Commit Graph

781 Commits

Author SHA1 Message Date
Julio Castillo 07249194dd Fix README 2022-10-06 15:52:09 +02:00
Julio Castillo 1955a61159 Make project shared vpc fields optional 2022-10-06 15:48:37 +02:00
Taneli Leppä b65beef20d
Merge branch 'master' into nginx-reverse-proxy-cluster 2022-10-04 15:39:09 +02:00
Taneli Leppä 4feb3514fd Added an example of a Nginx reverse proxy cluster using RMIGs. 2022-10-04 15:38:52 +02:00
Simone Ruffilli 201f6b1aab
Fixes NVA issue when health checks are not enabled (#853)
* Fixes NVA issue when health checks are not enabled

* Update cloud-config.yaml
2022-10-04 07:55:10 +02:00
Simone Ruffilli 5950797385
COS based simple networking appliance (#846) 2022-09-30 18:43:24 +02:00
Taneli Leppä 8072be5619 nginx-tls: only use hostname part for certificate as the FQDN might be too long (>64 chars). 2022-09-30 13:39:14 +02:00
ddaluka 9c2a53f7a9
Management of GCP project default service accounts (#844)
* Added change for default service account deprivilege setting

* Updated readme and variable name

* Updated readme and variable name
2022-09-29 15:10:07 +02:00
cmalpe 2e51bdd8c4 added root password support for MS SQL Server 2022-09-29 10:57:19 +00:00
Ludovico Magnocavallo 1842586241
Bjbloemker-google/master (#843)
* Add ability to add KMS encryption to google_compute_instance_template

* fix code block

Co-authored-by: BJ Bloemker <bjbloemker@google.com>
Co-authored-by: bjbloemker-google <109173391+bjbloemker-google@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-09-29 09:01:15 +02:00
Ludovico Magnocavallo fcf71b983e
refactor net-address modules for 1.3 (#840) 2022-09-28 14:10:05 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Krzysiek Mucha 6e90af2bc3
Add support for service_label property in internal load balancer (#834)
Co-authored-by: Krzysztof Mucha <kmuch@softserveinc.com>
2022-09-21 23:30:35 +02:00
Natalia Strelkova d6c6ae943e regional MySQL DBs - automatic backup conf 2022-09-21 08:14:24 +00:00
lcaggio bdb9086f19
Merge branch 'master' into lcaggio/artifact-jit 2022-09-20 11:06:08 +02:00
lcaggio 495a5bbfff Add Artifact registry Service Identity SA creation. 2022-09-20 10:36:12 +02:00
Arindam Sirohia eb73e13b67 Updated for each condition of binary authorization in gke-cluster module 2022-09-20 00:35:06 +05:30
Arindam Sirohia 489acfdb32 Added new binary_authorization argument in gke-cluster module 2022-09-20 00:09:59 +05:30
Julio Castillo 7a4298783a Removed old and unused modules 2022-09-15 16:50:11 +02:00
Julio Castillo 7e9173d35d Create fully recursive e2e test runner 2022-09-12 13:58:11 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Julio Castillo 67c031c41c Change `modules/project` service_config default 2022-09-09 09:23:09 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
Julio Castillo a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
lcaggio a253446406 First commit 2022-08-31 11:14:18 +02:00
Julio Castillo 0e65021802 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-30 20:06:47 +02:00
ddaluka 16e14fdb0a
Secret manager flag sensitive output (#786)
* Added sensitive output value

* Updated Readme

* updated readme
2022-08-29 13:22:52 +02:00
Taneli Leppä c798625868
net-glb: Added support for regional external HTTP(s) load balancing. (#775) 2022-08-27 22:58:11 +02:00
Roberto Jung Drebes 48fcfa8233
Merge branch 'master' into master 2022-08-24 16:23:03 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Roberto Jung Drebes 1bcfa51a40 fix doc 2022-08-24 14:41:27 +02:00
Roberto Jung Drebes a4752961db nginx-tls module 2022-08-24 14:37:53 +02:00
Roberto Jung Drebes 00f88730fe update compute-vm example 2022-08-24 12:14:10 +02:00
Roberto Jung Drebes 081e04fe2e fix envoy TD config for xDSv1.3 2022-08-24 10:44:05 +02:00
Roberto Jung Drebes 9597cabab7 fix service unit indent on cloud-config-container module 2022-08-23 21:12:09 +02:00
Natalia Strelkova ed68fb0179 typo fix (max_scale -> min_scale) 2022-08-23 15:43:07 +00:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo ff1563e078 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-11 12:04:35 +02:00
Alex Lo 307bda4fed
apigee-x-instance.ip_range cannot take Support CIDR (#727)
* Instance.ip_range cannot take Support CIDR

Current docs are incorrect. It is not possible to specify the Support range.

