Commit Graph

1848 Commits

Author SHA1 Message Date
Ludovico Magnocavallo e4941c27f2
Implement the full IAM interface for tags (#2269)
* IAM authoritative bindings in org module

* remove extra newline

* organization module

* project module

* tfdoc
2024-05-13 20:18:51 +02:00
Ludovico Magnocavallo 604920dec9
add logging settings to folder module (#2268) 2024-05-13 09:24:17 +02:00
Wiktor Niesiobędzki 6a3c7fe444
CloudSQL PSC Endpoints support (#2242)
* Add PSC endpoints consumers to net-address
* Cloud SQL E2E tests
2024-05-12 12:00:39 +02:00
Wiktor Niesiobędzki 35a17a46ba Fix failing E2E tests 2024-05-11 17:29:35 +02:00
Jan Van Bruggen 5b3ed10cda
Fix bug from output typo in new project-factory module (#2264)
`local.folders` is just a map of var-based keys to string manipulations on those keys, while `local.hierarchy` is the seemingly-intended map of var-based keys to generated IDs/numbers.

see
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L32
vs.
https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/blob/master/modules/project-factory/factory-folders.tf#L39

Thank you for recently developing this convenient module!
2024-05-10 22:19:35 +00:00
Julio Castillo d838c4ac47
Make Simple NVA route IAP traffic through NIC 0 (#2262) 2024-05-09 18:29:25 +02:00
Julio Castillo c58850c096
Add Hybrid NAT support (#2261)
* Updates to support hybid NAT

* Fix readme

* Fix variable order
2024-05-09 13:24:41 +00:00
Ludovico Magnocavallo c9503d5ac5
Remove data source from folder module (#2260)
* remove data source from folder module

* fix fast tfdoc

* fix locals type error

* fix folder test

* fix fast test
2024-05-09 13:09:54 +00:00
simonebruzzechesse dccf5735c5
fis issues with private workstation-cluster module and persistent_directories (#2247)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-05-02 06:09:10 +00:00
Ludovico Magnocavallo fdcd309729
add support for labels to GKE backup plans (#2252) 2024-05-01 20:20:21 +02:00
Ludovico Magnocavallo 27a055a9cb
fix factory ingress policies (#2251) 2024-05-01 18:50:30 +02:00
jnahelou e1226676fd
Added missing identity when connectors API is enabled (#2248) 2024-04-30 17:21:35 +00:00
apichick be966c4f32
Fixed issue with service networking DNS peering (#2246)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-04-28 20:18:02 +00:00
apichick ab174274de
Added new attributes Apigee organization and bumped up providers version (#2243) 2024-04-28 17:31:42 +02:00
apichick a95e681f05
Removed BFD settings from net-vpn-ha module as it is not supported (#2244)
* Removed bfd settings from net-vpn-ha as it is not supported

* Removed bfd settings from net-vpn-ha as it is not supported
2024-04-28 12:11:07 +02:00
Wiktor Niesiobędzki d831d32864 Use default labels on pubsub subscription when no override is provided 2024-04-27 09:22:41 +02:00
Deepak Kumar 64ac89d59c
fix: allow disabling node autoprovisioning (#2238)
- This fix allows a GKE Standard cluster to be configured with no auto-provisioned node pool,
  but allow setting autocluster profile for user-provisioned node pools like created via `gke-nodepool` module.

Co-authored-by: Julio Castillo <jccb@google.com>
2024-04-26 07:17:48 +00:00
luigi-bitonti d901992607
Added build env vars in cloud function v1 (#2234) 2024-04-23 19:20:38 +02:00
Ludovico Magnocavallo 309792c559
Refactor vpc-sc support in project module, add support for dry run (#2229) 2024-04-22 09:28:01 +02:00
simonebruzzechesse b6771ae7ad
fix cloud sql PSA after module upgrade (#2226)
* fix cloud sql PSA after module upgrade
add proxy subnet for ILB
* fix cloud run service accessible from public url in case the service is privately deployed
* add deletion_policy variable in psa_configs for net-vpc module
fix destroy issue with phpIPAM blueprint
2024-04-19 12:41:02 +02:00
cmalpe 1563a76011
added missing option for exclusion scope (#2224)
* added missing option for exclusion scope

* added validation and changes for gke autopilot
2024-04-18 14:12:16 +03:00
Julio Castillo 3af7e257d2
Add tflint to pipelines (#2220)
* Fix terraform_deprecated_index

https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_index.md

* Fix terraform_deprecated_interpolation

Reference: https://github.com/terraform-linters/tflint-ruleset-terraform/blob/v0.5.0/docs/rules/terraform_deprecated_interpolation.md

* Fix more indexing

* Remove unused variable

* Enable TFLint for modules

* Add tflint config file

* Fix chdir

* Lint modules

* TFLint fixes

* TFLint

* Fixes binauthz README

* Fixes DNS response policy tests. Restores MIG outputs.

* Fixes other DNS response policy tests.

* Update tests for fast 2-e

* Moar fixed tests

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-04-17 10:23:48 +02:00
Ludovico Magnocavallo 9414779cc2
Allow multiple PSA service providers in net-vpc module (#2218)
* allowing multiple PSA service providers in net-vpc module

* tfdoc

* tfdoc

* Add tfvars/yaml tests

* fix module and tests

* re-enable inventory

* merge fix

* Add multiple PSA test case

* fix cloudsql example

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-04-16 15:02:36 +00:00
Ludovico Magnocavallo 198d90c6fc
Remove data source from net-vpc module (#2216)
* remove data source from net-vpc module

* fix test inventories

* remove data source, fix fast inventories
2024-04-16 14:11:12 +03:00
Ludovico Magnocavallo fbc7e891db
Net LB App Internal Cross-Region recipe (#2214)
* reorder tfdoc methods

* add support for recipes to tfdoc

* fix repo url in tfdoc

* update module README

* validated untested recipe

* validated untested refactored recipe

* add optional proxy subnet creation, outputs, fixes

* tested

* tfdoc fix

* fix README

* exclude examples from test collector
2024-04-14 19:38:05 +03:00
Ludovico Magnocavallo 3138eb9025
add support for tags to GCS module (#2213) 2024-04-11 13:19:05 +00:00
Wiktor Niesiobędzki 825bfca66d Document how to get quota_ids 2024-04-11 11:51:19 +02:00
Wiktor Niesiobędzki a236222a93 Add project quotas factory 2024-04-11 11:51:19 +02:00
Simone Ruffilli 7833203d87
Add support for GCS soft-delete retention period (#2212)
* Add support for GCS soft-delete retention period
2024-04-11 07:31:00 +00:00
Ludovico Magnocavallo 9cace5272f
Add support for quotas to project module (#2210)
* add support for quotas to project module

* tfdoc

* better outputs

* Ensure keys in `quota_configs` are unique

* update fast tests

* Make quota E2E testable

* Remove quota project caveat

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-04-10 17:03:04 +00:00
Ludovico Magnocavallo e08ff19cd9
add support for data cache to cloud sql module (#2209) 2024-04-10 08:24:00 +02:00
Tone 2831af09fa
feat(gke-cluster-standard): Add optional `CiliumClusterWideNetworkPolicy` (#2207)
* feat(gke-cluster-standard): Add optionnal `CiliumClusterWideNetworkPolicy`

Add `CiliumClusterWideNetworkPolicy` option on cluster.

Ref:
 - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#enable_cilium_clusterwide_network_policy
 - https://cloud.google.com/kubernetes-engine/docs/how-to/configure-cilium-network-policy

* feat(gke-cluster-standard): Update Google provider to manage new feature

* feat(gke-cluster-standard): Move `cilium_clusterwide_network_policy` to `enable_features` field

* fix(scheduled-asset-inventory-export-bq): Set `dataset_id` with underscores

* fix(bigquery-dataset): Set `dataset_id` with underscores
2024-04-09 17:08:36 +02:00
Ludovico Magnocavallo b472722b05
add validation rule for DNS module health check targets (#2205) 2024-04-08 11:30:42 +00:00
bluPhy c420f17636
Updating cloud-run-v2 terraform and some typos (#2201)
* Updating cloud-run-v2 terraform and some typos

Updating modules/cloud-run-v2/main.tf to determine the tcp_socket value

Fixin typos in:
tests/fixtures.py
modules/workstation-cluster/README.md
modules/net-lb-int/README.md
modules/dataplex/README.md
modules/dataform-repository/README.md
modules/__docs/20230816-iam-refactor.md
CONTRIBUTING.md
blueprints/third-party-solutions/f5-bigip/f5-bigip-ha-active/startup-script.tpl
blueprints/third-party-solutions/f5-bigip/f5-bigip-ha-active/README.md

* Update README.md

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Ludovico Magnocavallo <ludo@qix.it>
2024-04-07 09:49:07 +00:00
Veronika Priesner 0cae2ff08c
added force_destroy to dns module (#2202)
* added force_destroy to dns module

* ran tfdoc.py modules/dns

* set default of force_destroy to null

* reran tfdoc.py after default value change
2024-04-05 09:20:51 +00:00
Elia b80132a618
FAST GCVE stage (#2191)
* GCVE stage prerequisites

* fix gcve prereq

* gcve stage first deploy

* Updated readme filex

* docs updated

* some fixes after testing

* updated readme files

* elia fix

* gcve net admin custom role

* gcve net admin custom role

* elia fix

* ven peering deploy

* elia fix

* added blueprint and stage tests

* Edits to Readme files

* typo in outputs

* clean-up

* gcve stage tests fix

* readme fix

* fix sorting

* fix copyrights and readme file

* fix test

* fix copyright

* fixed gcve feature flag cond.

* removed validation

* fixed typo

* fixed typo

* fixed gcve tests

* fixed typo

* fixed typo

* fixed sorting

* fixed sorting

---------

Co-authored-by: Konrad Schieban <kschieban@google.com>
2024-04-03 17:25:12 +02:00
Amela Spica fb4a661f54
VPC module - PSA configurable service producer (#2190)
* added configurable service provider for PSA in VPC module

* fmt

* readme update

* description fix based on PR comment

* readme regenerated
2024-04-02 20:23:25 +02:00
Wiktor Niesiobędzki da4e5acd46 Fix failin e2e tests for Cloud Run CMEK
* create a fixture adding IAM grants to Cloud Run service agent
* add to README.md information about required grant

Decided to add ths as a fixture though it may not be reused so:
* grant is not polluting the example
* grant is fairly easy discoverable from README.md
* setup_module is not burdened with additional grant which is used only
  for this example
2024-03-28 15:02:56 +01:00
Ludovico Magnocavallo f487b27aa9
Fix default nodepool defaults in gke standard module (#2182)
* fix default nodepool defaults in gke standard module

* fix inventory
2024-03-28 11:22:14 +01:00
Saleh Elnagar 136d74db4e
add cmek option for cloud_run_v2 (#2177)
add cmek option for cloud_run_v2 service and job
2024-03-27 09:15:02 +00:00
Tone 0f44e581d5
feat(gke-cluster-standard): Set optionnal `default_node_pool` configuration (#2175)
* feat(gke-cluster-standard): Set optionnal `default_node_pool` configuration

* feat(gke-cluster-standard): Improve `default_node_pool` variable setup

* feat(gke-cluster-standard): Improve `default_node_pool` condition validation
2024-03-26 18:05:35 +01:00
Wiktor Niesiobędzki f2806f347b Bump provider version to 5.18, so fix non-empty plan for google_notebooks_instance 2024-03-25 19:57:14 +01:00
Ludovico Magnocavallo a590deb58b
Fix subnet configuration in cloud nat module (#2171)
* support optional secondary ranges in net-cloudnat module

* fix subnet configuration

* fix packer blueprint
2024-03-22 15:59:02 +01:00
Ludovico Magnocavallo 1ee7494a30
support optional secondary ranges in net-cloudnat module (#2170) 2024-03-22 12:10:48 +01:00
Ludovico Magnocavallo 5ac86ecae7
Support advanced_datapath_observability in gke cluster standard module (#2168)
* support advanced_datapath_observability in gke cluster standard module

* bump provider to 5.17.0
2024-03-22 08:25:43 +01:00
frits-v 5084b75592
feat(net-cloudnat): add `tcp_time_wait` to `config_timeouts` (#2166)
Closes #2165
2024-03-20 22:26:28 +01:00
andybubu 688c6cfb79
feat: add e2e test for pubsub module (#2163)
* feat: add e2e test for pubsub module
2024-03-20 17:30:30 +01:00
Ludovico Magnocavallo 7f8d2834b3
Support automation/controlling projects and resources in project factory (#2162)
* initial implementation not tested

