6fee2a9eb3
Merge branch 'elia-gcve' of github.com:GoogleCloudPlatform/cloud-foundation-fabric into elia-gcve
2023-08-14 14:46:16 +02:00
f3d5dd8e34
Added link to GCVE module
2023-08-14 14:41:33 +02:00
b6b660f4f3
feat: 🎸 (modules/cloudsql-instance):add project_id for ssl cert ( #1591 )
2023-08-14 12:40:25 +02:00
5689aacac2
Merge branch 'master' into elia-gcve
2023-08-14 11:56:47 +02:00
adf2621727
Add new `iam_members` variable to IAM additive module interfaces ( #1589 )
...
* resource management modules
* data catalog policy
* dataproc
* service account
* kms
* net-vpc
* source repository
* dataplex datascan
* service account module variable order
2023-08-14 09:54:50 +00:00
a509756f1b
GCVE module first release
2023-08-14 11:48:27 +02:00
f9509ad6b7
feat: 🎸 (modules/cloudsql-instance): enable require_ssl cert support ( #1588 )
2023-08-14 11:37:03 +02:00
841459a059
Fix factory rules key in net firewall policy module ( #1587 )
...
* fix factory rules key in net firewall policy
* fix test
2023-08-14 07:52:36 +02:00
10faf82b8d
linting
2023-08-11 11:20:06 -06:00
2fa6369ba0
Merge branch 'master' of https://github.com/GoogleCloudPlatform/cloud-foundation-fabric into ehorning/support-gcs-object-upload
2023-08-11 11:19:21 -06:00
b1679ad21a
Fix: Instance level stateful disk config ( #1578 )
...
* update doco
* fix bug in TF code
* change instance name in README to fix test
* revert disk name
* Update stateful.yaml
* fix examples and tests
---------
Co-authored-by: Julio Castillo <juliocc@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-08-11 15:25:17 +00:00
df1fded669
add support for object upload to gcs module
2023-08-10 21:43:53 -06:00
78095063f7
feat(modules/cloud-run): add gen2 exec env support ( #1582 )
2023-08-09 23:04:16 +02:00
79373721df
Remove firewall policy management from resource management modules ( #1581 )
...
* rename firewall policy module, fix outputs
* add TOC to firewall policy module
* don't depend policy on parent id
* remove firewall policy from resource management modules
* remove factory conditionals
* fast net a and b
* fast stages
* fast tfdoc
* fast tfdoc
* remove unused test
* fix shielded folder blueprint
* fix shielded folder blueprint
2023-08-09 11:23:07 +00:00
6a13742e3c
Apigee addons
2023-08-09 08:12:06 +02:00
80ada0e8dd
Refactor firewall policy module ( #1576 )
...
* refactor module interface
* hierarchical attachment and example
* hierarchical rules and TODO
* split rules resources
* additional fields
* keep using a single resource for rules
* factory
* factory test
* boilerplate
* Prefix ingress and egress rule ids
* Tests for other firewall policy types
* Fix rule id and names
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-08-08 16:57:59 +00:00
9ec38581d7
Update README.md
2023-08-07 14:33:54 +01:00
dd3a298892
Moved allow_net_admin to enable_features flag. Bumped provider version to 4.76
2023-08-07 14:27:20 +01:00
69ea9dd3be
Linting with terraform fmt
2023-08-07 12:46:54 +01:00
10e3184451
Expose allow_net_admin feature in gke-cluster-autopilot
2023-08-07 12:44:59 +01:00
9c75aa469c
More module descriptions ( #1572 )
...
* bigquery dataset
* data catalog policy tag
* net-address
* fix data catalog callers
* bigquery dataset views
* fix data catalog callers
* logging bucket
* net vpn ha
2023-08-06 09:25:45 +00:00
83d2976949
add support for cost management to GKE module ( #1569 )
2023-08-05 11:46:52 +00:00
aecba0bbd0
Add support for ipv6 to net-vpc module ( #1568 )
...
* add support for ipv6
* fix test
2023-08-05 13:07:26 +02:00
ce510583bf
Fix default routes
2023-08-04 18:24:41 +02:00
bbe778e095
Allow custom route descriptions in net-vpc module
...
