Add agent identity to CloudRunv2 services and jobs

[LucaPrete]

Adds support for the Cloud Run Agent Platform features (Preview): functional_type on the Service and Job, and workload_identity_config
(identity_type, identity_certificate_enabled, identity) on their respective templates.

cloudrunv2: added `functional_type` and `template.workload_identity_config` fields to `google_cloud_run_v2_service` resource (beta)

cloudrunv2: added `functional_type` and `template.template.workload_identity_config` fields to `google_cloud_run_v2_job` resource (beta)

[github-actions]

Googlers: For automatic test runs see go/terraform-auto-test-runs.

@melinath, a repository maintainer, has been assigned to review your changes. If you have not received review feedback within 2 business days, please leave a comment on this PR asking them to take a look.

You can help make sure that review is quick by doing a self-review and by running impacted tests locally.

[modular-magician]

Hi there, I'm the Modular magician. I've detected the following information about your changes for commit f3f2d30:

Diff report

Your PR generated the following diffs in downstream repositories:

Repository	Diff Link	Changes
google provider	View Diff	2 files changed, 152 insertions(+)
google-beta provider	View Diff	8 files changed, 742 insertions(+)
terraform-google-conversion	View Diff	2 files changed, 130 insertions(+)

Missing test report

Your PR includes resource fields which are not covered by any test.

Resource: google_cloud_run_v2_job (44 total tests)
Please add an acceptance test which includes these fields. The test should include the following:

resource "google_cloud_run_v2_job" "primary" {
  template {
    template {
      workload_identity_config {
        identity = # value needed
      }
    }
  }
}

Resource: google_cloud_run_v2_service (92 total tests)
Please add an acceptance test which includes these fields. The test should include the following:

resource "google_cloud_run_v2_service" "primary" {
  template {
    workload_identity_config {
      identity = # value needed
    }
  }
}

Test report

Analytics

Total Tests	Passed	Skipped	Affected
100	88	9	3

Affected Service Packages

• cloudrunv2

Learn how VCR tests work

---

Step 1: Replaying Mode

Action taken

Found 3 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit.

Click here to see the affected tests

• TestAccCloudRunV2Job_cloudrunv2JobAgentIdentityExample
• TestAccCloudRunV2Service_cloudrunv2ServiceAgentIdentityExample
• TestAccCloudRunV2Service_cloudrunv2ServiceMcpServerExample

View the replaying VCR build log

---

Step 2: Recording Mode

Recording Mode	Replaying Rerun	Test Name
✅ Log	✅	TestAccCloudRunV2Job_cloudrunv2JobAgentIdentityExample
✅ Log	✅	TestAccCloudRunV2Service_cloudrunv2ServiceAgentIdentityExample
✅ Log	✅	TestAccCloudRunV2Service_cloudrunv2ServiceMcpServerExample

🟢 All tests passed!

View the recording VCR build log or the debug logs folder for detailed results.

@LucaPrete, @melinath, @ian-mi VCR tests complete for f3f2d30!

[modular-magician]

Hi there, I'm the Modular magician. I've detected the following information about your changes for commit 4b28b67:

Diff report

Your PR generated the following diffs in downstream repositories:

Repository	Diff Link	Changes
google provider	View Diff	2 files changed, 152 insertions(+)
google-beta provider	View Diff	8 files changed, 742 insertions(+)
terraform-google-conversion	View Diff	2 files changed, 130 insertions(+)

Missing test report

Your PR includes resource fields which are not covered by any test.

Resource: google_cloud_run_v2_job (44 total tests)
Please add an acceptance test which includes these fields. The test should include the following:

resource "google_cloud_run_v2_job" "primary" {
  template {
    template {
      workload_identity_config {
        identity = # value needed
      }
    }
  }
}

Resource: google_cloud_run_v2_service (92 total tests)
Please add an acceptance test which includes these fields. The test should include the following:

resource "google_cloud_run_v2_service" "primary" {
  template {
    workload_identity_config {
      identity = # value needed
    }
  }
}

Test report

Analytics

Total Tests	Passed	Skipped	Affected
100	91	9	0

Affected Service Packages

• cloudrunv2

Learn how VCR tests work

---

Step 1: Replaying Mode

🟢 All tests passed in Replaying mode! No Recording was needed.

View the replaying VCR build log

@LucaPrete, @melinath, @ian-mi VCR tests complete for 4b28b67!

[melinath]

We’re currently requesting a change in process for Googlers (or individuals on behalf of Googlers) contributing changes to the Terraform Provider for Google Cloud. Please see go/terraform-ssp-adjustment for details.