datadog_integration_gcp_sts Add Support for IsPerProjectQuotaEnabled for GCP STS Service Accounts (#616)

Co-authored-by: ci.datadog-api-spec <[email protected]>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-04-17 13:26:14.663007",
-            "spec_repo_commit": "12ab5180"
+            "regenerated": "2025-04-22 18:27:59.783493",
+            "spec_repo_commit": "2b6fa951"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-04-17 13:26:14.680427",
-            "spec_repo_commit": "12ab5180"
+            "regenerated": "2025-04-22 18:27:59.799536",
+            "spec_repo_commit": "2b6fa951"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -14676,6 +14676,13 @@ components:
             product for this service account. Note: This requires resource_collection_enabled
             to be set to true.'
           type: boolean
+        is_per_project_quota_enabled:
+          default: false
+          description: When enabled, Datadog applies the `X-Goog-User-Project` header,
+            attributing Google Cloud billing and quota usage to the project being
+            monitored rather than the default service account project.
+          example: true
+          type: boolean
         is_resource_change_collection_enabled:
           default: false
           description: When enabled, Datadog scans for all resource change data in

src/datadogV2/model/model_gcpsts_service_account_attributes.rs

@@ -30,6 +30,9 @@ pub struct GCPSTSServiceAccountAttributes {
     /// When enabled, Datadog will activate the Cloud Security Monitoring product for this service account. Note: This requires resource_collection_enabled to be set to true.
     #[serde(rename = "is_cspm_enabled")]
     pub is_cspm_enabled: Option<bool>,
+    /// When enabled, Datadog applies the `X-Goog-User-Project` header, attributing Google Cloud billing and quota usage to the project being monitored rather than the default service account project.
+    #[serde(rename = "is_per_project_quota_enabled")]
+    pub is_per_project_quota_enabled: Option<bool>,
     /// When enabled, Datadog scans for all resource change data in your Google Cloud environment.
     #[serde(rename = "is_resource_change_collection_enabled")]
     pub is_resource_change_collection_enabled: Option<bool>,
@@ -58,6 +61,7 @@ impl GCPSTSServiceAccountAttributes {
             cloud_run_revision_filters: None,
             host_filters: None,
             is_cspm_enabled: None,
+            is_per_project_quota_enabled: None,
             is_resource_change_collection_enabled: None,
             is_security_command_center_enabled: None,
             metric_namespace_configs: None,
@@ -97,6 +101,11 @@ impl GCPSTSServiceAccountAttributes {
         self
     }
 
+    pub fn is_per_project_quota_enabled(mut self, value: bool) -> Self {
+        self.is_per_project_quota_enabled = Some(value);
+        self
+    }
+
     pub fn is_resource_change_collection_enabled(mut self, value: bool) -> Self {
         self.is_resource_change_collection_enabled = Some(value);
         self
@@ -158,6 +167,7 @@ impl<'de> Deserialize<'de> for GCPSTSServiceAccountAttributes {
                 let mut cloud_run_revision_filters: Option<Vec<String>> = None;
                 let mut host_filters: Option<Vec<String>> = None;
                 let mut is_cspm_enabled: Option<bool> = None;
+                let mut is_per_project_quota_enabled: Option<bool> = None;
                 let mut is_resource_change_collection_enabled: Option<bool> = None;
                 let mut is_security_command_center_enabled: Option<bool> = None;
                 let mut metric_namespace_configs: Option<
@@ -213,6 +223,13 @@ impl<'de> Deserialize<'de> for GCPSTSServiceAccountAttributes {
                             is_cspm_enabled =
                                 Some(serde_json::from_value(v).map_err(M::Error::custom)?);
                         }
+                        "is_per_project_quota_enabled" => {
+                            if v.is_null() {
+                                continue;
+                            }
+                            is_per_project_quota_enabled =
+                                Some(serde_json::from_value(v).map_err(M::Error::custom)?);
+                        }
                         "is_resource_change_collection_enabled" => {
                             if v.is_null() {
                                 continue;
@@ -256,6 +273,7 @@ impl<'de> Deserialize<'de> for GCPSTSServiceAccountAttributes {
                     cloud_run_revision_filters,
                     host_filters,
                     is_cspm_enabled,
+                    is_per_project_quota_enabled,
                     is_resource_change_collection_enabled,
                     is_security_command_center_enabled,
                     metric_namespace_configs,

tests/scenarios/features/v2/gcp_integration.feature

@@ -34,14 +34,14 @@ Feature: GCP Integration
   @generated @skip @team:DataDog/gcp-integrations
   Scenario: Create a new entry for your service account returns "Bad Request" response
     Given new "CreateGCPSTSAccount" request
-    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "type": "gcp_service_account"}}
+    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_per_project_quota_enabled": true, "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "type": "gcp_service_account"}}
     When the request is sent
     Then the response status is 400 Bad Request
 
   @generated @skip @team:DataDog/gcp-integrations
   Scenario: Create a new entry for your service account returns "Conflict" response
     Given new "CreateGCPSTSAccount" request
-    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "type": "gcp_service_account"}}
+    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_per_project_quota_enabled": true, "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "type": "gcp_service_account"}}
     When the request is sent
     Then the response status is 409 Conflict
 
@@ -151,15 +151,15 @@ Feature: GCP Integration
   Scenario: Update STS Service Account returns "Bad Request" response
     Given new "UpdateGCPSTSAccount" request
     And request contains "account_id" parameter from "REPLACE.ME"
-    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "id": "d291291f-12c2-22g4-j290-123456678897", "type": "gcp_service_account"}}
+    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_per_project_quota_enabled": true, "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "id": "d291291f-12c2-22g4-j290-123456678897", "type": "gcp_service_account"}}
     When the request is sent
     Then the response status is 400 Bad Request
 
   @generated @skip @team:DataDog/gcp-integrations
   Scenario: Update STS Service Account returns "Not Found" response
     Given new "UpdateGCPSTSAccount" request
     And request contains "account_id" parameter from "REPLACE.ME"
-    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "id": "d291291f-12c2-22g4-j290-123456678897", "type": "gcp_service_account"}}
+    And body with value {"data": {"attributes": {"account_tags": [], "client_email": "[email protected]", "cloud_run_revision_filters": ["$KEY:$VALUE"], "host_filters": [], "is_per_project_quota_enabled": true, "is_resource_change_collection_enabled": true, "is_security_command_center_enabled": true, "metric_namespace_configs": [{"disabled": true, "id": "aiplatform"}]}, "id": "d291291f-12c2-22g4-j290-123456678897", "type": "gcp_service_account"}}
     When the request is sent
     Then the response status is 404 Not Found