Commit Graph

1278 Commits

Author SHA1 Message Date
Julio Castillo 4770cb06fd Migrate cloudsql-instance examples 2023-04-17 09:17:54 +02:00
Julio Castillo 461f7780c2 Migrate bigtable-instance tests 2023-04-17 09:17:54 +02:00
Julio Castillo 5f82938739 Migrate cloud-identity-group tests 2023-04-17 09:17:54 +02:00
Julio Castillo 771dd02b18 Migrate logging-bucket tests 2023-04-17 09:17:54 +02:00
Julio Castillo 0150e97e51 Migrate endpoints tests 2023-04-17 09:17:54 +02:00
Julio Castillo 01b9921f5c Migrate PubSub tests 2023-04-17 09:17:54 +02:00
Julio Castillo 1927b138d6 Migrate secret-manager tests 2023-04-17 09:17:54 +02:00
Julio Castillo a2bffc7302 Migrate service-directory tests 2023-04-17 09:17:54 +02:00
Julio Castillo ed49f3db39 Migrate source repository tests 2023-04-17 09:17:54 +02:00
Julio Castillo f5e1717319 Migrate VPC-SC tests to examples 2023-04-17 09:17:54 +02:00
Julio Castillo 2d4bd5a244 Remove net-interconnect-attachment-direct 2023-04-14 11:01:54 +02:00
Julio Castillo eca0a9583e Add inventories to net-vpc-firewall tests 2023-04-12 14:04:58 +02:00
ajlopezn 063c5061c8 lowercase text 2023-04-12 08:25:33 +00:00
ajlopezn df789db9bd updated spaces 2023-04-11 21:59:36 +00:00
Antonio Lopez b4156eff41
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall 2023-04-11 22:58:22 +02:00
Fawzi 3673dc2774
Merge branch 'master' into fawzihmouda/firewall-enforcement-order 2023-04-11 23:44:56 +10:00
Fawzi ebf93a66ad add new test to README 2023-04-11 23:38:16 +10:00
Fawzi 4722efea40 bump provider versions 2023-04-11 22:18:31 +10:00
Fawzi 3c4254fc1f update firewall_policy_enforcement_order variable 2023-04-11 22:08:41 +10:00
ajlopezn 6db1a5f5d3 updated variables doc 2023-04-11 11:39:47 +00:00
ajlopezn d150f03b41 included link to the tf resource bug in a comment 2023-04-11 11:30:12 +00:00
ajlopezn 4e426a990a correct naming in source destination egress fw rule 2023-04-11 10:48:56 +00:00
ajlopezn 6f1e531af0 added example for source&destination ranges usage in fw rules 2023-04-11 10:45:45 +00:00
ajlopezn b809b315f6 added example for source&destination ranges usage in fw rules 2023-04-11 10:43:32 +00:00
Antonio Lopez 660da5b585
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall 2023-04-11 12:24:06 +02:00
ajlopezn 4ccf9f9361 included an empty list as default in the ingress_rules.destination_ranges variable 2023-04-11 10:22:08 +00:00
Mikhail Filipchuk 33e8b42842
Use labels var in cloud-run module (#1310)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-04-11 03:06:13 +00:00
ajlopezn adb88d8a87 allow destination_range variable in ingress rules and source_range in egress rules 2023-04-10 14:00:55 +00:00
ajlopezn 18f1e8ebb1 added source and destination ranges to both ingress and egress fw rules 2023-04-10 10:47:51 +00:00
Fawzi db3c48736c add firewall enforcement variable to VPC 2023-04-10 01:28:12 +10:00
Ludovico Magnocavallo 865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider (#1306)
* add support for new attributes to bigquery module

* bump provider versions
2023-04-05 14:22:52 +00:00
Luca Prete 70aefc2ddb
Add ability to run vtysh from simple-nva vm directly when frr is active (#1301)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 21:37:02 +02:00
Luca Prete 07f60fb0b9
Fix vtysh (#1300)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 14:37:46 +00:00
Ludovico Magnocavallo bc2d9372aa
Fix urlmap in ILB L7 module (#1299)
* port tests to new format

