Commit Graph

260 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 5f710f21dc
Add support for serverless NEGs to ILB L7 module (#983)
* refactor neg variable for serverless

* cloudrun negs

* cloudrun negs

* serverless neg test

* re-enable forwarding rule output
2022-11-16 14:14:05 +01:00
Ludovico Magnocavallo 40a37e9328
Refactor net-ilb-l7 module for Terraform 1.3 (#974)
* wip

* wip

* minimal example test

* wip

* instance group example

* neg examples

* example tests

* tfdoc

* readme

* tested

* example

* default urlmap value, remove stale variable

* tests
2022-11-14 14:39:00 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo c7fe6da12e Update READMEs 2022-11-11 19:28:02 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Julio Castillo 61e047d95a Update folder and project org policy tests 2022-11-11 17:49:18 +01:00
Ludovico Magnocavallo a9c47681d8
Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Aleksandr Averbukh aae6ab132c Add tests for org policy custom constraints 2022-11-08 18:13:49 +01:00
Ludo 0d55de6ca9 switch to tfvars based tests 2022-11-06 08:44:13 +01:00
Ludo 6e4d8a46a1 remove redundant extra_files parameter in tfvars tests 2022-11-06 08:39:53 +01:00
Wiktor Niesiobędzki 0d80ad3f29
cloud-functions v2 - fix reference to bucket_name (#951)
* Fix reference to bucket when no bucket_config is provided

* Copy tests to check v2 cloud-functions
2022-11-06 08:32:38 +01:00
Ludovico Magnocavallo d655833c0c
Add a pytest fixture to convert tfvars to yaml (#950)
* wip

* conftest and tests

* backport cross-module implementation test
2022-11-04 18:37:23 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo d91a0835f7 Remove organization-policy module (now included in the resman modules) 2022-11-03 12:35:50 +01:00
Julio Castillo 5211466816 Bring back deleted assert 2022-11-03 12:18:37 +01:00
Julio Castillo 3e18575fad Add factory support for new org policies 2022-11-03 11:41:53 +01:00
Julio Castillo 8564fbcb93 Bump tftest and improve dns tests 2022-11-02 18:22:36 +01:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Julio Castillo 38e761c3a8 Add test that ensures the implementation of org policies is consistent 2022-11-02 10:41:38 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo 5b9b6b7739 Remove debugging libraries 2022-10-28 18:10:28 +02:00
Julio Castillo f44f4a74dc Fix module tests 2022-10-28 17:49:44 +02:00
Julio Castillo 798fd6cc54
Merge branch 'master' into kmucha555/f_apigee_env_deployment 2022-10-27 21:46:31 +02:00
Krzysztof Mucha 74b17703cd Add support for deployment type and api proxy type for Apigee organization 2022-10-27 21:04:50 +02:00
Ludovico Magnocavallo e20de3b86a
fix service account create (#923) 2022-10-27 15:12:04 +00:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Julio Castillo 19db273963 Add tests for dns routing policies 2022-10-25 15:35:29 +02:00
Giovanni Baratta ca1dc3659a
Add auto_delete and instance_redistribution_type to compute-vm and compute-mig modules. (#890)
* Add auto_delete parameter to compute-vm module

* Add instance_redistribution_type in compute-mig module
2022-10-16 21:19:46 +02:00
Ludovico Magnocavallo 4b798fb34d
Run tests in parallel using `pytest-xdist` (#881)
* test terraform cache

* try pytest-xdist

* revert cache changes

* extend to other jobs

* change dist, bump processes to 4

* revert

* mark tests

* run init to prime providers cache

* prime providers cache

* prime providers cache for all jobs

* add local provider to versions

* remove leftover code
2022-10-14 14:56:16 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Ludovico Magnocavallo bc8f0c90b7
fix autoscaling block (#877)
* fix autoscaling block

* invert autoscaling block condition

* add autoscaling test
2022-10-12 16:44:47 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Ludovico Magnocavallo 16822e94ab
Refactor GKE module for Terraform 1.3 (#868)
* wip

