Files
hunfabric/modules/bigquery-connection
Hemanand eaa420534b Add agent engine BYOC support (#3885)
* feat(agent-engine): add support for container and custom image specs

- Add container_config to deployment_files.
- Add image_spec with build_args to source_config.
- Make agent_framework optional and document supported values.
- Implement dynamic specs for container and source deployments.
- Add examples and automated tests for new deployment types.

* chore: update Google provider version to 7.28.0 across modules

Mechanical update of versions.tf and versions.tofu files using tools/versions.py.

* feat(agent-engine): refactor for container deployments and API alignment

- Group deployment settings under 'deployment_config' (renamed from 'deployment_files').
- Support container-based deployments via 'container_config' and 'image_spec'.
- Refactor 'source_files_config' (renamed from 'source_config') to include mutually exclusive 'python_spec' and 'image_spec'.
- Support 'developer_connect_config' as a source code type.
- Group engine settings (framework, env, secrets) under 'agent_engine_config'.
- Add support for 'memory_bank_config' persistent memory.
- Overhaul reasoning engine resources with dynamic blocks to match provider schema.
- Update all documentation examples, add TOC, and refresh test inventories.

* Update dynamic python_spec block and related example yamls

* Ignore changes setting for developer_connect_source under lifecycle management

* fixing review comments for `try` and default path for `source_path`

---------

Co-authored-by: Hemanand <hemr@google.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-21 17:46:20 +00:00
..
2025-10-16 15:15:36 +00:00
2026-04-18 10:07:14 +02:00
2025-10-16 15:15:36 +00:00

BigQuery Connection

This module allows creating a BigQuery connection.

Cloud SQL Connection

module "bigquery-connection" {
  source        = "./fabric/modules/bigquery-connection"
  project_id    = var.project_id
  location      = "EU"
  connection_id = "my-connection"
  friendly_name = "My Cloud SQL Connection"
  description   = "A connection to a Cloud SQL instance."

  connection_config = {
    cloud_sql = {
      instance_id = "my-instance-id"
      database    = "my-database"
      type        = "POSTGRES"
      credential = {
        username = "my-username"
        password = "my-password"
      }
    }
  }
  iam = {
    "roles/bigquery.connectionUser" = ["user:my-user@example.com"]
  }
}
# tftest modules=1 resources=2 inventory=cloudsql.yaml

Cloud SQL Connection with Cloud KMS

module "bigquery-connection" {
  source         = "./fabric/modules/bigquery-connection"
  project_id     = var.project_id
  location       = "EU"
  connection_id  = "my-connection"
  friendly_name  = "My BigQuery Connection"
  description    = "A connection to a Cloud SQL instance."
  encryption_key = "my-key"

  connection_config = {
    cloud_sql = {
      instance_id = "my-instance-id"
      database    = "my-database"
      type        = "POSTGRES"
      credential = {
        username = "my-username"
        password = "my-password"
      }
    }
  }
}
# tftest modules=1 resources=1 inventory=cloudsql_kms.yaml

Spanner Connection

module "bigquery-connection" {
  source        = "./fabric/modules/bigquery-connection"
  project_id    = var.project_id
  location      = "EU"
  connection_id = "my-connection"
  friendly_name = "My BigQuery Connection"
  description   = "A connection to a Spanner instance."

  connection_config = {
    cloud_spanner = {
      database        = "projects/my-project/instances/my-instance/databases/my-database"
      use_parallelism = true
      use_data_boost  = true
      max_parallelism = 2
    }
  }
  iam = {
    "roles/bigquery.connectionUser" = ["user:my-user@example.com"]
  }
}
# tftest modules=1 resources=2 inventory=spanner.yaml

Spanner Connection with Context interpolations

module "bigquery-connection" {
  source        = "./fabric/modules/bigquery-connection"
  project_id    = var.project_id
  location      = "EU"
  connection_id = "my-connection"
  friendly_name = "My BigQuery Connection"
  description   = "A connection to a Spanner instance."

  connection_config = {
    cloud_spanner = {
      database        = "projects/my-project/instances/my-instance/databases/my-database"
      use_parallelism = true
      use_data_boost  = true
      max_parallelism = 2
    }
  }
  context = {
    iam_principals = {
      myuser = "user:my-user@example.com"
    }
  }
  iam = {
    "roles/bigquery.connectionUser" = ["$iam_principals:myuser"]
  }
}
# tftest modules=1 resources=2 inventory=spanner_context.yaml

Variables

name description type required default
connection_id The ID of the connection. string
location The geographic location where the connection should reside. string
project_id The ID of the project in which the resource belongs. string
connection_config Connection properties. object({…}) {}
context Context-specific interpolations. object({…}) {}
description A description of the connection. string null
encryption_key The name of the KMS key used for encryption. string null
friendly_name A descriptive name for the connection. string null
iam IAM bindings for the connection in {ROLE => [MEMBERS]} format. map(list(string)) {}
iam_bindings Authoritative IAM bindings in {KEY => {role = ROLE, members = [], condition = {}}}. Keys are arbitrary. map(object({…})) {}
iam_bindings_additive Individual additive IAM bindings. Keys are arbitrary. map(object({…})) {}
iam_by_principals Authoritative IAM binding in {PRINCIPAL => [ROLES]} format. Principals need to be statically defined to avoid cycle errors. Merged internally with the iam variable. map(list(string)) {}

Outputs

name description sensitive
connection_config The connection configuration.
connection_id The ID of the BigQuery connection.
description The description of the connection.
location The location of the connection.