* add test to catch error and fix urlmap

* boilerplate

* boilerplate
2023-04-03 15:47:37 +02:00
Luca Prete bf14d2da23
Add sample vtysh file to remove warnings (#1298)
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 15:10:46 +02:00
Ludovico Magnocavallo 92b71a5098
Refactor cloud run module to use optionals and support all features (#1293)
* refactor cloud run resource and variables

* vpc connector variables and resource

* refactor env variable, combine and fix env examples

* fix volume example

* fix traffic split example

* fix eventarc/pubsub example

* fix eventarc/audit log example

* fix SA examples, fix examples formatting

* refactor eventarc variable

* tfdoc

* add IAM to example

* add examples for revision annotations and serverless connector

* fix new examples

* remove legacy module tests

* blueprint tests

* Add tests to cloud-run module

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-04-01 14:06:29 +02:00
Valerio Ponza c5db50d1d7 fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 6204787226 fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 0a20bc4f2d fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 1fb7e114fd fixing tests and refactoring default 2023-03-30 12:47:39 +02:00
Valerio Ponza 596acb63e4 removing deprecated field from gke-hub 2023-03-30 12:47:39 +02:00
Valerio Ponza 44d2e9e50e removing deprecated field from gke-hub 2023-03-30 12:47:39 +02:00
Valerio Ponza 64a9952656 add Backup for GKE support 2023-03-30 12:47:39 +02:00
Julio Castillo 7135c9015f Add boilerplate 2023-03-30 09:36:14 +03:00
Julio Castillo b503bde544 Load all service agents identities from yaml
Source: https://cloud.google.com/iam/docs/service-agents
2023-03-30 09:36:14 +03:00
Wiktor Niesiobędzki c76e95e7e8
Add Cloud Batch service identity (#1294) 2023-03-30 08:05:12 +02:00
Julio Castillo d64b5779e4
Merge branch 'master' into dataplex 2023-03-27 21:44:24 +02:00
Julio Castillo 039d10b287
Merge branch 'master' into dataplex 2023-03-27 16:18:38 +02:00
Luca Prete dfa1fce274
Merge branch 'master' into bruzz/nva-firewall-mgmt 2023-03-27 16:04:55 +02:00
bruzzechesse d68476ba07 fixes 2023-03-27 15:46:37 +02:00
bruzzechesse cf2fd119b5 small fixes 2023-03-27 15:35:00 +02:00
Wiktor Niesiobędzki 9005a51a95 Use example testing instead custom test 2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki d105ed59d3 Resolve review comments 2023-03-27 14:13:38 +02:00
Wiktor Niesiobędzki 082301c09c Use unique bundle name for Cloud Function
When cloud-function module is used multiple times within project and
default `bundle_config.output_path` is used then all the instances try
to use filename and result is undefined without guarantee to converge to
desired state (i.e. multiple functions may share the same code).
2023-03-27 14:13:38 +02:00
bruzzechesse a93b80cf95 linting 2023-03-27 11:49:01 +02:00
bruzzechesse 41570d2840 update documentation 2023-03-27 11:42:17 +02:00
bruzzechesse 021fb84765 add firewall mgmt on simple-nva module 2023-03-27 09:54:01 +02:00
Wiktor Niesiobędzki 58bc576ddb Add dataplex SA 2023-03-27 07:37:40 +00:00
Ludovico Magnocavallo 987ea34d93
DNS policy module fixes (#1278)
* dns response policy module

* tfdoc

* Add dns policy tests

* fix copyright, var description, initial wording

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2023-03-26 18:39:07 +02:00
Ludovico Magnocavallo 28da881c3f
DNS Response Policy module (#1276)
* dns response policy module

