FAQ | This is a LIVE service | Changelog

chore(deps): update terraform google to < 6.31

uis-devops-renovatebotrequested to merge
renovate/all-minor-patch into master

This MR contains the following updates:

Package Type Update Change
google (source) required_provider minor < 6.10 -> < 6.31

Release Notes

hashicorp/terraform-provider-google (google)

v6.30.0

Compare Source

FEATURES:

  • New Resource: google_developer_connect_account_connector (#​22270)
  • New Resource: google_vertex_ai_feature_group_iam_* (#​22260)
  • New Resource: google_vertex_ai_feature_online_store_iam_* (#​22260)
  • New Resource: google_vertex_ai_feature_online_store_featureview_iam_* (#​22260)

IMPROVEMENTS:

  • bigquery: added external_catalog_table_options and schema_foreign_type_info fields to google_bigquery_table resource (#​22302)
  • cloudrunv2: added iap_enabled field to google_cloud_run_v2_service resource (#​22301)
  • compute: added source_disk_encryption_key.kms_key_self_link and source_disk_encryption_key.rsa_encrypted_key fields to google_compute_snapshot resource (#​22247)
  • compute: added source_disk_encryption_key, source_image_encryption_key and source_snapshot_encryption_key fields to google_compute_image resource (#​22247)
  • compute: added type, source_nat_active_ranges and source_nat_drain_ranges fields to google_compute_router_nat resource (#​22282)
  • databasemigrationservice: allowed setting ssl.type in google_database_migration_service_connection_profile resource (#​22268)
  • firestore: added MONGODB_COMPATIBLE_API enum option to api_scope field in google_firestore_index resource (#​22287)
  • firestore: added database_edition field to google_firestore_database resource (#​22287)
  • firestore: added density and multikey fields to google_firestore_index resource (#​22287)
  • memorystore: added managed_backup_source and gcs_source fields to google_memorystore_instance resource (#​22295)
  • monitoring: added password_wo write-only field and password_wo_version field to google_monitoring_uptime_check_config resource (#​22242)
  • redis: added managed_backup_source and gcs_source fields to google_redis_cluster resource (#​22277)
  • storage: added support for deleting pending caches present on bucket when setting force_destory to true in google_storage_bucket resource (#​22262)
  • storagecontrol: added trial_config field to google_storage_control_folder_intelligence_config resource (#​22236)
  • storagecontrol: added trial_config field to google_storage_control_organization_intelligence_config resource (#​22236)
  • storagecontrol: added trial_config field to google_storage_control_project_intelligence_config resource (#​22236)

BUG FIXES:

  • container: fixed perma-diff in fleet field when the fleet.project field being added is null or empty in google_container_cluster resource (#​22240)
  • pubsub: fixed perma-diff by changing allowed_persistence_regions field to set in google_pubsub_topic resource (#​22273)

v6.29.0

Compare Source

FEATURES:

  • New Resource: google_clouddeploy_deploy_policy (#​22190)
  • New Resource: google_control_plane_access (#​22209)
  • New Resource: google_gemini_code_tools_setting_binding (#​22226)
  • New Resource: google_gemini_code_tools_setting (#​22203)
  • New Resource: google_os_config_v2_policy_orchestrator_for_organization (#​22192)

IMPROVEMENTS:

  • accesscontextmanager: added session_settings field to gcp_user_access_binding resource (#​22227)
  • cloudedeploy: added timed_promote_release_rule and repair_rollout_rule fields to google_clouddeploy_automation resource (#​22190)
  • compute: added group_placement_policy.0.tpu_topology field to google_compute_resource_policy resource (#​22201)
  • datastream: added support for creating streams for Salesforce source in google_datastream_stream (#​22205)
  • gkehub: enabled partial results to be returned when a cloud region is unreachable in google_gke_hub_feature (#​22218)
  • gkeonprem: added enable_advanced_cluster field to google_gkeonprem_vmware_admin_cluster resource (#​22188)
  • gkeonprem: added enable_advanced_cluster field to google_gkeonprem_vmware_cluster resource (#​22188)
  • memorystore: added automated_backup_config field to google_memorystore_instance resource, (#​22208)
  • netapp: added tiering_policy to google_netapp_volume_replication resource (#​22223)
  • parametermanagerregional: added kms_key_version field to google_parameter_manager_regional_parameter_version resource and datasource (#​22213)
  • parametermanagerregional: added kms_key field to google_parameter_manager_regional_parameter resource and google_parameter_manager_regional_parameters datasource (#​22213)
  • redis: added automated_backup_config field to google_redis_cluster (#​22117)
  • storage: added md5hexhash field in google_storage_bucket_object (#​22229)
  • workbench: added confidential_instance_config field to google_workbench_instance resource (#​22178)

BUG FIXES:

  • colab: fixed an issue where google_colab_* resources incorrectly required a provider-level region matching the resource location (#​22217)
  • datastream: updated private_keyto be mutable in google_datastream_connection_profile resource. (#​22179)

v6.28.0

Compare Source

DEPRECATIONS:

  • compute: deprecated enable_flow_logs in favor of log_config on google_compute_subnetwork resource. If log_config is present, flow logs are enabled, and enable_flow_logs can be safely removed. (#​22111)
  • containerregistry: Deprecated google_container_registry resource, and google_container_registry_image and google_container_registry_repository data sources. Use google_artifact_registry_repository instead. (#​22071)

FEATURES:

  • New Data Source: google_compute_region_backend_service (#​21986)
  • New Data Source: google_organization_iam_custom_roles (#​22035)
  • New Data Source: google_parameter_manager_parameter_version_render (#​22099)
  • New Data Source: google_parameter_manager_parameter_version (#​22099)
  • New Data Source: google_parameter_manager_parameter (#​22099)
  • New Data Source: google_parameter_manager_parameters (#​22099)
  • New Data Source: google_parameter_manager_regional_parameter_version_render (#​22099)
  • New Data Source: google_parameter_manager_regional_parameter_version (#​22099)
  • New Data Source: google_parameter_manager_regional_parameter (#​22099)
  • New Data Source: google_parameter_manager_regional_parameters (#​22099)
  • New Data Source: google_storage_control_folder_intelligence_config (#​22077)
  • New Data Source: google_storage_control_organization_intelligence_config (#​22077)
  • New Data Source: google_storage_control_project_intelligence_config (#​22077)
  • New Resource: google_apigee_dns_zone (#​21992)
  • New Resource: google_chronicle_data_access_scope (#​21982)
  • New Resource: google_chronicle_referencelist (#​22090)
  • New Resource: google_chronicle_retrohunt (#​22092)
  • New Resource: google_chronicle_rule (#​22089)
  • New Resource: google_chronicle_rule_deployment (#​22093)
  • New Resource: google_chronicle_watchlist (#​21989)
  • New Resource: google_dataproc_metastore_database_iam_* resources (#​21985)
  • New Resource: google_dataproc_metastore_table_iam_* (#​22064)
  • New Resource: google_discovery_engine_sitemap (#​21976)
  • New Resource: google_eventarc_enrollment (#​22028)
  • New Resource: google_firebase_app_hosting_build (#​22063)
  • New Resource: google_memorystore_instance_desired_user_created_endpoints (#​22073)
  • New Resource: google_parameter_manager_parameter_version (#​22099)
  • New Resource: google_parameter_manager_parameter (#​22099)
  • New Resource: google_parameter_manager_regional_parameter_version (#​22099)
  • New Resource: google_parameter_manager_regional_parameter (#​22099)
  • New Resource: google_storage_control_folder_intelligence_config (#​22061)
  • New Resource: google_storage_control_organization_intelligence_config (#​21987)

IMPROVEMENTS:

  • accesscontextmanager: added roles field to ingress and egress policies of google_access_context_manager_service_perimeter* resources (#​22086)
  • cloudfunctions2: added binary_authorization_policy field to google_cloudfunctions2_function resource (#​22070)
  • cloudrun: promoted node_selector field in google_cloud_run_service resource to GA (#​22054)
  • cloudrunv2: added gpu_zonal_redundancy_disabled field to google_cloud_run_v2_service resource (#​22054)
  • cloudrunv2: promoted node_selector field in google_cloud_run_v2_service resource to GA (#​22054)
  • compute: added md5_authentication_keys field to google_compute_router resource (#​22101)
  • compute: added EXTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#​22037)
  • compute: added external_ipv6_prefix, stack_type, and ipv6_access_type fields to google_compute_subnetwork data source (#​22085)
  • compute: added several boot_disk, attached_disk, and instance_encryption_key fields to google_compute_instance and google_compute_instance_template resources (#​22096)
  • compute: added image_encryption_key.raw_key and image_encryption_key.rsa_encrypted_key fields to google_compute_image resource (#​22096)
  • compute: added snapshot_encryption_key.rsa_encrypted_key field to google_compute_snapshot resource (#​22096)
  • container: added auto_monitoring_config field to google_container_cluster resource (#​21970)
  • container: added disable_l4_lb_firewall_reconciliation field to google_container_cluster resource (#​22065)
  • datafusion: added tags field to google_data_fusion_instance resource to allow setting tags for instances at creation time (#​21977)
  • datastream: added blmt_config field to bigquery_destination_config resource to enable support for BigLake Managed Tables streams (#​22109)
  • datastream: added secret_manager_stored_password field to google_datastream_connection_profile resource (#​22046)
  • identityplatform: added disabled_user_signup and disabled_user_deletion to google_identity_platform_tenant resource (#​21983)
  • memorystore: added psc_attachment_details field to google_memorystore_instance resource, to enable use of the fine-grained resource google_memorystore_instance_desired_user_created_connections (#​22073)
  • memorystore: added the cross_cluster_replication_config field to the google_redis_cluster resource (#​22097)
  • metastore: added deletion_protection field to google_dataproc_metastore_federation resource (#​22106)
  • networksecurity: added antivirus_overrides field to google_network_security_security_profile resource (#​22060)
  • networksecurity: added connected_deployment_groups and associations fields to google_network_security_mirroring_endpoint_group resource (#​21974)
  • networksecurity: added locations field to google_network_security_mirroring_deployment_group resource (#​21975)
  • networksecurity: added locations field to google_network_security_mirroring_endpoint_group_association resource (#​21971)
  • parametermanager: added kms_key_version field to google_parameter_manager_parameter_version resource and datasource (#​22058)
  • parametermanager: added kms_key field to google_parameter_manager_parameter resource and google_parameter_manager_parameters datasource (#​22058)
  • provider: added external_credentials block in provider (#​22081)
  • redis: added automated_backup_config field to google_redis_cluster resource (#​22117)
  • storage: added content_base64 field in google_storage_bucket_object_content datasource (#​22051)

BUG FIXES:

  • alloydb: added a mutex to google_alloydb_cluster to prevent conflicts among multiple cluster operations (#​21972)
  • artifactregistry: fixed type assertion panic in google_artifact_registry_repository resource (#​22100)
  • bigtable: fixed automated_backup_policy field for google_bigtable_table resource (#​22034)
  • cloudrunv2: fixed the diffs for unchanged template.template.containers.env in google_cloud_run_v2_job resource (#​22115)
  • compute: fixed a regression in google_compute_subnetwork where setting log_config would not enable flow logs without enable_flow_logs also being set to true. To enable or disable flow logs, please use log_config. enable_flow_logs is now deprecated and will be removed in the next major release. (#​22111)
  • compute: fixed unable to update the preview field for google_compute_security_policy_rule resource (#​21984)
  • orgpolicy: fix permadiff in google_org_policy_policy when multiple rules are present (#​21981)
  • resourcemanager: increased page size for list services api to help any teams hitting ListEnabledRequestsPerMinutePerProject quota issues (#​22050)
  • spanner: fixed issue with applying changes in provider default_labels on google_spanner_instance resource (#​22036)
  • storage: fixed google_storage_anywhere_cache to cancel long-running operations after create and update requests timeout (#​22031)
  • workbench: fixed metadata permadiff in google_workbench_instance resource (#​22056)

v6.27.0

Compare Source

FEATURES:

  • New Data Source: google_compute_images (#​21872)
  • New Data Source: google_organization_iam_custom_role (#​21922)
  • New Resource: google_lustre_instance (#​21963)
  • New Resource: google_os_config_v2_policy_orchestrator (#​21930)
  • New Resource: google_storage_control_project_intelligence_config (#​21902)
  • New Resource: google_chronicle_data_access_label (#​21956)
  • New Resource: google_compute_router_route_policy (#​21945)

IMPROVEMENTS:

  • bigquery: added secondary_location and replication_status fields to support managed disaster recovery feature in google_bigquery_reservation (#​21920)
  • clouddeploy: added dns_endpoint field to to google_clouddeploy_target resource (#​21868)
  • compute: added shielded_instance_initial_state structure to google_compute_image resource (#​21937)
  • compute: added LINK_TYPE_ETHERNET_400G_LR4 enum value to link_type field in google_compute_interconnect resource (#​21903)
  • compute: added architecture and guest_os_features to google_compute_instance (#​21875)
  • compute: added workload_policy.type, workload_policy.max_topology_distance and workload_policy.accelerator_topology fields to google_compute_resource_policy resource (#​21961)
  • container: added ip_endpoints_config field to google_container_cluster resource (#​21959)
  • container: added node_config.windows_node_config field to google_container_node_pool resource. (#​21876)
  • container: added pod_autoscaling field to google_container_cluster resource (#​21919)
  • memorystore: added the maintenance_policy field to the google_memorystore_instance resource (#​21957)
  • memorystore: enabled update support for node_type field in google_memorystore_instance resource (#​21899)
  • metastore: promoted scaling_config field of google_dataproc_metastore_service resource to GA (#​21877)
  • networksecurity: added connected_deployment_group and associations fields to google_network_security_intercept_endpoint_group resource (#​21940)
  • networksecurity: added locations field to google_network_security_intercept_deployment_group resource (#​21923)
  • networksecurity: added locations field to google_network_security_intercept_endpoint_group_association resource (#​21962)
  • redis: added update support for google_redis_cluster node_type (#​21870)
  • storage: added metadata_options in google_storage_transfer_job (#​21897)

BUG FIXES:

  • bigqueryanalyticshub: fixed a bug in google_bigquery_analytics_hub_listing_subscription where a subscription using a different project than the dataset would not work (#​21958)
  • cloudrun: fixed the perma-diffs for unchanged template.spec.containers.env in google_cloud_run_service resource (#​21916)
  • cloudrunv2: fixed the perma-diffs for unchanged template.containers.env in google_cloud_run_v2_service resource (#​21916)
  • compute: fixed the issue that user can't use regional disk in google_compute_instance_template (#​21901)
  • dataflow: fixed a permadiff on template_gcs_path in google_dataflow_job resource (#​21894)
  • storage: lowered the minimum required items for custom_placement_config.data_locations from 2 to 1, and removed the Terraform-enforced maximum item limit for the field in google_storage_bucket (#​21878)

v6.26.0

Compare Source

FEATURES:

  • New Data Source: google_project_iam_custom_role (#​21866)
  • New Data Source: google_project_iam_custom_roles (#​21813)
  • New Resource: google_eventarc_pipeline (#​21761)
  • New Resource: google_firebase_app_hosting_backend (#​21840)
  • New Resource: google_network_security_mirroring_deployment (#​21853)
  • New Resource: google_network_security_mirroring_deployment_group (#​21853)
  • New Resource: google_network_security_mirroring_endpoint_group_association (#​21853)
  • New Resource: google_network_security_mirroring_endpoint_group (#​21853)

IMPROVEMENTS:

  • alloydb: added psc_config field to ``google_alloydb_cluster` resource (#​21863)
  • bigquery: added table_metadata_view query param to google_bigquery_table (#​21838)
  • clouddeploy: added dns_endpoint field to to google_clouddeploy_target resource (#​21868)
  • compute: added UNRESTRICTED option to the tls_early_data field in the google_compute_target_https_proxy resource (#​21821)
  • compute: added enable_flow_logs and state fields to google_compute_subnetwork resource (#​21851)
  • compute: promoted fields single_instance_assignment and filter to GA for google_compute_autoscaler resource (#​21760)
  • container: added additional value KCP_HPA for logging_config.enable_components field in google_container_cluster resource (#​21836)
  • dataform: added deletion_policy field to google_dataform_repository resource. Default value is DELETE. Setting deletion_policy to FORCE will delete any child resources of this repository as well. (#​21864)
  • memorystore: added update support for engine_version field in google_memorystore_instance resource (#​21843)
  • metastore: added create_time and update_time fields to google_dataproc_metastore_federation resource (#​21824)
  • metastore: added create_time and update_time fields to google_dataproc_metastore_service resource (#​21817)
  • networksecurity: added not_operations field to google_network_security_authz_policy resource (#​21785)
  • networkservices: added ip_version and envoy_headers fields to google_network_services_gateway resource (#​21788)
  • sql: increased settings.insights_config.query_string_length and settings.insights_config.query_string_length limits for Enterprise Plus edition sql_database_instance resource. (#​21848)
  • storageinsights: added parquet_options field to google_storage_insights_report_config resource (#​21816)
  • workflows: added execution_history_level field to google_workflows_workflow resource (#​21782)

BUG FIXES:

  • accesscontextmanager: fixed panic on empty access_policies in google_access_context_manager_access_policy (#​21845)
  • compute: adjusted mapped image names that were preventing usage of fedora-coreos in google_compute_image resource (#​21787)
  • container: re-added DNS_SCOPE_UNSPECIFIED value to the dns_config.cluster_dns_scope field in google_container_cluster resource and suppressed diffs between DNS_SCOPE_UNSPECIFIED in config and empty/null in state (#​21861)
  • discoveryengine: changed field dataStoreIds to mutable in google_discovery_engine_search_engine (#​21759)
  • networksecurity: min_tls_version and tls_feature_profile fields updated to use the server assigned default and prevent a permadiff in google_network_security_tls_inspection_policy resource. (#​21788)
  • oslogin: added a wait after creating google_os_login_ssh_public_key to allow propagation (#​21860)
  • spanner: fixed issue with disabling autoscaling in google_spanner_instance (#​21852)

v6.25.0

Compare Source

NOTES:

  • eventarc: google_eventarc_channel now uses MMv1 engine instead of DCL. (#​21728)
  • workbench: increased create timeout for google_workbench_instance to 40mins. (#​21700)

FEATURES:

  • New Data Source: google_compute_region_ssl_policy (#​21633)
  • New Resource: google_eventarc_google_api_source (#​21732)
  • New Resource: google_iam_oauth_client_credential (#​21731)
  • New Resource: google_iam_oauth_client (#​21660)
  • New Resource: network_services_endpoint_policy (#​21676)
  • New Resource: network_services_grpc_route (#​21676)
  • New Resource: network_services_http_route (#​21676)
  • New Resource: network_services_mesh (#​21676)
  • New Resource: network_services_service_binding (#​21676)
  • New Resource: network_services_tcp_route (#​21676)
  • New Resource: network_services_tls_route (#​21676)

IMPROVEMENTS:

  • alloydb: added psc_instance_config.psc_interface_configs field to google_alloydb_instance resource (#​21701)
  • compute: added create_snapshot_before_destroy to google_compute_disk and google_compute_region_disk to enable creating a snapshot before disk deletion (#​21636)
  • compute: added ip_collection and ipv6_gce_endpoint fields to google_compute_subnetwork resource (#​21730)
  • compute: added log_config.optional_mode and log_config.optional_fields fields to google_compute_region_backend_service resource (#​21722)
  • compute: added rsa_encrypted_key to google_compute_region_disk (#​21636)
  • compute: added scheduling.termination_time field to google_compute_instance, google_compute_instance_from_machine_image, google_compute_instance_from_template, google_compute_instance_template, and google_compute_region_instance_template resources (#​21717)
  • compute: added update support for 'purpose' field in google_compute_subnetwork resource (#​21729)
  • compute: added update support for firewall_policy in google_compute_firewall_policy_association resource. It is recommended to only perform this operation in combination with a protective lifecycle tag such as "create_before_destroy" or "prevent_destroy" on your previous firewall_policy resource in order to prevent situations where a target attachment has no associated policy. (#​21735)
  • container: added "JOBSET" as a supported value for enable_components in google_container_cluster resource (#​21657)
  • firebasedataconnect: added deletion_policy field to google_firebase_data_connect_service resource (#​21736)
  • networksecurity: added description field to google_network_security_intercept_deployment, google_network_security_intercept_deployment_group, google_network_security_intercept_endpoint_group resources (#​21711)
  • networksecurity: added description field to google_network_security_mirroring_deployment, google_network_security_mirroring_deployment_group, google_network_security_mirroring_endpoint_group resources (#​21714)
  • tpuv2: added spot field to google_tpu_v2_vm resource (#​21716)
  • workstations: added tags field to google_workstations_workstation_cluster resource (#​21635)

BUG FIXES:

  • backupdr: added missing SUNDAY option to days_of_week field in google_backup_dr_backup_plan resource (#​21640)
  • compute: fixed network_interface.internal_ipv6_prefix_length not being set or read in Terraform state in google_compute_instance resource (#​21638)
  • compute: fixed bug in google_compute_router_nat where max_ports_per_vm couldn't be unset once set. (#​21721)
  • container: fixed perma-diff in google_container_cluster when cluster_dns_scope is unspecified (#​21637)
  • networksecurity: added wait time on google_network_security_gateway_security_policy_rule resource when creating and deleting to prevent race conditions (#​21643)

v6.24.0

Compare Source

NOTES:

  • gemini: removed unsupported value GEMINI_CLOUD_ASSIST for field product in google_gemini_logging_setting_binding resource (#​21630)
  • iam: added member value to the error message when member validation fails for google_project_iam_* (#​21586)

DEPRECATIONS:

FEATURES:

  • New Data Source: google_memorystore_instance (#​21579)
  • New Resource: google_apihub_host_project_registration (#​21607)
  • New Resource: google_compute_instant_snapshot (#​21598)
  • New Resource: google_eventarc_message_bus (#​21611)
  • New Resource: google_gemini_data_sharing_with_google_setting_binding (GA) (#​21629)
  • New Resource: google_gemini_gcp_enablement_setting_binding (GA) (#​21587)
  • New Resource: google_gemini_gemini_gcp_enablement_setting_binding (#​21540)
  • New Resource: google_storage_anywhere_cache (#​21537)

IMPROVEMENTS:

  • alloydb: added ability to upgrade major version in google_alloydb_cluster with database_version (#​21582)
  • compute: added creation_timestamp, next_hop_peering, warnings.code, warnings.message, warnings.data.key, warnings.data.value, next_hop_hub, route_type, as_paths.path_segment_type, as_paths.as_lists and route_status fields to google_compute_route resource (#​21534)
  • compute: added max_stream_duration field to google_compute_url_map resource (#​21535)
  • compute: added network_interface.network_attachment field to google_compute_instance resource (ga) (#​21606)
  • compute: added network_interface.network_attachment to google_compute_instance data source (ga) (#​21606)
  • compute: added fields architecture, source_instant_snapshot, source_storage_object, resource_manager_tags to google_compute_disk. (#​21598)
  • container: added enum value UPGRADE_INFO_EVENT for GKE notification filter in google_container_cluster resource (#​21609)
  • iam: added AZURE_AD_GROUPS_ID field to google_iam_workforce_pool_provider.extra_attributes_oauth2_client.attributes_type resource (#​21624)
  • networkconnectivity: added policy_mode field to google_network_connectivity_hub resource (#​21589)
  • networkservices: added location field to google_network_services_grpc_route resource (#​21621)
  • storagetransfer: added logging_config field to google_storage_transfer_job resource (#​21523)

BUG FIXES:

  • bigquery: updated the max_staleness field in google_bigquery_table to be a computed field (#​21596)
  • chronicle: fixed an error during resource creation with certain run_frequency configurations in google_chronicle_rule_deployment (#​21610)
  • discoveryengine: fixed bug preventing creation of google_discovery_engine_target_site resources (#​21628)
  • eventarc: fixed an issue where google_eventarc_trigger creation failed due to the region could not be parsed from the trigger's name (#​21528)
  • publicca: encode b64_mac_key in base64url, not in base64 (#​21612)
  • storage: fixed a 412 error returned on some google_storage_bucket_iam_policy deletions (#​21626)

v6.23.0

Compare Source

NOTES:

IMPROVEMENTS:

  • sql: added password_wo and password_wo_version fields to google_sql_user resource (#​21616)
  • bigquerydatatransfer: added secret_access_key_wo and secret_access_key_wo_version fields to google_bigquery_data_transfer_config resource (#​21617)
  • secretmanager: added secret_data_wo and secret_data_wo_version fields to google_secret_version resource (#​21618)

v6.22.0

Compare Source

NOTES:

  • provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.

DEPRECATIONS:

FEATURES:

  • New Data Source: google_alloydb_cluster (#​21496)
  • New Data Source: google_project_ancestry (#​21413)
  • New Resource: google_gemini_data_sharing_with_google_setting_binding (#​21479)
  • New Resource: google_gemini_logging_setting_binding (#​21429)
  • New Resource: google_gemini_logging_setting (#​21404)
  • New Resource: google_spanner_instance_partition (#​21475)

IMPROVEMENTS:

  • backupdr: promoted google_backup_dr_management_server, google_backup_dr_backup_plan_association, and google_backup_dr_backup_plan resources to GA
  • compute: added import_subnet_routes_with_public_ip and export_subnet_routes_with_public_ip fields to google_compute_network_peering_routes_config resource (#​21405)
  • developerconnect: added bitbucket_cloud_config and bitbucket_data_center_config fields to google_developer_connect_connection resource (#​21433)
  • gemini: promoted google_gemini_release_channel_setting resource to GA (#​21481)
  • iam: added extra_attributes_oauth2_client field to google_iam_workforce_pool_provider resource (#​21430)
  • iambeta: promoted google_iam_workload_identity_pool and google_iam_workload_identity_pool_provider data sources to GA (#​21408)
  • redis: added kms_key field to google_redis_cluster resource (#​21428)
  • tpuv2: added network_config field to google_tpu_v2_queued_resource resource (#​21426)

BUG FIXES:

  • apigee: fixed error when deleting google_apigee_organization (#​21473)
  • bigtable: fixed a bug where sometimes updating an instance's cluster list could result in an error if there was an existing cluster with autoscaling enabled (#​21503)
  • chronicle: fixed bug setting enabled on creation in google_chronicle_rule_deployment (#​21460)

v6.21.0

Compare Source

NOTES:

  • provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.

FEATURES:

  • New Data Source: google_alloydb_instance (#​21383)
  • New Resource: google_firebase_data_connect_service (#​21368)
  • New Resource: google_gemini_data_sharing_with_google_setting (#​21393)
  • New Resource: google_gemini_gemini_gcp_enablement_setting (#​21357)
  • New Resource: google_gemini_logging_setting_binding (#​21354)
  • New Resource: google_gemini_release_channel_setting (#​21387
  • New Resource: google_gemini_release_channel_setting_binding (#​21387
  • New Resource: google_netapp_volume_quota_rule (#​21283)

IMPROVEMENTS:

  • accesscontextmanager: added etag to access context manager directional policy resources google_access_context_manager_service_perimeter_dry_run_egress_policy, google_access_context_manager_service_perimeter_dry_run_ingress_policy, google_access_context_manager_service_perimeter_egress_policy and google_access_context_manager_service_perimeter_ingress_policy to prevent overriding changes (#​21366)
  • accesscontextmanager: added title field to policy blocks under google_access_context_manager_service_perimeter and variants (#​21302)
  • artifactregistry: set pageSize to 1000 to speedup google_artifact_registry_docker_image data source queries (#​21360)
  • compute: added labels field to google_compute_ha_vpn_gateway resource (#​21385)
  • compute: added validation for disk names in google_compute_disk (#​21335)
  • container: added new fields container_log_max_size, container_log_max_files, image_gc_low_threshold_percent, image_gc_high_threshold_percent, image_minimum_gc_age, image_maximum_gc_age, and allowed_unsafe_sysctls to node_kubelet_config block in google_container_cluster resource. (#​21319)
  • monitoring: added condition_sql field to google_monitoring_alert_policy resource (#​21277)
  • networkservices: added location field to google_network_services_mesh resource (#​21337)
  • securitycenter: added type, expiry_time field to google_scc_mute_config resource (#​21318)

BUG FIXES:

  • chronicle: fixed creation issues when optional fields were missing for google_chronicle_rule_deployment resource (#​21389)
  • databasemigrationservice: fixed error details type on google_database_migration_service_migration_job (#​21279)
  • networkservices: fixed a bug with google_network_services_authz_extension.wire_format sending an invalid default value by removing the Terraform default and letting the API set the default. (#​21280)

v6.20.0

Compare Source

NOTES:

  • provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.
  • compute: google_compute_firewall_policy now uses MMv1 engine instead of DCL. (#​21235)

FEATURES:

  • New Data Source: google_beyondcorp_application_iam_policy (#​21199)
  • New Data Source: google_parameter_manager_parameter_version_render (#​21104)
  • New Resource: google_beyondcorp_application (#​21199)
  • New Resource: google_beyondcorp_application_iam_binding (#​21199)
  • New Resource: google_beyondcorp_application_iam_member (#​21199)
  • New Resource: google_beyondcorp_application_iam_policy (#​21199)
  • New Resource: google_bigquery_analytics_hub_listing_subscription (#​21189)
  • New Resource: google_colab_notebook_execution (#​21100)
  • New Resource: google_colab_schedule (#​21233)

IMPROVEMENTS:

  • accesscontextmanager: added resource to sources in egress_from under resources google_access_context_manager_service_perimeter, google_access_context_manager_service_perimeters, google_access_context_manager_service_perimeter_egress_policy, google_access_context_manager_service_perimeter_dry_run_egress_policy (#​21190)
  • cloudrunv2: added base_image_uri and build_info to google_cloud_run_v2_service (#​21236)
  • colab: added auto_upgrade field to google_colab_runtime (#​21214)
  • colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#​21200)
  • colab: added desired_state field to google_colab_runtime, making it startable/stoppable. (#​21207)
  • compute: added ip_collection field to google_compute_forwarding_rule resource (#​21188)
  • compute: added mode and allocatable_prefix_length fields to google_compute_public_delegated_prefix resource (#​21216)
  • compute: allow parallelization of google_compute_per_instance_config and google_compute_region_per_instance_config deletions by not locking on the parent resource, but including instance name. (#​21095)
  • container: added auto_monitoring_config field and subfields to the google_container_cluster resource (#​21229)
  • filestore: added initial_replication field for peer instance configuration and effective_replication output for replication configuration output to google_filestore_instance (#​21194)
  • memorystore: added CLUSTER_DISABLED to mode field in google_memorystore_instance (#​21092)
  • networkservices: added compression_mode and allowed_methods fields to google_network_services_edge_cache_service resource (#​21195)
  • privateca: added user_defined_access_urls and subfields to google_privateca_certificate_authority resource to add support for custom CDP AIA URLs (#​21220)
  • workbench: added enable_third_party_identity field to google_workbench_instance resource (#​21265)

BUG FIXES:

  • appengine: added a mitigation for an upcoming default change to standard_scheduler_settings.max_instances for new google_app_engine_standard_app_version resources. If the field is not specified in configuration, diffs will now be ignored. (#​21257)
  • bigquery: added diff suppression for legacy values in renewal_plan field in google_bigquery_capacity_commitment resource (#​21103)
  • compute: fixed google_compute_(region_)resize_request requiring region/zone to be specified in all cases. They can now be pulled from the provider. (#​21264)
  • container: reverted locking behavior in google_container_node_pool that caused regression of operation apply time spike started in v6.15 (#​21102)
  • gemini: fixed a bug where the force_destroy field in resource gemini_code_repository_index did not work properly (#​21212)
  • workbench: fixed a bug with google_workbench_instance metadata removal not working as expected (#​21204)

v6.19.0

Compare Source

DEPRECATIONS:

  • beyondcorp: deprecated location on google_beyondcorp_security_gateway. The only valid value is global, which is now also the default value. The field will be removed in a future major release. (#​21006)

FEATURES:

  • New Data Source: google_parameter_manager_parameter_version (#​21055)
  • New Data Source: google_parameter_manager_parameters (#​21043)
  • New Data Source: google_parameter_manager_regional_parameter_version (#​21073)
  • New Resource: google_beyondcorp_security_gateway_iam_binding (#​21078)
  • New Resource: google_beyondcorp_security_gateway_iam_member (#​21078)
  • New Resource: google_beyondcorp_security_gateway_iam_policy (#​21078)

IMPROVEMENTS:

  • accesscontextmanager: added etag to google_access_context_manager_service_perimeter_dry_run_resource to prevent overriding list of resources (#​21005)
  • compute: allowed parallelization of google_compute_(region_)per_instance_config by not locking on the parent resource, but including instance name. (#​21001)
  • compute: added network_profile field to google_compute_network resource. (#​21027)
  • compute: added zero_advertised_route_priority field to google_compute_router_peer (#​21024)
  • container: added max_run_duration to node_config in google_container_cluster and google_container_node_pool (#​21071)
  • dataproc: added encryption_config to google_dataproc_workflow_template (#​21077)
  • gkehub2: added support for fleet_default_member_config.config_management.config_sync.metrics_gcp_service_account_email field to google_gke_hub_feature resource (#​21042)
  • iam: added prefix and regex fields to google_service_accounts data source (#​21020)
  • pubsub: added ingestion_data_source_settings.aws_msk and ingestion_data_source_settings.confluent_cloud fields to google_pubsub_topic resource (#​20999)
  • spanner: added encryption_config field to google_spanner_backup_schedule (#​21067)
  • workflows: added tags and workflow_tags fields to google_workflows_workflow resource (#​21053)

BUG FIXES:

  • alloydb: marked google_alloydb_user.password as sensitive (#​21014)
  • beyondcorp: corrected location to always be global in google_beyondcorp_security_gateway (#​21006)
  • cloudquotas: removed validation for parent in google_cloud_quotas_quota_adjuster_settings (#​21054)
  • compute: made google_compute_router_peer.advertised_route_priority use server-side default if unset. To set the value to 0 you must also set zero_advertised_route_priority = true. (#​21024)
  • container: fixed a diff caused by server-side set values for node_config.resource_labels (#​21082)
  • container: marked cluster_autoscaling.resource_limits.maximum as required, as requests would fail if it was not set (#​21051)
  • firestore: fixed error preventing deletion of wildcard google_firestore_field resources (#​21034)
  • netapp: fixed an issue where a diff on zone would be found if it was unspecified in google_netapp_storage_pool (#​21060)
  • networksecurity: fixed sporadic-diff in google_network_security_security_profile (#​21070)
  • spanner: fixed bug with google_spanner_instance.force_destroy not setting billing_project value correctly (#​21023)
  • storage: fixed an issue where plans with a dependency on the content field in the google_storage_bucket_object_content data source could erroneously fail (#​21074)

v6.18.1

Compare Source

BUG FIXES:

  • container: fixed a diff caused by server-side set values for node_config.resource_labels (#​21082)

v6.18.0

Compare Source

FEATURES:

  • New Data Source: google_compute_instance_template_iam_policy (#​20954)
  • New Data Source: google_kms_key_handles (#​20985)
  • New Data Source: google_organizations (#​20965)
  • New Data Source: google_parameter_manager_parameter (#​20953)
  • New Data Source: google_parameter_manager_regional_parameters (#​20958)
  • New Resource: google_apihub_api_hub_instance (#​20948)
  • New Resource: google_chronicle_retrohunt (#​20962)
  • New Resource: google_colab_runtime (#​20940)
  • New Resource: google_colab_runtime_template_iam_binding (#​20963)
  • New Resource: google_colab_runtime_template_iam_member (#​20963)
  • New Resource: google_colab_runtime_template_iam_policy (#​20963)
  • New Resource: google_compute_instance_template_iam_binding (#​20954)
  • New Resource: google_compute_instance_template_iam_member (#​20954)
  • New Resource: google_compute_instance_template_iam_policy (#​20954)
  • New Resource: google_gemini_code_repository_index (GA) (#​20941)
  • New Resource: google_gemini_repository_group (GA) (#​20941)
  • New Resource: google_gemini_repository_group_iam_member (GA) (#​20941)
  • New Resource: google_gemini_repository_group_iam_binding (GA) (#​20941)
  • New Resource: google_gemini_repository_group_iam_policy (GA) (#​20941)
  • New Resource: google_parameter_manager_parameter_version (#​20992)
  • New Resource: google_redis_cluster_user_created_connections (#​20977)

IMPROVEMENTS:

  • alloydb: added support for skip_await_major_version_upgrade field in google_alloydb_cluster resource, allowing for major_version to be updated (#​20923)
  • apigee: added properties field to google_apigee_environment resource (#​20932)
  • bug: added support for setting custom_learned_route_priority to 0 in 'google_compute_router_peer' by adding the zero_custom_learned_route_priority field (#​20952)
  • cloudrunv2: added build_config to google_cloud_run_v2_service (#​20979)
  • compute: added pdp_scope field to google_compute_public_advertised_prefix resource (#​20972)
  • compute: adding labels field to google_compute_interconnect_attachment (#​20971)
  • compute: fixed a issue where custom_learned_route_priority was accidentally set to 0 during updates in 'google_compute_router_peer' (#​20952)
  • filestore: added support for tags field to google_filestore_instance resource (#​20955)
  • networksecurity: added custom_mirroring_profile and custom_intercept_profile fields to google_network_security_security_profile and google_network_security_security_profile_group resources (#​20990)
  • pubsub: added enforce_in_transit fields to google_pubsub_topic resource (#​20926)
  • pubsub: added ingestion_data_source_settings.azure_event_hubs field to google_pubsub_topic resource (#​20922)
  • redis: added psc_service_attachments field to google_redis_cluster resource, to enable use of the fine-grained resource google_redis_cluster_user_created_connections (#​20977)

BUG FIXES:

  • apigee: fixed properties field update on google_apigee_environment resource (#​20987)
  • artifactregistry: fixed perma-diff in google_artifact_registry_repository (#​20989)
  • compute: fixed failure when creating google_compute_global_forwarding_rule with labels targeting PSC endpoint (#​20986)
  • container: fixed additive_vpc_scope_dns_domain being ignored in Autopilot cluster definition (#​20937)
  • container: fixed propagation of node_pool_defaults.node_config_defaults.insecure_kubelet_readonly_port_enabled in node config. (#​20936)
  • iam: fixed missing result by adding pagination for data source google_service_accounts. (#​20966)
  • metastore: increased timeout on google_dataproc_metastore_service operations to 75m from 60m. This will expose server-returned reasons for operation failure instead of masking them with a Terraform timeout. (#​20981)
  • resourcemanager: added a slightly longer wait (two 10s checks bumped to 15s) for issues with billing associations in google_project. Default network deletion should succeed more often. (#​20982)

v6.17.0

Compare Source

FEATURES:

  • New Resource: google_apigee_environment_addons_config (#​20851)
  • New Resource: google_chronicle_reference_list (beta) (#​20895)
  • New Resource: google_chronicle_rule_deployment (#​20888)
  • New Resource: google_chronicle_rule (#​20868)
  • New Resource: google_colab_runtime_template (#​20898)
  • New Resource: google_edgenetwork_interconnect_attachment (#​20856)
  • New Resource: google_parameter_manager_parameter (#​20886)
  • New Resource: google_parameter_manager_regional_parameter_version (#​20914)
  • New Resource: google_parameter_manager_regional_parameter (#​20858)

