Commit Graph

1286 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki 9e37a915c8 Review fixes.
* Refactor trigger_config and trigger_config_v2 into one structure
* bump default python version to 3.10
* typo fixes
2022-11-16 16:44:01 +01:00
Wiktor Niesiobędzki 303b51a0a9 Add triggers to cloud functions v2
* add `trigger_config_v2` for v2 functions
* add optional for objects in variables.tf
* make examples in README runnable
* add example for Cloud Function v2
* add exapmle for trigger for Cloud Function v2
* remove optional variables from examples with `null` value
2022-11-16 16:44:01 +01:00
Sebastian Kunze df539b5e18
Have Squid log to /dev/stdout to stream logs to Cloud Logging (#980) 2022-11-16 14:41:26 +01:00
Ludovico Magnocavallo ea360072b8
Update README.md 2022-11-16 14:14:43 +01:00
Ludovico Magnocavallo 5f710f21dc
Add support for serverless NEGs to ILB L7 module (#983)
* refactor neg variable for serverless

* cloudrun negs

* cloudrun negs

* serverless neg test

* re-enable forwarding rule output
2022-11-16 14:14:05 +01:00
Maurizio Noseda Pedraglio b2bd0009b9 restored tfskip 2022-11-15 16:21:23 +01:00
Maurizio Noseda Pedraglio a47726741d enablid tests 2022-11-15 15:42:10 +01:00
Maurizio Noseda Pedraglio 4cbf0272f9 linting 2022-11-15 15:12:50 +01:00
Maurizio Noseda Pedraglio 7c874660a8 restored validation 2022-11-15 15:10:42 +01:00
maunope 09fba581a8
Update README.md
fix
2022-11-15 14:49:16 +01:00
maunope f514ab0371
Update README.md
restored sample
2022-11-15 14:48:48 +01:00
maunope fbfbb93783
Update README.md
linting fix
2022-11-15 14:47:11 +01:00
maunope a199214970
Update variables.tf
fixed test
2022-11-15 14:42:19 +01:00
maunope 7f9c29c4ba
Merge branch 'master' into maunope/cf_module_update 2022-11-15 13:53:31 +01:00
maunope 099ac6ea7e
Update main.tf
removed comment
2022-11-15 13:52:52 +01:00
Sebastian Kunze 5125a5ad03
Replace Docker's `gcplogs` driver with the GCP COS logging agent (#977) 2022-11-15 13:19:52 +01:00
maunope a661dad67c
Update variables.tf
added worker pool variable
2022-11-15 12:24:59 +01:00
maunope f00c7da926
Update main.tf
added worker pool parameter
2022-11-15 12:24:19 +01:00
maunope fc0c8bd175
Update README.md
added sample
2022-11-15 12:23:44 +01:00
maunope 251703c63c
Update README.md
md file update
2022-11-15 12:18:00 +01:00
Ludovico Magnocavallo e957797aa6
add validation for health check port specification (#975) 2022-11-14 15:20:01 +00:00
Ludovico Magnocavallo 40a37e9328
Refactor net-ilb-l7 module for Terraform 1.3 (#974)
* wip

* wip

* minimal example test

* wip

* instance group example

* neg examples

* example tests

* tfdoc

* readme

* tested

* example

* default urlmap value, remove stale variable

* tests
2022-11-14 14:39:00 +01:00
Julio Castillo 4a25129765 Update readme 2022-11-12 19:25:41 +01:00
Julio Castillo c83a7de076 Remove as_logging_destination 2022-11-12 19:24:41 +01:00
Julio Castillo b37ef3a90a Update folder readme 2022-11-12 12:22:09 +01:00
Julio Castillo daf0fef7cd Fix folder variables 2022-11-12 12:07:48 +01:00
Julio Castillo 8fe19ad7c2 Rename bigquery_use_partitioned_table 2022-11-12 11:30:34 +01:00
Julio Castillo c7fe6da12e Update READMEs 2022-11-11 19:28:02 +01:00
Julio Castillo 486d398c7d Update logging sink to tf1.3 in resman modules 2022-11-11 19:22:05 +01:00
Natalia Strelkova d96f95c2b6 cannot instead of can not 2022-11-11 11:56:47 +00:00
Natalia Strelkova c640695e1a
Merge branch 'master' into nstrelkova-prefix-consistency 2022-11-11 07:41:31 +01:00
Ludovico Magnocavallo a9c47681d8
Refactor vps-sc module for Terraform 1.3 (#963)
* wip

* example tests

* module tests

* streamline example

* fast

* tfdoc

* use collections.Counter in tests
2022-11-10 19:34:45 +01:00
Natalia Strelkova d5d1d9eb34 terraform formatting fixed 2022-11-10 15:11:38 +00:00
Natalia Strelkova 68c3b13d6a prefix variable consistency across modules 2022-11-10 15:05:53 +00:00
Aleksandr Averbukh b04cfbf980
Merge branch 'master' into org-policy-custom 2022-11-09 08:53:38 +01:00
Valerio Ponza 8282b6c0e2
Fix README typo in firewall module (#960)
* fixing readme in firewall module

* fix typo

Co-authored-by: Valerio Ponza <vponza@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2022-11-09 00:25:34 +01:00
Aleksandr Averbukh 1419a04147 Update module readme 2022-11-08 18:17:05 +01:00
Aleksandr Averbukh aae6ab132c Add tests for org policy custom constraints 2022-11-08 18:13:49 +01:00
Aleksandr Averbukh 3bd2e1c0ea
Merge branch 'master' into org-policy-custom 2022-11-08 09:37:23 +01:00
Aleksandr Averbukh 3562c52520 Add support for org policy custom constraints 2022-11-08 09:34:38 +01:00
Catalin Muresan 4e2762098f Updated README.md 2022-11-07 12:47:35 +00:00
Catalin Muresan 31bb4476d1 Added IAM Additive and converted some outputs to static 2022-11-07 12:41:41 +00:00
Wiktor Niesiobędzki 0d80ad3f29
cloud-functions v2 - fix reference to bucket_name (#951)
* Fix reference to bucket when no bucket_config is provided

* Copy tests to check v2 cloud-functions
2022-11-06 08:32:38 +01:00
Ludovico Magnocavallo fae5654e33
Refactor VPC firewall module for Terraform 1.3 (#949)
* module and module tests/examples

* align blueprints and fast

* fix null ranges

* make ports optional

* tfdoc

* make rules optional defaulting to all protocols

* review comments

* last round of comments

* invert precedence of template variables

* add option to disable all default rules

* add option to disable all default rules

* split egress/ingress

* tests

* fix tests
2022-11-04 13:56:07 +01:00
Julio Castillo 649bedc291
Update README.md 2022-11-03 13:19:02 +01:00
Julio Castillo e29957c394
Update README.md 2022-11-03 13:18:21 +01:00
Julio Castillo 4b278a1533 Update variable description 2022-11-03 12:35:50 +01:00
Julio Castillo d91a0835f7 Remove organization-policy module (now included in the resman modules) 2022-11-03 12:35:50 +01:00
Julio Castillo 5b1873775a Fix internal links 2022-11-03 12:14:47 +01:00
Julio Castillo f64c43e893 Add org policy factory example 2022-11-03 12:12:50 +01:00
Julio Castillo 3e18575fad Add factory support for new org policies 2022-11-03 11:41:53 +01:00
Ludovico Magnocavallo 0563260678
Refactor ILB module for Terraform 1.3 (#941)
* wip

* wip

* wip

* backport health check to compute-mig

* align blueprints and fast

* fix blueprints

* tfdoc
2022-11-02 18:05:20 +01:00
Julio Castillo 38e761c3a8 Add test that ensures the implementation of org policies is consistent 2022-11-02 10:41:38 +01:00
Ludovico Magnocavallo 8c51a2a386
Enable org policy service and add README notice to modules (#936)
* enable org policy service and add README notice to modules

* fix tests
2022-11-01 14:25:07 +01:00
Ludovico Magnocavallo a30c186f1f
Refactor compute-mig module for Terraform 1.3 (#931)
* wip: autoscaler

* wip: fix autoscaler

* wip: health check

* wip: untested

* wip: tests and examples missing

* wip: examples

* wip: consumers

* blueprint tests

* fast
2022-11-01 09:38:59 +01:00
Julio Castillo b6c40dcdb3 Update readmes 2022-10-28 17:49:44 +02:00
Julio Castillo b56b57b974 Fix more copy/past badness 2022-10-28 17:49:44 +02:00
Julio Castillo c1fe477f88 Remove bad copy/paste 2022-10-28 17:49:44 +02:00
Julio Castillo c714952f39 Fix tests 2022-10-28 17:49:44 +02:00
Julio Castillo ad420138ad Fix readme examples 2022-10-28 17:49:44 +02:00
Julio Castillo f44f4a74dc Fix module tests 2022-10-28 17:49:44 +02:00
Julio Castillo b23d07b0c6 Update project/folder/module to use new org policies API and tf1.3 optionals. 2022-10-28 17:49:44 +02:00
Ludovico Magnocavallo 29cde275f0
fix backwards compatibility for vpc subnet descriptions (#926) 2022-10-28 08:13:04 +02:00
Julio Castillo 798fd6cc54
Merge branch 'master' into kmucha555/f_apigee_env_deployment 2022-10-27 21:46:31 +02:00
Krzysztof Mucha 74b17703cd Add support for deployment type and api proxy type for Apigee organization 2022-10-27 21:04:50 +02:00
Ludovico Magnocavallo e20de3b86a
fix service account create (#923) 2022-10-27 15:12:04 +00:00
Ludovico Magnocavallo ed9fd6b08d
Align documentation, move glb blueprint (#921)
* aling documentation, move glb blueprint

* modules README, sort modules

* reorder modules

* fix bp links

* fix moved blueprint test

* use a single cloud shell image in the repo
2022-10-26 14:31:04 +02:00
Julio Castillo 6242607e1b
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:24:20 +02:00
apichick d9ccf04221
Added managed_prometheus to features (#906)
* Added managed_prometheus monitoring_config

