Commit Graph

5464 Commits

Author SHA1 Message Date
Julio Castillo cb9945a83d
Allow description to be set for FAST-managed tags (#2417) 2024-07-09 18:55:20 +02:00
Aurélien Legrand 59657415be
Adding TPU limits for GKE cluster node auto-provisioning (NAP) (#2406)
* Adding TPU limits for GKE cluster node auto-provisioning (NAP)

* rework of the cluster autoscaling configuration

* updated README

* fixing README

* Update modules/gke-cluster-standard/README.md

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>

* fixing indentation

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-07-09 09:26:30 +00:00
apichick c81bc84e3a
Added certificate_manager_certificates to app load balancers (#2415)
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint

* Added certificate_manager_certificates to app load balancers
2024-07-09 07:36:06 +02:00
Wiktor Niesiobędzki 01904c3397 Fix CFv2 tests 2024-07-08 16:14:21 +02:00
Wiktor Niesiobędzki 1d76bfc3ff Add E2E tests for Cloud Functions and fix perma-diff 2024-07-08 16:14:21 +02:00
Jay Bana a514ce0ef5
[FAST] Housekeeping in CICD workflow templates and extra stage (#2412)
* Sync GitHub workflow template in assets with rest of the repo

* Remove trailing whitespace in 1-tenant-factory GitHub workflow template

* Update actions/github-script version as per NodeJS deprecation warnings

* Remove redundant Source Repo templates given #2352

* Update gh file content to handle base64 png in line with #2286

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-07-08 14:40:32 +02:00
Ludo 8149e6e669
update changelog 2024-07-08 13:37:04 +02:00
Jay Bana 1aad2c682c
Fix IAM bindings to impersonate resman CICD SAs at bootstrap stage (#2411) 2024-07-08 11:58:41 +01:00
Luca Prete 1bd3380a3f
Adds support for external SPGs to net-firewall-policy (#2409)
- Added support to reference external SPGs in factories in net-firewall-policy
- Added missing tls_inspect argument to hierarchical and global network firewall policies
- Fixed regional firewall policy rules, removing security profile groups and ngfw actions (given they're not supported)
- Updated copyright
2024-07-06 10:33:09 +00:00
Wiktor Niesiobędzki afa6e7425c
Test different versions of Terraform (#2399)
Add capability to run tests using terraform version 1.5.7 and OpenTofu. 

Automatic checks are run with  Terraform 1.7.4 and OpenTofu 1.7.2, it should be possible to override terraform version when Tests workflow is run manually.
2024-07-05 13:21:41 +02:00
Julio Castillo 45fd48db42
Allow project factory projects to override name (#2407) 2024-07-04 20:14:04 +02:00
Aurélien Legrand 1f07cb72f2
Adding placement_policy for GKE nodepools (ex: GPU compact placement or TPU topology) (#2405)
* Adding placement policy to gke-nodepool module

* Adding placement policy for GKE nodepool

* updated README

* variables for placement_policy

* formatting

* Updated README

* fixing typo

* removing useless trys

---------

Co-authored-by: Aurélien Legrand <legranda@google.com>
2024-07-03 10:21:30 +00:00
Elia 287fee275c
Documented new GCVE design options (#2404) 2024-07-02 16:46:55 +02:00
Sudhir 3bb03c99f8
gitlab workflow fixes #2401 (#2402)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-07-01 09:42:54 +00:00
Wiktor Niesiobędzki e58c1b8892 Add info about roles for connectors service agent 2024-06-30 20:17:50 +02:00
Wiktor Niesiobędzki 22684f49e7 Fix tutorial error.
Without versions override it fails with:
 Error: Failed to query available provider packages
│
│ Could not retrieve the list of available versions for provider hashicorp/kubectl: provider registry registry.terraform.io does not have a provider named registry.terraform.io/hashicorp/kubectl
│
│ All modules should specify their required_providers so that external consumers will get the correct providers when using a module. To see which modules are currently depending on hashicorp/kubectl, run the following command:
│     terraform providers
2024-06-29 08:55:33 +02:00
Julio Castillo 4e8adc9c43
Update `modules/artifact-registry` with newly-released features. (#2396)
Fixes #2377
2024-06-28 19:52:25 +02:00
Ludovico Magnocavallo 198fa01159
Add support for SSL policy to net-lb-app-int module (#2393) 2024-06-28 09:03:10 +02:00
apichick 1174604efe
Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint (#2392) 2024-06-27 19:48:24 +02:00
apichick 00d4673093
Added certificate-manager module (#2387) 2024-06-27 13:05:35 +00:00
Aleksandr Averbukh 85c1b7c156
Add AssuredWorkload support to the folder module (#2390)
* Feat: Add AssuredWorkload support to the folder module

* Formatting

* Use square brackets to access list items

* Docs gen after adding an example to the readme

* Reorder variables

* Formatting

* Reordering outputs, formatting

* Remove try where not needed. Add IAM into the AW example and tests

* Fix tests

* Enable Assured Workloads in E2E tests

* Add compliance_regime and partner enum fields validation

* Rewording validation message for compliance_regime, partner fields

* Sort the list of allowed values alphabetically

* Make the organization dependant on testing environment

* fix tests

* Disable E2E for Assured Workflow example.

