Commit Graph

1169 Commits

Author SHA1 Message Date
Ludovico Magnocavallo 28da881c3f
DNS Response Policy module (#1276)
* dns response policy module

* tfdoc
2023-03-26 17:42:57 +02:00
Ludovico Magnocavallo 60261a6352
add static gateway id to outputs (#1270) 2023-03-21 18:08:45 +01:00
Julio Castillo 3d425b7d9c Ignore changes to metadata.0.annotations in Cloud Run module
Fixes #1173
2023-03-21 11:54:07 +01:00
Luca Prete 3b20d617dc
Improvements to NCC-RA spoke module. (#1267) 2023-03-21 07:07:44 +00:00
Luca Prete 6e49e94749
simple-nva: add ability to parse BGP configs as strings. (#1268)
* Add ability to parse BGP configs as strings.

* Fix var name

* Refresh tfdoc

---------

Co-authored-by: Luca Prete <lucaprete@google.com>
2023-03-21 07:41:12 +01:00
Taneli Leppä 4b15fe4744
Add backend service names to outputs for net-glb and net-ilb-l7 (some things like (#1258)
autoneg require names).

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-03-17 10:40:11 +00:00
Ludovico Magnocavallo 8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module (#1259)
* initial implementation, no tests

* change interface, align tests

* add examples ToC

* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
Ludovico Magnocavallo 50adf1da2a
change target_vpcs variable to support dynamic values (#1255) 2023-03-17 07:14:09 +00:00
Miren Esnaola 21fa6d1f13 Fixes related to boot_disk in compute-vm module 2023-03-16 15:58:39 +01:00
Ludovico Magnocavallo 79a6e9b191
pin local provider (#1256) 2023-03-16 10:59:06 +00:00
Julio Castillo c82f142d2d Delay creation of SVPC host bindings until APIs and JIT SAs are done 2023-03-14 14:51:17 +01:00
Ludovico Magnocavallo 112d9a8d9c
Allow using existing boot disk in compute-vm module (#1241)
* allow using existing boot disk in compute-vm module

* allow setting initialize params to null

* tests

* fast

* blueprints
2023-03-12 10:53:59 +01:00
Ludovico Magnocavallo 6ba0f8b0ba
allow overriding name in net-vpc subnet factory (#1239) 2023-03-11 09:30:42 +01:00
simonebruzzechesse 510db1b36f
Fix policy_based_routing.sh script on simple-nva module (#1226) 2023-03-10 18:36:07 +01:00
Julio Castillo 1c3645f3a3 Fix dataproc modules variables 2023-03-10 16:54:09 +01:00
bruzzechesse 7595508bd4 fix variable 2023-03-10 12:03:54 +01:00
bruzzechesse 3ffda9c8c9 terraform fmt 2023-03-10 10:45:39 +01:00
bruzzechesse f688b9a47d realign logic to boolean variable 2023-03-10 10:43:37 +01:00
bruzzechesse 7781b72690 replace track_per_session with tracking_mode and fixed connection tracking conf for backends 2023-03-10 10:03:45 +01:00
Ludovico Magnocavallo 45c12e233b
Network firewall policy module (#1232)
* validated, untested

