cloud-foundation-fabric/modules
luigi-bitonti 0ef7ee4670
Added beta apis feature (#1999)
2024-01-23 11:09:22 +00:00
..
__docs Add IAM variables template to ADR 2023-09-17 10:50:03 +02:00
__experimental compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
api-gateway compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
apigee compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
artifact-registry compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
bigquery-dataset compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
bigtable-instance compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
billing-account compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
binauthz compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
cloud-config-container compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
cloud-function-v1 compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
cloud-function-v2 Specify `docker_repository` field for google_cloudfunctions2_function (#1987) 2024-01-20 09:40:26 +00:00
cloud-identity-group compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
cloud-run compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
cloud-run-v2 compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
cloudsql-instance compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
compute-mig compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
compute-vm compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
container-registry compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
data-catalog-policy-tag compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
datafusion compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
dataplex compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
dataplex-datascan compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
dataproc compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
dns Fix typo in example 2024-01-18 19:46:53 +01:00
dns-response-policy dns reponse policy e2e changes (#1994) 2024-01-20 19:47:02 +01:00
endpoints compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
folder compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
gcs compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
gcve-private-cloud compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
gke-cluster-autopilot Added beta apis feature (#1999) 2024-01-23 11:09:22 +00:00
gke-cluster-standard Added beta apis feature (#1999) 2024-01-23 11:09:22 +00:00
gke-hub Add example to FAST GKE stage, streamline GKE Hub module variables and usage (#1977) 2024-01-20 10:06:38 +00:00
gke-nodepool compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
iam-service-account compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
kms compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
logging-bucket compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
ncc-spoke-ra compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-address compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-cloudnat compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-firewall-policy fix factory type for firewall rule ports (#1996) 2024-01-21 12:38:24 +01:00
net-ipsec-over-interconnect compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-lb-app-ext feat: enable mtls on external application application load balancer (#1979) 2024-01-17 06:24:54 +00:00
net-lb-app-ext-regional compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-lb-app-int compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-lb-app-int-cross-region compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-lb-ext compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-lb-int compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-lb-proxy-int compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-swp compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vlan-attachment compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vpc compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vpc-firewall compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vpc-peering compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vpn-dynamic compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vpn-ha compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
net-vpn-static compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
organization compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
project compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
projects-data-source compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
pubsub compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
secret-manager compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
service-directory compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
source-repository compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
vpc-sc compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
workstation-cluster compute-vm: add resource manager tags support for instance templates (#1982) 2024-01-16 17:40:15 +00:00
README.md Added Cross-region internal application load balancer module 2024-01-16 17:54:50 +01:00

README.md

Terraform modules suite for Google Cloud

The modules collected in this folder are designed as a suite: they are meant to be composed together, and are designed to be forked and modified where use of third party code and sources is not allowed.

Modules try to stay close to the low level provider resources they encapsulate, and they all share a similar interface that combines management of one resource or set or resources, and the corresponding IAM bindings.

Authoritative IAM bindings are primarily used (e.g. google_storage_bucket_iam_binding for GCS buckets) so that each module is authoritative for specific roles on the resources it manages, and can neutralize or reconcile IAM changes made elsewhere.

Specific modules also offer support for non-authoritative bindings (e.g. google_storage_bucket_iam_member for service accounts), to allow granular permission management on resources that they don't manage directly.

These modules are not necessarily backward compatible. Changes breaking compatibility in modules are marked by major releases (but not all major releases contain breaking changes). Please be mindful when upgrading Fabric modules in existing Terraform setups, and always try to use versioned references in module sources so you can easily revert back to a previous version. Since the introduction of the moved block in Terraform we try to use it whenever possible to make updates non-breaking, but that does not cover all changes we might need to make.

These modules are used in the examples included in this repository. If you are using any of those examples in your own Terraform configuration, make sure that you are using the same version for all the modules, and switch module sources to GitHub format using references. The recommended approach to working with Fabric modules is the following:

  • Fork the repository and own the fork. This will allow you to:

    • Evolve the existing modules.
    • Create your own modules.
    • Sync from the upstream repository to get all the updates.
  • Use GitHub sources with refs to reference the modules. See an example below:

    module "project" {
        source              = "github.com/GoogleCloudPlatform/cloud-foundation-fabric//modules/project?ref=v13.0.0&depth=1"
        name                = "my-project"
        billing_account     = "123456-123456-123456"
        parent              = "organizations/123456"
    }
    

Foundational modules

Networking modules

Compute/Container

Data

Development

Security

Serverless