7060 Commits

Author SHA1 Message Date
Ludovico Magnocavallo
fb33752d8d Support context interpolation for PAM email recipients (#3903) 2026-04-24 18:29:31 +02:00
Alberto Oliveira da Silva
d22320fe62 fix: labels are 'key:value', plain strings, not arrays (#3902) 2026-04-24 07:18:58 +00:00
Liam Nesteroff
f5ee82ab3a Add DNS Armor support (#3874)
* add dns armor module

* add dns armor to pf

* added missing/optional attributes

* Update project schemas

* Set version file copyright year to 2025

* replace module with single resource

* moved into it's own file

* Added tests and defaulting enabled to false

* Add optional name parameter and updated schemas

* make dns_threat_detector.enabled optional in project schemas

---------

Co-authored-by: Luca Prete <preteluca@gmail.com>
2026-04-24 08:58:48 +02:00
Luca Prete
427d9a3298 Add more context to dns-response-policy module (#3899) 2026-04-23 13:49:30 +02:00
Luca Prete
275dd6a9ea Add enable_deletion_protection variable to agent engine module (#3898) 2026-04-22 14:05:09 +00:00
Simone Ruffilli
9eb69ffaa3 Add attachment groups factory to 2-networking (#3871)
* feat(fast): add attachment groups factory to 2-networking

Adds support for `google_compute_interconnect_attachment_group` in the `2-networking` stage.

By implementing this at the factory level alongside `vlan-attachments`, users can now declaratively aggregate VLAN attachments across multiple VPCs and natively reference them using the `$attachment_groups:<key>` context identifier in their configuration YAMLs.

Includes:
- Factory implementation in `factory-vlan-attachments.tf`.
- New JSON schemas for `attachment-groups` and updates to `vlan-attachments` to support context linkage.
- Test coverage with new inventory generations.

Fixes #3791
2026-04-22 10:22:50 +00:00
leszek-grudzien
ec39405352 Fixing folder-level essential contacts provisioning in project-factory module (#3892)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-04-22 09:59:29 +00:00
Hemanand
eaa420534b Add agent engine BYOC support (#3885)
* feat(agent-engine): add support for container and custom image specs

- Add container_config to deployment_files.
- Add image_spec with build_args to source_config.
- Make agent_framework optional and document supported values.
- Implement dynamic specs for container and source deployments.
- Add examples and automated tests for new deployment types.

* chore: update Google provider version to 7.28.0 across modules

Mechanical update of versions.tf and versions.tofu files using tools/versions.py.

* feat(agent-engine): refactor for container deployments and API alignment

- Group deployment settings under 'deployment_config' (renamed from 'deployment_files').
- Support container-based deployments via 'container_config' and 'image_spec'.
- Refactor 'source_files_config' (renamed from 'source_config') to include mutually exclusive 'python_spec' and 'image_spec'.
- Support 'developer_connect_config' as a source code type.
- Group engine settings (framework, env, secrets) under 'agent_engine_config'.
- Add support for 'memory_bank_config' persistent memory.
- Overhaul reasoning engine resources with dynamic blocks to match provider schema.
- Update all documentation examples, add TOC, and refresh test inventories.

* Update dynamic python_spec block and related example yamls

* Ignore changes setting for developer_connect_source under lifecycle management

* fixing review comments for `try` and default path for `source_path`

---------

Co-authored-by: Hemanand <hemr@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-21 17:46:20 +00:00
Simone Ruffilli
c8886b4d88 Support context interpolation for psc_allowed_consumer_projects in module cloudsql-instance (#3894) 2026-04-21 15:22:48 +00:00
Ludovico Magnocavallo
c296586c70 Release process skill and update to changelog tool (#3895)
* chore: update CHANGELOG.md links format

