Commit Graph

5464 Commits

Author SHA1 Message Date
Ludovico Magnocavallo dc686c3a84
Remove default location from gcs module (#2303)
* gcs module

* blueprints/apigee/bigquery-analytics

* tfdoc

* pubsub README md syntax
2024-05-24 07:02:33 +00:00
Wiktor Niesiobędzki af814505be
Add AlloyDB service for e2e tests harness (#2302) 2024-05-23 11:44:40 +02:00
Ludo c128f4c110
Merge branch 'master' of github.com:GoogleCloudPlatform/cloud-foundation-fabric 2024-05-23 09:46:32 +02:00
Ludo 3cfd312e32
update changelog 2024-05-23 09:46:26 +02:00
Simone Ruffilli 3fe754167e FAST: Clarify max prefix len for tenant factory 2024-05-23 09:43:23 +02:00
Simone Ruffilli b55e9320ca
Update README.md 2024-05-23 08:44:07 +02:00
Ludovico Magnocavallo 980011806c
fix permadiff in cloud nat module (#2301) 2024-05-23 08:38:03 +02:00
Ludovico Magnocavallo ef5178c929
add support for shared vpc host to project factory (#2300) 2024-05-22 07:56:34 +00:00
simonebruzzechesse 1e149c18fc
New alloydb module (#2285)
* add alloydb module

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-22 09:40:25 +02:00
simonebruzzechesse 10ae9bc824
New extra stage for FAST gitlab setup (#2232)
* new extra stage for gitlab setup

* removed wrong link

* small fixes README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-22 09:17:14 +02:00
Peter Brumblay a04d63e991
Avoid unnecessary terraform plans for closed (unmerged) PRs (#2294)
* Avoid unnecessary terraform plans for closed (unmerged) PRs

* fix: also update templates copied to avoid Windows symlink problems.

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-21 13:03:07 +00:00
Wiktor Niesiobędzki 3368be51bd Adjust list of policies to official docs 2024-05-21 11:27:57 +02:00
Ludovico Magnocavallo be9214f99a
add support for tenant factory CI/CD (#2297) 2024-05-21 10:39:47 +02:00
dependabot[bot] 524390b641
--- (#2296)
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-21 07:20:53 +00:00
Ricardo Godoy 79b36b614b
IPS support for Firewall Policy (#2291)
* Adding apply_security_profile_group as action option and be able to
provide a security_profile_group.

* Removing default null for optional variable.

* Updating README.

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-05-21 04:38:43 +00:00
Wiktor Niesiobędzki 1ecd637932
Internet NEG for net-lb-app-int (#2293)
Internet NEG for net-lb-app-int
2024-05-20 21:12:39 +02:00
Luca Prete 0afaa84026
[FAST] fix: tenant-factory logging bucket project (#2292) 2024-05-20 16:51:12 +00:00
simonebruzzechesse 79af34b69e
Add wif permissions to bootstrap tf SA (#2290)
* add wif permissions to bootstrap tf SA
2024-05-20 18:15:23 +02:00
Ludovico Magnocavallo 98126f2ab8
Update README.md 2024-05-20 07:55:42 +02:00
Ludovico Magnocavallo 8e8ff7825c
Update README.md 2024-05-20 07:54:31 +02:00
Ludovico Magnocavallo 116c1292ab
Update README.md 2024-05-20 07:54:03 +02:00
Ludovico Magnocavallo 32907924e1
update diagrams (#2289) 2024-05-18 23:53:49 +02:00
Ludovico Magnocavallo db44be9803
Ignore test resource data in new network stage, split out fast variables (#2288)
* ignore test resource data, split out fast vars

* tfdoc
2024-05-17 15:30:57 +02:00
Ludo 92f88d6cbf
update changelog 2024-05-17 12:09:37 +02:00
Ludovico Magnocavallo 8014121be1
switch stages 0-1s to excalidraw diagrams (#2286) 2024-05-17 09:10:13 +00:00
Simone Ruffilli 21f3b733ab
FAST: Cleanup/harmonization of Simple and NVA net stages (#2287)
Cleanup/harmonization of Simple and NVA net stages
2024-05-16 16:49:15 +03:00
Simone Ruffilli 887c7e7926
Unify VPN and Peering FAST stages (#2284)
* Unify VPN and Peering FAST stages
2024-05-16 12:18:32 +03:00
Ludovico Magnocavallo 7a5dd4e6db
FAST: add top-level folders and restructure teams/tenants in resman (#2254)
* remove teams and tenants from resman

