v56.2.0

Breaking Changes

• modules/net-lb-proxy-int: Removed connection tracking and failover configurations as they are not supported by the underlying resources. [#4027]
• modules/net-lb-app-int: Removed failover configurations. [#4027]
• modules/net-lb-app-ext: Renamed the backend key to group inside backend_service_configs to standardize the backend interface. Removed failover configurations. [#4027]
• modules/net-lb-app-ext-regional: Renamed the backend key to group inside backend_service_configs. Replaced the vpc variable with vpc_config to match other regional modules. Removed failover configurations. [#4027]
• modules/net-lb-proxy-int: Removes address and port variables. Introduces the new forwarding_rules_config variable [#4024]
• modules/cloudsql-instance: network_config.connectivity.psc_allowed_consumer_projects obsoleted. [#3982]

What's Changed

• Add CODEOWNERS with maintainers by @ludoo in #3994
• Revert "Add CODEOWNERS with maintainers" by @ludoo in #3996
• Add support for regional firewall policies in 2-networking stage by @sruffilli in #3997
• Add containerd_config support to gke-nodepool by @iAbhishek91 in #3973
• Enable remaining PSC config options in modules/alloydb by @btuckVZ in #4000
• Enable Merge Queue and Remove Fast-Dev Branch by @juliocc in #4002
• Add new variables to spanner instance and database by @ajlopezn in #4001
• Bump qs from 6.14.2 to 6.15.2 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #4003
• Enable remaining PSC config options in modules/cloudsql-instance by @btuckVZ in #3982
• Bump GCP provider version to 7.33.0 by @juliocc in #4004
• Avoid tag binding permadiffs for project-factory service accounts by @juliocc in #4006
• Allow skipping default IAM roles for specific service agents in modules/project by @juliocc in #4005
• Support service_agents_config.skip_iam in project-factory and fast stages by @juliocc in #4007
• Remove 2-secops dependency from 3-secops-dev by @LunnosMp4 in #4011
• Update FAST stages README and cleanup instructions by @sruffilli in #4013
• Enable managed connection pooling in modules/alloydb by @btuckVZ in #4009
• Fix boot disk validation for attaching existing disk by @ludoo in #4015
• Add missing iam_deny_policies to organization schema by @kovagoadam in #4016
• Support per-replica tier override in modules/cloudsql-instance by @mrpawan-gupta in #4014
• Add net-lb-proxy-int-cross-region module and tests by @sruffilli in #4017
• Standardize label validation in JSON schemas by @sruffilli in #4021
• Add Multi-Region support to cloud-run-v2 module by @sruffilli in #4022
• Update and fix module net-lb-proxy-int by @LucaPrete in #4024
• Standardize net-lb family interfaces and features by @ludoo in #4027
• Add server TLS policy support to net-lb-app-int-cross-region by @LF3551 in #4025

New Contributors

• @LunnosMp4 made their first contribution in #4011
• @mrpawan-gupta made their first contribution in #4014
• @LF3551 made their first contribution in #4025

Full Changelog: v56.1.0...v56.2.0

v56.1.0

What's Changed

• Cosmetic and linter fixes by @sruffilli in #3981
• Add FAST Prerequisites Skill and Gemini Skill Test Harness by @ludoo in #3979
• Enhance testing harness stability and update repository documentation by @ludoo in #3983
• Add context to net-lb-proxy-int by @LucaPrete in #3988

Full Changelog: v56.0.0...v56.1.0

v56.0.0

Breaking Changes

• modules/agent-gateway: Added new agent-gateway module. [#3931]
• modules/project-factory: Context keys for project-level tags (both keys and values) now use the file key (pk) instead of the project name (pv.name), and the projects/ prefix has been removed. Any references in YAML files must be updated to the new format (e.g., $tag_values:core-0/exposure/public instead of $tag_values:projects/prod-dp-core-0/exposure/public). [#3957]

What's Changed

• Fix changelog categorization and enhance script by @ludoo in #3955
• Add ephemeral_storage_local_ssd_config support to modules/gke-nodepool by @iAbhishek91 in #3956
• Add project-factory based data platform dataset to FAST project factory stage by @ludoo in #3957
• Declare contents: read on linting and tests workflows by @arpitjain099 in #3960
• Add new agent-gateway module by @LucaPrete in #3931
• Add support for org-level service agents in stage 0 by @ludoo in #3962
• Support factories_config in project factory module data defaults and overrides. by @joshmyers in #3966
• Fix unresolved variables in starter-gcd and customizations tests by @ludoo in #3967
• feat(gke-nodepool): add flex_start support to node_config by @iAbhishek91 in #3964
• [Cloud SQL] Add and pass-through vars.users.database_roles by @btuckVZ in #3968
• [fix] Agent Engine unmanaged deployments don't include inline-source by @LucaPrete in #3969
• [Cloud SQL] Allow week5 maintenance update track by @btuckVZ in #3971
• Initial skill to compose Fabric modules by @juliocc in #3868
• Permit leading "dry_run:" in org-policy names by @lyricnz in #3975
• feat(gke-nodepool): add advanced_machine_features support to node_config by @iAbhishek91 in #3972
• Add IAM deny policies support by @kovagoadam in #3970
• Remove lifecycle ignore_changes from looker-core by @juliocc in #3977
• Add support for arbitrary addresses in FAST networking stage by @sruffilli in #3978

