cloud-foundation-fabric/modules
Ludovico Magnocavallo 537237edd6
Fix health check autocreation and id output in passthrough LB modules (#1928)
* fix health check autocreation and id output

* fix health check exclusion
2023-12-13 23:39:55 +00:00
..
__docs Add IAM variables template to ADR 2023-09-17 10:50:03 +02:00
__experimental Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
api-gateway Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
apigee Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
artifact-registry Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
bigquery-dataset Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
bigtable-instance Removed deprecated variable and added labels (#1923) 2023-12-12 18:32:48 +00:00
billing-account Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
binauthz Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
cloud-config-container can_ip_forward in simple-nva examples (#1922) 2023-12-12 13:09:58 +00:00
cloud-function-v1 Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
cloud-function-v2 Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
cloud-identity-group Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
cloud-run Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
cloudsql-instance Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
compute-mig Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
compute-vm Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
container-registry Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
data-catalog-policy-tag Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
datafusion Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
dataplex Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
dataplex-datascan Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
dataproc Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
dns Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
dns-response-policy Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
endpoints Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
folder Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
gcs Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
gcve-private-cloud Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
gke-cluster-autopilot Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
gke-cluster-standard gke-cluster-standard : Support upgrade_settings for node auto provisioner (#1905) 2023-12-12 19:17:51 +00:00
gke-hub Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
gke-nodepool Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
iam-service-account Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
kms Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
logging-bucket Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
ncc-spoke-ra Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-address Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-cloudnat Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-firewall-policy Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-ipsec-over-interconnect Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-lb-app-ext Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-lb-app-int Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-lb-ext Fix health check autocreation and id output in passthrough LB modules (#1928) 2023-12-13 23:39:55 +00:00
net-lb-int Fix health check autocreation and id output in passthrough LB modules (#1928) 2023-12-13 23:39:55 +00:00
net-lb-proxy-int Fix health check autocreation and id output in passthrough LB modules (#1928) 2023-12-13 23:39:55 +00:00
net-swp Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-vlan-attachment Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-vpc Add support for policy based routes to net-vpc (#1926) 2023-12-13 15:19:40 +00:00
net-vpc-firewall Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-vpc-peering Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-vpn-dynamic Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-vpn-ha Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
net-vpn-static Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
organization Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
project Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
projects-data-source Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
pubsub Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
secret-manager Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
service-directory Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
source-repository Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
vpc-sc Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
workstation-cluster Sync tf version to version used by tests 2023-12-12 09:43:09 +01:00
README.md Added workstation-cluster module 2023-11-30 07:02:28 +01:00

README.md

Terraform modules suite for Google Cloud

The modules collected in this folder are designed as a suite: they are meant to be composed together, and are designed to be forked and modified where use of third party code and sources is not allowed.

Modules try to stay close to the low level provider resources they encapsulate, and they all share a similar interface that combines management of one resource or set or resources, and the corresponding IAM bindings.

Authoritative IAM bindings are primarily used (e.g. google_storage_bucket_iam_binding for GCS buckets) so that each module is authoritative for specific roles on the resources it manages, and can neutralize or reconcile IAM changes made elsewhere.

Specific modules also offer support for non-authoritative bindings (e.g. google_storage_bucket_iam_member for service accounts), to allow granular permission management on resources that they don't manage directly.

These modules are not necessarily backward compatible. Changes breaking compatibility in modules are marked by major releases (but not all major releases contain breaking changes). Please be mindful when upgrading Fabric modules in existing Terraform setups, and always try to use versioned references in module sources so you can easily revert back to a previous version. Since the introduction of the moved block in Terraform we try to use it whenever possible to make updates non-breaking, but that does not cover all changes we might need to make.

These modules are used in the examples included in this repository. If you are using any of those examples in your own Terraform configuration, make sure that you are using the same version for all the modules, and switch module sources to GitHub format using references. The recommended approach to working with Fabric modules is the following:

  • Fork the repository and own the fork. This will allow you to:

    • Evolve the existing modules.
    • Create your own modules.
    • Sync from the upstream repository to get all the updates.
  • Use GitHub sources with refs to reference the modules. See an example below:

    module "project" {
        source              = "github.com/GoogleCloudPlatform/cloud-foundation-fabric//modules/project?ref=v13.0.0&depth=1"
        name                = "my-project"
        billing_account     = "123456-123456-123456"
        parent              = "organizations/123456"
    }
    

Foundational modules

Networking modules

Compute/Container

Data

Development

Security

Serverless