Related: #1491
2023-08-04 14:13:03 +02:00
702c428da4
Update Readme
2023-08-04 13:06:59 +02:00
a0bd0d4414
Merge branch 'master' into feature/apigee-add-retention
2023-08-03 14:28:40 +02:00
fe0a9ed138
Fixed error of inconsistent conditional result types when evaluating local peer_gateway variable
2023-08-02 23:22:26 +02:00
0906ddb8df
feat(apigee): add retention variable
2023-08-02 15:13:43 +02:00
22b661fe93
Removed unused attribute in peer_gateway_config variable
2023-08-02 15:07:05 +02:00
43e73aba9a
add dataplex datascan base module ( #1545 )
2023-08-02 11:16:32 +00:00
3b7e62990c
Added IPSEC_INTERCONNECT addresses to net-address module
2023-08-02 12:12:14 +02:00
4bb51a42ce
renaming net-vpc-swp to net-swp
2023-08-01 16:23:12 +02:00
7acd9f624e
coalesce instead of ternary operator
2023-08-01 15:07:37 +02:00
f09d32a703
Merge branch 'master' into net-vpc-swp-optional-description
2023-08-01 13:05:04 +02:00
bcf191ab5a
description: only one main variable
2023-08-01 13:04:47 +02:00
915f09461e
optional description for the gateway security policy - separately
2023-08-01 10:27:26 +02:00
bd0fe1f928
Fix tests
2023-07-31 18:04:07 +02:00
3df98c8feb
Fix permadiff in artifact-registry
2023-07-31 18:04:07 +02:00
75bd7d7c2d
Merge branch 'master' into net-lb-proxy-int
2023-07-31 17:43:07 +02:00
63ac5710ac
Added module for Regional Internal Proxy Load Balancer
2023-07-31 17:21:57 +02:00
51bc31ae21
Fix in IAM bindings of cloud function v2 module
2023-07-31 12:39:08 +02:00
09c9e291a0
Merge branch 'master' into net-lb-hc-fix
2023-07-31 11:55:47 +02:00
fe3e8a3941
Add image path output to ar module ( #1552 )
...
* Add image path output to ar module
* tfdoc
2023-07-31 09:34:01 +00:00
f49515495c
Fix in validation of healthchecks variable
2023-07-31 10:23:32 +02:00
47a9947b18
Fix in validation of healthchecks variable
2023-07-31 10:01:35 +02:00
b524aa137c
Peering module refactor ( #1547 )
...
* refactor net-vpc-peering module
* hub and spoke peering blueprint
* fast stages
* boilerplate
* fast tfdoc
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-07-29 21:33:57 +02:00
4998f1d376
Grant IAM rights to service identities in host project ( #1542 )
...
* [module/project] Grant IAM rights to service identities based on used services in host project
* [blueprints/factories/project-factory] enable granting IAM permissions in host VPC for service identities directly or by specifying services in use
2023-07-29 20:07:21 +02:00
0415cf64f1
rename cloud-dataplex to dataplex ( #1546 )
2023-07-29 14:31:18 +02:00
32bb69caa5
Merge branch 'master' into jccb/toc
2023-07-28 17:23:18 +02:00
a89e0dac31
Fixes in cloud function v2 module for trigger service account
2023-07-28 17:02:36 +02:00
408e4eedd0
Fix artifact-registry readme
2023-07-28 16:38:26 +02:00
e6be368367
Simplify whitespace handling
2023-07-28 16:32:38 +02:00
1fdec356e2
Update large TOCs
2023-07-28 15:43:51 +02:00
4f123ccc74
Extend tfdoc to generate TOCs
2023-07-28 14:18:28 +02:00
5a534edf5c
update and refactor artifact registry module ( #1536 )
2023-07-28 09:54:36 +00:00
960c84b347
Fixed wrong ASN when using partner_interconnect. ( #1537 )
2023-07-28 09:16:03 +00:00
a8d9d80d5b
Renamed output.tf in net-vlan-attachment ( #1535 )
...
* Renamed output.tf in net-vlan-attachment
2023-07-28 08:35:48 +00:00
cf567b0c43
Fix in event_filters of trigger_config
2023-07-25 16:22:09 +02:00
d46312a7f1
Improve Dataplex ( #1519 )
...
* First commit.
* Implement fixes.
* fix google_dataplex_zone_iam_binding
2023-07-24 10:52:07 +02:00
ec74f351f5
feat(cloudsql-instance): Add query insights config ( #1520 )
2023-07-21 20:14:34 +02:00
fde498800c
optional description attribute in variables
2023-07-20 12:14:39 +02:00
a8c27b1b6e
optional description in modules/net-vpc-swp
2023-07-20 08:45:18 +02:00
bad5748be4
enable-logging flag can only be true for public zones
2023-07-19 16:16:56 +02:00
cacb0c02e2
Refactoring of dns module
2023-07-19 12:57:44 +02:00
74c50f95a8
Add output to org module with custom constraint details and depends_on
2023-07-17 18:49:36 +02:00
cc0b278df3
Move IAM grant to function level for trigger SA
2023-07-12 16:19:34 +02:00
dd37d07955
Update ncc-spoke-ra module to explicity request ncc hub id when referencing existing hubs ( #1479 )
...
