248f799d9
Merge branch 'master' into net-ilb-l7-psc-negs 2023-06-08 12:35:17 +02:00
Ludovico Magnocavallo a7b944aa8e
fix serverless neg example (#1430) 2023-06-08 12:05:54 +02:00
Miren Esnaola ebeace21dd Added support for PSC negs in net-ilb-l7 module 2023-06-08 11:18:32 +02:00
Ludovico Magnocavallo c024eca320
Add custom tag support to FAST (#1426)
* initial implementation of custom tags

* depend org policies on tags

* fix test

* integrate default and custom org policy tags
2023-06-07 22:10:27 +00:00
lcaggio 39b27ac25e
Add support for Log Analytics on logging-bucket module and bump provider version (#1423)
* first commit

* Bump provider versions

* Fix tests
2023-06-07 23:23:28 +02:00
Ludovico Magnocavallo 7bd6e5d57b
Small fixes (#1425)
* fix serverless connector plugin outputs

* add internal and lb to allowed ingress org policy

* add validation condition on cloud run ingress settings

* tfdoc

* plugin tfdoc

* allow disabling googleapis routes with a single instruction in net-vpc

* fix variable def

* fix variable description

* fix cr variable validation

* fix usage of   create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
Ludovico Magnocavallo fedb894f97
Fix NLB module (#1419)
* net-nlb fixes

* formatting
2023-06-05 19:42:32 +02:00
Ludovico Magnocavallo ea4c00756b
Network Load Balancer module (#1418)
* wip

* example tests passing
2023-06-05 13:21:40 +02:00
Luca Prete 0d6751a5f4
Remove hardcoded description from instance groups created under net-ilb (#1417) 2023-06-05 09:35:17 +00:00
Ludovico Magnocavallo c439a66b27
Add notice to net-ilb module on routes (#1415)
* add support for routes

* boilerplate

* revert and add notice to README

* revert

* revert

* Fix README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-06-05 09:40:34 +02:00
Prabha Arya f2fe406a62
add alloydb module (#1403)
* add alloydb module

* fix typos

* fix typos

* Add default googleapi route creation to net-vpc

* Reuse existing logic to create default routes

* Update net-vpc README

* Fix modules and blueprints tests

* Rename to `create_googleapis_routes`

* Fix FAST tests

* Fix nva stages tests

* update changelog

* fix typos

* fix version

* rearrange variables

* fix lint

* fix lint

* fix README

* fix README

* fix comments

* fix variables

* fix READMEs

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludo <ludomagno@google.com>
2023-06-04 10:12:32 +00:00
Taneli Leppä 87db60de1f Add networksecurity to JIT identity list. 2023-06-02 16:11:16 +02:00
Ludovico Magnocavallo 884cb8b4bf
Ensure all modules have an `id` output (#1410)
* net-vpc

* a-d

* complete modules

* fix error
2023-06-02 16:07:22 +02:00
apichick f069562998
Added comment in the dns module, saying that inbound/outbound server policies are set in the net-vpc module (#1405)
Co-authored-by: Luca Prete <preteluca@gmail.com>
2023-06-02 11:35:25 +02:00
Alejandro Leal 6c11527762 Multiple Updates
modules/net-dedicated-vlan-attachment/variables.tf
modules/net-dedicated-vlan-attachment/README.md
CHANGELOG.md
blueprints/networking/ha-vpn-over-interconnect/README.md
2023-05-31 13:26:22 -04:00
Simone Ruffilli fda4daecff
Cosmetic documentation fixes 2023-05-31 13:51:15 +02:00
Simone Ruffilli 7f561565e7
HA VPN over Interconnect modules and blueprint (#1390)
Two new modules, net-ipsec-over-interconnect to establish HA VPN over existing VLAN attachments, and net-dedicated-vlan-attachment to create (optionally encrypted) vlan attachments, as well as the ha-vpn-over-interconnect blueprint that shows how to compose such modules to create a 99.9% encrypted interconnect.
2023-05-31 10:53:38 +00:00
Wiktor Niesiobędzki 3ac6ceac1e Add trigger SA for Cloud Run 2023-05-30 17:08:37 +02:00
Julio Castillo 0888cce3a5 Rename to `create_googleapis_routes` 2023-05-26 16:43:43 +02:00
Julio Castillo cecbd2072c Fix modules and blueprints tests 2023-05-26 16:38:41 +02:00
Julio Castillo 563b5fa0cb Update net-vpc README 2023-05-26 12:46:16 +02:00
Julio Castillo 1e8c58c88e Reuse existing logic to create default routes 2023-05-26 12:01:38 +02:00
Julio Castillo 7a91a7e41c Add default googleapi route creation to net-vpc 2023-05-26 10:55:35 +02:00
Julio Castillo e479d9815b
Merge branch 'master' into juliocc-patch-1 2023-05-24 12:46:04 +02:00
Benoît Sauvère aa80109081
allow to configure `stack_type` in the GKE modules (#1395)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-24 10:19:43 +00:00
Ludovico Magnocavallo 4aa99ea829
allow setting identities in egress policies (#1394) 2023-05-24 12:05:16 +02:00
Julio Castillo d22bf2ec6b
Update README.md 2023-05-24 11:34:21 +02:00
Julio Castillo fddf8b52bc Fix sort order 2023-05-22 19:11:33 +02:00
Julio Castillo 3e67fc00ca Add default Cloud Build SA to project module 2023-05-22 19:11:33 +02:00
Ana Fernandez del Alamo a5bbd09776 Support CMEK encryption in logging-bucket module
We have a use case, Local Controls, that requires to configure
CMEK with Logging buckets. This commit adds an optional variable to
configure CMEK in the `logging-bucket` module. By default the Logging
bucket won't use CMEK encryption.