* fix module

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-25 21:18:50 +00:00
Julio Castillo b1dfbe29c2
Merge branch 'master' into ludo/gke-autopilot-datapath 2022-10-25 23:07:28 +02:00
Simone Ruffilli 384756a8a7 SimpleNVA: updated example 2022-10-25 18:09:31 +02:00
Simone Ruffilli 0611d66be7 SimpleNVA: add the option to create additional files 2022-10-25 18:07:38 +02:00
Julio Castillo 9e03ddbf6e Update README 2022-10-25 16:08:17 +02:00
Julio Castillo d759ac2ff1 Make dnssec not nullable 2022-10-25 15:47:18 +02:00
Julio Castillo 442f87e60e Rename local for consistency 2022-10-25 15:08:55 +02:00
Julio Castillo b5cee10dca Remove useless dynamic blocks 2022-10-25 15:07:56 +02:00
Julio Castillo 6340286fa4 DRY up resource name for recordsets 2022-10-25 15:07:56 +02:00
Julio Castillo 8bacd8f5d5 Add support for DNS routing policies 2022-10-25 15:07:56 +02:00
Simone Ruffilli c4d599f321
Fix race condition (#918)
The cloud-init runcmd had a race condition where the script could run before the network interfaces were ready.
Changed the script to a systemd unit and added a dependency on network ready.
2022-10-25 15:04:38 +02:00
Julio Castillo 1a3bb25917 Update provider version (needed for dns logging support). 2022-10-25 12:15:02 +02:00
Julio Castillo a676c0f64c Update readme 2022-10-25 12:11:07 +02:00
Julio Castillo 3b89d370a1 Simplify DNSSEC config 2022-10-25 12:11:07 +02:00
Julio Castillo ab11920bee Add cloud logging option 2022-10-25 12:11:07 +02:00
Julio Castillo 625eeb4d7f Make dns ttl optional 2022-10-25 12:11:07 +02:00
Ludovico Magnocavallo 68f5719036
gke module datapath for autopilot 2022-10-25 07:23:38 +02:00
Julio Castillo 341ad5ef87
Update README.md 2022-10-24 12:55:32 +02:00
dsbutler101 3c40fc8fce
Add missing description field
Important so we can flag these groups are TF managed and must not be manually updated.
2022-10-21 15:38:07 +01:00
Luca Prete 9aea79fd31
Add internal_ips output to compute-vm module 2022-10-21 10:38:25 +02:00
Ludovico Magnocavallo d0ccd9ac31
Update README.md 2022-10-17 16:31:16 +02:00
Giovanni Baratta ca1dc3659a
Add auto_delete and instance_redistribution_type to compute-vm and compute-mig modules. (#890)
* Add auto_delete parameter to compute-vm module

* Add instance_redistribution_type in compute-mig module
2022-10-16 21:19:46 +02:00
Daniel Marzini 49d5e21a4b
Fix csi-driver, logging and monitoring default values when autopilot … (#883)
* Fix csi-driver, logging and monitoring default values when autopilot is used
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-10-14 17:30:54 +02:00
Ludovico Magnocavallo 41c416b55e
make mtu default explicit in variable description 2022-10-14 11:13:48 +02:00
Ludovico Magnocavallo 4fa1dc431d
Refactor net-vpc module for Terraform 1.3 (#880)
* module tests pass

* doc examples

* refactor blueprints

* fast stages

* fix comment typo

* fix module factory test
2022-10-14 11:02:33 +02:00
Somnath Shukla a12da693a3
added support 2nd generation cloud function (#872)
* added support 2nd generation cloud function

* changed function_version to a simple boolean v2
removed memory_2ndGen

* will use the var.v2 to add the invoker role

* removed the list uisng compact and formated the code

* formated the code and added conditional feature

* formated the code

* added formating

* resolved the merge conflict

* Update readme

* Create local function object

* added secret_volumes
and secret_environment_variables for CF V2

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-13 08:09:00 +02:00
Ludovico Magnocavallo bc8f0c90b7
fix autoscaling block (#877)
* fix autoscaling block

* invert autoscaling block condition

* add autoscaling test
2022-10-12 16:44:47 +02:00
Ludovico Magnocavallo e8056577ce
Refactor GKE nodepool and blueprints (#875)
* first shot, untested

* example tests working

* module tests

* work on gke blueprints

* multitenant fleet doc examples

* fix gke hub doc examples

* blueprint tests

* move master range to vpc config

* fast stage 3 gke test

* tfdoc

* bump provider versions

* and bump provider again to latest
2022-10-12 12:59:36 +02:00
Ludovico Magnocavallo f080794167
Merge branch 'master' into tmp_revert_to_1.3.1 2022-10-10 11:21:26 +02:00
Natalia Strelkova 5dbc61cb8c temporary revert to Terraform 1.3.1 to support Cloud Shell 2022-10-10 09:19:55 +00:00
Julio Castillo 08b1dfdb8e Fix optionals for resource_usage_export field in `gke-cluster` 2022-10-10 10:47:51 +02:00
Ludovico Magnocavallo 16822e94ab
Refactor GKE module for Terraform 1.3 (#868)
* wip

* module and module tests

* doc examples

* gke-hub doc examples

* gke blueprints

* hub and spoke peering blueprint

* Rename some keys of some optional objects

* Fix readme

Co-authored-by: Julio Castillo <jccb@google.com>
2022-10-10 09:38:21 +02:00
Simone Ruffilli b5ee78c22d
Update ipprefix_by_netmask.sh (#866)
When code was moved from terraform template to separate file, "$$" (used to print $ on a tf template) was wrongly left behind.
2022-10-09 17:26:54 +02:00
Simone Ruffilli 67577ee80b
Update README.md 2022-10-09 15:41:56 +02:00
Ludovico Magnocavallo a0171b2c49
Bump terraform required version (#864)
* bump terraform required version

* fix test

* debug test

* debug test

* disable test

* fix CI file, bump terraform action version
2022-10-07 12:51:56 +02:00
Ludovico Magnocavallo e66340c4db
Refactor compute-vm for Terraform 1.3 (#860)
* refactor compute-vm for Terraform 1.3

* bump Terraform version in CI tests config

* fix optional null handling (ht jccb)

* tfdoc

* update blueprints

* align fast

* align README examples
2022-10-07 10:53:53 +02:00
Julio Castillo 894647ff9e Leverage new shared VPC project config defaults across the repo 2022-10-07 08:55:47 +02:00
Julio Castillo 07249194dd Fix README 2022-10-06 15:52:09 +02:00
Julio Castillo 1955a61159 Make project shared vpc fields optional 2022-10-06 15:48:37 +02:00
Taneli Leppä b65beef20d
Merge branch 'master' into nginx-reverse-proxy-cluster 2022-10-04 15:39:09 +02:00
Taneli Leppä 4feb3514fd Added an example of a Nginx reverse proxy cluster using RMIGs. 2022-10-04 15:38:52 +02:00
Simone Ruffilli 201f6b1aab
Fixes NVA issue when health checks are not enabled (#853)
* Fixes NVA issue when health checks are not enabled

* Update cloud-config.yaml
2022-10-04 07:55:10 +02:00
Simone Ruffilli 5950797385
COS based simple networking appliance (#846) 2022-09-30 18:43:24 +02:00
Taneli Leppä 8072be5619 nginx-tls: only use hostname part for certificate as the FQDN might be too long (>64 chars). 2022-09-30 13:39:14 +02:00
ddaluka 9c2a53f7a9
Management of GCP project default service accounts (#844)
* Added change for default service account deprivilege setting

* Updated readme and variable name

* Updated readme and variable name
2022-09-29 15:10:07 +02:00
cmalpe 2e51bdd8c4 added root password support for MS SQL Server 2022-09-29 10:57:19 +00:00
Ludovico Magnocavallo 1842586241
Bjbloemker-google/master (#843)
* Add ability to add KMS encryption to google_compute_instance_template

* fix code block

Co-authored-by: BJ Bloemker <bjbloemker@google.com>
Co-authored-by: bjbloemker-google <109173391+bjbloemker-google@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-09-29 09:01:15 +02:00
Ludovico Magnocavallo fcf71b983e
refactor net-address modules for 1.3 (#840) 2022-09-28 14:10:05 +02:00
Julio Castillo ac835b6d50 Update terraform version 2022-09-28 11:28:05 +02:00
Krzysiek Mucha 6e90af2bc3
Add support for service_label property in internal load balancer (#834)
Co-authored-by: Krzysztof Mucha <kmuch@softserveinc.com>
2022-09-21 23:30:35 +02:00
Natalia Strelkova d6c6ae943e regional MySQL DBs - automatic backup conf 2022-09-21 08:14:24 +00:00
lcaggio bdb9086f19
Merge branch 'master' into lcaggio/artifact-jit 2022-09-20 11:06:08 +02:00
lcaggio 495a5bbfff Add Artifact registry Service Identity SA creation. 2022-09-20 10:36:12 +02:00
Arindam Sirohia eb73e13b67 Updated for each condition of binary authorization in gke-cluster module 2022-09-20 00:35:06 +05:30
Arindam Sirohia 489acfdb32 Added new binary_authorization argument in gke-cluster module 2022-09-20 00:09:59 +05:30
Julio Castillo 7a4298783a Removed old and unused modules 2022-09-15 16:50:11 +02:00
Julio Castillo 7e9173d35d Create fully recursive e2e test runner 2022-09-12 13:58:11 +02:00
Julio Castillo 269894e92b Update all internal links examples -> blueprints 2022-09-09 16:39:01 +02:00
Julio Castillo 67c031c41c Change `modules/project` service_config default 2022-09-09 09:23:09 +02:00
Julio Castillo 5e1974b9c7 Merge branch 'master' into fast/gke2 2022-09-07 13:39:17 +02:00
Julio Castillo a866182161 Test documentation examples in the examples/ folder 2022-09-06 17:46:09 +02:00
lcaggio a253446406 First commit 2022-08-31 11:14:18 +02:00
Julio Castillo 0e65021802 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-30 20:06:47 +02:00
ddaluka 16e14fdb0a
Secret manager flag sensitive output (#786)
* Added sensitive output value

* Updated Readme

* updated readme
2022-08-29 13:22:52 +02:00
Taneli Leppä c798625868
net-glb: Added support for regional external HTTP(s) load balancing. (#775) 2022-08-27 22:58:11 +02:00
Roberto Jung Drebes 48fcfa8233
Merge branch 'master' into master 2022-08-24 16:23:03 +02:00
Julio Castillo 52e7e0517a Merge branch 'master' into fast/gke2 2022-08-24 15:37:15 +02:00
Roberto Jung Drebes 1bcfa51a40 fix doc 2022-08-24 14:41:27 +02:00
Roberto Jung Drebes a4752961db nginx-tls module 2022-08-24 14:37:53 +02:00
Roberto Jung Drebes 00f88730fe update compute-vm example 2022-08-24 12:14:10 +02:00
Roberto Jung Drebes 081e04fe2e fix envoy TD config for xDSv1.3 2022-08-24 10:44:05 +02:00
Roberto Jung Drebes 9597cabab7 fix service unit indent on cloud-config-container module 2022-08-23 21:12:09 +02:00
Natalia Strelkova ed68fb0179 typo fix (max_scale -> min_scale) 2022-08-23 15:43:07 +00:00
Simone Ruffilli a29faa7f8c
instance_termination_action must be set for compute-vm spot instances (#778)
* Bumped providers version
* Adds ability to control instance_termination_action for SpotVMs
2022-08-20 18:37:17 +02:00
Ludovico Magnocavallo ff1563e078 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-11 12:04:35 +02:00
Alex Lo 307bda4fed
apigee-x-instance.ip_range cannot take Support CIDR (#727)
* Instance.ip_range cannot take Support CIDR

Current docs are incorrect. It is not possible to specify the Support range.

