Commit Graph

724 Commits

Author SHA1 Message Date
Julio Castillo e4cdc8bea7 Fix decentralized-firewall count 2023-02-25 19:26:11 +01:00
Julio Castillo be60753246 Fix failing tests 2023-02-25 19:26:11 +01:00
Julio Castillo edce6edd28 Update factories and apigee tests 2023-02-25 19:26:11 +01:00
Julio Castillo b186365cab Update data solutions tests 2023-02-25 19:26:11 +01:00
Julio Castillo 3c68780537 Update gke blueprints tests 2023-02-25 19:26:11 +01:00
Julio Castillo a25f83656f Update cloud operations tests 2023-02-25 19:26:11 +01:00
Julio Castillo d71d0c5c22 Update networking bluprints tests 2023-02-25 19:26:11 +01:00
Julio Castillo 02151af222 Fix delegated grants bluprint readme 2023-02-25 19:26:11 +01:00
Julio Castillo daccd803ed Update decentralized-firewall tests 2023-02-25 19:26:11 +01:00
Julio Castillo 3c88315f6e Update tests for hub and spoke blueprints 2023-02-25 19:26:11 +01:00
Julio Castillo 7c17af66aa Update asset-inventory-feed-remediation tests 2023-02-25 19:26:11 +01:00
Julio Castillo 3e4b6c0639 Update iam-delegated-role-grants tests 2023-02-25 19:26:11 +01:00
Julio Castillo d114a81b08 Update packer_image_builder tests 2023-02-25 19:26:11 +01:00
Julio Castillo 23c564cb74 Update unmanaged-instances-healthcheck tests 2023-02-25 19:26:11 +01:00
Julio Castillo 99e69e319f Update data platform tests 2023-02-25 19:26:11 +01:00
Julio Castillo aaf97110c1 Move api-gateway test to bottom of README 2023-02-25 19:26:11 +01:00
Julio Castillo e80adfa906 Make test visible 2023-02-25 19:26:11 +01:00
Julio Castillo 71e96dfdee Allow blueprints to be tested from README files without examples. 2023-02-25 19:26:11 +01:00
dependabot[bot] 7bfa2dbd34
Bump golang.org/x/sys (#1181)
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20220310020820-b874c991c1a5 to 0.1.0.
- [Release notes](https://github.com/golang/sys/releases)
- [Commits](https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 17:02:07 +00:00
dependabot[bot] 610cae58c1
Bump golang.org/x/sys (#1180)
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20220310020820-b874c991c1a5 to 0.1.0.
- [Release notes](https://github.com/golang/sys/releases)
- [Commits](https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 17:47:56 +01:00
Ludovico Magnocavallo b1e37f630c
Merge branch 'master' into serverless-program 2023-02-25 07:41:10 +01:00
Christoph Grotz 5003a6f37a tfdoc again 2023-02-24 17:53:10 +00:00
Christoph Grotz f65b15a62b added period 2023-02-24 17:52:56 +00:00
Christoph Grotz 0496b26f62 terraform fmt of outputs 2023-02-24 17:50:41 +00:00
Christoph Grotz 12d70832d2 fixed variables and outputs 2023-02-24 17:49:51 +00:00
Christoph Grotz 7021682746 tfdoc again 2023-02-24 17:44:19 +00:00
Christoph Grotz f09a704199 fixed accidental update 2023-02-24 17:43:04 +00:00
Christoph Grotz b21c57d193 moved to new test style 2023-02-24 17:41:53 +00:00
Christoph Grotz 21c56abc22 fixed terraform fmt 2023-02-24 17:29:50 +00:00
Christoph Grotz c9915b11a4 Fixed variable order 2023-02-24 17:27:49 +00:00
Julio Diez 5f9955b5fe Add image to show how to test different services 2023-02-24 18:21:10 +01:00
Julio Diez 1f3db47b0b Clarify how to test custom domain case 2023-02-24 18:03:47 +01:00
Christoph Grotz d97426633e Updated docs and added test 2023-02-24 17:02:50 +00:00
Christoph Grotz 3d8822d365 fixed tfdocs 2023-02-24 16:39:39 +00:00
Christoph Grotz 73764e3827 Added license boilerplate with block comment
instead of line comment
2023-02-24 16:21:02 +00:00
Christoph Grotz b229926516 formatted terraform 2023-02-24 16:18:05 +00:00
Christoph Grotz e56d466e81 Added a PSC GCLB example 2023-02-24 16:14:54 +00:00
Giorgio Conte a51c682005 Updated tf file to add the following features:
- default location of dataset to US
- changed name of vertex metastore to "default"
- add ai user and service account us to notebook SA
- add ai user to vertex sa
2023-02-24 13:27:44 +00:00
Julio Diez 1f4d17973b Add test for onprem (VPN) use case in README 2023-02-24 13:42:14 +01:00
Julio Diez 66353ac1cc Merge branch 'master' into serverless-program 2023-02-24 13:01:36 +01:00
Julio Diez 8518bffaaa Add another test for VPC-SC in README 2023-02-24 12:36:12 +01:00
Julio Diez 0f7a9a3ce3 Include TFDOC content in README 2023-02-24 12:23:04 +01:00
Julio Diez f93cdb920e Add trailing dots to descriptions 2023-02-24 12:19:31 +01:00
Julio Diez e8850ff3a1 Include tests in README 2023-02-24 12:16:22 +01:00
Julio Diez 531bfe134d Update service-running image to reflect output from new CR image in use 2023-02-24 12:05:44 +01:00
Julio Diez ad748db8a4 Add use case with custom domain description to README 2023-02-23 21:52:02 +01:00
Julio Diez 6f622e0601 DNS entries are now created for upper-level domains, not for endpoints 2023-02-23 21:18:19 +01:00
Julio Diez f41bb15162 Output all CR services URLs 2023-02-23 21:07:57 +01:00
Julio Diez d538e066a2 More explicit naming in CR services to later refer to them 2023-02-23 20:45:00 +01:00
Julio Diez 5065a52382 Fix naming in module cr2 2023-02-23 20:33:26 +01:00
Julio Diez 599d1a6ca5 Use *.run.app. domain in the DNS record 2023-02-23 20:15:34 +01:00
Julio Diez 3f45e75c35 Add DNS record for custom domain 2023-02-23 19:44:37 +01:00
Julio Diez 8d1edea487 Back to 'hello' image to distinguish between services 2023-02-23 19:21:44 +01:00
Julio Diez ba0ec82144 Create more backend services and url map for them 2023-02-23 19:16:27 +01:00
lcaggio 50856e6951 First commit 2023-02-23 18:36:03 +01:00
Julio Diez aa385241db Add two different CR services in service project 2023-02-23 18:25:16 +01:00
Julio Diez edece34342 Add L7 ILB in preparation for custom domain 2023-02-23 17:41:50 +01:00
lcaggio 47855cb682
Merge branch 'master' into lcaggio/dp-projectcreate 2023-02-23 11:54:48 +01:00
lcaggio b279c083a0 Fix README and IAM files 2023-02-23 11:54:16 +01:00
Julio Diez 91bd44f5d5 Remove 'main' from naming for CR since it can be deployed in a svc project 2023-02-22 15:54:03 +01:00
Julio Diez 29af0f3b31 Deploy CR service in service project if use case is using ILB 2023-02-22 15:29:15 +01:00
lcaggio 2108b4650d Fix Tests, rely on iam additive. 2023-02-22 01:36:01 +01:00
Julio Diez 117141cdb0 Add subcase description in README 2023-02-21 17:58:05 +01:00
Julio Diez 376ccb7824 Add a service project and corresponding test VM 2023-02-21 17:20:57 +01:00