To configure CMEK for Logging buckets it's also required to add the
correct permissions to the bucket service account. For more information
and a Terraform example, see:

https://cloud.google.com/logging/docs/routing/managed-encryption-storage

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/logging_project_bucket_config#example-usage
2023-05-22 15:12:27 +01:00
Alejandro Leal 6a89d71e96
Update to multiple README.md (#1379)
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
Alejandro Leal 0ad21351c0
Merge branch 'master' into master 2023-05-15 14:25:42 -04:00
Ludovico Magnocavallo 2cbd85c8e0
Merge branch 'master' into jccb/nat-rules 2023-05-14 15:29:52 +02:00
Manuel Aller dd1e5dc463
added the export_public_ip_routes variable in the net-vpc-peering mod… (#1374)
* added the export_public_ip_routes variable in the net-vpc-peering module to control the google_compute_network_peering resource created

* adding period to the variable description
2023-05-14 15:29:24 +02:00
Alejandro Leal 87cd83f5c0 Several updates
Several updates
2023-05-13 23:51:46 -04:00
Julio Castillo 8e1e761577
Merge branch 'master' into cloud-functions-cpu 2023-05-13 09:45:10 +02:00
Miren Esnaola 4df6c90d12 Made available CPUs configurable in Cloud Functions module 2023-05-12 21:36:22 +02:00
Julio Castillo d20a078134 Cloud NAT rules support 2023-05-12 16:20:38 +02:00
Jay Schwerberg 20b8002602
feat(net-cloudnat): add config_port_allocation configuration block 2023-05-11 12:20:43 -07:00
Julio Castillo b8b6f0dcc2 Add versions.tf to ncc-spoke-ra module 2023-05-09 16:00:13 +02:00
Julio Diez 8c7b6b2410 Update README tfdoc 2023-05-05 19:52:41 +02:00
Julio Diez 252be12bd4 Update README showing the Shared VPC use case 2023-05-05 19:38:34 +02:00
Julio Diez aec85a20c9 Add support for Shared VPC in Cloud Run
A VPC access connector in a Shared VPC needs to specify the subnet
and subnet project (the host project).
2023-05-05 18:15:19 +02:00
Prabha Arya c344606ae5
Add module link to README (#1357)
* Add dataplex module

* fix dataplex test

* resolve comments

* python test removed

* Change variable desc

* refactor variables

* fix typos

* fix assets & zones resources

* fix linting error

* fix tests

* fix typo

* add module link in README

---------

Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-05 08:10:09 +00:00
Toby Archer e333b6ffa2
Change serve_while_stale type to a number (#1329)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-05 07:41:12 +00:00
Prabha Arya 23299f7bd7
Add cloud dataplex module (#1308)
* Add dataplex module

* fix dataplex test

* resolve comments

* python test removed

* Change variable desc

* refactor variables

* fix typos

* fix assets & zones resources

* fix linting error

* fix tests

* fix typo
2023-05-05 09:26:46 +02:00
Ludovico Magnocavallo efb0ebe689
Switch FAST networking stages to network policies for Google domains (#1352)
* peering stage implementation

