Commit Graph

478 Commits

Author SHA1 Message Date
averbukh 16e11fa7c1 Adjust FW rule name with network name to prevent name clashing within the same project. 2021-03-14 10:14:39 +01:00
averbukh 3428e9d562 Fix typo. 2021-03-14 03:10:16 +01:00
averbukh fcd44c2b78 Added FW-Yaml module for distributed-firewall network example. 2021-03-14 03:03:36 +01:00
Julio Castillo f5fb28b4b2
Merge pull request #203 from terraform-google-modules/jccb/log-buckets
Support for Cloud Logging buckets
2021-03-05 08:43:38 +01:00
Ludovico Magnocavallo 86b88e0634
fix modules version constraints (#206) 2021-03-05 08:41:59 +01:00
Ludovico Magnocavallo 8e44734fe5
set version for google-beta provider (#205) 2021-03-05 08:20:48 +01:00
Ludovico Magnocavallo 605ec7c4d1
depend org module resources for policy etc from IAM bindings (#204) 2021-03-05 08:19:39 +01:00
Julio Castillo ad68fc4dfa Support for cloud logging buckets 2021-03-03 14:23:59 +01:00
Ludovico Magnocavallo 54955b3e6d
Add support for per-tunnel routers to VPN dynamic and HA (#202)
* add optional per-tunnel router to vpn dynamic module

* add support for per-tunnel router to VPN HA

* fix onprem tests
2021-03-02 07:36:06 +01:00
Julio Castillo 2d9d81e061 Add support for essential contacts 2021-02-24 18:34:17 +01:00
Ludovico Magnocavallo 7e429425fe
Fix IAM additive (#200)
* Fix wrong iam_addictive variable input (#197)

iam_additive variable from Project module expect { "roles" = list(string) } input

Co-authored-by: Emre Turan <emre@unl.global>

* fix project example

Co-authored-by: Emre Turan <turan.emre@gmail.com>
Co-authored-by: Emre Turan <emre@unl.global>
2021-02-16 20:01:18 +01:00
Julio Castillo abf61fa7e2 Add support for allow- and deny-lists 2021-02-15 17:32:39 +01:00
Julio Castillo d32937f263 Add Squid Docker images 2021-02-15 17:32:39 +01:00
Julio Castillo 1e11c670f5 Update copyright to 2021 2021-02-15 09:38:10 +01:00
Julio Castillo 5e983f55a7 Make `project_id` output non-dynamic 2021-02-15 09:22:19 +01:00
Julio Castillo be8c61ac2c
Cloud Identity Group module (#182)
* New Cloud Identity module

* Add tests to cloud-identity-group module

* Fix boilerplate

* Fix outputs

* Remove support for creating managers and admins

* Update cloud-identity-group README

* Small fix to cloud-identity-group README
2021-02-13 06:55:22 +01:00
Ludovico Magnocavallo e3a03a76ff
Add support for rePD and existing disk attachment to compute VM (#194)
* initial untested support for repd in compute-vm

* fix repd reference in instance disks

* add support for snapshot source, change disk variable

* fix attach existing disk to instance

* fix examples, add documentation on disk sources

* fix attaching disk for instance templates, add examples

* fix data e2e examples

* update vars table in README
2021-02-03 08:00:08 +01:00
averbukh aec1f3df96 Adjusting second region for on-prem-in-a-box for testing more use cases 2021-01-29 18:43:53 +01:00
Ludovico Magnocavallo 0ce058e04f
Fix tests for 0.14 compatibility (#191)
* remove sensitive attribute from VPN modules key output

* fix type error in service account example

* update CI Terraform version

* update VPN modules docs

* require version in compute mig module

* require version in compute mig module for scaling_schedules

* update compute mig test, move provider version requirement in fixture
2021-01-29 14:55:50 +01:00
Ludovico Magnocavallo 2aa72c91f5 add provider constraint for net-vpc, fixes #185 2021-01-15 19:01:28 +01:00
Ludovico Magnocavallo 4e8fbbc54a fix dns peering example in doc 2021-01-11 12:29:29 +01:00
Aurélien Legrand dcbbf924f3
Update README.md in modules/dns
Adding an example for DNS Peering zones.
2021-01-11 12:11:20 +01:00
Roberto Jung Drebes 177a4d7f2c update README.md for org module with new parameters 2020-12-10 09:36:32 +00:00
Roberto Jung Drebes 91febe4cd1 Authoritative IAM for organization 2020-12-09 22:58:17 +00:00
Julio Castillo 452669fed1 Update README and CHANGELOG 2020-12-06 18:05:57 +01:00
Julio Castillo c6691a6140 Add include_children option folder and organization sinks 2020-12-06 17:56:27 +01:00
Julio Castillo d4201c740d Update environments e2e example with new sinks 2020-12-05 13:24:44 +01:00
Julio Castillo 1af70c748c Rename "grant" to "iam" in sink variables 2020-12-05 12:39:06 +01:00
Ludovico Magnocavallo 7aaf24afd3
Add support for confidential compute to compute-vm module (#179)
* add support for confidential compute

* add support for confidential compute to instance template
2020-12-05 09:14:12 +01:00
Julio Castillo 2c0f949f07
Logging sinks and exclusions (#178)
* Add sink support to folder module

* Make folder creation optional.

