Release 1.155.1

• Special shout-outs to @MKand, @abhishekbin, @acpana, @ada-coder-bot, @anfernee, @anhdle-sso, @barney-s, @codebot-robot, @daedalus-agent-bot, @feynman-agent-bot, @gemmahou, @hopper-coder-bot, @ldanielmadariaga, @lntutor, @lovelace-coder-bot, @maqiuyujoyce, @neumann-coder-bot, @reviewbot-robot, @robertcodebot, @suwandim, and @walle-agent-bot for their contributions to this release.

New Alpha Resources (Direct Reconciler):

• DiscoveryEngineLicenseConfig

  • Manage Discovery Engine license configurations to manage application licenses.

• StorageManagedFolder

  • Manage GCS managed folders to apply granular access control policies to subsets of storage objects.

• VertexAITensorboardExperiment

  • Manage Vertex AI Tensorboard experiments to organize and track runs.

New Fields:

• BigtableTable

  • Added spec.automatedBackupPolicy field.

• CertificateManagerDNSAuthorization

  • Added spec.type field.

• ComputeForwardingRule

  • Added spec.target.redisClusterServiceAttachment field.

• ComputeURLMap

  • Added spec.tests[].expectedOutputURL field.
  • Added spec.tests[].expectedRedirectResponseCode field.

• ContainerCluster

  • Added spec.nodeConfig.kubeletConfig.imageGcLowThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageGcHighThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageMinimumGcAge field.
  • Added spec.nodeConfig.kubeletConfig.imageMaximumGcAge field.
  • Added spec.nodeConfig.containerdConfig field.
  • Added spec.inTransitEncryptionConfig field.
  • Added spec.disableL4LbFirewallReconciliation field.
  • Added spec.nodeConfig.resourceManagerTags field.
  • Added spec.nodePoolAutoConfig.resourceManagerTags field.

• ContainerNodePool

  • Added spec.nodeConfig.kubeletConfig.imageGcLowThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageGcHighThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageMinimumGcAge field.
  • Added spec.nodeConfig.kubeletConfig.imageMaximumGcAge field.
  • Added spec.nodeConfig.containerdConfig field.
  • Added spec.nodeConfig.resourceManagerTags field.

• StorageBucket

  • Added spec.autoclass.terminalStorageClass field.
  • Added status.observedState.storageClass field.

Reconciliation Improvements

We have added support for direct reconciliation to more resources, with opt-in
behaviour. The API is unchanged. To use the direct reconciler, add the
alpha.cnrm.cloud.google.com/reconciler: direct annotation to the corresponding
Config Connector object. The following resources now have direct reconciliation
support (and we list some of the issues that this fixes):

• NetworkServicesHTTPRoute
  • Support direct reconciliation (opt-in).

New Features:

• Configurable metrics server address: Made the manager's built-in metrics server bind address configurable.
• Brownfield state comparison: Added a generic helper function to compare desired and actual states in brownfield resources, improving reconciliation reliability.
• Irregular shortname pluralization: Added support for irregular shortname pluralization of "corpus" to "corpora".

Bug Fixes:

• ComposerEnvironment

  • Improved reconciliation, diffing, and update logic for ComposerEnvironment in the direct controller. (#12364)
  • Skip the update of a ComposerEnvironment when the state of the underlying GCP Composer environment is not RUNNING. (#12365)

• ComputeReservation

  • Ignore diff for specificReservation.inUseCount to prevent infinite/unwanted reconciliations.

• RedisInstance

  • Marked MaintenanceSchedule field as output only to align with GCP's behavior.

• SQLInstance

  • Fixed legacy fuzzer roundtrip mismatch for PscAutoConnectionPolicyEnabled.

• CloudFunctions2Function

  • Declared source fields mutable-but-unreadable to avoid spurious diffs.