b80132a618
FAST GCVE stage ( #2191 )
...
* GCVE stage prerequisites
* fix gcve prereq
* gcve stage first deploy
* Updated readme filex
* docs updated
* some fixes after testing
* updated readme files
* elia fix
* gcve net admin custom role
* gcve net admin custom role
* elia fix
* ven peering deploy
* elia fix
* added blueprint and stage tests
* Edits to Readme files
* typo in outputs
* clean-up
* gcve stage tests fix
* readme fix
* fix sorting
* fix copyrights and readme file
* fix test
* fix copyright
* fixed gcve feature flag cond.
* removed validation
* fixed typo
* fixed typo
* fixed gcve tests
* fixed typo
* fixed typo
* fixed sorting
* fixed sorting
---------
Co-authored-by: Konrad Schieban <kschieban@google.com>
2024-04-03 17:25:12 +02:00
fb4a661f54
VPC module - PSA configurable service producer ( #2190 )
...
* added configurable service provider for PSA in VPC module
* fmt
* readme update
* description fix based on PR comment
* readme regenerated
2024-04-02 20:23:25 +02:00
da4e5acd46
Fix failin e2e tests for Cloud Run CMEK
...
* create a fixture adding IAM grants to Cloud Run service agent
* add to README.md information about required grant
Decided to add ths as a fixture though it may not be reused so:
* grant is not polluting the example
* grant is fairly easy discoverable from README.md
* setup_module is not burdened with additional grant which is used only
for this example
2024-03-28 15:02:56 +01:00
f487b27aa9
Fix default nodepool defaults in gke standard module ( #2182 )
...
* fix default nodepool defaults in gke standard module
* fix inventory
2024-03-28 11:22:14 +01:00
136d74db4e
add cmek option for cloud_run_v2 ( #2177 )
...
add cmek option for cloud_run_v2 service and job
2024-03-27 09:15:02 +00:00
0f44e581d5
feat(gke-cluster-standard): Set optionnal `default_node_pool` configuration ( #2175 )
...
* feat(gke-cluster-standard): Set optionnal `default_node_pool` configuration
* feat(gke-cluster-standard): Improve `default_node_pool` variable setup
* feat(gke-cluster-standard): Improve `default_node_pool` condition validation
2024-03-26 18:05:35 +01:00
f2806f347b
Bump provider version to 5.18, so fix non-empty plan for google_notebooks_instance
2024-03-25 19:57:14 +01:00
a590deb58b
Fix subnet configuration in cloud nat module ( #2171 )
...
* support optional secondary ranges in net-cloudnat module
* fix subnet configuration
* fix packer blueprint
2024-03-22 15:59:02 +01:00
1ee7494a30
support optional secondary ranges in net-cloudnat module ( #2170 )
2024-03-22 12:10:48 +01:00
5ac86ecae7
Support advanced_datapath_observability in gke cluster standard module ( #2168 )
...
* support advanced_datapath_observability in gke cluster standard module
* bump provider to 5.17.0
2024-03-22 08:25:43 +01:00
5084b75592
feat(net-cloudnat): add `tcp_time_wait` to `config_timeouts` ( #2166 )
...
Closes #2165
2024-03-20 22:26:28 +01:00
688c6cfb79
feat: add e2e test for pubsub module ( #2163 )
...
* feat: add e2e test for pubsub module
2024-03-20 17:30:30 +01:00
7f8d2834b3
Support automation/controlling projects and resources in project factory ( #2162 )
...
* initial implementation not tested
* project factory automation project support
2024-03-19 15:50:06 +00:00
11b9319043
Projects data source e2e tests ( #2154 )
...
projects-data-source e2e tests
2024-03-15 23:58:11 +01:00
28f02688ee
Add folder factory to project-factory module ( #2152 )
...
* WIP Folder Factory
* parent keys and general fixes
* changes
* update README and example test, add support for hierarchy projects
---------
Co-authored-by: Ludo <ludomagno@google.com>
2024-03-14 15:03:42 +03:00
4a187811d5
Kms e2e tests ( #2151 )
...
kms e2e tests
2024-03-13 11:31:21 +01:00
3cd43aca62
Cloudnat E-2-E Tests ( #2149 )
...