* Updated ncc-spoke-ra module to explicity requesting ncc hub id when referencing existing hub
* fix documentation
* updated hub variable description
* more explicit validation condition on hub variable
2023-07-10 16:18:42 +02:00
973a8594b6
add support for custom description in net-address ( #1499 )
2023-07-10 13:04:54 +02:00
551dc581e8
Implement proper support for data access logs in resource manager modules ( #1497 )
...
* organization module
* rename iam_bindings_authoritative to iam_policy, fix tests
* add support for data access logs and iam policy to folder module
* test inventories
* add support for data access logs and iam policy to project module
2023-07-10 08:08:02 +00:00
d9f7cef1e7
allow using a separate resource for boot disk ( #1496 )
2023-07-07 15:40:13 +00:00
86cc6eee4c
disable googleapi routes creation when vpc is not created ( #1489 )
2023-07-03 09:10:12 +02:00
31f7a9ecca
allow external editing of group instances in lb modules ( #1486 )
2023-06-30 17:34:09 +00:00
10e15356ea
Add bigquery authorized resources ( #1480 )
...
* add bq authorized views, datasets, and routines
* fmt
* add backwards compatible test case
* minor docs clarification
* add docs table and fix lint tests
* fix docs
* fix tests
* fix more lint issues
* fix lint issue
* fix tests
* fix lint
* fix tests
* alphabetical order
* add detailed example to docs and corresponding test
* clarify docs for variables
* remove unnecessary depends_on
2023-06-30 18:44:57 +02:00
ac9417b82d
align group names in lb modules ( #1485 )
2023-06-30 10:18:06 +00:00
925a288316
Update README
2023-06-28 20:09:18 +02:00
55062fe66f
Merge branch 'master' into patch-1
2023-06-28 20:05:06 +02:00
6fcb010ff2
Add ToCs to resource manager modules ( #1471 )
...
* organization module
* folder
* project module
2023-06-27 09:36:28 +00:00
638841c8d1
Rename network load balancer modules ( #1466 )
...
* update LB modules to new names
* update LB modules names
* update test paths
2023-06-26 07:50:10 +00:00
ce647647cc
Add support for resource policies to compute vm module ( #1467 )
...
* instance schedule
* snapshot resource policy variable and resource
* tfdoc
* snapshot schedules
2023-06-26 06:49:05 +00:00
32b347b104
modules/vpc-sc: add support for method_selectors/permission ( #1439 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-06-25 06:45:37 +00:00
ad25b1a31c
Added validation for edge_availability_domain value
2023-06-23 12:11:06 +02:00
15ae95df90
Fixing typos
...
- modules/organization/variables.tf
- modules/organization/README.md
- blueprints/data-solutions/shielded-folder/main.tf
2023-06-23 00:14:02 -04:00
9c26760773
add missing variable image_uri
...
For master_config, the variable image_uri is missing
2023-06-21 16:19:48 -06:00
f6e918ffbd
Merge branch 'master' into dns-managed-zone-iam
2023-06-20 12:19:13 +02:00
97d6e48bde
Re-order variables
2023-06-20 17:30:23 +10:00
1f6f0c306d
Formatting
2023-06-20 17:27:15 +10:00
c05bc41b69
feat(artifact-registry): Add support for CMEK
2023-06-20 17:27:15 +10:00
2830e4b9e2
Split Cloud Function module in separate v1 and v2 modules ( #1450 )
...
* split v1
* v2
* blueprints
* remove _http
2023-06-20 17:27:15 +10:00
ddfab0a0e4
Added iam for DNS managed zone to dns module
2023-06-19 12:53:38 +02:00
a424635221
Refactored apigee module and adjusted the blueprints accordingly
2023-06-19 09:01:32 +02:00
064d86511f
enable_logging variable was not being used
2023-06-14 19:22:04 +02:00
30ae108c89
Ignore Cloud Run system annotations/labels
...
Ignore explicitly:
* metadata.0.annotations["run.googleapis.com/operation-id"],
* template.0.metadata.0.labels["run.googleapis.com/startupProbeType"]
To remove permdiff in terraform plan. Not ignoring all changes in
annotations as it implements some of the functionality and it prevents
detecting drift.
Related: #1435 , #1269
2023-06-13 10:07:04 +02:00
81285065ca
Added module for Secure Web Proxy.
2023-06-13 08:49:58 +02:00
500179f02f
Move net-dedicated-vlan-attachment module to net-vlan-attachment and added support for Partner interconnect
2023-06-12 14:21:01 +02:00
50d8d4b8b8
Add subnets id output, expand net-address outputs
2023-06-12 10:24:30 +02:00
e900e9c951
Make internal/external addresses optional in compute-vm
...