* module and module tests

* doc examples

* gke-hub doc examples

* gke blueprints

* hub and spoke peering blueprint

* Rename some keys of some optional objects

* Fix readme

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-10 09:38:21 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Ludovico Magnocavallo fcf71b983e
refactor net-address modules for 1.3 (#840) 2022-09-28 14:10:05 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Krzysiek Mucha 6e90af2bc3
Add support for service_label property in internal load balancer (#834)
Co-authored-by: Krzysztof Mucha <kmuch@softserveinc.com>
2022-09-21 23:30:35 +02:00
Natalia Strelkova d6c6ae943e regional MySQL DBs - automatic backup conf 2022-09-21 08:14:24 +00:00
Julio Castillo 7a4298783a Removed old and unused modules 2022-09-15 16:50:11 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
lcaggio a253446406 First commit 2022-08-31 11:14:18 +02:00
Taneli Leppä c798625868
net-glb: Added support for regional external HTTP(s) load balancing. (#775) 2022-08-27 22:58:11 +02:00
Ludovico Magnocavallo ed4d59a8b1
refactor cloud run module (#773) 2022-08-09 14:06:30 +02:00
Alef Reis 97104c0098
Add support to a public access to cloudsql-instance (#754)
* feat: add support to a public access to cloudsql-instance

* doc: update cloudsql-instance doc changing the ipv4_enabled parameter description

* test: fix assertion test to ipv4_enabled
2022-08-09 13:42:42 +02:00
Miren Esnaola 0920ac3877 Shared vpc service fixes 2022-08-02 18:21:08 +02:00
Ludovico Magnocavallo 3778d37d18
Fix gke hub module features condition (#761)
* fix features condition

* remove test output

* fix example tests

* fix module tests
2022-07-30 15:53:05 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
Miren Esnaola f153ab4614 Added dependency on google_compute_shared_vpc_host_project.shared_vpc_host to project_id output and modified tests 2022-07-21 14:11:21 +02:00
Miren Esnaola 824353a42b Added servicemesh feature to GKE hub and included fleet robot service account in projectmodule 2022-07-15 17:58:39 +02:00
Ludovico Magnocavallo 1abfdacd56
Avoid setting empty IAM binding in subnet factory (#731)
* avoid setting empty IAM binding in subnet factory

* fix tests
2022-07-11 21:11:52 +02:00
Ludovico Magnocavallo 263cf96d81
fix #728 (#729) 2022-07-10 11:34:41 +02:00
Aleksandr Averbukh 9c942a68d6 More experimental definition to a separate file, so CICD does not rewrite it with default-versions.tf 2022-07-08 15:19:47 +02:00
Aleksandr Averbukh b8fae0fbf0 Update fixtures variable type to follow the module experimental feature. 2022-07-08 14:55:28 +02:00
Aleksandr Averbukh 9d7ce78df2 Enable experimental feature for the test fixture 2022-07-08 12:47:05 +02:00
Aleksandr Averbukh 63ac142005 Simplified module interface, proper data structure for policies 2022-07-08 12:24:18 +02:00
Aleksandr Averbukh a34983b2e9 OrgPolicy module (factory) using new org-policy API, #698 2022-07-06 19:41:18 +02:00
Julio Castillo cf76744f95 Fix addons for autopilot clusters, add tests for gke-cluster.
Fixes second part of #702
2022-06-28 12:24:17 +02:00
Julio Castillo b6f0c1ae2b Add `consumer_accept_list` to `apigee-x-instance`
Fixes #701
2022-06-27 10:01:31 +02:00
Miren Esnaola 2e9fdea1a4 Binary authorization module and example 2022-06-17 16:09:12 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Julio Castillo 1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Daniel Strebel 63097dd224 Allow multiple CIDR blocks in the ip_range parameter and rely on the Google API for validation 2022-04-07 15:08:24 +02:00
Luca Prete cd0f09b748
[#593] Add HTTP ILB module (net-ilb-l7) 2022-04-05 08:58:55 +02:00
Daniel Strebel 59bb09b03e Add billing_type for Apigee Organization Module 2022-03-31 08:47:34 +02:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Ludovico Magnocavallo ecadebe90b
Add support for IAM additive to folder module (#580) 2022-03-11 09:46:32 +01:00
Aleksandr Averbukh 7f2d8c85f2 Fix interconnect_attachment_direct tests 2022-03-08 09:36:27 +01:00
Aleksandr Averbukh 96416995c2 Fix interconnect_attachment_direct tests 2022-03-08 09:34:47 +01:00
Aleksandr Averbukh d598e14d3f Fix interconnect_attachment_direct tests 2022-03-08 09:24:37 +01:00
Aleksandr Averbukh a9981d6949 Remove module tests, datasource based module cannot be tested with TFplan 2022-03-07 22:49:54 +01:00
Aleksandr Averbukh 8e1beb0938 Add module for retrieving all projects/folders under a specific parent (recursively). 2022-03-07 22:02:18 +01:00
Daniel Marzini e372b50d19
Add GKE Hub module to fabric (#540)
* GKE Hub initial PR commit