* Add logging sinks to the organization module

* Add logging sink support to project module

* Update readme
2020-12-05 08:31:35 +01:00
Julio Castillo ca82d71468 Fix organization tests 2020-11-25 18:47:11 +01:00
Julio Castillo f56c36e2d0 Rename org_id variable to organization_id in organization module 2020-11-25 18:36:19 +01:00
Julio Castillo 0e535a3675 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 18:07:16 +01:00
Julio Castillo dc038ad71f Add tests for hierarchical firewall policy 2020-11-25 18:06:25 +01:00
Andras Gyömrey c8958c548f
monitoring is automatically enabled when monitoring.writer is enabled (#177) 2020-11-25 17:32:53 +01:00
Julio Castillo ce6311f684 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 14:45:55 +01:00
Julio Castillo b2d8052b0e
Update modules/project/README.md
Remove `project_create = false` to all tests to run
2020-11-25 14:44:31 +01:00
Julio Castillo 1c3451cc35 Merge remote-tracking branch 'origin/master' into hierarchical-firewall 2020-11-25 14:37:36 +01:00
Andras Gyömrey e0a45b61c5
fix README (#176) 2020-11-25 14:21:22 +01:00
Julio Castillo 6bd299190f Update variable documentation. 2020-11-23 19:10:42 +01:00
Julio Castillo 254efdd799 Hierarchical firewall support for organizations 2020-11-23 19:01:02 +01:00
Julio Castillo 779f585d1d Hierarchical firewall policies for folders 2020-11-23 18:45:18 +01:00
Ludovico Magnocavallo cffc823f48
refactor access in bq module, add iam (#172) 2020-11-21 09:45:56 +01:00
Ludovico Magnocavallo 27aa0aa64c
Add support for forwarding path to dns module (#171)
* add support for forwarding path to dns module

* update README
2020-11-20 08:35:58 +01:00
Ludovico Magnocavallo f611e99e46
add mtu (#170) 2020-11-19 16:48:08 +01:00
Ludovico Magnocavallo dda715670c
Minor vpc-sc module corrections (#167)
* Fix #158

* fix variable type
2020-11-16 18:04:12 +01:00
Ludovico Magnocavallo 2ddfaad4bc Merge branch 'master' of github.com:terraform-google-modules/cloud-foundation-fabric 2020-11-16 17:39:59 +01:00
Ludovico Magnocavallo 4cd351fa3b align firewall module README with variables 2020-11-16 17:39:51 +01:00
nikever 5bfba15acf
Add boot_disk_kms_key to node_config (#166)
* Add support for CMEK to encrypt boot disks

* Fix typo in variable name

Co-authored-by: Niccolo Raspa <niccolo@sighup.io>
2020-11-16 17:37:10 +01:00
Ludovico Magnocavallo 42a865b8fa fix provider version pinning 2020-11-14 17:47:07 +01:00
Ludovico Magnocavallo 80acb607c2
Add NLB health checks source ranges
https://cloud.google.com/load-balancing/docs/health-checks#fw-netlb
2020-11-12 13:57:56 +01:00
Samuele Chiocca 323e962fc8
Adding node taints on gke nodepool (#165)
* Adding node taints on gke nodepool. Automatic transformation via local variables from list(string) to the map google provider expects.

* Fixing readme with tfdoc.py
2020-11-10 13:41:19 +01:00
Ludovico Magnocavallo ea6c5c3fed shorten internal service account name 2020-11-09 13:28:42 +01:00
Ludovico Magnocavallo 6610b79b6c
Revert iam_additive behaviour (#160)
* revert iam_additive format, add iam_additive_members

* revert iam_additive format, add iam_additive_members

* update CHANGELOG
2020-11-09 11:29:08 +01:00
Julio Castillo af2c7bd154 Fix GKE examples 2020-11-07 16:43:18 +01:00
Julio Castillo 946822ff5c
Merge pull request #157 from terraform-google-modules/example-tests
Make examples in READMEs runnable and testable
2020-11-07 11:38:19 +01:00
Ludovico Magnocavallo b3ae7c9454
Add support for internal service account to GKE nodepool module (#156)
* add support for internal service account to GKE nodepool module, fixes #62