* project factory automation project support
2024-03-19 15:50:06 +00:00
dibaskar-google 11b9319043
Projects data source e2e tests (#2154)
projects-data-source e2e tests
2024-03-15 23:58:11 +01:00
Julio Castillo 28f02688ee
Add folder factory to project-factory module (#2152)
* WIP Folder Factory

* parent keys and general fixes

* changes

* update README and example test, add support for hierarchy projects

---------

Co-authored-by: Ludo <ludomagno@google.com>
2024-03-14 15:03:42 +03:00
dibaskar-google 4a187811d5
Kms e2e tests (#2151)
kms e2e tests
2024-03-13 11:31:21 +01:00
Magido Mascate 3cd43aca62
Cloudnat E-2-E Tests (#2149)
* Create E2E tests for Cloud NAT

---------

Co-authored-by: Magido Mascate <magido@google.com>
2024-03-11 16:47:11 +01:00
Wiktor Niesiobędzki 7753b1f75a Add GCE dataproc tests to E2E 2024-03-11 11:05:33 +01:00
Wiktor Niesiobędzki 1a235cbcec E2E tests for dataproc + cleanup 2024-03-11 11:05:33 +01:00
Simone Ruffilli eb0ed0c2a3
Adds bfd and md5 auth support to google_compute_router_peer (#2142)
* Adds support for md5 auth to net-vlan-attachment
* Adds support for md5 auth to net-ipsec-over-interconnect
* Adds support for md5 auth to net-vpn-ha
* Adds support for BFD to net-vpn-ha
2024-03-10 13:06:49 +00:00
Julio Castillo 759e85d6af
Logging updates (#2139)
* Add support for logging settings to the organization module

* Enable log analytics on FAST-managed logging buckets

* Fix README

* Fix tests
2024-03-08 10:07:12 +01:00
andybubu 105a19b9de
feat: add e2e test for compute-mig module (#2132)
add e2e test for compute-mig module
2024-03-06 20:30:20 +00:00
Julio Castillo dfed7cc5bd
Rename `modules/cloudsql-instance` deletion protection variables (#2135)
* Rename Cloud SQL deletion protection variables

* Fix tests
2024-03-06 10:44:54 +00:00
Ludovico Magnocavallo e12cf83188
add links to factories doc (#2134) 2024-03-06 08:25:43 +01:00
Ludovico Magnocavallo 39139e2fa1
add support for service account IAM variables to pf (#2130) 2024-03-05 13:13:02 +01:00
Wiktor Niesiobędzki 93d9b60d54 Remove ignore_changes as terraform-provider-google#16804 is closed 2024-03-05 08:11:06 +01:00
Ludovico Magnocavallo da68d3cfc4
Add support for PSC network attachments and interfaces in modules (#2125)
* support network attachments in net-vpc module

* support network attachments in net-address module

* fix examples

* fix examples

* add support for psc interfaces to compute-vm module
2024-03-04 10:12:11 +01:00
Wiktor Niesiobędzki ef19524b0b Update docs about role automatically granted to dataform SA 2024-03-04 07:47:26 +01:00
Ludovico Magnocavallo 525684faf3
Define service attachment interface for lb modules and implement in internal LBs (#2122)
* add service attachment support to lb app int module

* allow direct referencing of self managed ig in ilb module

* add service attachment support to net-ilb-int

* add service attachments example to net-lb-int

* fix resource name in net-lb-ext

* rename fwd rules resource in test inventories

* add toc to net-lb-int
2024-03-02 18:36:29 +00:00
marcjwo d10aee4c35
enabling dataform service agent upon activating the API (#2121) 2024-02-29 16:27:32 +00:00
Mohamed Ikbal Belbahri ae6ee03de2
Add https security to cloud-functions-v1 module (#2118)
* Add https security level to cf v1 module
* Update tfdoc.py raw strings for slug var to avoid [SyntaxWarning: invalid escape sequence]
2024-02-28 21:20:56 +01:00
Ludovico Magnocavallo dbabfb9ae0
Add support for billing budgets to project factory (#2112)
* align factory variable name in project factory module

* tested

* align fast stage
2024-02-27 18:13:49 +00:00
Ludovico Magnocavallo d667104b85
fix pathexpand in firewall policy module (#2111) 2024-02-26 16:52:41 +01:00
Ludovico Magnocavallo 6941313c7d
Factories refactor (#1843)
* factories refactor doc