* vpn stage implementation

* tfdoc

* tests

* add most supported google domains

* align all net stages

* add support for factory to DNS response policy module

* use dns policy factory in network stages

* boilerplate
2023-05-04 07:38:40 +02:00
Brent Walker 5763eb53d4
Enhance GKE Backup Configuration Support (#1349)
* Add more support for backup configuration

* Update docs

* Remove redundant lookups
2023-05-02 14:59:12 +00:00
Ludovico Magnocavallo 98c8643886
ignore entire node config in standard cluster (#1348) 2023-05-02 15:23:02 +02:00
Bob Idle 94589efc34
Fix external documentation links (#1347) 2023-05-02 05:26:58 +00:00
Julio Castillo 8e55374717
Merge branch 'master' into lcaggio/vertex-01 2023-04-24 20:33:03 +02:00
Julio Castillo df7cf3d278 Migrate compute-mig tests 2023-04-21 17:51:20 +02:00
Julio Castillo eab9053e16 Migrate billing-budget tests 2023-04-21 17:51:20 +02:00
Julio Castillo 1649787905 Migrate kms tests 2023-04-21 17:51:20 +02:00
Julio Castillo 1c7f8f5907 Migrate bigquery-dataset tests 2023-04-21 17:51:20 +02:00
Julio Castillo 230a1034ec Migrate net-address tests 2023-04-21 17:51:19 +02:00
Julio Castillo 924230eb12 Migrate gke-hub tests 2023-04-21 17:51:19 +02:00
Avinash Jha e881537f87
Separating GKE Standard and Autopilot Modules (#1330)
* separating GKE Standard and Autopilot Modules

* Changes for Updating the terraform and provide versions

* Changes for Autopilot Readme

* Changes for Autopilot Variable

* Changes for Autopilot Readme

* Changes for Autopilot Readme

* Changes for Blueprint

* Changes for Blueprint ReadMe

* Changes for gke-standard-cluster dependency

* Changes for gke-standard-cluster in gke-fleet

* Changes for gke-standard-cluster in cluster-mesh-gke-fleet-api

* python formatting

* python formatting

* python formatting

* GKE module naming convention

* Readme Changes

* test module

* Removing comment code from Autopilot
2023-04-21 12:08:13 +00:00
lcaggio 15a4dcdd71
Merge branch 'master' into lcaggio/vertex-01 2023-04-19 11:51:53 +02:00
bjohnrl e24b993550 Add lifecycle for create certificate before destroy 2023-04-19 09:24:35 +01:00
lcaggio edf67fc5d0 First commit 2023-04-18 17:32:15 +02:00
bjohnrl 5807c03d88
Certifiate 2023-04-18 13:15:02 +01:00
jamesmao-xyz e1ebfeecad
Fix the tf error: Inconsistent conditional result types
The conditional statement, with tomap({}) will cause the following error under terraform 1.4.5

