2.3.1 (2021-10-15)
2.3.0 (2021-09-02)
2.2.0 (2021-07-16)
2.1.1 (2021-06-23)
- add browser role to cloud build sa for provided folders (#484) (b3996e2)
- upgrade terraform to 0.13.7 (#490) (a9150a7)
2.1.0 (2021-05-15)
2.0.0 (2021-05-01)
- 4-projects GCS CMEK example (#346) (d74ff33)
- add FAQ, Glossary & Troubleshooting docs (#466) (57643a6)
- Add GAR in infra pipelines and tests (#395) (2a2e4fe)
- Add hub and spoke network architecture (#298) (d9468db)
- add iam.automaticIamGrantsForDefaultServiceAccounts org policy constraint (#386) (f6b0387)
- Add log export GCS bucket object versioning (#317) (cb0e622)
- add Shielded VMs & OS Login org policies (#283) (07a201e)
- Add step 5-app-infra (#382) (fd5329c)
- add support for hierarchical firewall policies (#343) (e7bb1bc)
- Add terraform validator and add policy-library (#263) (f220588)
- Adds prefix to projects and folder name (#289) (66dacf2)
- App Infra pipelines (#337) (c3b19e8)
- enable hub & spoke transitivity via gateway VMs (#322) (f6cd9ad)
- example-foundations test modes (#309) (34a6d75)
- implement support for Partner Interconnect (#345) (70501ec)
- Make BigQuery log destinations partitioned (#277) (f40c5fe)
- Move Cloud Source Repo definition to variable. (#302) (48037c9)
- Replace container registry with artifact registry in CloudBuild (#367) (6b6469b)
- Update terraform-validator version, instructions and CMEK bucket (#397) (8f7c58e)
- updates to support TF 0.13 (#268) (c5c6c6c)
- 1-org README.md add setting up Security Command Center to Prerequisites (#467) (ee04cb5)
- add bucket prefix for bootstrap (#407) (03bd05a)
- add cloudbuild api to seed proj (#358) (1fda12b)
- add CMEK project name prefix and root readme project names (#414) (141c059)
- add impersonate to gcloud builds submit command in infra-pipeline module (#458) (1d3fbf8)
- add infra pipeline CB SA role test (#450) (e30fe8c)
- add missing google apis to policy constraint (#370) (2ac0466)
- Add missing symlink in shared network env (#328) (48c2318)
- add network fixture prepare to lint test (#323) (c120d55)
- add standalone repo for terraform-validator policies (#403) (b170478)
- Adding KMS API in bootstrap project (#385) (39b8da3)
- Bugfix/fix 4-projects issues (#374) (f5f5224)
- clone policies repo once per build (#329) (3e95111)
- default sa deprivilege (ea5fcc2)
- Documentation fixes (#327) (ce610d0)
- Documentation language inconsistencies, typos and tests (#419) (71b633f)
- Fixes for build stability issues (#406) (c2b8200)
- pin versions of terraform in the code to version 0.13.6 (#398) (b86457c)
- remove shielded VM org policy (#286) (c1a2852)
- rename access_context.tfvars to access_context.auto.tfvars in 4-projects (#396) (91ce3f8)
- set 3-networks service account token lifetime to 1200s (#432) (76efbe8)
- specify ports for ssh & rdp for IAP TCP forwarding rule (#390) (3eed2bc)
- support for hub and spoke transitivity (#427) (a6b43da)
- update 4-projects infra pipeline project name (#404) (7beb5a0)
- update documentation (#301) (54aa58a)
- Update google cloud sdk min version to 319.0.0 and use GA version of gcloud scc notifications (#463) (ebbb4d7)
- update google-beta provider source info (#368) (9924760)
- Update readme files (#399) (d1f29c3)
- upgrade version for dependant CFT modules (#339) (02a4ac5)
- use f1-micro as the machine type for the deploy in 5-app-infra step (#416) (1fad10b)
- version of network_peering in step 4-projects (#384) (16a99bb)
1.1.0 (2021-03-10)
- add integration tests for 4-projects (#232) (0521aeb)
- Add Provider cache (#250) (5c5b8b3)
- add terraform show command to wrapper script (#267) (2a8e9f2)
- adds jenkins agent vpn automation in terraform (#234) (68208ad)
- adds kitchen testes for step 3-networks (#231) (50bab16)
- Adds org policy admin role for admin group (#262) (12f02ec)
- Adds peering project examples (#243) (dc6dd95)
- adds support for bucket retention policy for logs (#266) (cc4ddbc)
- 3-networks inconsistencies and typos (#304) (f87ed16)
- adjust log filters for SHA/CIS compliance (#261) (cd42805)
- deprecated bucket-policy-only parameter and bq table deletion (#264) (3dfda65)
- egress deny fw rule for all protocols (#260) (402c785)
- enable data access logs collection (#249) (6e887e0)
- explicitly add project to scc pub/sub topic creation (#233) (ca7d926)
- Pin network module for terraform 0.12 (#333) (f0218a5)
- set default_service_account value correctly to 'deprivilege' (#282) (6f8a4c0)