* Adds file schema and filesystem organization

* Update 20231106-factories.md

* move factories out of blueprints and create new factories  README

* align factory in billing-account module

* align factory in dataplex-datascan module

* align factory in billing-account module

* align factory in net-firewall-policy module

* align factory in dns-response-policy module

* align factory in net-vpc-firewall module

* align factory in net-vpc module

* align factory variable names in FAST

* remove decentralized firewall blueprint

* bump terraform version

* bump module versions

* update top-level READMEs

* move project factory to modules

* fix variable names and tests

* tfdoc

* remove changelog link

* add project factory to top-level README

* fix cludrun eventarc diff

* fix README

* fix cludrun eventarc diff

---------

Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-02-26 10:16:52 +00:00
Amela Spica 8e86f0e108
Time zone support for CloudSQL SQL Server (#2107)
* time zone for SQL Server

* removed nl

* fix line
2024-02-25 20:49:13 +01:00
Wiktor Niesiobędzki 9a95ac10ed Once again fix e2e tests 2024-02-23 19:21:39 +01:00
Wiktor Niesiobędzki 8fd8ee0541 Fix too long project names on e2e tests 2024-02-23 11:41:58 +01:00
lcaggio 1c26c8f8a3
Module Data Catalog Tag - Add support for types (#2100)
* Add support for types

* implement feedback

* Remove display name field.
2024-02-22 11:51:54 +01:00
Saleh Elnagar 3450cd72d8
hotfix/dataproc-variables: fix type of kubernetes_software_config.component_version and properties (#2104)
* hotfix/dataproc-variables: fix type of kubernetes_software_config.component_version and properties

* add example of provisioning dataproc cluster on GKE

* Update README.md

* Update main.tf

* Update main.tf

* Update README

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-02-22 07:23:38 +00:00
tamartayar ca9cd16c8e
add session affinity values to variables-backend-service.tf (#2090)
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-02-21 10:04:09 +01:00
Julio Castillo 5197d5ca8d
Allow projects as destinations for log sinks (#2102)
* Add project log sink destination to project module

* Add project log sink destination to folder module

* Add project log sink destination to organization module

* Fix typos

* Add project log sink destination to billing-account module

* Make filter field optional

* Update READMEs

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-02-21 08:41:13 +01:00
Ludovico Magnocavallo 621719abc6
fix cors policy type in lb app ext modules (#2098) 2024-02-20 08:17:25 +01:00
Julio Castillo 38e6517fb2
Fix #2095 for regional load balancers (#2097) 2024-02-19 21:33:24 +00:00
Julio Castillo d4e12e1751
Do not convert route rules to set (#2096) 2024-02-19 22:14:02 +01:00
Thinh Ha 81ec6e6bc9
update README to add analytics hub module (#2094) 2024-02-19 16:07:57 +00:00
Thinh Ha 82f11e7ca5
add analytics hub module (#2087) 2024-02-19 15:55:00 +00:00
Ludovico Magnocavallo a45741d5d0
accept email in service account module name (#2091) 2024-02-19 12:43:04 +00:00
Wiktor Niesiobędzki bee3072568
Add support for Cloud Run v2 jobs (#1954)
Add support for Cloud Run v2 jobs

* create a separate file for service creation (service.tf) and job
  (job.tf) - for easy comparison
* add E2E tests where possibile
* remove default value for input variable `region`
* fix subnet range VPC Access Connector example
* add creation of service account for audit logs call (trigger requires
  service account)
* use provided trigger service account email in
  `local.trigger_sa_email`, so explicitly provided SA is passed to
  trigger
* set default value for vpc_connector_create.throughput.max, to match
  what is set by GCP API, as provider uses wrong default of 300 which
  results in perma-diff
* create inventory fiels for all examples

Global changes
* (tests) add input variable `project_number`, to allow assigning IAM permissions to Service Accounts in fixtures
* (tests) fix not outputting the path, when object is not found in inventory
* (tests) fix `create_e2e_sandbox.sh` - now it properly finds root of the repo

Secret Manager
* added `version_versions` output, to allow specifying versions in other modules. `versions` is sensitive and it makes it unsuitable for `for_each` values