Julio Castillo 1696f70f47 Update PF variables for org policies 2023-02-21 15:49:16 +01:00
Julio Castillo a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo d3bcf625f9 Update yaml org policies 2023-02-21 15:49:16 +01:00
Julio Diez 1e794c851d Update README 2023-02-21 13:55:17 +01:00
Julio Diez eb85a4ad3b Enlarge some images more in README 2023-02-20 19:03:11 +01:00
Julio Diez 0cfe3d6a65 Enlarge some images in README 2023-02-20 19:00:20 +01:00
Julio Diez efe5e0e5f2 Fixes in README 2023-02-20 18:58:57 +01:00
Julio Diez d61ccbe5ac Add third use case description in README 2023-02-20 18:38:00 +01:00
Julio Diez 7159274533 Add terraform identity to VPC SC
If the identity that runs terraform is not included when creating a VPC SC
perimeter, it loses control afterwards.
2023-02-20 16:54:34 +01:00
lcaggio eda9597f0b Fix linting 2023-02-20 01:03:38 +01:00
lcaggio c523dce3a6 Fix 2023-02-20 01:00:57 +01:00
lcaggio f4c1fa6c20 Fix tests. 2023-02-20 00:56:32 +01:00
lcaggio db6a4f9ac7 Remove variables 2023-02-20 00:45:40 +01:00
lcaggio c8f25512eb Fix variabler to support existing projects. 2023-02-20 00:39:37 +01:00
lcaggio ad6667a8fa First commit 2023-02-19 22:37:32 +01:00
Aleksandr Averbukh befc73ec12 feat: Update TFC+WIF blueprint with TFC Dynamic Credentials feature. 2023-02-19 00:51:49 +01:00
Julio Diez bc6b89778c Update README 2023-02-17 20:01:49 +01:00
Julio Diez 559c44fce6 Access from another project, with VPC SC 2023-02-17 19:58:08 +01:00
Julio Diez de47f6077b Simplify some naming 2023-02-17 17:53:11 +01:00
Julio Diez c28039eaff Remove field, PGA is enabled by default 2023-02-17 17:41:29 +01:00
Julio Diez a77d7ea111 Add another GCP project to access CR from 2023-02-17 16:55:11 +01:00
Julio Diez 5e8b8d0290 Use case 2 image 2023-02-17 13:41:53 +01:00
Julio Diez 5b6ade4429 Keep test VM in main project even with onprem project 2023-02-17 13:35:53 +01:00
Julio Diez d31382994e Update README 2023-02-17 13:29:50 +01:00
Julio Diez 3cf536931d Update README 2023-02-17 13:26:26 +01:00
Julio Diez 25f243aa3d Update README to adapt to naming in projects 2023-02-17 13:22:20 +01:00
Julio Diez 46c041f59f Change naming from 'host' project to 'main' to avoid confusion 2023-02-17 13:15:58 +01:00
Ayman Farhat eac2065ae2 Update on docs wording 2023-02-16 17:04:05 +01:00
Ayman Farhat fcdadf521d Fix spelling mistake 2023-02-16 15:48:12 +01:00
Ayman Farhat a853dc4fe2 update Data Platform blueprint README with more example Dataflow commands 2023-02-16 15:45:20 +01:00
Julio Diez b5e51180e6 Add second use case description in README 2023-02-15 21:22:33 +01:00
Julio Diez a98248e32b Update README to reflect only private access is allowed 2023-02-15 20:53:58 +01:00
Julio Diez 9a46d0f2e6 Restrict traffic to internal sources 2023-02-15 20:45:10 +01:00
Julio Diez 30821ac58e Add first use case description in README 2023-02-15 20:44:22 +01:00
Julio Diez 15c8f92f46 Delete project resources without deleting the projects 2023-02-15 20:33:45 +01:00
Julio Diez 636a4cc01c Access CR from "onprem" environment 2023-02-15 13:37:16 +01:00
Julio Diez d0934903aa Use a more curl friendly image 2023-02-14 12:57:43 +01:00
Julio Diez 28f4c3170e Initial README 2023-02-13 21:57:54 +01:00
Julio Diez 92a57becd8 Accessing Cloud Run privately, first use case 2023-02-13 21:54:03 +01:00
lcaggio ebc4bc51a5 Workaround to mitigate issue 9164 2023-02-13 15:25:24 +01:00
Julio Diez 0cfd8dd883 Move all images to an images/ folder 2023-02-10 19:48:04 +01:00
Julio Diez 5c3fd31b02 Add missing newlines in README 2023-02-10 19:43:56 +01:00
Julio Diez 621ee6e517 Update variables table via tfdoc.py 2023-02-10 18:02:37 +01:00
Julio Diez e72602a11d Update variables table via tfdoc.py 2023-02-10 18:02:37 +01:00
Julio Diez 6c470ece11 Option to create a project 2023-02-10 18:02:37 +01:00
Julio Diez 98f9a318bc Update output and variable tables via tfdoc.py 2023-02-10 14:38:16 +01:00
Julio Diez 1335fd65da Update output and variable tables via tfdoc.py 2023-02-10 14:21:38 +01:00
Julio Diez 9fa48ea177 Add ending periods to descriptions 2023-02-10 14:13:56 +01:00
Julio Diez 4aa135f7e8 Generated output and variable tables via tfdoc.py 2023-02-10 14:01:11 +01:00
Julio Diez d19d434538 Add HTML tags to generate output and variable tables 2023-02-10 13:21:01 +01:00
Julio Diez aca3069951 Add quotes around var project_id 2023-02-10 12:59:09 +01:00
Julio Diez f31293ba04 Specify block types 2023-02-10 12:56:59 +01:00
Julio Diez d916632686 Update URL to repo 2023-02-10 12:49:39 +01:00
Julio Diez 3935867d92 Simplify conditional expressions 2023-02-10 12:48:47 +01:00
Julio Diez a8de9088c6 Alphabetical ordering for outputs and variables 2023-02-10 12:46:34 +01:00
Julio Diez a199414794 Add license boilerplate 2023-02-10 12:30:39 +01:00
Julio Diez e8303e15ba
Merge pull request #8 from juliodiez/master
Sync branch
2023-02-10 10:27:54 +01:00
Julio Diez 3e7d8c563e Infer LB creation from custom_domain var
This way we can remove one var (glb_create) and simplify it for the user.
2023-02-09 10:33:51 +01:00
Julio Diez a44759d585 Fix typos in README 2023-02-08 21:21:20 +01:00
Julio Diez 8b41008397 Add README file with the use cases 2023-02-08 21:04:51 +01:00
Julio Castillo d7b88b7d0e Fix bq factory docs 2023-02-08 18:22:10 +01:00
Julio Diez 642fff04ad Get rid of config files
Follow CFF way, instead of using config files set appropriate values in file
variables.tf and use examples in the README to show how to tweak variables.
2023-02-07 21:01:28 +01:00
Julio Castillo 08f2540872 Bump provider version 2023-02-07 15:59:29 +01:00
lcaggio d78815d3d7 Fix README 2023-02-07 13:57:26 +01:00
lcaggio 71469679e3 Add variables validation 2023-02-07 13:53:54 +01:00
lcaggio dd77c2fe79
Merge branch 'master' into lcaggio/shieldedfolder 2023-02-07 07:58:00 +01:00
lcaggio 307cf32cf9 Fix 2023-02-06 21:34:29 +01:00
lcaggio d68bb4b320 Fixes 2023-02-06 21:33:04 +01:00
Julio Castillo e1e0c38236 Fix README and var order 2023-02-06 18:08:03 +01:00
Julio Castillo c883d5ec3a Fix README 2023-02-06 18:03:43 +01:00
Paul Woelfel bd90aa7f47
Add descriptive_name 2023-02-06 17:39:33 +01:00
Paul Woelfel f2b61b1e31
Add descriptive name as optional argument 2023-02-06 17:35:11 +01:00
lcaggio 1e4499c8ab Fixes 2023-02-06 14:58:40 +01:00
Ayman Farhat 02d8d8367a
[Feature] Update data platform blue print with Dataflow Flex template (#1105)
* Add initial dataflow template code + TF infra