* Create E2E tests for Cloud NAT
---------
Co-authored-by: Magido Mascate <magido@google.com>
2024-03-11 16:47:11 +01:00
7753b1f75a
Add GCE dataproc tests to E2E
2024-03-11 11:05:33 +01:00
1a235cbcec
E2E tests for dataproc + cleanup
2024-03-11 11:05:33 +01:00
eb0ed0c2a3
Adds bfd and md5 auth support to google_compute_router_peer ( #2142 )
...
* Adds support for md5 auth to net-vlan-attachment
* Adds support for md5 auth to net-ipsec-over-interconnect
* Adds support for md5 auth to net-vpn-ha
* Adds support for BFD to net-vpn-ha
2024-03-10 13:06:49 +00:00
759e85d6af
Logging updates ( #2139 )
...
* Add support for logging settings to the organization module
* Enable log analytics on FAST-managed logging buckets
* Fix README
* Fix tests
2024-03-08 10:07:12 +01:00
105a19b9de
feat: add e2e test for compute-mig module ( #2132 )
...
add e2e test for compute-mig module
2024-03-06 20:30:20 +00:00
dfed7cc5bd
Rename `modules/cloudsql-instance` deletion protection variables ( #2135 )
...
* Rename Cloud SQL deletion protection variables
* Fix tests
2024-03-06 10:44:54 +00:00
e12cf83188
add links to factories doc ( #2134 )
2024-03-06 08:25:43 +01:00
39139e2fa1
add support for service account IAM variables to pf ( #2130 )
2024-03-05 13:13:02 +01:00
93d9b60d54
Remove ignore_changes as terraform-provider-google#16804 is closed
2024-03-05 08:11:06 +01:00
da68d3cfc4
Add support for PSC network attachments and interfaces in modules ( #2125 )
...
* support network attachments in net-vpc module
* support network attachments in net-address module
* fix examples
* fix examples
* add support for psc interfaces to compute-vm module
2024-03-04 10:12:11 +01:00
ef19524b0b
Update docs about role automatically granted to dataform SA
2024-03-04 07:47:26 +01:00
525684faf3
Define service attachment interface for lb modules and implement in internal LBs ( #2122 )
...
* add service attachment support to lb app int module
* allow direct referencing of self managed ig in ilb module
* add service attachment support to net-ilb-int
* add service attachments example to net-lb-int
* fix resource name in net-lb-ext
* rename fwd rules resource in test inventories
* add toc to net-lb-int
2024-03-02 18:36:29 +00:00
d10aee4c35
enabling dataform service agent upon activating the API ( #2121 )
2024-02-29 16:27:32 +00:00
ae6ee03de2
Add https security to cloud-functions-v1 module ( #2118 )
...
* Add https security level to cf v1 module
* Update tfdoc.py raw strings for slug var to avoid [SyntaxWarning: invalid escape sequence]
2024-02-28 21:20:56 +01:00
dbabfb9ae0
Add support for billing budgets to project factory ( #2112 )
...
* align factory variable name in project factory module
* tested
* align fast stage
2024-02-27 18:13:49 +00:00
d667104b85
fix pathexpand in firewall policy module ( #2111 )
2024-02-26 16:52:41 +01:00
6941313c7d
Factories refactor ( #1843 )
...
* factories refactor doc
* Adds file schema and filesystem organization
* Update 20231106-factories.md
* move factories out of blueprints and create new factories README
* align factory in billing-account module
* align factory in dataplex-datascan module
* align factory in billing-account module
* align factory in net-firewall-policy module
* align factory in dns-response-policy module
* align factory in net-vpc-firewall module
* align factory in net-vpc module
* align factory variable names in FAST
* remove decentralized firewall blueprint
* bump terraform version
* bump module versions
* update top-level READMEs
* move project factory to modules
* fix variable names and tests
* tfdoc
* remove changelog link
* add project factory to top-level README
* fix cludrun eventarc diff
* fix README
* fix cludrun eventarc diff
---------
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2024-02-26 10:16:52 +00:00
8e86f0e108
Time zone support for CloudSQL SQL Server ( #2107 )
...
