chore(deps): update terraform google to v6

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	< 6 -> < 7	6.2.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.1.0

Compare Source

v6.0.1

Compare Source

BREAKING CHANGES:

• sql: removed settings.ip_configuration.require_ssl from google_sql_database_instance in favor of settings.ip_configuration.ssl_mode. This field was intended to be removed in 6.0.0. (#​19263)

v6.0.0

Compare Source

Terraform Google Provider 6.0.0 Upgrade Guide

BREAKING CHANGES:

• provider: changed provider labels to add the goog-terraform-provisioned: true label by default. (#​19190)
• activedirectory: added deletion_protection field to google_active_directory_domain resource. This field defaults to true, preventing accidental deletions. To delete the resource, you must first set deletion_protection = false before destroying the resource. (#​18906)
• alloydb: removed network in google_alloy_db_cluster. Use network_config.network instead. (#​19181)
• bigquery: added client-side validation to prevent table view creation if schema contains required fields for google_bigquery_table resource (#​18767)
• bigquery: removed allow_resource_tags_on_deletion from google_bigquery_table. Resource tags are now always allowed on table deletion. (#​19077)
• bigqueryreservation: removed multi_region_auxiliary from google_bigquery_reservation (#​18922)
• billing: revised the format of id for google_billing_project_info (#​18823)
• cloudrunv2: added deletion_protection field to google_cloudrunv2_service. This field defaults to true, preventing accidental deletions. To delete the resource, you must first set deletion_protection = false before destroying the resource.(#​19019)
• cloudrunv2: changed liveness_probe to no longer infer a default value from api on google_cloud_run_v2_service. Removing this field and applying the change will now remove liveness probe from the Cloud Run service. (#​18764)
• cloudrunv2: retyped containers.env to SET from ARRAY for google_cloud_run_v2_service and google_cloud_run_v2_job. (#​18855)
• composer: ip_allocation_policy = [] in google_composer_environment is no longer valid configuration. Removing the field from configuration should not produce a diff. (#​19207)
• compute: added new required field enabled in google_compute_backend_service and google_compute_region_backend_service (#​18772)
• compute: changed certifcate_id in google_compute_managed_ssl_certificate to correctly be output only. (#​19069)
• compute: revised and in some cases removed default values of connection_draining_timeout_sec, balancing_mode and outlier_detection in google_compute_region_backend_service and google_compute_backend_service. (#​18720)
• compute: revised the format of id for compute_network_endpoints (#​18844)
• compute: guest_accelerator = [] is no longer valid configuration in google_compute_instance. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#​19207)
• compute: google_compute_instance_from_template and google_compute_instance_from_machine_image network_interface.alias_ip_range, network_interface.access_config, attached_disk, guest_accelerator, service_account, scratch_disk can no longer be set to an empty block []. Removing the fields from configuration should not produce a diff. (#​19207)
• compute: secondary_ip_ranges = [] in google_compute_subnetwork is no longer valid configuration. To set an explicitly empty list, use send_secondary_ip_range_if_empty and completely remove secondary_ip_range from config. (#​19207)
• container: made advanced_datapath_observability_config.enable_relay required in google_container_cluster (#​19060)
• container: removed deprecated field advanced_datapath_observability_config.relay_mode from google_container_cluster resource. Users are expected to use enable_relay field instead. (#​19060)
• container: three label-related fields are now in google_container_cluster resource. resource_labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-only terraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-only effective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#​19062)
• container: made three fields resource_labels, terraform_labels, and effective_labels be present in google_container_cluster datasources. All three fields will have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent to effective_labels on the resource. (#​19062)
• container: guest_accelerator = [] is no longer valid configuration in google_container_cluster and google_container_node_pool. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#​19207)
• container: guest_accelerator.gpu_driver_installation_config = [] and guest_accelerator.gpu_sharing_config = [] are no longer valid configuration in google_container_cluster and google_container_node_pool. Removing the fields from configuration should not produce a diff. (#​19207)
• datastore: removed google_datastore_index in favor of google_firestore_index (#​19160)
• edgenetwork: three label-related fields are now in google_edgenetwork_network and google_edgenetwork_subnet resources. labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-only terraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-only effective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#​19062)
• identityplatform: removed resource google_identity_platform_project_default_config in favor of google_identity_platform_project_config (#​18992)
• pubsub: allowed schema_settings in google_pubsub_topic to be removed (#​18631)
• integrations: removed create_sample_workflows and provision_gmek from google_integrations_client (#​19148)
• redis: added a deletion_protection_enabled field to the google_redis_cluster resource. This field defaults to true, preventing accidental deletions. To delete the resource, you must first set deletion_protection_enabled = false before destroying the resource. (#​19173)
• resourcemanager: added deletion_protection field to google_folder to make deleting them require an explicit intent. Folder resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#​19021)
• resourcemanager: made deletion_policy in google_project 'PREVENT' by default. This makes deleting them require an explicit intent. google_project resources cannot be destroyed unless deletion_policy is set to 'ABANDON' or 'DELETE' for the resource. (#​19114)
• sql: removed settings.ip_configuration.require_ssl in google_sql_database_instance. Please use settings.ip_configuration.ssl_mode instead. (#​18843)
• storage: removed no_age field from lifecycle_rule.condition in the google_storage_bucket resource (#​19048)
• vpcaccess: removed default values for min_throughput and min_instances fields on google_vpc_access_connector and made them default to values returned from the API when not provided by users (#​18697)
• vpcaccess: added a conflicting fields restriction between min_throughput and min_instances fields on google_vpc_access_connector (#​18697)
• vpcaccess: added a conflicting fields restriction between max_throughput and max_instances fields on google_vpc_access_connector (#​18697)
• workstation: defaulted host.gce_instance.disable_ssh to true for google_workstations_workstation_config (#​19101)
  IMPROVEMENTS:
• compute: added fields reserved_internal_range and secondary_ip_ranges[].reserved_internal_range to google_compute_subnetwork resource (#​19151)
• compute: changed the behavior of name_prefix in multiple Compute resources to allow for a longer max length of 54 characters. See the upgrade guide and resource documentation for more details. (#​19152)
  BUG FIXES:
• compute: fixed an issue regarding sending enabled field by default for null iap message in google_compute_backend_service and google_compute_region_backend_service (#​18772)

