4658e5faa7
added variables required to be modified before applying again
2022-06-10 17:29:04 +02:00
8da7fbd351
cleanup reference in readme
2022-06-10 17:16:11 +02:00
a37af01203
fichero movido a fast/stages
2022-06-10 16:57:40 +02:00
1dbd13fc4b
fichero movido a fast/stages
2022-06-10 16:47:24 +02:00
a1a5011cd1
Update CLEANUP.md
...
link to gcloud beta compute shared-vpc associated-projects remove doc
2022-06-10 16:41:10 +02:00
77f3048a8c
Update CLEANUP.md
...
include comments in PR
2022-06-10 16:34:46 +02:00
a262ed3941
Update CLEANUP.md
2022-06-10 16:20:29 +02:00
21cfb69797
Update CLEANUP.md
...
delete spaces in headers
2022-06-10 16:03:10 +02:00
29ce5f666d
Simplify log_sink local
2022-06-10 12:25:26 +02:00
0bf1880431
Fix FAST audit logs when using pubsub as destination
...
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
f75c0021a1
fix #673 ( #674 )
2022-06-10 10:51:26 +02:00
bb3f55fe9e
Fix Gitlab WIF attributes ( #671 )
2022-06-09 08:31:50 +02:00
44ae2671b0
CI/CD support for Source Repository and Cloud Build ( #669 )
...
* add id to outputs
* initial cloud build implementation for stage 0
* comments
* stage 0
* stage 1, untested
* add support for IAM and CB triggers to source repository module
* refactor stage 0 to use sourcerepo module
* refactor stage 1 to use sourcerepo module
* file descriptions
* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
78becc22fa
Merge branch 'GoogleCloudPlatform:master' into master
2022-06-07 10:22:55 +02:00
8040a4538c
clarify some admin bindings via comments ( #663 )
2022-06-05 19:48:26 +02:00
fa321fc67c
Update README.md ( #667 )
...
* Update README.md
Fixed VPC SC example
* Update README.md
2022-06-05 19:43:14 +02:00
02f8986a1e
Update CLEANUP.md
2022-06-03 13:38:05 +02:00
2ace596ca8
Update CLEANUP.md
2022-06-03 13:22:49 +02:00
5701348d3d
Update CLEANUP.md
2022-06-03 13:21:30 +02:00
d7fd11b5fd
Update CLEANUP.md
2022-06-03 13:15:18 +02:00
8d4ea4ec67
Update CLEANUP.md
2022-06-03 13:06:46 +02:00
443a9b9538
Create CLEANUP.md
...
instructions to clean up FAST deployment
2022-06-03 13:02:42 +02:00
9feb938bed
Update README.md ( #653 )
2022-05-12 08:01:18 +02:00
e3ea387f0f
fix subnet schema ( #651 )
2022-05-09 11:53:57 +02:00
e9d06ba469
FAST: switch to SpotVM for NVAs
2022-05-04 09:59:47 +02:00
1d7b442642
FAST - Refactor VPN tunnels ( #644 )
...
* tested
* tfdoc
2022-05-04 08:11:17 +02:00
e487f8d731
Update naming convention
2022-04-21 23:53:16 +02:00
acd6719602
Adjusted Error Message of Supported Types
2022-04-19 11:10:21 +02:00
7b30aa2c12
Added "gitlab" type to 01-resman Stage
2022-04-19 11:09:33 +02:00
53fde432c4
Merge branch 'master' into alexmeissner/gitlab-template
2022-04-15 09:10:49 +02:00
73a9136dc6
disable some org policies ( #631 )
2022-04-15 08:10:42 +02:00
3b6de2531d
tfdoc
2022-04-15 02:20:39 +02:00
473178010a
don't error out when no repositories are set
2022-04-15 02:19:46 +02:00
74a919d203
Update variables.tf
...
Fixed formatting
2022-04-14 18:34:17 +02:00
6df4fc1cff
Added Gitlab CI Template
...
- Added Gitlab CI Template
- Changed Identify Provider settings
- Fixed incorrect outputs
- Enabled Gitlab
2022-04-14 18:23:22 +02:00
2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets
2022-04-13 17:21:00 +02:00
73db258a38
Use new variable subnets_proxy_only instead of subnets_l7ilb for fast
2022-04-13 17:05:13 +02:00
eec0fd2fdf
FAST: allow changing tag names from variables in resman ( #628 )
2022-04-13 10:22:33 +02:00
2644627837
Remove broken link and ignore globals in fast stages
2022-04-12 21:33:03 +02:00
725f7effce
Initial MVP for CI/CD ( #608 )
...