* Refactor the datapipeline DAG to use flex template operator, cleanup code

* Remove unneeded bash scripts, update README with manual examples

* Refactor datapipeline_dc_tags.py and include new Flex template

* Update docs to reflect changes

* Remove sub-dependencies and keep apache beam

* Add missing license headers and update tests

* Set resouces to 291 in tests

* Update outputs via tfdoc

* Update with outputs order and tfdoc

* Correct number of resources

* Fix to add region into command from var

* Enable service account impersonation for running builds

* Update example dataflow run command to use orchestrator SA

* Remove hard coded values in example

* Keep original airflow files, add new which use Flex template as example

* Update tests and doc

* Fix number of resources in plan

* Run tfdoc remove files section in README

* Fix number of modules in tfdoc

* Update number of resources

* Add missin service account

* Update DF demo README

* Quick rename

---------

Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-06 07:35:40 +01:00
lcaggio 39ffdcf184
Merge branch 'master' into lcaggio/shieldedfolder 2023-02-05 22:45:14 +01:00
lcaggio f49e5ccec7 Fix readmes and variables. 2023-02-05 22:44:31 +01:00
lcaggio 47c75f8862 Implement project_config variable 2023-02-05 21:12:46 +01:00
lcaggio 38fc9e8b9b First commit 2023-02-05 07:52:33 +01:00
lcaggio ce1cc5f75a
Merge branch 'master' into lcaggio/shieldedfolder 2023-02-04 19:42:19 +01:00
Ludovico Magnocavallo 5453c585e0
FAST multitenant bootstrap and resource management, rename org-level FAST stages (#1052)
* rename stages

