chore: release main (#69)

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
GoogleCloudPlatform · Sep 14, 2021 · a19cdce · a19cdce
1 parent aec839e
commit a19cdce
Show file tree

Hide file tree

Showing 71 changed files with 172 additions and 124 deletions.
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
@@ -1,13 +1 @@
-{
-  "catalog/bucket": "0.3.0",
-  "catalog/empty": "0.3.0",
-  "catalog/gitops": "0.3.0",
-  "catalog/gke": "0.3.0",
-  "catalog/hierarchy": "0.3.0",
-  "catalog/landing-zone": "0.3.0",
-  "catalog/log-export": "0.3.0",
-  "catalog/networking": "0.3.0",
-  "catalog/project": "0.3.0",
-  "catalog/redis-bucket": "0.3.0",
-  "catalog/spanner": "0.3.0"
-}
+{"catalog/bucket":"0.4.0","catalog/empty":"0.3.0","catalog/gitops":"0.4.0","catalog/gke":"0.3.0","catalog/hierarchy":"0.3.0","catalog/landing-zone":"0.4.0","catalog/log-export":"0.4.0","catalog/networking":"0.4.0","catalog/project":"0.4.0","catalog/redis-bucket":"0.3.0","catalog/spanner":"0.3.0"}
diff --git a/catalog/bucket/CHANGELOG.md b/catalog/bucket/CHANGELOG.md
@@ -0,0 +1,8 @@
+# Changelog
+
+## [0.4.0](https://www.github.com/GoogleCloudPlatform/blueprints/compare/bucket-blueprint-v0.3.0...bucket-blueprint-v0.4.0) (2021-09-14)
+
+
+### Features
+
+* Add explicit location to bucket.yaml ([#71](https://www.github.com/GoogleCloudPlatform/blueprints/issues/71)) ([aec839e](https://www.github.com/GoogleCloudPlatform/blueprints/commit/aec839ed8124150c0670bc74d4f2aca113fa566d))
diff --git a/catalog/gitops/CHANGELOG.md b/catalog/gitops/CHANGELOG.md
@@ -0,0 +1,13 @@
+# Changelog
+
+## [0.4.0](https://www.github.com/GoogleCloudPlatform/blueprints/compare/gitops-blueprint-v0.3.0...gitops-blueprint-v0.4.0) (2021-09-14)
+
+
+### Features
+
+* Switch to using IAMPartialPolicy instead of IAMPolicyMember ([#62](https://www.github.com/GoogleCloudPlatform/blueprints/issues/62)) ([395b921](https://www.github.com/GoogleCloudPlatform/blueprints/commit/395b921fe35bf54677e66df013f3ca4c2a09fdb6))
+
+
+### Bug Fixes
+
+* minor fixes in IAMPartialPolicy ([#63](https://www.github.com/GoogleCloudPlatform/blueprints/issues/63)) ([188ad2a](https://www.github.com/GoogleCloudPlatform/blueprints/commit/188ad2ab8d75e696d5127a52b146ca6f8363b8b3))
diff --git a/catalog/gitops/cloudbuild-iam.yaml b/catalog/gitops/cloudbuild-iam.yaml
@@ -18,7 +18,7 @@ metadata:
   name: deployment-repo-cloudbuild-write
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 spec:
   resourceRef:
@@ -37,7 +37,7 @@ metadata:
   name: source-repo-cloudbuild-read
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 spec:
   resourceRef:

diff --git a/catalog/gitops/configsync/configsync-iam.yaml b/catalog/gitops/configsync/configsync-iam.yaml
@@ -19,7 +19,7 @@ metadata:
   name: sync-cluster-name # kpt-set: sync-${cluster-name}
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/configsync/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/configsync/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 spec:
   displayName: sync-cluster-name # kpt-set: sync-${cluster-name}
@@ -31,7 +31,7 @@ metadata:
   name: sync-cluster-name # kpt-set: sync-${cluster-name}
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/configsync/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/configsync/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 spec:
   resourceRef:
@@ -50,7 +50,7 @@ metadata:
   name: source-reader-sync-cluster-name-project-id # kpt-set: source-reader-sync-${cluster-name}-${project-id}
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/configsync/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/configsync/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 spec:
   resourceRef:

diff --git a/catalog/gitops/hydration-trigger.yaml b/catalog/gitops/hydration-trigger.yaml
@@ -22,7 +22,7 @@ metadata:
   name: source-repo-cicd-trigger # kpt-set: ${source-repo}-cicd-trigger
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 spec:
   build:

diff --git a/catalog/gitops/services.yaml b/catalog/gitops/services.yaml
@@ -17,7 +17,7 @@ metadata:
   name: sourcerepo.googleapis.com
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 ---
 apiVersion: serviceusage.cnrm.cloud.google.com/v1beta1
@@ -26,5 +26,5 @@ metadata:
   name: cloudbuild.googleapis.com
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
diff --git a/catalog/gitops/source-repositories.yaml b/catalog/gitops/source-repositories.yaml
@@ -17,7 +17,7 @@ metadata:
   name: source-repo # kpt-set: ${source-repo}
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
 ---
 apiVersion: sourcerepo.cnrm.cloud.google.com/v1beta1
@@ -26,5 +26,5 @@ metadata:
   name: deployment-repo # kpt-set: ${deployment-repo}
   namespace: config-control # kpt-set: ${namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/gitops/v0.4.0
     cnrm.cloud.google.com/project-id: project-id # kpt-set: ${project-id}
diff --git a/catalog/landing-zone/CHANGELOG.md b/catalog/landing-zone/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+
+## [0.4.0](https://www.github.com/GoogleCloudPlatform/blueprints/compare/landing-zone-blueprint-v0.3.0...landing-zone-blueprint-v0.4.0) (2021-09-14)
+
+
+### Features
+
+* **landing-zone:** add automaticIamGrantsForDefaultServiceAccounts org policy ([#67](https://www.github.com/GoogleCloudPlatform/blueprints/issues/67)) ([eed1ebe](https://www.github.com/GoogleCloudPlatform/blueprints/commit/eed1ebe91867e05a17e2d0640b315375b461c670))
+* Switch to using IAMPartialPolicy instead of IAMPolicyMember ([#62](https://www.github.com/GoogleCloudPlatform/blueprints/issues/62)) ([395b921](https://www.github.com/GoogleCloudPlatform/blueprints/commit/395b921fe35bf54677e66df013f3ca4c2a09fdb6))
+
+
+### Bug Fixes
+
+* minor fixes in IAMPartialPolicy ([#63](https://www.github.com/GoogleCloudPlatform/blueprints/issues/63)) ([188ad2a](https://www.github.com/GoogleCloudPlatform/blueprints/commit/188ad2ab8d75e696d5127a52b146ca6f8363b8b3))
+* swap IAMPartialPolicy back to IAMPolicyMember for org resourceRefs ([#64](https://www.github.com/GoogleCloudPlatform/blueprints/issues/64)) ([45f5718](https://www.github.com/GoogleCloudPlatform/blueprints/commit/45f571820d091c2046ae6a0541ed89d590014090))
diff --git a/catalog/landing-zone/iam.yaml b/catalog/landing-zone/iam.yaml
@@ -18,7 +18,7 @@ metadata:
   name: org-admins-iam
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
 spec:
   resourceRef:
     apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
@@ -33,7 +33,7 @@ metadata:
   name: billing-admins-iam
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
 spec:
   resourceRef:
     apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1

diff --git a/catalog/landing-zone/namespaces/hierarchy.yaml b/catalog/landing-zone/namespaces/hierarchy.yaml
@@ -17,7 +17,7 @@ metadata:
   name: hierarchy-sa
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   displayName: hierarchy-sa
@@ -28,7 +28,7 @@ metadata:
   name: hierarchy-sa-folderadmin-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -44,7 +44,7 @@ metadata:
   name: hierarchy-sa-workload-identity-binding
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -83,6 +83,6 @@ metadata:
   name: configconnectorcontext.core.cnrm.cloud.google.com
   namespace: hierarchy
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
 spec:
   googleServiceAccount: [email protected] # kpt-set: hierarchy-sa@${management-project-id}.iam.gserviceaccount.com
diff --git a/catalog/landing-zone/namespaces/logging.yaml b/catalog/landing-zone/namespaces/logging.yaml
@@ -25,7 +25,7 @@ metadata:
   name: configconnectorcontext.core.cnrm.cloud.google.com
   namespace: logging
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
 spec:
   googleServiceAccount: [email protected] # kpt-set: logging-sa@${management-project-id}.iam.gserviceaccount.com
 ---
@@ -35,7 +35,7 @@ metadata:
   name: logging-sa
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   displayName: logging-sa
@@ -46,7 +46,7 @@ metadata:
   name: logging-sa-logadmin-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -62,7 +62,7 @@ metadata:
   name: logging-sa-bigqueryadmin-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -78,7 +78,7 @@ metadata:
   name: logging-sa-workload-identity-binding
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:

diff --git a/catalog/landing-zone/namespaces/networking.yaml b/catalog/landing-zone/namespaces/networking.yaml
@@ -18,7 +18,7 @@ metadata:
   name: networking-sa
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   displayName: networking-sa
@@ -29,7 +29,7 @@ metadata:
   name: networking-sa-networkadmin-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -45,7 +45,7 @@ metadata:
   name: networking-sa-security-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -61,7 +61,7 @@ metadata:
   name: networking-sa-dns-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -77,7 +77,7 @@ metadata:
   name: networking-sa-service-control-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -93,7 +93,7 @@ metadata:
   name: networking-sa-xpnadmin-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -109,7 +109,7 @@ metadata:
   name: networking-sa-workload-identity-binding
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -148,6 +148,6 @@ metadata:
   name: configconnectorcontext.core.cnrm.cloud.google.com
   namespace: networking
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
 spec:
   googleServiceAccount: [email protected] # kpt-set: networking-sa@${management-project-id}.iam.gserviceaccount.com
diff --git a/catalog/landing-zone/namespaces/policies.yaml b/catalog/landing-zone/namespaces/policies.yaml
@@ -18,7 +18,7 @@ metadata:
   name: policies-sa
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   displayName: policies-sa
@@ -29,7 +29,7 @@ metadata:
   name: policies-sa-orgpolicyadmin-permissions
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -45,7 +45,7 @@ metadata:
   name: policies-sa-workload-identity-binding
   namespace: config-control # kpt-set: ${management-namespace}
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
     cnrm.cloud.google.com/project-id: management-project-id # kpt-set: ${management-project-id}
 spec:
   resourceRef:
@@ -70,6 +70,6 @@ metadata:
   name: configconnectorcontext.core.cnrm.cloud.google.com
   namespace: policies
   annotations:
-    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.3.0
+    cnrm.cloud.google.com/blueprint: cnrm/landing-zone/v0.4.0
 spec:
   googleServiceAccount: [email protected] # kpt-set: policies-sa@${management-project-id}.iam.gserviceaccount.com