* update shared vpc example to use internally managed service account

* update shared vpc example to use internally managed service account

* update hub and spoke peering example to use renamed gke nodepool variables
2020-11-07 10:48:12 +01:00
Julio Castillo eecdee63e6 Make examples in READMEs runnable and testable 2020-11-07 10:28:33 +01:00
Julio Castillo ec6b1bc8ba Update references to renamed modules 2020-11-06 10:14:30 +01:00
Julio Castillo 1df08caa7f Update READMEs with new variable names 2020-11-06 09:43:12 +01:00
Julio Castillo 8a672b1b13 Fix typo in pubsub README 2020-11-06 09:36:55 +01:00
Julio Castillo c60e37d884 Update copyright in headers 2020-11-06 09:36:09 +01:00
Ludovico Magnocavallo f9e4a1d614 bump required tf version in modules using conditions 2020-11-06 08:43:06 +01:00
Ludovico Magnocavallo b4fc8167a0 use new iam variable in cloud function module 2020-11-06 08:37:44 +01:00
Ludovico Magnocavallo f1a3c3ebe8 use new iam variables in kms module 2020-11-06 08:26:50 +01:00
Ludovico Magnocavallo f72bea3f96 use new iam variable in container registry 2020-11-06 08:22:35 +01:00
Ludovico Magnocavallo 0d17007c9d new iam variable in endpoints module 2020-11-06 08:18:57 +01:00
Ludovico Magnocavallo efc694ba01 fix and streamline bigtable module, add tests, align to new iam variable name 2020-11-06 08:11:07 +01:00
Ludovico Magnocavallo 3a4938874b rename iam variables in pubsub module 2020-11-05 21:28:34 +01:00
Ludovico Magnocavallo c33e68ecd0 use list in service account module variable types 2020-11-05 09:26:24 +01:00
Ludovico Magnocavallo cb54ff77a1 rename iam variable in service account module 2020-11-05 09:22:13 +01:00
Ludovico Magnocavallo 44f1828c33 rename iam variable in compute vm module 2020-11-05 09:10:49 +01:00
Ludovico Magnocavallo 462a7023cd rename iam variable in source repo module 2020-11-05 08:58:05 +01:00
Ludovico Magnocavallo 8267252031 rename iam variable in net vpc module 2020-11-05 08:49:29 +01:00
Ludovico Magnocavallo 9d0db19c5e rename iam variables in gcs module 2020-11-04 16:57:06 +01:00
Ludovico Magnocavallo bf23199724 rename iam variables in artifact registry 2020-11-04 16:56:57 +01:00
Ludovico Magnocavallo 0e1fb9bf9e rename iam variables in folder unit module 2020-11-04 16:49:29 +01:00
Ludovico Magnocavallo 02d867ff3d rename iam variables in folder module 2020-11-04 16:49:19 +01:00
Ludovico Magnocavallo d47478a466 rename iam members variable in project module 2020-11-04 16:22:00 +01:00
Ludovico Magnocavallo d0ed3b7614 rename iam additive variable in project module 2020-11-04 16:17:12 +01:00
Ludovico Magnocavallo d2c84de8ff use new variable names in organization module 2020-11-04 15:44:28 +01:00
Ludovico Magnocavallo 627f86219f rename iam variable in secret manager module, add tests 2020-11-04 14:19:16 +01:00
Ludovico Magnocavallo c372980e15 update service directory module to 0.13 2020-11-04 14:08:33 +01:00
Ludovico Magnocavallo 8dc131550f fix variable validation in project module to allow for null values 2020-11-04 12:06:01 +01:00
Julio Castillo 7bd31ccf52 Added some basic variable validation 2020-11-03 08:12:11 +01:00
Julio Castillo 352b7a0645 Use description variable in dns module 2020-11-03 07:59:52 +01:00
Julio Castillo c75230adf3 Remove iam_roles from net-vpc 2020-10-30 19:19:40 +01:00
Julio Castillo 405a3c23d5 Update project README 2020-10-30 19:06:20 +01:00
Julio Castillo 82a1fe3c20 Removing iam_roles from multiple modules
This commits removes the iam_roles variables from the modules:
 - artifact-registry
 - bigtable-instance
 - cloud-function
 - container-registry
 - endopoints
 - pubsub
 - source-repository
2020-10-30 18:58:07 +01:00
Julio Castillo 96dba2256e Remove iam_roles from secret_manager 2020-10-30 18:25:17 +01:00
Julio Castillo 53cb8359ee Remove *_roles variables in kms module 2020-10-30 17:58:45 +01:00
Julio Castillo fc5017cc24 Remove dependency hooks to net-vpc-peerings. 2020-10-30 00:19:28 +01:00
Julio Castillo b13a10efe5 Remove iam_roles from compute-vm module 2020-10-30 00:18:10 +01:00
Julio Castillo 1a7b9836ea Update folder and service account READMEs 2020-10-29 23:54:40 +01:00
Julio Castillo 78efb63b4a Remove iam_roles from project module 2020-10-29 23:51:34 +01:00
Julio Castillo 6e81125c6a Remove useless calls to toset 2020-10-29 23:29:41 +01:00
Julio Castillo 61d402fece Update gcs module to terraform 0.13 2020-10-29 23:26:03 +01:00
Julio Castillo 85fda5b1fe Remove iam_roles from service accounts, folder and organization modules 2020-10-21 09:37:05 +02:00
Julio Castillo 13ed799a8b Update service account module to Terraform 0.13 2020-10-20 22:36:03 +02:00
Julio Castillo 2e7876b4c7 Update folders module to Terraform 0.13
With this commit the folders module (now called simply 'folder') only
creates a single google_folder resource. Support for creating multiple
folders is no longer needed since Terraform 0.13 added for_each support
to modules.
2020-10-20 15:41:03 +02:00
Julio Castillo 7ab87d0790
Fix typo in iam-service-account README 2020-10-20 10:50:08 +02:00
Julio Castillo db330fe063 Add support for single-sided peerings. 2020-10-12 16:16:24 +02:00
Julio Castillo ab39c9e4d4 Update compute-vm variable documentation 2020-10-12 13:10:13 +02:00
Julio Castillo 2bef92da57 Fixes to `compute-vm` module 2020-10-12 12:26:00 +02:00
Julio Castillo 0b34b9fa71 Bring back firewall logging 2020-10-07 10:30:26 +02:00
Ludovico Magnocavallo 09301cf7bd
Bump Terraform version used in tests, increase pytest verbosity (#147)
* update Terraform version used for tests