* variable management adjust

* comments, fixes and alphabetically ordered variables

* Update README.md

* Update README.md

* Update README.md

* fix test

* resources vs modules

still needs some love

* remove modules usage

* comments, readme update and output

* adjusting outputs and README

* fix README.md

* fix README

* adjusted based on comments

still need some love in the google_gke_hub_feature_membership variables management

* types and variable management

* optionally enable required api

* Update README.md

* reorder locals and use standard formatting

* Don't enable services from modules

* Use self links for member clusters

* Update readme

* members_clusters back to map

@juliocc let's talk about this cause we saw it together in our call and if I change it to a list than the other resources are not going to work, they need location there too.

* Forcing null feature to false due to a bug in provider

If a block is set to null the provider will crash with a "panic: interface conversion: interface {} is nil, not map[string]interface {}" a PR will follow

* Readme update

* Readme.md update

* Update README.md

* bring back tolist, WIP

* Update main.tf

* Readme.md update

* Update README.md

* Update main.tf

* Update main.tf

* Add id and self_links output to gke-cluster

* Use try and make all member feature blocks dynamic/optional

* Change member clusters to map

* Add gke-hub tests

* Address PR comments

* Update gke-hub readme

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-28 12:40:48 +01:00
apichick 00473fda64 API gateway module and example that creates a multi-region deployment for API gateway 2022-02-22 12:00:44 +01:00
Ludovico Magnocavallo 0b5ed8b7ef
Add support for resource management tags and tag bindings (#552)
* organization module

* folder module

* project module

* fix project binding

* use id instead of name for references

* kms module

* compute-vm

* fix compute-vm
2022-02-20 11:14:18 +01:00
Ludovico Magnocavallo c91802f501
Change psa type in net-vpc, fix psa in fast net stages (#545)
* change psn type in net-vpc, fix psa in fast net stages

* fix doc examples

* psn ---> psa
2022-02-15 09:24:27 +01:00
Saurabh Shivgunde 4e86fbcd04
Add ip_range variable to apigee-x-instance module (#485)
* Add ip_range variable for apigee-x-instance module

* Add variable definition and validation for ip_range

* Update the validation rule for ip_range variable
2022-02-02 19:32:26 +01:00
Simone Ruffilli abb6b50a46
Add periods at the end of each description field where missing (#478) 2022-01-31 10:45:34 +01:00
Julio Castillo e2abd772f2
Update resman modules (#475)
* Make logging sinks in different resources use the same API

* Split resman modules in multiple files. Add nullables where applicable
2022-01-29 19:35:33 +01:00
Luca Prete c30d29bf9b
[#455] net-glb: add support for null health_checks_config_defaults (#456) 2022-01-25 14:06:02 +01:00
lcaggio a97c606253
Support service dependencies for crypto key bindings in project module (#443)
* Support services that require crypto/decrypt role on robot service accounts