See https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.instances#Instance

> ipRange	
> string
> Optional. IP range represents the customer-provided CIDR block of length 22 that will be used for the Apigee instance creation. This optional range, if provided, should be freely available as part of larger named range the customer has allocated to the Service Networking peering. If this is not provided, Apigee will automatically request for any available /22 CIDR block from Service Networking. The customer should use this CIDR block for configuring their firewall needs to allow traffic from Apigee. Input format: "a.b.c.d/22", Output format: a.b.c.d/22, e.f.g.h/28"

* tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-08-11 09:55:39 +02:00
Ludovico Magnocavallo ea72c5bc29
Merge branch 'master' into fast/gke2 2022-08-10 17:18:49 +02:00
Ludovico Magnocavallo ed4d59a8b1
refactor cloud run module (#773) 2022-08-09 14:06:30 +02:00
Ludovico Magnocavallo 86d73ee686 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-09 14:04:46 +02:00
Alef Reis 97104c0098
Add support to a public access to cloudsql-instance (#754)
* feat: add support to a public access to cloudsql-instance

* doc: update cloudsql-instance doc changing the ipv4_enabled parameter description

* test: fix assertion test to ipv4_enabled
2022-08-09 13:42:42 +02:00
Ludovico Magnocavallo 7374c82dd6
Merge branch 'master' into fast/gke2 2022-08-06 08:57:53 +00:00
Ludovico Magnocavallo 086e4a2b2c
add egress / ingress policy example (#768) 2022-08-04 17:00:14 +02:00
Ludovico Magnocavallo 531acf3476 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-02 19:15:07 +02:00
Daniel Marzini 6314afb21e Fix gke-cluster enable_binary_authorization being deprecated 2022-08-02 18:26:53 +02:00
Miren Esnaola e6dbf9bf01 Shared vpc service fixes 2022-08-02 18:22:31 +02:00
Miren Esnaola 0920ac3877 Shared vpc service fixes 2022-08-02 18:21:08 +02:00
Ludovico Magnocavallo 45517045a2
Merge branch 'master' into fast/gke2 2022-07-30 13:53:48 +00:00
Ludovico Magnocavallo 3778d37d18
Fix gke hub module features condition (#761)
* fix features condition

* remove test output

* fix example tests

* fix module tests
2022-07-30 15:53:05 +02:00
Daniel Marzini e4de73febb Revert "fix mci integration in the gke-hub"
This reverts commit 171d0d1051.
2022-07-30 09:37:34 +02:00
Daniel Marzini 171d0d1051 fix mci integration in the gke-hub 2022-07-30 00:54:05 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
apichick 329b511ac3
Changed cluster id sensitivity (#756)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-25 16:13:04 +02:00
Ludovico Magnocavallo 92bd128287
remove key_algorithm from glb/ilb-l7 examples (#757) 2022-07-25 16:00:13 +02:00
apichick 4069e42b66
Merge branch 'master' into shared-vpc-host-dependency 2022-07-21 14:38:31 +02:00
Miren Esnaola f153ab4614 Added dependency on google_compute_shared_vpc_host_project.shared_vpc_host to project_id output and modified tests 2022-07-21 14:11:21 +02:00
Miren Esnaola 6275f1bafb Added gkehub.googleapis.com to jit services 2022-07-21 10:06:47 +02:00
Taneli Leppä 6f96f0af3c Fixed issue with missing project reference in Cloud DNS data source when creating a public zone. 2022-07-19 11:08:13 +02:00
Miren Esnaola 824353a42b Added servicemesh feature to GKE hub and included fleet robot service account in projectmodule 2022-07-15 17:58:39 +02:00
Seth Moon a8677ededc
Move Cloud Run VPC Connector annotations to template metadata (#735) (#737) 2022-07-13 21:06:28 +02:00
Julio Castillo 93acd595fe Merge branch 'master' into fast/gke2 2022-07-12 12:20:06 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo d9ea825ea5
add support for topic message duration (#732) 2022-07-12 09:23:23 +02:00
Ludovico Magnocavallo 1abfdacd56
Avoid setting empty IAM binding in subnet factory (#731)
* avoid setting empty IAM binding in subnet factory

* fix tests
2022-07-11 21:11:52 +02:00
Ludovico Magnocavallo 263cf96d81
fix #728 (#729) 2022-07-10 11:34:41 +02:00
Aleksandr Averbukh f3dd8692ba
Fix documentation for organization-policy module (#726) 2022-07-10 09:12:47 +02:00
Aleksandr Averbukh a1e34234ae Tf fmt for the org-policy module 2022-07-08 15:25:35 +02:00
Aleksandr Averbukh 9c942a68d6 More experimental definition to a separate file, so CICD does not rewrite it with default-versions.tf 2022-07-08 15:19:47 +02:00
Aleksandr Averbukh 9ec644d524 Mention of experimental feature in the readme file 2022-07-08 12:27:43 +02:00
Aleksandr Averbukh 63ac142005 Simplified module interface, proper data structure for policies 2022-07-08 12:24:18 +02:00
Aleksandr Averbukh e6d558e416 Add refs to the readme files. 2022-07-06 20:05:38 +02:00
Aleksandr Averbukh adac90d1bb Fix docs 2022-07-06 19:49:12 +02:00
Aleksandr Averbukh a34983b2e9 OrgPolicy module (factory) using new org-policy API, #698 2022-07-06 19:41:18 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
apichick ecee29820e
Merge branch 'master' into net_glb_ip_address 2022-07-01 18:59:28 +02:00
Ludovico Magnocavallo ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Abhishek Patil d224404424 when using managed prometheus or passing monitoring config there is error thrown as Error: googleapi: Error 400: Cannot specify logging_config or monitoring_config together with logging_service or monitoring_service., badRequest which is resolved using the fix 2022-06-29 14:54:05 +05:30
Ludovico Magnocavallo 5982fe89ff as developed with Julio 2022-06-28 17:33:54 +02:00
Julio Castillo cf76744f95 Fix addons for autopilot clusters, add tests for gke-cluster.
Fixes second part of #702
2022-06-28 12:24:17 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Julio Castillo b6f0c1ae2b Add `consumer_accept_list` to `apigee-x-instance`
Fixes #701
2022-06-27 10:01:31 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Miren Esnaola 0cf6f1d3eb Modified reserved IP address outputs 2022-06-22 13:14:28 +02:00
Ludovico Magnocavallo 3227bd13ce
Merge branch 'master' into binauthz 2022-06-18 08:54:16 +02:00
Miren Esnaola 2e9fdea1a4 Binary authorization module and example 2022-06-17 16:09:12 +02:00
Ludovico Magnocavallo 943d6d431e
Revert "Binary authorization module and example" (#686) 2022-06-17 12:32:42 +02:00
Julio Castillo 4c72ee701b
Merge branch 'master' into binauthz 2022-06-17 11:17:36 +02:00
Ludovico Magnocavallo ee23694fed revert service account modules changes to outputs 2022-06-16 23:09:35 +02:00
Ludovico Magnocavallo 6d8f3f7e22 depend service account outputs on iam roles 2022-06-16 22:16:20 +02:00
Ludovico Magnocavallo cbf008fed5
add support for secrets (#684) 2022-06-16 16:34:46 +02:00
Miren Esnaola 073196c56e Binary authorization module and example 2022-06-16 12:29:26 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Julio Castillo 110d94067d Squashing relevant changes from fast-dev-gke-marzi
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
Julio Castillo 9bcae7b180 Enable WIF issuer in gke-hub 2022-06-08 11:42:04 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Ludovico Magnocavallo 5e8b06fc85
Initial version of the Contributor's Guide (#666)
* fix IAM in examples

* WIP

* fix service identities IAM example

* design principles

* toc anchors

* fix ordering

* style guide

* checks

* example tests

* tests and tools

* fix project example test

* address typos

* address comments

* address last comments
2022-06-06 15:12:28 +02:00