Error: Inconsistent conditional result types
│ 
│   on ../../../modules/net-vpc/subnets.tf line 20, in locals:
│   20:   _factory_data = var.data_folder == null ? tomap({}) : {
│   21:     for f in fileset(var.data_folder, "**/*.yaml") :
│   22:     trimsuffix(basename(f), ".yaml") => yamldecode(file("${var.data_folder}/${f}"))
│   23:   }
│     ├────────────────
│     │ var.data_folder is "data/subnets/common"
│ 
│ The false result value has the wrong type: element types must all match for conversion to map.
2023-04-18 19:54:37 +10:00
lcaggio 306b38295e Add CMEK support 2023-04-17 23:32:13 +02:00
Julio Castillo e8ff5080b9 Fix linting 2023-04-17 09:17:54 +02:00
Julio Castillo 4770cb06fd Migrate cloudsql-instance examples 2023-04-17 09:17:54 +02:00
Julio Castillo 461f7780c2 Migrate bigtable-instance tests 2023-04-17 09:17:54 +02:00
Julio Castillo 5f82938739 Migrate cloud-identity-group tests 2023-04-17 09:17:54 +02:00
Julio Castillo 771dd02b18 Migrate logging-bucket tests 2023-04-17 09:17:54 +02:00
Julio Castillo 0150e97e51 Migrate endpoints tests 2023-04-17 09:17:54 +02:00
Julio Castillo 01b9921f5c Migrate PubSub tests 2023-04-17 09:17:54 +02:00
Julio Castillo 1927b138d6 Migrate secret-manager tests 2023-04-17 09:17:54 +02:00
Julio Castillo a2bffc7302 Migrate service-directory tests 2023-04-17 09:17:54 +02:00
Julio Castillo ed49f3db39 Migrate source repository tests 2023-04-17 09:17:54 +02:00
Julio Castillo f5e1717319 Migrate VPC-SC tests to examples 2023-04-17 09:17:54 +02:00
Julio Castillo 2d4bd5a244 Remove net-interconnect-attachment-direct 2023-04-14 11:01:54 +02:00
Julio Castillo eca0a9583e Add inventories to net-vpc-firewall tests 2023-04-12 14:04:58 +02:00
ajlopezn 063c5061c8 lowercase text 2023-04-12 08:25:33 +00:00
ajlopezn df789db9bd updated spaces 2023-04-11 21:59:36 +00:00
Antonio Lopez b4156eff41
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall 2023-04-11 22:58:22 +02:00
Fawzi 3673dc2774
Merge branch 'master' into fawzihmouda/firewall-enforcement-order 2023-04-11 23:44:56 +10:00
Fawzi ebf93a66ad add new test to README 2023-04-11 23:38:16 +10:00
Fawzi 4722efea40 bump provider versions 2023-04-11 22:18:31 +10:00
Fawzi 3c4254fc1f update firewall_policy_enforcement_order variable 2023-04-11 22:08:41 +10:00
ajlopezn 6db1a5f5d3 updated variables doc 2023-04-11 11:39:47 +00:00
ajlopezn d150f03b41 included link to the tf resource bug in a comment 2023-04-11 11:30:12 +00:00
ajlopezn 4e426a990a correct naming in source destination egress fw rule 2023-04-11 10:48:56 +00:00
ajlopezn 6f1e531af0 added example for source&destination ranges usage in fw rules 2023-04-11 10:45:45 +00:00
ajlopezn b809b315f6 added example for source&destination ranges usage in fw rules 2023-04-11 10:43:32 +00:00
Antonio Lopez 660da5b585
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall 2023-04-11 12:24:06 +02:00
ajlopezn 4ccf9f9361 included an empty list as default in the ingress_rules.destination_ranges variable 2023-04-11 10:22:08 +00:00
Mikhail Filipchuk 33e8b42842
Use labels var in cloud-run module (#1310)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-04-11 03:06:13 +00:00
ajlopezn adb88d8a87 allow destination_range variable in ingress rules and source_range in egress rules 2023-04-10 14:00:55 +00:00
ajlopezn 18f1e8ebb1 added source and destination ranges to both ingress and egress fw rules 2023-04-10 10:47:51 +00:00
Fawzi db3c48736c add firewall enforcement variable to VPC 2023-04-10 01:28:12 +10:00
Ludovico Magnocavallo 865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider (#1306)
* add support for new attributes to bigquery module

* bump provider versions
2023-04-05 14:22:52 +00:00
Luca Prete 70aefc2ddb
Add ability to run vtysh from simple-nva vm directly when frr is active (#1301)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 21:37:02 +02:00
Luca Prete 07f60fb0b9
Fix vtysh (#1300)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 14:37:46 +00:00
Ludovico Magnocavallo bc2d9372aa
Fix urlmap in ILB L7 module (#1299)
* port tests to new format

* add test to catch error and fix urlmap

* boilerplate

* boilerplate
2023-04-03 15:47:37 +02:00
Luca Prete bf14d2da23
Add sample vtysh file to remove warnings (#1298)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 15:10:46 +02:00
Ludovico Magnocavallo 92b71a5098
Refactor cloud run module to use optionals and support all features (#1293)
* refactor cloud run resource and variables