* increase verbosity of test runs

* delete stale experimental cloud function module
2020-09-27 15:31:19 +02:00
Chinmay Dorlikar 9bd1d5bb79
Updated the main.tf for bigquery-datasets (#146)
Added the "depends_on" attribute for views to be created only after all the tables are created to avoid failure.
2020-09-27 15:16:09 +02:00
Ludovico Magnocavallo bd00eec1be
decouple cloudrun from istio in gke cluster module (#144) 2020-09-25 22:02:17 +02:00
Julio Castillo 5fd8720c7a
Add service project configuration options to project module (#142) 2020-09-24 10:41:44 +02:00
Luca Prete f2c80e17f1
[#138] Update copyright headers to 2020 (#139)
Co-authored-by: Luca Prete <lucaprete@google.com>
2020-09-23 11:07:03 +02:00
Sumeet Chaurasia bbb14886fd
provider version update (#140) 2020-09-23 10:09:41 +02:00
vanessabodard-voi 435d64d81a
Change bucket_policy_only into uniform_bucket_level_access in GCS module (#135)
* Change bucket_policy_only into bucket_policy_only

* Update changelog
2020-09-15 19:33:40 +02:00
Ludovico Magnocavallo 120e1be1d9 extend gcs module tests to cover new variables 2020-09-03 19:19:41 +02:00
Ludovico Magnocavallo 9e32b32b3d reformat GCS module and update README 2020-09-03 19:08:29 +02:00
vanessabodard-voi e8c227fdd6
Add bucket logging (#134)
* Add logging

* Improve syntax

* Add example

* Improve type for retention policy
2020-09-03 19:06:35 +02:00
Ludovico Magnocavallo 0265ba0951
Refactor net-address variables, add support for internal address purpose
* add support for internal address purpose
* update gcs module README
* refactor net address module interface and add tests
* add more examples in net-address README
2020-09-01 18:49:21 +02:00
vanessabodard-voi daf3dc41e7
Add retention policy (#133) 2020-09-01 17:48:02 +02:00
Aleksandr Averbukh d45934e544
Merge pull request #132 from terraform-google-modules/vpn-ha-optional-gateway
Make VPN Gateway creation optional for the net-vpn-ha module
2020-09-01 16:32:14 +02:00
Aleksandr Averbukh 4626dafcc8 Make VPN Gateway creation optional for the module. 2020-09-01 12:38:25 +02:00
Julio Castillo 21aee6f0aa Reference VPC name from module variable 2020-08-31 14:54:05 +02:00
Julio Castillo 067f072c26 Make VPC creation optional in `net-vpc` module 2020-08-31 14:09:28 +02:00
Ludovico Magnocavallo 86bee0ff70 update input variable table in dns module README 2020-08-29 11:16:42 +02:00
vanessabodard-voi 9c59a03052
Add the option to not create a DNS managed zone (#126)
* Add zone_create variable

* Update readme

* Update dns_keys
2020-08-29 11:09:57 +02:00
Julio Castillo 5ae489f50d
Add alias IP support in `compute-vm` (#127)
* Add alias IP support in `compute-vm`

* Fix tests

* add end to end tests for data solutions examples and fix example errors

* update changelog

* add missing boilerplate

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-08-29 10:12:30 +02:00
Julio Castillo 1c0dd4dd13
Fix project outputs.tf 2020-08-26 12:15:44 +02:00
Ludovico Magnocavallo 849b50b95b don't raise error on incremental destroys in cf module outputs 2020-08-17 12:46:04 +02:00
Ludovico Magnocavallo 2e644a3333 streamline gke module peering project id 2020-08-16 20:36:52 +02:00
Roberto Rojas a3962dcaf7
#123: Proposal to extend gke-module (#124)
* allows the use of shared VPC network

* adds configuration block for host project id and shared vpc

* changes based on issue discussion

* changes based on issue discussion
2020-08-16 20:32:36 +02:00
Ludovico Magnocavallo f62b9362a2
ILB for appliances example (#122)
* rename infrastructure folder to networking