Fixes 1431
2023-06-08 14:00:10 +02:00
d248f799d9
Merge branch 'master' into net-ilb-l7-psc-negs
2023-06-08 12:35:17 +02:00
a7b944aa8e
fix serverless neg example ( #1430 )
2023-06-08 12:05:54 +02:00
ebeace21dd
Added support for PSC negs in net-ilb-l7 module
2023-06-08 11:18:32 +02:00
c024eca320
Add custom tag support to FAST ( #1426 )
...
* initial implementation of custom tags
* depend org policies on tags
* fix test
* integrate default and custom org policy tags
2023-06-07 22:10:27 +00:00
39b27ac25e
Add support for Log Analytics on logging-bucket module and bump provider version ( #1423 )
...
* first commit
* Bump provider versions
* Fix tests
2023-06-07 23:23:28 +02:00
7bd6e5d57b
Small fixes ( #1425 )
...
* fix serverless connector plugin outputs
* add internal and lb to allowed ingress org policy
* add validation condition on cloud run ingress settings
* tfdoc
* plugin tfdoc
* allow disabling googleapis routes with a single instruction in net-vpc
* fix variable def
* fix variable description
* fix cr variable validation
* fix usage of create_googleapis_routes in examples and stages
2023-06-07 17:37:46 +00:00
fedb894f97
Fix NLB module ( #1419 )
...
* net-nlb fixes
* formatting
2023-06-05 19:42:32 +02:00
ea4c00756b
Network Load Balancer module ( #1418 )
...
* wip
* example tests passing
2023-06-05 13:21:40 +02:00
0d6751a5f4
Remove hardcoded description from instance groups created under net-ilb ( #1417 )
2023-06-05 09:35:17 +00:00
c439a66b27
Add notice to net-ilb module on routes ( #1415 )
...
* add support for routes
* boilerplate
* revert and add notice to README
* revert
* revert
* Fix README
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-06-05 09:40:34 +02:00
f2fe406a62
add alloydb module ( #1403 )
...
* add alloydb module
* fix typos
* fix typos
* Add default googleapi route creation to net-vpc
* Reuse existing logic to create default routes
* Update net-vpc README
* Fix modules and blueprints tests
* Rename to `create_googleapis_routes`
* Fix FAST tests
* Fix nva stages tests
* update changelog
* fix typos
* fix version
* rearrange variables
* fix lint
* fix lint
* fix README
* fix README
* fix comments
* fix variables
* fix READMEs
---------
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludo <ludomagno@google.com>
2023-06-04 10:12:32 +00:00
87db60de1f
Add networksecurity to JIT identity list.
2023-06-02 16:11:16 +02:00
884cb8b4bf
Ensure all modules have an `id` output ( #1410 )
...
* net-vpc
* a-d
* complete modules
* fix error
2023-06-02 16:07:22 +02:00
f069562998
Added comment in the dns module, saying that inbound/outbound server policies are set in the net-vpc module ( #1405 )
...
Co-authored-by: Luca Prete <preteluca@gmail.com>
2023-06-02 11:35:25 +02:00
6c11527762
Multiple Updates
...
modules/net-dedicated-vlan-attachment/variables.tf
modules/net-dedicated-vlan-attachment/README.md
CHANGELOG.md
blueprints/networking/ha-vpn-over-interconnect/README.md
2023-05-31 13:26:22 -04:00
fda4daecff
Cosmetic documentation fixes
2023-05-31 13:51:15 +02:00
7f561565e7
HA VPN over Interconnect modules and blueprint ( #1390 )
...
Two new modules, net-ipsec-over-interconnect to establish HA VPN over existing VLAN attachments, and net-dedicated-vlan-attachment to create (optionally encrypted) vlan attachments, as well as the ha-vpn-over-interconnect blueprint that shows how to compose such modules to create a 99.9% encrypted interconnect.
2023-05-31 10:53:38 +00:00
3ac6ceac1e
Add trigger SA for Cloud Run
2023-05-30 17:08:37 +02:00
0888cce3a5
Rename to `create_googleapis_routes`
2023-05-26 16:43:43 +02:00
cecbd2072c
Fix modules and blueprints tests
2023-05-26 16:38:41 +02:00
563b5fa0cb
Update net-vpc README
2023-05-26 12:46:16 +02:00
1e8c58c88e
Reuse existing logic to create default routes
2023-05-26 12:01:38 +02:00
7a91a7e41c
Add default googleapi route creation to net-vpc
2023-05-26 10:55:35 +02:00
e479d9815b
Merge branch 'master' into juliocc-patch-1
2023-05-24 12:46:04 +02:00
aa80109081
allow to configure `stack_type` in the GKE modules ( #1395 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-24 10:19:43 +00:00
4aa99ea829
allow setting identities in egress policies ( #1394 )
2023-05-24 12:05:16 +02:00
d22bf2ec6b
Update README.md
2023-05-24 11:34:21 +02:00
fddf8b52bc
Fix sort order
2023-05-22 19:11:33 +02:00
3e67fc00ca
Add default Cloud Build SA to project module
2023-05-22 19:11:33 +02:00
a5bbd09776
Support CMEK encryption in logging-bucket module
...