See https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.instances#Instance

> ipRange	
> string
> Optional. IP range represents the customer-provided CIDR block of length 22 that will be used for the Apigee instance creation. This optional range, if provided, should be freely available as part of larger named range the customer has allocated to the Service Networking peering. If this is not provided, Apigee will automatically request for any available /22 CIDR block from Service Networking. The customer should use this CIDR block for configuring their firewall needs to allow traffic from Apigee. Input format: "a.b.c.d/22", Output format: a.b.c.d/22, e.f.g.h/28"

* tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-08-11 09:55:39 +02:00
Ludovico Magnocavallo ea72c5bc29
Merge branch 'master' into fast/gke2 2022-08-10 17:18:49 +02:00
Ludovico Magnocavallo ed4d59a8b1
refactor cloud run module (#773) 2022-08-09 14:06:30 +02:00
Ludovico Magnocavallo 86d73ee686 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-09 14:04:46 +02:00
Alef Reis 97104c0098
Add support to a public access to cloudsql-instance (#754)
* feat: add support to a public access to cloudsql-instance

* doc: update cloudsql-instance doc changing the ipv4_enabled parameter description

* test: fix assertion test to ipv4_enabled
2022-08-09 13:42:42 +02:00
Ludovico Magnocavallo 7374c82dd6
Merge branch 'master' into fast/gke2 2022-08-06 08:57:53 +00:00
Ludovico Magnocavallo 086e4a2b2c
add egress / ingress policy example (#768) 2022-08-04 17:00:14 +02:00
Ludovico Magnocavallo 531acf3476 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-08-02 19:15:07 +02:00
Daniel Marzini 6314afb21e Fix gke-cluster enable_binary_authorization being deprecated 2022-08-02 18:26:53 +02:00
Miren Esnaola e6dbf9bf01 Shared vpc service fixes 2022-08-02 18:22:31 +02:00
Miren Esnaola 0920ac3877 Shared vpc service fixes 2022-08-02 18:21:08 +02:00
Ludovico Magnocavallo 45517045a2
Merge branch 'master' into fast/gke2 2022-07-30 13:53:48 +00:00
Ludovico Magnocavallo 3778d37d18
Fix gke hub module features condition (#761)
* fix features condition

* remove test output

* fix example tests

* fix module tests
2022-07-30 15:53:05 +02:00
Daniel Marzini e4de73febb Revert "fix mci integration in the gke-hub"
This reverts commit 171d0d1051.
2022-07-30 09:37:34 +02:00
Daniel Marzini 171d0d1051 fix mci integration in the gke-hub 2022-07-30 00:54:05 +02:00
Ludovico Magnocavallo 133fd07823 unfinished gke hub IAM 2022-07-29 11:31:34 +02:00
Ludovico Magnocavallo 366f28a519 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-07-29 10:57:25 +02:00
Ludovico Magnocavallo b20ab65756
GKE hub module refactor (#760)
GKE hub module refactor 
Co-authored-by: Daniel Marzini <danielmarzini@users.noreply.github.com>
Co-authored-by: Miren Esnaola <mirene@google.com>
2022-07-29 08:39:25 +02:00
apichick 329b511ac3
Changed cluster id sensitivity (#756)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-07-25 16:13:04 +02:00
Ludovico Magnocavallo 92bd128287
remove key_algorithm from glb/ilb-l7 examples (#757) 2022-07-25 16:00:13 +02:00
apichick 4069e42b66
Merge branch 'master' into shared-vpc-host-dependency 2022-07-21 14:38:31 +02:00
Miren Esnaola f153ab4614 Added dependency on google_compute_shared_vpc_host_project.shared_vpc_host to project_id output and modified tests 2022-07-21 14:11:21 +02:00
Miren Esnaola 6275f1bafb Added gkehub.googleapis.com to jit services 2022-07-21 10:06:47 +02:00
Taneli Leppä 6f96f0af3c Fixed issue with missing project reference in Cloud DNS data source when creating a public zone. 2022-07-19 11:08:13 +02:00
Miren Esnaola 824353a42b Added servicemesh feature to GKE hub and included fleet robot service account in projectmodule 2022-07-15 17:58:39 +02:00
Seth Moon a8677ededc
Move Cloud Run VPC Connector annotations to template metadata (#735) (#737) 2022-07-13 21:06:28 +02:00
Julio Castillo 93acd595fe Merge branch 'master' into fast/gke2 2022-07-12 12:20:06 +02:00
Julio Castillo 25955b158a Merge branch 'master' into fast/gke2 2022-07-12 12:16:04 +02:00
Ludovico Magnocavallo d9ea825ea5
add support for topic message duration (#732) 2022-07-12 09:23:23 +02:00
Ludovico Magnocavallo 1abfdacd56
Avoid setting empty IAM binding in subnet factory (#731)
* avoid setting empty IAM binding in subnet factory

* fix tests
2022-07-11 21:11:52 +02:00
Ludovico Magnocavallo 263cf96d81
fix #728 (#729) 2022-07-10 11:34:41 +02:00
Aleksandr Averbukh f3dd8692ba
Fix documentation for organization-policy module (#726) 2022-07-10 09:12:47 +02:00
Aleksandr Averbukh a1e34234ae Tf fmt for the org-policy module 2022-07-08 15:25:35 +02:00
Aleksandr Averbukh 9c942a68d6 More experimental definition to a separate file, so CICD does not rewrite it with default-versions.tf 2022-07-08 15:19:47 +02:00
Aleksandr Averbukh 9ec644d524 Mention of experimental feature in the readme file 2022-07-08 12:27:43 +02:00
Aleksandr Averbukh 63ac142005 Simplified module interface, proper data structure for policies 2022-07-08 12:24:18 +02:00
Aleksandr Averbukh e6d558e416 Add refs to the readme files. 2022-07-06 20:05:38 +02:00
Aleksandr Averbukh adac90d1bb Fix docs 2022-07-06 19:49:12 +02:00
Aleksandr Averbukh a34983b2e9 OrgPolicy module (factory) using new org-policy API, #698 2022-07-06 19:41:18 +02:00
Ludovico Magnocavallo a3ea8bed8b wip 2022-07-05 10:07:50 +03:00
apichick ecee29820e
Merge branch 'master' into net_glb_ip_address 2022-07-01 18:59:28 +02:00
Ludovico Magnocavallo ee7a615a58 Merge remote-tracking branch 'origin/master' into fast/gke2 2022-06-29 17:06:55 +02:00
Abhishek Patil d224404424 when using managed prometheus or passing monitoring config there is error thrown as Error: googleapi: Error 400: Cannot specify logging_config or monitoring_config together with logging_service or monitoring_service., badRequest which is resolved using the fix 2022-06-29 14:54:05 +05:30
Ludovico Magnocavallo 5982fe89ff as developed with Julio 2022-06-28 17:33:54 +02:00
Julio Castillo cf76744f95 Fix addons for autopilot clusters, add tests for gke-cluster.
Fixes second part of #702
2022-06-28 12:24:17 +02:00
Julio Castillo 07b00c34fe Bump providers versions and pin versions for tests 2022-06-28 10:20:40 +02:00
Julio Castillo b6f0c1ae2b Add `consumer_accept_list` to `apigee-x-instance`
Fixes #701
2022-06-27 10:01:31 +02:00
Ludovico Magnocavallo 666d8a469c
Merge branch 'master' into fast/gke2 2022-06-23 08:34:09 +02:00
Miren Esnaola 0cf6f1d3eb Modified reserved IP address outputs 2022-06-22 13:14:28 +02:00
Ludovico Magnocavallo 3227bd13ce
Merge branch 'master' into binauthz 2022-06-18 08:54:16 +02:00
Miren Esnaola 2e9fdea1a4 Binary authorization module and example 2022-06-17 16:09:12 +02:00
Ludovico Magnocavallo 943d6d431e
Revert "Binary authorization module and example" (#686) 2022-06-17 12:32:42 +02:00
Julio Castillo 4c72ee701b
Merge branch 'master' into binauthz 2022-06-17 11:17:36 +02:00
Ludovico Magnocavallo ee23694fed revert service account modules changes to outputs 2022-06-16 23:09:35 +02:00
Ludovico Magnocavallo 6d8f3f7e22 depend service account outputs on iam roles 2022-06-16 22:16:20 +02:00
Ludovico Magnocavallo cbf008fed5
add support for secrets (#684) 2022-06-16 16:34:46 +02:00
Miren Esnaola 073196c56e Binary authorization module and example 2022-06-16 12:29:26 +02:00
Julio Castillo 0bf1880431 Fix FAST audit logs when using pubsub as destination
This commit also splits each organization-level logging sink of type
`logging` to a separate logging bucket.
2022-06-10 12:25:26 +02:00
Julio Castillo 110d94067d Squashing relevant changes from fast-dev-gke-marzi
Co-authored-by: Daniel Marzini <dmarzi@google.com>
2022-06-08 11:42:04 +02:00
Julio Castillo 9bcae7b180 Enable WIF issuer in gke-hub 2022-06-08 11:42:04 +02:00
Ludovico Magnocavallo 44ae2671b0
CI/CD support for Source Repository and Cloud Build (#669)
* add id to outputs

* initial cloud build implementation for stage 0

* comments

* stage 0

* stage 1, untested

* add support for IAM and CB triggers to source repository module

* refactor stage 0 to use sourcerepo module

* refactor stage 1 to use sourcerepo module

* file descriptions

* fix gitlab pipeline
2022-06-08 11:34:08 +02:00
Ludovico Magnocavallo 5e8b06fc85
Initial version of the Contributor's Guide (#666)
* fix IAM in examples

* WIP

* fix service identities IAM example

* design principles

* toc anchors

* fix ordering

* style guide

* checks

* example tests

* tests and tools

* fix project example test

* address typos

* address comments

* address last comments
2022-06-06 15:12:28 +02:00
psabhishekgoogle 668a8bb07c
Update outputs.tf
makimg changes in net-glb module and correcting the output ipaddress
2022-05-25 13:36:58 +05:30
Ludovico Magnocavallo 22d0506f4d
fix condition in subnet factory flow logs (#654) 2022-05-18 10:33:56 +02:00
Ludovico Magnocavallo e3ea387f0f
fix subnet schema (#651) 2022-05-09 11:53:57 +02:00
Ludovico Magnocavallo 31d87e722a
fix secondary range in yaml example
fixes #650
2022-05-09 11:23:54 +02:00
Ludovico Magnocavallo ff25809020
Fix tfdoc parsing on newllines in outputs (#649)
* fix

* use the right (ugly) Python formatter

* boilerplate on new file

* and do the actual tfdoc run on the original outputs file
2022-05-05 14:43:38 +02:00
Ludovico Magnocavallo fcfbcee136
Merge branch 'master' into sruffilli/spot-vm 2022-05-04 18:26:45 +02:00
Julio Castillo e6135bb323 Remove preemptible VMs in favor of spot VMs 2022-05-04 18:01:07 +02:00
Daniel Strebel f090c037f5
Merge branch 'master' into feature/add-apigee-service-attachment 2022-05-04 17:34:44 +02:00
Julio Castillo aee089dcd3 Add spot vm support to `gke-nodepool` 2022-05-04 10:05:31 +02:00
Simone Ruffilli 882c07cc19
Merge branch 'master' into sruffilli/spot-vm 2022-05-04 10:01:55 +02:00
Simone Ruffilli e84f90f9a2
Update variables.tf 2022-05-04 10:01:28 +02:00
Simone Ruffilli be54fe31d7 Adds Spot VM support to compute-vm 2022-05-04 09:48:31 +02:00
Julio Castillo 4e83b5003b
Merge branch 'master' into sql-multi-region 2022-05-03 17:46:18 +02:00
Daniel Strebel 1a53c16365 add service_attachment to Apigee instance outputs 2022-05-03 17:02:57 +02:00
flaprimo a1b66c2ba1
Add subscription filter support to PubSub module (#632)
* add subscription filters to pubsub module