* example WIP: VPCs

* move ip forwarding to its own variable in compute-vm module

* add per-instance metadata support to compute-vm module

* ipip tunnels on linux savepoint

* simple multinic gateways example

* remove stale files

* resolve conflicts

* update diagram

* rename folder

* use a template for gw cloud config, rename some resources and files

* Update README.md

* Update README.md

* add basic plan tests for all networking e2e examples

* fix test for foundations/environments e2e example

* fix shared vpc e2 example count error in gke node service account permissions

* use module path for assets in onprem e2e example

* use project id from module in ilb e2e example

* add mising boilerplates in tests

* run examples tests in ci

* update module's README

* rename ilb example

* Update README.md

* fix rp_filter configuration

* README

* Update README.md

* Update README.md

* Update README.md

* update CHANGELOG

* update CHANGELOG

* Update README.md
2020-08-15 10:12:43 +02:00
Ludovico Magnocavallo a008b1a561
Update README.md 2020-08-08 11:04:53 +02:00
Ludovico Magnocavallo 482f4464f8 depend feed id from IAM roles in pubsub module 2020-07-30 18:11:42 +02:00
chinmaydorlikar e6867b3486
Added google-beta provider for dataset-access resource and formatted the file (#118)
Co-authored-by: Chinmay Dorlikar <chinmay_dorlikar_ex@kdrp.com>
2020-07-28 18:28:59 +02:00
Ludovico Magnocavallo 9197093cb9
Update README.md 2020-07-24 15:06:11 +02:00
Ludovico Magnocavallo 3cad63285f
Add support for vpc connector and ingress settings to cloud-function (#116)
* add support for ingress/egress/vpc connector to cloud function

* refactor vpc connector support

* refactor ingress settings support

* fix vpc connector value

* fix vpc connector value
2020-07-24 08:55:58 +02:00
Ludovico Magnocavallo fc99ade009
Add support for logging in net-cloudnat (#115)
* add logging support to net-cloudnat

* use default for logging filter
2020-07-23 09:29:24 +02:00
Ludovico Magnocavallo dce2fca740
Support multiple zones in compute-vm module (#114)
* support multiple zones in compute-vm module

* update compute-vm variables in end-to-end examples

* update README examples
2020-07-18 06:39:14 +02:00
Julio Castillo 036b9ea950
Obey var.iam_billing_config.grant (#113)
* Update main.tf

* Update main.tf
2020-07-15 13:18:42 +02:00
Ludovico Magnocavallo 370eb67242 fix external IP reservation in compute-vm module 2020-07-10 17:04:53 +02:00
lcaggio ea72d4a884
Merge branch 'master' into vpc-sc 2020-07-10 07:29:21 +02:00
Lorenzo Caggioni 7cf3990d27 - Fixes based on PR comments
- Movig module under Security
 - Formatting TF files
2020-07-10 07:22:57 +02:00
Ludovico Magnocavallo 67d03fd07c
support Shared VPC in project module (#112) 2020-07-09 15:15:14 +02:00
Julio Castillo 569e52e12a
Add Shielded VM config option to compute-vm (#111)
* Add shielded config option to compute-vm

* Update CHANGELOG
2020-07-09 08:09:47 +02:00
Ludovico Magnocavallo 4beedc5ba8
Update README.md 2020-07-08 21:39:50 +02:00
lcaggio e07d45d407
Merge branch 'master' into vpc-sc 2020-07-07 11:00:09 +02:00
Lorenzo Caggioni 9073703a25 Update READMEs and CHANGELOG 2020-07-07 10:56:11 +02:00
Lorenzo Caggioni 31ac6ee094 Remove Project level VPC-SC handling. The configuration option is too
limited (for example: no dry_run mode supported).
2020-07-07 10:49:06 +02:00
Lorenzo Caggioni 39d2d90bcd Move VPC-SC to a separate module. 2020-07-07 10:23:26 +02:00
Lorenzo Caggioni 0d7f35b0ae Fix variable name based on PR feedback 2020-07-06 21:58:40 +02:00
Lorenzo Caggioni 43e4ffc95d Support Access Levels - Perimeters mapping 2020-07-06 18:35:42 +02:00
Ludovico Magnocavallo 9f547266e9 really fix external address reservation in compute-vm module 2020-07-06 18:32:41 +02:00
Ludovico Magnocavallo 6af350341f fix external address reservation in compute-vm module 2020-07-06 18:28:57 +02:00
Lorenzo Caggioni 3e2706be10 Add basic Access Level support 2020-07-06 18:12:25 +02:00
Lorenzo Caggioni 96808b89ff Add dry run mode support 2020-07-06 16:53:02 +02:00
Lorenzo Caggioni 35571096ca Update READMEs 2020-07-06 15:30:29 +02:00
Lorenzo Caggioni 07b3b5f4d0 Remove create/no_create logic. I will add it in a future PR. 2020-07-06 15:28:23 +02:00
Lorenzo Caggioni ccc4e0076a Merge branch 'vpc-sc' of https://github.com/terraform-google-modules/cloud-foundation-fabric into vpc-sc 2020-07-06 14:37:13 +02:00
Lorenzo Caggioni c414ca5505 Fixes based on PR comments:
- fix typos
 - use for_each
 - fix code layout
2020-07-06 14:30:25 +02:00
Ludovico Magnocavallo 29b34c0a2d
Update README.md 2020-07-04 10:07:45 +02:00
Ludovico Magnocavallo b4affad49d
Update README.md 2020-07-04 10:06:34 +02:00
Ludovico Magnocavallo f045d4334c
Update README.md 2020-07-04 10:04:53 +02:00
lcaggio 7acdfdc53b
Merge branch 'master' into vpc-sc 2020-07-02 19:07:17 +02:00
Lorenzo Caggioni bef0f77e67 Add Project level support for VPC-SC 2020-07-02 19:01:36 +02:00
Lorenzo Caggioni b0bb441df5 Add VPC-SC perimeters support 2020-07-02 18:12:34 +02:00
Sumeet Chaurasia ceb725bb84
Reserved External IP-Compute VM (#107) 2020-07-02 11:41:42 +02:00
Ludovico Magnocavallo 5fa4ea5518 regenerate variables/outputs tables in modules 2020-07-02 08:29:38 +02:00
vanessabodard-voi 5af022a3ee
refactor IAM additive bindings variables (#103)
* Invert the list for role/member mapping so that member is the key