New test fixtures
* `pubsub.tf` - creating one topic
* `secret-credential.tf` - creating Secret Manager `credential` secret
* `shared-vpc.tf` - creating two projects (host and service), and vpc in host project
* `vpc-connector.tf` - creating VPC Access Connector instance
2024-02-18 14:57:34 +01:00
lcaggio 39b713385d
Fix data catalog tag module 2024-02-17 09:56:17 +00:00
Ludovico Magnocavallo 91615e0140
VPC-SC module factories (#2081)
* factory untested

* factory example test
2024-02-17 08:02:16 +01:00
lcaggio aa9b1479b7
Data catalog Tag module (#2060)
* First commit

* Update README

* Add todo

* Fix required_version
2024-02-13 17:24:17 +01:00
Wiktor Niesiobędzki 72183be254 Use less conflicting IP 2024-02-13 07:40:31 +01:00
Ludovico Magnocavallo 71a64487d5
Extend FAST to support different principal types (#2064)
* add doc draft

* typos

* typo

* typo

* typos

* rewording

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* move iam variables to a separate file

* move billing-account module to iam_principals

* move data-catalog-policy-tag module to iam_principals

* move dataplex-datascan module to iam_principals

* move dataproc module to iam_principals

* move folder module to iam_principals

* copyright

* move organization module to iam_principals

* move project module to iam_principals

* move source-repository module to iam_principals

* update blueprints for iam_principals interface

* FAST bootstrap

* module READMEs fixes

* FAST bootstrap

* FAST networking stages

* FAST security stage

* FAST gke stage

* FAST multitenant bootstrap stage

* FAST multitenant resman stage

* tfdoc

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* fix module test

* Update 0-domainless-iam.md

* Update 0-domainless-iam.md

* Rename iam_principals to iam_by_principals

* Update IAM template to include iam_by_principals

* Update Resman README

* Fix ADR link format

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-02-12 14:35:30 +01:00
lcaggio 50c7d3c0e9
Add Tags in project output. (#2062) 2024-02-09 10:42:18 +01:00
Wiktor Niesiobędzki 2c9eb5795b Bum terraform to version 1.7.0 2024-02-07 17:25:11 +01:00
luigi-bitonti cb9a9ab373
Added destroy_scheduled_duration variable (#2053)
* Added destroy_scheduled_duration variable

* Fix doc

* Removed default value
2024-02-07 15:47:49 +00:00
Deepak Kumar 27e503a3ac
fix: auto_provisioning_defaults is not really optional (#2051)
Due to the disk_type validation for auto provision node pool,
this module always forced to create a GKE standard cluster
with a auto provisioned node pool. This is not desirable if
you manage pools separately like using the `gke-nodepool`.
2024-02-06 07:09:13 +01:00
Harald Haas dda0250c4c
Fix dnssec_config issue on state off (#2035) 2024-02-01 06:53:32 +00:00
Ludovico Magnocavallo 01c7f806ce
Selectively enable logging in FAST and firewall policy module rules (#2032)
* use logging in firewall policy module examples

* enable logging for selected hierarchical firewall rules
2024-01-31 09:50:35 +01:00
Julio Castillo da95434308
logging for default ingress rules in FAST (#2030)
* Add default ingress deny rule with logging to FAST net stages.

Fixes #2024

* Allow firewall factory to omit rules key

* Fix tests

* Fix fast tests

* fix fast tests
2024-01-30 16:53:01 +00:00
shourya116 7b58114d65
Updated the DataQualitySpec for Dataplex Datascan (#2008)
* Updated the DataQualitySpec for Dataplex Datascan

* Fix linting

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-01-30 15:14:49 +00:00
lcaggio 37fc16ab42
Fix tests in README (#2027) 2024-01-30 11:04:47 +00:00
Ludovico Magnocavallo bf93b6fb4e
fix typo in logging sinks interface (#2015) 2024-01-28 10:27:28 +01:00
lcaggio 19dc6090fc
Add Tag Template module (#2013)
* Tag policy module

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-01-27 12:30:21 +01:00
Blake Corbitt 9c1afa6261
Issue #2011 - add support for target_resources in hierarchical policy for net-firewall-policy module. (#2012)
* Issue #2011 - Add support for target_resources in hierarchical firewall policy

* Removing errant character in factory.tf
2024-01-25 17:56:17 +00:00