* tested

* typo in README
2023-03-10 08:21:49 +00:00
Julio Diez d0f346f6c6 Add resources created as outputs 2023-03-09 15:35:52 +01:00
Julio Diez f82b5284c9 Change semantics of custom_advertise 2023-03-09 15:35:52 +01:00
Julio Diez 7eb9fbf676
Merge branch 'master' into ncc 2023-03-09 13:10:36 +01:00
Julio Diez 3e85175f67 Adapt README examples to the variables config 2023-03-09 13:06:02 +01:00
Julio Diez 0cf254f91e Update variable and output tables 2023-03-09 13:06:02 +01:00
Julio Diez 7e6635f535 Alphabetical order and better naming 2023-03-09 13:06:02 +01:00
Julio Diez eef6a48876 Make ip_interfaceX not optional
These IP values are optional, if you don't specify a value Google will try to
find a free IP address. But this is a bad idea because setting them to 'null'
forces a replacement even without any changes to make.
2023-03-09 13:06:02 +01:00
Julio Diez 84d3b83f81 Group router information under router_config 2023-03-09 13:06:02 +01:00
Julio Diez b25ee97d15 Group vpc and subnet under vpc_config 2023-03-09 13:06:02 +01:00
Julio Diez e9312e4dba var ras -> router_appliances 2023-03-09 13:06:02 +01:00
lcaggio cc6ee44759 Add aiplatform robot service account 2023-03-09 08:17:26 +01:00
Ludovico Magnocavallo 5489162b75
Merge branch 'master' into ncc 2023-03-08 20:33:53 +01:00
Julio Diez 96f35c53a5 Fix README variables to pass pytest 2023-03-08 20:00:55 +01:00
Julio Diez 93bb809a40 Rename module net-ncc -> ncc-spoke-ra 2023-03-08 20:00:55 +01:00
Julio Diez 62539508a5 Update README for the new implementation 2023-03-08 20:00:55 +01:00
Julio Diez 6196851d3f Output the name of the hub if created 2023-03-08 20:00:55 +01:00
Julio Diez 34c6a6aee1 Make creation of the hub optional 2023-03-08 20:00:55 +01:00
Julio Diez 1b4ba11dcd Make IPs for the CR interfaces optional 2023-03-08 20:00:55 +01:00
Julio Diez 0da0f33525 Make keepalive optional 2023-03-08 20:00:55 +01:00
Julio Diez 81121f4aa6 data_transfer default to false 2023-03-08 20:00:55 +01:00
Julio Diez d5d743174e Make custom_advertise optional 2023-03-08 20:00:55 +01:00
Julio Diez 2f64fcd5f4 Reimplement the module to manage only one spoke 2023-03-08 20:00:55 +01:00
lcaggio e213f156ad Fix Jit notebook service account. 2023-03-08 16:06:27 +01:00
simonebruzzechesse fd07c444cb
Extended simple-nva module to manage BGP service running on FR routing docker container (#1195) 2023-03-08 09:43:13 +01:00
Julio Diez 6eb82a2214
Merge pull request #16 from juliodiez/master
Sync branch
2023-03-07 13:13:35 +01:00
Julio Diez d9eaa59862 Generated variable table via tfdoc 2023-03-07 13:04:15 +01:00
Julio Diez ac224ad11c Add tftest to README 2023-03-07 12:29:20 +01:00
Julio Diez 94f3a08129 Add example of custom route advertisements 2023-03-07 11:54:34 +01:00
Julio Diez 9b5bc407ba Add image for load-balanced router appliances example 2023-03-07 11:10:19 +01:00
Julio Diez 58c90feca2 Add example of load-balanced router appliances 2023-03-07 11:06:23 +01:00
Julio Diez 3e0a8c4c0a Add image for site to two VPCs example 2023-03-07 10:43:51 +01:00
Julio Diez 76972d5804 Add example of site to two VPCs 2023-03-07 10:37:58 +01:00
Julio Diez 449f5cbb56 Adapt example to use only allowed chars for resource names 2023-03-07 10:28:29 +01:00
Julio Diez 87107ba3e0 Set a unique name to CRs linked to spokes 2023-03-07 10:11:02 +01:00
Julio Diez e7963eb630 Set a unique name to spokes 2023-03-07 10:01:07 +01:00
Julio Diez 71cb18f808 Replace map key derived from resource attributes 2023-03-07 09:52:34 +01:00
Julio Diez 0f4919a771 Add image for site to VPC example 2023-03-06 20:55:36 +01:00
Julio Diez 69493d8a40 Add README with first example 2023-03-06 20:47:18 +01:00
Julio Diez 65671647e7 Make optional some router config fields 2023-03-06 20:45:08 +01:00
Julio Diez 25b14465b2 Simplify some naming 2023-03-06 19:21:09 +01:00
Julio Diez e835730665 Add router BGP peers 2023-03-06 18:02:50 +01:00
Julio Diez 02707eb275 Initial commit for NCC module 2023-03-06 14:09:14 +01:00
Ludovico Magnocavallo 8fc9549c58
add support for proxy and psc subnets to module factory (#1211) 2023-03-05 17:08:43 +01:00
lcaggio 88ecdbe671
Merge branch 'master' into lcaggio/dataproc-03 2023-03-02 12:18:52 +01:00
Taneli Leppä 99d19d5ec8 Fix issue with GKE cluster notifications topic, change pubsub module output to static. 2023-03-02 11:23:05 +01:00
lcaggio b7793f69a2 Dataproc module. Fix output. 2023-03-02 10:39:08 +01:00
erabusi 2ebb21e4cc
Fix url_redirect issue on net-glb module (#1204) 2023-03-02 07:51:39 +01:00
lcaggio b39b486cd4 Fix README 2023-03-01 10:48:33 +01:00
lcaggio c4d8175d9a
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 10:44:31 +01:00
lcaggio 0d37fe8338 Update README 2023-03-01 10:44:01 +01:00
Ludovico Magnocavallo 3a2d6e1b46
Fix secondary ranges in net-vpc readme (#1198)
Fixes #1197
2023-03-01 08:08:07 +01:00
lcaggio dad3c49012 Fix linting 2023-03-01 08:00:52 +01:00
Ludovico Magnocavallo 6629e5cd06
Merge branch 'master' into lcaggio/dataproc-02 2023-03-01 07:57:21 +01:00
lcaggio dc37783022 Fix Variables 2023-03-01 07:54:10 +01:00
Ludovico Magnocavallo 4b3b5ad1cb
Merge branch 'master' into fix-test-compute-vm-kms 2023-02-28 16:13:48 +01:00
Dan Farmer 52eb83758f Fix compute-vm:CloudKMS test for provider>=4.54.0
* TF provider >= 4.54.0 now returns `rsa_encrypted_key` for
  `google_compute_disk.disks["attached-disk"]` (see
  hashicorp/terraform-provider-google#4448)
* Add this field to expected model to fix test assertion failure
* Update required TF provider to 4.55.0 (latest) since the assertion
  will now fail with <4.54.0, which do not return `rsa_encrypted_key`
  * Updated the whole repo on advice from @ludoo
2023-02-28 15:10:22 +00:00
Joshua Goldberg 6bf2fb4c06
Fix https health check mismapped to http (#1194) 2023-02-28 15:48:13 +01:00
lcaggio 0f504f6b8e Fix output variable order. 2023-02-28 10:50:58 +01:00
lcaggio ac0a140011 Fix outputs 2023-02-28 10:35:44 +01:00
Ludovico Magnocavallo 1a685e7b83
Update README.md 2023-02-28 07:49:28 +01:00
Ludovico Magnocavallo 3d2f1182d2
Update README.md 2023-02-28 07:48:47 +01:00
lcaggio 7ece884422 Fix examples. 2023-02-28 06:52:10 +01:00
lcaggio 46a99b9a9b
Merge branch 'master' into lcaggio/dataproc 2023-02-28 06:36:21 +01:00
Ludovico Magnocavallo e098568b6e
fix external gateway (#1191) 2023-02-28 00:46:50 +01:00
lcaggio fdb4f2a9fd Fix variables 2023-02-27 22:23:45 +01:00
lcaggio 51579ac7e7 Fix linting 2023-02-27 22:18:07 +01:00
lcaggio 05a85e753c First commit 2023-02-27 22:14:07 +01:00
Valerio Ponza cbe85e0605 fixing workloadidentity for anthos service mesh - authority was not created 2023-02-27 14:17:16 +00:00
Ludovico Magnocavallo 6320c53baf
Allow multiple peer gateways in vpn ha module (#1184)
* allow multiple peer gateways in vpn ha module