* preliminary support for wif in stage 0
* IAM wif role
* IAM wif role TODO
* add support for external SA IAM to SA module
* add name output to SA module
* separate cicd SA
* tfdoc
* GITLAB principal (untested)
* make GCS name output static
* outputs bucket
* fix stage 1 test
* tweak outputs
* tfdoc
* move wif_pool to automation variable
* add support for top-level and repository providers
* add missing boilerplate
* fix branchless principal
* initial workflow
* symlink provider template in stages
* remove service accounts from stage 0 cicd tfvars
* add cicd interface variable to resman stage
* fix cicd variable in resman stage
* better condition on outputs_location
* fix last change
* change outputs_location type
* revert outputs_location change
* split outputs in stage 0
* update ci/cd temporary notes
* rename additive IAM resource in SA module
* split outputs in stage 1
* remove unused locals
* fix stage 1 tests
* tfdoc
* Upload action files to outputs_bucket
* Fix tests and README
* rename template, streamline outputs
* local templates and gcs output for all stage 2
* add workflows to local output files
* Use lowercase WIF providers everywhere
* Bring back suffix for workflow files
* Remove unused files
* Update READMEs
* preliminary CI/CD implementation for stage 1
* fix stage 1
* stage 1 cicd
* tfdoc
* fix tests
* readme and links for cicd and wif
* refactor wif providers
* refactor cicd for stage 1
* fix stage 1
* wif org policies
* split identity provider configuration from cicd
* add type attribute to cicd repositories
* valid cicd repositories have a workflow template
* refactor stage 01
* fix stage 01 tests
* minimal CI/CD documentation
* better check_links error reporting
* fix links
* Added Gitlab specific configurations
Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.
* Fixed TF formatting in identity providers.
* Changing identity provider audience to null
Changing identity provider audience to default to null.
* add instructions for renaming workflows
* address Julio's comments
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
9bb2f91458
Fix a few import errors in FAST ( #620 )
...
* fix import errors in stage 0
* fix import errors in stage 1
2022-04-12 07:35:31 +02:00
c889ce8426
Updated DNS documentation ( #611 )
2022-04-05 10:02:26 +02:00
6f00caaaab
Handle Service Identity SA. Update IAM.md
2022-04-04 00:38:34 +02:00
e008fde9bb
Update READMEs and separate demo pipelines
2022-04-03 22:03:35 +02:00
ee5f22ca05
Merge branch 'master' into lcaggio/dp-dc-policy-tag
2022-04-01 19:19:17 +02:00
15ba9559c5
Update READMEs
2022-04-01 18:44:18 +02:00
6d1207e1d7
Update FAST data foundation integration
2022-04-01 18:38:56 +02:00
0b2ebdb4bc
Merge branch 'master' into 597-fix-link-checker
2022-03-30 12:23:13 +02:00
1bc9929c81
Update vpn-spoke-prod.tf ( #602 )
...
Fixed region ew4
2022-03-30 10:20:10 +02:00
2bb9e3f64e
[ #597 ] Fix link_checker
2022-03-28 09:43:00 +02:00
03c871097c
Remove moved blocks
2022-03-18 10:44:44 +01:00
78664f3ba4
update fast net docs
2022-03-17 14:41:51 +01:00
01ee503c38
allow psa disabling in fast
2022-03-17 14:41:04 +01:00
22deb378a6
disable PSA in fast
2022-03-17 14:37:10 +01:00
fef3ed8c93
Fix missing service networking identity in project, PSA ( #585 )
...
* test
* test
* test
* fix
* tfdoc
* fix tests
* fix tests
2022-03-17 14:29:28 +01:00
a22cf80b60
Fix PSA ( #584 )
...
* Fix PSA
* fix typo
* fix vpn/peering diff
* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
7c3d9beced
[ #576 ] net-vpc - Add the ability to export/import custom routes throu… ( #577 )
2022-03-11 14:40:44 +01:00
6bdd85df55
FAST: adds stackdriver.googleapis.com to env host projects. ( #574 )
...
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
* Update spoke-dev.tf
* Update spoke-prod.tf
2022-03-07 09:16:24 +01:00
2a4c3dc913
Update outputs.tf ( #571 )
2022-03-06 09:19:31 +01:00
ea79b339e9
Doc updates to reference new peering stage ( #565 )
...
* Few updates to reference new peering stage
* More updates to peering stage
* VPN -> HA VPN
* Fix broken links
2022-02-28 16:29:38 +01:00
cdecc199a4
Update README.md
2022-02-28 14:19:00 +01:00
fb90500adc
FAST: add 02-networking-peering stage. ( #561 )
...
