Update Terraform #2
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/google-7.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
~> 6.0→~> 7.0Release Notes
hashicorp/terraform-provider-google (google)
v7.36.0FEATURES:
google_apigee_instance(#27683)google_oracle_database_goldengate_deployment_types(#27634)google_apigee_datastore(#27607)google_discovery_engine_search_engine_iam_binding(#27703)google_license_manager_configuration(#27707)google_migration_center_import_job(#27599)google_compute_disk(#27608)google_compute_image(#27608)google_compute_snapshot(#27608)google_storage_hmac_key(#27637)IMPROVEMENTS:
egress_fromandegress_tofields ingoogle_access_context_manager_service_perimeter_egress_policyresource (#27690)egress_fromandegress_tofields ingoogle_access_context_manager_service_perimeter_ingress_policyresource (#27690)google_bigquery_routine_iam_policy,google_bigquery_routine_iam_binding,google_bigquery_routine_iam_member) forgoogle_bigquery_routineresource (#27704)automated_backup_policy.locationsfield ingoogle_bigtable_tableresource (#27646)agent_tool,file_search_tool, andwidget_toolfields to thegoogle_ces_toolresource (#27681)google_search_tool.prompt_configanddata_store_tool.data_store_sourcefields to thegoogle_ces_toolresource (#27681)remote_agent_tool,connector_tool, andmcp_toolas read-only (output-only) attributes ingoogle_ces_tool(#27681)node_creation_configfield togoogle_container_clusterresource (#27702)node_drain_config.pdb_timeout_durationandnode_drain_config.grace_termination_durationfields togoogle_container_node_poolandgoogle_container_clusterresources (#27694)RICHTEXTto allowed values ofprimitive_typeongoogle_data_catalog_tag_templatefields. (#27672)google_dataplex_data_productresource (iam_policy,iam_binding,iam_member) (#27652)access_approval_configfield togoogle_dataplex_data_productresource (#27652)network_resourcesfield as required ingoogle_hypercomputecluster_clusterresource to align with API validation (#27655)google_network_security_ull_mirroring_engine,google_network_security_ull_mirroring_collector, andgoogle_network_security_ull_mirroring_collector_ruleresources promoted to GA (#27710)psc_allowed_projectsfield togoogle_secure_source_manager_instanceresource (#27695)NVIDIA_RTX6000to the supportedgce_setup.accelerator_configs.typevalues ongoogle_workbench_instanceresource(#27709)BUG FIXES:
ip_header_indexingoogle_apigee_environmentresource (#27670)google_backup_dr_restore_workloaddid not use the correct API JSON names for networking/reservation fields (#27680)connection_limitin theconsumer_accept_listsblock ofgoogle_compute_service_attachmentwould not trigger a resource update. (#27688)google_compute_regional_url_mapresource (#27705)google_data_loss_prevention_discovery_configcaused by nested error details (#27669)connection_pool_configwhenconnection_pooling_enabledis set tofalse(#27711)google_tags_location_tag_bindingfailing withOperation location does not match service location 'global'during creation (#27668)terraform importofgoogle_vertex_ai_index_endpoint_deployed_indexfailing with "Cannot determine region" when provider-levelregion/zoneis unset (#27692)v7.35.0FEATURES:
google_oracle_database_goldengate_connection_types(#27567)google_chronicle_findings_refinement(#27591)google_dataplex_data_product(#27588)google_dataplex_data_product_data_asset(#27588)google_migration_center_discovery_client(#27572)google_migration_center_report(#27548)google_oracle_database_goldengate_connection_assignment(#27566)google_oracle_database_goldengate_connection(#27587)google_oracle_database_goldengate_deployment(#27575)google_compute_firewall(#27549)google_compute_global_address(#27549)google_compute_subnetwork(#27549)google_sql_database(#27552)IMPROVEMENTS:
target_typeandtarget_forwarding_rulesfields togoogle_compute_network_firewall_policy_ruleresource (#27538)crash_loop_back_off.max_container_restart_periodfield togoogle_container_node_poolandgoogle_container_clusterresources (#27574)KCP_VPAforlogging_config.enable_componentsfield togoogle_container_clusterresource (#27546)service_accountsupport togoogle_dataplex_data_productaccess group principals (#27588)ttl_config.expiration_offsetfield togoogle_firestore_fieldresource (#27589)ontap_sourcefield togoogle_netapp_backupresource (#27584)gke_podandnetwork_typefields togoogle_network_management_connectivity_testresource (#27585)BUG FIXES:
google_service_account_keyfailed on deletion if the parent service account had already been deleted (#27541)google_storage_bucket(#27605)v7.34.0NOTES:
google_compute_region_instance_templateto use direct HTTP rather than a client library (#27471)google_compute_instance_group_managerresource to use direct HTTP rather than a client library (#27441)FEATURES:
google_compute_service_attachment(#27526)google_oracle_database_goldengate_deployment_environments(#27499)google_config_deployment(#27438)google_dialogflow_sip_trunk(#27468)google_migration_center_assets_export_job(#27466)google_migration_center_report_config(#27395)google_migration_center_settings(#27465)google_migration_center_source(#27496)IMPROVEMENTS:
editionfield togoogle_bigtable_instanceresource (#27507)fail_openfield tollm_prompt_securityblock ingoogle_ces_guardrailresource (#27497)fail_openfield tollm_prompt_securityblock ingoogle_ces_app_versionresource (#27497)ip_versionandip_collectionfields tosecondary_ip_rangefield ingoogle_compute_subnetworkresource (#27432)post_quantum_key_exchangefield togoogle_compute_ssl_policyandgoogle_compute_region_ssl_policyresources (#27479)google_compute_networkdatasource for looking up a network byself_linkin addition toname(#27509)agent_sandbox_configfield togoogle_container_clusterresource (#27482)node_config.gpudirect_strategyandnode_pool.node_config.gpudirect_strategytoclusterresource, addednode_config.gpudirect_strategytonode_poolresource (#27495)create_ignore_already_existsfield togoogle_dataflow_flex_template_jobresource to handle 409 conflicts (#27476)maintenance_policyfield togoogle_data_fusion_instanceresource (#27470)iam_memberresources (#27383)google_network_connectivity_transportresource promoted to GA (#27440)identity_connectortogoogle_oracle_database_cloud_vm_clusterfor CMEK support (#27435)google_project_iam_binding(#27502)google_project_iam_policy(#27503)data_disk_provisioned_iopsanddata_disk_provisioned_throughputto GA (#27437)BUG FIXES:
bigtable_custom_endpointanduniverse_domainwere ignored when creating Bigtable resources. (#27515)google_compute_subnetworkwheresecondary_ip_rangeentries linked to aninternal_rangecould not be removed and adding new ranges would sometimes fail due to positional shifts (#27175) (#27512)AUDIOENCODING_SPEEX_WITH_HEADER_BYTEenum value toAUDIO_ENCODING_SPEEX_WITH_HEADER_BYTEforaudio_encodingfield ingoogle_dialogflow_conversation_profileresource (#27459)deletion_policythat would occur on existing and importedgoogle_project_serviceresources following upgrading to v7.32.0 (#27484)v7.33.0NOTES:
google_compute_target_poolresource to use direct HTTP rather than a client library (#12212)google_compute_instance_group_managerresource to use direct HTTP rather than a client library (#12206)google_compute_project_default_network_tierresource to use direct HTTP rather than a client library (#12201)google_compute_router_statusdata source to use direct HTTP rather than a client library (#12174)google_compute_instance_group_managerresource to use direct HTTP rather than a client library (#12216)google_compute_instanceresource to use direct HTTP rather then a client library (#12205)FEATURES:
google_logging_log_view(#12226)google_apigee_data_collector(#12190)google_chronicle_native_dashboard(ga) (#12188)google_contact_center_insights_encryption_spec(#12225)IMPROVEMENTS:
guest_flushfield togoogle_backup_dr_backup_planresource andgoogle_backup_dr_backupdata source. (#12229)guest_flushfield togoogle_backup_dr_backup_planresource andgoogle_backup_dr_backupdata source. (#12230)security_settingsfield togoogle_ces_deploymentresource (#12227)tool_execution_modefield togoogle_ces_appresource (#12221)stabilization_periodfield togoogle_compute_autoscalerandgoogle_compute_region_autoscalerresources (#12232)resolve_subnet_maskfield ingoogle_compute_subnetworkresource (#12176)network_endpoint_typefield ingoogle_compute_network_endpoint_groupresource (#12176)data_source_google_compute_regionsto use direct HTTP rather than a client library (#12202)pod_snapshot_configfield togoogle_container_clusterresource (GA) (#12196)secret_sync_configfield togoogle_container_clusterresource (ga) (#12215)databaseandprivate_connectivityfields togoogle_database_migration_service_connection_profileresource (#12203)postgres_homogeneous_configfield togoogle_database_migration_service_migration_jobresource (#12203)psc_interface_configfield togoogle_database_migration_service_private_connectionresource (#12184)terminal_storage_classandper_unit_storage_throughputfields to thegoogle_hypercomputecluster_clusterresource (#12234)ontap_sourcefield togoogle_netapp_backupresource (beta) (#12231)deletion_policyfield has been added to almost all resources in the provider. Details on its usage can be found within individual resource documentation if supported. (#12183)descriptionfield togoogle_storage_batch_operations_jobresource (#12207)workstation_authorization_urlandworkstation_launch_urlfields to thegoogle_workstations_workstation_clusterresource. (#12185)BUG FIXES:
google_apigee_sharedflow_deploymentresource, whereservice_accountread as null (#12228)configuration.authentication.username_password.password.secret_typeis not populated and a diff onconfiguration.authentication.username_password.usernameafter import ingoogle_bigquery_connectionresource (#12179)google_bigquery_reservation_assignmentreturning a confusing 404 error whenreservationis a bare name andlocationis not set (#12210)channel_type,modality, andthemeingoogle_ces_deployment(#12227)google_compute_forwarding_ruleresource to properly prompt for resource recreation when updating thetargetfield between different "serviceAttachments", rather than having an in-place update blocked by an API error. (#12214)REQUEST_FIELD_MISSINGerror whentemplate_metadatais omitted fromgoogle_model_armor_template(#12222)google_network_connectivity_destinationwas not recognizing thenamefield as mapping to an API value (#12224)google_network_connectivity_multicloud_data_transfer_configwas not recognizing thenamefield as mapping to an API value (#12224)google_service_accountupdates to ensure the resource is consistent before succeeding (#12217)v7.32.0NOTES:
google_compute_instance_from_machineresource to use direct HTTP rather than a client library (#27260)google_compute_instance_group_managerresource to use direct HTTP rather than a client library (#27259)google_compute_zonesdata source to use direct HTTP rather than a client library (#27261)google_compute_project_metadata_itemresource to use direct HTTP rather than a client library (#27200)FEATURES:
google_compute_region_instant_snapshot_iam_policy(#27281)google_chronicle_dashboard_chart(#27275)google_compute_region_instant_snapshot_iam_binding(#27281)google_compute_region_instant_snapshot_iam_member(#27281)google_compute_region_instant_snapshot_iam_policy(#27281)google_compute_region_instant_snapshot(#27281)IMPROVEMENTS:
IDPFvalue tonic_typeinresource_compute_instance_template(#27244)IDPFvalue tonic_typeinresource_compute_instance(#27244)IDPFvalue tonic_typeinresource_compute_region_instance_template(#27244)address_idfield togoogle_compute_addressresource (#27216)advanced_options_configfield ongoogle_compute_organization_security_policyresource (#27255)connection_tracking_policyfield togoogle_compute_region_backend_serviceresource (#27217)image,source_image_encryption_key, andsource_image_idfields togoogle_compute_region_diskresource. This field is currently behind an allowlist. (#27243)replica_zonesfield togoogle_compute_instanceresource (#27258)request_bodyfield ongoogle_compute_security_policy_ruleresource (#27252)ip_collectionfield togoogle_compute_subnetworkresource (#27265)config_idattribute togoogle_discovery_engine_widget_config(#27278)parentvalues togoogle_network_security_firewall_endpoint(#27222)POLICY_BASED_CHALLENGEvalue tointegration_typefield and added newchallenge_settingsfield togoogle_recaptcha_enterprise_key(#27221)google_redis_cluster. (#27242)private_keyandprivate_key_typefields to ephemeralgoogle_service_account_keyresource (#27279)ingest_on_writefield forgoogle_storage_anywhere_cacheresource (#27271)gce_hdfield togoogle_workstations_workstation_configresource (#27201)BUG FIXES:
all_traffic_on_latest_revision = falsewas ignored ingoogle_cloudfunctions2_function(#27256)preconfigured_waf_configfrom agoogle_compute_security_policyrule (#27276)v7.31.0NOTES:
google_compute_instance.network_interfacefield to use direct HTTP rather than a client library (#27104)google_compute_imagedatasource to use direct HTTP rather then a client library (#27179)partner_metadatafield ongoogle_compute_instance,google_compute_instance_template, andgoogle_compute_region_instance_templateto use direct HTTP rather than a client library (#27131)google_compute_node_typesdata source to use direct HTTP rather than a client library (#27184)google_compute_region_instance_groupdata source to use direct HTTP rather than a client library (#27178)google_compute_subnetworkdata source to use direct HTTP rather than a client library (#27167)google_compute_vpn_gatewaydata source to use direct HTTP rather than a client library (#27168)FEATURES:
google_artifact_registry_file(#27183)google_ces_app_root_agent_association(#27123)google_contact_center_insights_qa_question(#27169)google_contact_center_insights_qa_scorecard_revision(#27169)google_contact_center_insights_qa_scorecard(#27169)google_firebase_app_check_resource_policy(#27185)IMPROVEMENTS:
default_poolandprivate_poolfields togoogle_clouddeploy_targetresource (#27187)tasksandanalysisfields togoogle_clouddeploy_delivery_pipelineresource (#27187)params.resource_manager_tagsfield togoogle_compute_image(#27107)params.resource_manager_tagsfield togoogle_compute_region_commitmentresource (#27181)resource_policies.workload_policytogoogle_compute_region_instance_group_managerresource (#27170)node_pool.network_config.accelerator_network_profiletogoogle_container_clusterresource andnetwork_config.accelerator_network_profiletogoogle_container_node_poolresource (#27171)objects_configfield togoogle_database_migration_service_migration_jobresource (#27180)attributes,template_reference,enable_catalog_basedRules, andfilterfields togoogle_dataplex_datascanresource (#27130)search_configfield togoogle_firestore_indexresource (#27108)pluggable_database_id,pluggable_database_namefields togoogle_oracle_database_db_systemresource (#27127)BUG FIXES:
timeoutsdiff across a number of resources that had resource identity support added in7.29.0(#27189)ignore_auto_generated_schemaevaluation forgoogle_bigquery_tableexternal tables which caused spurious replacement (#27188)google_cloud_scheduler_job.http_target.headerswhenoidc_tokenoroauth_tokenis set (#27173)reserved_peering_rangesingoogle_service_networking_connection(#27132)google_storage_notification.custom_attributesfield (#27129)v7.30.0BREAKING CHANGES:
google_apigee_env_keystoreto require thenamefield which is mandatory in the Apigee API (#27006)FEATURES:
google_data_lineage_config(#27098)google_artifact_registry_rule(#27049)google_data_lineage_config(#27098)google_document_ai_schema(#27102)google_firebase_remote_config_remote_config(#27050)IMPROVEMENTS:
prefer_global_endpointsandprefer_regional_endpointsto the provider configuration. Support for regional endpoints will be rolled out on a per-product level (#27014)SPAIN_DATA_BOUNDARY_BY_TELEFONICAvalue topartnerfield ongoogle_assured_workloads_workloadresource (#27027)configurationblock togoogle_bigquery_connectionresource to support AlloyDB and other connector types via the BigQuery Connector framework (#27029)tagstogoogle_bigtable_instance(#27060)DISKfields togoogle_cloud_run_v2_jobresource (#27052)DISKfields togoogle_cloud_run_v2_worker_poolresource (#27048)params.resourceManagerTagsfield to thegoogle_compute_storage_pool(#27051)cache_policyfield togoogle_compute_url_map(#27011)params.resource_manager_tagsfield togoogle_compute_instant_snapshotresource (#27087)resource_manager_tagsfield togoogle_compute_machine_imageresource (#27075)node_config.linux_node_config.accurate_time_configfield togoogle_container_node_poolresource (#27064)node_pool.node_config.linux_node_config.accurate_time_configandnode_config.linux_node_config.accurate_time_configfields togoogle_container_clusterresource (#27064)node_pool.node_config.linux_node_config.swap_configfield togoogle_container_node_poolresource (#26982)google_container_clusterto 90 minutes (from 40/60 depending on operation) andgoogle_container_node_poolto 60 minutes (from 30) (#27101)destionation_configs.destionations.portanddestionation_configs.paramsfields togoogle_discovery_engine_data_connectorresource (#27058)google_dns_managed_zoneresource (#27010)deletion_policyfield to control whether child routes are force-deleted togoogle_datastream_private_connection(#27033)google_network_connectivity_hubresource (#27005)parentfield togoogle_network_security_address_groupsdata source (#27082)google_workbench_instance(#27061)BUG FIXES:
google_alloydb_clusterso thatmaintenance_update_policy.maintenance_windows.start_time.hourscan be set to0(midnight) (#26981)google_ces_appvariable default value (#27084)zonefield ingoogle_compute_instance_template(#27076)iap.oauth2_client_idingoogle_compute_backend_serviceandgoogle_compute_region_backend_servicewhen the API returns a single space (#26975)google_container_clusterwheredatabase_encryption.statereturningALL_OBJECTS_ENCRYPTION_ENABLEDinstead of the configuredENCRYPTEDcaused unintended reapplies (#27040)google_dialogflow_cx_test_casewhensession_parameterswas omitted from the configuration (#26985)google_hypercomputecluster_clusterwhencount,static_node_count, ormax_dynamic_node_countwere explicitly set to0. (#27073)multi_tenantingoogle_identity_platform_configresource. Removing the value from config will now preserve the existing settings instead of removing them. (#26986)google_redis_cluster(#27077)NOTES:
resource_compute_instance_group.go.tmplresource to use direct HTTP rather then a client library (#27080)compute-operationresource to use direct HTTP rather then a client library (#27053)compute_backend_bucket_security_policyresource to use direct HTTP rather than a client library (#27012)compute_instance_network_interface_helpersresource to use direct HTTP rather than a client library (#27104)data_source_google_compute_addresses.go.tmpldata source to use direct HTTP rather then a client library (#27016)data_source_google_compute_machine_typesdatasource to use direct HTTP rather than a client library (#27017)google_disk_testto use direct HTTP rather than a client library (#27079)resource_compute_disk_async_replicationresource to use direct HTTP rather then a client library (#27028)resource_compute_http_health_check_test.go.tmplresource to use direct HTTP rather then a client library (#27057)v7.29.0NOTES:
google_service_accountlist resource - more info can be found here (#26938)FEATURES:
google_firebase_admin_sdk_config(#26901)google_chronicle_datatable_row(#26960)google_chronicle_datatable(#26895)google_dataform_folder(#26881)google_dataform_team_folder(#26881)google_firebase_storage_default_bucket(#26965)IMPROVEMENTS:
track_client_addressfield togoogle_alloydb_instanceresource (#26964)tasksfield togoogle_clouddeploy_custom_target_typeresource (#26941)header_actionandredirect_optionsfields togoogle_compute_organization_security_policy_ruleresource (#26942)execution_identityfield togoogle_dataplex_datascanresource (#26924)cluster_config.enginefield togoogle_dataproc_clusterresource (#26962)trust_default_shared_cafield togoogle_iam_workload_identity_poolresource (#26974)large_capacity_configfield togoogle_netapp_volumeresource(#26927)kms_config,encryption_stateandbackups_crypto_key_versionfields togoogle_netapp_backup_vaultresource (#26939)google_service_accountresource (#26938)entraid_configfield togoogle_sql_database_instanceresource (#26921)encryption_specfield togoogle_vector_search_collectionresource (#26972)BUG FIXES:
is_enabled = falseon create and update ingoogle_apigee_target_serverresource (#26878)default_collationto empty string ingoogle_bigquery_dataset(#26925)logging_settingswhen unspecified ingoogle_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)iap.oauth2_client_idingoogle_compute_backend_serviceandgoogle_compute_region_backend_servicewhen the API returns a single space (#26975)google_container_clusterwhere setting multiple fields indns_endpoint_configfailed to apply all changes (#26968)persistent_directories.gce_pd.reclaim_policyingoogle_workstations_workstation_configresource (#26971)v7.28.0NOTES:
data_source_google_compute_instance_templatedatasource to use direct HTTP rather then a client library (#26831)google_compute_instance_guest_attributesdatasource to use direct HTTP rather then a client library (#26826)Identity()schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)FEATURES:
google_vertex_ai_reasoning_engine_query(#26787)google_apigee_space(#26857)google_vertex_ai_reasoning_engine_iam_binding(#26785)google_vertex_ai_reasoning_engine_iam_member(#26785)google_vertex_ai_reasoning_engine_iam_policy(#26785)google_workload_identity_service_agent(#26780)IMPROVEMENTS:
replica_locationsandeffective_replicasfields togoogle_bigquery_analytics_hub_listingresource (#26843)replica_locationsfield togoogle_bigquery_analytics_hub_listing_subscriptionresource (#26843)google_composer_environmentdefault delete timeout to 120m from 30m (#26851)target_size_policyfield togoogle_compute_instance_group_managerandgoogle_compute_region_instance_group_managerresources (#26849)google_compute_security_policydefault timeout to 60m from 30m (#26850)google_compute_diskandgoogle_compute_region_diskresources (#26815)autopilot_cluster_policy_configfield togoogle_container_clusterresource (#26822)disable_multi_nicfield tolustre_csi_driver_configingoogle_container_clusterresource (#26759)custom_oauth_config,etag, andproxy_configfields togoogle_developer_connect_account_connectorresource (#26751)scale_typefield togoogle_netapp_storage_poolresource (#26821)modefield togoogle_netapp_storage_poolresource (#26778)all_portsfield togoogle_network_services_gatewayresource (#26808)SQLSERVER_2025value todatabase_versionfield indatabase_instanceresource (#26845)labelsfield togoogle_vertex_ai_reasoning_engineresource (#26825)spec.source_code_spec.image_specfield togoogle_vertex_ai_reasoning_engineresource (#26790)container_specfield togoogle_vertex_ai_reasoning_engineresource (#26813)spec.identity_typeandspec.effective_identityfields togoogle_vertex_ai_reasoning_engineresource (#26788)BUG FIXES:
google_apigee_environment_addons_configresource when analytics are not configured (#26810)namefield ingoogle_apigee_api_productthat rejected uppercase letters, aligning provider behavior with the Apigee API (#26756)hive_partitioning_optionsis defined with all null values ingoogle_bigquery_tableresource (#26846)traffic_filterfield ingoogle_firebase_ai_logic_configresource (#26749)policy_profilefield ingoogle_network_security_authz_policyresource (#26865)google_vertex_ai_reasoning_engine, preventing stale values getting written to state (#26852)v7.27.0BREAKING CHANGES:
maintenance_policy.weekly_maintenance_windowsfield required ingoogle_lustre_instanceresource. Configuringmaintenance_policywithoutweekly_maintenance_windowswill cause an API error. (#26741)FEATURES:
google_discovery_engine_data_store(#26651)google_discovery_engine_data_stores(#26651)google_dns_record_sets(#26736)google_chronicle_dashboard_chart(#26707)google_chronicle_feed(#26742)google_network_connectivity_transport(#26626)google_iam_workload_identity_pool_managed_identity(#26732)google_iam_workload_identity_pool_namespace(#26647)IMPROVEMENTS:
SEV_LIVE_MIGRATABLE_V2toguest_os_featuresenum forgoogle_compute_region_diskresource (#26735)SNP_SVSM_CAPABLEtoguest_os_featuresenum forgoogle_compute_imageandgoogle_compute_region_diskresources (#26735)excluded_foldersandexcluded_projectsfields togoogle_compute_organization_security_policy_associationresource (#26694)secondary_ip_rangefield ingoogle_compute_subnetworkresource (#26689)autopilot_privileged_admissionfield togoogle_container_clusterresource for Customer-Driven Allowlisting (#26668)aspectsfield togoogle_dataplex_entry_linkresource (#26664)aspectsfield ingoogle_dataplex_entry_linkresource (#26702)boot_disk_provisioned_iopsandboot_disk_provisioned_throughputfields tocluster_config.worker_config.disk_configingoogle_dataproc_clusterresource (#26691)AUTOtoruntime_config.autotuning_config.scenariosfield ingoogle_dataproc_batchresource (#26646)attestation_rulesfield togoogle_iam_workload_identity_poolresource (#26706)dynamic_tier_optionsfield togoogle_lustre_instanceresource (#26741)virtual_machine_preferences.compute_engine_preferences.persistent_disk_typefield togoogle_migration_center_preference_setresource (#26693)exclude_import_ranges,include_export_ranges,exclude_export_rangesfields togoogle_network_connectivity_spokeresource (#26730)ai_inferencefield togoogle_pubsub_topicandgoogle_pubsub_subscriptionresources (#26738)clone_context.source_projectfield togoogle_sql_database_instanceresource to support cross project clone (#26652)BUG FIXES:
adaptive_protection_configfield ingoogle_compute_security_policyresource (#26692)google_compute_project_metadataon a project with no existing metadata (#26630)primary-locationparameter toprimary_locationin the create URL of google_biglake_iceberg_catalog resource (#26695)enforceinpolicies.constraint.org_policy_constraint.policy_rulesto the api ingoogle_securityposture_postureresource (#26645)service_attachmentfield ingoogle_vertex_ai_endpoint_with_model_garden_deploymentresource (#26690)private_cluster_config.allowed_projectsingoogle_workstations_workstation_clusterresource (#26705)v7.26.0BREAKING CHANGES:
google_compute_region_backend_bucketfrom thegoogle(GA) provider. It is currently beta-only, and calls to the nonexistent GA API always returned a 404. Until released ingoogle, usegoogle-betainstead. (#26597)FEATURES:
google_network_security_address_groups(#26562)google_iam_workload_identity_pool_iam_policy(#26598)google_bigqueryreservation_reservation_group(#26560)google_compute_region_composite_health_check(#26591)google_compute_region_health_aggregation_policy(#26591)google_compute_region_health_source(#26591)google_contact_center_insights_assessment_rule(#26530)google_iam_workload_identity_pool_iam_*(#26598)google_workstations_workstation(#26561)google_workstations_workstation_iam_*(#26561)google_workstations_workstation_cluster(#26561)google_workstations_workstation_config(#26561)google_workstations_workstation_config_iam_*(#26561)IMPROVEMENTS:
reservation_groupfield togoogle_bigquery_reservationresource (#26560)remote_dialogflow_agent.respect_response_interruption_settingsfield togoogle_ces_agentresource (#26578)boot_disk.size_gbandboot_disk.typeeditable within nodesets and login nodes ingoogle_hypercomputecluster_cluster(#26615)colab_imagefield togoogle_colab_runtime_templateresource (#26582)google_colab_runtime_templateresource updatable (#26582)hyperdisk-balancedas an option fordisk_typefield ingoogle_container_clusterresource (#26581)backend_servicefield optional forgoogle_compute_target_tcp_proxyresource (#26519)resolve_subnet_fieldfield ingoogle_compute_subnetworkresource to GA (#26570)mode,inline_certificate_issuance_config, andinline_trust_configfields ingoogle_iam_workload_identity_poolresource to GA (#26598)google_spanner_instanceresource (#26577)server_certificate_rotation_modefield togoogle_sql_database_instanceresource (#26572)google_managed_encryption_enforcement_config,customer_managed_encryption_enforcement_configandcustomer_supplied_encryption_enforcement_configtogoogle_storage_bucketresource (#26529)BUG FIXES:
password_woandpassword_wo_versionfields were not functioning properly during update requests ingoogle_alloydb_userresource (#26571)propertiesfield in thegoogle_biglake_iceberg_tableandgoogle_biglake_iceberg_namespaceresources (#26595)direct_vpc_network_interfaceorvpc_connectorongoogle_cloudfunctions2_functionresource (#26567)network_interfacesorconnectorongoogle_cloud_run_v2_serviceandgoogle_cloud_run_v2_jobresources (#26567)google_compute_region_backend_bucketbeing present in thegoogle(GA) provider. It is currently beta-only, and calls to the nonexistent GA API always returned a 404. (#26597)rate_limit_optionsfield ingoogle_compute_region_security_policy_ruleresource (#26527)rate_limit_optionsfield ingoogle_compute_security_policyandgoogle_compute_security_policy_ruleresources (#26526)modefield forgoogle_iam_workload_identity_poolresource (#26601)http://(#26600)google_vertex_ai_resources not respectinguniverse_domainandvertex_custom_endpoint(#26556)v7.25.0FEATURES:
google_compute_network_endpoint_groups(#26515)google_dialogflow_environment(#26489)google_kms_project_autokey_config(#26501)IMPROVEMENTS:
disk_backup_plan_propertiesfield togoogle_backup_dr_backup_planresource (#26497)backup_rulesoptional ingoogle_backup_dr_backup_planresource (#26494)ethereum_details.validator_config.beacon_fee_recipientfield togoogle_blockchain_node_engine_blockchain_nodesresource (#26499)custom_headersfield to MCP toolset in CESgoogle_ces_toolsetresource (#26473)exprfield togoogle_compute_organization_security_policy_ruleresource (#26506)locationfield togoogle_network_services_tls_routeresource (#26514)target_proxiesfield togoogle_network_services_tls_routeresource (#26516)backend_servicefield optional for resourcegoogle_compute_target_tcp_proxy(#26519)backend_servicefield optional for resourcegoogle_compute_region_target_tcp_proxy(#26493)detailed_audit_loggingfield togoogle_iam_workforce_pool_providerresource (#26500)key_project_resolution_modefield togoogle_kms_autokey_configresource (#26501)maintenance_policyfield togoogle_lustre_instanceresource (#26512)point_in_time_restore_context.regionfield togoogle_sql_database_instanceresource (#26510)deletion_policyfield toresource_vertex_ai_reasoning_engineresource (#26518)BUG FIXES:
specfield ingoogle_vertex_ai_reasoning_engineresource (#26470)v7.24.0DEPRECATIONS:
extended_attributes_oauth2_clientongoogle_iam_workforce_pool_provider. Usescim_usageinstead. (#26388)FEATURES:
google_biglake_iceberg_table(#26394)google_contact_center_insights_auto_labeling_rule(#26426)google_observability_trace_scope(#26428)google_sql_provision_script(#26432)IMPROVEMENTS:
scopesfields togoogle_ces_toolsetresource (#26368)DISKfields togoogle_cloud_run_v2_serviceresource (#26418)max_custom_on_demand_retention_daysfield tosqladminresource (#26407)ForwardProxyfield ingoogle_compute_region_backend_serviceresource (#26449)accelerator_topology_modefield togoogle_compute_resource_policyresource (#26383)target_typeandtarget_forwarding_rulesongoogle_compute_region_network_firewall_policy_ruleresource (#26369)endpoint_urlfield ingoogle_compute_service_attachmentto GA (#26434)subnetworkas settable ingoogle_container_node_pool(#26416)disruption_budgetfield togoogle_container_clusterresource (#26425)search_engine_config.required_subscription_tierfield togoogle_discovery_engine_search_engineresource (#26398)content_configas optional field ingoogle_discovery_engine_data_store(#26398)server_ca_modeandserver_ca_poolfields togoogle_memorystore_instanceresource (#26437)authorityvalidation ingoogle_network_services_authz_extensionfor different target types (#26386)server_ca_modeandserver_ca_poolfields togoogle_redis_clusterresource (#26437)clone_context.source_projectfield togoogle_sql_database_instanceresource to support cross project clone (beta) (#26384)CONCURRENT_OPERATIONS_QUOTA_EXCEEDED(#26417)BUG FIXES:
oauth2_client_idiniapblock ofgoogle_compute_backend_serviceandgoogle_compute_region_backend_servicewhen disabling IAP (#26385)google_datastream_streamwheresource_config.mysql_source_config.binary_log_positionwould show a diff when unset (#26435)install-nvidia-drivermetadata key as settable forgoogle_workbench_instance(#26402)v7.23.0DEPRECATIONS:
google_notebooks_environmentis deprecated and will be removed in a future major release. Usegoogle_workbench_instanceinstead (#26288)google_*_iam_*resources and datasources will now show deprecation messages when their parent resource has been deprecated (#26288)FEATURES:
google_oracle_database_odb_network(#26290)google_oracle_database_odb_subnet(#26290)google_vector_search_collection(#26353)IMPROVEMENTS:
dataplex_configfield togoogle_alloydb_clusterresource (#26304)primary_locationtogoogle_biglake_iceberg_catalogresource (#26307)paramsfield togoogle_compute_external_vpn_gatewayresource (#26348)paramsfield togoogle_compute_ha_vpn_gatewayresource (#26348)paramsfield togoogle_compute_vpn_gatewayresource (#26348)paramsfield togoogle_compute_vpn_tunnelresource (#26348)storage_poolsupport togoogle_compute_instance_templateandgoogle_compute_region_instance_templatedisks (#26347)control_plane_disk_encryption_key_versionsfield touser_managed_keys_configingoogle_container_clusterresource (#26289)cluster_typetogoogle_dataproc_clusterresource (#26350)actions.publish_to_scc,actions.publish_to_chronicle,actions.export_data.sample_findings_tableandtargets.big_query_target.filter.table_reference.project_idfields togoogle_data_loss_prevention_discovery_configresource (#26281)protected_namespace_countfield togoogle_gke_backup_backup_planresource (#26283)modefield togoogle_netapp_storage_poolresource (#26319)patch_config.skip_unpatchable_vmsfield togoogle_os_config_patch_deploymentresource (#26282)text_configfield togoogle_pubsub_subscriptionresource (#26329)BUG FIXES:
google_tags_tag_key_iam_memberresource (#26330)v7.22.0DEPRECATIONS:
google_dataplex_data_asset. Usegoogle_dataplex_data_product_data_assetinstead. (#26256)FEATURES:
google_compute_organization_security_policy_rule(#26202)google_hypercomputecluster_cluster(#26180)IMPROVEMENTS:
initialize_params.sizeis now updatable in-place in thegoogle_compute_instanceresource (#26195)dest_network_context,src_network_contextandsrc_networksfields togoogle_compute_firewall_policy_ruleresource (#26227)dest_network_context,src_network_contextandsrc_networksfields togoogle_compute_network_firewall_policy_ruleresource (#26227)dest_network_context,src_network_contextandsrc_networksfields togoogle_compute_region_network_firewall_policy_ruleresource (#26227)sandbox_configfield ingoogle_container_clusterandgoogle_container_node_poolresources to GA (#26247)http_configfield togoogle_developer_connect_connectionresource (#26232)source_backupdr_backupfield togoogle_filestore_instanceresource (#26238)spec.workloadidentityto resourcegoogle_gke_hub_feature(#26259)extra_attributes_oauth2_client.attribute-typefield ingoogle_iam_workforce_pool_providerresource (#26226)url_filtering_profilefield togoogle_network_security_security_profile_groupresource (#26266)url_filtering_profilefield togoogle_network_security_security_profileresource (#26266)portsforgoogle_network_services_gatewayresources of typeSECURE_WEB_GATEWAY(#26265)auto_upgrade_enabledfield togoogle_sql_database_instanceresource. (#26205)data_api_accessfield togoogle_sql_database_instanceresource (#26217)enhanced_query_insights_enabledfield togoogle_sql_database_instanceresource (#26244)BUG FIXES:
google_datastream_connection_profile.salesforce_profile.oauth2_client_credentials.client_idis not read properly from the API (#26201)google_service_networking_connectionif it looks like the service account permissions haven't yet propagated (#26220)v7.21.0FEATURES:
google_vmwareengine_announcements(#26145)google_vmwareengine_upgrades(#26174)google_compute_region_backend_bucket(#26144)google_hypercomputecluster_cluster(#26180)google_network_services_agent_gateway(beta) (#26140)IMPROVEMENTS:
loggingfield togoogle_beyondcorp_security_gatewayresource (#26159)direct_vpc_network_interfaceanddirect_vpc_egressfields togoogle_cloudfunctions2_functionresource. Users who directly enabled DirectVPC on the underlying Cloud Run service will see a diff as a result of this update. (#26142)iap_enabledfield togoogle_cloud_run_v2_serviceresource (#26161)wait_for_completiontogoogle_dataproc_jobresource (#26177)disable_analyticsfield togoogle_discovery_engine_search_engineresource (#26171)targets.cloud_storage_target.filter.collection.include_tagsblock togoogle_data_loss_prevention_discovery_configresource (#26178)client_id,client_secret, andclient_secret_sha256fields togoogle_iap_settingsresource (#26170)mirroring_deployment_groupsandmirroring_endpoint_group_typefields togoogle_network_security_security_profileresource (#26137)BUG FIXES:
http_target.uri_override.query_overrideingoogle_cloud_tasks_queue(#26172)google_storage_bucketwhereforce_destroy = truewould fail to delete buckets with large number of objects due to missing pagination (#26164)v7.20.0FEATURES:
google_access_context_manager_supported_service(#26092)google_access_context_manager_supported_services(#26092)google_backup_dr_data_sources(#26080)google_kms_secret_asymmetric(#26096)google_storage_bucket_object_contents(#26054)google_biglake_iceberg_namespace(#26076)google_compute_rollout_plan(#26093)google_oracle_database_exadb_vm_cluster(#26021)google_vector_search_collection(#26098)IMPROVEMENTS:
initial_user.password_wotogoogle_alloydb_cluster(#26074)mcp_toolsetfield togoogle_ces_toolsetresource (#26025)allow_subnet_cidr_routes_overlapfield togoogle_compute_subnetworkresource (#26019)private_keytogoogle_compute_region_ssl_certificateresource (#26072)private_keytogoogle_compute_ssl_certificateresource (#26072)enablefield togoogle_compute_packet_mirroringresource (#26064)paramsfield togoogle_compute_external_vpn_gatewayresource (#26089)paramsfield togoogle_compute_ha_vpn_gatewayresource (#26089)paramsfield togoogle_compute_interconnect_attachmentresource (#26042)paramsfield togoogle_compute_vpn_gatewayresource (#26089)paramsfield togoogle_compute_vpn_tunnelresource (#26089)slice_controller_configfield togoogle_container_clusterresource (#26023)additional_ip_ranges_config.statustogoogle_container_clusterresource (#26061)instance_flexibility_policytomaster_configandworker_configingoogle_dataproc_clusterresource (#26058)target_projectsfield togoogle_developer_connect_insights_configresource (#26073)replica_actiontogoogle_filestore_instanceresource (#26082)policy_profile,http_rules.0.to.0.operations.0.mcptogoogle_network_security_authz_policyresource (#26090)ull_multicast_domainfield togoogle_network_services_multicast_domainresource (#26071)load_balancing_schemevalidation to support non-Backend Service targets ingoogle_network_services_authz_extension(#26090)user_project_overrideingoogle_spanner_database_iamandgoogle_spanner_instance_iamresources (#26052)datastore_mount_configfield togoogle_vmwareengine_clusterresource (#26083)BUG FIXES:
collationfield ingoogle_bigquery_table.schemawhen it inherits the value fromgoogle_bigquery_dataset.default_collation(#26065)replica_locationsingoogle_bigquery_analytics_hub_listing(#26046)mac_keyfields not being properly set ingoogle_public_ca_external_account_key(#26099)v7.19.0DEPRECATIONS:
google_backupdr_restore_workload.nameis deprecated and will be removed in a future major release. The backup is identified by the parameters (location, backup_vault_id, data_source_id, backup_id). (#25986)google_public_ca_external_account_key.b64url_mac_keyis deprecated and will be removed in a future major release. Usemac_keyinstead. (#25964)FEATURES:
google_network_security_mirroring_endpoint(#25988)google_network_security_mirroring_endpoint_group(#25988)google_backup_dr_restore_workload(#26013)IMPROVEMENTS:
network_pass_through_lb_traffic_policyfield togoogle_compute_region_backend_serviceresource (#25994)RDMA_FALCON_POLICYandULL_POLICYvalues topolicy_typefield ingoogle_compute_region_network_firewall_policy,google_compute_region_network_firewall_policy_with_rules(#25985)network_interface.network_attachmenttogoogle_compute_instance_template(#25995)network_interface.network_attachmenttogoogle_compute_region_instance_template(#25995)network_interface.vlantogoogle_compute_instance_template, enabling dynamic NIC (#25995)network_interface.vlantogoogle_compute_instance, enabling dynamic NIC. Creating and deleting from an existing instance is not yet supported. (#25995)network_interface.vlantogoogle_compute_region_instance_template, enabling dynamic NIC (#25995)knowledge_graph_configfield togoogle_discovery_engine_search_engineresource (#25980)firestore_data_access_mode,mongodb_compatible_data_acess_mode, andrealtime_updates_modefields to thegoogle_firestore_databaseresource (#26000)deletion_policyvirtual field togoogle_firestore_indexresource (#25984)auth_token_wo+auth_token_wo_version,password_wo+password_wo_version,service_key_wo+service_key_wo_version) forgoogle_monitoring_notification_channel.sensitive_labels(#25983)google_network_connectivity_gateway_advertised_routeresource (#25945)poll_intervalfield to the provider for rare cases where it is being used in latency-sensitive situations. This can be set to a custom duration to change operation polling intervals. The default is unchanged, at10s. (#26008)mac_keytogoogle_public_ca_external_account_key(#25964)readiness_probefield togoogle_cloud_run_v2_serviceresource (#26003)developer_connect_sourcetospec.source_code_specingoogle_vertex_ai_reasoning_engine(#26011)BUG FIXES:
ssl_certificatesandcertificate_mapingoogle_compute_target_ssl_proxy(#26012)default_compute_class_enabledingoogle_container_clusterwith Autopilot enabled (#25966)google_firebase_ai_logic_config.generative_language_config.api_key_wowhere the value set wouldn't be sent to the API. (#25983)b64url_mac_keysometimes being empty ingoogle_public_ca_external_account_key(#25964)v7.18.0BREAKING CHANGES:
last_successful_backup_consistency_timefromgoogle_backup_dr_backup_plan_association. No value has been present in this output-only field. (#25928)FEATURES:
google_dataplex_data_asset(#25922)google_logging_saved_query(#25921)IMPROVEMENTS:
restore_backupdr_backup_source,restore_backupdr_pitr_source, andbackupdr_backup_sourcetogoogle_alloydb_cluster(#25928)rules_config_info.last_successful_backup_consistency_timetogoogle_backup_dr_backup_plan_association(#25928)target_servicefield to support update-in-place ingoogle_compute_service_attachmentresource (#25924)patch_revisionfield togoogle_data_fusion_instanceresource (#25923)skip_waitfield togoogle_firestore_indexresource, skipping the wait for index creation (#25934)skip_validationsfield togoogle_gkeonprem_vmware_clusterresource (#25917)database_rolefield andiam_emailfield togoogle_sql_userresource to support managing Cloud SQL users with database roles. (#25926)BUG FIXES:
google_cloudbuild_triggerto allow creation without source configuration for manual triggers (#25925)scaling.scaling_modeingoogle_cloud_run_v2_worker_pool(#25927)show_nat_ipsandnat_ipsingoogle_compute_service_attachmentwere causing test failures due to an underlying API problem. These fields are now temporarily non-functional and will be ignored. (#25908)google_container_node_poolthat prevented creation whenblue_green_settingswas specified (#25916)google_container_clusterwhen settingresource_limitswith disabled node autoprovisioning (#25929)v7.17.0BREAKING CHANGES:
servicesingoogle_network_connectivity_multicloud_data_transfer_configfrom TypeList to TypeSet. The order of or value of interpolations referencing the field may change. (#25767)FEATURES:
google_dataplex_data_product(#25844)google_dialogflow_cx_tool_version(#25809)google_firebase_ai_logic_config(#25846)google_firebase_ai_logic_prompt_template(#25862)google_firebase_ai_logic_prompt_template_lock(#25877)google_saas_runtime_unit_operation(#25760)google_vmwareengine_datastore(#25845)google_vmwareengine_datastore(#25845)IMPROVEMENTS:
source_column_matchfield tocsv_optionsingoogle_bigquery_tableresource (#25868)FIPS_202205enum toPROFILEfield inSSL_POLICYandREGION_SSL_POLICYresources, and addedTLS_1_3enum toMIN_TLS_VERSIONfield inSSL_POLICYandREGION_SSL_POLICYresources. (#25777)attachmentsfield togoogle_compute_interconnect_attachment_group.logicalStructure.regions.metros.facilities.zonesand deprecatedattachmentfield (#25842)enable_enhanced_ipv4_allocationfield togoogle_compute_public_delegated_prefixresource (#25732)ip_collectionfield togoogle_compute_addressresource (#25732)source_instant_snapshotfield togoogle_compute_snapshotresource (#25780)availableFeaturesfield of thegoogle_compute_interconnectresource (#25751)requestedFeaturesfield of thegoogle_compute_interconnectresource (#25751)typefield of thegoogle_compute_interconnect_attachmentresource. (#25751)igmp_queryfield ingoogle_compute_instance,google_compute_instance_template, and related instance resources. (#25752)l2Forwardingfield togoogle_compute_interconnect_attachment(#25751)request_body_inspection_sizeto GA ingoogle_compute_security_policyresource (ga) (#25775)accelerator_network_configfield tonode_poolresource (#25856)managed_opentelemetry_configtogoogle_container_clusterresource (#25861)node_drain_configfield togoogle_container_node_poolresources (#25791)google_container_clusterreconciliation time by caching node pools and instance group managers after a list call instead of getting each one seperately. (#25784)backfill_all.spanner_excluded_objectsandsource_config.spanner_source_configfields togoogle_datastream_stream(#25804)spanner_profilefield togoogle_datastream_connection_profile(#25804)serviceAccountAuthConfigfield togoogle_dialogflow_cx_webhookresource (#25781)peerAutonomousDatabases,disasterRecoverySupportedLocations,sourceConfigfields to Autonomous database resource. (#25859)allowed_values_regexfield togoogle_tags_tag_keyresource (#25869)google_tags_tag_bindingandgoogle_tags_location_tag_bindingresources (#25874)deployment_spec.psc_interface_configtogoogle_vertex_ai_reasoning_engine(#25765)BUG FIXES:
collationfield ingoogle_bigquery_table.schema(#25762)google_cloud_asset_folder_feedwherefolder_idwas always empty (#25798)google_cloudbuild_trigger.pubsub_config.service_account_email(#25792)instance_flexibility_policyblock on thegoogle_compute_region_instance_group_managerresource (#25731)source_rangesfield ofgoogle_compute_firewall(#25867)jwks_jsonfield forgoogle_iam_workload_identity_pool_providerresource (#25847)servicesingoogle_network_connectivity_multicloud_data_transfer_configreordering elements (#25767)enable-jupyterlab4metadata key settable forgoogle_workbench_instance(#25769)v7.16.0DEPRECATIONS:
custom_audiencefield in thegoogle_cloud_run_v2_worker_poolresource, as this field is not applicable to the WorkerPools resource (#25688)FEATURES:
google_compute_routers(#25715)google_backup_dr_restore_workload(#25723)IMPROVEMENTS:
max_custom_on_demand_retention_daysfield togoogle_backup_dr_backup_planresource (#25704)schemafield ingoogle_bigquery_tableresource whenignore_schema_changesis defined (#25721)etagfield togoogle_bigtable_schema_bundleresource (#25687)BPS_400Genum value tobandwidthfield ingoogle_compute_interconnect_attachmentresource (#25714)registry_hostsfield tocontainerd_configingoogle_container_clusterandgoogle_container_node_poolresources (#25705)one_timefield togoogle_dataplex_datascanresource (#25695)postgresql_profile.ssl_configtogoogle_datastream_connection_profileresource (#25671)EXT_AUTHZ_GRPCenum value towire_formatfield ingoogle_network_services_authz_extensionresource (#25706)disable_placement_policyfield togoogle_network_services_multicast_domain_activationresource (#25720)metadata,supported_events,request_body_send_mode, andobservability_modefields togoogle_network_services_lb_route_extensionresource (#25702)locationvalues other than "GLOBAL" to thegoogle_scc_v2_project_notification_configresource (#25698)activity_data_retention_period_daysfield togoogle_storage_insights_dataset_configresource (#25703)google_workbench_instanceresource (#25719)v7.15.0NOTES:
google_lustre_instanceresource (#25662)BREAKING CHANGES:
cipher_suitefields in thegoogle_compute_vpn_tunnelresource to track order (#25657)FEATURES:
google_apigee_security_feedback(#25589)google_apphub_boundary(#25640)google_biglake_iceberg_catalog_iam_binding(#25638)google_biglake_iceberg_catalog_iam_member(#25638)google_biglake_iceberg_catalog_iam_policy(#25638)google_biglake_iceberg_catalog(#25528)google_compute_organization_security_policy_association(#25643)google_network_connectivity_destination(#25663)google_network_connectivity_multicloud_data_transfer_config(#25609)google_network_security_dns_threat_detector(#25634)IMPROVEMENTS:
encryption_configfield ingoogle_backup_dr_backup_vaultresource (#25685)google_biglake_iceberg_cataloguse the resource project as the quota project whenuser_project_overrideistrue(#25638)ENVIRONMENT_SIZE_EXTRA_LARGEtoenvironment_sizefield togoogle_composer_environmentresource (#25531)candidate_cloud_router_ip_address,candidate_customer_router_ip_address,candidate_cloud_router_ipv6_address, andcandidate_customer_router_ipv6_addressfields togoogle_compute_interconnect_attachmentresource (#25581)prefix_lengthfield togoogle_compute_addressesdata source (#25654)client_destination_portandinstancefields togoogle_compute_region_network_endpointsresource (#25621)rule_setsfield in thegoogle_datastream_streamresource, allowing configuration of customization rules, such as BigQuery destinations partitioning and clustering. (#25529)hard_deletesupport ingoogle_iam_workforce_pool_provider_scim_tenantresource (#25656)periodic_export_configfield togoogle_looker_instanceresource (#25610)access_rules_optionsfield togoogle_lustre_instanceresource to support root squashing and IP-based access control configuration (#25617)disk_size_gbwithdisk_size_gibinbroker_capacity_configwithin thegoogle_managed_kafka_clusterresource (#25613)statefield togoogle_network_services_multicast_domainresource (#25532)labelstogoogle_redis_cluster(#25639)replication_cluster.psa_write_endpointfield as Computed ingoogle_sql_database_instanceresource (#25573)replication_clusterwhen updategoogle_sql_database_instanceresource if there is a disaster recovery(DR) replica set or there is a PSA write endpoint (#25573)google_storage_object_signed_url.signed_urlto use virtual style hosted url (#25568)bigtable,zone,encryption_spec, andbigtable_optionsfields togoogle_vertex_ai_feature_online_storeresource (#25601)psc_automation_configsto resourcegoogle_vertex_ai_index_endpoint(#25570)BUG FIXES:
falseforgoogle_alloydb_clusterandgoogle_alloydb_instance(#25561)scalingblock were explicitly declared on thegoogle_cloud_run_v2_serviceresource (#25569)google_compute_disk/google_compute_region_diskwhen deleting a disk attached to an instance that had any scratch disks attached (#25641)endpoints.interconnects.vlan_tagswouldn't be read correctly from the API ingoogle_compute_wire_groupresource (#25602)google_compute_network_endpoints(#25621)fields.display_namewouldn't be read correctly from the API ingoogle_data_catalog_tagresource (#25602)cmek_config_idfield ingoogle_discovery_engine_cmek_configresource as required (#25527)service_discoveryingoogle_beyondcorp_security_gateway(#25653)user_info,group_infoanddevice_infoingoogle_beyondcorp_security_gateway(#25653)google_service_directory_endpointorgoogle_service_directory_servicewithoutmetadataspecified would have other fields removed (#25588)google_storage_bucketresource whenforce_destroyis set totrue. Previously, failing to list anywhere caches would prevent destroying objects on the bucket. Now, both objects and caches are processed independently. (#25655)v7.14.1BUG FIXES:
google_service_directory_endpointorgoogle_service_directory_servicewithoutmetadataspecified would have other fields removed on update (#25588)v7.14.0DEPRECATIONS:
google_managed_kafka_connect_clusteradditional_subnetsfield (#25487)FEATURES:
google_artifact_registry_versions(#25512)google_cloud_identity_policies(#25513)google_compute_region_security_policy(#25488)google_compute_storage_pool(#25485)google_compute_cross_site_network(#25479)google_compute_wire_group(#25479)google_network_services_multicast_group_consumer_activation(#25515)google_network_services_multicast_group_producer_activation(#25472)IMPROVEMENTS:
connection_pool_config,connection_pool_config.enabledandconnection_pool_config.flagsingoogle_alloydb_instanceresource (#25484)software_config.post_startup_script_configfield togoogle_colab_runtime_template(#25509)instance_flexibility_policy.instance_selection.min_cpu_platform&instance_flexibility_policy.instance_selection.diskstogoogle_compute_region_instance_group_manager(#25444)google_dataplex_entrywhen using first party source systems (#25507)auto_stop_timeandidle_stop_ttltogoogle_dataproc_clusterresource (#25456)retry_policyfield togoogle_eventarc_triggerresource (#25467)custom_mirroring_profile.mirroring_deployment_groupsongoogle_network_security_security_profile(#25508)autoscaling_config.autoscaling_targets.total_cpu_utilization_percentfield togoogle_spanner_instanceresource (#25495)enabled,binary_log_enabled,start_time,point_in_time_recovery_enabled,transaction_log_retention_daysandbackup_retention_settings.retained_backupsingoogle_sql_database_instanceif the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)BUG FIXES:
google_compute_networkin-place update to enableenable_ula_internal_ipv6. (#25468)psc_service_attachment_linkattribute was not being exported properly ingoogle_sql_database_instanceresource and datasources (#25510)v7.13.0NOTES:
initial_user.passwordas required on create for newgoogle_alloydb_clusterresources, insteadinitial_user.passwordorinitial_user.usermust be set ifinitial_useris specified forgoogle_alloydb_clusterresources (#25366)encryption_specfield fromgoogle_privateca_ca_poolresource to be mutable and allow cmek key rotation (#25267)DEPRECATIONS:
effective_containerandeffective_enablementfields in thegoogle_cloud_quotas_quota_adjuster_settingsresource (#25443)publish_findings_to_cloud_data_catalogfield ingoogle_data_loss_prevention_job_triggerresource. Usepublish_findings_to_dataplex_catalogfield instead. (#25250)google_service_bindingresource due to service binding support being disabled (#25367)FEATURES:
google_ces_app_version(#25297)google_compute_organization_security_policy(#25322)google_dialogflow_generator(#25340)google_dialogflow_version(#25179)google_discovery_engine_widget_config(#25378)google_iam_workforce_pool_provider_scim_token(#25270)google_network_services_lb_edge_extension(#25299)google_network_services_multicast_consumer_association(#25321)google_network_services_multicast_group_range_activation(#25386)google_network_services_multicast_group_range(#25353)google_network_services_multicast_producer_association(#25291)IMPROVEMENTS:
password_woandpassword_wo_versionfields togoogle_alloydb_userresource (#25266)identityfield togoogle_apphub_serviceandgoogle_apphub_workloadresources (#25363)encryption_configfield togoogle_backup_dr_backup_vaultresource (#25221)client_function.parameters.max_items,client_function.parameters.min_items,client_function.parameters.maximum,client_function.parameters.minimum,client_function.parameters.title,client_function.response.max_items,client_function.response.min_items,client_function.response.maximum,client_function.response.minimum, andclient_function.response.titlefields togoogle_ces_toolresource (#25309)entry_agentfield togoogle_ces_exampleresource (#25182)google_search_tool.context_urls,google_search_tool.preferred_domains, andopen_api_tool.api_authentication.bearer_token_configfields togoogle_ces_toolresource (#25309)message.chunk.tool_responseandmessage.chunk.tool_callfields togoogle_ces_exampleresource (#25182)pinnedandvariable_declarations.schema.titlefields togoogle_ces_appresource (#25233)cloud_control_details.parameters.parameter_value.oneof_valuefields togoogle_cloud_security_compliance_framework_deploymentresource (#25382)cloud_control_details.parameters.parameter_value.oneof_valuefields togoogle_cloud_security_compliance_frameworkresource (#25382)parameter_spec.default_value.oneof_valueandvalidation.allowed_values.values.oneof_valuefields togoogle_cloud_security_compliance_cloud_controlresource (#25441)sub_parametersfield togoogle_cloud_security_compliance_cloud_controlresource (#25441)custom_environment_specfield togoogle_colab_notebook_executionresource (#25379)network_pass_through_lb_traffic_policyfield togoogle_compute_region_backend_serviceresource. (#25223)paramsfield togoogle_compute_interconnectresource (#25350)show_nat_ipsandnat_ipsfields togoogle_compute_service_attachment(#25296)snapshot_typefield togoogle_compute_snapshotresource (#25348)instance_flexibility_policy.instance_selection.min_cpu_platform&instance_flexibility_policy.instance_selection.diskstogoogle_compute_region_instance_group_manager(#25444)autoscaled_rollout_policyfield togoogle_container_node_poolresource (beta) (#25362)node_kernel_module_loading.policyfield togoogle_container_node_poolandgoogle_container_clusterresources (#25383)directory_servicesfields in place ingoogle_filestore_instance(#25315)claim_mapping,purge_time, andservice_agentfields togoogle_iam_workforce_pool_provider_scim_tenantresource (#25270)controlled_egress_enabledandcontrolled_egress_configfields togoogle_looker_instanceresource (#25214)kms_keyfield togoogle_lustre_instanceresource (#25261)google_mcp_server_floor_settingfield togoogle_model_armor_floorsettingresource (#25313)google_monitoring_alert_policywhere it ignores the resource project during Import (#25287)google_netapp_host_groupresource (#25368)google_netapp_volumeresource (#25442)properties.cpu_core_count,properties.secret_id, andproperties.vault_idfields togoogle_oracle_database_autonomousresource (#25264)properties.time_zone.versionfield togoogle_oracle_database_cloud_vm_clusterresource (#25264)google_service_directory_namespace,google_service_directory_service, andgoogle_service_directory_endpointto GA (#25177)metadataKeyValuePair withannotationsKeyValueAnnotations ingoogle_service_directory_service, andgoogle_service_directory_endpointresources (#25177)root_passwordingoogle_sql_database_instanceresource (#25252)contextsfor resourcegoogle_storage_bucket_object(#25346)resourceLimits,minInstances,maxInstances,containerConcurrencyandsourceCodeSpecfields togoogle_vertex_ai_reasoning_engineresource (#25349)BUG FIXES:
accessingoogle_bigquery_dataset(#25317)google_bigquery_tablewith row access policies (#25256)scalingfield is unset on resourcegoogle_cloud_run_v2_service(#25310)bgp_always_compare_medfield could not be unset in ingoogle_compute_network. It can now be unset by configuring the new fielddelete_bgp_always_compare_medto a value oftrue. (#25288)network_endpointsblock specified ingoogle_compute_network_endpointsresource or no network endpoints exist (#25220)termsfield ingoogle_compute_router_route_policyto be updatable without forcing resource recreation (#25289)google_container_clusterresource whenenable_l4_ilb_subsettingis enabled by the GKE control plane and not explicitly set in the configuration (#25323)google_dialogflow_cx_playbookwhere a granular update mask is required. (#25254)advanced_site_search_configingoogle_discovery_engine_data_storeresource (#25387)google_iam_workforce_pool_provider_scim_tokenwherebase_uriwasn't set correctly from the API (#25270)google_logging_*_sink.include_childrenfields not being updatable to true (#25247)desired_auto_created_endpointscaused thegoogle_memorystore_instanceresource to recreated. (#25278)kms_key_nameandkms_key_namesare same forgoogle_spanner_database(#25215)v7.12.0DEPRECATIONS:
required_typeingoogle_backup_dr_backup_plan_associationsandgoogle_backup_dr_data_source_references. Both resources no longer have functionality, and will be removed in the next major release. (#25107)FEATURES:
google_ces_agent(#25106)google_ces_guardrail(#25112)google_ces_tool(#25113)google_cloud_security_compliance_cloud_control(#25137)google_cloud_security_compliance_framework_deployment(#25138)google_cloud_security_compliance_framework(#25111)google_discovery_engine_serving_config(#25105)google_oracle_database_exascale_db_storage_vault(#25129)IMPROVEMENTS:
functional_type,registration_type, andextended_metadatafields togoogle_apphub_serviceandgoogle_apphub_workloadresources (#25145)bearer_token_configfield togoogle_ces_toolsetresource (#25119)client_certificate_settingsfield togoogle_ces_appresource (#25117)block_namesfield togoogle_compute_reservationresource (#25121)sub_block_namesfield togoogle_compute_reservation_blockdata source (#25121)tls_settingsfield togoogle_compute_regional_backend_serviceresource (#25068)end_time_behaviorfield togoogle_container_clusterresource (#25120)writable_cgroupsfield tonode_config.defaults.containerd_configingoogle_container_clusterresource (#25140)catalog_publishing_enabledfield todata_profile_specingoogle_dataplex_datascanresource (#25143)forwarding_config.target_name_servers.ipv6_addressargument togoogle_dns_managed_zoneresource (#25131)advanced_networking,multiple_network_interfaces_configandbgp_lb_configfields togoogle_gkeonprem_bare_metal_clusterresource (#25136)broker_capacity_configfield togoogle_managed_kafka_clusterresource (#25074)endpoint_settings.jumbo_frames_enabledfield togoogle_network_security_firewall_endpointresource (#25073)readiness_probefield tocloud_run_serviceresource (#25114)BUG FIXES:
google_backup_dr_backup_plan_associationsandgoogle_backup_dr_data_source_referencesto use LIST APIs, and require the correct List permissions (#25107)v7.11.0DEPRECATIONS:
pubsublite:google_pubsub_lite_reservationwill be turned down effective March 18, 2026. Usegoogle_pubsub_reservationinstead. (#25058)pubsublite:google_pubsub_lite_subscriptionwill be turned down effective March 18, 2026. Usegoogle_pubsub_subscriptioninstead. (#25058)pubsublite:google_pubsub_lite_topicwill be turned down effective March 18, 2026. Usegoogle_pubsub_topicinstead. (#25058)BREAKING CHANGES:
google_netapp_volume.export_policy.rules.squash_modenot preserve values returned by the API. Without this change, unsettingsquash_modein the provider can cause an API error. (#25059)FEATURES:
google_artifact_registry_python_packages(#25053)google_cloud_identity_policy(#24946)google_compute_reservation_block(#25034)google_compute_reservation_sub_block(#25034)google_ces_deployment(#24945)google_ces_example(#25056)google_discovery_engine_user_store(#25054)IMPROVEMENTS:
external_data_configuration.decimal_target_typestogoogle_bigquery_table(#24936)internal_ipv6_prefixfield to thegoogle_compute_subnetworkresource (#25037)ipv6_access_typefield andINTERNAL_IPV6_SUBNETWORK_CREATIONas a supported value for themodefield ingoogle_compute_public_delegated_prefixresource (#24940)ipv6_access_typefield togoogle_compute_public_advertised_prefixresource (#24911)data_documentation_specfield togoogle_dataplex_datascanresource to support theDATA_DOCUMENTATIONscan type (#25044)resource_manager_tagstogoogle_dataproc_clusterresource (#25057)placement_policyfield togoogle_lustre_instanceresource (#25042)cache_parametersfield togoogle_netapp_volumeresource (#24909)secretongoogle_secret_manager_secret_version(#25045)secreton ephemeralgoogle_secret_manager_secret_version(#25045)BUG FIXES:
initial_user.passwordwas set to a computed value ingoogle_alloydb_cluster(#25036)google_bigquery_table.external_data_configuration.schema(#24936)google_compute_instanceintroduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#25021)KUBE_DNSas an accepted value forcluster_dnsfield ongoogle_container_cluster(#24953)export_policy.rules.squash_modeongoogle_netapp_volumecan cause an API error (#25059)google_pubsub_subscriptioncould only be updated ifbigquery_configwas modified (#24952)final_backup_descriptioningoogle_sql_database_instanceresource wasn't set on the final backup on delete (#25055)google_storage_bucket_acl.role_entitywere ignored (#24949)google_workstations_workstationwhere settingsource_workstationcaused a permadiff that forced recreation (#24941)google_vmwareengine_private_cloudwait until the deletion completes (#25040)v7.10.0BREAKING CHANGES:
initial_user.passwordas required on create of newgoogle_alloydb_clusterresources. This change aligns the provider with existing API constraints to surface errors earlier. (#25022)FEATURES:
google_ces_app(#24861)google_ces_toolset(#24885)google_discovery_engine_control(#24883)google_netapp_host_group(#24876)google_network_management_organization_vpc_flow_logs_config(#24896)google_network_services_multicast_domain(#24864)google_privileged_access_manager_settings(#24878)google_client_config(#24900)IMPROVEMENTS:
direct_vpc_network_interfaceanddirect_vpc_egressfield togoogle_cloudfunctions2_functionresource (#24895)template.container.depends_onfield togoogle_cloud_run_v2_worker_poolresource (#24893)grpc_tls_health_checkfield togoogle_compute_healthcheckresource (#24872)network_tier_configtogoogle_container_clusterresource. (#24877)labelsfield togoogle_eventarc_channelresource (#24854)block_devicesfield andISCSIprotocol support togoolge_netapp_volumeresource, and increased timeouts on its operations (#24898)typefield togoogle_netapp_storage_poolresource (#24867)psc_automation_configsfield togoogle_vertex_ai_endpointresource (#24870)sync_config.continuousfield togoogle_vertex_ai_feature_online_store_featureview(#24881)BUG FIXES:
google_access_context_manager_service_perimeter_[dry_run_][egress|ingress]_policycaused the provider to crash when a provided identity casing was invalid. (#24886)credentialsblock was not populated in the Terraform state ingoogle_apigee_developer_appresource (#24880)google_compute_network_firewall_policy_rulestaying disabled after apply withdisabled = false(#24879)google_compute_instanceintroduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#25020display_namein new deployments ofgoogle_compute_organization_security_policy(#24882)google_storage_bucketstate migration. This bug impacted Pulumi users. (#24853)v7.9.0BREAKING CHANGES:
portsfield inendpoint_matchersrequired in response to a change in the API surface. (#24770)FEATURES:
google_firestore_user_creds(#24794)google_network_security_dns_threat_detector(#24744)IMPROVEMENTS:
ssl_policytoapplicationongoogle_app_engine_applicationresource (#24786)google_bigquery_dataset_iam_*(#24778)policy_typeto GA ingoogle_compute_network_firewall_policy,google_compute_network_firewall_policy_with_rules,google_compute_region_network_firewall_policy,google_compute_region_network_firewall_policy_with_rules. (#24769)dns_endpoint_confg.enable_k8s_tokens_via_dnsanddns_endpoint_config.enable_k8s_certs_via_dnsfields togoogle_container_clusterresource (#24774)fleet.membership_typefield togoogle_container_clusterresource (#24759)data_classificationfield togoogle_dataplex_aspect_typeresource (#24807)scim_usagefield toworkforce_pool_providerresource (#24787)available_maintenance_versionsfield togoogle_memorystore_instanceresource (#24745)maintenance_versionfield togoogle_memorystore_instanceresource (#24740)available_maintenance_versionsfield togoogle_redis_clusterresource (#24745)maintenance_versionfield togoogle_redis_clusterresource (#24740)transfer_manifestfield togoogle_storage_transfer_jobresource (#24768)BUG FIXES:
target_typesingoogle_bigquery_dataset_access(#24810)preferred_valueingoogle_cloud_quotas_quota_preference(#24776)google_compute_instancewould not be staged for recreation ifguest_accelerator.countwas updated to 0 from non-zero value (#24762)dataDiskSizewas unintentionally null instead of set to the current value in API requests, triggering unrelated errors (#24790)v7.8.0FEATURES:
google_artifact_registry_packages(#24696)google_network_management_connectivity_tests(#24635)google_apigee_environment_api_revision_deployment(#24657)google_dataplex_entry_link(#24737)google_discovery_engine_assistant(#24724)google_oracle_database_db_system(#24733)google_saas_runtime_unit(#24692)IMPROVEMENTS:
IN_FLIGHTtobalancing_modeongoogle_compute_backend_serviceresource (#24710)instance_lifecycle_policy.on_repair.allow_changing_zonetogoogle_compute_region_instance_group_manager&google_compute_instance_group_manager(#24706)security_policyincompute_region_backend_serviceresource to GA (#24693)google_compute_preview_featureresource to GA. (#24725)activation_statusattribute within thegoogle_compute_preview_featureresource now uses theACTIVATION_STATE_UNSPECIFIEDvalue instead ofDISABLED. Support forDISABLEDwill be added in a future release. (#24725)backfill_all.mongodb_excluded_objectsandsource_config.mongodb_source_configfields togoogle_datastream_stream(#24727)mongodb_profilefield togoogle_datastream_connection_profile(#24727)connector_modes,sync_mode,incremental_refresh_interval,auto_run_disabled, andincremental_sync_disabledfields togoogle_discovery_engine_data_connectorresource (#24658)kms_key_namefield togoogle_discovery_engine_search_engineresource (#24658)entities.paramsandentities.key_property_mappingsingoogle_discovery_engine_data_connector(#24739)publish_findings_to_dataplex_catalogfield togoogle_data_loss_prevention_job_trigger(#24722)workload_identity_pool_idfield ofgoogle_iam_workload_identity_poolresource. (#24656)maintenance_versionfield togoogle_memorystore_instanceresource (#24740)available_maintenance_versionsfield togoogle_memorystore_instanceresource (#24745)HYBRID_INSPECTIONenum value topreset_topologyfield ingoogle_network_connectivity_hubresource (#24738)isolationConfigongoogle_network_services_service_lb_policiesresource (#24652)deletion_protectionfield toredis_instanceto make deleting them require an explicit intent.redis_instanceresources now cannot be destroyed unlessdeletion_protection = falseis set for the resource. (#24654)maintenance_versionfield togoogle_redis_clusterresource (#24740)available_maintenance_versionsfield togoogle_redis_clusterresource (#24745)default_releasefield togoogle_saas_runtime_unit_kindresource (#24726)read_pool_auto_scale_configsupport tosql_database_instanceresource (#24723)BUG FIXES:
google_bigquery_tabledetected an incorrectschemadiff on tables with row access policies when the schema was unchanged. (#24711)requested_link_countto be updated in-place ingoogle_compute_interconnectresource (#24705)v7.7.0BREAKING CHANGES:
google_discovery_engine_data_connector.entities.params. Previously, it was a map of string keys to string values; now, it must be a JSON-encoded string containing an object. This change is being made in a minor release because the field wasn't usable as intended – specifically, all current valid uses require mapping strings to lists of strings. (#24658)FEATURES:
google_network_management_connectivity_tests(#24635)google_apigee_developer_app(#24625)google_discovery_engine_license_config(#24619)google_iam_workforce_pool_provider_scim_tenant(#24587)google_kms_project_kaj_policy_config(#24622)google_saas_runtime_tenant(#24608)IMPROVEMENTS:
scopesargument ingoogle_apigee_api_productresource to be order-insensitive. (#24625)proxy_protocol_configandservice_discoveryfields togoogle_beyondcorp_security_gatewayresource (#24609)default_uri_disabledfield togoogle_cloud_run_v2_serviceresource. (GA promotion) (#24602)health_check_disabledfield togoogle_cloud_run_v2_serviceresource. (#24602)paramsfield togoogle_compute_routerresource (GA) (#24611)connector_modes,sync_mode,incremental_refresh_interval,auto_run_disabled, andincremental_sync_disabledfields togoogle_discovery_engine_data_connectorresource (#24658)kms_key_namefield togoogle_discovery_engine_search_engineresource (#24658)publish_to_dataplex_catalogfield todiscovery_configresource (#24621)on_prem_versionfield ongoogle_gkeonprem_vmware_node_pool(previously output-only) (#24614)deletion_protectionfield tomemcache_instanceto make deleting them require an explicit intent.memcache_instanceresources now cannot be destroyed unlessdeletion_protection = falseis set for the resource. (#24613)tagsfield togoogle_dataproc_metastore_serviceand 'google_dataproc_metastore_federation' resources to allow setting tags for services and federation at creation time (#24633)URL_FILTERINGoption to enum fieldtypeforgoogle_network_security_security_profileresource (#24583)url_filtering_profilefield togoogle_network_security_security_profile_groupresource (beta) (#24583)url_filtering_profilefield togoogle_network_security_security_profileresource (beta) (#24583)source_instance_deletion_timefield togoogle_sql_database_instance_latest_recovery_timedata source (#24576)source_instance_deletion_timefield togoogle_sql_database_instanceresource (#24576)BUG FIXES:
google_bigquery_analytics_hub_listing_subscriptionimport (#24634)knowledgeBaseSysIdorcatalogSysIdingoogle_discovery_engine_data_connector.entities.params. (#24658)v7.6.0DEPRECATIONS:
ignore_case,exact,prefix,suffixandcontainsfields inhttp_rules.from.not_sources.principalsandhttp_rules.from.sources.principalsblocks ingoogle_network_security_authz_policyresource. Use the equivalent fields inhttp_rules.from.not_sources.principals.principalorhttp_rules.from.sources.principals.principalinstead. (#24543)BREAKING CHANGES:
node_configblocks that had setkubelet_configwithout explicitly settingcpu_cfs_quotaimplicitly setcfu_cfs_quotatofalsewhen unset. From this version onwards, an unsetcpu_cfs_quotawill instead match the API default of truetrue. Resources that are recreated will receive the new value; old resources are unaffected, and may change values by explicitly setting the intended one. (#24569)activity_data_retention_period_daysfield fromgoogle_storage_insights_dataset_configresource due to a delayed launch. It will be readded when the feature launches. (#24570)FEATURES:
google_kms_folder_kaj_policy_config(#24513)google_vertex_ai_cache_config(#24541)google_vertex_ai_reasoning_engine(#24512)IMPROVEMENTS:
data_sourceandrules_config_infofields togoogle_backup_dr_backup_plan_associationsdatasource (#24517)external,proxy_protocol, andschemafields togoogle_beyondcorp_security_gateway_applicationresource (#24542)endpoint_matchersfield to not be required anymore in thegoogle_beyondcorp_security_gateway_applicationresource (#24542)default_uri_disabledfield togoogle_cloud_run_v2_serviceresource (#24556)shared_secret_woandshared_secret_wo_versionfields togoogle_compute_vpn_tunnelresource, enabling write-only management of the shared secret. (#24491)SENSITIVITY_UNKNOWNas possible enum value foractions.tag_resources.tag_conditions.sensitivity_score.scoreingoogle_data_loss_prevention_discovery_configresource (#24564)actions.save_findings.output_config.storage_pathfield togoogle_data_loss_prevention_job_triggerresource (#24558)file_shares.nfs_export_options.networkandnetworks.psc_config.endpoint_projectfields togoogle_filestore_instanceresource (#24567)google_lustre_instanceresource (#24559)hybrid_replication_user_commandsfield with subfieldcommandstogoogle_netapp_volume_replicationresource (#24554)replication_schedule,hybrid_replication_type,large_volume_constituent_countfields tohybrid_replication_parametersfield ingoogle_netapp_volumeresource (#24554)ip_blocksfield togoogle_network_security_authz_policyresource (#24543)google_secret_manager_secret_versionresource (#24566)source_instance_deletion_timefield togoogle_sql_database_instance_latest_recovery_timedata source (#24576)source_instance_deletion_timefield togoogle_sql_database_instanceresource (#24576)user_project_overrideandbilling_projectfields togoogle_storage_transfer_jobresource (#24504)BUG FIXES:
node_config.kubelet_config.cpu_cfs_quotaongoogle_container_cluster,google_container_node_pool,google_container_cluster.node_poolto align with the API. Terraform will now send atruevalue when the field is unset on creation, and preserve any previously set value when unset. Explicitly set values will work as defined in configuration. (#24569)v7.5.0BREAKING CHANGES:
peer_ip_addressesfield type from String to Array ingoogle_netapp_volumeresource, as it was unusable otherwise (#24428)FEATURES:
google_artifact_registry_maven_artifacts(#24487)google_artifact_registry_npm_packages(#24486)google_apigee_api_deployment(#24469)google_discovery_engine_data_connector(#24472)google_managed_kafka_connect_cluster(#24443)google_managed_kafka_connector(#24443)google_kms_organization_kaj_policy_config(#24471)google_saas_runtime_rollout_kind(#24447)IMPROVEMENTS:
mount_optionsin gcsfuse volumes forgoogle_cloud_run_v2_service,google_cloud_run_v2_job, andgoogle_cloud_run_v2_workerpoolresources. (#24413)startup_probeandliveness_probetogoogle_cloud_run_v2_worker_poolresource (#24418)bandwidth_allocationfield togoogle_compute_wire_groupresource (#24460)shared_secret_woandshared_secret_wo_versionfields forgoogle_compute_vpn_tunnelresource, enabling write-only management of the shared secret. (#24491)new_recognition_result_notification_configfield togoogle_dialogflow_conversation_profileresource (#24468)featuresfield togoogle_discovery_engine_search_engineresource (#24445)other_cloud_targetandother_cloud_starting_locationtogoogle_data_loss_prevention_discovery_config(#24463)backup_config.selected_namespace_labelsfield togoogle_gke_backup_backup_planresource (#24427)gemini_enabledfield togoogle_looker_instanceresource (#24461)hot_tier_bypass_mode_enabledandhot_tier_size_used_gibfields togoogle_netapp_volume(#24454)hot_tier_size_gib,enable_hot_tier_auto_resize,cold_tier_size_used_gibandhot_tier_size_used_gibfields togoogle_netapp_storage_pool(#24454)gcp_oracle_zonefield togoogle_oracle_database_odb_networkresource (#24456)approval_workflow.steps.idfield togoogle_privileged_access_manager_entitlementresource (#24419)tagsfield togoogle_pubsub_topicandgoogle_pubsub_subscriptionresources (#24442)point_in_time_restore_contextfield togoogle_sql_database_instance(#24489)force_destroyfield togoogle_storage_insights_report_configresource (#24462)activity_data_retention_period_daysfield togoogle_storage_insights_dataset_configresource (#24459)endpoint_config.private_service_connect_configblock togoogle_vertex_ai_endpoint_with_model_garden_deploymentresource (#24425)encryption_spec.kms_key_namefield togoogle_vertex_ai_index_endpointresource (#24490)encryption_spec.kms_key_namefield togoogle_vertex_ai_indexresource (#24441)BUG FIXES:
config_templateingoogle_apihub_pluginresource (#24429)corsblocksgoogle_storage_bucketresource (#24476)v7.4.0DEPRECATIONS:
google_compute_instance. Use alternative services to run containers on your VMs. Learn more at https://cloud.google.com/compute/docs/containers/migrate-containers. (#24375)FEATURES:
google_artifact_registry_maven_artifact(#24358)google_compute_interconnect_location(#24377)google_network_services_wasm_plugin(#24406)google_resource_manager_capability(#24404)IMPROVEMENTS:
mount_optionsin gcsfuse volumes forgoogle_cloud_run_v2_service,google_cloud_run_v2_job, andgoogle_cloud_run_v2_workerpoolresources. (#24413)cipher_suitefield togoogle_compute_vpn_tunnelresource. (#24378)auto_ipam_configtogoogle_container_clusterresource. (#24396)timeoutstogoogle_storage_bucket_iam_binding,google_storage_bucket_iam_member,google_storage_bucket_iam_policyresources (#24376)BUG FIXES:
node_scaling_factorforcing new instance ongoogle_bigtable_instancewhen adding new cluster (#24410)google_cloud_scheduler_jobwhen processing HTTP headers with nil or unexpected data types (#24360)Network field cannot be modifiedissue ingoogle_compute_region_backend_service. Now updating thenetworkfield will force the resource to be recreated. (#24398)google_netapp_volumeforexport_policy.rulesattributeshas_root_accessandsquash_mode. When not specified, these fields will now take on the API default value with no diff. (#24395)google_netapp_storage_poolto source the default value for theqos_typefield from the API. If not specified in the configuration,qos_typewill now default to the value provided by the NetApp Volumes API. (#24394)disk_sizewhendisk_autoresizeis enabled ingoogle_sql_database_instance(#24399)unable to queue the operation409 errors ingoogle_workbench_instanceresource. (#24392)v7.3.0FEATURES:
google_backup_dr_data_source_reference(#24346)google_bigquery_datapolicyv2_data_policy(#24313)google_saas_runtime_release(#24289)google_secure_source_manager_hook(#24345)IMPROVEMENTS:
sub_pathfield togoogle_cloud_run_serviceresource. (#24341)sub_pathfield togoogle_cloud_run_v2_servicegoogle_cloud_run_v2_jobandgoogle_cloud_run_v2_worker_poolresource. (#24341)labelsandlabel_fingerprintfields togoogle_compute_security_policyresource (#24322)labelsunderinitialize_paramsare now updatable ongoogle_compute_instance(#24349)memory_managerandtopology_managertonode_kubelet_configblock (#24277)destination_config.bigquery_destination_config.source_hierarchy_datasets.project_idfield togoogle_datastream_streamresource (#24340)app_typefield togoogle_discovery_engine_search_engineresource (#24320)proxyfield togoogle_gkeonprem_vmware_admin_clusterresource (#24338)validation_configtogoogle_healthcare_fhir_storeresource (#24336)extended_attributesfield toworkforce_pool_providerresource (#24308)export_policy.rules.squash_modefield togoogle_netapp_volumeresource. (#24350)encryption_specfield togoogle_privateca_ca_poolresource (#24328)connectortovpc_accessongoogle_cloud_run_v2_worker_poolresource (#24337)DATA_GOVERNANCEvalue togoogle_tags_tag_key.purpose(#24307)BUG FIXES:
google_bigquery_tableto take into account presence of row access policy (#24284)allow_global_accessto correctly be immutable forgoogle_compute_forwarding_ruleresources with load balancing scheme of INTERNAL_MANAGED (#24312)google_compute_security_policydue to a changed API response for emptymatch.0.expr_optionsblocks (#24353)google_dialogflow_conversation_profile(#24351)RawURLEncodinginstead ofURLEncodingfor unpadded base64 encoding (#24283)google_secret_manager_secret_versionin asecret_manager(#24326)labelsfield fails ingoogle_workbench_instanceresource (#24311)report-notebook-metricsmetadata key settable forgoogle_workbench_instance(#24310)v7.2.0FEATURES:
google_artifact_registry_python_package(#24267)google_backup_dr_data_source_references(#24268)google_discovery_engine_acl_config(#24276)google_saas_runtime_unit_kind(#24236)IMPROVEMENTS:
scope_infofield ingoogle_chronicle_reference_listconfigurable (#24250)header_actiontopath_matcheranddefault_servicelevel ongoogle_compute_region_url_mapresource (#24253)secret_manager_config.rotation_configfield togoogle_container_clusterresource (#24244)memory_managerandtopology_managertogoogle_container_cluster.node_config.kubelet_configandgoogle_container_node_pool.node_config.kubelet_config(#24277)final_backup_descriptionandfinal_backup_configfields togoogle_sql_database_instanceresource (#24273)aws_s3_compatible_data_sourcetogoogle_storage_transfer_jobresource (#24241)BUG FIXES:
universe_domainwhere the provider tried to connect to "googleapis.com" for user email logging whenuniverse_domainwas set (#24238)user_managed_keys_configthat caused faulty cluster updates to be triggered ingoogle_container_cluster(#24256)google_osconfig_patch_deploymentwherepatch_config.yum.minimaldoesn't sendfalsefor empty values (#24247)v7.1.1BUG FIXES:
google_bigtable_table_iam_*resources after upgrading to 7.x and replacinginstancewithinstance_name(#24255)v7.1.0DEPRECATIONS:
enterprise_configfield ingoogle_container_clusterresource. GKE Enterprise features are now available without an Enterprise tier. (#24210)detect_md5hashingoogle_storage_bucket_objectresource (#24147)FEATURES:
google_iap_web_forwarding_rule_service_iam_policy(#24178)google_iap_web_forwarding_rule_service_iam_binding(#24178)google_iap_web_forwarding_rule_service_iam_member(#24178)google_iap_web_forwarding_rule_service_iam_policy(#24178)IMPROVEMENTS:
registry_urias attribute togoogle_artifact_registry_repository(#24164)google_backup_dr_backup_planresource (#24189)create_timefield togoogle_backup_dr_backupdata source (#24183)worker_config.enable_nested_virtualizationfield togoogle_cloudbuild_worker_poolresource (#24176)multi_region_settingsfield togoogle_cloud_run_v2_serviceresource (#24149)params.resource_manager_tagsfield to thegoogle_compute_region_backend_service(#24191)public_delegated_sub_prefixsfield to resourcegoogle_compute_public_delegated_prefix(#24202)update_strategyfield togoogle_compute_network_peeringresource (#24180)uniquefield togoogle_firestore_indexresource (#24163)qos_typeandavailable_throughput_mibpsfields togoogle_netapp_storage_poolresource (#24161)throughput_mibpsfield togoogle_netapp_volumeresource (#24161)EXPLICIT_ROUTING_MODEforrouting_modeongoogle_network_services_gatewayresource (#24151)consumer_network_status,ip_address, andstatusfields topsc_auto_connectionsfield ongoogle_sql_database_instanceresource (#24201)service_accountfield togoogle_storage_transfer_jobresource (#24193)transfer_spec.aws_s3_data_source.credentials_secrettogoogle_storage_transfer_jobresource (#24152)BUG FIXES:
google_compute_region_backend_service.backend.group(#24157)google_compute_region_network_endpoint_groupwhen nonetworkis specified (#24182)google_memorystore_instancewhendesired_psc_auto_connectionsis set (#24212)total_iopsingoogle_netapp_storage_poolresource (#24207)google_oracle_database_autonomous_databaseresource for theodb_networkandodb_subnetfields (#24184)v7.0.1BUG FIXES:
google_storage_bucketstate migration #24186v7.0.0Terraform Google Provider 7.0.0 Upgrade Guide
BREAKING RESOURCE REMOVALS:
google_beyondcorp_application, its associated IAM resourcesgoogle_beyondcorp_application_iam_binding,google_beyondcorp_application_iam_member, andgoogle_beyondcorp_application_iam_policy, and thegoogle_beyondcorp_application_iam_policydatasource. Usegoogle_beyondcorp_security_gateway_applicationinstead. #23999google_notebooks_location#23607google_tpu_node. Usegoogle_tpu_v2_vminstead. #23964BREAKING FIELD REMOVALS:
template.containers.depends_onwithinresource google_cloud_run_v2_worker_pool#23815post_startup_script_configfield from fromgoogle_colab_runtime_templateresource #24026enable_flow_logsfromgoogle_compute_subnetwork#23704configmanagement.binauthzfield ingoogle_gke_hub_feature_membership#24076descriptionfield ingoogle_gke_hub_membership#23587allow_fewer_zones_deploymentfield fromgoogle_memorystore_instanceresource because it isn't user-configurable #24079allow_fewer_zones_deploymentfield fromgoogle_redis_clusterresource because it isn't user-configurable #24079projectfield fromgoogle_service_account_keydatasource #24000enable_secure_private_service_connectingoogle_vertex_ai_endpoint#23843BREAKING INCREASED VALIDATION:
event_typea required field forevent_triggeringoogle_cloudfunctions2_function#23918load_balancing_schemerequired ingoogle_network_services_lb_traffic_extension#23748password_wo_versionrequired whenpassword_wois set ingoogle_sql_user#24083topicfield to be in the form "projects//topics/" ingoogle_storage_notification#24135google_storage_transfer_job#23493metadata, andmetadata.configrequired ingoogle_vertex_ai_index. Resource creation would fail without these attributes already, so no change is necessary to existing configurations. #23971OTHER BREAKING CHANGES:
deletion_protectionfield with a default value oftruetogoogle_alloydb_clusterresource #24024certs_infofield ingoogle_apigee_keystores_aliases_key_cert_fileto be output-only #24135google_apigee_keystores_aliases_key_cert_fileto the plugin framework #24135public_repositoryfields ingoogle_artifact_registry_repository. If your state is reliant on them, they will now need to be manually included in your configuration. #23970view.use_legacy_sqlingoogle_bigquery_table#24065instance_namefor bigtable_table_iam objects #23399budget_filter.credit typesandbudget_filter.subaccountsno longer optional+computed, only optional, ingoogle_billing_budgetresource #24078service_config.servicefield ingoogle_cloudfunctions2_functionresource to be output-only #23790subnetworksandinstancesfields ingoogle_compute_packet_mirroringhave been converted from arrays to sets #24021advertised_ip_rangesfield group ingoogle_compute_routerhas been converted from a list to a set #24030disk.type,disk.modeanddisk.interfaceno longer use provider configured default values and instead will be set by the API ingoogle_compute_instance_templateandgoogle_compute_region_instance_templateresources #24055terraform inputwith invalid resource IDs. #24010disable_on_destroydefault value tofalseingoogle_project_service#23951deletion_policydefault value fromDELETEtoPREVENT#23963retention_periodfield ingoogle_storage_buckethas been converted frominttostringdata type #23535google_storage_notificationto the plugin framework #24135FEATURES:
google_artifact_registry_npm_package(#24072)google_certificate_manager_dns_authorization(#24009)google_iap_web_region_forwarding_rule_service_iam_binding(#24041)google_iap_web_region_forwarding_rule_service_iam_member(#24041)google_iap_web_region_forwarding_rule_service_iam_policy(#24041)google_saas_runtime_saas(#24028)IMPROVEMENTS:
developer_connect_event_configfield togoogle_cloudbuild_triggerresource (#24043)desired_statefield togoogle_cloud_tasks_queueresource (#24053)max_instance_countfield togoogle_cloud_run_v2_serviceresource. (#24031)params.resourceManagerTagsfield to thegoogle_compute_backend_service(#24062)params.resource_manager_tagsfield togoogle_compute_backend_bucket(#24068)short_namefield togoogle_compute_organization_security_policyresource (#24059)cluster_autoscaling.default_compute_class_enabledfield togoogle_container_clusterresource (#24023)enableMultiLanguageTraining,locked,answerFeedbackSettings,personalizationSettings,clientCertificateSettings,startPlaybook,satisfiesPzs, andsatisfiesPzitogoogle_dialogflow_cx_agentresource. (#24007)google_lustre_instanceresource create timeout to 120m from 20m (#24056)google_oracle_database_cloud_vm_clusterresource (#24045)google_sql_database_instanceusingbackupdr_backup(#24066)ca_poolargument optional for private instances that use Google-managed trusted certificates.tosecure_source_manager` resource (#24039)BUG FIXES:
google_container_node_poolwould result in an unrecoverable tainted state (#24077)default_from_apiin image field ingoogle_vmware_node_pool(#24022)install-monitoring-agentmetadata key settable forgoogle_workbench_instance(#24080)Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
Update Terraform google to v7to Update Terraform