* align blueprints

* fast
2023-02-27 10:18:59 +00:00
Carlos Alexandre aecb6fd543
Implemented conditional dynamic blocks for `google_access_context_manager_service_perimeter` `spec` and `status` (#1177)
* implemented conditional dynamic blocks

* Fix linting

* avoid setting spec in bridge perimeters if no resources are set

---------

Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-02-25 16:04:19 +00:00
Julio Castillo 899960c247 Fix tests 2023-02-24 19:14:43 +01:00
Valerio Ponza 36e6367a5c adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:11:35 +00:00
Valerio Ponza 7670a6009f adding meshconfig.googleapis.com to JIT list. 2023-02-24 16:05:11 +00:00
Julio Diez 3b0223458b
Don't define nor use health checks with SNEGs
SNEGs don't use health checks and it's an error to add one in their backend services. 'terraform plan' doesn't detect it, only 'apply'.
2023-02-24 11:13:55 +01:00
Julio Diez 5a44baa82f
Merge branch 'master' into juliodiez-patch-1 2023-02-24 10:22:07 +01:00
Miren Esnaola ae6080ebf7 Modifications related to autopilot and workload identity. Added workload_identity_pool output to module 2023-02-24 09:59:23 +01:00
Julio Diez 08ba94aebc
Allow to not use any health check
Internet / serverless NEGs (Cloud Run) don't use them and it's an error to add one in their backend services.
2023-02-24 09:55:26 +01:00
Julio Castillo a5e905cb80 Update remaining org policies 2023-02-21 15:49:16 +01:00
Julio Castillo 62834ca83a Update READMEs 2023-02-21 15:49:16 +01:00
Julio Castillo 6b767c9035 Simplify org policies data model in resman modules. 2023-02-21 15:49:16 +01:00