* tfdoc
2023-03-26 17:42:57 +02:00
Ludovico Magnocavallo 60261a6352
add static gateway id to outputs (#1270) 2023-03-21 18:08:45 +01:00
Julio Castillo 3d425b7d9c Ignore changes to metadata.0.annotations in Cloud Run module
Fixes #1173
2023-03-21 11:54:07 +01:00
Luca Prete 3b20d617dc
Improvements to NCC-RA spoke module. (#1267) 2023-03-21 07:07:44 +00:00
Luca Prete 6e49e94749
simple-nva: add ability to parse BGP configs as strings. (#1268)
* Add ability to parse BGP configs as strings.

* Fix var name

* Refresh tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
2023-03-21 07:41:12 +01:00
Taneli Leppä 4b15fe4744
Add backend service names to outputs for net-glb and net-ilb-l7 (some things like (#1258)
autoneg require names).

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-03-17 10:40:11 +00:00
Ludovico Magnocavallo 8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo 50adf1da2a
change target_vpcs variable to support dynamic values (#1255) 2023-03-17 07:14:09 +00:00
Miren Esnaola 21fa6d1f13 Fixes related to boot_disk in compute-vm module 2023-03-16 15:58:39 +01:00
Ludovico Magnocavallo 79a6e9b191
pin local provider (#1256) 2023-03-16 10:59:06 +00:00
Julio Castillo c82f142d2d Delay creation of SVPC host bindings until APIs and JIT SAs are done 2023-03-14 14:51:17 +01:00
Ludovico Magnocavallo 112d9a8d9c
Allow using existing boot disk in compute-vm module (#1241)
* allow using existing boot disk in compute-vm module

* allow setting initialize params to null

* tests

* fast

* blueprints
2023-03-12 10:53:59 +01:00
Ludovico Magnocavallo 6ba0f8b0ba
allow overriding name in net-vpc subnet factory (#1239) 2023-03-11 09:30:42 +01:00
simonebruzzechesse 510db1b36f
Fix policy_based_routing.sh script on simple-nva module (#1226) 2023-03-10 18:36:07 +01:00
Julio Castillo 1c3645f3a3 Fix dataproc modules variables 2023-03-10 16:54:09 +01:00
bruzzechesse 7595508bd4 fix variable 2023-03-10 12:03:54 +01:00
bruzzechesse 3ffda9c8c9 terraform fmt 2023-03-10 10:45:39 +01:00
bruzzechesse f688b9a47d realign logic to boolean variable 2023-03-10 10:43:37 +01:00
bruzzechesse 7781b72690 replace track_per_session with tracking_mode and fixed connection tracking conf for backends 2023-03-10 10:03:45 +01:00
Ludovico Magnocavallo 45c12e233b
Network firewall policy module (#1232)
* validated, untested