* add tfdoc

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-04-30 11:25:50 +02:00
next-davidduquehernandez 4cb814a0ae
Added 'gke_backup_agent_config' option to addons in gke-cluster (#642)
* Added 'gke_backup_agent_config' option to addons in gke-cluster

* Update README.md after launch tfdoc.py
2022-04-30 10:32:49 +02:00
Aleksandr Averbukh 189ee7ae1a Add shielded_instance_config support for compute instance template 2022-04-23 08:45:04 +02:00
Julio Castillo 2ddce7b8fa Fix gke-cluster permadiff when using dns_config 2022-04-20 11:36:53 +02:00
Ludovico Magnocavallo 4c615fed85
Merge branch 'master' into sql-multi-region 2022-04-20 09:01:47 +02:00
Ludovico Magnocavallo ab646f38ed
Bump provider versions to >= 4.17.0, terraform to >= 1.1.0 (#634)
* bump provider versions to >= 4.17.0, terraform to >= 1.1.0

* bump teraform version in lint check, edit CHANGELOG
2022-04-17 13:55:40 +02:00
lcaggio 47563fdab8
Merge branch 'master' into sql-multi-region 2022-04-15 09:26:57 +02:00
Ludovico Magnocavallo a34823e2d0
Add monitoring notification service identity to project module (#630)
* add monitoring notification service identity

* linting
2022-04-15 01:59:00 +02:00
Aleksandr Averbukh 2e207eb3a5
Merge branch 'master' into psc_and_rlbproxy_subnets 2022-04-13 17:21:00 +02:00
Aleksandr Averbukh 62a299a6f5 Deprecate subnets_l7ilb variable, add support for proxy_only and psc subnets. 2022-04-13 16:38:47 +02:00
Lorenzo Caggioni 24930ce397 Fix README, bye bye pippo :-) 2022-04-13 11:05:55 +02:00
Julio Castillo 952e18d0f1 Add sqladmin to project jit_si and fix some documentation 2022-04-13 11:05:55 +02:00
Lorenzo Caggioni a3f03ac213 Add KMS on CloudSQL module 2022-04-13 11:05:55 +02:00
Ludovico Magnocavallo 1cfb5dcaec Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo 19027e587e Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo 4944871ad0 Update README.md 2022-04-13 10:42:13 +02:00
Ludovico Magnocavallo 045806cfa4 Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 10:42:13 +02:00
lcaggio 15cdd179c6
Merge branch 'master' into lcaggio/sql-kms 2022-04-13 09:12:48 +02:00
Ludovico Magnocavallo 420c4de437
Update README.md 2022-04-13 09:10:56 +02:00
Ludovico Magnocavallo 4e1d06fd75
Update README.md 2022-04-13 09:08:01 +02:00
Ludovico Magnocavallo 874e9a57c7
Update README.md 2022-04-13 09:06:18 +02:00
Ludovico Magnocavallo 53c9431c98
Improve project module README (#627)
* improve module README

* Fix a few typos

Co-authored-by: Julio Castillo <jccb@google.com>
2022-04-13 09:05:28 +02:00
Lorenzo Caggioni b415d824c9 Fix README, bye bye pippo :-) 2022-04-13 08:59:14 +02:00
Julio Castillo 1f254880b9 Add sqladmin to project jit_si and fix some documentation 2022-04-13 00:22:54 +02:00
Julio Castillo c799dcd0bb Merge branch 'master' into sql-multi-region 2022-04-12 23:45:27 +02:00
Lorenzo Caggioni c7c77541fb Add KMS on CloudSQL module 2022-04-12 19:01:34 +02:00
Aleksandr Averbukh 6ab121a836 Add support for Private Service Connect and Reginal Managed Proxy subnets for net-vpc module 2022-04-12 12:57:33 +02:00
Ludovico Magnocavallo 725f7effce
Initial MVP for CI/CD (#608)
* preliminary support for wif in stage 0

* IAM wif role

* IAM wif role TODO

* add support for external SA IAM to SA module

* add name output to SA module

* separate cicd SA

* tfdoc

* GITLAB principal (untested)

* make GCS name output static

* outputs bucket

* fix stage 1 test

* tweak outputs

* tfdoc

* move wif_pool to automation variable

* add support for top-level and repository providers

* add missing boilerplate

* fix branchless principal

* initial workflow

* symlink provider template in stages

* remove service accounts from stage 0 cicd tfvars

* add cicd interface variable to resman stage

* fix cicd variable in resman stage

* better condition on outputs_location

* fix last change

* change outputs_location type

* revert outputs_location change

* split outputs in stage 0

* update ci/cd temporary notes

* rename additive IAM resource in SA module

* split outputs in stage 1

* remove unused locals

* fix stage 1 tests

* tfdoc

* Upload action files to outputs_bucket

* Fix tests and README

* rename template, streamline outputs

* local templates and gcs output for all stage 2

* add workflows to local output files

* Use lowercase WIF providers everywhere

* Bring back suffix for workflow files

* Remove unused files

* Update READMEs

* preliminary CI/CD implementation for stage 1

* fix stage 1

* stage 1 cicd

* tfdoc

* fix tests

* readme and links for cicd and wif

* refactor wif providers

* refactor cicd for stage 1

* fix stage 1

* wif org policies

* split identity provider configuration from cicd

* add type attribute to cicd repositories

* valid cicd repositories have a workflow template

* refactor stage 01

* fix stage 01 tests

* minimal CI/CD documentation

* better check_links error reporting

* fix links

* Added Gitlab specific configurations

Set the default issuer_uri for Gitlab. Added allowed audiences to OIDC configuration.

* Fixed TF formatting in identity providers.

* Changing identity provider audience to null

Changing identity provider audience to default to null.

* add instructions for renaming workflows

* address Julio's comments

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: alexmeissner <alexmeissner@google.com>
2022-04-12 08:17:27 +02:00
Lorenzo Caggioni 4cd6b1bf38 Merge branch 'master' into sql-multi-region 2022-04-11 16:02:13 +02:00
javiergp 86357c2ed5
CloudSQL-instance: Fixed terraform change detection when backup is disabled. (#615)
* Update variables.tf

When backup is not enabled, if location is set to a null value (i.e."EU"), each time you do `terraform apply` it will detect a configuration change (+ location  = "EU"). Setting this variable to null fixes the issue.

* Update README.md
2022-04-10 12:33:00 +02:00
Daniel Strebel 63097dd224 Allow multiple CIDR blocks in the ip_range parameter and rely on the Google API for validation 2022-04-07 15:08:24 +02:00
Luca Prete cd0f09b748
[#593] Add HTTP ILB module (net-ilb-l7) 2022-04-05 08:58:55 +02:00
Julio Castillo 166c9574a1 Multi-region Cloud-SQL example 2022-04-04 17:01:24 +02:00
Julio Castillo f1dd84389c
Merge branch 'master' into 597-fix-link-checker 2022-04-01 00:37:25 +02:00
Daniel Strebel 7fdea13321
Merge branch 'master' into feature/apigee-org-billingtype 2022-03-31 11:49:01 +02:00
Lorenzo Caggioni 42fa28b075 Fix data catalog policy tag output. 2022-03-31 10:36:47 +02:00
Daniel Strebel 59bb09b03e Add billing_type for Apigee Organization Module 2022-03-31 08:47:34 +02:00
Luca Prete 6d00965e0d
Merge branch 'master' into 597-fix-link-checker 2022-03-29 08:56:05 +02:00
Wiktor Niesiobędzki 29d65811f3
Use uniform access on Cloud Functions buckets. (#596)
* Use uniform access on Cloud Functions buckets.

* Add ALLOW_INTERNAL_AND_GCLB as allowed ingress_settings.

* Enable versiniong if there is lifecycle rule

* Remove only non-current version of objects
2022-03-29 07:42:15 +02:00
Julio Castillo ba30ceb5c1
Simplify link checker and recurse into all elements with children (#599) 2022-03-28 16:54:06 +02:00
Luca Prete 2bb9e3f64e [#597] Fix link_checker 2022-03-28 09:43:00 +02:00
Ludovico Magnocavallo b0b9f9607c
Optionally turn off gcplogs driver in COS examples (#592)
* add new variable

* trigger checks

* actually pass new variable to template

* fix templates
2022-03-24 16:17:24 +01:00
John Tracy 22f03bd5d5
Update README for bigquery module (#569)
* Update README

Some variables that no longer exist. Table format is broken for view/table access.

* Remove floating role

* Fix README.md

* Fix tfdoc

* Fix tfdoc

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-03-23 16:34:45 +01:00
Ludovico Magnocavallo b0fcc94b1d
fix duplicate locals in net-vpc (#587) 2022-03-17 17:16:31 +01:00
Ludovico Magnocavallo 9a05aed0e8
fix psa peering routes, split files (#586) 2022-03-17 16:39:37 +01:00
Ludovico Magnocavallo fef3ed8c93
Fix missing service networking identity in project, PSA (#585)
* test

* test

* test

* fix

* tfdoc

* fix tests

* fix tests
2022-03-17 14:29:28 +01:00
Ludovico Magnocavallo 976eb9fe48 shorten PSA name 2022-03-17 11:41:36 +01:00
Ludovico Magnocavallo a22cf80b60
Fix PSA (#584)
* Fix PSA

* fix typo

* fix vpn/peering diff

* output filename on failed checksum test
2022-03-17 11:09:02 +01:00
apichick ef1542c1f1
Fixed problem when destroying shared VPC host project (#582) 2022-03-16 07:34:09 +01:00
Daniel Marzini 00ca59030d Update README.md 2022-03-14 17:12:56 +01:00
Daniel Marzini 463edc42cc [gke-cluster] filestore csi integration 2022-03-14 17:12:56 +01:00
Luca Prete 7c3d9beced
[#576] net-vpc - Add the ability to export/import custom routes throu… (#577) 2022-03-11 14:40:44 +01:00
Ludovico Magnocavallo ecadebe90b
Add support for IAM additive to folder module (#580) 2022-03-11 09:46:32 +01:00
lcaggio a40493a433
Policy Tag: Add IAM at tag level (#579)
* Add IAM at tag level

* Fix README

* Readable variable names.

* Single tag variable.

* Fix README.

* Add Tags nullable condition.

