feat: add approval_required config to Cloud Build triggers

gcp/cloud-cloudbuild-trigger/main.tf

@@ -36,6 +36,10 @@ resource "google_cloudbuild_trigger" "trigger_main" {
   included_files = var.include
   ignored_files  = var.exclude
   disabled       = var.disabled
+
+  approval_config {
+    approval_required = var.approval_required
+  }
 }
 
 locals {

gcp/cloud-cloudbuild-trigger/variables.tf

@@ -119,3 +119,9 @@ variable "repository" {
   default     = null
   description = "Full resource ID of a google_cloudbuildv2_repository. If set, uses repository_event_config instead of github block."
 }
+
+variable "approval_required" {
+  type        = bool
+  default     = false
+  description = "If true, builds will require manual approval before executing."
+}

gcp/cloud-run-v2/main.tf

@@ -336,6 +336,7 @@ module "trigger_provision" {
   repository       = var.repository
 
   trigger_service_account = var.trigger_service_account
+  approval_required       = var.approval_required
 
   # Substitution variables for Cloud Build Trigger
   substitutions = merge({

gcp/cloud-run-v2/variables.tf

@@ -395,3 +395,9 @@ variable "repository" {
   default     = null
   description = "Full resource ID of a google_cloudbuildv2_repository. Passed through to the trigger module."
 }
+
+variable "approval_required" {
+  type        = bool
+  default     = false
+  description = "If true, Cloud Build trigger will require manual approval before executing."
+}