* remove support for external org billing, rename output files

* resman: make groups optional, align on new billing account variable

* bootstrap: multitenant outputs

* tenant bootstrap stage, untested

* fix folder name

* fix stage 0 output names

* optional creation for tag keys in organization module

* single tenant bootstrap minus tag

* rename output files, add tenant tag key

* fix organization module tag values output

* test skipping creation for tags in organization module

* single tenant bootstrap plan working

* multitenant bootstrap

* tfdoc

* fix check links error messages

* fix links

* tfdoc

* fix links

* rename fast tests, fix bootstrap tests

* multitenant stages have their own folder, simplify stage numbering

* stage renumbering

* wip

* rename tests

* exclude fast providers in fixture

* stage 0 tests

* stage 1 tests

* network stages tests

* stage tests

* tfdoc

* fix links

* tfdoc

* multitenant tests

* remove local files

* stage links command

* fix links script, TODO

* wip

* wip single tenant bootstrap

* working tenant bootstrap

* update gitignore

* remove local files

* tfdoc

* remove local files

* allow tests for tenant bootstrap stage

* tenant bootstrap proxies stage 1 tfvars

* stage 2 and 3 service accounts and IAM in tenant bootstrap

* wip

* wip

* wip

* drop multitenant bootstrap

* tfdoc

* add missing stage 2 SAs, fix org-level IAM condition

* wip

* wip

* optional tag value creation in organization module

* stage 1 working

* linting

* linting

* READMEs

* wip

* Make stage-links script work in old macos bash

* stage links command help

* fix output file names

* diagrams

* fix svg

* stage 0 skeleton and diagram

* test svg

* test svg

* test diagram

* diagram

* readme

* fix stage links script

* stage 0 readme

* README changes

* stage readmes

* fix outputs order

* fix link

* fix tests

* stage 1 test

* skip stage example

* boilerplate

* fix tftest skip

* default bootstrap stage log sinks to log buckets

* add logging to tenant bootstrap

* move iam variables out of tenant config

* fix cicd, reintroduce missing variable

* use optional in stage 1 cicd variable

* rename extras stage

* rename and move identity providers local, use optional for cicd variable

* tfdoc

* add support for wif pool and providers, ci/cd

* tfdoc

* fix links

* better handling of modules repository

* add missing role on logging project

* fix cicd pools in locals, test cicd

* fix workflow extension

* fix module source replacement

* allow tenant bootstrap cicd sa to impersonate resman sa

* tenant workflow templates fix for no providers file

* fix output files, push github workflow template to new repository

* remove try from outpout files

* align stage 1 cicd internals to stage 0

* tfdoc

* tests

* fix tests

* tests

* improve variable descriptions

* use optional in fast features

* actually create tenant log sinks, and allow the resman sa to do it

* test

* tests

* aaaand tests again

* fast features tenant override

* fast features tenant override

* fix wording

* add missing comment

* configure pf service accounts

* add missing comment

* tfdoc

* tests

* IAM docs

* update copyright

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-02-04 15:00:45 +01:00
lcaggio 45a74f37f9 Mention policies in the costomization section. 2023-02-04 06:24:35 +01:00
lcaggio f00d4d3edd
Merge branch 'master' into lcaggio/shieldedfolder 2023-02-03 22:17:30 +01:00
Julio Diez 60c9f2cc40 Merge branch 'serverless-program' of https://github.com/juliodiez/cloud-foundation-fabric into serverless-program 2023-02-03 11:42:33 +01:00
Julio Diez 8899412d76 Separate var iap_email to override it on the CLI 2023-02-03 11:37:56 +01:00
Julio Diez 54a0ff8939 Info comment for support_email 2023-02-03 11:15:09 +01:00
Julio Diez 616125c1cd Enable service APIs in the project 2023-02-03 11:04:42 +01:00
Julio Diez 63bae85b34 Identity-Aware Proxy configuration 2023-02-02 21:47:11 +01:00
javiergp ce1f86d20b
Vertex Pipelines MLOps framework blueprint (#1038)
* First release of the MLOps blueprint
2023-02-02 19:13:13 +01:00
lcaggio fafc69a206
Merge branch 'master' into lcaggio/shieldedfolder 2023-02-02 09:03:00 +01:00
Ludovico Magnocavallo a046f280a4
Delete package-lock.json
flagged by dependabot as containing a security vulnerability (taffydb)
2023-02-01 18:57:10 +01:00
Ludovico Magnocavallo 0da76cdbdb
Delete package-lock.json
flagged by dependabot as containing a security vulnerability (taffydb)
2023-02-01 18:56:34 +01:00
apichick 6298ee5cdb
Removed unused file package-lock.json (#1124) 2023-02-01 18:54:23 +01:00
Julio Diez 462ca562c0
Merge pull request #6 from juliodiez/master
Sync branch
2023-02-01 18:01:32 +01:00
lcaggio 30f2b49c9c README Typos 2023-02-01 17:34:31 +01:00
lcaggio e3daaf2503 Update READMEs 2023-02-01 13:02:07 +01:00
lcaggio f9e3eb7d5a Update copyright 2023-02-01 09:30:28 +01:00