* Networking with peering - initial commit
* README and tests
* Linter fixes
* Linter fixes
* Linter fixes
* Update README.md
* split out vpn/peering in separate files so the rest is identical
* fix dns for vpn and peering
* update tfdoc to support multiple outputs/variables files
* add peering variables
* update tfdoc for modules
* make it easier to spot errored docs
* fix doc
* yapf
* fix permadiff in firewall module source ranges
* FAST: Networking: DNS Fixes
* FAST: ability to toggle on-prem vpn creation
* FAST: fix outputs
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
0d08c7d56a
Re-aligning PF vars post varpocalypse
2022-02-27 19:04:47 +01:00
26df0468b6
Adds autohealing to NVA MIGs
2022-02-27 10:57:21 +01:00
c21a59a490
FAST: use preemptable instances for demo NVA. Comment out test VMs.
2022-02-27 10:04:20 +01:00
e157a52d97
Rename sample project in fast project factory
2022-02-25 16:56:13 +01:00
31bf9b98d1
Swap xpnAdmin with custom xpnServiceAdmin for service projects
2022-02-25 12:19:10 +01:00
0d5d43b061
linter fixes
2022-02-24 15:13:34 +01:00
dc3a2ad7be
Fix tests on stages
2022-02-24 15:05:18 +01:00
c1390d3a6a
FAST PF: delete placeholder
2022-02-24 12:21:44 +01:00
3bab8d3ab9
FAST: Data Platform README.md fixes
2022-02-24 12:17:49 +01:00
62ae1cb7a1
FAST: Project Factory README.md fixes
2022-02-24 12:15:12 +01:00
fb039d1bb7
FAST: Security README.md fixes
2022-02-24 12:10:36 +01:00
d3d29836b8
FAST: Networking NVA stage fix
2022-02-24 12:01:54 +01:00
7ca1e6af5a
FAST: Networking README.md fixes
2022-02-24 11:48:56 +01:00
1af71244f3
FAST: Resman README.md fixes
2022-02-24 11:28:13 +01:00
ab4a8eb78a
FAST: README.md fixes
2022-02-24 11:21:06 +01:00
c4b2f85a3b
README tweaks
2022-02-21 20:41:40 +01:00
c74ea67987
minimal README tweaks
2022-02-21 14:52:25 +01:00
7d8299b837
fix tag environment binding names in fast
2022-02-21 13:28:36 +01:00
474bcbdd0e
Use tags and tag-based IAM conditions in FAST ( #553 )
...
* organization module
* folder module
* project module
* fix project binding
* environment tags
* use id instead of name for references
* environment bindings
* conditional org policy admin binding via tags
* rename pf service accounts and buckets
* update IAM docs
* kms module
* compute-vm
* fix compute-vm
* tfdoc
2022-02-20 11:26:30 +01:00
4cb46fa19d
Update README.md
2022-02-19 08:28:35 +01:00
98056b4457
Update README.md
2022-02-19 08:27:32 +01:00
f258ff1998
fw rules
2022-02-19 07:59:30 +01:00
29e839e3a6
Fix
2022-02-18 22:20:32 +01:00
55c78a132f
Add network tag. Add KMS support in the DAG example.
2022-02-18 22:09:48 +01:00
fb5d1adf9e
composer working
2022-02-18 19:17:58 +01:00
cde75d051c
tfdoc
2022-02-18 14:52:43 +01:00
a9f8422f8b
conform to FAST project naming
2022-02-18 14:40:08 +01:00
235e22ee9f
use different IP CIDR ranges for composer
2022-02-18 14:39:54 +01:00
b9804d895b
re-add org policy admin role
2022-02-18 14:39:33 +01:00
f84c47d6f4
Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform
2022-02-18 10:04:24 +01:00
f85b327a5a
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-18 08:58:21 +01:00
1429a4dde3
Update README: KMS optional, VPC-SC
2022-02-18 08:53:51 +01:00
3a4d257f2e
tfdoc
2022-02-18 08:42:23 +01:00
21a901c1dc
assign net delegated grants by env
2022-02-18 08:38:36 +01:00
b147a4cc44
use all service accounts from stage1 in networking delegated grants
2022-02-18 08:21:25 +01:00
a02179422d
Merge branch 'lcaggioni/fast-data-platform' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into lcaggioni/fast-data-platform
2022-02-18 07:56:27 +01:00
48088dedc0
tfdoc
2022-02-18 07:56:11 +01:00
4eca2ac11d
Merge branch 'master' into lcaggioni/fast-data-platform
2022-02-18 06:45:05 +00:00
ajlopezn
Antonio Lopez
Julio Castillo
Ludovico Magnocavallo
javiergp
frits-v
Simone Ruffilli
Lorenzo Caggioni
Alexander Meissner
alexmeissner
Aleksandr Averbukh
Elia
Luca Prete
Luca Prete
Simone Ruffilli