* vpc connector variables and resource

* refactor env variable, combine and fix env examples

* fix volume example

* fix traffic split example

* fix eventarc/pubsub example

* fix eventarc/audit log example

* fix SA examples, fix examples formatting

* refactor eventarc variable

* tfdoc

* add IAM to example

* add examples for revision annotations and serverless connector

* fix new examples

* remove legacy module tests

* blueprint tests

* Add tests to cloud-run module

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-04-01 14:06:29 +02:00
Valerio Ponza c5db50d1d7 fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 6204787226 fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 0a20bc4f2d fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 1fb7e114fd fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 596acb63e4 removing deprecated field from gke-hub 2023-03-30 12:47:39 +02:00
Valerio Ponza 44d2e9e50e removing deprecated field from gke-hub 2023-03-30 12:47:39 +02:00
Valerio Ponza 64a9952656 add Backup for GKE support 2023-03-30 12:47:39 +02:00
Julio Castillo 7135c9015f Add boilerplate 2023-03-30 09:36:14 +03:00
Julio Castillo b503bde544 Load all service agents identities from yaml
Source: https://cloud.google.com/iam/docs/service-agents
2023-03-30 09:36:14 +03:00
Wiktor Niesiobędzki c76e95e7e8
Add Cloud Batch service identity (#1294) 2023-03-30 08:05:12 +02:00
Julio Castillo d64b5779e4
Merge branch 'master' into dataplex 2023-03-27 21:44:24 +02:00
Julio Castillo 039d10b287
Merge branch 'master' into dataplex 2023-03-27 16:18:38 +02:00
Luca Prete dfa1fce274
Merge branch 'master' into bruzz/nva-firewall-mgmt 2023-03-27 16:04:55 +02:00
bruzzechesse d68476ba07 fixes 2023-03-27 15:46:37 +02:00
bruzzechesse cf2fd119b5 small fixes 2023-03-27 15:35:00 +02:00
Wiktor Niesiobędzki 9005a51a95 Use example testing instead custom test 2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki d105ed59d3 Resolve review comments 2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki 082301c09c Use unique bundle name for Cloud Function
When cloud-function module is used multiple times within project and
default `bundle_config.output_path` is used then all the instances try
to use filename and result is undefined without guarantee to converge to
desired state (i.e. multiple functions may share the same code).
2023-03-27 14:13:38 +02:00
bruzzechesse a93b80cf95 linting 2023-03-27 11:49:01 +02:00
bruzzechesse 41570d2840 update documentation 2023-03-27 11:42:17 +02:00
bruzzechesse 021fb84765 add firewall mgmt on simple-nva module 2023-03-27 09:54:01 +02:00
Wiktor Niesiobędzki 58bc576ddb Add dataplex SA 2023-03-27 07:37:40 +00:00
Ludovico Magnocavallo 987ea34d93
DNS policy module fixes (#1278)
* dns response policy module

* tfdoc

* Add dns policy tests

* fix copyright, var description, initial wording

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-03-26 18:39:07 +02:00
Ludovico Magnocavallo 28da881c3f
DNS Response Policy module (#1276)
* dns response policy module

* tfdoc
2023-03-26 17:42:57 +02:00
Ludovico Magnocavallo 60261a6352
add static gateway id to outputs (#1270) 2023-03-21 18:08:45 +01:00
Julio Castillo 3d425b7d9c Ignore changes to metadata.0.annotations in Cloud Run module
Fixes #1173
2023-03-21 11:54:07 +01:00
Luca Prete 3b20d617dc
Improvements to NCC-RA spoke module. (#1267) 2023-03-21 07:07:44 +00:00
Luca Prete 6e49e94749
simple-nva: add ability to parse BGP configs as strings. (#1268)
* Add ability to parse BGP configs as strings.

* Fix var name

* Refresh tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
2023-03-21 07:41:12 +01:00
Taneli Leppä 4b15fe4744
Add backend service names to outputs for net-glb and net-ilb-l7 (some things like (#1258)
autoneg require names).

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-03-17 10:40:11 +00:00
Ludovico Magnocavallo 8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo 50adf1da2a
change target_vpcs variable to support dynamic values (#1255) 2023-03-17 07:14:09 +00:00
Miren Esnaola 21fa6d1f13 Fixes related to boot_disk in compute-vm module 2023-03-16 15:58:39 +01:00
Ludovico Magnocavallo 79a6e9b191
pin local provider (#1256) 2023-03-16 10:59:06 +00:00
Julio Castillo c82f142d2d Delay creation of SVPC host bindings until APIs and JIT SAs are done 2023-03-14 14:51:17 +01:00
Ludovico Magnocavallo 112d9a8d9c
Allow using existing boot disk in compute-vm module (#1241)
* allow using existing boot disk in compute-vm module