lcaggio 840fc86b3e Fix groups. Fix tests. 2023-02-01 08:55:33 +01:00
lcaggio 053d4151de Chane feature name, improve README 2023-02-01 00:50:22 +01:00
lcaggio 3995ec1550
Merge branch 'master' into lcaggio/shieldedfolder 2023-02-01 00:28:01 +01:00
lcaggio f36b004664 Make VPCSC optional; ingress policy 2023-02-01 00:26:57 +01:00
lcaggio fb04e78829 Fix variables 2023-01-31 22:35:48 +01:00
Julio Castillo 1204b0077e
Merge branch 'master' into mci_gateway 2023-01-31 11:54:31 +00:00
Miren Esnaola 1a2745b632 In the apigee module now both the /22 and /28 peering IP ranges are passed at instance creation 2023-01-31 11:32:53 +01:00
lcaggio 0e5f2f71a2 Fix Linting 2023-01-30 23:57:20 +01:00
lcaggio a166c612d5 Merge branch 'master' into lcaggio/shieldedfolder 2023-01-30 23:52:46 +01:00
lcaggio 6a39d80487 Fix README 2023-01-30 23:49:47 +01:00
lcaggio 66a10d76c3 Add test 2023-01-30 23:47:33 +01:00
lcaggio a808ea3293 Draft README 2023-01-30 23:32:13 +01:00
Julio Diez 4c2e31baac Rename config file 2023-01-30 20:34:09 +01:00
Julio Diez 4c4018073f Add security configuration using Cloud Armor in the LB 2023-01-30 20:30:35 +01:00
Julio Diez 8a7aa397ef Add purpose to config files 2023-01-30 20:13:38 +01:00
Julio Diez 865a98e3ed Add ingress settings blocking requests not coming from the LB 2023-01-30 16:53:23 +01:00
Julio Diez 93276d03d8 Add custom domain output 2023-01-30 16:34:52 +01:00
Julio Diez cca1d9fe3c Output the LB IP address 2023-01-30 14:39:46 +01:00
Julio Diez e10c6ed62f Output URL as single string 2023-01-30 14:38:38 +01:00
Julio Diez 914a8c48a6 Rename output URL as default URL 2023-01-30 12:13:23 +01:00
Wiktor Niesiobędzki 1a657b31d3 Bump beta provider to 4.48
This is the first version that supports `gateway_api_config` block
2023-01-29 15:50:24 +01:00
Wiktor Niesiobędzki 2976df596e Fix tests (add JIT-ed SA for multiclusteringress.googleapis.com) 2023-01-29 15:50:24 +01:00
Ayman Farhat edd3a82453
Include cloudbuild API in project module (#1116)
* Include cloudbuild API in project module

* Increase number of resources
2023-01-27 21:38:01 +01:00
lcaggio 9a46f06dd0 update readme 2023-01-27 10:05:19 +01:00
Julio Diez 1d3449d0e8 Add custom domain as variable 2023-01-26 16:42:49 +01:00
Julio Diez 5004f176c2 Add custom-url configuration 2023-01-26 14:34:01 +01:00
Julio Diez b25afb5ea2 Fix format 2023-01-26 14:30:54 +01:00
Julio Diez 6039105651 Get rid of default-url config and make it 'default' 2023-01-26 14:29:25 +01:00
Julio Diez 417584f9bc Default config renamed to default-url config 2023-01-26 14:18:37 +01:00
Julio Diez 097c9ceace HTTPS frontend with static IP 2023-01-26 11:50:52 +01:00
lcaggio 1189e38788 Fix 2023-01-25 18:30:21 +01:00
lcaggio 0ce110f170 Make KMS and Log sink optionals 2023-01-25 18:22:43 +01:00
Aurélien Legrand 7f5c177cfe
Network Dashboard: PSA support for Filestore and Memorystore (#1106)
* Support for Filestore and Memorystore PSA ranges

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-01-25 15:02:30 +00:00
lcaggio 440e9c59b9 Update 2023-01-25 12:32:10 +01:00
Julio Diez 6c8c033c76 Add Global Load Balancer in front of Cloud Run 2023-01-25 10:17:46 +01:00
dependabot[bot] e780b7f98c
Bump cookiejar in /blueprints/apigee/bigquery-analytics/functions/export (#1110)
Bumps [cookiejar](https://github.com/bmeck/node-cookiejar) from 2.1.3 to 2.1.4.
- [Release notes](https://github.com/bmeck/node-cookiejar/releases)
- [Commits](https://github.com/bmeck/node-cookiejar/commits)

---
updated-dependencies:
- dependency-name: cookiejar
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-24 15:07:11 +00:00
Julio Diez aca604e085
Merge pull request #3 from GoogleCloudPlatform/master
Sync fork
2023-01-24 11:36:10 +01:00
Julio Diez c9b076cdaa Initial commit, Cloud Run service with default URL 2023-01-24 11:14:21 +01:00
Julio Castillo 551d45760f
Merge branch 'master' into google_gkehub_feature_membership 2023-01-23 09:11:49 +01:00
apichick e32036dbaa
Merge branch 'master' into hybrid-gke-README-fix 2023-01-22 11:22:07 +01:00
Ludovico Magnocavallo 3cca689792
Check linting for Python dashboard files (#1107)
* enable Python lint check for network dashboard

* fix linting for network dashboard
2023-01-21 17:17:51 +01:00
lcaggio 4007d42705 Add KMS and Log. 2023-01-21 01:08:51 +01:00
Miren Esnaola 4accf87bff Updated hybrid GKE readme 2023-01-20 14:41:25 +01:00
Ludovico Magnocavallo 050daa65f2
Merge branch 'master' into hybrid-gke-updates 2023-01-20 07:48:49 +01:00
Miren Esnaola 8945165bc3 Improvements in apigee hybrid-gke: now using workload identity and GLB 2023-01-19 22:11:44 +01:00
lcaggio dcbfdd9c91 Merge branch 'master' into lcaggio/shieldedfolder 2023-01-19 10:59:33 +01:00
Wiktor Niesiobędzki b38ef22572 Even more test fixes 2023-01-19 09:37:48 +01:00
Wiktor Niesiobędzki 720213593e Use google_gkehub_feature_membership
Use google_gkehub_feature_membership to provision ASM on clusters.

Ensure that the cluster membership is refreshed on cluster recreation.
2023-01-19 09:37:48 +01:00
lcaggio 3c88aace1a Fix dataflow shared-vpc support 2023-01-19 01:04:11 +01:00
lcaggio 6477d0790d Remove temp file. 2023-01-19 00:39:55 +01:00
lcaggio 07a7be29e3 Add shared-vpc support on Data Playgroud blueprint 2023-01-19 00:33:31 +01:00
lcaggio b9a4c27a03 VPC-SC 2023-01-18 15:50:49 +01:00
lcaggio 191e56fa80 Merge branch 'master' into lcaggio/shieldedfolder 2023-01-17 15:51:55 +01:00
lcaggio 84be665172 First commit. 2023-01-17 08:49:04 +01:00
lcaggio 02938bdfa1 Fix Table in readme. 2023-01-16 15:58:11 +01:00
lcaggio 1672cfe9c1 Fix README. 2023-01-12 12:45:39 +01:00
lcaggio 50a52ae01a Implement PR comments. 2023-01-12 12:41:00 +01:00
lcaggio 07a975f84e Fix example test. 2023-01-11 12:37:08 +01:00
lcaggio 72abd47520 Fix documentation. 2023-01-11 08:47:42 +01:00
lcaggio c172c7bb2e Remove plg project and update to composer 2 2023-01-11 00:31:58 +01:00
lcaggio 488b6d4dc0 Remove plg project, composer 2 2023-01-11 00:31:52 +01:00
Miren Esnaola 66c37a4169 Fixes in Apigee blueprints README files 2023-01-05 11:31:07 +01:00
Ludovico Magnocavallo f7350be743
Merge branch 'master' into apigee-hybrid-gke 2023-01-05 09:11:39 +01:00
Miren Esnaola f6413747b7 Fixes in Apigee Bigquery Analytics blueprint 2023-01-04 17:30:07 +01:00
Miren Esnaola 33f5607ff1 Apigee hybrid on GKE 2023-01-04 10:53:49 +01:00
Miren Esnaola 0235690aaa Moved apigee bigquery analytics blueprint, added apigee network patterns 2022-12-23 14:38:15 +01:00
Ludovico Magnocavallo 66a402083b
Allow setting no ranges in firewall module custom rules (#1073)
* allow setting no ranges in custom firewall rules

* fix blueprint

* fix example

* fix example
2022-12-23 09:03:31 +01:00
Israel Herraiz 7df527e1ef Bump versions EVERYWHERE 2022-12-23 00:06:42 +01:00
Aurélien Legrand 5063c3b513
Network dashboard: PSA ranges support, starting with Cloud SQL (#1063)
* Adding PSA ranges support and ip utilization, starting with Cloud SQL

* yapf formatting

* refactor

* fix camelcase

* remove unused variable

* remove test file

* rename discover plugin

* fixing issue with asset name

Co-authored-by: Ludo <ludomagno@google.com>
2022-12-22 13:14:42 +01:00
Wiktor Niesiobędzki 7e18f6d7b5 Fixes for GKE
* Fix non-empty plan when spot instances are used
* Add cluster_id and recommend its use, as this prevents inconsitencies
  when only cluster is recreated (with no changes on node pool)
2022-12-21 23:14:52 +01:00
Aurélien Legrand 7acb6b3747
Update src/README.md for Network Dashboard (#1060)
* Update src/README.md for Network Dashboard

Proposing some small updates to src/README.md file for the Network Dashboard

* Update README.md

* Update README.md

* Update README.md

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-12-21 16:30:09 +01:00
Julio Castillo b031d7add5 Fix tests 2022-12-18 20:37:16 +01:00
Julio Castillo e700a27079 Enforce terraform fmt in examples 2022-12-18 14:00:19 +01:00
Ludovico Magnocavallo 93361d7f3d
Networking dashboard and discovery tool refactor (#1020)
* wip

* wip

* wip

* wip

* wip

* discovery

* single discovery

* page token

* batch requests

* remove plugin name

* streamline

* streamline

* dynamic routes

* dynamic routes

* forwarding rules and addresses

* batch requests

* metrics

* notes

* notes

* streamline

* fixes, dump

* streamline

* remove globals

* wip metrics

* subnet time series

* networks per project plugin

* firewall rules timeseries

* use names in metric labels

* firewall policies timeseries

* wip

* instances per network timeseries

* routes timeseries

* custom quota

* simpler quota, network peering timeseries

* peering timeseries

* timeseries names

* wip descriptors

* metric descriptors

* fixes

* wip

* Use partial for all cf init functions

* Add requirements.txt

* fix org key mismatch

* Fix folder short cli name

* Fix instance_networks when iterable is empty

* more readability and fixing some strings

* replace() -> removeprefix and remove unneeded quoting

* setdefault in init()s

* Fix next hop type

* Remove unneeded fstring

* create descriptors

* create descriptors log

* rename descriptor requests function

* non-working metrics implementation (duplicate timeseries batched)

