Skip to content

feat: add new Google Batch CE and credential features [COMP-1463]#604

Draft
ramonamela wants to merge 2 commits intomasterfrom
worktree-COMP-1463
Draft

feat: add new Google Batch CE and credential features [COMP-1463]#604
ramonamela wants to merge 2 commits intomasterfrom
worktree-COMP-1463

Conversation

@ramonamela
Copy link
Copy Markdown
Contributor

@ramonamela ramonamela commented Apr 8, 2026

Summary

Closes COMP-1463 — Make new platform features available via CLI.

  • WIF credentials: --mode=workload-identity with --service-account-email, --workload-identity-provider, --token-audience options for Google credentials (PR #10346)
  • Network tags: --network-tags (comma-separated) with --network / --subnetwork options and GCP format validation (PR #10416)
  • Machine types: --head-job-machine-type (single) and --compute-jobs-machine-type (comma-separated, wildcard support), mutually exclusive with instance templates (PRs #10488, #10532)
  • Boot disk image: --boot-disk-image with format validation for project paths, family paths, and batch short names (PR #10484)
  • Fusion Snapshots: --fusion-snapshots toggle requiring --fusion-v2 (PR #10751)

All features include CLI-side validation matching backend/frontend rules.

Pending

  • Bump tower-java-sdk to a version that includes the new fields on GoogleSecurityKeys (serviceAccountEmail, workloadIdentityProvider, tokenAudience) and GoogleBatchConfig (networkTags, computeJobsMachineType, bootDiskImage, fusionSnapshots)
  • Verify compilation and run tests after SDK bump

Test plan

  • Unit tests cover all happy paths and validation error paths
  • Tests will pass once SDK is bumped

🤖 Generated with Claude Code

ramonamela and others added 2 commits April 8, 2026 19:24
- WIF (Workload Identity Federation) support for Google credentials
  with --mode=workload-identity, --service-account-email,
  --workload-identity-provider, and --token-audience options
- Network tags (--network-tags) with VPC requirement and GCP format
  validation, plus --network and --subnetwork options
- Machine type selection: --head-job-machine-type (single) and
  --compute-jobs-machine-type (comma-separated list with wildcard
  support), mutually exclusive with instance templates
- Boot disk image (--boot-disk-image) with format validation for
  projects/*/global/images/*, family paths, and batch-* short names
- Fusion Snapshots (--fusion-snapshots) toggle requiring Fusion v2

All features include CLI validation matching backend/frontend rules.
Code will compile once tower-java-sdk is bumped to include the new
fields on GoogleSecurityKeys and GoogleBatchConfig.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Upgrade tower-java-sdk from 1.114.0 to 1.133.0 to include new fields
  on GoogleSecurityKeys and GoogleBatchConfig
- Add bash integration test script for all COMP-1463 features

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant