Merge branch 'main' into privateca

Author: glasnt

.github/CODEOWNERS

@@ -1,28 +1,24 @@
 # Overall sample owners
 
 *                       @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers
-/.github/               @terraform-google-modules/terraform-samples-git-admins
-/test/                  @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins
-/build/                 @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins
+/*                      @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers @terraform-google-modules/cloud-samples-infra
+/.github/               @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cloud-samples-infra
+/test/                  @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
+/build/                 @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
+
 /bigquery/              @terraform-google-modules/bigquery-terraform-swe @terraform-google-modules/terraform-samples-reviewers
-/cloud_scheduler/       @terraform-google-modules/terraform-samples-reviewers
 /cloud_sql/             @terraform-google-modules/infra-db-sdk @terraform-google-modules/terraform-samples-reviewers
 /cloudvpn/              @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
 /composer/              @terraform-google-modules/cloud-dpes-composer @terraform-google-modules/terraform-samples-reviewers
 /compute/               @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
 /dns/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/eventarc/              @terraform-google-modules/torus-dpe @terraform-google-modules/terraform-samples-reviewers
-/functions/             @terraform-google-modules/torus-dpe @terraform-google-modules/terraform-samples-reviewers
 /gke/                   @terraform-google-modules/eks-team @terraform-google-modules/terraform-samples-reviewers
 /lb/                    @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
 /looker/		@terraform-google-modules/cloud-looker-docs @terraform-google-modules/terraform-samples-reviewers
 /media_cdn/             @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
 /network_connectivity/  @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
 /privateca/             @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/run/                   @terraform-google-modules/torus-dpe @terraform-google-modules/terraform-samples-reviewers
 /storage/               @terraform-google-modules/cloud-storage-dpe @terraform-google-modules/terraform-samples-reviewers
 /traffic_director/      @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/vertex_ai/             @terraform-google-modules/dee-data-ai @terraform-google-modules/terraform-samples-reviewers
 /vpc/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/workflows/             @terraform-google-modules/torus-dpe @terraform-google-modules/terraform-samples-reviewers
 /managedkafka/          @terraform-google-modules/managedkafka-dev-team @terraform-google-modules/terraform-samples-reviewers

.github/workflows/lint.yaml

@@ -43,4 +43,4 @@ jobs:
             REGISTRY=$(grep "REGISTRY_URL := " $MAKEFILE | cut -d\  -f3)
             echo dev-tools=${REGISTRY}/${IMAGE}:${VERSION} >> "$GITHUB_OUTPUT"
           fi
-      - run: docker run --rm -v ${{ github.workspace }}:/workspace ${{ steps.variables.outputs.dev-tools }} /usr/local/bin/test_lint.sh
+      - run: docker run --rm -e ENABLE_PARALLEL=1 -v ${{ github.workspace }}:/workspace ${{ steps.variables.outputs.dev-tools }} /usr/local/bin/test_lint.sh

compute/resize_request_basic/main.tf

@@ -0,0 +1,70 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Made to resemble:
+ * gcloud compute instance-groups managed resize-requests create igm \
+ *    --resize-request=rr \
+ *    --resize-by=3 \
+ *    --requested-run-duration=1800 \
+ *    --zone=europe-west4-a
+ */
+
+# [START compute_resize_request_basic_parent_tag]
+resource "google_compute_instance_template" "default" {
+  machine_type = "a2-ultragpu-8g"
+
+  disk {
+    source_image = "debian-cloud/debian-11"
+  }
+
+  network_interface {
+    network = "default"
+  }
+  scheduling {
+    on_host_maintenance = "TERMINATE"
+  }
+  reservation_affinity {
+    type = "NO_RESERVATION"
+  }
+}
+
+resource "google_compute_instance_group_manager" "default" {
+  name               = "igm"
+  base_instance_name = "test"
+  zone               = "europe-west4-a"
+
+  version {
+    instance_template = google_compute_instance_template.default.id
+    name              = "primary"
+  }
+  instance_lifecycle_policy {
+    default_action_on_failure = "DO_NOTHING"
+  }
+}
+
+# [START compute_resize_request_basic_tag]
+resource "google_compute_resize_request" "default" {
+  provider               = google-beta
+  instance_group_manager = google_compute_instance_group_manager.default.name
+  zone                   = google_compute_instance_group_manager.default.zone
+  name                   = "rr"
+  resize_by              = 3
+  requested_run_duration {
+    seconds = 1800
+  }
+}
+# [END compute_resize_request_basic_tag]
+# [END compute_resize_request_basic_parent_tag]