* timeseries

* fixes

* write timseries

* fix timeseries plugins

* start documenting code

* docstrings and comments

* docstrings comments and small fixes

* rename cf to src

* discover nodes instead of just projects

* discovery node can be a folder or org

* cf entrypoint and fixes

* cf deployment

* remove old paths

* cloud function deploy readme

* diagrams

* resource ids in example

* discovery tool readme

* top-level README

* Some documentation fixes

* Add secondary ranges

* Update README.md

* add legend to scope diagram

* improve description of discovery configuration variable

* add comment in example for custom quotas file

* rename op_project to monitoring_project

* dashboard metric rename wip

* Update discover-cai-compute.py

* deploy sample dashboard

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Aurélien Legrand <aurelien.legrand01@gmail.com>
2022-12-18 10:07:24 +01:00
Ludovico Magnocavallo d2015b0bc3
Assorted module fixes (#1045)
* net-ilb-l7 use both neg types in backends

* run example tests on cloud-config-container modules

* streamline nginx-tls cos module

* add tests for cos modules

* tfdoc

* onprem needs fixing, links

* disable test

* test
2022-12-10 15:40:15 +01:00
Ludovico Magnocavallo 46f694be08
Refactor net-glb module for Terraform 1.3 (#1044)
* wip

* urlmaps

* wip

* tested

* fix managed certificate names

* simple HTTP and HTTPS examples

* gce and hybrid neg examples

* internet NEG example

* serverless NEG and backend bucket examples

* certificate example

* fix example tests

* remove stale test module

* module test

* adfs blueprint

* add support for non-classic GLB and PSC NEGs

* apigee blueprint

* glb and cloud armor blueprint

* deprecate non-working nginx reverse cluster

* api gateway blueprint

* tfdoc

* fix top-level READMEs

* switch to new tests

* only/at most
2022-12-08 17:35:44 +01:00
Brian Jung 5b71f2f54c
Adding Secondary IP Utilization calculation (#982)
* hello

* Adding secondary range IP address utilization calculation.

* using yapf to format code

* Minor fixes for Network Monitor

Co-authored-by: Brian Jung <brianhmj@google.com>
2022-12-07 11:45:20 +01:00
dependabot[bot] fee7ecfa66
Bump qs and formidable (#1037)
Bumps [qs](https://github.com/ljharb/qs) and [formidable](https://github.com/node-formidable/formidable). These dependencies needed to be updated together.

Updates `qs` from 6.9.3 to 6.11.0
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.9.3...v6.11.0)

Updates `formidable` from 2.0.1 to 2.1.1
- [Release notes](https://github.com/node-formidable/formidable/releases)
- [Changelog](https://github.com/node-formidable/formidable/blob/master/CHANGELOG.md)
- [Commits](https://github.com/node-formidable/formidable/commits)

---
updated-dependencies:
- dependency-name: qs
  dependency-type: indirect
- dependency-name: formidable
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 16:43:34 +01:00
Thomas GRUSON d76eadef18
feat(blueprints): get audience from tfc environment
Fix typo in documentation and get audience from Terraform Cloud `TFC_WORKLOAD_IDENTITY_AUDIENCE` environment variable.
2022-12-05 15:50:35 +01:00
Julio Castillo fa63e9d5d0 Remove optional stuff 2022-11-30 16:00:53 +01:00
Julio Castillo b5593db8a2 Update h&s blueprints advertisements 2022-11-30 10:59:15 +01:00
Julio Castillo 798d3a4136 Update VPN-HA module to tf1.3 (wip) 2022-11-30 10:52:24 +01:00
g-greatdevaks 3037a4f519 FIX APIGEE PAYG ENVIRONMENT NODE CONFIG
Fixed the Node Configuration for Apigee PAYG
specific Environments.

Removed current_aggregate_node_count as it
is a read-only field and cannot be taken
as an input for the Apigee Environment Terraform
resource.

