v57.0.0

Breaking Changes

• provider: Minimum version bumped to 7.40.0. [#4060]
• modules/agent-gateway: Removed deprecated protocols variable (field deprecated upstream). [#4060]

What's Changed

• Add DNS peering support to agent-gateway module by @juliocc in #4060

Full Changelog: v56.3.0...v57.0.0

v56.3.0

What's Changed

• Consistent types for_each net-vpc-firewall in custom_rules dynamic blocks by @IrfanAnsari in #4023
• Enable use of tags with dynamic values created in 0-org-setup stage to tag folders/projects managed inside the stage. by @leszek-grudzien in #4028
• Pin GitHub Actions to secure commit SHAs by @sruffilli in #4031
• Bump body-parser and @google-cloud/functions-framework in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #4032
• Fix E2E Test for Cloud SQL PSC Auto Connections by @ludoo in #4033
• Fix malformed member in automation SA IAM roles by @ludoo in #4040
• Add network passthrough load balancer traffic policy to net-lb-int by @singhalss in #4042
• Supplementing missing IAM sections mapping in project-factory module. by @leszek-grudzien in #4044
• Avoid cascading permadiff with modules/billing-account threshold_rules by @juliocc in #4045
• Update fabric-builder skill with SSL bypass and provider alignment by @yunus in #4051
• Add support for context aware access to the org module and FAST stage 0 by @ludoo in #4046
• Add TPU VM and Queued Resource support to compute-vm module by @ludoo in #4054
• Minor fixes to 0-org-setup stage by @ludoo in #4059
• Fix folder schema by @ludoo in #4061

New Contributors

• @IrfanAnsari made their first contribution in #4023
• @singhalss made their first contribution in #4042
• @yunus made their first contribution in #4051

Full Changelog: v56.2.0...v56.3.0

v56.2.0

Breaking Changes

• modules/net-lb-proxy-int: Removed connection tracking and failover configurations as they are not supported by the underlying resources. [#4027]
• modules/net-lb-app-int: Removed failover configurations. [#4027]
• modules/net-lb-app-ext: Renamed the backend key to group inside backend_service_configs to standardize the backend interface. Removed failover configurations. [#4027]
• modules/net-lb-app-ext-regional: Renamed the backend key to group inside backend_service_configs. Replaced the vpc variable with vpc_config to match other regional modules. Removed failover configurations. [#4027]
• modules/net-lb-proxy-int: Removes address and port variables. Introduces the new forwarding_rules_config variable [#4024]
• modules/cloudsql-instance: network_config.connectivity.psc_allowed_consumer_projects obsoleted. [#3982]

What's Changed

• Add CODEOWNERS with maintainers by @ludoo in #3994
• Revert "Add CODEOWNERS with maintainers" by @ludoo in #3996
• Add support for regional firewall policies in 2-networking stage by @sruffilli in #3997
• Add containerd_config support to gke-nodepool by @iAbhishek91 in #3973
• Enable remaining PSC config options in modules/alloydb by @btuckVZ in #4000
• Enable Merge Queue and Remove Fast-Dev Branch by @juliocc in #4002
• Add new variables to spanner instance and database by @ajlopezn in #4001
• Bump qs from 6.14.2 to 6.15.2 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #4003
• Enable remaining PSC config options in modules/cloudsql-instance by @btuckVZ in #3982
• Bump GCP provider version to 7.33.0 by @juliocc in #4004
• Avoid tag binding permadiffs for project-factory service accounts by @juliocc in #4006
• Allow skipping default IAM roles for specific service agents in modules/project by @juliocc in #4005
• Support service_agents_config.skip_iam in project-factory and fast stages by @juliocc in #4007
• Remove 2-secops dependency from 3-secops-dev by @LunnosMp4 in #4011
• Update FAST stages README and cleanup instructions by @sruffilli in #4013
• Enable managed connection pooling in modules/alloydb by @btuckVZ in #4009
• Fix boot disk validation for attaching existing disk by @ludoo in #4015
• Add missing iam_deny_policies to organization schema by @kovagoadam in #4016
• Support per-replica tier override in modules/cloudsql-instance by @mrpawan-gupta in #4014
• Add net-lb-proxy-int-cross-region module and tests by @sruffilli in #4017
• Standardize label validation in JSON schemas by @sruffilli in #4021
• Add Multi-Region support to cloud-run-v2 module by @sruffilli in #4022
• Update and fix module net-lb-proxy-int by @LucaPrete in #4024
• Standardize net-lb family interfaces and features by @ludoo in #4027
• Add server TLS policy support to net-lb-app-int-cross-region by @LF3551 in #4025

New Contributors

• @LunnosMp4 made their first contribution in #4011
• @mrpawan-gupta made their first contribution in #4014
• @LF3551 made their first contribution in #4025

Full Changelog: v56.1.0...v56.2.0

v56.1.0

What's Changed

• Cosmetic and linter fixes by @sruffilli in #3981
• Add FAST Prerequisites Skill and Gemini Skill Test Harness by @ludoo in #3979
• Enhance testing harness stability and update repository documentation by @ludoo in #3983
• Add context to net-lb-proxy-int by @LucaPrete in #3988

Full Changelog: v56.0.0...v56.1.0

v56.0.0

Breaking Changes

• modules/agent-gateway: Added new agent-gateway module. [#3931]
• modules/project-factory: Context keys for project-level tags (both keys and values) now use the file key (pk) instead of the project name (pv.name), and the projects/ prefix has been removed. Any references in YAML files must be updated to the new format (e.g., $tag_values:core-0/exposure/public instead of $tag_values:projects/prod-dp-core-0/exposure/public). [#3957]

What's Changed

• Fix changelog categorization and enhance script by @ludoo in #3955
• Add ephemeral_storage_local_ssd_config support to modules/gke-nodepool by @iAbhishek91 in #3956
• Add project-factory based data platform dataset to FAST project factory stage by @ludoo in #3957
• Declare contents: read on linting and tests workflows by @arpitjain099 in #3960
• Add new agent-gateway module by @LucaPrete in #3931
• Add support for org-level service agents in stage 0 by @ludoo in #3962
• Support factories_config in project factory module data defaults and overrides. by @joshmyers in #3966
• Fix unresolved variables in starter-gcd and customizations tests by @ludoo in #3967
• feat(gke-nodepool): add flex_start support to node_config by @iAbhishek91 in #3964
• [Cloud SQL] Add and pass-through vars.users.database_roles by @btuckVZ in #3968
• [fix] Agent Engine unmanaged deployments don't include inline-source by @LucaPrete in #3969
• [Cloud SQL] Allow week5 maintenance update track by @btuckVZ in #3971
• Initial skill to compose Fabric modules by @juliocc in #3868
• Permit leading "dry_run:" in org-policy names by @lyricnz in #3975
• feat(gke-nodepool): add advanced_machine_features support to node_config by @iAbhishek91 in #3972
• Add IAM deny policies support by @kovagoadam in #3970
• Remove lifecycle ignore_changes from looker-core by @juliocc in #3977
• Add support for arbitrary addresses in FAST networking stage by @sruffilli in #3978

New Contributors

• @iAbhishek91 made their first contribution in #3956
• @arpitjain099 made their first contribution in #3960

Full Changelog: v55.4.0...v56.0.0

v55.4.0

Breaking Changes

• modules/cloudsql-instance: final_backup_config.retention_days default changed from 7 to null [#3919]
• terraform-google-provider: version updated to 7.29 which includes track_client_address field support for AlloyDB. [#3916]
• terraform-google-provider-beta: version updated to 7.29 which includes track_client_address field support for AlloyDB [#3916]
• modules: Bump minimum OpenTofu version to 1.11.00 [#3918]