* Update role in the example.
2022-03-10 19:21:54 +01:00
Aleksandr Averbukh 0d88fd78e8 Skip tests for projects-data-source module 2022-03-08 09:26:47 +01:00
Aleksandr Averbukh a9981d6949 Remove module tests, datasource based module cannot be tested with TFplan 2022-03-07 22:49:54 +01:00
Aleksandr Averbukh a532800ca9 Fix documentation tests 2022-03-07 22:17:51 +01:00
Aleksandr Averbukh 8e1beb0938 Add module for retrieving all projects/folders under a specific parent (recursively). 2022-03-07 22:02:18 +01:00
Julio Castillo ce6e37c1f7
Update README.md 2022-03-01 08:49:21 +01:00
Andrea Gandolfi ddc3c4655f Add note to net-vpn-ha module's README file on how to handle cycle errors when using for_each 2022-03-01 08:47:47 +01:00
Julio Castillo ea79b339e9
Doc updates to reference new peering stage (#565)
* Few updates to reference new peering stage

* More updates to peering stage

* VPN -> HA VPN

* Fix broken links
2022-02-28 16:29:38 +01:00
Daniel Marzini e372b50d19
Add GKE Hub module to fabric (#540)
* GKE Hub initial PR commit

* variable management adjust

* comments, fixes and alphabetically ordered variables

* Update README.md

* Update README.md

* Update README.md

* fix test

* resources vs modules

still needs some love

* remove modules usage

* comments, readme update and output

* adjusting outputs and README

* fix README.md

* fix README

* adjusted based on comments

still need some love in the google_gke_hub_feature_membership variables management

* types and variable management

* optionally enable required api

* Update README.md

* reorder locals and use standard formatting

* Don't enable services from modules

* Use self links for member clusters

* Update readme

* members_clusters back to map

@juliocc let's talk about this cause we saw it together in our call and if I change it to a list than the other resources are not going to work, they need location there too.

* Forcing null feature to false due to a bug in provider

If a block is set to null the provider will crash with a "panic: interface conversion: interface {} is nil, not map[string]interface {}" a PR will follow

* Readme update

* Readme.md update

* Update README.md

* bring back tolist, WIP

* Update main.tf

* Readme.md update

* Update README.md

* Update main.tf

* Update main.tf

* Add id and self_links output to gke-cluster

* Use try and make all member feature blocks dynamic/optional

* Change member clusters to map

* Add gke-hub tests

* Address PR comments

* Update gke-hub readme

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-28 12:40:48 +01:00
Simone Ruffilli fb90500adc
FAST: add 02-networking-peering stage. (#561)
* Networking with peering - initial commit

* README and tests

* Linter fixes

* Linter fixes

* Linter fixes

* Update README.md

* split out vpn/peering in separate files so the rest is identical

* fix dns for vpn and peering

* update tfdoc to support multiple outputs/variables files

* add peering variables

* update tfdoc for modules

* make it easier to spot errored docs

* fix doc

* yapf

* fix permadiff in firewall module source ranges

* FAST: Networking: DNS Fixes

* FAST: ability to toggle on-prem vpn creation

* FAST: fix outputs

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-28 12:27:27 +01:00
John Tracy 25707adfba
Fix broken link (#555)
dnssec config link was broken
2022-02-24 06:21:43 +00:00
Julio Castillo ccb6c81a9a
Update README.md 2022-02-23 09:56:00 +01:00
Julio Castillo c012d92058
Update README.md 2022-02-22 17:31:50 +01:00
apichick b6d41cf3d6 API gateway module and example that creates a multi-region deployment for API gateway 2022-02-22 12:00:44 +01:00
apichick 00473fda64 API gateway module and example that creates a multi-region deployment for API gateway 2022-02-22 12:00:44 +01:00
Ludovico Magnocavallo 0b5ed8b7ef
Add support for resource management tags and tag bindings (#552)
* organization module

* folder module

* project module

* fix project binding

* use id instead of name for references

* kms module

* compute-vm

* fix compute-vm
2022-02-20 11:14:18 +01:00
Ludovico Magnocavallo 2ceead40e3 document gcplogs logging driver in top-level README 2022-02-19 08:54:35 +01:00
Ludovico Magnocavallo ad82501f62
Update README.md 2022-02-15 15:13:10 +01:00
Ludovico Magnocavallo c91802f501
Change psa type in net-vpc, fix psa in fast net stages (#545)
* change psn type in net-vpc, fix psa in fast net stages

* fix doc examples

* psn ---> psa
2022-02-15 09:24:27 +01:00
Ludovico Magnocavallo 91d7501099
Update README.md 2022-02-13 16:14:24 +01:00
Ludovico Magnocavallo 4473ddb3e2
Update README.md 2022-02-13 16:00:24 +01:00
Julio Castillo ca7dc0e7a2 Add service account prefix to member bindings 2022-02-09 18:22:27 +01:00
lcaggio 307c29d2f8
Add Data Catalog Policy Tag (#520)
* First commit

* Add outputs, update README, fix variables

* Fix

* Fix

* Fix

* Fix

* Fix

* Fix tests, for real?

* Fix tests, for real.

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-09 13:05:27 +01:00
Ludovico Magnocavallo 40cb46e1cc
Add support for Shared VPC service IAM to project module (#525)
* project module changes

* fix examples

* add comments in module code

* re-enable nullable on svpc variables

* project factory

* Tests still failing (#526)

* fix pf

* tfdoc

* pf test boilerplate

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2022-02-09 11:06:51 +01:00
Julio Castillo a22dff8938 Update net-vpc module to use beta provider for shared vpc resources. 2022-02-05 16:50:03 +01:00
Antonio Lopez 7bc10d1039
IoT module (#415)
* added iot-core module folder

* modified iot core readme file

* added initial version of the IoT Platform terraform files

* añadido detalles en README

* Update README.md

fix markup issue

* Update README.md

modified input/output

* deleted provider from main and module services

* pub_sub topic ids used in the registry instead of creating new ones

* variable extra_telemetry_pub_sub_topic_ids modified as default

* included data platform integration use case in the doc

* devices config moved to yaml file

* included example to create device certificates

* added HCL and #tftest to README. Moved project/region to variables

* solved bug with no optional variables for extra topics or devices yaml

* solved bug with no optional variables for extra topics or devices yaml

* added example to send MQTT telemetry to IoT Platform

* modified doc on Data Platform integration

* included diagram

* added Registry / Device creation default configuration into variables. Deleted exammple devices yaml file. Corrected module source path

* solved comments in PR

* applied terraform fmt

* solved bug in boolean (bool) variable

* updated variables in doc

* updated output variable name

* updated #tftest:skip on examples as using yaml input makes resources number variable

* Update README.md

modified input/output

* pub_sub topic ids used in the registry instead of creating new ones

* variable extra_telemetry_pub_sub_topic_ids modified as default

* included data platform integration use case in the doc

* devices config moved to yaml file

* included example to create device certificates

* added HCL and #tftest to README. Moved project/region to variables

* solved bug with no optional variables for extra topics or devices yaml

* solved bug with no optional variables for extra topics or devices yaml

* added example to send MQTT telemetry to IoT Platform

* modified doc on Data Platform integration

* included diagram

* added Registry / Device creation default configuration into variables. Deleted exammple devices yaml file. Corrected module source path

* solved comments in PR

* applied terraform fmt

* solved bug in boolean (bool) variable

* updated variables in doc

* Updated diagram and documentation for decentralized firewall.

* Fixed error with VPC connector. Count was referring to resource attributes that weren't known until after the configuration was applied

* Added Cloud Foundation Fabric logos. (#363)

* Create README.md

* Add logo to readme file

* exclusions for audit in locals in logging_sinks.audit-logs now

* style fix (whitespaces)

* Added dynamic block for dns_cache_config

* Fixed boolean variable condition

* Adding Apigee Environments as output for apigee-organization module

* small var conditional fix

* Added GKE pubsub notifications

* Default creation false

* Updated variable default value

* removed extra lines

* defaulted to false and conditional output

* depend log sinks from IAM roles, fixes #371

* Update README.md

* [#374] Add taint when Windows node pools are created to match the one GKE implicitly adds

* Update README.md

Fixes out of date link on the module usage example

* Update README.md - fixed broken link

* Added subnet id and self_link to outputs (#377)

Adjusted module outputs so that it's easier to consume them when using the factory in a larger codebase.

* net-vpc module: added subnet mini-factory

* Update README.md

* Code cleanup

* Adds support for IAM per-subnet IAM bindings via factory

* Gracefully handle a null secondary_ip_range

* Updated README.md. Added tests.

* Added license boilerplate to subnet yaml data in tests

* Update README.md

* Update README.md

* Removed dead code

* net-vpc-firewall mini rules-factory

* Paying tributes to the linting gods

* Fixed small bug on locals

* Tests for net-vpc-firewall module

* Update CHANGELOG.md

* refactor locals (#382)

* Add support for partitioned tables on Organization sinks (#380)

* Add support for partioned tables on Organization sinks

* Update changelog

* Fix lint

* Fix lint

* Use simple bool instead of block

* fix README

* Fix Readme

* Rename variable

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* Improve PSN support in net-vpc module (#384)

* improve PSN support

* fix variable order

* fix example test

* fix cloudsql example

* Update CHANGELOG.md

* Update CHANGELOG.md

* Update CHANGELOG.md

* Remove location from local.prefix

* Organization module refactor, in-module firewall policy factory for organization and folder (#385)

* move iam and logging to separate files, minimal refactoring

* update README

* fix example

* factory

* tfdoc

* boilerplate

* remove data_folder variable

* tfdoc

* fix default factory name

* add firewall policy to folder module

* add factory example

* Update CHANGELOG.md

* Fix VPC-SC module, add example (#387)

* Update CONTRIBUTING.md

Suggest change of wording related to `terraform format`: should be done from the top, recursively, and after `pytest` step, because fixtures are also going to be checked for linting during PR.

* Add target_node and minor fixes  (#389)

* Add separate BQ tables per asset type

* Add missing BQ location

* Add missing CF region

* Change Scheduler job to non-generic

* Add target_node, pass tests

* Do tfdoc.py

* Do terraform fmt

* Do terraform fmt -recursive for tests' fixtures

* Fix typo in test's variables

* Added support for Stateful Managed Instance Groups (#367)

* First iteration updates

* All tests passing

* Updated README and var descriptions

* Updated README

* Updated example README

* Consolidated stateful vars

* consolidated stateful vars

* Updated README

* Requested changes to try

* Fixed README examples and try

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* SA key uploading and credentials json generation with terraform.

* Fix typo in the SA module readme

* TF fmt

* Update iam-sa docs

* Finalize onprem-sa-ket-mgmt example

* Add basic test for onprem-sa-mgmt example

* Refactoring

* Reorder variables

* Rewording, fix typos

* Bump tftest version

Bump tftest version to 1.6.1 and ensure test runners can update
providers if needed and available.

* Add bq_table_overwrite handling

* Add optional BQ table as a file export config

* Add getattr() to retrieve attribute from format

* Add roles/bigquery.jobUser for CF

* Update test_plan and README

* Change README, add diagram ( gcpdraw a6e4ec4f-7d6c-4796-b63e-ee4ce7b1792f )

* Change README to two diagrams

* Add count to toggle optional modules

* Change README

* Resolve order of variables test

* Linux sysctls configuration and Kubelet config (#388)

* Linux sysctls configuration and Kubelet config

* Fix terraform linting issues

* Updated README.md

* Updated Kubelet config object type

* Update readme

Co-authored-by: Sergio Tejón <stejon@freepik.com>
Co-authored-by: Julio Castillo <jccb@google.com>

* net-address: Added support for PSA ranges

* Update outputs.tf

* Fixes typo

* Resolved merge conflict

* Update CHANGELOG.md

* Add metric scopes support (#397)

* Add metric scopes support

* Fix typo

* new tfdoc block in README

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* fix tfdoc replacement (#398)

* Update CHANGELOG.md

* Ludo hfw fixes (#400)

* fix tfdoc replacement

* ignore changes to rule description

* add folder example, fixes #339

* Update CHANGELOG.md

* Fix ignore changes for hfw rules (#401)

* fix tfdoc replacement

* ignore changes to rule description

* add folder example, fixes #339

* fix ignore changes in org and folder module

* Update CHANGELOG.md

* update documentation check

* backport tfdoc and check doc fixes

* Re-run pydoc

* Redo pydoc + local linting checks

* update tfdoc (#404)

* Org/Folder: Allow for policy association when using rule factory (#405)

* Org/Folder: Allow for policy association when using rule factory

* Fix linting issue

* Update hierarchical firewall resource

This replaces all the `google_compute_organization_security_*`
resources with the newer `google_compute_firewall_*` resources.

* Fix typo.

* Update CHANGELOG.md

* Typo fix

* New vpc-sc module implementation (#406)

* first implementation

* minimal output

* split service perimeters in regular and bridge

* tests and fixes

* new vpc-sc implementation

* remove providers file used for testing

* remove provider used during development

* Update CHANGELOG.md

* Update CHANGELOG.md

* Update README.md

* fix cases where bridge perimeter status resources are null (#408)

* Update CHANGELOG.md

* Copyright bump (#410)

* remove lifecycle block from vpc sc perimeters (#412)

* Update CHANGELOG.md

* Update CHANGELOG.md

* Interpolate access levels by key in vpc sc module (#414)

* interpolate access levels by key

* fix access level reference

* fix num resources in last README test

* Update CHANGELOG.md

* fix ingress policies in vpc sc module

* disable device policy support in vpc-sc module

* depend bridge from regular perimeters in vpc sc module

* Update CONTRIBUTING.md

* add versions to vpc-sc module

* Update CONTRIBUTING.md

* updated output variable name

* updated #tftest:skip on examples as using yaml input makes resources number variable

* changed pub_sub to pubsub

* unified protocol input variable

* changed extra_telemetry_pubsub_topic_ids variable type to: map

* solved issue in README.md

* grouped device configuration variables

* device config is now done individually per each device in the yaml file

* changes on device config yaml processing: 1 single yaml directory, use try() while parsing, example identation corrected

* updated headers to 2022

* removed get-pip.py
2022-02-05 15:54:24 +01:00
Julio Castillo 52a182ddbd Switch project module to beta provider for SVPC resources 2022-02-04 16:21:00 +01:00
Julio Castillo 52c4b608c2 Rename tf files to use dashes 2022-02-04 08:45:49 +01:00
Daniel Marzini b1a4090792 small firewall policies fix 2022-02-04 08:45:49 +01:00
Julio Castillo 37f37f939d Fix stage2 readme 2022-02-03 19:22:32 +01:00
Julio Castillo 346914d315 Add delegated grants for stage 3 service accounts 2022-02-03 19:22:32 +01:00
Saurabh Shivgunde 4e86fbcd04
Add ip_range variable to apigee-x-instance module (#485)
* Add ip_range variable for apigee-x-instance module

* Add variable definition and validation for ip_range

* Update the validation rule for ip_range variable
2022-02-02 19:32:26 +01:00
apichick 98b238ae7a
Updated modules README to include details around module versioning an… (#476)
* Updated modules README to include details around module versioning and how to best use the modules

* Update README.md

Co-authored-by: apichick <apichick@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-02-02 07:59:21 +01:00
Ludovico Magnocavallo ac36d588bb
Update main.tf 2022-02-01 19:02:15 +01:00
Ludovico Magnocavallo c6310173a4
Update README.md 2022-02-01 19:01:08 +01:00
Ludovico Magnocavallo 9c9f13a81d
Update README.md 2022-02-01 19:00:47 +01:00
Ludovico Magnocavallo b0d32af600
Experimental module to derive DNS inbound policy addresses (#482)
* first version

* add README
2022-02-01 18:32:47 +01:00
Caio Tavares 666c5dd82e
feat: added missing addons gke (#481) 2022-02-01 07:23:00 +01:00
Simone Ruffilli abb6b50a46
Add periods at the end of each description field where missing (#478) 2022-01-31 10:45:34 +01:00
Julio Castillo e2abd772f2
Update resman modules (#475)
* Make logging sinks in different resources use the same API

* Split resman modules in multiple files. Add nullables where applicable
2022-01-29 19:35:33 +01:00
Julio Castillo eb0ab2c1ec Split organization module in files, add nullables 2022-01-29 10:55:47 +01:00
Ludovico Magnocavallo 9b5961f1c0
Net GLB module: add tfdoc to README, add file descriptions, fix markdown errors (#472)
* add tfdoc to README, add file descriptions, fix markdown errors

* remove broken link
2022-01-29 10:41:30 +01:00
Julio Castillo 3dd6e3fc0d Define nullable variables in SA module 2022-01-29 09:51:02 +01:00
Julio Castillo bb6674ea19 Split SA module in multiple files 2022-01-29 09:51:02 +01:00
Julio Castillo cf423998f0 Align tftest syntax with tdoc
This commit changes the token separator for inline examples from a
semicolon to a space
2022-01-28 21:34:15 +01:00
Ludovico Magnocavallo 1cc59a368d
Update README.md 2022-01-28 08:53:21 +01:00
apichick f3a7b8bc17
Removed unused key ingress_settings in function_config (#463)
Co-authored-by: apichick <apichick@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-28 08:45:32 +01:00
lcaggio 8203ebdc64
VPC-SC: Fix README (#462)
* fix VPC-SC README.

* fix VPC-SC README.

* Update README.md

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-28 08:44:07 +01:00
apichick 6dbb7fc6b2 removed boolean flag used to authorize the sink writer identity on the destination 2022-01-27 17:44:27 +01:00
Luca Prete 51cd70ce9a
[#459] net-glb: add serverless backend example 2022-01-25 14:42:48 +01:00
Luca Prete c30d29bf9b
[#455] net-glb: add support for null health_checks_config_defaults (#456) 2022-01-25 14:06:02 +01:00
Luca Prete f40d89776e [#457] Fix url map default service selection 2022-01-25 11:07:22 +01:00
Ludovico Magnocavallo 3717548c25 edit variable description so table does not overflow 2022-01-22 16:12:03 +01:00
Julio Castillo 31f625f149 Link vars and outputs from README 2022-01-22 14:15:16 +01:00
Ludovico Magnocavallo 9a533180a0
Refactor project module, support per-file tags in tfdoc (#450)
* add support for in-doc tfdoc options overrides

* clean up project module

* add file description tags

* only output module and resource columns in tfdoc file table if they exist

* update fast READMEs

* fix check docs
2022-01-22 11:34:18 +01:00
lcaggio a97c606253
Support service dependencies for crypto key bindings in project module (#443)
* Support services that require crypto/decrypt role on robot service accounts

* delete test and upload refactored implementation

* fix duplicate key on dependent services, add tests

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2022-01-22 08:32:13 +01:00
apichick 7bbe3d0b6d fixed README in iam-service-account module 2022-01-21 21:01:48 +01:00
Roberto Jung Drebes b99e33ce5b fix recreation of resources that depend on project_id on pre-existing projects when data source refresh is triggered 2022-01-21 17:16:20 +00:00
apichick 5ac828dd85 replaced firewall_policy_attachments with firewall_policy_association in example 2022-01-19 20:55:55 +01:00
Lorenzo Caggioni 27383fa0a2 Add missing Service Identity Accounts 2022-01-17 09:04:19 +01:00
Ludovico Magnocavallo 70d8d1f890 refactor and test apply/destroy on existing project 2022-01-14 16:53:15 +01:00
Julio Castillo 5cc6a62dec Remove unused variables, use regional resources, generate command as output 2022-01-14 16:53:15 +01:00
Luca Prete 4f79e12365
Rename net-xlb module to net-glb (#433) 2022-01-14 16:52:03 +01:00
Luca Prete ca82d5157a
GLB - Module tests and fixes (#431)
* GLB - Module tests and fixes

* Fixing linting

* Fix ssl cert id vs self_link

* Simplify syntax
2022-01-14 16:05:10 +01:00
Luca Prete 19565c5bad
[#411] XLB module - Initial commit (#416)
* [#411] XLB module - Initial commit

* formatting

* Refactoring and examples tests

* Update copyright to 2022

* Remove splat syntax from outputs

* Fix linting
2022-01-14 08:19:02 +01:00
Julio Castillo 2728c4aac1 Fix all internal links 2022-01-11 11:53:19 +01:00
Julio Castillo b2fe01c4fb Fix vpc subnet factory for yamls with different shapes. 2022-01-11 11:16:16 +01:00
Ludovico Magnocavallo 4b500c2366
add support for additive IAM roles to KMS (#417) 2022-01-10 16:35:02 +01:00
Ludovico Magnocavallo 682041b369 add versions to vpc-sc module 2022-01-05 08:55:05 +01:00
Ludovico Magnocavallo aff758b3a5 depend bridge from regular perimeters in vpc sc module 2022-01-05 03:14:30 +01:00
Ludovico Magnocavallo 79b7a6f40f disable device policy support in vpc-sc module 2022-01-04 16:22:15 +01:00
Ludovico Magnocavallo c17b23b665 fix ingress policies in vpc sc module 2022-01-04 16:01:03 +01:00
Ludovico Magnocavallo 91b40dc9c3
Interpolate access levels by key in vpc sc module (#414)
* interpolate access levels by key

* fix access level reference

* fix num resources in last README test
2022-01-04 13:02:38 +01:00
yuryninog a3da60bc71
Merge branch 'master' into yuryninog-patch-1 2022-01-03 10:47:27 -05:00
Ludovico Magnocavallo 347a4c6b69
remove lifecycle block from vpc sc perimeters (#412) 2022-01-03 15:27:00 +01:00
Simone Ruffilli ee25965c89
Copyright bump (#410) 2022-01-01 15:52:31 +01:00
Ludovico Magnocavallo b9f00bf259
fix cases where bridge perimeter status resources are null (#408) 2021-12-31 16:47:39 +01:00
Ludovico Magnocavallo ea2f92cfff
Update README.md 2021-12-31 15:14:33 +01:00
Ludovico Magnocavallo 2c7dab3bb2
New vpc-sc module implementation (#406)
* first implementation

* minimal output

* split service perimeters in regular and bridge

* tests and fixes

* new vpc-sc implementation

* remove providers file used for testing

* remove provider used during development
2021-12-31 13:29:22 +01:00
Julio Castillo d4adcaced0 Fix typo. 2021-12-31 13:20:21 +01:00
Julio Castillo f78902aee8 Update hierarchical firewall resource
This replaces all the `google_compute_organization_security_*`
resources with the newer `google_compute_firewall_*` resources.
2021-12-31 13:06:35 +01:00
Simone Ruffilli 640a5fe39c
Org/Folder: Allow for policy association when using rule factory (#405)
* Org/Folder: Allow for policy association when using rule factory

* Fix linting issue
2021-12-31 12:20:42 +01:00
Ludovico Magnocavallo 2bc5f7d33c
update tfdoc (#404) 2021-12-30 10:56:19 +01:00
Ludovico Magnocavallo 197e7cbe19
Fix ignore changes for hfw rules (#401)
* fix tfdoc replacement

* ignore changes to rule description

* add folder example, fixes #339

* fix ignore changes in org and folder module
2021-12-22 11:00:44 +01:00
Ludovico Magnocavallo e2f5b96f4a
Ludo hfw fixes (#400)
* fix tfdoc replacement

* ignore changes to rule description

* add folder example, fixes #339
2021-12-22 10:46:27 +01:00
Julio Castillo 0c21fecff8
Add metric scopes support (#397)
* Add metric scopes support

* Fix typo

* new tfdoc block in README

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-21 09:22:10 +01:00
Ludovico Magnocavallo 1ac3fe4460
New tfdoc version (#396)
* update tfdoc

* rewrite check docs, refactor tfdoc replace, regenerate modules READMEs

* remove dead code from check docs

* do not fail on missing variable files in check docs

* fix typos
2021-12-21 08:51:51 +01:00
Simone Ruffilli d2cbf800fc Fixes typo 2021-12-16 18:11:40 +01:00
Simone Ruffilli 794ca6cb6c Update outputs.tf 2021-12-16 18:11:40 +01:00
Simone Ruffilli eeaca4023d net-address: Added support for PSA ranges 2021-12-16 18:11:40 +01:00
sergiotejon 6a42929df3
Linux sysctls configuration and Kubelet config (#388)
* Linux sysctls configuration and Kubelet config

* Fix terraform linting issues

* Updated README.md

* Updated Kubelet config object type

* Update readme

Co-authored-by: Sergio Tejón <stejon@freepik.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2021-12-16 13:32:17 +01:00
averbukh c2b364a7ac Merge branch 'sa-upload-crt' of https://github.com/terraform-google-modules/cloud-foundation-fabric into sa-upload-crt 2021-12-15 18:26:53 +01:00
averbukh 39b7756958 Rewording, fix typos 2021-12-15 18:26:44 +01:00
Aleksandr Averbukh 9d54e5a073
Merge branch 'master' into sa-upload-crt 2021-12-15 18:22:04 +01:00
Julio Castillo a22169dcd2
Merge branch 'master' into yuryninog-patch-1 2021-12-15 15:27:26 +01:00
Stenio Ferreira 601ebd028e
Added support for Stateful Managed Instance Groups (#367)
* First iteration updates

* All tests passing

* Updated README and var descriptions

* Updated README

* Updated example README

* Consolidated stateful vars

* consolidated stateful vars

* Updated README

* Requested changes to try

* Fixed README examples and try

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-15 14:56:53 +01:00
Julio Castillo d2859a295f
Merge branch 'master' into yuryninog-patch-1 2021-12-15 11:46:46 +01:00
Aleksandr Averbukh aab78ece8b
Merge branch 'master' into sa-upload-crt 2021-12-13 22:50:13 +01:00
lcaggio 38b8ea1757
Fix VPC-SC module, add example (#387) 2021-12-13 11:26:09 +01:00
Ludovico Magnocavallo 174de3a087
Organization module refactor, in-module firewall policy factory for organization and folder (#385)
* move iam and logging to separate files, minimal refactoring

* update README

* fix example

* factory

* tfdoc

* boilerplate

* remove data_folder variable

* tfdoc

* fix default factory name

* add firewall policy to folder module

* add factory example
2021-12-13 08:41:02 +01:00
Yury Nino 63019316e1 Remove location from local.prefix 2021-12-12 16:15:21 -05:00
Ludovico Magnocavallo 3758c8f3b0
Improve PSN support in net-vpc module (#384)
* improve PSN support

* fix variable order

* fix example test

* fix cloudsql example
2021-12-09 17:26:37 +01:00
lcaggio 546385d3ee
Add support for partitioned tables on Organization sinks (#380)
* Add support for partioned tables on Organization sinks

* Update changelog

* Fix lint

* Fix lint

* Use simple bool instead of block

* fix README

* Fix Readme

* Rename variable

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-12-09 09:55:47 +01:00
Ludovico Magnocavallo cc63468176
Merge branch 'master' into sruffilli-net-vpc-firewall-minifactory 2021-12-07 19:26:58 +01:00
Ludovico Magnocavallo fcc8741cd2
refactor locals (#382) 2021-12-07 19:26:24 +01:00
Simone Ruffilli 8348504067 Fixed small bug on locals 2021-12-07 13:40:35 +01:00
Simone Ruffilli 5c8557a29d Paying tributes to the linting gods 2021-12-07 13:29:01 +01:00
Simone Ruffilli b1ff592990 net-vpc-firewall mini rules-factory 2021-12-07 13:26:21 +01:00
Simone Ruffilli a0f15931a5 Removed dead code 2021-12-07 10:08:41 +01:00
Simone Ruffilli 8a2ad25a45 Updated README.md. Added tests. 2021-12-07 09:35:24 +01:00
Simone Ruffilli 04cf75d446 Gracefully handle a null secondary_ip_range 2021-12-06 17:48:12 +01:00
Simone Ruffilli dfe1bad689 Adds support for IAM per-subnet IAM bindings via factory 2021-12-06 17:32:15 +01:00
Aleksandr Averbukh 4fd1ccb982 Update iam-sa docs 2021-12-06 17:30:56 +01:00
Aleksandr Averbukh 0e5fdda107 TF fmt 2021-12-06 17:23:53 +01:00
Aleksandr Averbukh 2d9c2fe774 Fix typo in the SA module readme 2021-12-06 17:09:48 +01:00
Aleksandr Averbukh 205975ff39 SA key uploading and credentials json generation with terraform. 2021-12-06 17:02:56 +01:00
Simone Ruffilli a2d5f6bfa7 Code cleanup 2021-12-06 16:46:46 +01:00
Simone Ruffilli ca03a8aea7 Update README.md 2021-12-06 16:44:33 +01:00
Simone Ruffilli 90718bf134 net-vpc module: added subnet mini-factory 2021-12-06 16:41:08 +01:00
Luca Prete 8e8f4d2117
[#374] Add taint when Windows node pools are created to match the one GKE implicitly adds 2021-12-03 14:15:51 +01:00
Ludovico Magnocavallo 7bf372305e
Update README.md 2021-12-02 08:50:30 +01:00
Ludovico Magnocavallo 357f6d5939 depend log sinks from IAM roles, fixes #371 2021-12-01 12:08:04 +01:00
caiotavaresdito c9870b44f1 defaulted to false and conditional output 2021-11-30 07:58:45 -05:00
caiotavaresdito fd4383540a removed extra lines 2021-11-30 07:50:53 -05:00
caiotavaresdito 5a9183d908 Updated variable default value 2021-11-29 23:09:36 -05:00
caiotavaresdito da296c8bfe Default creation false 2021-11-29 22:49:01 -05:00
caiotavaresdito 01e100719e Added GKE pubsub notifications 2021-11-29 22:39:44 -05:00
caiotavaresdito 40c66f9fa9 small var conditional fix 2021-11-29 22:35:07 -05:00
Daniel Strebel c484f052ec Adding Apigee Environments as output for apigee-organization module 2021-11-24 18:57:29 +01:00
Julio Castillo 7204a1ca39
Merge branch 'master' into cloud-function-vpc-connector-fix 2021-11-24 11:04:23 +01:00
caiotavaresdito 9d57c10f36 Fixed boolean variable condition 2021-11-18 14:12:13 -05:00
caiotavaresdito b09c24c736 Added dynamic block for dns_cache_config 2021-11-18 12:49:31 -05:00
apichick da0838d55a Fixed error with VPC connector. Count was referring to resource attributes that weren't known until after the configuration was applied 2021-11-17 17:36:17 +01:00
Julio Castillo 56bd8a6a21
Merge branch 'master' into jccb/bq-roles 2021-11-16 15:18:43 +01:00
caiotavaresdito 193b3f1097 added depends on topic iam binding 2021-11-14 07:21:35 -05:00
Andras Gyomrey d2ef4c3277 Allow using gVNIC in compute-vm (#211) 2021-11-08 11:18:15 +00:00
Julio Castillo 1a35ba3478 Allow custom and predefined roles in bq dataset access rules 2021-11-08 11:34:37 +01:00
Andras Gyomrey 4d278d62e4 Default for output_file_mode 2021-11-07 13:20:00 +00:00
Andras Gyomrey 1da5bde47b Support for consistent function bundles 2021-11-07 10:27:10 +00:00
Julio Castillo b062d73db5
Update README.md 2021-11-04 11:34:10 +01:00
Julio Castillo 798eac7e18
Update README.md 2021-11-04 11:33:51 +01:00
apichick e471d02810 updated doc 2021-11-04 00:23:44 +01:00
apichick bba8f6de5d added missing description 2021-11-04 00:22:14 +01:00
apichick 731688a782 parent 871dd3f5c0
author apichick <apichick@google.com> 1635979681 +0100
committer apichick <apichick@google.com> 1635980891 +0100

parent 871dd3f5c0
author apichick <apichick@google.com> 1635979681 +0100
committer apichick <apichick@google.com> 1635980849 +0100

update vpc connector variables and added options variable to containers

Updated iam variable description

Included tests for examples in README

Fixed linting
2021-11-04 00:09:28 +01:00
apichick 871dd3f5c0 Fixed linting 2021-11-03 23:50:07 +01:00
apichick e86f3e984b Added additional examples in README 2021-11-03 23:50:07 +01:00
apichick 8ab0f055da Fixed mistake with for_each in containers 2021-11-03 23:50:07 +01:00
apichick 9f8239746b Included tests for examples in README 2021-11-03 23:50:07 +01:00
apichick c2d1f245f2 Changed volume_mounts from list to map 2021-11-03 23:50:07 +01:00
apichick b5e1e7f3cf Updated iam variable description 2021-11-03 23:50:07 +01:00
apichick 7f5f5a460f Added cloud-run module 2021-11-03 23:50:07 +01:00
Ludovico Magnocavallo f6775aca1b
Use the same versions file everywhere, pin to tf 1.0+ provider 4.0+ (#355)
* add default versions file, remove old providers and versions