eventarc/basic/main.tf

@@ -93,6 +93,8 @@ resource "google_cloud_run_v2_service" "default" {
   name     = "hello-events"
   location = "us-central1"
 
+  deletion_protection = false # set to "true" in production
+
   template {
     containers {
       # This container will log received events

gke/quickstart/multitenant/main.tf

@@ -54,6 +54,7 @@ resource "google_project_iam_member" "gatewayeditor" {
 }
 # [END gke_quickstart_multitenant_teams]
 # [START gke_quickstart_multitenant_fleet]
+# [START gke_enterprise_policycontroller_fleet]
 resource "google_gke_hub_feature" "policycontroller" {
   name     = "policycontroller"
   location = "global"
@@ -75,6 +76,7 @@ resource "google_gke_hub_feature" "policycontroller" {
     }
   }
 }
+# [END gke_enterprise_policycontroller_fleet]
 
 resource "google_gke_hub_scope" "default" {
   for_each = local.teams

run/access_control/main.tf

@@ -17,9 +17,11 @@
 # [START cloudrun_access_control_parent_tag]
 # [START cloudrun_service_access_control_run_service]
 resource "google_cloud_run_v2_service" "default" {
-  name     = "cloud-run-srv"
+  name     = "public-service"
   location = "us-central1"
 
+  deletion_protection = false # set to "true" in production
+
   template {
     containers {
       image = "us-docker.pkg.dev/cloudrun/container/hello"

run/add_tag/main.tf

@@ -16,24 +16,26 @@
 
 # [START cloudrun_service_add_tag]
 resource "google_cloud_run_v2_service" "default" {
-  name     = "cloudrun-srv"
+  name     = "my-service"
   location = "us-central1"
 
+  deletion_protection = false # set to true to prevent destruction of the resource
+
   template {}
 
   # Define the traffic split for each revision
   # https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/cloud_run_v2_service#traffic
   traffic {
     percent = 100
     # This revision needs to already exist
-    revision = "cloudrun-srv-green"
+    revision = "green"
     type     = "TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION"
   }
 
   traffic {
     # Deploy new revision with 0% traffic
     percent  = 0
-    revision = "cloudrun-srv-blue"
+    revision = "blue"
     tag      = "tag-name"
     type     = "TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION"
   }

run/cloud_run_configuration_concurrency/main.tf

@@ -21,6 +21,8 @@ resource "google_cloud_run_v2_service" "default" {
   name     = "cloudrun-service-concurrency"
   location = "us-central1"
 
+  deletion_protection = false # set to "true" in production
+
   template {
     containers {
       image = "us-docker.pkg.dev/cloudrun/container/hello"

run/cloud_run_configuration_containers/main.tf

@@ -21,6 +21,8 @@ resource "google_cloud_run_v2_service" "default" {
   name     = "cloudrun-service-containers"
   location = "us-central1"
 
+  deletion_protection = false # set to "true" in production
+
   template {
     containers {
       image = "us-docker.pkg.dev/cloudrun/container/hello"

run/cloud_run_configuration_cpu/main.tf

@@ -21,6 +21,8 @@ resource "google_cloud_run_v2_service" "default" {
   name     = "cloudrun-service-cpu"
   location = "us-central1"
 
+  deletion_protection = false # set to "true" in production
+
   template {
     containers {
       image = "us-docker.pkg.dev/cloudrun/container/hello"