This example requires Access Transparency enabled on org level, even
chosing different regime, we need to have `parent` and `organization`
within the same hierarchy, which is not currently the case and requires
more rework of the test framework.

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-06-27 14:28:17 +02:00
Julio Castillo 07e519a8b7
Allow Cloud NAT to only use secondary ranges (#2384)
* Allow Cloud NAT to only use secondary ranges

* Fix secondary_ranges validation

* Fix linter
2024-06-27 08:05:45 +00:00
apichick 73d43b00db
Added missing links to firestore module is READMEs. (#2388)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-27 06:54:02 +00:00
Alejandro Leal 99dd335cdf Update tutorial.md 2024-06-27 07:36:19 +02:00
Alejandro Leal 0363e2cb80 Several wording and typos updates
Several wording and typos updates
2024-06-27 07:36:19 +02:00
apichick 00080cd840
Added firestore module (#2374) 2024-06-26 14:18:42 +02:00
apichick 3933a747fe
Fixes related to Apigee KMS keys (#2382)
* Fixes related to Apigee KMS keys

* tfdoc

---------

Co-authored-by: Ludo <ludomagno@google.com>
2024-06-26 06:12:26 +00:00
luigi-bitonti 750cff01cd
Added private_endpoint_subnetwork parameters to GKE module (#2380) 2024-06-25 16:16:00 +02:00
Diogo Teixeira 08ff3643da
Add forward_proxy_uri support (#2370)
Co-authored-by: apichick <mirene@google.com>
2024-06-25 07:50:19 +00:00
Ludovico Magnocavallo d70cdf8393
add wording for SCC Enterprise to FAST stage 0 (#2378) 2024-06-24 19:03:07 +02:00
apichick 6c54ab69db
Removed advertised_groups ALL_VPC_SUBNETS, ALL_VPC_SUBNETS as they are no longer supported (#2376)
Removed advertised_groups ALL_VPC_SUBNETS, ALL_VPC_SUBNETS as they are no longer supported
2024-06-24 07:15:19 +00:00
apichick 6358ba34e0
Minor fixes in workstations IAM (#2375) 2024-06-24 08:59:29 +02:00
apichick 73e286c0ab
Added spanner-instance module (#2372) 2024-06-23 17:25:22 +00:00
Dean Sorie 270f61a75a
Added expire_time option to the secret-manager module (#2373)
* Added expire_time option to the secret module

* Ran tfdoc to update the readme file

* Fixed a failed test, moved the expire_time variable to the top and ran tfdoc again
2024-06-23 17:20:10 +02:00
Ludovico Magnocavallo 0bb75f3ae1
support build service account in cloud function v2 module (#2371) 2024-06-21 20:19:29 +02:00
Wiktor Niesiobędzki bf3f2b9367
Add example, tests and fix for Google APIs PSC endpoint (#2369)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-20 12:44:43 +02:00
Sudhir e84d479741
Fix for plan not in sync when creating billing budgets in project factory #2365 (#2368) 2024-06-20 07:23:20 +02:00
luigi-bitonti 9b095a540e
Added additional range field to GKE standand and autopilot (#2366)
* Added additional range field to GKE standand and autopilot

* Bug fix

* Bug fix
2024-06-18 12:17:08 +00:00
Ludo b83b43b74b
update changelog 2024-06-16 09:50:23 +02:00
Ludo 250ea851fd
update changelog 2024-06-14 20:33:29 +02:00
Ludovico Magnocavallo f68e423c48
Relax dataproc master config type (#2364) 2024-06-14 16:19:57 +02:00
Wiktor Niesiobędzki 1f40f2e573 Add support for different endpoint types for Cloud NAT 2024-06-14 15:37:58 +02:00
Ludovico Magnocavallo d1f7210fa8
strip bucket name from bundle URI (#2362) 2024-06-14 12:31:01 +00:00
Ludovico Magnocavallo fa00deb747
Support GCS objects in cloud function modules bundles (#2361)
* cloud function v2

* cloud function v1

* blueprints
2024-06-14 11:44:01 +00:00
Ludovico Magnocavallo ea5e6dedc9
validate bundle, use pathexpand in cloud function modules (#2360) 2024-06-14 09:23:49 +02:00
Ludovico Magnocavallo cb5b36906c
don't compute checksum in cloud function module for static bundles (#2359) 2024-06-13 16:08:12 +00:00
Ludovico Magnocavallo 97d77d263b
support pre-made bundle archives in cloud function modules (#2358) 2024-06-13 14:58:23 +02:00
mdaddetta bbf81752a4
Add use_table_schema parameter for PubSub subscription to BigQuery (#2357) 2024-06-12 22:36:19 +00:00
Konrad Schieban 330fe0096b
Add GCVE Logging and Monitoring Blueprint (#2347)
---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-11 14:36:23 +00:00
Wiktor Niesiobędzki f0c83c4f91 Add Terraform installation step to meet the versions.tf requirements 2024-06-11 15:40:31 +02:00