* time zone for SQL Server
* removed nl
* fix line
2024-02-25 20:49:13 +01:00
9a95ac10ed
Once again fix e2e tests
2024-02-23 19:21:39 +01:00
8fd8ee0541
Fix too long project names on e2e tests
2024-02-23 11:41:58 +01:00
1c26c8f8a3
Module Data Catalog Tag - Add support for types ( #2100 )
...
* Add support for types
* implement feedback
* Remove display name field.
2024-02-22 11:51:54 +01:00
3450cd72d8
hotfix/dataproc-variables: fix type of kubernetes_software_config.component_version and properties ( #2104 )
...
* hotfix/dataproc-variables: fix type of kubernetes_software_config.component_version and properties
* add example of provisioning dataproc cluster on GKE
* Update README.md
* Update main.tf
* Update main.tf
* Update README
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-02-22 07:23:38 +00:00
ca9cd16c8e
add session affinity values to variables-backend-service.tf ( #2090 )
...
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-02-21 10:04:09 +01:00
5197d5ca8d
Allow projects as destinations for log sinks ( #2102 )
...
* Add project log sink destination to project module
* Add project log sink destination to folder module
* Add project log sink destination to organization module
* Fix typos
* Add project log sink destination to billing-account module
* Make filter field optional
* Update READMEs
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-02-21 08:41:13 +01:00
621719abc6
fix cors policy type in lb app ext modules ( #2098 )
2024-02-20 08:17:25 +01:00
38e6517fb2
Fix #2095 for regional load balancers ( #2097 )
2024-02-19 21:33:24 +00:00
d4e12e1751
Do not convert route rules to set ( #2096 )
2024-02-19 22:14:02 +01:00
81ec6e6bc9
update README to add analytics hub module ( #2094 )
2024-02-19 16:07:57 +00:00
82f11e7ca5
add analytics hub module ( #2087 )
2024-02-19 15:55:00 +00:00
a45741d5d0
accept email in service account module name ( #2091 )
2024-02-19 12:43:04 +00:00
bee3072568
Add support for Cloud Run v2 jobs ( #1954 )
...
Add support for Cloud Run v2 jobs
* create a separate file for service creation (service.tf) and job
(job.tf) - for easy comparison
* add E2E tests where possibile
* remove default value for input variable `region`
* fix subnet range VPC Access Connector example
* add creation of service account for audit logs call (trigger requires
service account)
* use provided trigger service account email in
`local.trigger_sa_email`, so explicitly provided SA is passed to
trigger
* set default value for vpc_connector_create.throughput.max, to match
what is set by GCP API, as provider uses wrong default of 300 which
results in perma-diff
* create inventory fiels for all examples
Global changes
* (tests) add input variable `project_number`, to allow assigning IAM permissions to Service Accounts in fixtures
* (tests) fix not outputting the path, when object is not found in inventory
* (tests) fix `create_e2e_sandbox.sh` - now it properly finds root of the repo
Secret Manager
* added `version_versions` output, to allow specifying versions in other modules. `versions` is sensitive and it makes it unsuitable for `for_each` values
New test fixtures
* `pubsub.tf` - creating one topic
* `secret-credential.tf` - creating Secret Manager `credential` secret
* `shared-vpc.tf` - creating two projects (host and service), and vpc in host project
* `vpc-connector.tf` - creating VPC Access Connector instance
2024-02-18 14:57:34 +01:00
39b713385d
Fix data catalog tag module
2024-02-17 09:56:17 +00:00
91615e0140
VPC-SC module factories ( #2081 )
...
* factory untested
* factory example test
2024-02-17 08:02:16 +01:00
aa9b1479b7
Data catalog Tag module ( #2060 )
...
* First commit
* Update README
* Add todo
* Fix required_version
2024-02-13 17:24:17 +01:00
72183be254
Use less conflicting IP
2024-02-13 07:40:31 +01:00
71a64487d5
Extend FAST to support different principal types ( #2064 )
...
* add doc draft
* typos
* typo
* typo
* typos
* rewording
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* move iam variables to a separate file
* move billing-account module to iam_principals
* move data-catalog-policy-tag module to iam_principals
* move dataplex-datascan module to iam_principals
* move dataproc module to iam_principals
* move folder module to iam_principals
* copyright
* move organization module to iam_principals
* move project module to iam_principals
* move source-repository module to iam_principals
* update blueprints for iam_principals interface
* FAST bootstrap
* module READMEs fixes
* FAST bootstrap
* FAST networking stages
* FAST security stage
* FAST gke stage
* FAST multitenant bootstrap stage
* FAST multitenant resman stage
* tfdoc
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* fix module test
* Update 0-domainless-iam.md
* Update 0-domainless-iam.md
* Rename iam_principals to iam_by_principals
* Update IAM template to include iam_by_principals
* Update Resman README
* Fix ADR link format
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-02-12 14:35:30 +01:00
50c7d3c0e9
Add Tags in project output. ( #2062 )
2024-02-09 10:42:18 +01:00
2c9eb5795b
Bum terraform to version 1.7.0
2024-02-07 17:25:11 +01:00
cb9a9ab373
Added destroy_scheduled_duration variable ( #2053 )
...
* Added destroy_scheduled_duration variable
* Fix doc
* Removed default value
2024-02-07 15:47:49 +00:00
27e503a3ac
fix: auto_provisioning_defaults is not really optional ( #2051 )
...
Due to the disk_type validation for auto provision node pool,
this module always forced to create a GKE standard cluster
with a auto provisioned node pool. This is not desirable if
you manage pools separately like using the `gke-nodepool`.
2024-02-06 07:09:13 +01:00
dda0250c4c
Fix dnssec_config issue on state off ( #2035 )
2024-02-01 06:53:32 +00:00
01c7f806ce
Selectively enable logging in FAST and firewall policy module rules ( #2032 )
...
* use logging in firewall policy module examples
* enable logging for selected hierarchical firewall rules
2024-01-31 09:50:35 +01:00
da95434308
logging for default ingress rules in FAST ( #2030 )
...
* Add default ingress deny rule with logging to FAST net stages.
Fixes #2024
* Allow firewall factory to omit rules key
* Fix tests
* Fix fast tests
* fix fast tests
2024-01-30 16:53:01 +00:00
7b58114d65
Updated the DataQualitySpec for Dataplex Datascan ( #2008 )
...
* Updated the DataQualitySpec for Dataplex Datascan
* Fix linting
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2024-01-30 15:14:49 +00:00
37fc16ab42
Fix tests in README ( #2027 )
2024-01-30 11:04:47 +00:00
bf93b6fb4e
fix typo in logging sinks interface ( #2015 )
2024-01-28 10:27:28 +01:00
19dc6090fc
Add Tag Template module ( #2013 )
...
* Tag policy module
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-01-27 12:30:21 +01:00
9c1afa6261
Issue #2011 - add support for target_resources in hierarchical policy for net-firewall-policy module. ( #2012 )
...
* Issue #2011 - Add support for target_resources in hierarchical firewall policy
* Removing errant character in factory.tf
2024-01-25 17:56:17 +00:00
1a8400e60e
Fixes and additional support for ssl_mode for CloudSQL module ( #2002 )
...
* added ssl mode, ignore password change and maintenance fix
* validation - ssl mode can be null
* removed ignore password
* readme update
* added moved, shortened ssl_mode desc
* order fix
* fmt
* created ssl variable
* handle exceptions
* removed null from optional
* change ssl from null to empty object
* output ordered alphabetically
* readme update
* default value of require_ssl
2024-01-25 16:29:07 +01:00
6d9b6403dd
add support for essential contacts to FAST ( #2010 )
2024-01-25 12:20:14 +01:00
c5416f3af1
Tighten up security of automation project (CSPR-related) ( #2009 )
...