* allow setting initialize params to null

* tests

* fast

* blueprints
2023-03-12 10:53:59 +01:00
Ludovico Magnocavallo 6ba0f8b0ba
allow overriding name in net-vpc subnet factory (#1239) 2023-03-11 09:30:42 +01:00
simonebruzzechesse 510db1b36f
Fix policy_based_routing.sh script on simple-nva module (#1226) 2023-03-10 18:36:07 +01:00
Julio Castillo 1c3645f3a3 Fix dataproc modules variables 2023-03-10 16:54:09 +01:00
bruzzechesse 7595508bd4 fix variable 2023-03-10 12:03:54 +01:00
bruzzechesse 3ffda9c8c9 terraform fmt 2023-03-10 10:45:39 +01:00
bruzzechesse f688b9a47d realign logic to boolean variable 2023-03-10 10:43:37 +01:00
bruzzechesse 7781b72690 replace track_per_session with tracking_mode and fixed connection tracking conf for backends 2023-03-10 10:03:45 +01:00
Ludovico Magnocavallo 45c12e233b
Network firewall policy module (#1232)
* validated, untested

* tested

* typo in README
2023-03-10 08:21:49 +00:00
Julio Diez d0f346f6c6 Add resources created as outputs 2023-03-09 15:35:52 +01:00
Julio Diez f82b5284c9 Change semantics of custom_advertise 2023-03-09 15:35:52 +01:00
Julio Diez 7eb9fbf676
Merge branch 'master' into ncc 2023-03-09 13:10:36 +01:00
Julio Diez 3e85175f67 Adapt README examples to the variables config 2023-03-09 13:06:02 +01:00
Julio Diez 0cf254f91e Update variable and output tables 2023-03-09 13:06:02 +01:00
Julio Diez 7e6635f535 Alphabetical order and better naming 2023-03-09 13:06:02 +01:00
Julio Diez eef6a48876 Make ip_interfaceX not optional
These IP values are optional, if you don't specify a value Google will try to
find a free IP address. But this is a bad idea because setting them to 'null'
forces a replacement even without any changes to make.
2023-03-09 13:06:02 +01:00
Julio Diez 84d3b83f81 Group router information under router_config 2023-03-09 13:06:02 +01:00
Julio Diez b25ee97d15 Group vpc and subnet under vpc_config 2023-03-09 13:06:02 +01:00
Julio Diez e9312e4dba var ras -> router_appliances 2023-03-09 13:06:02 +01:00
lcaggio cc6ee44759 Add aiplatform robot service account 2023-03-09 08:17:26 +01:00
Ludovico Magnocavallo 5489162b75
Merge branch 'master' into ncc 2023-03-08 20:33:53 +01:00
Julio Diez 96f35c53a5 Fix README variables to pass pytest 2023-03-08 20:00:55 +01:00
Julio Diez 93bb809a40 Rename module net-ncc -> ncc-spoke-ra 2023-03-08 20:00:55 +01:00
Julio Diez 62539508a5 Update README for the new implementation 2023-03-08 20:00:55 +01:00
Julio Diez 6196851d3f Output the name of the hub if created 2023-03-08 20:00:55 +01:00
Julio Diez 34c6a6aee1 Make creation of the hub optional 2023-03-08 20:00:55 +01:00
Julio Diez 1b4ba11dcd Make IPs for the CR interfaces optional 2023-03-08 20:00:55 +01:00
Julio Diez 0da0f33525 Make keepalive optional 2023-03-08 20:00:55 +01:00
Julio Diez 81121f4aa6 data_transfer default to false 2023-03-08 20:00:55 +01:00
Julio Diez d5d743174e Make custom_advertise optional 2023-03-08 20:00:55 +01:00
Julio Diez 2f64fcd5f4 Reimplement the module to manage only one spoke 2023-03-08 20:00:55 +01:00
lcaggio e213f156ad Fix Jit notebook service account. 2023-03-08 16:06:27 +01:00
simonebruzzechesse fd07c444cb
Extended simple-nva module to manage BGP service running on FR routing docker container (#1195) 2023-03-08 09:43:13 +01:00
Julio Diez 6eb82a2214
Merge pull request #16 from juliodiez/master
Sync branch
2023-03-07 13:13:35 +01:00
Julio Diez d9eaa59862 Generated variable table via tfdoc 2023-03-07 13:04:15 +01:00
Julio Diez ac224ad11c Add tftest to README 2023-03-07 12:29:20 +01:00
Julio Diez 94f3a08129 Add example of custom route advertisements 2023-03-07 11:54:34 +01:00
Julio Diez 9b5bc407ba Add image for load-balanced router appliances example 2023-03-07 11:10:19 +01:00
