Commit Graph

1863 Commits

Author SHA1 Message Date
Wiktor Niesiobędzki fa3817be6b E2E tests for ncc-spoke-ra 2024-07-13 13:54:34 +02:00
Wiktor Niesiobędzki c47a76a74e fix Cloud Build E2E test 2024-07-13 13:43:04 +02:00
Nathalie 454a30b037
fix cloudbuild service account email (#2421)
The correct format for the service account is documented in
https://cloud.google.com/build/docs/cloud-build-service-account
2024-07-11 15:31:04 +02:00
Aurélien Legrand 78069eeffb
Adding support for DWS for GKE nodepools (#2418)
* Adding TPU limits for GKE cluster node auto-provisioning (NAP)

* rework of the cluster autoscaling configuration

* updated README

* adding queued_provisioning (DWS) attribute

* Adding support for DWS for GKE nodepools

* typo

* adding test for DWS

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-07-10 15:18:12 +02:00
Jay Bana 2a2c4a96ce
Add support for sqlAssertion AutoDQ rule type in dataplex-datascan (#2416)
* Add sql_assertion rule type to Dataplex AutoDQ data_quality_spec

* Fix broken link to API reference public doc for DQ spec

* Update README.md after linting

* Add example tests for dataplex-datascan

* Bump provider versions

* Bump provider versions everywhere
2024-07-09 21:29:45 +00:00
Aurélien Legrand 59657415be
Adding TPU limits for GKE cluster node auto-provisioning (NAP) (#2406)
* Adding TPU limits for GKE cluster node auto-provisioning (NAP)

* rework of the cluster autoscaling configuration

* updated README

* fixing README

* Update modules/gke-cluster-standard/README.md

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>

* fixing indentation

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-07-09 09:26:30 +00:00
apichick c81bc84e3a
Added certificate_manager_certificates to app load balancers (#2415)
* Added forward_proxy_uri to apigee environments in apigee-x-foundations blueprint

* Added certificate_manager_certificates to app load balancers
2024-07-09 07:36:06 +02:00
Wiktor Niesiobędzki 01904c3397 Fix CFv2 tests 2024-07-08 16:14:21 +02:00
Wiktor Niesiobędzki 1d76bfc3ff Add E2E tests for Cloud Functions and fix perma-diff 2024-07-08 16:14:21 +02:00
Luca Prete 1bd3380a3f
Adds support for external SPGs to net-firewall-policy (#2409)
- Added support to reference external SPGs in factories in net-firewall-policy
- Added missing tls_inspect argument to hierarchical and global network firewall policies
- Fixed regional firewall policy rules, removing security profile groups and ngfw actions (given they're not supported)
- Updated copyright
2024-07-06 10:33:09 +00:00
Julio Castillo 45fd48db42
Allow project factory projects to override name (#2407) 2024-07-04 20:14:04 +02:00
Aurélien Legrand 1f07cb72f2
Adding placement_policy for GKE nodepools (ex: GPU compact placement or TPU topology) (#2405)
* Adding placement policy to gke-nodepool module

* Adding placement policy for GKE nodepool

* updated README

* variables for placement_policy

* formatting

* Updated README

* fixing typo

* removing useless trys

---------

Co-authored-by: Aurélien Legrand <legranda@google.com>
2024-07-03 10:21:30 +00:00
Wiktor Niesiobędzki e58c1b8892 Add info about roles for connectors service agent 2024-06-30 20:17:50 +02:00
Julio Castillo 4e8adc9c43
Update `modules/artifact-registry` with newly-released features. (#2396)
Fixes #2377
2024-06-28 19:52:25 +02:00
Ludovico Magnocavallo 198fa01159
Add support for SSL policy to net-lb-app-int module (#2393) 2024-06-28 09:03:10 +02:00
apichick 00d4673093
Added certificate-manager module (#2387) 2024-06-27 13:05:35 +00:00
Aleksandr Averbukh 85c1b7c156
Add AssuredWorkload support to the folder module (#2390)
* Feat: Add AssuredWorkload support to the folder module

* Formatting

* Use square brackets to access list items

* Docs gen after adding an example to the readme

* Reorder variables

* Formatting

* Reordering outputs, formatting

* Remove try where not needed. Add IAM into the AW example and tests

* Fix tests

* Enable Assured Workloads in E2E tests

* Add compliance_regime and partner enum fields validation

* Rewording validation message for compliance_regime, partner fields

* Sort the list of allowed values alphabetically

* Make the organization dependant on testing environment

* fix tests

* Disable E2E for Assured Workflow example.

This example requires Access Transparency enabled on org level, even
chosing different regime, we need to have `parent` and `organization`
within the same hierarchy, which is not currently the case and requires
more rework of the test framework.

---------

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-06-27 14:28:17 +02:00
Julio Castillo 07e519a8b7
Allow Cloud NAT to only use secondary ranges (#2384)
* Allow Cloud NAT to only use secondary ranges

* Fix secondary_ranges validation

* Fix linter
2024-06-27 08:05:45 +00:00
apichick 73d43b00db
Added missing links to firestore module is READMEs. (#2388)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-27 06:54:02 +00:00
Alejandro Leal 0363e2cb80 Several wording and typos updates
Several wording and typos updates
2024-06-27 07:36:19 +02:00
apichick 00080cd840
Added firestore module (#2374) 2024-06-26 14:18:42 +02:00
luigi-bitonti 750cff01cd
Added private_endpoint_subnetwork parameters to GKE module (#2380) 2024-06-25 16:16:00 +02:00
Diogo Teixeira 08ff3643da
Add forward_proxy_uri support (#2370)
Co-authored-by: apichick <mirene@google.com>
2024-06-25 07:50:19 +00:00
apichick 6c54ab69db
Removed advertised_groups ALL_VPC_SUBNETS, ALL_VPC_SUBNETS as they are no longer supported (#2376)
Removed advertised_groups ALL_VPC_SUBNETS, ALL_VPC_SUBNETS as they are no longer supported
2024-06-24 07:15:19 +00:00
apichick 6358ba34e0
Minor fixes in workstations IAM (#2375) 2024-06-24 08:59:29 +02:00
apichick 73e286c0ab
Added spanner-instance module (#2372) 2024-06-23 17:25:22 +00:00
Dean Sorie 270f61a75a
Added expire_time option to the secret-manager module (#2373)
* Added expire_time option to the secret module