We have a use case, Local Controls, that requires to configure
CMEK with Logging buckets. This commit adds an optional variable to
configure CMEK in the `logging-bucket` module. By default the Logging
bucket won't use CMEK encryption.
To configure CMEK for Logging buckets it's also required to add the
correct permissions to the bucket service account. For more information
and a Terraform example, see:
https://cloud.google.com/logging/docs/routing/managed-encryption-storage
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/logging_project_bucket_config#example-usage
2023-05-22 15:12:27 +01:00
6a89d71e96
Update to multiple README.md ( #1379 )
...
- blueprints/data-solutions/data-platform-foundations/README.md
- blueprints/factories/project-factory/README.md
- modules/net-ilb-l7/README.md
- modules/project/README.md
2023-05-16 06:11:34 +00:00
0ad21351c0
Merge branch 'master' into master
2023-05-15 14:25:42 -04:00
2cbd85c8e0
Merge branch 'master' into jccb/nat-rules
2023-05-14 15:29:52 +02:00
dd1e5dc463
added the export_public_ip_routes variable in the net-vpc-peering mod… ( #1374 )
...
* added the export_public_ip_routes variable in the net-vpc-peering module to control the google_compute_network_peering resource created
* adding period to the variable description
2023-05-14 15:29:24 +02:00
87cd83f5c0
Several updates
...
Several updates
2023-05-13 23:51:46 -04:00
8e1e761577
Merge branch 'master' into cloud-functions-cpu
2023-05-13 09:45:10 +02:00
4df6c90d12
Made available CPUs configurable in Cloud Functions module
2023-05-12 21:36:22 +02:00
d20a078134
Cloud NAT rules support
2023-05-12 16:20:38 +02:00
20b8002602
feat(net-cloudnat): add config_port_allocation configuration block
2023-05-11 12:20:43 -07:00
b8b6f0dcc2
Add versions.tf to ncc-spoke-ra module
2023-05-09 16:00:13 +02:00
8c7b6b2410
Update README tfdoc
2023-05-05 19:52:41 +02:00
252be12bd4
Update README showing the Shared VPC use case
2023-05-05 19:38:34 +02:00
aec85a20c9
Add support for Shared VPC in Cloud Run
...
A VPC access connector in a Shared VPC needs to specify the subnet
and subnet project (the host project).
2023-05-05 18:15:19 +02:00
c344606ae5
Add module link to README ( #1357 )
...
* Add dataplex module
* fix dataplex test
* resolve comments
* python test removed
* Change variable desc
* refactor variables
* fix typos
* fix assets & zones resources
* fix linting error
* fix tests
* fix typo
* add module link in README
---------
Co-authored-by: lcaggio <lorenzo.caggioni@gmail.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-05 08:10:09 +00:00
e333b6ffa2
Change serve_while_stale type to a number ( #1329 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-05-05 07:41:12 +00:00
23299f7bd7
Add cloud dataplex module ( #1308 )
...
* Add dataplex module
* fix dataplex test
* resolve comments
* python test removed
* Change variable desc
* refactor variables
* fix typos
* fix assets & zones resources
* fix linting error
* fix tests
* fix typo
2023-05-05 09:26:46 +02:00
efb0ebe689
Switch FAST networking stages to network policies for Google domains ( #1352 )
...
* peering stage implementation
* vpn stage implementation
* tfdoc
* tests
* add most supported google domains
* align all net stages
* add support for factory to DNS response policy module
* use dns policy factory in network stages
* boilerplate
2023-05-04 07:38:40 +02:00
5763eb53d4
Enhance GKE Backup Configuration Support ( #1349 )
...