* enforce compute/iam policies on the automation project
* tests
2024-01-24 18:40:36 +00:00
6b4dad01d6
Marcwo/dataform module ( #2001 )
...
* pre PR commit
* added IAM functionality
* clean up of readme
* versions.tf fix
* added separate iam.tf, facilitated existing secret manager module
* corrected optional variable defaults
* adjusted readme to new changes
* adjusted tftest line in readme for changed example
* reverted the module back to a state where it only manages one instance
* minor fix for main readme.md
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-01-24 17:13:21 +01:00
15439c3f5b
Fix named ranges behaviour if cidr_tpl_file variable not provided. ( #2005 )
...
* Fix named ranges behaviour if cidr_tpl_file variable not provided.
* Fix and extend tests.
* fix map syntax
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-01-24 11:18:11 +00:00
526185fd1f
Remove default region for Cloud Function and Cloud Run ( #2004 )
...
Remove default region for Cloud Function and Cloud Run
2024-01-24 10:23:40 +00:00
277777d1c7
Fix DNS E2E test + add one to net-lb-app-int-cross-region ( #1993 )
...
* Fix DNS E2E test + add one to net-lb-app-int-cross-region
* Update README.md
* Fix inventory for tests
* Fix tests
* Fix number of resources
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-01-23 16:34:45 +01:00
0ef7ee4670
Added beta apis feature ( #1999 )
2024-01-23 11:09:22 +00:00
37dc48bca4
fix factory type for firewall rule ports ( #1996 )
2024-01-21 12:38:24 +01:00
4ed738688a
dns reponse policy e2e changes ( #1994 )
...
dns reponse policy e2e changes
2024-01-20 19:47:02 +01:00
11d7edac64
Add example to FAST GKE stage, streamline GKE Hub module variables and usage ( #1977 )
...
* implement optionals in gke-hub module
* simplify gke hub module call in mc mesh blueprint
* simplify gke hub module call and variables in multitenant blueprint
* gke hub inventory
* provide cluster and fleet examples in stage
2024-01-20 10:06:38 +00:00
d62012cebc
Specify `docker_repository` field for google_cloudfunctions2_function ( #1987 )
...
* fix: allow configuring `docker_repository` for cloud-function2
When docker repository is not specified by default docker repository
`projects/PROJECT_ID/locations/REGION/repositories/gcf-artifacts` is used.
In such a case, terraform plan always generates a difference for `docker_repository`
field as the module passes null value but the tfstate file has the above specified
default value. This fix allows one to prevent unnecessary infrastructure change when
using the default repository as well as any user created repository.
* doc: updated README for cloud-function-v2
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2024-01-20 09:40:26 +00:00
09176feaec
Fix typo in example
2024-01-18 19:46:53 +01:00
228a4a82c3
Fixed README and test for dns module
2024-01-18 19:04:03 +01:00
4bf394a916
Added health checked targets for geo routing policy in dns module
...
Added health checked targets for geo routing policy in dns module
2024-01-18 16:39:56 +01:00
1c99bae649
feat: enable mtls on external application application load balancer ( #1979 )
...
* feat: enable mtls on external application application load balancer
* refactor: move variable inside https_proxy_config block
---------
Co-authored-by: Julio Castillo <jccb@google.com>
2024-01-17 06:24:54 +00:00
bc506795f2
compute-vm: add resource manager tags support for instance templates ( #1982 )
2024-01-16 17:40:15 +00:00
5ba54aeaf7
Added Cross-region internal application load balancer module
2024-01-16 17:54:50 +01:00
5372361b8c
Proper validation of empty string value in identity_type ( #1980 )
2024-01-16 10:28:30 +01:00
19eb247849
Fix identity_type ( #1978 )
...
* Allow empty string for 'identity_type' supported by Google provider and use correct value name for ingress 'identity_type'
* Sanitizing variables as the logical operators in Terraform do not short-circuit.
2024-01-15 20:40:06 +00:00
cec11d2d55
Add support for service_external_ips_config to GKE cluster modules ( #1970 )
...