* Ran tfdoc to update the readme file

* Fixed a failed test, moved the expire_time variable to the top and ran tfdoc again
2024-06-23 17:20:10 +02:00
Ludovico Magnocavallo 0bb75f3ae1
support build service account in cloud function v2 module (#2371) 2024-06-21 20:19:29 +02:00
Wiktor Niesiobędzki bf3f2b9367
Add example, tests and fix for Google APIs PSC endpoint (#2369)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-20 12:44:43 +02:00
Sudhir e84d479741
Fix for plan not in sync when creating billing budgets in project factory #2365 (#2368) 2024-06-20 07:23:20 +02:00
luigi-bitonti 9b095a540e
Added additional range field to GKE standand and autopilot (#2366)
* Added additional range field to GKE standand and autopilot

* Bug fix

* Bug fix
2024-06-18 12:17:08 +00:00
Ludovico Magnocavallo f68e423c48
Relax dataproc master config type (#2364) 2024-06-14 16:19:57 +02:00
Wiktor Niesiobędzki 1f40f2e573 Add support for different endpoint types for Cloud NAT 2024-06-14 15:37:58 +02:00
Ludovico Magnocavallo d1f7210fa8
strip bucket name from bundle URI (#2362) 2024-06-14 12:31:01 +00:00
Ludovico Magnocavallo fa00deb747
Support GCS objects in cloud function modules bundles (#2361)
* cloud function v2

* cloud function v1

* blueprints
2024-06-14 11:44:01 +00:00
Ludovico Magnocavallo ea5e6dedc9
validate bundle, use pathexpand in cloud function modules (#2360) 2024-06-14 09:23:49 +02:00
Ludovico Magnocavallo cb5b36906c
don't compute checksum in cloud function module for static bundles (#2359) 2024-06-13 16:08:12 +00:00
Ludovico Magnocavallo 97d77d263b
support pre-made bundle archives in cloud function modules (#2358) 2024-06-13 14:58:23 +02:00
mdaddetta bbf81752a4
Add use_table_schema parameter for PubSub subscription to BigQuery (#2357) 2024-06-12 22:36:19 +00:00
Wiktor Niesiobędzki 4d51d33921 Use var.vpc_config.subnetwork in NEGs when var.neg_config.*.subnetwork is not provided 2024-06-10 16:57:12 +02:00
Dean Sorie b9f20d47c8
Added missing validation values for backend services (#2351) 2024-06-09 07:15:22 +00:00
Ludovico Magnocavallo 41e583ffc9
add network tags outputs and examples to project module (#2350) 2024-06-09 07:52:15 +02:00
simonebruzzechesse 1969b02ed8
Alloydb add support for psc (#2341)
* alloydb add support for psc
* add tag binding support

Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2024-06-05 13:39:03 +02:00
Ludovico Magnocavallo 795cb4a48d
enable stateful ha in gke cluster standard module (#2339) 2024-06-04 09:51:19 +02:00
Wiktor Niesiobędzki ea564df648
Add documentation for load balancer changes (#2336)
---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-06-03 06:47:48 +00:00
Ludovico Magnocavallo f9a433825f
Add perimeter ids in vpc-sc module outputs, fix vpc-sc in project factory module (#2335)
* add perimeter ids in vpc-sc module outputs, fix vpc-sc in project factory module

* tfdoc
2024-05-31 20:07:59 +02:00
simonebruzzechesse 941a35ab69
Fixed e2e tests for alloydb module (#2321)
* fixed e2e tests for alloydb module
2024-05-30 11:41:15 +02:00
Wiktor Niesiobędzki d1ec3b0499
Fixes for Alloydb E2E tests (#2312)
* Fixes for Alloydb E2E tests

* too long project name in Sipmle example resulted in:
```
Error: "***-alloydb-prj" name must be 4 to 30 characters with lowercase and uppercase letters, numbers, hyphen, single-quote, double-quote, space, and exclamation point.
```

* using self_link resulted in:
```
Error: Error creating Cluster: googleapi: Error 499: malformed network path: "https://www.googleapis.com/compute/v1/projects/***/global/networks/e2e-test"
```

* Cross region replication stil fails with:
```
│ Error: Error creating cluster. Can not create secondary cluster without secondary_config field.
│
│   with module.alloydb.google_alloydb_cluster.secondary[0],
│   on /usr/local/google/home/wiktorn/git/cloud-foundation-fabric/modules/alloydb/main.tf line 199, in resource "google_alloydb_cluster" "secondary":
│  199: resource "google_alloydb_cluster" "secondary" {
```

* Fix tests

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-05-29 14:46:15 +00:00
fulyagonultas 0d60e39aee
resource_labels added to the node_config nodepool (#2317)
* resource_labels added to the node_config nodepool

* labels added to the gke standard module

* labels set to mandatory

* Updating variables names

* Fix nodepool label variables defaults

* Fix tests

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2024-05-29 14:56:15 +02:00
dibaskar-google 3d668170e5
Secret manager e2etests (#2280)
secret-manager e2e tests
2024-05-28 09:28:08 +02:00