* Add more support for backup configuration
* Update docs
* Remove redundant lookups
2023-05-02 14:59:12 +00:00
98c8643886
ignore entire node config in standard cluster ( #1348 )
2023-05-02 15:23:02 +02:00
94589efc34
Fix external documentation links ( #1347 )
2023-05-02 05:26:58 +00:00
8e55374717
Merge branch 'master' into lcaggio/vertex-01
2023-04-24 20:33:03 +02:00
df7cf3d278
Migrate compute-mig tests
2023-04-21 17:51:20 +02:00
eab9053e16
Migrate billing-budget tests
2023-04-21 17:51:20 +02:00
1649787905
Migrate kms tests
2023-04-21 17:51:20 +02:00
1c7f8f5907
Migrate bigquery-dataset tests
2023-04-21 17:51:20 +02:00
230a1034ec
Migrate net-address tests
2023-04-21 17:51:19 +02:00
924230eb12
Migrate gke-hub tests
2023-04-21 17:51:19 +02:00
e881537f87
Separating GKE Standard and Autopilot Modules ( #1330 )
...
* separating GKE Standard and Autopilot Modules
* Changes for Updating the terraform and provide versions
* Changes for Autopilot Readme
* Changes for Autopilot Variable
* Changes for Autopilot Readme
* Changes for Autopilot Readme
* Changes for Blueprint
* Changes for Blueprint ReadMe
* Changes for gke-standard-cluster dependency
* Changes for gke-standard-cluster in gke-fleet
* Changes for gke-standard-cluster in cluster-mesh-gke-fleet-api
* python formatting
* python formatting
* python formatting
* GKE module naming convention
* Readme Changes
* test module
* Removing comment code from Autopilot
2023-04-21 12:08:13 +00:00
15a4dcdd71
Merge branch 'master' into lcaggio/vertex-01
2023-04-19 11:51:53 +02:00
e24b993550
Add lifecycle for create certificate before destroy
2023-04-19 09:24:35 +01:00
edf67fc5d0
First commit
2023-04-18 17:32:15 +02:00
5807c03d88
Certifiate
2023-04-18 13:15:02 +01:00
e1ebfeecad
Fix the tf error: Inconsistent conditional result types
...
The conditional statement, with tomap({}) will cause the following error under terraform 1.4.5
Error: Inconsistent conditional result types
│
│ on ../../../modules/net-vpc/subnets.tf line 20, in locals:
│ 20: _factory_data = var.data_folder == null ? tomap({}) : {
│ 21: for f in fileset(var.data_folder, "**/*.yaml") :
│ 22: trimsuffix(basename(f), ".yaml") => yamldecode(file("${var.data_folder}/${f}"))
│ 23: }
│ ├────────────────
│ │ var.data_folder is "data/subnets/common"
│
│ The false result value has the wrong type: element types must all match for conversion to map.
2023-04-18 19:54:37 +10:00
306b38295e
Add CMEK support
2023-04-17 23:32:13 +02:00
e8ff5080b9
Fix linting
2023-04-17 09:17:54 +02:00
4770cb06fd
Migrate cloudsql-instance examples
2023-04-17 09:17:54 +02:00
461f7780c2
Migrate bigtable-instance tests
2023-04-17 09:17:54 +02:00
5f82938739
Migrate cloud-identity-group tests
2023-04-17 09:17:54 +02:00
771dd02b18
Migrate logging-bucket tests
2023-04-17 09:17:54 +02:00
0150e97e51
Migrate endpoints tests
2023-04-17 09:17:54 +02:00
01b9921f5c
Migrate PubSub tests
2023-04-17 09:17:54 +02:00
1927b138d6
Migrate secret-manager tests
2023-04-17 09:17:54 +02:00
a2bffc7302
Migrate service-directory tests
2023-04-17 09:17:54 +02:00
ed49f3db39
Migrate source repository tests
2023-04-17 09:17:54 +02:00
f5e1717319
Migrate VPC-SC tests to examples
2023-04-17 09:17:54 +02:00
2d4bd5a244
Remove net-interconnect-attachment-direct
2023-04-14 11:01:54 +02:00
eca0a9583e
Add inventories to net-vpc-firewall tests
2023-04-12 14:04:58 +02:00
063c5061c8
lowercase text
2023-04-12 08:25:33 +00:00
df789db9bd
updated spaces
2023-04-11 21:59:36 +00:00
b4156eff41
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall
2023-04-11 22:58:22 +02:00
3673dc2774
Merge branch 'master' into fawzihmouda/firewall-enforcement-order
2023-04-11 23:44:56 +10:00
ebf93a66ad
add new test to README
2023-04-11 23:38:16 +10:00
4722efea40
bump provider versions
2023-04-11 22:18:31 +10:00
3c4254fc1f
update firewall_policy_enforcement_order variable
2023-04-11 22:08:41 +10:00
6db1a5f5d3
updated variables doc
2023-04-11 11:39:47 +00:00
d150f03b41
included link to the tf resource bug in a comment
2023-04-11 11:30:12 +00:00
4e426a990a
correct naming in source destination egress fw rule
2023-04-11 10:48:56 +00:00
6f1e531af0
added example for source&destination ranges usage in fw rules
2023-04-11 10:45:45 +00:00
b809b315f6
added example for source&destination ranges usage in fw rules
2023-04-11 10:43:32 +00:00
660da5b585
Merge branch 'GoogleCloudPlatform:master' into ajln-firewall
2023-04-11 12:24:06 +02:00
4ccf9f9361
included an empty list as default in the ingress_rules.destination_ranges variable
2023-04-11 10:22:08 +00:00
33e8b42842
Use labels var in cloud-run module ( #1310 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-04-11 03:06:13 +00:00
adb88d8a87
allow destination_range variable in ingress rules and source_range in egress rules
2023-04-10 14:00:55 +00:00
18f1e8ebb1
added source and destination ranges to both ingress and egress fw rules
2023-04-10 10:47:51 +00:00
db3c48736c
add firewall enforcement variable to VPC
2023-04-10 01:28:12 +10:00
865ef463bb
Support new fields in bigquery module, bump provider versions, unpin local provider ( #1306 )
...