Julio Diez 58c90feca2 Add example of load-balanced router appliances 2023-03-07 11:06:23 +01:00
Julio Diez 3e0a8c4c0a Add image for site to two VPCs example 2023-03-07 10:43:51 +01:00
Julio Diez 76972d5804 Add example of site to two VPCs 2023-03-07 10:37:58 +01:00
Julio Diez 449f5cbb56 Adapt example to use only allowed chars for resource names 2023-03-07 10:28:29 +01:00
Julio Diez 87107ba3e0 Set a unique name to CRs linked to spokes 2023-03-07 10:11:02 +01:00
Julio Diez e7963eb630 Set a unique name to spokes 2023-03-07 10:01:07 +01:00
Julio Diez 71cb18f808 Replace map key derived from resource attributes 2023-03-07 09:52:34 +01:00
Julio Diez 0f4919a771 Add image for site to VPC example 2023-03-06 20:55:36 +01:00
Julio Diez 69493d8a40 Add README with first example 2023-03-06 20:47:18 +01:00
Julio Diez 65671647e7 Make optional some router config fields 2023-03-06 20:45:08 +01:00
Julio Diez 25b14465b2 Simplify some naming 2023-03-06 19:21:09 +01:00
Julio Diez e835730665 Add router BGP peers 2023-03-06 18:02:50 +01:00
Julio Diez 02707eb275 Initial commit for NCC module 2023-03-06 14:09:14 +01:00
Ludovico Magnocavallo 8fc9549c58
add support for proxy and psc subnets to module factory (#1211) 2023-03-05 17:08:43 +01:00
lcaggio 88ecdbe671
Merge branch 'master' into lcaggio/dataproc-03 2023-03-02 12:18:52 +01:00
Taneli Leppä 99d19d5ec8 Fix issue with GKE cluster notifications topic, change pubsub module output to static. 2023-03-02 11:23:05 +01:00
lcaggio b7793f69a2 Dataproc module. Fix output. 2023-03-02 10:39:08 +01:00
erabusi 2ebb21e4cc
Fix url_redirect issue on net-glb module (#1204) 2023-03-02 07:51:39 +01:00
lcaggio b39b486cd4 Fix README 2023-03-01 10:48:33 +01:00
lcaggio c4d8175d9a
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 10:44:31 +01:00
lcaggio 0d37fe8338 Update README 2023-03-01 10:44:01 +01:00
Ludovico Magnocavallo 3a2d6e1b46
Fix secondary ranges in net-vpc readme (#1198)
Fixes #1197
2023-03-01 08:08:07 +01:00
lcaggio dad3c49012 Fix linting 2023-03-01 08:00:52 +01:00
Ludovico Magnocavallo 6629e5cd06
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 07:57:21 +01:00
lcaggio dc37783022 Fix Variables 2023-03-01 07:54:10 +01:00
Ludovico Magnocavallo 4b3b5ad1cb
Merge branch 'master' into fix-test-compute-vm-kms 2023-02-28 16:13:48 +01:00
Dan Farmer 52eb83758f Fix compute-vm:CloudKMS test for provider>=4.54.0
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
  `google_compute_disk.disks["attached-disk"]` (see
  hashicorp/terraform-provider-google#4448)
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
  will now fail with <4.54.0, which do not return `rsa_encrypted_key`
  * Updated the whole repo on advice from @ludoo
2023-02-28 15:10:22 +00:00
Joshua Goldberg 6bf2fb4c06
Fix https health check mismapped to http (#1194) 2023-02-28 15:48:13 +01:00
lcaggio 0f504f6b8e Fix output variable order. 2023-02-28 10:50:58 +01:00
lcaggio ac0a140011 Fix outputs 2023-02-28 10:35:44 +01:00
Ludovico Magnocavallo 1a685e7b83
Update README.md 2023-02-28 07:49:28 +01:00
Ludovico Magnocavallo 3d2f1182d2
Update README.md 2023-02-28 07:48:47 +01:00
lcaggio 7ece884422 Fix examples. 2023-02-28 06:52:10 +01:00
lcaggio 46a99b9a9b
Merge branch 'master' into lcaggio/dataproc 2023-02-28 06:36:21 +01:00
Ludovico Magnocavallo e098568b6e
fix external gateway (#1191) 2023-02-28 00:46:50 +01:00
lcaggio fdb4f2a9fd Fix variables 2023-02-27 22:23:45 +01:00
lcaggio 51579ac7e7 Fix linting 2023-02-27 22:18:07 +01:00
lcaggio 05a85e753c First commit 2023-02-27 22:14:07 +01:00
Valerio Ponza cbe85e0605 fixing workloadidentity for anthos service mesh - authority was not created 2023-02-27 14:17:16 +00:00
Ludovico Magnocavallo 6320c53baf
Allow multiple peer gateways in vpn ha module (#1184)
* allow multiple peer gateways in vpn ha module