New Contributors

• @iAbhishek91 made their first contribution in #3956
• @arpitjain099 made their first contribution in #3960

Full Changelog: v55.4.0...v56.0.0

v55.4.0

Breaking Changes

• modules/cloudsql-instance: final_backup_config.retention_days default changed from 7 to null [#3919]
• terraform-google-provider: version updated to 7.29 which includes track_client_address field support for AlloyDB. [#3916]
• terraform-google-provider-beta: version updated to 7.29 which includes track_client_address field support for AlloyDB [#3916]
• modules: Bump minimum OpenTofu version to 1.11.00 [#3918]

What's Changed

• New generate_plan_summary.py tool by @juliocc in #3912
• Add example "Remote Docker registry with credentials" for artifact-registry by @muffl0n in #3887
• Bump minimum OpenTofu version to 1.11.00 by @juliocc in #3918
• Add PR title to automated review by @juliocc in #3917
• Add track_client_address field to modules/alloydb by @SamuPert in #3916
• Update final_backup_config.retention_days to allow null in cloudsql-instance by @singhal0306 in #3919
• Remove obsolete vpc_connector.create from cloud function v2 module's README by @ludoo in #3920
• Support org_policies in folders variable by @joshmyers in #3924
• Let tfdoc.py understand sensitive variables by @juliocc in #3925
• Mark VPN shared secret as sensitive by @davidspielmann in #3923
• Agent Engine: remove unnecesary permission after bug fix by @LucaPrete in #3926
• Allow simple project exclusions in project factory module by @ludoo in #3929
• Add Agent Engine identity type by @LucaPrete in #3875
• Enable terraform_naming_convention in tflint by @lyricnz in #3930
• Move org policies lower in the project factory dependency chain to support extended context by @LucaPrete in #3937
• Add support for static IPs NAT to 2-networking by @lopezvit in #3889
• Fix weekly_schedule config section for secondary instance in modules/alloydb by @btuckVZ in #3932
• Updated hardened README for missing policies by @lnesteroff in #3934
• Fix custom_roles not permeating when used in dns zone IAM by @lopezvit in #3938
• Add support for regional health checks to net-lb-app-int module by @ludoo in #3939
• Add support for min_instance_count in cloud-function-v2 module by @lyricnz in #3943
• Allow disabling logging and configuring optional fields in LB backend services by @ludoo in #3940
• Support common_repository in artifact-registry module. by @ludoo in #3944
• Add advanced_datapath_observability_config to gke-cluster-autopilot module by @ludoo in #3945
• Include url_map_id in output from LB creation by @lyricnz in #3947
• Add support for enhanced query insights on Cloud SQL instances by @ludoo in #3948
• Fix random test failures by ignoring .git in copytree by @ludoo in #3949
• Bump fast-uri from 3.1.0 to 3.1.2 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #3950
• Fix cloud-function-v1 E2E test collision by @ludoo in #3952
• Fix E2E test failures for Cloud Run v2, KMS, Compute VM, and update GEMINI.md by @ludoo in #3953
• Add support for SCIM to workforce identity by @juliocc in #3951
• Fix test race condition by ignoring pytest-* directories by @ludoo in #3954

New Contributors

• @muffl0n made their first contribution in #3887
• @btuckVZ made their first contribution in #3932

Full Changelog: v55.3.0...v55.4.0

v55.3.0

Breaking Changes

• terraform-google-provider: version updated to 7.28 which includes BYOC support.
  terraform-google-provider-beta: version updated to 7.28 which includes BYOC support
  modules/agent-engine: updated variable name from deployment_files to deployment_config for introducing container_config. Evaluate recreation of resources before using this version. [#3885]