* add support for new attributes to bigquery module
* bump provider versions
2023-04-05 14:22:52 +00:00
70aefc2ddb
Add ability to run vtysh from simple-nva vm directly when frr is active ( #1301 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 21:37:02 +02:00
07f60fb0b9
Fix vtysh ( #1300 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 14:37:46 +00:00
bc2d9372aa
Fix urlmap in ILB L7 module ( #1299 )
...
* port tests to new format
* add test to catch error and fix urlmap
* boilerplate
* boilerplate
2023-04-03 15:47:37 +02:00
bf14d2da23
Add sample vtysh file to remove warnings ( #1298 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-04-03 15:10:46 +02:00
92b71a5098
Refactor cloud run module to use optionals and support all features ( #1293 )
...
* refactor cloud run resource and variables
* vpc connector variables and resource
* refactor env variable, combine and fix env examples
* fix volume example
* fix traffic split example
* fix eventarc/pubsub example
* fix eventarc/audit log example
* fix SA examples, fix examples formatting
* refactor eventarc variable
* tfdoc
* add IAM to example
* add examples for revision annotations and serverless connector
* fix new examples
* remove legacy module tests
* blueprint tests
* Add tests to cloud-run module
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-04-01 14:06:29 +02:00
c5db50d1d7
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
6204787226
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
0a20bc4f2d
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
1fb7e114fd
fixing tests and refactoring default
2023-03-30 12:47:39 +02:00
596acb63e4
removing deprecated field from gke-hub
2023-03-30 12:47:39 +02:00
44d2e9e50e
removing deprecated field from gke-hub
2023-03-30 12:47:39 +02:00
64a9952656
add Backup for GKE support
2023-03-30 12:47:39 +02:00
7135c9015f
Add boilerplate
2023-03-30 09:36:14 +03:00
b503bde544
Load all service agents identities from yaml
...
Source: https://cloud.google.com/iam/docs/service-agents
2023-03-30 09:36:14 +03:00
c76e95e7e8
Add Cloud Batch service identity ( #1294 )
2023-03-30 08:05:12 +02:00
d64b5779e4
Merge branch 'master' into dataplex
2023-03-27 21:44:24 +02:00
039d10b287
Merge branch 'master' into dataplex
2023-03-27 16:18:38 +02:00
dfa1fce274
Merge branch 'master' into bruzz/nva-firewall-mgmt
2023-03-27 16:04:55 +02:00
d68476ba07
fixes
2023-03-27 15:46:37 +02:00
cf2fd119b5
small fixes
2023-03-27 15:35:00 +02:00
9005a51a95
Use example testing instead custom test
2023-03-27 14:13:38 +02:00
d105ed59d3
Resolve review comments
2023-03-27 14:13:38 +02:00
082301c09c
Use unique bundle name for Cloud Function
...
When cloud-function module is used multiple times within project and
default `bundle_config.output_path` is used then all the instances try
to use filename and result is undefined without guarantee to converge to
desired state (i.e. multiple functions may share the same code).
2023-03-27 14:13:38 +02:00
a93b80cf95
linting
2023-03-27 11:49:01 +02:00
41570d2840
update documentation
2023-03-27 11:42:17 +02:00
021fb84765
add firewall mgmt on simple-nva module
2023-03-27 09:54:01 +02:00
58bc576ddb
Add dataplex SA
2023-03-27 07:37:40 +00:00
987ea34d93
DNS policy module fixes ( #1278 )
...
* dns response policy module
* tfdoc
* Add dns policy tests
* fix copyright, var description, initial wording
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2023-03-26 18:39:07 +02:00
28da881c3f
DNS Response Policy module ( #1276 )
...