What's Changed

• New generate_plan_summary.py tool by @juliocc in #3912
• Add example "Remote Docker registry with credentials" for artifact-registry by @muffl0n in #3887
• Bump minimum OpenTofu version to 1.11.00 by @juliocc in #3918
• Add PR title to automated review by @juliocc in #3917
• Add track_client_address field to modules/alloydb by @SamuPert in #3916
• Update final_backup_config.retention_days to allow null in cloudsql-instance by @singhal0306 in #3919
• Remove obsolete vpc_connector.create from cloud function v2 module's README by @ludoo in #3920
• Support org_policies in folders variable by @joshmyers in #3924
• Let tfdoc.py understand sensitive variables by @juliocc in #3925
• Mark VPN shared secret as sensitive by @davidspielmann in #3923
• Agent Engine: remove unnecesary permission after bug fix by @LucaPrete in #3926
• Allow simple project exclusions in project factory module by @ludoo in #3929
• Add Agent Engine identity type by @LucaPrete in #3875
• Enable terraform_naming_convention in tflint by @lyricnz in #3930
• Move org policies lower in the project factory dependency chain to support extended context by @LucaPrete in #3937
• Add support for static IPs NAT to 2-networking by @lopezvit in #3889
• Fix weekly_schedule config section for secondary instance in modules/alloydb by @btuckVZ in #3932
• Updated hardened README for missing policies by @lnesteroff in #3934
• Fix custom_roles not permeating when used in dns zone IAM by @lopezvit in #3938
• Add support for regional health checks to net-lb-app-int module by @ludoo in #3939
• Add support for min_instance_count in cloud-function-v2 module by @lyricnz in #3943
• Allow disabling logging and configuring optional fields in LB backend services by @ludoo in #3940
• Support common_repository in artifact-registry module. by @ludoo in #3944
• Add advanced_datapath_observability_config to gke-cluster-autopilot module by @ludoo in #3945
• Include url_map_id in output from LB creation by @lyricnz in #3947
• Add support for enhanced query insights on Cloud SQL instances by @ludoo in #3948
• Fix random test failures by ignoring .git in copytree by @ludoo in #3949
• Bump fast-uri from 3.1.0 to 3.1.2 in /modules/api-gateway/recipe-multi-region/function by @dependabot[bot] in #3950
• Fix cloud-function-v1 E2E test collision by @ludoo in #3952
• Fix E2E test failures for Cloud Run v2, KMS, Compute VM, and update GEMINI.md by @ludoo in #3953
• Add support for SCIM to workforce identity by @juliocc in #3951
• Fix test race condition by ignoring pytest-* directories by @ludoo in #3954

New Contributors

• @muffl0n made their first contribution in #3887
• @btuckVZ made their first contribution in #3932

Full Changelog: v55.3.0...v55.4.0

v55.3.0

Breaking Changes

• terraform-google-provider: version updated to 7.28 which includes BYOC support.
  terraform-google-provider-beta: version updated to 7.28 which includes BYOC support
  modules/agent-engine: updated variable name from deployment_files to deployment_config for introducing container_config. Evaluate recreation of resources before using this version. [#3885]

What's Changed

• Fix regressions in FAST v55.2.0 by @ludoo in #3910
• Remove data platform IAM grants from datasets by @wiktorn in #3911
• Add more context to automated reviews by @juliocc in #3891
• Skip IAM for the Agent Gateway Service Agent by @juliocc in #3893
• Release process skill and update to changelog tool by @ludoo in #3895
• Support context interpolation for psc_allowed_consumer_projects in module cloudsql-instance by @sruffilli in #3894
• Add agent engine BYOC support by @heyanand in #3885
• Fix folder-level essential contacts provisioning in project-factory by @leszek-grudzien in #3892
• Add attachment groups factory to 2-networking by @sruffilli in #3871
• Add enable_deletion_protection variable to agent engine module by @LucaPrete in #3898
• Add more context to dns-response-policy module by @LucaPrete in #3899
• Add DNS Armor support by @lnesteroff in #3874
• Update labels field in schemas from map(list(string))) to map(string) by @AlbertoOS in #3902
• Support context interpolation for PAM email recipients by @ludoo in #3903
• Add support for dynamic tags by @juliocc in #3897
• Support organization roles in all schemas by @AlbertoOS in #3904
• Fix failing CICD setup from bad provider file name in fast datasets by @brews in #3905
• Bump GH template action versions to avoid GHA Node 20 deprecation by @brews in #3906
• Add support for auto_update_policy to modules/cloud-function-v2 by @vsingh55 in #3881
• Fix regressions in FAST v55.2.0 by @ludoo in #3910
• Remove data platform IAM grants from datasets by @wiktorn in #3911