* Add iam_additive_bindings to replace iam_additive_members and iam_additive_roles, change test suite accordingly

* attribute 'mode' added as it would error without

* Update Readme to reflect the new variable iam_additive_bindings

* test branch access

* iam_additive_bindings to replace iam_additive roles and iam_additive_members

* update foundation samples to new additive bindings format

* set bq dataset options in foundation environments to allow destroying

* trap exceptions raised during destroy in project module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-07-02 08:28:26 +02:00
Lorenzo Caggioni 8b252fc261 Fix 2020-06-30 18:05:37 +02:00
lcaggio 22f3451573
Merge branch 'master' into gcs-to-bq 2020-06-30 16:58:57 +02:00
Ludovico Magnocavallo c4850b8391
Cloud functions module (#102)
* wip

* cloud function module

* wip

* cloud function module

* update top-level READMEs and CHANGELOG

* update top-level READMEs and CHANGELOG

* remove duplicate boilerplate in variables

* implement suggestions in PR review
2020-06-29 08:05:44 +02:00
Ludovico Magnocavallo 21758f399d
Update README.md 2020-06-28 12:11:54 +02:00
Ludovico Magnocavallo d3fe52ef3a fix minimum required version of google-beta provider in dns module 2020-06-28 11:19:15 +02:00
Lorenzo Caggioni 9a4ec24093 First commit.
TODO:
 - fix error on destroy
 - improve robot service account handling
2020-06-26 21:45:41 +02:00
Ludovico Magnocavallo ec765857cb
Make project creation optional in project module (#99)
* make project creation optional in project module

* add variable to optionally configure project activation

* add explicit dependency on custom roles to additive bindings

* make parent variable optional

* add test for null parent

* fix custom roles output
2020-06-25 10:04:57 +02:00
lcaggio c5fc3798c6
Merge branch 'master' into endpoints 2020-06-24 18:19:03 +02:00
Lorenzo Caggioni 72c2b9a54a Fix Variable description 2020-06-24 18:13:45 +02:00
Lorenzo Caggioni c1eb78c746 Fix Example 2020-06-24 18:12:10 +02:00
Lorenzo Caggioni 9c85f9e647 Delete old folder 2020-06-24 18:08:09 +02:00
Lorenzo Caggioni 825a159990 Correct typos
Rename module to be consistent with the real name of the GCP service
Add link to the module on READMEs
2020-06-24 17:59:57 +02:00
Lorenzo Caggioni 6356ce628c Fixes based on comments on the PR 2020-06-24 15:52:30 +02:00
Lorenzo Caggioni 30da293c0a Fix Readme 2020-06-24 10:31:10 +02:00
Lorenzo Caggioni c4bbba4fbf Fixes 2020-06-23 18:22:54 +02:00
Lorenzo Caggioni 908371ab91 Module to handle Cloud Endpoints 2020-06-23 18:12:10 +02:00
Ludovico Magnocavallo 9f3500bff3 IAM bindings in compute-vm need to depend on the instance resource 2020-06-22 16:16:19 +02:00
Ludovico Magnocavallo e2a9e3d415
Update README.md 2020-06-19 11:16:22 +02:00
Ludovico Magnocavallo 6524563747
Add optional unmanaged instance groups to net-ilb (#98)
* add optional unmanaged instance groups to net-ilb

* depend health check creation on the health_check variable

* add example for self-managed group

* update changelog
2020-06-19 09:49:37 +02:00
Aleksandr Averbukh ddc2f9c20d
dns_keys output added to the dns module (#97)
* dns_keys output added to the dns module, so DNSSEC attributes like DS entry will be outputed if DNSSEC configuration is provided

* Fix confition for dns_keys data source
2020-06-17 11:43:46 +02:00
Ludovico Magnocavallo 7a100d08d4
Move top-level docker images folder to the onprem module (#96)
* move docker folder to the onprme module

