Implement FAST stage add-ons, refactor netsec as add-on (GoogleCloudPlatform#2800)

* security fixes

* change netsec to be a virtual stage in resman

* remove netsec bits from security stage, leave CAs in place

* netsec - security profile groups

* export regions to networking tfvars

* netsec - trust stores

* netsec refactor, untested

* netsec plan working

* netsec apply

* netsec apply errors

* netsec diagram

* update diagram

* move addon stages to addons folder

* remove top-level assets folder

* deprecate and remove fast plugins

* addon tests

* dynamic addon providers and cicd, untested

* stage 1 addons in stage 0, refactor stage 0 cicd

* addons and cicd refactor in stage 0 with tests

* refactor stage 0 cicd

* readd removed block

* small bootstrap cicd fixes

* refactor stage 1 cicd

* resman tests

* remove plugins from networking tests

* fix fast tests

* ngfw addon outputs

* try to fix unrelated tflint error in bootstrap

* remove common tfvars from bootstrap tests to fix linter errors

* tfdoc

* minimal readmes and links fixes

* tfdoc

* trim down test inventories

* fix plan test

* tfdoc

* allow configuring output files names

* fix tls inspection after adding count to project module

* comment fixes

* tfdoc

Author: ludoo

fast/addons/2-networking-test/outputs.tf

@@ -14,6 +14,7 @@
  * limitations under the License.
  */
 
+<<<<<<<< HEAD:fast/addons/2-networking-test/outputs.tf
 output "instance_addresses" {
   description = "Instance names and addresses."
   value = {
@@ -35,4 +36,21 @@ output "service_account_emails" {
   value = {
     for k, v in module.service-accounts : k => v.email
   }
+========
+locals {
+  project_id = try(module.project[0].project_id, var.project_id)
+}
+
+module "project" {
+  source         = "../../../modules/project"
+  count          = var._fast_debug.skip_datasources == true ? 0 : 1
+  name           = var.project_id
+  project_create = false
+  services = [
+    "certificatemanager.googleapis.com",
+    "networkmanagement.googleapis.com",
+    "networksecurity.googleapis.com",
+    "privateca.googleapis.com"
+  ]
+>>>>>>>> 630e7f40 (Implement FAST stage add-ons, refactor netsec as add-on (#2800)):fast/addons/2-networking-ngfw/main.tf
 }

fast/stages/2-security/certs.tf

@@ -1,4 +1,4 @@
-# Copyright 2024 Google LLC
+# Copyright 2025 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -11,8 +11,11 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
+<<<<<<<< HEAD:tests/fast/addons/a2_networking_test/tftest.yaml
 
 module: fast/addons/2-networking-test/
 
 tests:
   simple:
+========
+>>>>>>>> 630e7f40 (Implement FAST stage add-ons, refactor netsec as add-on (#2800)):tests/fast/addons/__init__.py