IMPROVEMENTS:

  • accesscontextmanager: added etag to google_access_context_manager_service_perimeter_resource to prevent overriding list of resources (#​20910)
  • compute: added BPS_100G enum value to bandwidth field of google_compute_interconnect_attachment. (#​20884)
  • compute: added support for IPV6_ONLY stack_type to google_compute_subnetwork, google_compute_instance, google_compute_instance_template and google_compute_region_instance_template. (#​20850)
  • compute: promoted bgp_best_path_selection_mode ,bgp_bps_always_compare_med and bgp_bps_inter_region_cost fields in google_compute_network from Beta to Ga (#​20865)
  • compute: promoted next_hop_origin ,next_hop_med and next_hop_inter_region_cost output fields in google_compute_route form Beta to GA (#​20865)
  • discoveryengine: added advanced_site_search_config field to google_discovery_engine_data_store resource (#​20912)
  • gemini: added force_destroy field to resource google_code_repository_index, enabling deletion of the resource even when it has dependent RepositoryGroups (#​20881)
  • networkservices: added in-place update support for ports field on google_network_services_gateway resource (#​20908)
  • sql: sql_source_representation_instance now uses string representation of databaseVersion (#​20859)
  • sql: added replication_cluster field to google_sql_database_instance resource (#​20889)
  • sql: added support of switchover for MySQL and PostgreSQL in google_sql_database_instance resource (#​20889)
  • workbench: changed container_image field of google_workbench_instance resource to modifiable. (#​20894)

BUG FIXES:

  • apigee: fixed error 404 for organization update requests. (#​20854)
  • artifactregistry: fixed artifact_registry_repository not accepting durations with 'm', 'h' or 'd' (#​20902)
  • networkservices: fixed bug where google_network_services_gateway could not be updated in place (#​20908)
  • storagetransfer: fixed a permadiff with transfer_spec.aws_s3_data_source.aws_access_key in google_storage_transfer_job (#​20849)

v6.16.0

Compare Source

FEATURES:

  • New Resource: google_beyondcorp_security_gateway (#​20844)
  • New Resource: google_developer_connect_connection (#​20823)
  • New Resource: google_developer_connect_git_repository_link (#​20823)

IMPROVEMENTS:

  • compute: promoted standby_policy, target_suspended_size, and target_stopped_size fields in google_compute_region_instance_group_manager and google_compute_instance_group_manager resource from beta to ga (#​20821)
  • dns: added health_check and external_endpoints fields to google_dns_record_set resource (#​20843)
  • sql: added server_ca_pool field to google_sql_database_instance resource (#​20834)
  • vmwareengine: allowed import of non-STANDARD private clouds in google_vmwareengine_private_cloud (#​20832)

BUG FIXES:

  • dataproc: fixed boolean fields in shielded_instance_config in the google_dataproc_cluster resource (#​20828)
  • gkeonprem: fixed permadiff on vcenter field in google_gkeonprem_vmware_cluster resource (#​20837)
  • networkservices: fixed google_network_services_gateway resource so that it correctly waits for the router to be deleted on terraform destroy (#​20817)
  • provider: fixed issue where GOOGLE_CLOUD_QUOTA_PROJECT env var would override explicit billing_project (#​20839)

v6.15.0

Compare Source

NOTES:

  • compute: google_compute_firewall_policy_association now uses MMv1 engine instead of DCL. (#​20744)

DEPRECATIONS:

  • compute: deprecated numeric_id (string) field in google_compute_network resource. Use the new network_id (integer) field instead (#​20698)

FEATURES:

  • New Data Source: google_gke_hub_feature (#​20721)
  • New Resource: google_storage_folder (#​20767)

IMPROVEMENTS:

  • artifactregistry: added vulnerability_scanning_config field to google_artifact_registry_repository resource (#​20726)
  • backupdr: promoted datasource google_backup_dr_backup to ga (#​20677)
  • backupdr: promoted datasource google_backup_dr_data_source to ga (#​20677)
  • bigquery: added condition field to google_bigquery_dataset_access resource (#​20707)
  • bigquery: added condition field to google_bigquery_dataset resource (#​20707)
  • composer: added airflow_metadata_retention_config field to google_composer_environment (#​20769)
  • compute: added back the validation for target_service field on the google_compute_service_attachment resource to validade a ForwardingRule or Gateway URL (#​20711)
  • compute: added availability_domain field to google_compute_instance, google_compute_instance_template and google_compute_region_instance_template resources (#​20694)
  • compute: added network_id (integer) field to google_compute_network resource and data source (#​20698)
  • compute: added preset_topology field to google_network_connectivity_hub resource (#​20720)
  • compute: added subnetwork_id field to google_compute_subnetwork data source (#​20666)
  • compute: made setting resource policies for google_compute_instance outside of terraform or using google_compute_disk_resource_policy_attachment no longer affect the boot_disk.initialize_params.resource_policies field (#​20764)
  • container: changed google_container_cluster to apply maintenance policy updates after upgrades during cluster update (#​20708)
  • container: made nodepool concurrent operations scale better for google_container_cluster and google_container_node_pool resources (#​20738)
  • datastream: added gtid and binary_log_position fields to google_datastream_stream resource (#​20777)
  • developerconnect: added support for setting up a google_developer_connect_connection resource without specifying the authorizer_credentials field (#​20756)
  • filestore: added tags field to google_filestore_backup to allow setting tags for backups at creation time (#​20718)
  • networkconnectivity: added group field to google_network_connectivity_spoke resource (#​20689)
  • networkmanagement: promoted google_network_management_vpc_flow_logs_config resource to ga (#​20701)
  • parallelstore: added deployment_type field to google_parallelstore_instance resource (#​20785)
  • storagetransfer: added replication_spec field to google_storage_transfer_job resource (#​20788)
  • workbench: made gcs-data-bucket metadata key modifiable in google_workbench_instance resource (#​20728)

BUG FIXES:

  • accesscontextmanager: fixed permadiff due to reordering on google_access_context_manager_service_perimeter_dry_run_egress_policy egress_from.identities (#​20794)
  • accesscontextmanager: fixed permadiff due to reordering on google_access_context_manager_service_perimeter_dry_run_ingress_policy ingress_from.identities (#​20794)
  • accesscontextmanager: fixed permadiff due to reordering on google_access_context_manager_service_perimeter_egress_policy egress_from.identities (#​20794)
  • accesscontextmanager: fixed permadiff due to reordering on google_access_context_manager_service_perimeter_ingress_policy ingress_from.identities (#​20794)
  • apigee: fixed 404 error when updating google_apigee_environment (#​20745)
  • bigquery: fixed DROP COLUMN error with bigquery flexible column names in google_bigquery_table (#​20797)
  • compute: allowed Service Attachment with Project Number to be used as google_compute_forwarding_rule.target (#​20790)
  • compute: fixed an issue where terraform plan -refresh=false with google_compute_ha_vpn_gateway.gateway_ip_version would plan a resource replacement if a full refresh had not been run yet. Terraform now assumes that the value is the default value, IPV4, until a refresh is completed. (#​20682)
  • compute: fixed panic when zonal resize request fails on google_compute_resize_request (#​20734)
  • compute: fixed perma-destroy for psc_data in google_compute_region_network_endpoint_group resource (#​20783)
  • compute: fixed google_compute_instance_guest_attributes to return an empty list when queried values don't exist instead of throwing an error (#​20760)
  • integrationconnectors: allowed AUTH_TYPE_UNSPECIFIED option in google_integration_connectors_connection resource to support non-standard auth types (#​20782)
  • logging: fixed bug in google_logging_project_bucket_config when providing project in the format of <project-id-only> (#​20709)
  • networkconnectivity: made include_export_ranges and exclude_export_ranges fields mutable in google_network_connectivity_spoke to avoid recreation of resources (#​20742)
  • sql: fixed permadiff when settings.data_cache_config is set to false for google_sql_database_instance resource (#​20656)
  • storage: made resource_google_storage_bucket_object generate diff for md5hash, generation, crc32c if content changes (#​20687)
  • vertexai: made contents_delta_uri an optional field in google_vertex_ai_index (#​20780)
  • workbench: fixed an issue where a server-added metadata tag of "resource-url" would not be ignored on google_workbench_instance (#​20717)

v6.14.1

Compare Source

BUG FIXES:

  • compute: fixed an issue where google_compute_firewall_policy_rule was incorrectly removed from the Terraform state (#​20733)

v6.14.0

Compare Source

FEATURES:

  • New Resource: google_network_security_intercept_deployment_group (#​20615)
  • New Resource: google_network_security_intercept_deployment (#​20634)
  • New Resource: google_network_security_authz_policy (#​20595)
  • New Resource: google_network_services_authz_extension (#​20595)

IMPROVEMENTS:

  • compute: google_compute_instance is no longer recreated when changing boot_disk.auto_delete (#​20580)
  • compute: added CA_ENTERPRISE_ANNUAL option for field cloud_armor_tier in google_compute_project_cloud_armor_tier resource (#​20596)
  • compute: added network_tier field to google_compute_global_forwarding_rule resource (#​20582)
  • compute: added rule.rate_limit_options.enforce_on_key_configs field to google_compute_security_policy resource (#​20597)
  • compute: made metadata_startup_script able to be updated via graceful switch in google_compute_instance (#​20655)
  • container: added field enable_fqdn_network_policy to resource google_container_cluster (#​20609)
  • identityplatform: marked quota.0.sign_up_quota_config subfields conditionally required in google_identity_platform_config to move errors from apply time up to plan time, and clarified the rule in documentation (#​20627)
  • networkconnectivity: added support for updating linked_vpn_tunnels.include_import_ranges, linked_interconnect_attachments.include_import_ranges, linked_router_appliance_instances. instances and linked_router_appliance_instances.include_import_ranges in google_network_connectivity_spoke (#​20650)
  • storage: added hdfs_data_source field to google_storage_transfer_job resource (#​20583)
  • tpuv2: added network_configs and network_config.queue_count fields to google_tpu_v2_vm resource (#​20621)

BUG FIXES:

  • accesscontextmanager: fixed an update bug in google_access_context_manager_perimeter by removing the broken output-only etag field in google_access_context_manager_perimeter and google_access_context_manager_perimeters (#​20691)
  • compute: fixed permadiff on the recaptcha_options field for google_compute_security_policy resource (#​20617)
  • compute: fixed issue where updating labels on resource_google_compute_resource_policy would fail because of a patch error with guest_flush (#​20632)
  • networkconnectivity: fixed linked_router_appliance_instances.instances.virtual_machine and linked_router_appliance_instances.instances.ip_address attributes in google_network_connectivity_spoke to be correctly marked as required. Otherwise the request to create the resource will fail. (#​20650)
  • privateca: fixed an issue which causes error when updating labels for activated sub-CA (#​20630)
  • sql: fixed permadiff when 'settings.data_cache_config' is set to false for 'google_sql_database_instance' resource (#​20656)

v6.13.0

Compare Source

NOTES:

  • New ephemeral resources google_service_account_access_token, google_service_account_id_token, google_service_account_jwt, google_service_account_key now support ephemeral values.
  • iam3: promoted resources google_iam_principal_access_boundary_policy, google_iam_organizations_policy_binding, google_iam_folders_policy_binding and google_iam_projects_policy_binding to GA (#​20475) DEPRECATIONS:
  • gkehub: deprecated configmanagement.config_sync.metrics_gcp_service_account_email in google_gke_hub_feature_membership resource (#​20561)

FEATURES:

  • New Ephemeral Resource: google_service_account_access_token (#​20542)
  • New Ephemeral Resource: google_service_account_id_token (#​20542)
  • New Ephemeral Resource: google_service_account_jwt (#​20542)
  • New Ephemeral Resource: google_service_account_key (#​20542)
  • New Data Source: google_backup_dr_backup_vault (#​20468)
  • New Data Source: google_composer_user_workloads_config_map (GA) (#​20478)
  • New Data Source: google_composer_user_workloads_secret (GA) (#​20478)
  • New Resource: google_composer_user_workloads_config_map (GA) (#​20478)
  • New Resource: google_composer_user_workloads_secret (GA) (#​20478)
  • New Resource: google_gemini_code_repository_index (#​20474)
  • New Resource: google_network_security_mirroring_deployment (#​20489)
  • New Resource: google_network_security_mirroring_deployment_group (#​20489)
  • New Resource: google_network_security_mirroring_endpoint_group_association (#​20489)
  • New Resource: google_network_security_mirroring_endpoint_group (#​20489)

IMPROVEMENTS:

  • accesscontextmanager: added etag to google_access_context_manager_service_perimeter and google_access_context_manager_service_perimeters (#​20455)
  • alloydb: increased default timeout on google_alloydb_cluster to 120m from 30m (#​20547)
  • bigtable: added row_affinity field to google_bigtable_app_profile resource (#​20435)
  • cloudbuild: added private_service_connect field to google_cloudbuild_worker_pool resource (#​20561)
  • clouddeploy: added associated_entities field to google_clouddeploy_target resource (#​20561)
  • clouddeploy: added serial_pipeline.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.route_destinations field to google_clouddeploy_delivery_pipeline resource (#​20561)
  • composer: added multiple composer 3 related fields to google_composer_environment (GA) (#​20478)
  • compute: google_compute_instance, google_compute_instance_template, google_compute_region_instance_template now supports advanced_machine_features.enable_uefi_networking field (#​20531)
  • compute: added support for specifying storage pool with name or partial url (#​20502)
  • compute: added numeric_id to the google_compute_network data source (#​20548)
  • compute: added threshold_configs field to google_compute_security_policy resource (#​20545)
  • compute: added server generated id as forwarding_rule_id to google_compute_global_forwarding_rule (#​20404)
  • compute: added server generated id as health_check_id to google_region_health_check (#​20404)
  • compute: added server generated id as instance_group_manager_id to google_instance_group_manager (#​20404)
  • compute: added server generated id as instance_group_manager_id to google_region_instance_group_manager (#​20404)
  • compute: added server generated id as network_endpoint_id to google_region_network_endpoint (#​20404)
  • compute: added server generated id as subnetwork_id to google_subnetwork (#​20404)
  • compute: added the psc_data field to the google_compute_region_network_endpoint_group resource (#​20454)
  • container: added enterprise_config field to google_container_cluster resource (#​20534)
  • container: added node_pool_autoconfig.linux_node_config.cgroup_mode field to google_container_cluster resource (#​20460)
  • dataproc: added autotuning_config and cohort fields to google_dataproc_batch (#​20410)
  • dataproc: added cluster_config.preemptible_worker_config.instance_flexibility_policy.provisioning_model_mix field to google_dataproc_cluster resource (#​20396)
  • dataproc: added confidential_instance_config field to google_dataproc_cluster resource (#​20488)
  • discoveryengine: added HEALTHCARE_FHIR to industry_vertical field in google_discovery_engine_search_engine (#​20471)
  • gkehub: added configmanagement.config_sync.stop_syncing field to google_gke_hub_feature_membership resource (#​20561)
  • monitoring: added disable_metric_validation field to google_monitoring_alert_policy resource (#​20544)
  • oracledatabase: added deletion_protection field to google_oracle_database_autonomous_database (#​20484)
  • oracledatabase: added deletion_protection field to google_oracle_database_cloud_exadata_infrastructure (#​20485)
  • oracledatabase: added deletion_protection field to google_oracle_database_cloud_vm_cluster (#​20392)
  • parallelstore: added deployment_type to google_parallelstore_instance (#​20457)
  • resourcemanager: made google_service_account email and member fields available during plan (#​20510)

BUG FIXES:

  • apigee: made google_apigee_organization wait for deletion operation to complete. (#​20504)
  • cloudfunctions: fixed issue when updating vpc_connector_egress_settings field for google_cloudfunctions_function resource. (#​20437)
  • dataproc: ensured oneOf condition is honored when expanding the job configuration for Hive, Pig, Spark-sql, and Presto in google_dataproc_job. (#​20453)
  • gkehub: fixed allowable value INSTALLATION_UNSPECIFIED in template_library.installation (#​20567)
  • sql: fixed edition downgrade failure for an ENTERPRISE_PLUS instance with data cache enabled. (#​20393)

v6.12.0

Compare Source

FEATURES:

  • New Data Source: google_access_context_manager_access_policy (#​20295)
  • New Resource: google_dataproc_gdc_spark_application (#​20242)
  • New Resource: google_managed_kafka_cluster and google_managed_kafka_topic (#​20237)

IMPROVEMENTS:

  • artifactregistry: added common_repository field to google_artifact_registry_repository resource (#​20305)
  • cloudrunv2: added urls output field to google_cloud_run_v2_service resource (#​20313)
  • compute: added IDPF as a possible value for the network_interface.nic_type field in google_compute_instance resource (#​20250)
  • compute: added IDPF as a possible value for the guest_os_features.type field in google_compute_image resource (#​20250)
  • compute: added replica_names field to sql_database_instance resource (#​20202)
  • filestore: added performance_config field to google_filestore_instance (#​20218)
  • redis: added persistence_config to google_redis_cluster. (#​20212)
  • securesourcemanager: added workforce_identity_federation_config field to google_secure_source_manager_instance resource (#​20290)
  • spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
  • sql: added psc_auto_connections fields to google_sql_database_instance resource (#​20307)

BUG FIXES:

  • accesscontextmanager: fixed permadiff in perimeter google_access_context_manager_service_perimeter_ingress_policy and google_access_context_manager_service_perimeter_egress_policy resources when there are duplicate resources in the rules (#​20294)
    • accesscontextmanager: fixed comparison of identity_type in ingress_from and egress_from when the IDENTITY_TYPE_UNSPECIFIED is set (#​20221)
  • compute: fixed permadiff on attempted type field updates in google_computer_security_policy, updating this field will now force recreation of the resource (#​20316)
  • identityplatform: fixed perma-diff originating from the sign_in.anonymous.enabled field in google_identity_platform_config (#​20244)

v6.11.2

Compare Source

BUG FIXES:

  • vertexai: fixed issue with google_vertex_ai_endpoint where upgrading to 6.11.0 would delete all traffic splits that were set outside Terraform (which was previously a required step for all meaningful use of this resource). (#​20350)

v6.11.1

Compare Source

BUG FIXES:

  • container: fixed diff on google_container_cluster.user_managed_keys_config field for resources that had not set it. (#​20314)
  • container: marked google_container_cluster.user_managed_keys_config as immutable because it can't be updated in place. (#​20314)

v6.11.0

Compare Source

NOTES:

  • compute: migrated google_compute_firewall_policy_rule from DCL engine to MMv1 engine. (#​20160)

BREAKING CHANGES:

  • looker: made oauth_config a required field in google_looker_instance, as creating this resource without that field always triggers an API error (#​20196)

FEATURES:

  • New Data Source: google_spanner_database (#​20114)
  • New Resource: google_apigee_api (#​20113)
  • New Resource: google_dataproc_gdc_application_environment (#​20165)
  • New Resource: google_dataproc_gdc_service_instance (#​20147)
  • New Resource: google_memorystore_instance (#​20108)

IMPROVEMENTS:

  • apigee: added in-place update support for google_apigee_env_references (#​20182)
  • apigee: added in-place update support for google_apigee_environment resource (#​20189)
  • cloudrun: added empty_dir field to google_cloud_run_service (#​20185)
  • cloudrunv2: added empty_dir field to google_cloud_run_v2_service and google_cloud_run_v2_job (#​20185)
  • compute: added disks field to google_compute_node_template resource (#​20180)
  • compute: added preconfigured_waf_config field to google_compute_security_policy resource (#​20183)
  • compute: added replica_names field to sql_database_instance resource (#​20202)
  • compute: added instance_flexibility_policy field to google_compute_region_instance_group_manager resource (#​20132)
  • compute: increased google_compute_security_policy timeouts from 20 minutes to 30 minutes (#​20145)
  • container: added control_plane_endpoints_config field to google_container_cluster resource. (#​20193)
  • container: added parallelstore_csi_driver_config field to google_container_cluster resource. (#​20163)
  • container: added user_managed_keys_config field to google_container_cluster resource. (#​20105)
  • firestore: allowed single field indexes to support __name__ DESC indexes in google_firestore_index resources (#​20124)
  • privateca: added support for google_privateca_certificate_authority with type = "SUBORDINATE" to be activated into "STAGED" state (#​20103)
  • spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
  • vertexai: added traffic_split, private_service_connect_config, predict_request_response_logging_config, dedicated_endpoint_enabled, and dedicated_endpoint_dns fields to google_vertex_ai_endpoint resource (#​20179)
  • workflows: added deletion_protection field to google_workflows_workflow resource (#​20106)

BUG FIXES:

  • compute: fixed a diff based on server-side reordering of match.src_address_groups and match.dest_address_groups in google_compute_network_firewall_policy_rule (#​20148)
  • compute: fixed permadiff on the preconfigured_waf_config field for google_compute_security_policy resource (#​20183)
  • container: fixed in-place updates for node_config.containerd_config in google_container_cluster and google_container_node_pool (#​20112)

v6.10.0

Compare Source

FEATURES:

  • New Data Source: google_compute_instance_guest_attributes (#​20095)
  • New Data Source: google_service_accounts (#​20062)
  • New Resource: google_iap_settings (#​20085)

IMPROVEMENTS:

  • apphub: added GLOBAL enum value to scope.type field in google_apphub_application resource (#​20015)
  • assuredworkloads: added workload_options field to google_assured_workloads_workload resource (#​19985)
  • bigquery: added external_catalog_dataset_options fields to google_bigquery_dataset resource (beta) (#​20097)
  • bigquery: added descriptive validation errors for missing required fields in google_bigquery_job destination table configuration (#​20077)
  • compute: desired_status on google_compute_instance can now be set to TERMINATED or SUSPENDED on instance creation (#​20031)
  • compute: added header_action and redirect_options fields to google_compute_security_policy_rule resource (#​20079)
  • compute: added interface.ipv6-address field in google_compute_external_vpn_gateway resource (#​20091)
  • compute: added propagated_connection_limit and connected_endpoints.propagated_connection_count fields to google_compute_service_attachment resource (#​20016)
  • compute: added plan-time validation to name on google_compute_instance (#​20036)
  • compute: added support for advanced_machine_features.turbo_mode to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template (#​20090)
  • container: added in-place update support for labels, resource_manager_tags and workload_metadata_config in google_container_cluster.node_config (#​20038)
  • filestore: added protocol property to resource google_filestore_instance (#​19982)
  • memorystore: added mode flag to google_memorystore_instance (#​19988)
  • netapp: added zone and replica_zone fields to google_netapp_storage_pool resource (#​19980)
  • netapp: added zone and replica_zone fields to google_netapp_volume resource (#​19980)
  • networksecurity: added tls_inspection_policy field to google_network_security_gateway_security_policy (#​19986)
  • resourcemanager: added disabled to google_service_account datasource (#​20034)
  • spanner: added asymmetric_autoscaling_options field to google_spanner_instance (#​20014)
  • sql: removed the client-side default of ENTERPRISE for edition in google_sql_database_instance so that edition is determined by the API when unset. This will cause new instances to use ENTERPRISE_PLUS as the default for POSTGRES_16. (#​19977)
  • vmwareengine: added autoscaling_settings to google_vmwareengine_private_cloud resource (#​20057)

BUG FIXES:

  • accesscontextmanager: fixed permadiff for perimeter ingress / egress rule resources (#​20046)
  • compute: fixed an error in google_compute_security_policy_rule that prevented updating the default rule (#​20066)
  • container: fixed missing in-place updates for some google_container_cluster.node_config subfields (#​20038)

Configuration

📅 Schedule: Branch creation - "* * * * 1-5" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by uis-devops-renovatebot

Merge request reports