New Contributors

• @leszek-grudzien made their first contribution in #3892
• @AlbertoOS made their first contribution in #3902
• @brews made their first contribution in #3905
• @vsingh55 made their first contribution in #3881

Full Changelog: v55.1.0...v55.3.0

v55.1.0

What's Changed

• Fix automated PR review workflow for forks by @ludoo in #3867
• ci: remove automated-review label after PR review workflow by @ludoo in #3869
• Fix regression in compute-vm module by @ludoo in #3872
• Add data_api_access attribute to cloudsql-instance module by @jta-ofr in #3866
• Enable creation of organization- and folder-level service agents by @juliocc in #3877
• Add context to net-address module by @LucaPrete in #3876
• Add example for context on net-lb-int readme; updated copyright by @LucaPrete in #3878
• Add context to net-lb-app-ext module by @LucaPrete in #3879
• Add context to net-lb-app-int module by @LucaPrete in #3880
• Fix pre-commit hook by @LucaPrete in #3882
• Update guidelines for PR review comments by @ludoo in #3888
• Add more context and tests to agent-engine module by @LucaPrete in #3886

New Contributors

• @jta-ofr made their first contribution in #3866

Full Changelog: v55.0.0...v55.1.0

v55.0.0

Breaking Changes

• fast/stages/3-data-platform-dev: The Data Platform stage has been dreprecated and removed. [#3851]
• fast/stages/3-gcve-dev: The GKE stage has been dreprecated and removed. [#3850]
• fast/stages/3-gke-dev: The GCVE stage has been dreprecated and removed. [#3850]

What's Changed

• Remove GKE and GCVE stages by @juliocc in #3850
• Remove the FAST data platform stage by @ludoo in #3851
• Tools: add orphan doc detection to check_schema_docs.py by @ludoo in #3853
• Update boilerplate and project services in 2-networking by @ludoo in #3852
• Remove leftover datasets for data platform by @ludoo in #3854
• Align vpc factory module factories_config variable to project factory by @ludoo in #3855
• streamline GEMINI file, drop agents rules by @ludoo in #3857
• Decouple logging sinks in FAST stages 0 and 1 by @juliocc in #3858
• Automated PR Review by @ludoo in #3859
• Add net-vpc-factory and starter-gcd dataset to 0-org-setup, fix context in net-vpc-factory by @ludoo in #3860

Full Changelog: v54.4.0...v55.0.0

v54.4.0

Breaking Changes

• fast/stages/0-org-setup: Workforce Identity Federation configuration syntax have changed. [#3846]
• modules/organization: Workforce Identity Federation configuration syntax have changed. [#3846]
• modules/compute-vm: Disk attachment ordering is now evaluated globally across both zonal and regional disks, existing deployments mixing zonal and regional disks might see a planned shift in attachment order, which can be easily mitigated by applying the new position attribute to maintain the previous sequence. [#3848]

What's Changed

• Add position attribute to compute-vm module attached disks to control ordering by @ludoo in #3848
• fix(bigquery-dataset): refresh_interval_ms should be a number by @joshmyers in #3849
• use ephemeral google_client_config in secops provider by @davidspielmann in #3832
• feat(alloydb): add support for advanced query insights (observability_config) by @SamuPert in #3856
• [pubsub] updating .name to .id to fix IAM replacement by @wiktorn in #3862
• fix: mark VPN module secret outputs as sensitive by @davidspielmann in #3864
• Add support for creating multiple workforce identity pools by @kovagoadam in #3846

New Contributors

• @davidspielmann made their first contribution in #3832

Full Changelog: v54.3.0...v54.4.0