* dns response policy module
* tfdoc
2023-03-26 17:42:57 +02:00
60261a6352
add static gateway id to outputs ( #1270 )
2023-03-21 18:08:45 +01:00
3d425b7d9c
Ignore changes to metadata.0.annotations in Cloud Run module
...
Fixes #1173
2023-03-21 11:54:07 +01:00
3b20d617dc
Improvements to NCC-RA spoke module. ( #1267 )
2023-03-21 07:07:44 +00:00
6e49e94749
simple-nva: add ability to parse BGP configs as strings. ( #1268 )
...
* Add ability to parse BGP configs as strings.
* Fix var name
* Refresh tfdoc
---------
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-03-21 07:41:12 +01:00
4b15fe4744
Add backend service names to outputs for net-glb and net-ilb-l7 (some things like ( #1258 )
...
autoneg require names).
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-03-17 10:40:11 +00:00
8a8b7ea35f
Add support for `iam_additive` and simplify factory interface in net VPC module ( #1259 )
...
* initial implementation, no tests
* change interface, align tests
* add examples ToC
* fix variable type, test module-level variable
2023-03-17 10:12:34 +00:00
50adf1da2a
change target_vpcs variable to support dynamic values ( #1255 )
2023-03-17 07:14:09 +00:00
21fa6d1f13
Fixes related to boot_disk in compute-vm module
2023-03-16 15:58:39 +01:00
79a6e9b191
pin local provider ( #1256 )
2023-03-16 10:59:06 +00:00
c82f142d2d
Delay creation of SVPC host bindings until APIs and JIT SAs are done
2023-03-14 14:51:17 +01:00
112d9a8d9c
Allow using existing boot disk in compute-vm module ( #1241 )
...
* allow using existing boot disk in compute-vm module
* allow setting initialize params to null
* tests
* fast
* blueprints
2023-03-12 10:53:59 +01:00
6ba0f8b0ba
allow overriding name in net-vpc subnet factory ( #1239 )
2023-03-11 09:30:42 +01:00
510db1b36f
Fix policy_based_routing.sh script on simple-nva module ( #1226 )
2023-03-10 18:36:07 +01:00
1c3645f3a3
Fix dataproc modules variables
2023-03-10 16:54:09 +01:00
7595508bd4
fix variable
2023-03-10 12:03:54 +01:00
3ffda9c8c9
terraform fmt
2023-03-10 10:45:39 +01:00
f688b9a47d
realign logic to boolean variable
2023-03-10 10:43:37 +01:00
7781b72690
replace track_per_session with tracking_mode and fixed connection tracking conf for backends
2023-03-10 10:03:45 +01:00
45c12e233b
Network firewall policy module ( #1232 )
...
* validated, untested
* tested
* typo in README
2023-03-10 08:21:49 +00:00
d0f346f6c6
Add resources created as outputs
2023-03-09 15:35:52 +01:00
f82b5284c9
Change semantics of custom_advertise
2023-03-09 15:35:52 +01:00
7eb9fbf676
Merge branch 'master' into ncc
2023-03-09 13:10:36 +01:00
3e85175f67
Adapt README examples to the variables config
2023-03-09 13:06:02 +01:00
0cf254f91e
Update variable and output tables
2023-03-09 13:06:02 +01:00
7e6635f535
Alphabetical order and better naming
2023-03-09 13:06:02 +01:00
eef6a48876
Make ip_interfaceX not optional
...
These IP values are optional, if you don't specify a value Google will try to
find a free IP address. But this is a bad idea because setting them to 'null'
forces a replacement even without any changes to make.
2023-03-09 13:06:02 +01:00
84d3b83f81
Group router information under router_config
2023-03-09 13:06:02 +01:00
b25ee97d15
Group vpc and subnet under vpc_config
2023-03-09 13:06:02 +01:00
eliamaldini
erabusi
Ludovico Magnocavallo
Erin Horning
Sam Bentley
Mikhail Filipchuk
Miren Esnaola
Eunan Hardy
Julio Castillo
Daniel Strebel
Thinh Ha
Natalia Strelkova
Wiktor Niesiobędzki
Simone Ruffilli
lcaggio
simonebruzzechesse
LudovicEmo
Alejandro Leal
Jose Luis Bermudez
Albert Lloveras
Taneli Leppä
Luca Prete
Prabha Arya
Benoît Sauvère
Ana Fernandez del Alamo
Manuel Aller
Jay Schwerberg
Julio Diez
Toby Archer
Brent Walker
Bob Idle
Avinash Jha
bjohnrl
bjohnrl
jamesmao-xyz
ajlopezn
Antonio Lopez
Fawzi
Mikhail Filipchuk
Valerio Ponza
bruzzechesse