* feat: changelog bump without links list

* update changelog

* skills: add release-process skill

* tools: format changelog.py

* tools: fix double 'v' prefix in changelog unreleased link

* tools: fix get_release_date missing 'v' prefix

* skills: package release-process skill

* skills: remove packaged binary

* docs: link to release-process skill in contributing guide

* tools: safely handle empty release list in changelog

* tools: format changelog.py and update GEMINI.md guidelines
2026-04-21 16:39:58 +02:00
Julio Castillo
c995ffba07 Skip IAM for the Agent Gateway Service Agent (#3893) 2026-04-21 10:33:14 +00:00
Julio Castillo
13cd282d3b Add more context to automated reviews (#3891) 2026-04-20 18:55:08 +02:00
Ludovico Magnocavallo
25bd428d17 prep v55.1.0 2026-04-20 14:22:29 +00:00
Luca Prete
0abf021f04 Add more context and tests to agent-engine module (#3886) 2026-04-20 15:15:29 +02:00
Ludovico Magnocavallo
45949540ac Update guidelines for PR review comments (#3888)
Added a note about keeping PR comments concise and under the character limit.
2026-04-20 12:06:08 +02:00
Luca Prete
f2d4e937d1 Fix pre-commit hook (#3882) 2026-04-18 10:07:14 +02:00
Luca Prete
7a31a07df9 Add context to net-lb-app-int module (#3880) 2026-04-17 15:00:00 +02:00
Luca Prete
5ca68a3de0 Add context to net-lb-app-ext module (#3879) 2026-04-17 14:00:56 +02:00
Luca Prete
a851638f15 Add example for context on net-lb-int readme; updated copyright (#3878) 2026-04-17 09:43:53 +00:00
Luca Prete
cee2a48c87 Add context to net-address module (#3876) 2026-04-17 11:23:47 +02:00
Julio Castillo
ad912d795a Enable creation of organization- and folder-level service agents (#3877)
* Enable creation of organization- and folder-level service agents

* formatting

* Add folder test

* Add org tests

* linting

* more linting

* Fix tests
2026-04-16 17:35:17 +00:00
jta-ofr
2cb67b3532 Add data_api_access attribute to cloudsql-instance module (#3866)
* add data-api-access to clousql instance module

* fix readme

* updates to follow guidelines

* update test module

* add validation for data_api_access variable

* regenerate readme.md

* allow data_api_access to be nullable

* set default to null

* update readme

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-04-16 09:24:02 +00:00
Ludovico Magnocavallo
8076220648 Fix regression in compute-vm module (#3872)
* fix(compute-vm): purge key_revocation_action_type from tests and update schema link

* fix schema link
2026-04-15 17:17:42 +00:00
Ludovico Magnocavallo
11dba441f9 ci: remove automated-review label after PR review workflow (#3869) 2026-04-14 18:45:25 +02:00
Ludovico Magnocavallo
9ad27778c5 Set today's date in automated PR Review prompt 2026-04-14 16:06:54 +00:00
Ludovico Magnocavallo
0b5e6cc2ac fix automated PR review workflow for forks (#3867) 2026-04-14 16:22:20 +02:00
Ludovico Magnocavallo
9c40f56332 prep v55.0.0 2026-04-14 11:42:34 +00:00
Ludovico Magnocavallo
1cd7176a72 remove source md5 hash from inventories 2026-04-14 11:33:06 +00:00
Ludovico Magnocavallo
037fcb565b Merge remote-tracking branch 'origin/fast-dev' 2026-04-14 08:53:46 +00:00
Ludovico Magnocavallo
920eaf128b prep v54.4.0 2026-04-14 08:47:07 +00:00
kovagoadam
1050daff71 Add support for creating multiple workforce identity pools (#3846)
* Added support for multiple workforce identity pools

* Fixed organization module workforce identity federation outputs

* tfdoc

---------

Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-14 06:55:18 +00:00
davidspielmann
f7d74a6b1f fix: mark VPN module secret outputs as sensitive (#3864) 2026-04-13 18:05:06 +02:00
Wiktor Niesiobędzki
6bfa7077a2 Recreate subscription of topic replacement, fix tests 2026-04-13 14:47:37 +02:00
Sunil Singhal
36d270aa51 updating .name to .id to fix IAM replacement 2026-04-13 14:47:37 +02:00
Ludovico Magnocavallo
85b0871085 Add net-vpc-factory and starter-gcd dataset to 0-org-setup, fix context in net-vpc-factory (#3860)
* feat(fast/0-org-setup): integrate net-vpc-factory into stage 0