Changes committed:
modified:   blueprints/cloud-operations/apigee/README.md
modified:   blueprints/cloud-operations/apigee/variables.tf
modified:   modules/apigee/README.md
modified:   modules/apigee/main.tf
modified:   modules/apigee/variables.tf
modified:   tests/blueprints/cloud_operations/apigee/fixture/variables.tf
modified:   tests/modules/apigee/fixture/variables.tf
2022-11-29 17:02:24 +05:30
Miren Esnaola 8d827b692c Added endpoint attachments to Apigee module 2022-11-28 17:27:00 +01:00
apichick 48c6733615
Merge branch 'master' into adfs-fixes 2022-11-28 13:30:12 +01:00
apichick 1c1f3b714e
Merge branch 'master' into adfs-fixes 2022-11-28 12:40:07 +01:00
apichick ba17e10ebd
Merge branch 'master' into binauthz-fixes 2022-11-28 12:33:34 +01:00
lcaggio e56762b4d3
Merge branch 'master' into lcaggio/fix-20221123 2022-11-25 14:54:47 +01:00
Ludo 53d7b99b41 fix comment 2022-11-24 19:26:07 +01:00
Julio Castillo 612d7283e8 Enforce nonempty descriptions ending in a colon 2022-11-24 18:56:01 +01:00
lcaggio d1cc0519d8
Merge branch 'master' into lcaggio/fix-20221123 2022-11-24 16:07:33 +01:00
lcaggio 6b01b8641c Fix encryption. 2022-11-24 15:25:29 +01:00
Sebastian Kunze e4fc47a063
Normalize prefix handling in blueprints (#1003) 2022-11-23 11:09:00 +01:00
Miren Esnaola 67be16f94e ADFS blueprint fixes 2022-11-22 12:47:12 +01:00
Miren Esnaola 5ba65b99ed Binauthz blueprint fixes related to project creation 2022-11-22 12:45:43 +01:00
Julio Castillo 826ff14ef9 Sort variables and outputs 2022-11-21 13:17:55 +01:00
Julio Castillo 17fde88a57 Skip bq factory tests 2022-11-18 17:48:52 +01:00
Julio Castillo 7be3288cc7 Add tests for factory examples 2022-11-18 17:48:52 +01:00
Julio Castillo bb8c62c6ec
Merge branch 'master' into apigee 2022-11-17 00:47:05 +01:00
Miren Esnaola 3501d20785 Apigee module and blueprint 2022-11-16 19:49:26 +01:00
Wiktor Niesiobędzki 97c6a25b90 Use hungarian notation.
As per: https://cloud.google.com/apis/design/naming_convention#quantities
2022-11-16 16:44:24 +01:00
Wiktor Niesiobędzki 755ff7b1d2 Add trigger service account creation 2022-11-16 16:44:01 +01:00
Wiktor Niesiobędzki 9e37a915c8 Review fixes.
* Refactor trigger_config and trigger_config_v2 into one structure
* bump default python version to 3.10
* typo fixes
2022-11-16 16:44:01 +01:00
Sebastian Kunze df539b5e18
Have Squid log to /dev/stdout to stream logs to Cloud Logging (#980) 2022-11-16 14:41:26 +01:00
Aurélien Legrand 9b84e15392
Merge branch 'master' into maunope/static_routes 2022-11-15 15:57:59 +01:00
Maurizio Noseda Pedraglio 9815403230 removed vpc connector var 2022-11-15 14:12:41 +01:00
Maurizio Noseda Pedraglio ce624f2c93 moving metrics project conf to next PR 2022-11-15 14:03:54 +01:00
Sebastian Kunze 5125a5ad03
Replace Docker's `gcplogs` driver with the GCP COS logging agent (#977) 2022-11-15 13:19:52 +01:00
Sebastian Kunze bcffb67e0f
Enforce PROXY protocol in `filtering-proxy-psc` blueprint (#968) 2022-11-15 07:18:57 +00:00
maunope 2ffc1c9533
Merge branch 'master' into maunope/static_routes 2022-11-11 17:34:55 +01:00
Sebastian Kunze ef38d238b4
Add filtering-proxy-psc blueprint (#962) 2022-11-11 11:24:37 +01:00
Maurizio Noseda Pedraglio 6a6e3260c3 Merge branch 'maunope/static_routes' of https://github.com/maunope/cloud-foundation-fabric into maunope/static_routes 2022-11-10 18:23:12 +01:00
Maurizio Noseda Pedraglio f3002e9e55 #599 comments 2022-11-10 18:23:06 +01:00
maunope d65f9acbdc
Merge branch 'vpc-sc' into maunope/static_routes 2022-11-10 14:00:18 +01:00
Maurizio Noseda Pedraglio bb072af325 addressed #599 comments 2022-11-10 13:22:41 +01:00
Maurizio Noseda Pedraglio 9eb63dfaba merge 2022-11-10 13:14:23 +01:00
maunope c2da049330
Merge branch 'maunope/static_routes' into vpc-sc 2022-11-10 13:03:42 +01:00
Maurizio Noseda Pedraglio da0c05c3e8 updated tfdoc 2022-11-10 12:57:52 +01:00
Maurizio Noseda Pedraglio 55d544b172 Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into vpc-sc 2022-11-10 12:54:39 +01:00
Maurizio Noseda Pedraglio 2bc60e6dee readme updates, removed default prefix, completed vpc-sc compatibility 2022-11-10 12:44:17 +01:00
Aurélien Legrand 0c50cb2b44
Merge branch 'master' into net-dash-psa 2022-11-08 18:30:54 +01:00
Ludovico Magnocavallo 6d46ef7c6f
remove duplicate blueprint folder (#952) 2022-11-07 13:46:22 +01:00
Aurélien Legrand 04ffbc928e
Merge branch 'master' into net-dash-psa 2022-11-04 14:02:54 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Aurélien Legrand 5f6eb135c1
Merge branch 'master' into net-dash-psa 2022-11-03 14:03:50 +01:00
aurelien.legrand01@gmail.com c261bfe52a Improving comment for Redis. 2022-11-03 11:21:58 +01:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Ludo a214368800 revert temporary blueprint copy to old name 2022-11-02 11:14:20 +01:00
Ludovico Magnocavallo edc9fa7789
temporarily duplicate cloud armor example (#939) 2022-11-02 09:36:03 +00:00
Julio Castillo 9a6b6fd202
Merge branch 'master' into maunope/static_routes 2022-11-02 08:44:21 +01:00
Kumar Dhanagopal 80b95b8f49
Update README.md
Fixed minor typos
2022-11-01 12:29:43 -07:00
Ludovico Magnocavallo 8c51a2a386
Enable org policy service and add README notice to modules (#936)
* enable org policy service and add README notice to modules

* fix tests
2022-11-01 14:25:07 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Malet d7e0af75b2
feat(project-factory): introduce additive iam bindings to project-factory (#932) 2022-10-31 18:24:25 +01:00
Julio Castillo 9262e11ebf Fix pf example 2022-10-28 17:55:29 +02:00
Julio Castillo 410fe1c73a Add pf example with deny all org policy 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo 73f89256ea Fix lining in tfc wif blueprint 2022-10-28 17:49:44 +02:00
Julio Castillo ad420138ad Fix readme examples 2022-10-28 17:49:44 +02:00
Brian Jung 980cc678c8
Update main.tf 2022-10-28 11:19:46 -04:00