What's Changed

• Fix regressions in FAST v55.2.0 by @ludoo in #3910
• Remove data platform IAM grants from datasets by @wiktorn in #3911
• Add more context to automated reviews by @juliocc in #3891
• Skip IAM for the Agent Gateway Service Agent by @juliocc in #3893
• Release process skill and update to changelog tool by @ludoo in #3895
• Support context interpolation for psc_allowed_consumer_projects in module cloudsql-instance by @sruffilli in #3894
• Add agent engine BYOC support by @heyanand in #3885
• Fix folder-level essential contacts provisioning in project-factory by @leszek-grudzien in #3892
• Add attachment groups factory to 2-networking by @sruffilli in #3871
• Add enable_deletion_protection variable to agent engine module by @LucaPrete in #3898
• Add more context to dns-response-policy module by @LucaPrete in #3899
• Add DNS Armor support by @lnesteroff in #3874
• Update labels field in schemas from map(list(string))) to map(string) by @AlbertoOS in #3902
• Support context interpolation for PAM email recipients by @ludoo in #3903
• Add support for dynamic tags by @juliocc in #3897
• Support organization roles in all schemas by @AlbertoOS in #3904
• Fix failing CICD setup from bad provider file name in fast datasets by @brews in #3905
• Bump GH template action versions to avoid GHA Node 20 deprecation by @brews in #3906
• Add support for auto_update_policy to modules/cloud-function-v2 by @vsingh55 in #3881
• Fix regressions in FAST v55.2.0 by @ludoo in #3910
• Remove data platform IAM grants from datasets by @wiktorn in #3911

New Contributors

• @leszek-grudzien made their first contribution in #3892
• @AlbertoOS made their first contribution in #3902
• @brews made their first contribution in #3905
• @vsingh55 made their first contribution in #3881

Full Changelog: v55.1.0...v55.3.0

v55.1.0

What's Changed

• Fix automated PR review workflow for forks by @ludoo in #3867
• ci: remove automated-review label after PR review workflow by @ludoo in #3869
• Fix regression in compute-vm module by @ludoo in #3872
• Add data_api_access attribute to cloudsql-instance module by @jta-ofr in #3866
• Enable creation of organization- and folder-level service agents by @juliocc in #3877
• Add context to net-address module by @LucaPrete in #3876
• Add example for context on net-lb-int readme; updated copyright by @LucaPrete in #3878
• Add context to net-lb-app-ext module by @LucaPrete in #3879
• Add context to net-lb-app-int module by @LucaPrete in #3880
• Fix pre-commit hook by @LucaPrete in #3882
• Update guidelines for PR review comments by @ludoo in #3888
• Add more context and tests to agent-engine module by @LucaPrete in #3886

New Contributors

• @jta-ofr made their first contribution in #3866

Full Changelog: v55.0.0...v55.1.0

v55.0.0

Breaking Changes

• fast/stages/3-data-platform-dev: The Data Platform stage has been dreprecated and removed. [#3851]
• fast/stages/3-gcve-dev: The GKE stage has been dreprecated and removed. [#3850]
• fast/stages/3-gke-dev: The GCVE stage has been dreprecated and removed. [#3850]

What's Changed

• Remove GKE and GCVE stages by @juliocc in #3850
• Remove the FAST data platform stage by @ludoo in #3851
• Tools: add orphan doc detection to check_schema_docs.py by @ludoo in #3853
• Update boilerplate and project services in 2-networking by @ludoo in #3852
• Remove leftover datasets for data platform by @ludoo in #3854
• Align vpc factory module factories_config variable to project factory by @ludoo in #3855
• streamline GEMINI file, drop agents rules by @ludoo in #3857
• Decouple logging sinks in FAST stages 0 and 1 by @juliocc in #3858
• Automated PR Review by @ludoo in #3859
• Add net-vpc-factory and starter-gcd dataset to 0-org-setup, fix context in net-vpc-factory by @ludoo in #3860

Full Changelog: v54.4.0...v55.0.0

v54.4.0

Breaking Changes

• fast/stages/0-org-setup: Workforce Identity Federation configuration syntax have changed. [#3846]
• modules/organization: Workforce Identity Federation configuration syntax have changed. [#3846]
• modules/compute-vm: Disk attachment ordering is now evaluated globally across both zonal and regional disks, existing deployments mixing zonal and regional disks might see a planned shift in attachment order, which can be easily mitigated by applying the new position attribute to maintain the previous sequence. [#3848]

What's Changed

• Add position attribute to compute-vm module attached disks to control ordering by @ludoo in #3848
• fix(bigquery-dataset): refresh_interval_ms should be a number by @joshmyers in #3849
• use ephemeral google_client_config in secops provider by @davidspielmann in #3832
• feat(alloydb): add support for advanced query insights (observability_config) by @SamuPert in #3856
• [pubsub] updating .name to .id to fix IAM replacement by @wiktorn in #3862
• fix: mark VPN module secret outputs as sensitive by @davidspielmann in #3864
• Add support for creating multiple workforce identity pools by @kovagoadam in #3846

New Contributors

• @davidspielmann made their first contribution in #3832

Full Changelog: v54.3.0...v54.4.0

v54.3.0

Breaking Changes

• terraform-google-provider & terraform-google-provider-beta: version updated to 7.27 to incorporate updates from provider to enable the Memory Bank configuration [#3844]
• modules/agent-engine: This module utilizes the latest google-beta provider in place of the google provider to support Memory Bank configurations for agents deployment. This change may cause resource recreation for existing deployments. Exercise caution while using this version. [#3844]
• modules/ai-applications: Updates the outputs of the module, according to its latest implementation. [#3841]
• modules/ai-applications: supports the creation of regional Dialogflow CX deployments and full-capability agents. [#3834]

What's Changed

• Remove hcl2 python dependency by @juliocc in #3836
• Add support for bucket custom_placement_config to project-factory by @lyricnz in #3839
• Update ai-applications module to support dialogflow-cx (fully capability and regional) agents by @LucaPrete in #3834
• Update outputs of AI Applications module by @LucaPrete in #3841
• Enforce schema docs in linting by @ludoo in #3843
• Add toggle to tfdoc to remove type hints by @juliocc in #3842
• Add memory bank to modules/agent-engine by @heyanand in #3844

New Contributors

• @heyanand made their first contribution in #3844

Full Changelog: v54.2.0...v54.3.0

v54.2.0

Breaking Changes

• fast/modules/net-vlan-attachment: var.router_config.bfd has been moved to var.bgp_peer.bfd [#3827]
• modules/workstation-cluster: private config is no longer implicitly enabled, check a plan diff before applying using this version. [#3821]

What's Changed

• Fix typo in example by @nmcguirt in #3783
• Add context support to artifact-registry, net-lb-app-int, cloudsql modules by @ludoo in #3784
• Fix Cloud SQL E2E test by @wiktorn in #3786
• Add context support to vlan-attachments by @sruffilli in #3787
• Allow compute-vm disks to have custom names by @singhal0306 in #3792
• net-vlan-attachments in 2-networking by @sruffilli in #3789
• feat: Add new compliance regime options for Assured Workloads by @SamuPert in #3794
• Add support for cipher suite configuration on net-vpn-* modules by @davidferguson-telana in #3790
• Add information about CI/CD setup for other stages by @wiktorn in #3797
• Use e2-micro instead of f1-micro as default for compute-vm by @wiktorn in #3798
• Hardened datasets minor fixes by @vannicktrinquier in #3795
• Add support of organizational based service agents in VPC-SC stage by @vannicktrinquier in #3802
• Fix network "hub-and-spokes-vpns" dataset by @SamuPert in #3800
• Alloydb module: enable 1-72 vcpu for C4A by @AndreaMontemaggiore1 in #3799
• Ignored condition attribute in IAM tag bindings within the organisation/project modules by @jnahelou in #3762
• Clarify documentation wrt. backend service vs backend by @rosmo in #3804
• [#3806] Fix Agent Engine class methods: update variable to optional(string) by @LucaPrete in #3808
• Fix Logging folder settings folder by @joshmyers in #3811
• Compute VM module refactor by @ludoo in #3805
• fix(secure-source-manager-instance): when importing a repo do not force default_branch by @lopezvit in #3812
• Bump requests from 2.32.4 to 2.33.0 in /fast/project-templates/secops-anonymization-pipeline/source by @dependabot[bot] in #3813
• Update the CONTRIBUTING guide by @ludoo in #3814
• Implement group membership in compute-vm module by @ludoo in #3816
• bugfix: Fix Apigee organization properties assignments by @SamuPert in #3817
• Refactor agent documentation and establish core guidelines by @ludoo in #3820
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #3823
• Allow private_cluster_config to be null in workstation-cluster module by @ludoo in #3821
• Add support for max_instance_request_concurrency in cloud-functions-v2 module by @ludoo in #3822
• reprovision IAM only on function replacement by @wiktorn in #3825
• Bump tftest version by @ludoo in #3826
• feat(2-networking): add NS And DS record dynamically from sub-zones records by @lopezvit in #3818
• Support project_id context for metric_scopes by @ludoo in #3828
• Add support for attachment-level BGP sessions and candidate_*_router_ip_address by @sruffilli in #3827
• Add support for service agents to project factory service accounts IAM by @ludoo in #3830

New Contributors

• @nmcguirt made their first contribution in #3783
• @davidferguson-telana made their first contribution in #3790
• @AndreaMontemaggiore1 made their first contribution in #3799

Full Changelog: v54.0.0...v54.2.0