* use default versions file everywhere

* fix kms module

* re-add provider configuration for data platform step 2

* update kms module outputs sorting

* update kms documentation

* fix data solutions tests

* fix GKE workload identity attribute name

* work around firewall provider issue in datafusion example
2021-11-03 15:05:43 +01:00
Roberto Jung Drebes b96cebc3fa Fix SA IAM dynamic interpolation 2021-11-01 19:28:58 +01:00
Christopher Avila e42383eab9 update var to skip_delete per feedback 2021-11-01 11:33:24 -05:00
Christopher Avila 3663151465 format project variables 2021-11-01 11:22:30 -05:00
Christopher Avila 88c6af3dbb Add a project_skip_delete variable to optionally let the project stick around after the resources are destroyed. 2021-11-01 10:59:27 -05:00
Caio Tavares f74599a317
Added GCS notification support (#335)
* Added GCS notification support

* fixed notification output indices

* merged vars and added more conditional validation

* Terraform linting

* Added sa_email serviceAccount variable

* Fixed bool check and use try in notification var

* Fixed typo source path example block

* Fixed assert number tftest gcs example
2021-10-21 10:27:35 -04:00
Ludovico Magnocavallo 8894c40153
Merge branch 'master' into change-gke-metadata 2021-10-21 10:57:33 +02:00
Taneli Leppä ea553ec117 The node_metadata key is deprecated, switch to mode. Change your workload_metadata_config
from GKE_METADATA_SERVER to GKE_METADATA.
2021-10-21 10:44:41 +02:00
Taneli Leppä e1b79bc7f6 Added recurring maintenance window, dns config, L4ILB subsetting and monitoring/logging config to GKE cluster module. 2021-10-20 18:21:05 +02:00
Ludovico Magnocavallo e6c8fa2552 cloud-function 2021-10-19 21:10:43 +02:00
Ludovico Magnocavallo 923ba819d1 bigquery-dataset 2021-10-19 21:09:16 +02:00
Ludovico Magnocavallo 555de95f48 iam-service-account 2021-10-19 21:05:09 +02:00
caiotavaresdito 4e7a34cc5b Fixed typo README cloudsql-instance 2021-10-18 11:25:43 -04:00
caiotavaresdito 64fc4fcaf6 Fixed variable name typo 2021-10-18 10:55:37 -04:00
caiotavaresdito 9c9916744a removed backup_retention_settings var 2021-10-18 09:12:22 -04:00
caiotavaresdito dbfb5404a4 merged backup_retention_settings var 2021-10-18 09:11:24 -04:00
caiotavaresdito 7ea01e2c03 Updated doc to include backup_retention_settings 2021-10-18 09:11:24 -04:00
caiotavaresdito c26d457b55 Added additional backup settings 2021-10-18 09:11:24 -04:00
Ludovico Magnocavallo bf5e1e5b4a add l7ilb subnets to net-vpc module 2021-10-18 09:52:28 +02:00
Caio Tavares 6cb381334e
Added dynamic description of compute-vm (#328)
* Added dynamic description of compute-vm

* Re-ordered variables alphabetically
2021-10-16 16:23:11 +02:00
caiotavaresdito 75b5c91c28 Terraform linting 2021-10-15 13:39:30 -04:00
caiotavaresdito 910567ce5c removed default labels and let user pass values in 2021-10-15 13:38:23 -04:00
caiotavaresdito 06d0085edd removed name of bucket from label field 2021-10-15 13:35:40 -04:00
Ludovico Magnocavallo c8dba7f10e
Merge branch 'master' into sruffilli/factories 2021-10-15 09:33:54 +02:00
Ludovico Magnocavallo f5353d2d2c Merge branch 'master' of github.com:terraform-google-modules/cloud-foundation-fabric 2021-10-14 20:15:41 +02:00
Ludovico Magnocavallo dcb1e32097 update test params after README fix 2021-10-14 20:15:31 +02:00
Caio Tavares 7dad4496b4
Feature/added gcs website (#325)
* Added GCS website block support

* Terraform linting

* Moved variable to last and re-generated README
2021-10-14 20:11:26 +02:00
Simone Ruffilli 36fb785ea9 Resource factories 2021-10-14 17:00:04 +02:00
Ludovico Magnocavallo ead0593da4
Update README.md 2021-10-12 10:45:14 +02:00
Ludovico Magnocavallo 0f22bce9e2
Update README.md 2021-10-12 09:40:10 +02:00
Julio Castillo 1d13e3e624 Add more validations to linter
- Ensure all variables and outputs are sorted
- Ensure all variables and outputs have a description
- Add data-solutions/data-platform-foundations to linter

Fix all modules to follow these new conventions.
2021-10-08 18:26:04 +02:00
Julio Castillo 89525bed95 Add Cloud SQL module to READMEs 2021-10-07 21:52:22 +02:00
Julio Castillo cd4917f2f2 README and test fixes 2021-10-07 21:50:16 +02:00
Ludovico Magnocavallo bd1f9354ce
Update README.md 2021-10-07 19:41:45 +02:00
Ludovico Magnocavallo 3cdc8f79ef
Typos 2021-10-07 19:41:12 +02:00
Julio Castillo 74f17a51a9 Reorder variables 2021-10-07 18:25:49 +02:00
Julio Castillo be60c1ad4f Fix README title 2021-10-07 18:22:43 +02:00
Julio Castillo 1378efde6e New module for Cloud SQL instances 2021-10-07 18:20:07 +02:00
Julio Castillo 77c888e302 Always output project_id from net-vpc 2021-10-06 18:21:04 +02:00
Ludovico Magnocavallo a45814f41c
Naming convention module (#318)
* naming convention module

* tfdoc

* lint fixture

* add optional separator, variable descriptions

* add output descriptions

* fix example tests
2021-10-05 12:21:12 +02:00
Ludovico Magnocavallo 127e090511
Update README.md 2021-10-05 08:22:07 +02:00
Ludovico Magnocavallo 5001eb49a4
Make dns module resilient to dynamic values (#317)
* refactor module and fix tests

* account for wildcard records

* account for empty recordset names

* align tests

* align networking end to end examples

* fix behaviour with wildcard and empty names

* Update main.tf

* fix dumb online edit :)
2021-10-04 18:59:14 +02:00
Julio Castillo 2863d929a5 Remove redundant variable `admin_ranges_enabled` 2021-10-04 14:12:00 +02:00
Julio Castillo 2a6f662e71 Update firewall README 2021-10-04 12:56:17 +02:00
Julio Castillo f5d00d22dd Fix typo 2021-10-04 12:53:20 +02:00
Julio Castillo 400a94658d Allow using named ranges in firewall rules 2021-10-04 12:39:45 +02:00
Julio Castillo d3e8b5e35e Use single resource for custom rules in firwall module 2021-10-04 12:06:31 +02:00
Ludovico Magnocavallo bccda4eb39
Update README.md 2021-10-04 11:09:09 +02:00
Ludovico Magnocavallo 262f823464
Refactor compute-vm to remove multiple instance support (#314)
* first iteration, largely untested

* basic tests pass

* basic tests pass

* nic test

* disk tests, refactor

* fix tests

* update README

* update gcs to bq example

* fix README examples, do not create disks for template

* fix data solutions examples

* update cloud operations examples

* update networking examples, mig and ilb modules examples

* update default image to debian 11

* update README table
2021-10-04 10:46:44 +02:00
Daniel Marzini a220f2ab1f Update README.md 2021-09-14 15:12:06 +02:00
Daniel Marzini 10698e1d5c Update README.md 2021-09-14 14:57:20 +02:00
Daniel Marzini cb7a41e49f Merge branch 'master' into feature/vpc-sc-multiple-perimeters 2021-09-14 10:22:19 +02:00
Daniel Marzini 6b24acbbd4 Update README.md 2021-09-14 10:21:36 +02:00
Julio Castillo a1152003c6 Output role information from organization module 2021-09-13 17:36:21 +02:00
Daniel Marzini 8ed8d917a9 Update README.md 2021-09-03 18:54:53 +02:00
Daniel Marzini 996b8d2aa6 Update README.md 2021-09-03 18:53:30 +02:00
Daniel Marzini ae2dddc192 Update README.md 2021-09-03 18:41:51 +02:00
Daniel Marzini d5fde0e6e1 adjusting code to reflect pr changes request 2021-09-03 18:35:06 +02:00
sruffilli 7b01f3dc08
Updated README.md for net-vpc module (#299)
* Updated README.md for net-vpc module

Added a recommendation to avoid setting up shared vpcs using the module for prod usage.

* Update README.md

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2021-08-25 16:54:05 +02:00
Julio Castillo 658eb3b297
Fix typo 2021-08-13 12:35:12 +02:00
Julio Castillo 5f97d68c0b Update readmes 2021-08-13 12:33:44 +02:00
Julio Castillo 1b80085c9b Create email notification channels automatically 2021-08-13 12:02:46 +02:00
Julio Castillo 3a8a040ff3 Billing budget module 2021-08-13 12:01:00 +02:00
Julio Castillo cb7c65135e
Update CI processes (#296)
- Upgrade to latest terraform version (1.0.4)
- Remove tflint from linting pipeline (was not doing anything)
- Add terraform fmt check to linting pipeline
- Pass all code through terraform fmt
2021-08-12 17:30:53 +02:00
Julio Castillo c2e23001b7 Fix formatting 2021-08-12 10:07:27 +02:00
Noah Dungey 4f91e3039b
Fixed typo in max_delivery_attempts variable name.
Fixed type in max_delivery_attempts variable name.
2021-08-11 15:48:38 -06:00
Julio Castillo 75418bbbd0 Compute service account email statically
Generate the service account output statically based on the service
account name and parent project. This allows, among other things, to use
service accounts as map keys (e.g. to be used in the `iam` argument in
other modules).
2021-08-10 10:50:44 +02:00
vanessabodard-voi f181c5164d
Update list ==> tolist (#293) 2021-08-05 18:03:54 +02:00
Daniel Strebel a0b3f2fb7f Apigee tfdoc update 2021-08-05 15:55:23 +02:00
Daniel Strebel 109bd80f43 Apigee module variable description fixes 2021-08-05 15:53:44 +02:00
Daniel Strebel cb6ded0528 Adding TFDOC to Apigee modules 2021-08-05 14:25:50 +02:00
Daniel Strebel e8b01064f6 Apigee add paid only variables and examples 2021-08-05 13:21:57 +02:00
Daniel Strebel 9c4bb0562f apigee module without service networking 2021-08-05 11:57:22 +02:00
Daniel Strebel 24b5e03c80 initial scaffold for an Apigee tf module 2021-08-04 17:09:44 +02:00
Ludovico Magnocavallo 202892b344
Add support for lifecycle_rule in gcs module (#288) (#289)
* Add support for lifecycle_rule in gcs module (#288)

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>

* fix docs

* rename unrelated interconnect module tests

* fix doc example test

Co-authored-by: iury <1934268+IuryAlves@users.noreply.github.com>
2021-07-30 12:07:17 +02:00
averbukh a1008a83a8 Fix firewall-yaml readme 2021-07-29 11:54:26 +02:00
Aleksandr Averbukh 5197274974
Merge branch 'master' into decentralized-firewall-averbukh 2021-07-28 22:18:20 +02:00