v0.10.0

iam

• New cluster_viewer_members input: additive roles/container.clusterViewer binding for users who need GKE credentials, with access inside the cluster scoped by Kubernetes RBAC.
• developer custom role: exclude eventarc.multiProjectSources.collectGoogleApiEvents, which GCP rejects in project-level custom roles and which made every apply fail with Error 400.
• terraform-google-modules/iam bumped to ~> 8.3.

Full diff: #8

v0.9.0

Features

• iam: add optional read-only agent-viewer service account (#6) — a keyless identity for AI agents / MCP servers (impersonation, no key). Gated behind create_agent_viewer (default false), roles/viewer by default (overridable via agent_viewer_roles), with a roles/iam.serviceAccountTokenCreator binding for agent_viewer_members. New output: agent_viewer_email.

Docs

• regenerate all module READMEs with terraform-docs v0.24.0 and bump the pinned terraform-docs-go pre-commit hook v0.16.0 → v0.24.0 (#7). Also syncs a few stale doc entries to current code.

Full Changelog: v0.8.0...v0.9.0

v0.4.0

Full Changelog: v0.3.1...v0.4.0

v0.3.1

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Full Changelog: v0.1.0...v0.2.0