Updates serverless_neg_https_lb module version

Changes

• Updates serverless_neg_https_lb module version to v9.3.0 which is the first one allowing Terraform google provider version higher than v5:
  https://github.com/terraform-google-modules/terraform-google-lb-http/blob/f8ce32e245a89658ea1cba1ca5b3363ab2ded7af/versions.tf

Perimeter Module supported service and ingress/egress updates

Breaking Changes

• update vpc_sc_supported_services to be up to date with the current services listed from gcloud beta access-context-manager supported-services list, see commit for changes

Changes

• adds outputs for some of the local variables in the service_perimeter_regular module for debugging purposes
• Removes uneccessary try for checking if file exists (the variable defaults to the second value in the try block so it is uneccessary)
• Adds more unit tests to cover the existance/nonexistance of both ingress and egress policies

Fixes

• changes the format of ingress_policies and egress_policies local variables from a list to a map (with the index as the key) as for_each expects objects or sets.

CloudSQL security updates

Updates some defaults for the CloudSQL postgres module to resolve Snyk vulnerabilities

Breaking Changes

• Changes CloudSQL postgresql module's database_flags attribute type from list(object({ name = string value = string })) to map(string)

Changes

• CloudSQL postgresql modules require_ssl attribute defaults to true
• Adds default database flag values:

    {
      "cloudsql.iam_authentication" = "on"
      "log_min_messages" = "error"
    }

WIF bitbucket-pipeline configuration update

Fixes

Updated the workspace_uuid attribute in theworkload_identity_pool_providers variable, to no longer require the curly brackets, as the audience doesn't expect curly brackets, but the attribute_condition does

Workload Identity Federation Module

Features

Adds module which can be used for creating Workload Identity Pools and their Workload Identity Pool Providers, with optional default configurations for identity pool providers with commonly used external identity providers (e.g. github, bitbucket)

Add Option to enable https_redirect

Enable option to enable https_redirect (i.e. create a http load balancer which redirects to https one)

Cloud SQL server CA cert secret

Add Cloud SQL instance server_ca_cert as a Google Secret in postgresql module

Cloud HTTPS Load Balancer with Serverless NEGs

Adds composite module for deploying Cloud HTTPS Load Balancer with Serverless Network Endpoint Groups (NEGs)

Update PostgreSQL module and fix issues

• Updated PostgreSQL module to add backup_configuration block
• Fixed retention_unit and allocated_ip_range issues

New modules for CloudSQL instances, VPC peering CloudSQL services and handle secret management

Includes:

• Module for PostgreSQL instances and associated resources (gcp/databases/cloudsql/postgresql)
• Module for VPC peering Cloud SQL services (gcp/compute_engine/private_service_access)
• Module for secret management (gcp/secret_manager)
• Updates to the composite module for private PostgreSQL instances