* delete test and upload refactored implementation

* fix duplicate key on dependent services, add tests

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-22 08:32:13 +01:00
Ludovico Magnocavallo e866db2c88 Merge Fabric FAST (#435)
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-01-19 14:19:39 +01:00
Luca Prete 4f79e12365
Rename net-xlb module to net-glb (#433) 2022-01-14 16:52:03 +01:00
Luca Prete ca82d5157a
GLB - Module tests and fixes (#431)
* GLB - Module tests and fixes

* Fixing linting

* Fix ssl cert id vs self_link

* Simplify syntax
2022-01-14 16:05:10 +01:00
Julio Castillo f0773d4883 Simplify tests by figuring out fixture dir automatically
We always use the same directory for terraform fixtures, so it's quite
easy to figure out its path from a pytest fixture by inspecting the
stack. This commit implements this functionality and decreases the
amount of boilerplate needed to write a test.

(Ported from fast)
2022-01-11 11:54:13 +01:00
Julio Castillo 8df9ef9035 New folder structure 2022-01-11 11:53:19 +01:00
Julio Castillo b2fe01c4fb Fix vpc subnet factory for yamls with different shapes. 2022-01-11 11:16:16 +01:00
Ludovico Magnocavallo 91b40dc9c3
Interpolate access levels by key in vpc sc module (#414)
* interpolate access levels by key

* fix access level reference

* fix num resources in last README test
2022-01-04 13:02:38 +01:00
yuryninog a3da60bc71
Merge branch 'master' into yuryninog-patch-1 2022-01-03 10:47:27 -05:00
Simone Ruffilli ee25965c89
Copyright bump (#410) 2022-01-01 15:52:31 +01:00
Ludovico Magnocavallo 2c7dab3bb2
New vpc-sc module implementation (#406)
* first implementation

* minimal output

* split service perimeters in regular and bridge

* tests and fixes

* new vpc-sc implementation

* remove providers file used for testing

* remove provider used during development
2021-12-31 13:29:22 +01:00
Julio Castillo f78902aee8 Update hierarchical firewall resource
This replaces all the `google_compute_organization_security_*`
resources with the newer `google_compute_firewall_*` resources.
2021-12-31 13:06:35 +01:00
Simone Ruffilli eeaca4023d net-address: Added support for PSA ranges 2021-12-16 18:11:40 +01:00
Julio Castillo a22169dcd2
Merge branch 'master' into yuryninog-patch-1 2021-12-15 15:27:26 +01:00
Stenio Ferreira 601ebd028e
Added support for Stateful Managed Instance Groups (#367)
* First iteration updates

* All tests passing

* Updated README and var descriptions

* Updated README

* Updated example README

* Consolidated stateful vars

* consolidated stateful vars

* Updated README

* Requested changes to try

* Fixed README examples and try

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-15 14:56:53 +01:00
Julio Castillo d2859a295f
Merge branch 'master' into yuryninog-patch-1 2021-12-15 11:46:46 +01:00
Ludovico Magnocavallo 174de3a087
Organization module refactor, in-module firewall policy factory for organization and folder (#385)
* move iam and logging to separate files, minimal refactoring

* update README

* fix example

* factory

* tfdoc

* boilerplate

* remove data_folder variable

* tfdoc

* fix default factory name

* add firewall policy to folder module

* add factory example
2021-12-13 08:41:02 +01:00
Yury Nino 63019316e1 Remove location from local.prefix 2021-12-12 16:15:21 -05:00
Ludovico Magnocavallo 3758c8f3b0
Improve PSN support in net-vpc module (#384)
* improve PSN support

* fix variable order

* fix example test

* fix cloudsql example
2021-12-09 17:26:37 +01:00
lcaggio 546385d3ee
Add support for partitioned tables on Organization sinks (#380)
* Add support for partioned tables on Organization sinks

* Update changelog

* Fix lint

* Fix lint

* Use simple bool instead of block

* fix README

* Fix Readme

* Rename variable

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-09 09:55:47 +01:00