* tested

* typo in README
2023-03-10 08:21:49 +00:00
Julio Diez d0f346f6c6 Add resources created as outputs 2023-03-09 15:35:52 +01:00
Julio Diez f82b5284c9 Change semantics of custom_advertise 2023-03-09 15:35:52 +01:00
Julio Diez 7eb9fbf676
Merge branch 'master' into ncc 2023-03-09 13:10:36 +01:00
Julio Diez 3e85175f67 Adapt README examples to the variables config 2023-03-09 13:06:02 +01:00
Julio Diez 0cf254f91e Update variable and output tables 2023-03-09 13:06:02 +01:00
Julio Diez 7e6635f535 Alphabetical order and better naming 2023-03-09 13:06:02 +01:00
Julio Diez eef6a48876 Make ip_interfaceX not optional
These IP values are optional, if you don't specify a value Google will try to
find a free IP address. But this is a bad idea because setting them to 'null'
forces a replacement even without any changes to make.
2023-03-09 13:06:02 +01:00
Julio Diez 84d3b83f81 Group router information under router_config 2023-03-09 13:06:02 +01:00
Julio Diez b25ee97d15 Group vpc and subnet under vpc_config 2023-03-09 13:06:02 +01:00
Julio Diez e9312e4dba var ras -> router_appliances 2023-03-09 13:06:02 +01:00
lcaggio cc6ee44759 Add aiplatform robot service account 2023-03-09 08:17:26 +01:00
Ludovico Magnocavallo 5489162b75
Merge branch 'master' into ncc 2023-03-08 20:33:53 +01:00
Julio Diez 96f35c53a5 Fix README variables to pass pytest 2023-03-08 20:00:55 +01:00
Julio Diez 93bb809a40 Rename module net-ncc -> ncc-spoke-ra 2023-03-08 20:00:55 +01:00
Julio Diez 62539508a5 Update README for the new implementation 2023-03-08 20:00:55 +01:00
Julio Diez 6196851d3f Output the name of the hub if created 2023-03-08 20:00:55 +01:00
Julio Diez 34c6a6aee1 Make creation of the hub optional 2023-03-08 20:00:55 +01:00
Julio Diez 1b4ba11dcd Make IPs for the CR interfaces optional 2023-03-08 20:00:55 +01:00
Julio Diez 0da0f33525 Make keepalive optional 2023-03-08 20:00:55 +01:00
Julio Diez 81121f4aa6 data_transfer default to false 2023-03-08 20:00:55 +01:00
Julio Diez d5d743174e Make custom_advertise optional 2023-03-08 20:00:55 +01:00
Julio Diez 2f64fcd5f4 Reimplement the module to manage only one spoke 2023-03-08 20:00:55 +01:00
lcaggio e213f156ad Fix Jit notebook service account. 2023-03-08 16:06:27 +01:00
simonebruzzechesse fd07c444cb
Extended simple-nva module to manage BGP service running on FR routing docker container (#1195) 2023-03-08 09:43:13 +01:00
Julio Diez 6eb82a2214
Merge pull request #16 from juliodiez/master
Sync branch
2023-03-07 13:13:35 +01:00
Julio Diez d9eaa59862 Generated variable table via tfdoc 2023-03-07 13:04:15 +01:00
Julio Diez ac224ad11c Add tftest to README 2023-03-07 12:29:20 +01:00
Julio Diez 94f3a08129 Add example of custom route advertisements 2023-03-07 11:54:34 +01:00
Julio Diez 9b5bc407ba Add image for load-balanced router appliances example 2023-03-07 11:10:19 +01:00
Julio Diez 58c90feca2 Add example of load-balanced router appliances 2023-03-07 11:06:23 +01:00
Julio Diez 3e0a8c4c0a Add image for site to two VPCs example 2023-03-07 10:43:51 +01:00
Julio Diez 76972d5804 Add example of site to two VPCs 2023-03-07 10:37:58 +01:00
Julio Diez 449f5cbb56 Adapt example to use only allowed chars for resource names 2023-03-07 10:28:29 +01:00
Julio Diez 87107ba3e0 Set a unique name to CRs linked to spokes 2023-03-07 10:11:02 +01:00
Julio Diez e7963eb630 Set a unique name to spokes 2023-03-07 10:01:07 +01:00
Julio Diez 71cb18f808 Replace map key derived from resource attributes 2023-03-07 09:52:34 +01:00
Julio Diez 0f4919a771 Add image for site to VPC example 2023-03-06 20:55:36 +01:00