* move fast features to stage 1, fix test inventories

* folders

* fix factory, add top level folder resources to outputs

* tfdoc

* stage 0 log sink defs

* tfdoc

* enable toc in resman readme

* simple tenants

* fast compatibility automation and logging

* testing fast-compatible tenants

* testing fast-compatible tenants

* tfdoc

* remove mt stages

* remove tests, fix links

* disable tflint

* fast tests

* make organization conditional in resman

* check names tool

* export real prefix to tfvars, prevent destroy errors

* prefix validation

* fix billing account export format

* tfdoc

* root node folder

* resman changes

* tenant resman roles

* first apply of tenant resman

* tenant log sinks in stage 1

* fix test vars

* tfdoc

* tenant vpc-sc access policy

* fix tests expected values

* tenant CI/CD

* identity providers

* wif

* tfdoc

* add comments to identity locals

* full-feature tenant resman apply

* tenant billing IAM

* stage test

* fix CI/CD comments

* tenant net stage verified

* tenant sec stage verified

* fix test

* README work

* tfdoc

* README

* README rewording

* README rewording

* tfdoc

* FAST excalidraw

* review comments

* diagram review changes

* add iam log sink for tenants

* remove redundant try from security stage

* Implement tflint-fast in Python driven by tftest.yaml files

* tflint

* test ci changes

* revert linting changes

* disable tflint for fast

* Create junit-style report for FAST tflint

* Remove junit-reporter

* YAPF tflint-fast.py

* Output tflint FAST to job summary

* Step summary

* Disable step_summary as output is not useful

* ignore tflint warning

* re-enable tflint on FAST

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-05-15 09:17:13 +00:00
Ludo d3137be655
update changelog 2024-05-15 11:05:22 +02:00
Ludo 6c06adb96c
prepare changelog for release 2024-05-15 10:59:49 +02:00
Simone Ruffilli d3ffcc2b1c
Disable reserved_internal_range in net-vpc due to provider bug (#2282) 2024-05-15 05:46:18 +00:00
Ludo 014a36d4b6
update changelog 2024-05-14 21:54:34 +02:00
Ludo 5427bfffa9
bump release in changelog 2024-05-14 21:51:28 +02:00
Ludo 09025eb895
update changelog 2024-05-14 21:49:57 +02:00
dependabot[bot] 8a9eb0f493
Bump express (#2278)
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2)

---
updated-dependencies:
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-14 21:30:35 +02:00
Simone Ruffilli 9a26fe8635
Add support for reserved_internal_range in net-vpc (#2275)
Adds support for reserved_internal_range to net-vpc
2024-05-14 22:19:45 +03:00
apichick f41d8059ea
Added missing apigee org attributes to apigee x foundations blueprint (#2277) 2024-05-14 18:48:05 +00:00
dependabot[bot] dfbb2c0bc0
Bump protobufjs, @google-cloud/logging-bunyan and @google-cloud/monitoring (#2279)
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 7.2.6 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@google-cloud/logging-bunyan](https://github.com/googleapis/nodejs-logging-bunyan) and [@google-cloud/monitoring](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-monitoring). These dependencies need to be updated together.


Updates `protobufjs` from 7.2.4 to 7.2.6
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.2.4...protobufjs-v7.2.6)

Updates `@google-cloud/logging-bunyan` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/googleapis/nodejs-logging-bunyan/releases)
- [Changelog](https://github.com/googleapis/nodejs-logging-bunyan/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/nodejs-logging-bunyan/compare/v5.0.0...v5.1.0)

Updates `@google-cloud/monitoring` from 3.0.5 to 4.0.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-monitoring/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/kms-v4.0.0/packages/google-cloud-monitoring)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-type: indirect
- dependency-name: "@google-cloud/logging-bunyan"
  dependency-type: direct:production
- dependency-name: "@google-cloud/monitoring"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-14 20:37:16 +02:00
Ludo c494715e9a
Merge branch 'master' of github.com:GoogleCloudPlatform/cloud-foundation-fabric 2024-05-14 17:13:06 +02:00
Ludo 95d0cccff4
update changelog 2024-05-14 16:54:51 +02:00
apichick ff6f6bb32a
Added apigee-x-foundations blueprint (#2274) 2024-05-14 14:53:38 +00:00
Ludo c854057bef
update changelog 2024-05-14 15:01:43 +02:00
luigi-bitonti a14ed9add2
Cloud function CMEK key support (#2270)
* Added support to kms key

* Updated doc

* Fix variable description.

* Updated README

* Cloud function v2 integration with kms

* Fix variables description

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-14 12:56:10 +00:00
simonebruzzechesse 4d1d3c6811
New Bindplane cloud-config-container setup (#2272)
* new bindplane cloud-config-container setup
2024-05-14 14:45:39 +02:00
Ludovico Magnocavallo e4941c27f2
Implement the full IAM interface for tags (#2269)
* IAM authoritative bindings in org module

* remove extra newline

* organization module

* project module

* tfdoc
2024-05-13 20:18:51 +02:00
Ludovico Magnocavallo 604920dec9
add logging settings to folder module (#2268) 2024-05-13 09:24:17 +02:00
Wiktor Niesiobędzki af253c9702
Fix 0-bootstrap iam_by_principals not taking into account all principals (#2267)
* Fix 0-bootstrap iam_by_principals not taking into account all principals
* Add test-case for iam_by_principals for 0-bootstrap stage

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-12 21:02:04 +02:00
Wiktor Niesiobędzki 6a3c7fe444
CloudSQL PSC Endpoints support (#2242)
* Add PSC endpoints consumers to net-address
* Cloud SQL E2E tests
2024-05-12 12:00:39 +02:00
Wiktor Niesiobędzki 35a17a46ba Fix failing E2E tests 2024-05-11 17:29:35 +02:00
Jan Van Bruggen 5b3ed10cda
Fix bug from output typo in new project-factory module (#2264)
`local.folders` is just a map of var-based keys to string manipulations on those keys, while `local.hierarchy` is the seemingly-intended map of var-based keys to generated IDs/numbers.

see
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L32
vs.
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L39

Thank you for recently developing this convenient module!
2024-05-10 22:19:35 +00:00