* Added variable in gke standard and autopilot modules
* Changed variable position
* Added dynamic block
2024-01-12 11:50:53 +01:00
46f437fd5d
use provided SA for cloud function v2 trigger ( #1968 )
2024-01-08 16:39:01 +00:00
d1746b8bd1
Support for ANY_USER_ACCOUNT in module vpc-sc egress rule. ( #1966 )
2024-01-08 14:23:07 +01:00
af41e0fe38
Use fixtures in net-lb-ext
2024-01-06 17:09:49 +01:00
e10664984e
Create bigtable service identity with project if api is enabled ( #1958 )
2024-01-06 16:38:08 +01:00
39822888ad
Add support for subnetwork for external addresses
...
For IPv6 it is necessary to provide subnetwork when reserving external
address.
2024-01-06 14:02:52 +01:00
b92135a56d
Remove null address for PSC
...
null address results in following error:
Error creating GlobalAddress: googleapi: Error 400: Invalid value for field 'resource.address': ''. The field is not a valid IP address or does not match the given prefix length, invalid
2024-01-06 14:02:52 +01:00
3470661993
IPv6 address reservation not supported for ILB
...
Error creating Address: googleapi: Error 400: Invalid value for field 'resource.purpose': 'SHARED_LOADBALANCER_VIP'. Shared LoadBalancer VIP IPv6 address reservation is not supported., invalid
2024-01-06 14:02:52 +01:00
8afdf66a09
Add end-to-end tests for net-address
2024-01-06 14:02:52 +01:00
0e39676c99
Remove tier for internall addresses
...
Error creating Address: googleapi: Error 400: Invalid value for field 'resource.networkTier': 'STANDARD'. An address with type INTERNAL cannot have a network tier., invalid
2024-01-06 14:02:52 +01:00
2a66fcab2e
Fix HTTP to HTTPS example
2024-01-06 12:05:53 +01:00
05dd4b89b6
Enable E2E tests for net-lb-app-ext-regional
...
HTTP to HTTPS needs work, now fails with:
Error: Error creating ForwardingRule: googleapi: Error 400: Invalid value for field 'resource.IPAddress': '34.160.52.156'. Invalid IP address specified., invalid
with module.ralb-test-0-redirect.google_compute_forwarding_rule.default,
on fabric/modules/net-lb-app-ext-regional/main.tf line 32, in resource "google_compute_forwarding_rule" "default":
32: resource "google_compute_forwarding_rule" "default" {
2024-01-06 12:05:53 +01:00
a6e377fad2
Rename compute-mig-bc.tf to compute-vm-group-bc.tf
2024-01-06 12:05:53 +01:00
4e6d65b466
Update README.md
2024-01-05 17:30:34 +01:00
8beb621e07
New module for external regional application load balancer ( #1892 )
...
* Initial version of regional external application load balancer.
* Fix tests
* Remove unsupported features in regional app lbs
* update readme with fixtures
* Add ssl-certificate fixture
* Switch examples to regions b c
* Remove redundant NEG examples
* Update README
* Update versions.tf
* Add missing boilerplate
2024-01-05 16:59:27 +01:00
0ca3203e52
Capitalize Private Network Access
2024-01-05 15:05:32 +00:00
a4def10c19
Add PNA support to Service Directory module
...
Endpoints in Service Directory can be *associated* with a
VPC. In this case, they can be used by supported Google
Cloud products to send requests directly to resources inside
a VPC. This feature is called Private Network Access.
The `google_service_directory_endpoint` resource supports
this configuration with a new argument `network`.
Unfortunately, this argument has an unusual format: it
is similar to a standard VPC ID, but instead of the project ID,
it expects the project number.
2024-01-05 15:05:32 +00:00
c13a192755
Use zones b and c for MIG fixture ( #1961 )
2024-01-05 15:02:12 +00:00
cc079e3a32
net-lb-app-ext example fixes ( #1959 )
...