* align blueprints

* fast
2023-02-27 10:18:59 +00:00
Carlos Alexandre aecb6fd543
Implemented conditional dynamic blocks for `google_access_context_manager_service_perimeter` `spec` and `status` (#1177)
* implemented conditional dynamic blocks

* Fix linting

* avoid setting spec in bridge perimeters if no resources are set

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 16:04:19 +00:00
Julio Castillo 899960c247 Fix tests 2023-02-24 19:14:43 +01:00
Valerio Ponza 36e6367a5c adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:11:35 +00:00
Valerio Ponza 7670a6009f adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:05:11 +00:00
Julio Diez 3b0223458b
Don't define nor use health checks with SNEGs
SNEGs don't use health checks and it's an error to add one in their backend services. 'terraform plan' doesn't detect it, only 'apply'.
2023-02-24 11:13:55 +01:00
Julio Diez 5a44baa82f
Merge branch 'master' into juliodiez-patch-1 2023-02-24 10:22:07 +01:00
Miren Esnaola ae6080ebf7 Modifications related to autopilot and workload identity. Added workload_identity_pool output to module 2023-02-24 09:59:23 +01:00
Julio Diez 08ba94aebc
Allow to not use any health check
Internet / serverless NEGs (Cloud Run) don't use them and it's an error to add one in their backend services.
2023-02-24 09:55:26 +01:00
Julio Castillo a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo 62834ca83a Update READMEs 2023-02-21 15:49:16 +01:00
Julio Castillo 6b767c9035 Simplify org policies data model in resman modules. 2023-02-21 15:49:16 +01:00
Julio Diez 4a9ce1c5ce
Update README
Remove unused field
2023-02-21 14:05:03 +01:00
Julio Diez 0ca0b2e99b
Fix variable name 2023-02-20 14:37:33 +01:00
Julio Castillo 3085922cea Fix tests 2023-02-20 12:19:36 +01:00
Ludovico Magnocavallo 840abd60e7
Merge branch 'master' into master 2023-02-20 08:14:58 +01:00
Aleksandr Averbukh f16511b8da Fix typo in readme 2023-02-19 15:22:48 +01:00
Aleksandr Averbukh ff4b2fffe2 Regenerate docs 2023-02-18 22:11:44 +01:00
Aleksandr Averbukh 8174890331 Sort variables 2023-02-18 22:04:40 +01:00
Aleksandr Averbukh 1c302c7ab3 TF formatting 2023-02-18 21:48:05 +01:00
Aleksandr Averbukh d970db0c79 Merge branch 'master' into projects-ds-new-version 2023-02-18 21:38:53 +01:00
Aleksandr Averbukh a497aef707 feat: new version of projects-data-source based on AssetInventory ds 2023-02-18 21:36:51 +01:00
Wiktor Niesiobędzki e64e8db20d Allow additive IAM grants by robots name
Regreatablly member name will be known after apply, hence changes in the
tests
2023-02-16 14:39:21 +01:00
Chema Polo e8334857ff
Update main.tf (#1158)
replaced .secondary_pod_range by var.pod_range.secondary_pod_range that is the object which contins create, cidr an name attributes.
2023-02-15 06:28:47 +01:00
lcaggio 7bbeac805e Add 'max_time_travel_hours ' on BQ module 2023-02-14 08:43:15 +01:00
James D'Alfonso 15487078d4 add missing iam properties to factory_subnets 2023-02-13 10:00:50 +01:00
Luca Prete 3a0a1e2f6d
net-ilb: add example about ref existing MIG example (#1151) 2023-02-11 17:45:16 +01:00