* update CHANGELOG
2020-06-17 05:41:13 +02:00
Ludovico Magnocavallo ae2e4dc3ad interpolate vpc name in routes 2020-06-12 12:07:28 +02:00
Ludovico Magnocavallo c1c96cac7f interpolate gateway name in route name for static vpn 2020-06-11 15:51:25 +02:00
Ludovico Magnocavallo 25d3b2ebdd
add iam support to compute-vm module (#95) 2020-06-10 07:55:18 +02:00
Ludovico Magnocavallo 61bf03d143
Update README.md 2020-06-09 17:21:07 +02:00
Lorenzo Caggioni 1484118049 update top-level README
update modules/README
update CHANGELOG
2020-06-09 16:25:05 +02:00
Lorenzo Caggioni 2f97d246f6 Fix README 2020-06-09 16:03:10 +02:00
Lorenzo Caggioni 8d75a278a6 Fixes 2020-06-09 15:55:22 +02:00
Lorenzo Caggioni 9706d2c386 Add BigTable module 2020-06-09 02:40:26 +02:00
Julio Castillo 2e597e2c58
Add Network Endpoint Group module (#91)
* Add Network Endpoint Group module

* Update CHANGELOG

* Move neg to experimental

* Revert "Update CHANGELOG"

This reverts commit 9282932f88655089e642a9e9954504f19528621e.

* Revert README changes
2020-06-08 13:43:13 +02:00
Ludovico Magnocavallo cf79c65d3b
Set instance zone in net vpc route to avoid recreation (#90) 2020-06-07 18:06:15 +02:00
lcaggio 1b450fe444
Add Cloud KMS support to GCS module (#87)
* Add support to Cloud KMS

* Fixes

* Fix tests

* Fix tests

* - change variable name to be consistent with BQ module
 - remove output, not needed
 - change string default value to null

* use locals to pre-populate kms key variable for all names

* rename kms variable, fix prefix check in locals

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-06-05 21:59:34 +02:00
Ludovico Magnocavallo 474fd7364f
use "all" for admin firewall rule in net-vpc-firewall module 2020-06-05 21:24:28 +02:00
Ludovico Magnocavallo 4a40497ce6
Update README.md 2020-06-05 09:51:36 +02:00
Ludovico Magnocavallo eb4c1d5d98
Update README.md 2020-06-05 09:41:58 +02:00
Julio Castillo 99642be58a
Add option to use private GCR to cos-generic-metadata (#86) 2020-06-03 09:27:10 +02:00
Ludovico Magnocavallo 4dd927d8d7
KMS module refactoring (#85)
* first rewrite, untested

* validation fixes

* fix errors, rename variables, improve README, tested

* minimal kms module test

* README tweaks
2020-06-03 08:43:10 +02:00
Ludovico Magnocavallo af95bb3110
Update cloud-config.yaml 2020-06-02 10:14:03 +02:00
Julio Castillo c91769628b
Merge pull request #83 from terraform-google-modules/ludo-service-accounts-changes
Refactor service account module outputs
2020-06-01 11:30:57 +02:00
Ludovico Magnocavallo 778362cf95
Better service account outputs in project module (#82)
* rationalize project module product service accounts output

* fix typos in shared vpc example service accounts

* add extra robot service accounts

* update CHANGELOG
2020-06-01 09:32:47 +02:00
T.V.VIGNESH 6b0b147e7e
Added PD CSI Driver Addon support (#84)
* Added PD CSI Driver Addon support

Google supports CSI Driver for PD (https://cloud.google.com/kubernetes-engine/docs/how-to/gce-pd-csi-driver) which is also supported by TF Google Beta Provider (https://www.terraform.io/docs/providers/google/r/container_cluster.html#gce_persistent_disk_csi_driver_config).

Added the same support to this module.

* Added PD CSI Config to variables

The PD CSI config has been added to variables to support PD CSI Driver (https://www.terraform.io/docs/providers/google/r/container_cluster.html#gce_persistent_disk_csi_driver_config)
2020-06-01 07:57:14 +02:00
Ludovico Magnocavallo aaa80bb49b refactor service account module outputs 2020-05-31 09:39:03 +02:00
lcaggio 7f40aba4cd
Support Cloud KMS on Compute-VM module + Fixes (#79)
* * Add support to KMS disk encryption (boot and attached)
 * Fix Instance Group Example

* Fix

* * Fix image boot disk
 * Add example with disk encryption

* Fix Title

* Improve logic

* Fix Readme
Fix viariable description

* Update README.md

* update README variables/outputs table

* add change to CHANGELOG

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-05-30 08:57:21 +02:00
Ludovico Magnocavallo 476c41d333
Update README.md 2020-05-29 08:25:51 +02:00
Ludovico Magnocavallo 133623dee9
Update README.md 2020-05-29 08:08:09 +02:00
Ludovico Magnocavallo e2004d0c0d
Update README.md 2020-05-29 08:07:08 +02:00
Julio Castillo 840607d837
Fix another typo in GCS README 2020-05-26 12:11:27 +02:00
Julio Castillo f8cbfe9fbf
Update README.md 2020-05-26 12:10:02 +02:00
Julio Castillo e1ad77c6d9
Add Artifact Registry module (#81) 2020-05-26 12:03:15 +02:00
Ludovico Magnocavallo de6b4515c2
Update README.md 2020-05-26 07:21:52 +02:00
Julio Castillo 0f291fbde3
Add Container Registry module (#80) 2020-05-26 07:18:33 +02:00
Julio Castillo 4bf3a81463
Fix typo in folder README 2020-05-25 11:35:18 +02:00
Chris Taylor b75e6becf0
Correct the name used to reference the folders module (#78) 2020-05-22 19:47:50 +02:00
lcaggio 461662ad1d
First commit for Data Fusion module (#77)
* First commit for Data Fusion module

* Fix comments and improve ip_allocation logic.