v5.44.0

Compare Source

NOTES:

• 5.44.0 is a backport release, intended to pull in critical container improvements from 6.2.0

IMPROVEMENTS:

• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​19312)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​19312)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​19320)

v5.43.1

Compare Source

v5.43.0

Compare Source

DEPRECATIONS:

• storage: deprecated lifecycle_rule.condition.no_age field in google_storage_bucket. Use the new lifecycle_rule.condition.send_age_if_zero field instead. (#​19172)

FEATURES:

• New Resource: google_kms_ekm_connection_iam_binding (#​19132)
• New Resource: google_kms_ekm_connection_iam_member (#​19132)
• New Resource: google_kms_ekm_connection_iam_policy (#​19132)
• New Resource: google_scc_v2_organization_scc_big_query_exports (#​19184)

IMPROVEMENTS:

• compute: added label_fingerprint field to google_compute_global_address resource (#​19204)
• compute: exposed service side id as new output field forwarding_rule_id on resource google_compute_forwarding_rule (#​19139)
• container: added EXTENDED as a valid option for release_channel field in google_container_cluster resource (#​19141)
• logging: changed enable_analytics parsing to "no preference" in analytics if omitted, instead of explicitly disabling analytics in google_logging_project_bucket_config (#​19126)
• pusbub: added validation to filter field in resource google_pubsub_subscription (#​19131)
• resourcemanager: added default_labels field to google_client_config data source (#​19170)
• vmwareengine: added PC undelete support in google_vmwareengine_private_cloud (#​19192)

BUG FIXES:

• alloydb: fixed a permadiff on psc_instance_config in google_alloydb_instance resource (#​19143)
• compute: fixed a malformed URL that affected updating the server_tls_policy property on google_compute_target_https_proxy resources (#​19164)
• compute: fixed bug where the labels field could not be updated on google_compute_global_address (#​19204)
• compute: fixed force diff replacement logic for network_ip on resource google_compute_instance (#​19135)

v5.42.0

Compare Source

DEPRECATIONS:

• compute: setting google_compute_subnetwork.secondary_ip_range = [] to explicitly set a list of empty objects is deprecated and will produce an error in the upcoming major release. Use send_secondary_ip_range_if_empty while removing secondary_ip_range from config instead. (#​19122)

FEATURES:

• New Data Source: google_artifact_registry_locations (#​19047)
• New Data Source: google_cloud_identity_transitive_group_memberships (#​19038)
• New Resource: google_discovery_engine_schema (#​19124)
• New Resource: google_scc_folder_notification_config (#​19057)
• New Resource: google_scc_v2_folder_notification_config (#​19055)
• New Resource: google_vertex_ai_index_endpoint_deployed_index (#​19061)

IMPROVEMENTS:

• clouddeploy: added serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.pod_selector_label and serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.service_networking.pod_selector_label fields to google_clouddeploy_delivery_pipeline resource (#​19100)
• compute: added send_secondary_ip_range_if_empty to google_compute_subnetwork (#​19122)
• discoveryengine: added skip_default_schema_creation field to google_data_store resource (#​19017)
• dns: changed load_balancer_type field from required to optional in google_dns_record_set (#​19050)
• firestore: added cmek_config field to google_firestore_database resource (#​19107)
• servicenetworking: added update_on_creation_fail field to google_service_networking_connection resource. When it is set to true, enforce an update of the reserved peering ranges on the existing service networking connection in case of a new connection creation failure. (#​19035)
• sql: added server_ca_mode field to google_sql_database_instance resource (#​18998)

BUG FIXES:

• bigquery: made google_bigquery_dataset_iam_member non-authoritative. To remove a bigquery dataset iam member, use an authoritative resource like google_bigquery_dataset_iam_policy (#​19121)
• cloudfunctions2: fixed a "Provider produced inconsistent final plan" bug affecting the service_config.environment_variables field in google_cloudfunctions2_function resource (#​19024)
• cloudfunctions2: fixed a permadiff on storage_source.generation in google_cloudfunctions2_function resource (#​19031)
• compute: fixed issue where sub-resources managed by google_compute_forwarding_rule prevented resource deletion (#​19117)
• logging: changed google_logging_project_bucket_config.enable_analytics behavior to set "no preference" in analytics if omitted, instead of explicitly disabling analytics. (#​19126)
• workbench: fixed a bug with google_workbench_instance metadata drifting when using custom containers. (#​19119)

v5.41.0

Compare Source

DEPRECATIONS:

• resourcemanager: deprecated skip_delete field in the google_project resource. Use deletion_policy instead. (#​18867)

FEATURES:

• New Data Source: google_logging_log_view_iam_policy (#​18990)
• New Data Source: google_scc_v2_organization_source_iam_policy (#​19004)
• New Resource: google_access_context_manager_service_perimeter_dry_run_egress_policy (#​18994)
• New Resource: google_access_context_manager_service_perimeter_dry_run_ingress_policy (#​18994)
• New Resource: google_scc_v2_folder_mute_config (#​18924)
• New Resource: google_scc_v2_project_mute_config (#​18993)
• New Resource: google_scc_v2_project_notification_config (#​19008)
• New Resource: google_scc_v2_organization_source (#​19004)
• New Resource: google_scc_v2_organization_source_iam_binding (#​19004)
• New Resource: google_scc_v2_organization_source_iam_member (#​19004)
• New Resource: google_scc_v2_organization_source_iam_policy (#​19004)
• New Resource: google_logging_log_view_iam_binding (#​18990)
• New Resource: google_logging_log_view_iam_member (#​18990)
• New Resource: google_logging_log_view_iam_policy (#​18990)

IMPROVEMENTS:

• clouddeploy: added gke.proxy_url field to google_clouddeploy_target (#​19016)
• cloudrunv2: added field binary_authorization.policy to resource google_cloud_run_v2_job and resource google_cloud_run_v2_service to support named binary authorization policy. (#​18995)
• compute: added source_regions field to google_compute_healthcheck resource (#​19006)
• compute: added update-in-place support for the google_compute_target_https_proxy.server_tls_policy field (#​18996)
• compute: added update-in-place support for the google_compute_region_target_https_proxy.server_tls_policy field (#​19007)
• container: added auto_provisioning_locations field to google_container_cluster (#​18928)
• dataform: added kms_key_name field to google_dataform_repository resource (#​18947)
• discoveryengine: added skip_default_schema_creation field to google_discovery_engine_data_store resource (#​19017)
• gkehub: added configmanagement.management and configmanagement.config_sync.enabled fields to google_gkehub_feature_membership (#​19016)
• gkehub: added management field to google_gke_hub_feature.fleet_default_member_config.configmanagement (#​18963)
• resourcemanager: added deletion_policy field to the google_project resource. Setting deletion_policy to PREVENT will protect the project against any destroy actions caused by a terraform apply or terraform destroy. Setting deletion_policy to ABANDON allows the resource to be abandoned rather than deleted and it behaves the same with skip_delete = true. Default value is DELETE. skip_delete = true takes precedence over deletion_policy = "DELETE".
• storage: added force_destroy field to google_storage_managed_folder resource (#​18973)
• storage: added generation field to google_storage_bucket_object resource (#​18971)

BUG FIXES:

• compute: fixed google_compute_instance.alias_ip_range update behavior to avoid temporarily deleting unchanged alias IP ranges (#​19015)
• compute: fixed the bug that creation of PSC forwarding rules fails in google_compute_forwarding_rule resource when provider default labels are set (#​18984)
• sql: fixed a perma-diff in settings.insights_config in google_sql_database_instance (#​18962)

v5.40.0

Compare Source

IMPROVEMENTS:

• bigquery: added support for value DELTA_LAKE to source_format in google_bigquery_table resource (#​18915)
• compute: added access_mode field to google_compute_disk resource (#​18857)
• compute: added stack_type, and gateway_ip_version fields to google_compute_router resource (#​18839)
• container: added field ray_operator_config for resource_container_cluster (#​18825)
• container: promoted additional_node_network_configs and additional_pod_network_configs fields to GA in the google_container_node_pool resource (#​18842)
• container: promoted enable_multi_networking to GA in the google_container_cluster resource (#​18842)
• monitoring: updated goal field to accept a max threshold of up to 0.9999 in google_monitoring_slo resource to 0.9999 (#​18845)
• networkconnectivity: added export_psc field to google_network_connectivity_hub resource (#​18866)
• sql: added enable_dataplex_integration field to google_sql_database_instance resource (#​18852)

BUG FIXES:

• bigquery: fixed a permadiff when handling "assets" in params in the google_bigquery_data_transfer_config resource (#​18898)
• bigquery: fixed an issue preventing certain keys in params from being assigned values in google_bigquery_data_transfer_config (#​18888)
• compute: fixed perma-diff of advertised_ip_ranges field in google_compute_router resource (#​18869)
• container: fixed perma-diff on node_config.guest_accelerator.gpu_driver_installation_config field in GKE 1.30+ in google_container_node_pool resource (#​18835)
• sql: fixed a perma-diff in settings.insights_config in google_sql_database_instance (#​18962)

v5.39.1

Compare Source

BUG FIXES:

• datastream: fixed a breaking change in 5.39.0 google_datastream_stream that made one of destination_config.bigquery_destination_config.merge or destination_config.bigquery_destination_config.append_only required (#​18903)

v5.39.0

Compare Source

NOTES:

• networkconnectivity: migrated google_network_connectivity_hub from DCL to MMv1 (#​18724)
• networkconnectivity: migrated google_network_connectivity_spoke from DCL to MMv1 (#​18779)

DEPRECATIONS:

• bigquery: deprecated allow_resource_tags_on_deletion in google_bigquery_table. (#​18811)
• bigqueryreservation: deprecated multi_region_auxiliary on google_bigquery_reservation. (#​18803)
• datastore: deprecated the resource google_datastore_index. Use the google_firestore_index resource instead. (#​18781)

FEATURES:

• New Resource: google_apigee_environment_keyvaluemaps_entries (#​18707)
• New Resource: google_apigee_environment_keyvaluemaps (#​18707)
• New Resource: google_compute_resize_request (#​18725)
• New Resource: google_compute_router_route_policy (#​18759)
• New Resource: google_scc_v2_organization_mute_config (#​18752)

IMPROVEMENTS:

• alloydb: added observability_config field to google_alloydb_instance resource (#​18743)
• bigquery: added resource_tags field to google_bigquery_dataset resource (ga) (#​18711)
• bigquery: added resource_tags field to google_bigquery_table resource (#​18741)
• bigtable: added data_boost_isolation_read_only and data_boost_isolation_read_only.compute_billing_owner fields to google_bigtable_app_profile resource (#​18819)
• cloudfunctions: added build_service_account field to google_cloudfunctions_function resource (#​18702)
• compute: added aws_v4_authentication fields to google_compute_backend_service resource (#​18796)
• compute: added custom_learned_ip_ranges and custom_learned_route_priority fields to google_compute_router_peer resource (#​18727)
• compute: added export_policies and import_policies fields to google_compute_router_peer resource (#​18759)
• compute: added shared_secret field to google_compute_public_advertised_prefix resource (#​18786)
• compute: added storage_pool under boot_disk.initialize_params to google_compute_instance resource (#​18817)
• compute: changed target_service field on the google_compute_service_attachment resource to accept a ForwardingRule or Gateway URL. (#​18742)
• container: added field ray_operator_config for google_container_cluster (#​18825)
• datastream: added merge and append_only fields to google_datastream_stream resource (#​18726)
• datastream: promoted source_config.sql_server_source_config and backfill_all.sql_server_excluded_objects fields in google_datastream_stream resource from beta to GA (#​18732)
• datastream: promoted sql_server_profile field in google_datastream_connection_profile resource from beta to GA (#​18732)
• dlp: added cloud_storage_target field to google_data_loss_prevention_discovery_config resource (#​18740)
• resourcemanager: added check_if_service_has_usage_on_destroy field to google_project_service resource (#​18753)
• resourcemanager: added the member property to google_project_service_identity (#​18695)
• vmwareengine: added deletion_delay_hours field to google_vmwareengine_private_cloud resource (#​18698)
• vmwareengine: supported type change from TIME_LIMITED to STANDARD for multi-node google_vmwareengine_private_cloud resource (#​18698)
• workbench: added access_configs to google_workbench_instance resource (#​18737)

BUG FIXES:

• compute: fixed perma-diff for interconnect_type being DEDICATED in google_compute_interconnect resource (#​18761)
• dialogflowcx: fixed intermittent issues with retrieving resource state soon after creating google_dialogflow_cx_security_settings resources (#​18792)
• firestore: fixed missing import of field for google_firestore_field. (#​18771)
• firestore: fixed bug where fields database, collection, document_id, and field could not be updated on google_firestore_document and google_firestore_field resources. (#​18821)
• netapp: made the smb_settings field on the google_netapp_volume resource default to the value returned from the API. This solves permadiffs when the field is unset. (#​18790)
• networksecurity: added recreate functionality on update for client_validation_mode and client_validation_trust_config in google_network_security_server_tls_policy (#​18769)

v5.38.0

Compare Source

FEATURES:

• New Data Source: google_gke_hub_membership_binding (#​18680)
• New Data Source: google_site_verification_token (#​18688)
• New Resource: google_scc_project_notification_config (#​18682)

IMPROVEMENTS:

• compute: promoted labels field on google_compute_global_address resource from beta to GA (#​18646)
• compute: made the google_compute_resource_policy resource updatable in-place (#​18673)
• privilegedaccessmanager: promoted google_privileged_access_manager_entitlement resource from beta to GA (#​18686)
• vertexai: added project_number field to google_vertex_ai_feature_online_store_featureview resource (#​18637)

BUG FIXES:

• cloudfunctions2: fixed permadiffs on service_config.environment_variables field in google_cloudfunctions2_function resource (#​18651)

v5.37.0

Compare Source

FEATURES:

• New Data Source: google_kms_crypto_keys (#​18605)
• New Data Source: google_kms_key_rings (#​18611)
• New Resource: google_scc_v2_organization_notification_config (#​18594)
• New Resource: google_secure_source_manager_repository (#​18576)
• New Resource: google_storage_managed_folder_iam (#​18555)
• New Resource: google_storage_managed_folder (#​18555)

IMPROVEMENTS:

• certificatemanager: added allowlisted_certificates field to google_certificate_manager_trust_config resource (#​18587)
• compute: added max_run_duration and on_instance_stop_action fields to google_compute_instance, google_compute_instance_template, and google_compute_instance_from_machine_image resources (#​18623)
• dataplex: added sql_assertion field to google_dataplex_datascan resource (#​18559)
• gkehub: added fleet_default_member_config.configmanagement.config_sync.enabled field to google_gke_hub_feature resource (#​18582)
• netapp: added zone and replica_zone field to google_netapp_storage_pool resource (#​18609)
• vertexai: added project_number field to google_vertex_ai_feature_online_store_featureview resource (#​18637)
• workstations: added host.gce_instance.vm_tags field to google_workstations_workstation_config resource (#​18588)

BUG FIXES:

• compute: fixed a bug preventing the creation of google_compute_autoscaler and google_compute_region_autoscaler resources if both autoscaling_policy.max_replicas and autoscaling_policy.min_replicas were configured as zero. (#​18607)
• resourcemanager: mitigated eventual consistency issues by adding a 10s wait after google_service_account_key resource creation (#​18566)
• vertexai: fixed issue where updating "metadata" field could fail in google_vertex_ai_index resource (#​18632)

v5.36.0

Compare Source

FEATURES:

• New Resource: google_storage_managed_folder_iam (#​18555)
• New Resource: google_storage_managed_folder (#​18555)

IMPROVEMENTS:

• bigtable: added ignore_warnings field to google_bigtable_gc_policy resource (#​18492)
• cloudfunctions2: added build_config.automatic_update_policy and build_config.on_deploy_update_policy fields to google_cloudfunctions2_function resource (#​18540)
• compute: added confidential_instance_config.confidential_instance_type field to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources (#​18554)
• compute: added custom_error_response_policy and default_custom_error_response_policy fields to google_compute_url_map resource (#​18511)
• compute: added tls_early_data field to google_compute_target_https_proxy resource (#​18512)
• compute: promoted google_compute_network_attachment resource from beta to GA (#​18494)
• datafusion: added connection_type and private_service_connect_config fields to google_data_fusion_instance resource (#​18525)
• healthcare: added encryption_spec field to google_healthcare_dataset resource (#​18528)
• monitoring: added links field to google_monitoring_alert_policy resource (#​18549)
• vertexai: added update support for big_query.entity_id_columns field on google_vertex_ai_feature_group resource (#​18493)
• vertexai: promoted dedicated_serving_endpoint field on google_vertex_ai_feature_online_store resource from beta to GA (#​18513)

BUG FIXES:

• accesscontextmanager: fixed perma-diff caused by ordering of service_perimeters in google_access_context_manager_service_perimeters resource (#​18520)
• compute: fixed a crash in google_compute_reservation resource when share_settings field has changes (#​18498)
• compute: fixed issue in google_compute_instance resource where service_account is not set when specifying service_account.email and no service_account.scopes (#​18521)
• gkehub2: fixed google_gke_hub_feature resource to allow fleet_default_member_config field to be unset (#​18487)
• identityplatform: fixed perma-diff on google_identity_platform_config resource when sms_region_config is not set (#​18537)
• logging: fixed perma-diff on index_configs in google_logging_organization_bucket_config resource (#​18501)

v5.35.0

Compare Source

FEATURES:

• New Data Source: google_artifact_registry_docker_image (#​18446)
• New Resource: google_service_networking_vpc_service_controls (#​18448)

IMPROVEMENTS:

• billingbudget: added enable_project_level_recipients field to google_billing_budget resource (#​18437)
• compute: added action_token_site_keys and session_token_site_keys fields to google_compute_security_policy and google_compute_security_policy_rule resources (#​18414)
• gkehub2: added ENTERPRISE option to security_posture_config field on google_gke_hub_fleet resource (#​18440)
• pubsub: added bigquery_config.service_account_email field to google_pubsub_subscription resource (#​18444)
• redis: added maintenance_version field to google_redis_instance resource (#​18424)
• storage: changed update behavior in google_storage_bucket_object to no longer delete to avoid object deletion on content update (#​18479)
• sql: added support for more MySQL values in type field of google_sql_user resource (#​18452)
• sql: increased timeouts on google_sql_database_instance to 90m to account for longer-running actions such as creation through cloning (#​18458)
• workbench: added update support to gce_setup.boot_disk and gce_setup.data_disks fields in google_workbench_instance resource (#​18482)

BUG FIXES:

• compute: updated google_compute_instance to force reboot if min_node_cpus is updated (#​18420)
• compute: fixed description field in google_compute_firewall to support empty/null values on update (#​18478)
• compute: fixed perma-diff on google_compute_disk for Ubuntu amd64 canonical LTS images (#​18418)
• storage: fixed lowercased custom_placement_config values in google_storage_bucket causing perma-destroy (#​18456)
• workbench: fixed issue where instance was not starting after an update in google_workbench_instance resource (#​18464)
• workbench: fixed perma-diff caused by empty accelerator_configs in google_workbench_instance resource (#​18464)

v5.34.0

Compare Source

NOTES:

• compute: Updated field description of connection_draining_timeout_sec, balancing_mode and outlier_detection in google_compute_region_backend_service and google_compute_backend_service to inform that default values will be changed in 6.0.0 (#​18399)

FEATURES:

• New Resource: google_netapp_backup (#​18357)
• New Resource: google_network_services_service_lb_policies (#​18326)
• New Resource: google_scc_management_folder_security_health_analytics_custom_module (#​18360)
• New Resource: google_scc_management_organization_project_security_health_analytics_custom_module (#​18369)
• New Resource: google_scc_management_organization_security_health_analytics_custom_module (#​18374)

IMPROVEMENTS:

• alloydb: changed the resource google_alloydb_instance to be created directly with public IP enabled instead of creating the resource with public IP disabled and then enabling it (#​18344)
• bigtable: added automated_backup_configuration field to google_bigtable_table resource (#​18335)
• cloudbuildv2: added support for connecting to Bitbucket Data Center and Bitbucket Cloud with the bitbucket_data_center_config and bitbucket_cloud_config fields in google_cloudbuildv2_connection (#​18375)
• compute: added update support to ssl_policy field in google_compute_region_target_https_proxy resource (#​18361)
• compute: removed enum validation on guest_os_features.type in google_compute_disk to allow for new features to be used without provider update (#​18331)
• compute: updated documentation of google_compute_target_https_proxy and google_compute_region_target_https_proxy (#​18358)
• container: added support for security_posture_config.mode value "ENTERPRISE" in resource_container_cluster (#​18334)
• discoveryengine: added document_processing_config field to google_discovery_engine_data_store resource (#​18350)
• edgecontainer: added 'maintenance_exclusions' field to 'google_edgecontainer_cluster' resource (#​18370)
• gkehub: added prevent_drift field to ConfigManagement fleet_default_member_config (#​18330)
• netapp: added administrators field to google_netapp_active_directory resource (#​18333)
• vertexai: promoted optimized field to GA for google_vertex_ai_feature_online_store resource (#​18348)
• workbench: updated the metadata keys managed by the backend. (#​18367)

BUG FIXES:

• compute: fixed an issue where google_compute_instance_group_manager with a pending operation was incorrectly removed due to the operation no longer being present in the backend (#​18380)
• compute: fixed issue where users could not create google_compute_security_policy resources with layer_7_ddos_defense_config explicitly disabled (#​18345)
• workbench: fixed a bug in the google_workbench_instance resource where specifying a network in some scenarios would cause instance creation to fail (#​18404

v5.33.0

Compare Source

DEPRECATIONS:

• healthcare: deprecated notification_config in google_healthcare_fhir_store resource. Use notification_configs instead. (#​18306)

FEATURES:

• New Data Source: `google

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun