Commit Graph

226 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 884cb8b4bf
Ensure all modules have an `id` output (#1410)
* net-vpc

* a-d

* complete modules

* fix error
2023-06-02 16:07:22 +02:00
Julio Castillo fddf8b52bc Fix sort order 2023-05-22 19:11:33 +02:00
Julio Castillo 3e67fc00ca Add default Cloud Build SA to project module 2023-05-22 19:11:33 +02:00
Alejandro Leal 6a89d71e96
Update to multiple README.md (#1379)
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
Bob Idle 94589efc34
Fix external documentation links (#1347) 2023-05-02 05:26:58 +00:00
lcaggio edf67fc5d0 First commit 2023-04-18 17:32:15 +02:00
Fawzi 4722efea40 bump provider versions 2023-04-11 22:18:31 +10:00
Ludovico Magnocavallo 865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider (#1306)
* add support for new attributes to bigquery module

* bump provider versions
2023-04-05 14:22:52 +00:00
Julio Castillo 7135c9015f Add boilerplate 2023-03-30 09:36:14 +03:00
Julio Castillo b503bde544 Load all service agents identities from yaml
Source: https://cloud.google.com/iam/docs/service-agents
2023-03-30 09:36:14 +03:00
Wiktor Niesiobędzki c76e95e7e8
Add Cloud Batch service identity (#1294) 2023-03-30 08:05:12 +02:00
Wiktor Niesiobędzki 58bc576ddb Add dataplex SA 2023-03-27 07:37:40 +00:00
Ludovico Magnocavallo 79a6e9b191
pin local provider (#1256) 2023-03-16 10:59:06 +00:00
Julio Castillo c82f142d2d Delay creation of SVPC host bindings until APIs and JIT SAs are done 2023-03-14 14:51:17 +01:00
lcaggio cc6ee44759 Add aiplatform robot service account 2023-03-09 08:17:26 +01:00
lcaggio e213f156ad Fix Jit notebook service account. 2023-03-08 16:06:27 +01:00
Dan Farmer 52eb83758f Fix compute-vm:CloudKMS test for provider>=4.54.0
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
  `google_compute_disk.disks["attached-disk"]` (see
  hashicorp/terraform-provider-google#4448)
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
  will now fail with <4.54.0, which do not return `rsa_encrypted_key`
  * Updated the whole repo on advice from @ludoo
2023-02-28 15:10:22 +00:00
Valerio Ponza 36e6367a5c adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:11:35 +00:00
Valerio Ponza 7670a6009f adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:05:11 +00:00
Julio Castillo a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo 62834ca83a Update READMEs 2023-02-21 15:49:16 +01:00
Julio Castillo 6b767c9035 Simplify org policies data model in resman modules. 2023-02-21 15:49:16 +01:00
Julio Diez 4a9ce1c5ce
Update README
Remove unused field
2023-02-21 14:05:03 +01:00
Wiktor Niesiobędzki e64e8db20d Allow additive IAM grants by robots name
Regreatablly member name will be known after apply, hence changes in the
tests
2023-02-16 14:39:21 +01:00
Ludovico Magnocavallo 98a08c159a Update README.md 2023-02-11 15:52:47 +01:00
Wiktor Niesiobędzki 9395fbc822 Add documentation about JIT-ed service accounts 2023-02-11 15:52:47 +01:00
Julio Castillo 08f2540872 Bump provider version 2023-02-07 15:59:29 +01:00
Wiktor Niesiobędzki 1a657b31d3 Bump beta provider to 4.48
This is the first version that supports `gateway_api_config` block
2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 135f01f191 Add aditional Multi-Cluster related services 2023-01-29 15:50:24 +01:00
Ayman Farhat edd3a82453
Include cloudbuild API in project module (#1116)
* Include cloudbuild API in project module

* Increase number of resources
2023-01-27 21:38:01 +01:00
lcaggio 07a7be29e3 Add shared-vpc support on Data Playgroud blueprint 2023-01-19 00:33:31 +01:00
Julio Castillo 065b1471a8 Reorder org policy rules 2023-01-03 16:52:31 +01:00
Israel Herraiz 7df527e1ef Bump versions EVERYWHERE 2022-12-23 00:06:42 +01:00
Julio Castillo 4b77e484b1 Migrate project module to new tests 2022-12-18 14:00:19 +01:00
Julio Castillo e700a27079 Enforce terraform fmt in examples 2022-12-18 14:00:19 +01:00
Julio Castillo 513fdfe91a Make directive for supporting files in examples more explicit 2022-12-18 14:00:19 +01:00
Julio Castillo e629a997d1 Only set partitioned table when sink type is bigquery
Fixes 990
2022-11-22 15:48:48 +01:00
Julio Castillo 2cd74823b1 Generate files based on readme contents 2022-11-18 17:48:52 +01:00
Julio Castillo b2510ea4cf Fix org policies factories 2022-11-18 17:48:52 +01:00
Julio Castillo 5cfa1062cc Ensure inline README file match fixture files 2022-11-18 17:48:52 +01:00
Julio Castillo 7be3288cc7 Add tests for factory examples 2022-11-18 17:48:52 +01:00
Miren Esnaola 3501d20785 Apigee module and blueprint 2022-11-16 19:49:26 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Natalia Strelkova d96f95c2b6 cannot instead of can not 2022-11-11 11:56:47 +00:00
Natalia Strelkova d5d1d9eb34 terraform formatting fixed 2022-11-10 15:11:38 +00:00
Natalia Strelkova 68c3b13d6a prefix variable consistency across modules 2022-11-10 15:05:53 +00:00
Julio Castillo 649bedc291
Update README.md 2022-11-03 13:19:02 +01:00
Julio Castillo e29957c394
Update README.md 2022-11-03 13:18:21 +01:00
Julio Castillo 4b278a1533 Update variable description 2022-11-03 12:35:50 +01:00
Julio Castillo f64c43e893 Add org policy factory example 2022-11-03 12:12:50 +01:00
Julio Castillo 3e18575fad Add factory support for new org policies 2022-11-03 11:41:53 +01:00
Julio Castillo 38e761c3a8 Add test that ensures the implementation of org policies is consistent 2022-11-02 10:41:38 +01:00
Ludovico Magnocavallo 8c51a2a386
Enable org policy service and add README notice to modules (#936)
* enable org policy service and add README notice to modules

* fix tests
2022-11-01 14:25:07 +01:00
Julio Castillo ad420138ad Fix readme examples 2022-10-28 17:49:44 +02:00
Julio Castillo f44f4a74dc Fix module tests 2022-10-28 17:49:44 +02:00
Julio Castillo b23d07b0c6 Update project/folder/module to use new org policies API and tf1.3 optionals. 2022-10-28 17:49:44 +02:00
Julio Castillo 1a3bb25917 Update provider version (needed for dns logging support). 2022-10-25 12:15:02 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 07249194dd Fix README 2022-10-06 15:52:09 +02:00
Julio Castillo 1955a61159 Make project shared vpc fields optional 2022-10-06 15:48:37 +02:00
ddaluka 9c2a53f7a9
Management of GCP project default service accounts (#844)
* Added change for default service account deprivilege setting

* Updated readme and variable name

* Updated readme and variable name
2022-09-29 15:10:07 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
lcaggio 495a5bbfff Add Artifact registry Service Identity SA creation. 2022-09-20 10:36:12 +02:00
Julio Castillo 67c031c41c Change `modules/project` service_config default 2022-09-09 09:23:09 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
Julio Castillo a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo 531acf3476 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-02 19:15:07 +02:00
Miren Esnaola e6dbf9bf01 Shared vpc service fixes 2022-08-02 18:22:31 +02:00
Miren Esnaola 0920ac3877 Shared vpc service fixes 2022-08-02 18:21:08 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
apichick 4069e42b66
Merge branch 'master' into shared-vpc-host-dependency 2022-07-21 14:38:31 +02:00
Miren Esnaola f153ab4614 Added dependency on google_compute_shared_vpc_host_project.shared_vpc_host to project_id output and modified tests 2022-07-21 14:11:21 +02:00
Miren Esnaola 6275f1bafb Added gkehub.googleapis.com to jit services 2022-07-21 10:06:47 +02:00
Miren Esnaola 824353a42b Added servicemesh feature to GKE hub and included fleet robot service account in projectmodule 2022-07-15 17:58:39 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Ludovico Magnocavallo 5e8b06fc85
Initial version of the Contributor's Guide (#666)
* fix IAM in examples

* WIP

* fix service identities IAM example

* design principles

* toc anchors

* fix ordering

* style guide

* checks

* example tests

* tests and tools

* fix project example test

* address typos

* address comments

* address last comments
2022-06-06 15:12:28 +02:00
Ludovico Magnocavallo ab646f38ed
Bump provider versions to >= 4.17.0, terraform to >= 1.1.0 (#634)
* bump provider versions to >= 4.17.0, terraform to >= 1.1.0

* bump teraform version in lint check, edit CHANGELOG
2022-04-17 13:55:40 +02:00
Ludovico Magnocavallo a34823e2d0
Add monitoring notification service identity to project module (#630)
* add monitoring notification service identity

* linting
2022-04-15 01:59:00 +02:00
lcaggio 15cdd179c6
Merge branch 'master' into lcaggio/sql-kms 2022-04-13 09:12:48 +02:00
Ludovico Magnocavallo 420c4de437
Update README.md 2022-04-13 09:10:56 +02:00
Ludovico Magnocavallo 4e1d06fd75
Update README.md 2022-04-13 09:08:01 +02:00
Ludovico Magnocavallo 874e9a57c7
Update README.md 2022-04-13 09:06:18 +02:00
Ludovico Magnocavallo 53c9431c98
Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 09:05:28 +02:00
Julio Castillo 1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Lorenzo Caggioni c7c77541fb Add KMS on CloudSQL module 2022-04-12 19:01:34 +02:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
apichick ef1542c1f1
Fixed problem when destroying shared VPC host project (#582) 2022-03-16 07:34:09 +01:00
Ludovico Magnocavallo 0b5ed8b7ef
Add support for resource management tags and tag bindings (#552)
* organization module

* folder module

* project module

* fix project binding

* use id instead of name for references

* kms module

* compute-vm

* fix compute-vm
2022-02-20 11:14:18 +01:00
Julio Castillo ca7dc0e7a2 Add service account prefix to member bindings 2022-02-09 18:22:27 +01:00
Ludovico Magnocavallo 40cb46e1cc
Add support for Shared VPC service IAM to project module (#525)
* project module changes

* fix examples

* add comments in module code

* re-enable nullable on svpc variables

* project factory

* Tests still failing (#526)

* fix pf

* tfdoc

* pf test boilerplate

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2022-02-09 11:06:51 +01:00
Julio Castillo 52a182ddbd Switch project module to beta provider for SVPC resources 2022-02-04 16:21:00 +01:00