* Fix typos
* Small fixes net-lb-app-ext examples
2024-01-05 13:38:30 +00:00
3edacd0aba
Add e2e test for net_lb_app_ext module
2024-01-05 10:02:23 +01:00
22e9e9e950
Support CMEK encryption on Bigtable instances. ( #1956 )
2024-01-05 09:29:36 +01:00
fde7b76036
Allow per-module terraform fixtures ( #1914 )
...
* Allow terraform fixtures for examples
* Allow defining multiple fixtures, and named fixtures under tests/fixtures/
* Enable e2e for wiktorn
* Fix prepare_files call for e2e
* Move fixture to separate file, fix test
* Revert shallow-copying symlinks, performane penalty - 20%
* Update tfdoc.py to list used fixtures
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
2023-12-29 09:43:44 +00:00
9a7c600b6f
Merge branch 'master' into 1849-implement-cloud-run-module-version-2
2023-12-26 11:52:42 +01:00
81814c3e4e
Links to the new module in READMEs
2023-12-26 11:52:13 +01:00
a5ce58ea22
tfdoc
2023-12-25 08:42:22 +00:00
a2a767a027
Doc fixes
2023-12-25 08:39:52 +00:00
969111f0cf
dns e2e tests ( #1944 )
2023-12-23 10:29:32 +00:00
3b7724053b
Merge branch 'master' into 1849-implement-cloud-run-module-version-2
2023-12-22 11:45:56 +01:00
44b1115b9f
Fix GCVE network policy ( #1948 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
2023-12-22 10:29:43 +00:00
06b2a97291
GCVE: add network policy configuration
2023-12-22 10:02:12 +00:00
fd451c3451
Align with default versions file
2023-12-22 11:01:41 +01:00
f784f47528
Merge branch 'master' into 1849-implement-cloud-run-module-version-2
2023-12-21 22:11:20 +01:00
d08541159d
Update README
2023-12-21 22:09:47 +01:00
df5c02aa1e
Minor fix to GCVE module readme ( #1946 )
...
Co-authored-by: Luca Prete <lucaprete@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
2023-12-21 18:29:30 +01:00
c4123044b7
Use new resources in GCVE module, bump up provider versions ( #1941 )
2023-12-21 13:23:38 +00:00
110fd798a7
Fix always succeding test ( #1937 )
...
Co-authored-by: Julio Castillo <jccb@google.com>
2023-12-21 11:01:08 +00:00
a04f59852f
Merge branch 'master' into 1849-implement-cloud-run-module-version-2
2023-12-20 18:17:15 +01:00
0255c80e90
Move squid to __need_fixing ( #1936 )
...
* Moved `modules/cloud-config-container/squid` to __need_fixing
* Moved `blueprints/networking/filtering-proxy{,-psc}` to __need_fixing
2023-12-19 14:27:37 +00:00
0d486fb34e
E2E tests fixes
2023-12-19 11:01:03 +01:00
01bd0b7b01
Add project-scoped secure tags ( #1933 )
2023-12-18 18:24:05 +01:00
b6e0557bbb
Simplify organization tags.tf locals ( #1932 )
...
* Simplify organization tags.tf locals
* Fix boilerplate
* Override github provider version for tests
2023-12-18 16:09:22 +00:00
c5da6b99c3
Fixes typo in README.md
2023-12-18 15:40:16 +01:00
88b91cdaee
Move VPC connector management to specific files
2023-12-18 11:53:28 +01:00
4c9243017c
Rename attribute secret.secret to secret.name
2023-12-18 11:42:57 +01:00
bc4f89d9dc
Remove 'traffic' variable, the module is not intended to manage rollouts
2023-12-18 11:39:28 +01:00
c50b732c79
Allow granting network user role on host project from project module and factory ( #1930 )
...
* Update shared vpc config for project factory and project module for more granular Shared VPC configuration
---------
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-12-15 14:39:21 +01:00
db31c1b8aa
Fixes example in cloud-config-container/squid
2023-12-15 12:31:08 +01:00
c599717856
Refactor the interface
2023-12-14 08:44:51 +01:00
537237edd6
Fix health check autocreation and id output in passthrough LB modules ( #1928 )
...
