GoogleCloudPlatform/cloud-foundation-fabric v59.0.0

on GitHub

Breaking Changes

• modules/geap-agent-gateway: replaces some networking_config settings. [#4191]
• terraform-google-provider: version updated to 8.4.0
• Added support for agent identities in cloud_run_v2 services. [#4183]
• modules/agent-gateway: renamed to geap-agent-gateway [#4185]
• modules/agent-engine: renamed to modules/geap-agent-runtime, and the agent_engine_config variable renamed to agent_runtime_config. Update module sources and variable names accordingly. [#4160]
• modules/geap-agent-runtime: networking_config is no longer nullable and defaults to {}, with network_attachment_id now optional. Code passing networking_config = null explicitly must drop the argument or pass {}; the object form is unaffected. [#4160]
• modules/net-lb-app-ext: the recipe-cloud-run-iap recipe has been removed. Provider 8.0.0 removed google_iap_brand and google_iap_client following the shutdown of the IAP OAuth Admin APIs; OAuth brands and clients must now be configured in the Cloud Console. [#4159]
• modules/project-factory: the description attribute is removed from bucket definitions (buckets and automation.bucket, in both the project and folder schemas). It never had any effect, because google_storage_bucket has no description field, so the schema was advertising an attribute the GCS API cannot store.

No plan or apply breaks and no resource changes: the factory does no runtime schema validation, so a leftover description key in project YAML is simply ignored (verified against a real plan). The key is only rejected by schema validation in editors and in CI, so drop it when convenient. Eighteen in-repo datasets set one and are cleaned up in this PR.

Separately, log bucket description is now actually applied. A log_buckets entry that already sets one will show a one-time in-place update adding it to google_logging_project_bucket_config. [#4150]

• modules/gke-cluster-standard: Removed the deprecated desired_tier attribute from the enterprise_config block.
  modules/gke-cluster-autopilot: Removed the deprecated desired_tier attribute from the enterprise_config block. [#4129]

What's Changed

• modules/gke-cluster: export backup_plan_ids and remove deprecated variable by @singhal0306 in #4129
• Conditionally configure GKE backup schedule by @singhal0306 in #4136
• Bump qs from 6.15.2 to 6.16.0 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #4138
• Bump fast-uri from 3.1.5 to 3.1.7 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #4137
• Explicitly configure disabled IAP by @singhal0306 in #4139
• Enable rotation config and topics in modules/secret-manager by @dshah22 in #4141
• Add missing PSC auto DNS attributes to modules/cloudsql-instance by @YpNo in #4113
• Enable automated tests for README examples and fix CMEK documentation by @emailabhigarg in #4140
• Extended context with service_agents in 2-security stage by @kovagoadam in #4143
• Forward dropped bucket and log bucket attributes in project-factory by @sruffilli in #4150
• Add BigQuery dataset outputs to project factory by @sruffilli in #4151
• project-factory - SA IAM declared (only) via iam_bindings was not applied by @sruffilli in #4152
• Add support for service agents IAM on foreign projects to project module by @ludoo in #4153
• Fix custom role description handling for empty strings by @sruffilli in #4157
• Add deletion_policy support to modules/pubsub subscriptions by @nathancolhoun-signifyd in #4158
• Bump google provider to 8.2.0 by @juliocc in #4159
• Add IAP tunnel IAM to compute-vm module by @singhal0306 in #4128
• Fix module source in gke-cluster-standard PSC example by @juliocc in #4161
• Shard examples-modules test job across 4 runners by @juliocc in #4164
• Remove daily tag workflow by @juliocc in #4165
• Rename agent-engine to geap-agent-runtime and add Agent Gateway attachment by @LucaPrete in #4160
• Agent Gateway module: add service extensions and policies by @LucaPrete in #4170
• Add net-cloud-armor module by @sruffilli in #4144
• Add security policy context support to load balancer modules by @sruffilli in #4145
• Fix inverted null check on _effective_identity (#4172) by @mlutx in #4173
• Add geap-workbench module by @emailabhigarg in #4168
• Add fabric-importer skill by @sruffilli in #4176
• Add workflows module with scheduling, queueing, and event triggers by @emailabhigarg in #4163
• Fix module links in net-lb interface standardization ADR by @dshah22 in #4177
• Sort Recipe Directories in tfdoc by @LucaPrete in #4186
• Allow contact_email to be passed from context block by @hsharma250 in #4155
• Rename agent-gateway to geap-agent-gateway by @LucaPrete in #4185
• Add agent identity to Cloud Run service v2 by @LucaPrete in #4183
• Split trusted ranges into rules of up to 10 in net-cloud-armor/recipe-regional-waf by @sruffilli in #4188
• geap-agent-gateway: add support for connectivity templates by @LucaPrete in #4191
• Prep v59.0.0 by @LucaPrete in #4192

New Contributors

• @dshah22 made their first contribution in #4141
• @nathancolhoun-signifyd made their first contribution in #4158
• @mlutx made their first contribution in #4173
• @hsharma250 made their first contribution in #4155

Full Changelog: v58.0.0...v59.0.0