* Add example

* generate variables and outputs table, fix example headings

* update year in boilerplates

* rename firewall variable, remove region from resource names

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2020-05-22 12:30:24 +02:00
Julio Castillo 2946d28727
Source repository module (#76)
* Source repository module

* Fix typos
2020-05-14 20:48:29 +02:00
Ludovico Magnocavallo b3cdca67de
Update README.md 2020-05-13 15:55:26 +02:00
Roberto Jung Drebes 39b827d0e3
Merge pull request #75 from terraform-google-modules/ludo-service-directory
New service directory module and sd zone type in DNS module
2020-05-13 13:58:59 +02:00
Ludovico Magnocavallo 4cf87d993a
Update README.md 2020-05-13 10:54:22 +02:00
Ludovico Magnocavallo 411795ecf3
Update README.md 2020-05-13 10:53:43 +02:00
Ludovico Magnocavallo cd3730393f
Update README.md 2020-05-13 07:54:46 +02:00
Ludovico Magnocavallo 835915c4e3
Update README.md 2020-05-13 07:54:03 +02:00
Ludovico Magnocavallo e85173e440 add DNS example to service directory 2020-05-12 20:26:34 +02:00
Julio Castillo 63f1f3e066 Add cluster CA certificate as output for gke-cluster 2020-05-12 19:17:46 +02:00
Ludovico Magnocavallo 88b124ddc8 first service-directory module implementation 2020-05-12 18:52:03 +02:00
Julio Castillo de9825310c Fix another gke-cluster dynamic block typo 2020-05-12 18:46:50 +02:00
Roberto Jung Drebes 324890073b
adds project_id to external gateway (#74) 2020-05-12 18:13:06 +02:00
Ludovico Magnocavallo da97405e31 add support for service directory zones to dns module 2020-05-12 13:35:13 +02:00
Ludovico Magnocavallo bd73e1ade9
New pubsub module (#73)
* pubsub module, untested

* fixed a few errors
2020-05-11 17:51:00 +02:00
Ludovico Magnocavallo f1924914af
Use flat source insted of submodule in envoy cos module (#72)
* use fabric format for in/out table in cos-generic-metadata module's README

* switch to flat modulespace in envoy cos module
2020-05-11 16:54:32 +02:00
Ludovico Magnocavallo 6415940c76 use shared instance files in nginx cos module 2020-05-10 16:02:22 +02:00
Ludovico Magnocavallo f655a9bb67 fix boilerplate in new envoy module 2020-05-10 13:02:12 +02:00
Roberto Jung Drebes 27afe13235
Envoy with Traffic Director cloud-config (#70) 2020-05-10 13:00:18 +02:00
Ludovico Magnocavallo e3d756c5ee add TODO to gcs module 2020-05-10 11:58:55 +02:00
Ludovico Magnocavallo b3df6598d4 switch project service from resourceviews to container in examples 2020-05-07 21:36:37 +02:00
Julio Castillo 718f5ceeac Fix gke-nodepool advanced options 2020-05-07 20:28:37 +02:00
Ludovico Magnocavallo fa29a8e26f
Fix health checks in net-ilb and compute-mig modules (#69)
* fix health checks in ilb module

* fix health check in compute-mig and add basic tests
2020-05-07 07:37:15 +02:00
Eric Hole a51c8be101
Adds clarification to gke-cluster module for node_config (#68) 2020-05-07 06:48:04 +02:00
Roberto Jung Drebes 14ec791556
subnets with the same name in different regions (#67)
* support for subnets with the same name in different regions

* fix net-vpc tests
2020-05-04 08:25:53 +02:00
Ludovico Magnocavallo 711f113cf0 add support for environment vars in experimental cf module 2020-05-04 07:48:37 +02:00
Ludovico Magnocavallo e3a1a8da4b change access variables in bigquery-dataset to support dyamic values 2020-05-03 15:10:36 +02:00
Ludovico Magnocavallo b684718353
Update README.md 2020-05-03 11:46:04 +02:00
Ludovico Magnocavallo da579eb056
Update README.md 2020-05-03 11:43:11 +02:00
Ludovico Magnocavallo c7bffbbac1
New `bigquery-dataset` module (#66)
* new bigquery-dataset module

* update README

* update top-level READMEs

* update CHANGELOG
2020-05-02 17:33:48 +02:00
Ludovico Magnocavallo 15d859d370 add TODO to bigquery module README 2020-05-02 10:25:41 +02:00