Exposing set action on Terraform V2 (#3099)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-06-03 09:24:16.161506",
-            "spec_repo_commit": "5906d277"
+            "regenerated": "2025-06-04 09:10:35.424028",
+            "spec_repo_commit": "6c99bb98"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-06-03 09:24:16.179321",
-            "spec_repo_commit": "5906d277"
+            "regenerated": "2025-06-04 09:10:35.440300",
+            "spec_repo_commit": "6c99bb98"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -7526,6 +7526,50 @@ components:
           type: string
         kill:
           $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleKill'
+        metadata:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionMetadata'
+        set:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionSet'
+      type: object
+    CloudWorkloadSecurityAgentRuleActionMetadata:
+      description: The metadata action applied on the scope matching the rule
+      properties:
+        image_tag:
+          description: The image tag of the metadata action
+          type: string
+        service:
+          description: The service of the metadata action
+          type: string
+        short_image:
+          description: The short image of the metadata action
+          type: string
+      type: object
+    CloudWorkloadSecurityAgentRuleActionSet:
+      description: The set action applied on the scope matching the rule
+      properties:
+        append:
+          description: Whether the value should be appended to the field
+          type: boolean
+        field:
+          description: The field of the set action
+          type: string
+        name:
+          description: The name of the set action
+          type: string
+        scope:
+          description: The scope of the set action
+          type: string
+        size:
+          description: The size of the set action
+          format: int64
+          type: integer
+        ttl:
+          description: The time to live of the set action
+          format: int64
+          type: integer
+        value:
+          description: The value of the set action
+          type: string
       type: object
     CloudWorkloadSecurityAgentRuleActions:
       description: The array of actions the rule can perform if triggered
@@ -7541,6 +7585,11 @@ components:
         agentConstraint:
           description: The version of the Agent
           type: string
+        blocking:
+          description: The blocking policies that the rule belongs to
+          items:
+            type: string
+          type: array
         category:
           description: The category of the Agent rule
           example: Process Activity
@@ -7564,6 +7613,11 @@ components:
           description: The description of the Agent rule
           example: My Agent rule
           type: string
+        disabled:
+          description: The disabled policies that the rule belongs to
+          items:
+            type: string
+          type: array
         enabled:
           description: Whether the Agent rule is enabled
           example: true
@@ -7577,6 +7631,11 @@ components:
           items:
             type: string
           type: array
+        monitoring:
+          description: The monitoring policies that the rule belongs to
+          items:
+            type: string
+          type: array
         name:
           description: The name of the Agent rule
           example: my_agent_rule
@@ -7611,10 +7670,22 @@ components:
     CloudWorkloadSecurityAgentRuleCreateAttributes:
       description: Create a new Cloud Workload Security Agent rule.
       properties:
+        actions:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
+        blocking:
+          description: The blocking policies that the rule belongs to
+          items:
+            type: string
+          type: array
         description:
           description: The description of the Agent rule.
           example: My Agent rule
           type: string
+        disabled:
+          description: The disabled policies that the rule belongs to
+          items:
+            type: string
+          type: array
         enabled:
           description: Whether the Agent rule is enabled
           example: true
@@ -7628,6 +7699,11 @@ components:
           items:
             type: string
           type: array
+        monitoring:
+          description: The monitoring policies that the rule belongs to
+          items:
+            type: string
+          type: array
         name:
           description: The name of the Agent rule.
           example: my_agent_rule
@@ -7718,10 +7794,22 @@ components:
     CloudWorkloadSecurityAgentRuleUpdateAttributes:
       description: Update an existing Cloud Workload Security Agent rule
       properties:
+        actions:
+          $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
+        blocking:
+          description: The blocking policies that the rule belongs to
+          items:
+            type: string
+          type: array
         description:
           description: The description of the Agent rule
           example: My Agent rule
           type: string
+        disabled:
+          description: The disabled policies that the rule belongs to
+          items:
+            type: string
+          type: array
         enabled:
           description: Whether the Agent rule is enabled
           example: true
@@ -7730,6 +7818,11 @@ components:
           description: The SECL expression of the Agent rule
           example: exec.file.name == "sh"
           type: string
+        monitoring:
+          description: The monitoring policies that the rule belongs to
+          items:
+            type: string
+          type: array
         policy_id:
           description: The ID of the policy where the Agent rule is saved
           example: a8c8e364-6556-434d-b798-a4c23de29c0b

api/datadogV2/model_cloud_workload_security_agent_rule_action.go

@@ -14,6 +14,10 @@ type CloudWorkloadSecurityAgentRuleAction struct {
 	Filter *string `json:"filter,omitempty"`
 	// Kill system call applied on the container matching the rule
 	Kill *CloudWorkloadSecurityAgentRuleKill `json:"kill,omitempty"`
+	// The metadata action applied on the scope matching the rule
+	Metadata *CloudWorkloadSecurityAgentRuleActionMetadata `json:"metadata,omitempty"`
+	// The set action applied on the scope matching the rule
+	Set *CloudWorkloadSecurityAgentRuleActionSet `json:"set,omitempty"`
 	// UnparsedObject contains the raw value of the object if there was an error when deserializing into the struct
 	UnparsedObject       map[string]interface{} `json:"-"`
 	AdditionalProperties map[string]interface{} `json:"-"`
@@ -92,6 +96,62 @@ func (o *CloudWorkloadSecurityAgentRuleAction) SetKill(v CloudWorkloadSecurityAg
 	o.Kill = &v
 }
 
+// GetMetadata returns the Metadata field value if set, zero value otherwise.
+func (o *CloudWorkloadSecurityAgentRuleAction) GetMetadata() CloudWorkloadSecurityAgentRuleActionMetadata {
+	if o == nil || o.Metadata == nil {
+		var ret CloudWorkloadSecurityAgentRuleActionMetadata
+		return ret
+	}
+	return *o.Metadata
+}
+
+// GetMetadataOk returns a tuple with the Metadata field value if set, nil otherwise
+// and a boolean to check if the value has been set.
+func (o *CloudWorkloadSecurityAgentRuleAction) GetMetadataOk() (*CloudWorkloadSecurityAgentRuleActionMetadata, bool) {
+	if o == nil || o.Metadata == nil {
+		return nil, false
+	}
+	return o.Metadata, true
+}
+
+// HasMetadata returns a boolean if a field has been set.
+func (o *CloudWorkloadSecurityAgentRuleAction) HasMetadata() bool {
+	return o != nil && o.Metadata != nil
+}
+
+// SetMetadata gets a reference to the given CloudWorkloadSecurityAgentRuleActionMetadata and assigns it to the Metadata field.
+func (o *CloudWorkloadSecurityAgentRuleAction) SetMetadata(v CloudWorkloadSecurityAgentRuleActionMetadata) {
+	o.Metadata = &v
+}
+
+// GetSet returns the Set field value if set, zero value otherwise.
+func (o *CloudWorkloadSecurityAgentRuleAction) GetSet() CloudWorkloadSecurityAgentRuleActionSet {
+	if o == nil || o.Set == nil {
+		var ret CloudWorkloadSecurityAgentRuleActionSet
+		return ret
+	}
+	return *o.Set
+}
+
+// GetSetOk returns a tuple with the Set field value if set, nil otherwise
+// and a boolean to check if the value has been set.
+func (o *CloudWorkloadSecurityAgentRuleAction) GetSetOk() (*CloudWorkloadSecurityAgentRuleActionSet, bool) {
+	if o == nil || o.Set == nil {
+		return nil, false
+	}
+	return o.Set, true
+}
+
+// HasSet returns a boolean if a field has been set.
+func (o *CloudWorkloadSecurityAgentRuleAction) HasSet() bool {
+	return o != nil && o.Set != nil
+}
+
+// SetSet gets a reference to the given CloudWorkloadSecurityAgentRuleActionSet and assigns it to the Set field.
+func (o *CloudWorkloadSecurityAgentRuleAction) SetSet(v CloudWorkloadSecurityAgentRuleActionSet) {
+	o.Set = &v
+}
+
 // MarshalJSON serializes the struct using spec logic.
 func (o CloudWorkloadSecurityAgentRuleAction) MarshalJSON() ([]byte, error) {
 	toSerialize := map[string]interface{}{}
@@ -104,6 +164,12 @@ func (o CloudWorkloadSecurityAgentRuleAction) MarshalJSON() ([]byte, error) {
 	if o.Kill != nil {
 		toSerialize["kill"] = o.Kill
 	}
+	if o.Metadata != nil {
+		toSerialize["metadata"] = o.Metadata
+	}
+	if o.Set != nil {
+		toSerialize["set"] = o.Set
+	}
 
 	for key, value := range o.AdditionalProperties {
 		toSerialize[key] = value
@@ -114,15 +180,17 @@ func (o CloudWorkloadSecurityAgentRuleAction) MarshalJSON() ([]byte, error) {
 // UnmarshalJSON deserializes the given payload.
 func (o *CloudWorkloadSecurityAgentRuleAction) UnmarshalJSON(bytes []byte) (err error) {
 	all := struct {
-		Filter *string                             `json:"filter,omitempty"`
-		Kill   *CloudWorkloadSecurityAgentRuleKill `json:"kill,omitempty"`
+		Filter   *string                                       `json:"filter,omitempty"`
+		Kill     *CloudWorkloadSecurityAgentRuleKill           `json:"kill,omitempty"`
+		Metadata *CloudWorkloadSecurityAgentRuleActionMetadata `json:"metadata,omitempty"`
+		Set      *CloudWorkloadSecurityAgentRuleActionSet      `json:"set,omitempty"`
 	}{}
 	if err = datadog.Unmarshal(bytes, &all); err != nil {
 		return datadog.Unmarshal(bytes, &o.UnparsedObject)
 	}
 	additionalProperties := make(map[string]interface{})
 	if err = datadog.Unmarshal(bytes, &additionalProperties); err == nil {
-		datadog.DeleteKeys(additionalProperties, &[]string{"filter", "kill"})
+		datadog.DeleteKeys(additionalProperties, &[]string{"filter", "kill", "metadata", "set"})
 	} else {
 		return err
 	}
@@ -133,6 +201,14 @@ func (o *CloudWorkloadSecurityAgentRuleAction) UnmarshalJSON(bytes []byte) (err
 		hasInvalidField = true
 	}
 	o.Kill = all.Kill
+	if all.Metadata != nil && all.Metadata.UnparsedObject != nil && o.UnparsedObject == nil {
+		hasInvalidField = true
+	}
+	o.Metadata = all.Metadata
+	if all.Set != nil && all.Set.UnparsedObject != nil && o.UnparsedObject == nil {
+		hasInvalidField = true
+	}
+	o.Set = all.Set
 
 	if len(additionalProperties) > 0 {
 		o.AdditionalProperties = additionalProperties