* initial starter dataset

* starter pack

* fix(fast/0-org-setup): correct factory vpcs paths definition and update test inventory

* feat(fast/0-org-setup): add VPC and subnet outputs and update stage tfvars

* test(fast/0-org-setup): update gcd starter defaults and regenerate inventory

* fix(modules/net-vpc-factory): remove internal defaults logic and pass context correctly

* fix typo in dataset fw rule, add missing boilerplate, set sane defaults for net vpc factory

* terraform fmt

* tfdoc, copyright year

* schema docs

* yamllint
2026-04-13 09:42:03 +02:00
Ludovico Magnocavallo
6847fae28d Automated PR Review (#3859)
* feat: add automated PR review workflow via Vertex AI Gemini

* fix: use workflow name instead of job_workflow_ref for WIF mapping

* fix: read review output from file to avoid JS syntax errors in github-script

* chore: remove redundant GITHUB_OUTPUT logic in PR review workflow

* chore: move configuration identifiers to GitHub Variables

* chore: upgrade model to 3.1-pro-preview and sanitize comment title

* fix: use full model path in vertex ai SDK for preview models

* fix: revert to gemini-2.5-pro due to Vertex API model resolution errors
2026-04-11 14:26:05 +02:00
Samuele Perticarari
55a847c008 feat(alloydb): add support for advanced query insights (observability_config) (#3856)
* Implemented advanced query insight in alloydb module

* Implemented readme example and test

* Fix TOC
2026-04-11 13:57:38 +02:00
Julio Castillo
1cb643b3c1 Decouple logging sinks in FAST stages 0 and 1 (#3858)
* Decouple logging sinks in FAST stages 0 and 1

* Fix ternary

* Fix tests

* Fix vpcsc tests

* Fix typo

* remove filenames
2026-04-11 00:14:15 +02:00
Ludovico Magnocavallo
ebc4669b4d streamline GEMINI file, drop agents rules (#3857) 2026-04-10 22:28:40 +02:00
Ludovico Magnocavallo
1e34ae3bc8 align vpc factory module factories_config to project factory (#3855) 2026-04-10 19:21:21 +02:00
Ludovico Magnocavallo
e72210f43e Remove leftover datasets for data platform (#3854) 2026-04-10 15:41:55 +00:00
Ludovico Magnocavallo
304dd73642 Update boilerplate and project services in 2-networking (#3852)
* chore(fast): update boilerplate in 2-networking yaml files

* chore(fast): replace stackdriver.googleapis.com with logging and monitoring services

* fix(net-vpc-factory): correct description for secondary subnet example
2026-04-10 15:20:22 +00:00
Ludovico Magnocavallo
ae9c94adf5 tools: add orphan doc detection to check_schema_docs.py and remove stale files (#3853) 2026-04-10 16:41:04 +02:00
Ludovico Magnocavallo
118b70d456 Remove the FAST data platform stage (#3851)
* chore: remove data platform stage and references

* fix checks
2026-04-10 10:19:20 +02:00
Julio Castillo
74d9e6020d Remove GKE and GCVE stages (#3850) 2026-04-10 09:51:21 +02:00
davidspielmann
8b2fb39efe use ephemeral google_client_config in secops provider (#3832)
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
2026-04-10 06:34:51 +00:00
Josh Myers
90b05a39a1 fix(bigquery-dataset): refresh_interval_ms should be a number (#3849)
Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-10 08:11:12 +02:00
Ludovico Magnocavallo
68f2f29144 fix(compute-vm): add position attribute to attached_disks to control ordering (#3848) 2026-04-09 21:34:15 +02:00
Ludovico Magnocavallo
fa1e390af7 prep v54.3.0 2026-04-09 12:30:25 +00:00
Hemanand
92d591a9b6 Add memory bank to modules/agent-engine (#3844)
* feat(agent-engine): add support for memory bank configuration

* refactor(agent-engine): remove source_path_override and revert to standard source_path

* provider version upgrade from 7.17 to 7.27

* docs(agent-engine): fix README validation and update tables

---------

Co-authored-by: Hemanand <hemr@google.com>
2026-04-08 17:09:27 +00:00