Julio Diez 69493d8a40 Add README with first example 2023-03-06 20:47:18 +01:00
Julio Diez 65671647e7 Make optional some router config fields 2023-03-06 20:45:08 +01:00
Julio Diez 25b14465b2 Simplify some naming 2023-03-06 19:21:09 +01:00
Julio Diez e835730665 Add router BGP peers 2023-03-06 18:02:50 +01:00
Julio Diez 02707eb275 Initial commit for NCC module 2023-03-06 14:09:14 +01:00
Ludovico Magnocavallo 8fc9549c58
add support for proxy and psc subnets to module factory (#1211) 2023-03-05 17:08:43 +01:00
lcaggio 88ecdbe671
Merge branch 'master' into lcaggio/dataproc-03 2023-03-02 12:18:52 +01:00
Taneli Leppä 99d19d5ec8 Fix issue with GKE cluster notifications topic, change pubsub module output to static. 2023-03-02 11:23:05 +01:00
lcaggio b7793f69a2 Dataproc module. Fix output. 2023-03-02 10:39:08 +01:00
erabusi 2ebb21e4cc
Fix url_redirect issue on net-glb module (#1204) 2023-03-02 07:51:39 +01:00
lcaggio b39b486cd4 Fix README 2023-03-01 10:48:33 +01:00
lcaggio c4d8175d9a
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 10:44:31 +01:00
lcaggio 0d37fe8338 Update README 2023-03-01 10:44:01 +01:00
Ludovico Magnocavallo 3a2d6e1b46
Fix secondary ranges in net-vpc readme (#1198)
Fixes #1197
2023-03-01 08:08:07 +01:00
lcaggio dad3c49012 Fix linting 2023-03-01 08:00:52 +01:00
Ludovico Magnocavallo 6629e5cd06
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 07:57:21 +01:00
lcaggio dc37783022 Fix Variables 2023-03-01 07:54:10 +01:00
Ludovico Magnocavallo 4b3b5ad1cb
Merge branch 'master' into fix-test-compute-vm-kms 2023-02-28 16:13:48 +01:00
Dan Farmer 52eb83758f Fix compute-vm:CloudKMS test for provider>=4.54.0
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
  `google_compute_disk.disks["attached-disk"]` (see
  hashicorp/terraform-provider-google#4448)
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
  will now fail with <4.54.0, which do not return `rsa_encrypted_key`
  * Updated the whole repo on advice from @ludoo
2023-02-28 15:10:22 +00:00
Joshua Goldberg 6bf2fb4c06
Fix https health check mismapped to http (#1194) 2023-02-28 15:48:13 +01:00
lcaggio 0f504f6b8e Fix output variable order. 2023-02-28 10:50:58 +01:00
lcaggio ac0a140011 Fix outputs 2023-02-28 10:35:44 +01:00
Ludovico Magnocavallo 1a685e7b83
Update README.md 2023-02-28 07:49:28 +01:00
Ludovico Magnocavallo 3d2f1182d2
Update README.md 2023-02-28 07:48:47 +01:00
lcaggio 7ece884422 Fix examples. 2023-02-28 06:52:10 +01:00
lcaggio 46a99b9a9b
Merge branch 'master' into lcaggio/dataproc 2023-02-28 06:36:21 +01:00
Ludovico Magnocavallo e098568b6e
fix external gateway (#1191) 2023-02-28 00:46:50 +01:00
lcaggio fdb4f2a9fd Fix variables 2023-02-27 22:23:45 +01:00
lcaggio 51579ac7e7 Fix linting 2023-02-27 22:18:07 +01:00
lcaggio 05a85e753c First commit 2023-02-27 22:14:07 +01:00
Valerio Ponza cbe85e0605 fixing workloadidentity for anthos service mesh - authority was not created 2023-02-27 14:17:16 +00:00
Ludovico Magnocavallo 6320c53baf
Allow multiple peer gateways in vpn ha module (#1184)
* allow multiple peer gateways in vpn ha module

* align blueprints

* fast
2023-02-27 10:18:59 +00:00
Carlos Alexandre aecb6fd543
Implemented conditional dynamic blocks for `google_access_context_manager_service_perimeter` `spec` and `status` (#1177)
* implemented conditional dynamic blocks

* Fix linting

* avoid setting spec in bridge perimeters if no resources are set

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 16:04:19 +00:00
Julio Castillo 899960c247 Fix tests 2023-02-24 19:14:43 +01:00