* fix health check autocreation and id output
* fix health check exclusion
2023-12-13 23:39:55 +00:00
ca3c86cb5c
Add support for policy based routes to net-vpc ( #1926 )
...
* Add support for PBR to net-vpc
2023-12-13 15:19:40 +00:00
201ff284f6
gke-cluster-standard : Support upgrade_settings for node auto provisioner ( #1905 )
...
* gke-cluster-standard : Support upgrade_settings for node auto provisionner
* implement suggestions
* tfdoc
---------
Co-authored-by: Ludo <ludomagno@google.com>
2023-12-12 19:17:51 +00:00
ef4095f000
Removed deprecated variable and added labels ( #1923 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-12-12 18:32:48 +00:00
f293847077
can_ip_forward in simple-nva examples ( #1922 )
2023-12-12 13:09:58 +00:00
c24d023c23
Sync tf version to version used by tests
2023-12-12 09:43:09 +01:00
b65c57bcc2
bump tf version ( #1920 )
2023-12-12 09:19:46 +01:00
e2c526c6a2
Merge branch 'master' into 1849-implement-cloud-run-module-version-2
2023-12-12 07:26:56 +01:00
6cb3eb5390
Added missing parameters in kubelet and linux node conf ( #1918 )
2023-12-11 20:05:23 +01:00
d2d62b71e2
Added the possibility to configure maintenance window and deny maintenance period in Cloud SQL module module ( #1917 )
...
* added maintenance window configuration to cloud sql
* Formatted code + generated readme
* Fixed readme errors (missing dots at the end of variables' description)
* Fixed typos + regenerated docs
* Added correct readme
* Collapsed "deny_maintenance_period" and "maintenance_window" variables into a single variable called "maintenance_config"
* Added input validation + some minor fixes
* Add trigger configuration for Composer (#1916 )
* Added update_track variable validation
* Formatted variables + regenerated readme
---------
Co-authored-by: Wiktor Niesiobędzki <wiktorn@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2023-12-11 16:59:00 +00:00
bba814c091
Custom role factories for organization and project modules ( #1912 )
...
* backport custom role factories
* backport from fast ci/cd branch
* indent
* tfdoc
* fix module tests
2023-12-11 14:16:39 +00:00
c65e242685
net_lb_ext module e2e and example testing changes ( #1909 )
...
E2E tests for net_lb_ext
2023-12-08 10:04:07 +01:00
84a15c4d77
README fixes for #1907
2023-12-07 09:51:48 +00:00
e4c55bc4c9
gke-cluster-standard : Set optional shielded_instance_config block in cluster_autoscaling.auto_provisioning_defaults ( #1906 )
...
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2023-12-07 09:37:13 +00:00
f548b65b1c
Add support for subnet-level service network user grants to project module, improve docs ( #1907 )
...
* improve project factory example
* light refactor of project modules shared vpc internals and docs
* add support for subnet-level grants on host project
2023-12-07 09:07:48 +00:00
b92389066e
gke-cluster-standard : Add possibility to enable image streaming feature at cluster level ( #1904 )
2023-12-07 06:36:21 +01:00
fa7664434b
Enable sole tenancy (`node_affinities`) on compute_vm ( #1903 )
2023-12-05 18:05:23 +01:00
Elia
Amela Spica
Wiktor Niesiobędzki
Ludovico Magnocavallo
Saleh Elnagar
Tone
frits-v
andybubu
dibaskar-google
Julio Castillo
Magido Mascate
Simone Ruffilli
marcjwo
Mohamed Ikbal Belbahri
lcaggio
tamartayar
Thinh Ha
luigi-bitonti
Deepak Kumar
Harald Haas
shourya116
Blake Corbitt
Miro Michalicka
Wiktor Niesiobędzki
apichick
Tahar JEGHAM
Luca Prete
Viliam Pucik
Jan Toth
Jason Steenblik
Stefano Tribioli
Andy Bubune Amewuda
Julio Diez
simonebruzzechesse
Simone Ruffilli
Thomas Colomb
Francesco Pavan