chore(deps): update terraform google provider to v6

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	>= 3.35, < 6 -> >= 3.35, < 7	6.6.0
google-beta (source)	required_provider	major	>= 3.35, < 6 -> >= 3.35, < 7	6.6.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.5.0

Compare Source

DEPRECATIONS:

• compute: deprecated macsec.pre_shared_keys.fail_open field in google_compute_interconnect resource. Use the new macsec.fail_open field instead (#​19572)

FEATURES:

• New Data Source: google_compute_region_instance_group_manager (#​19589)
• New Data Source: google_privileged_access_manager_entitlement (#​19580)
• New Data Source: google_secret_manager_regional_secret_version_access (#​19538)
• New Data Source: google_secret_manager_regional_secret_version (#​19514)
• New Data Source: google_secret_manager_regional_secrets (#​19532)
• New Resource: google_compute_router_nat_address (#​19550)
• New Resource: google_logging_log_scope (#​19559)

IMPROVEMENTS:

• apigee: added activate field to google_apigee_nat_address resource (#​19591)
• bigquery: added biglake_configuration field to google_bigquery_table resource to support BigLake Managed Tables (#​19541)
• cloudrunv2: promoted scaling field in google_cloud_run_v2_service resource to GA (#​19588)
• composer: promoted config.workloads_config.cloud_data_lineage_integration field in google_composer_environment resource to GA (#​19612)
• compute: added existing_reservations field to google_compute_region_commitment resource (#​19585)
• compute: added hostname field to google_compute_instance data source (#​19607)
• compute: added initial_nat_ip field to google_compute_router_nat resource (#​19550)
• compute: added macsec.fail_open field to google_compute_interconnect resource (#​19572)
• compute: added SUSPENDED as a possible value to desired_state field in google_compute_instance resource (#​19586)
• compute: added import support for projects/{{project}}/meta-data/{{key}} format for google_compute_project_metadata_item resource (#​19613)
• compute: marked customer_name and location fields as optional in google_compute_interconnect resource to support cross cloud interconnect (#​19619)
• container: added linux_node_config.hugepages_config field to google_container_node_pool resource (#​19521)
• container: promoted gcfs_config field in google_container_cluster resource to GA (#​19617)
• looker: added psc_enabled and psc_config fields to google_looker_instance resource (#​19523)
• networkconnectivity: added include_import_ranges field to google_network_connectivity_spoke resource for linked_vpn_tunnels, linked_interconnect_attachments and linked_router_appliance_instances (#​19530)
• secretmanagerregional: added version_aliases field to google_secret_manager_regional_secret resource (#​19514)
• workbench: increased create timeout to 20 minutes for google_workbench_instance resource (#​19551)

BUG FIXES:

• bigquery: fixed in-place update of google_bigquery_table resource when external_data_configuration.schema field is set (#​19558)
• bigquerydatapolicy: fixed permadiff on policy_tag field in google_bigquery_datapolicy_data_policy resource (#​19563)
• composer: fixed storage_config.bucket field to support a bucket name with or without "gs://" prefix (#​19552)
• container: added support for setting addons_config.gcp_filestore_csi_driver_config and enable_autopilot in the same google_container_cluster (#​19590)
• container: fixed node_config.kubelet_config updates in google_container_cluster resource (#​19562)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true would cause google_container_cluster resource creation failure (#​19543)
• workbench: fixed a bug in the google_workbench_instance resource where the removal of labels was not functioning as expected (#​19620)

v6.4.0

Compare Source

DEPRECATIONS:

• securitycenterv2: deprecated google_scc_v2_organization_scc_big_query_exports. Use google_scc_v2_organization_scc_big_query_export instead. (#​19457)

FEATURES:

• New Data Source: google_secret_manager_regional_secret_version (#​19514)
• New Data Source: google_secret_manager_regional_secret (#​19491)
• New Resource: google_database_migration_service_migration_job (#​19488)
• New Resource: google_discovery_engine_target_site (#​19469)
• New Resource: google_healthcare_workspace (#​19476)
• New Resource: google_scc_folder_scc_big_query_export (#​19480)
• New Resource: google_scc_organization_scc_big_query_export (#​19465)
• New Resource: google_scc_project_scc_big_query_export (#​19466)
• New Resource: google_scc_v2_organization_scc_big_query_export (#​19457)
• New Resource: google_secret_manager_regional_secret_version (#​19504)
• New Resource: google_secret_manager_regional_secret (#​19461)
• New Resource: google_site_verification_web_resource (#​19477)
• New Resource: google_spanner_backup_schedule (#​19449)

IMPROVEMENTS:

• alloydb: added enable_outbound_public_ip field to google_alloydb_instance resource (#​19444)
• apigee: added in-place update for consumer_accept_list field in google_apigee_instance resource (#​19442)
• compute: added interface field to google_compute_attached_disk resource (#​19440)
• compute: added in-place update in google_compute_interconnect resource, except for remote_location and requested_features fields (#​19508)
• filestore: added deletion_protection_enabled and deletion_protection_reason fields to google_filestore_instance resource (#​19446)
• looker: added fips_enabled field to google_looker_instance resource (#​19511)
• metastore: added deletion_protection field to google_dataproc_metastore_service resource (#​19505)
• netapp: added allow_auto_tiering field to google_netapp_storage_pool resource (#​19454)
• netapp: added tiering_policy field to google_netapp_volume resource (#​19454)
• secretmanagerregional: added version_aliases field to google_secret_manager_regional_secret resource (#​19514)
• spanner: added edition field to google_spanner_instance resource (#​19449)

BUG FIXES:

• compute: fixed a permadiff on iap field in google_compute_backend and google_compute_region_backend resources (#​19509)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure (#​19543)
• container: fixed a permadiff on node_config.gcfs_config field in google_container_cluster and google_container_node_pool resources (#​19512)
• container: fixed the in-place update for node_config.gcfs_config field in google_container_cluster and google_container_node_pool resources (#​19512)
• container: made node_config.kubelet_config.cpu_manager_policy field optional to fix its update in google_container_cluster resource (#​19464)
• dns: fixed a permadiff on dnssec_config field in google_dns_managed_zone resource (#​19456)
• pubsub: allowed filter field to contain line breaks in google_pubsub_subscription resource (#​19451)

v6.3.0

Compare Source

FEATURES:

• New Data Source: google_bigquery_tables (#​19402)
• New Resource: google_developer_connect_connection (#​19431)
• New Resource: google_developer_connect_git_repository_link (#​19431)
• New Resource: google_memorystore_instance (#​19398)

IMPROVEMENTS:

• compute: added connected_endpoints.consumer_network and connected_endpoints.psc_connection_id fields to google_compute_service_attachment resource (#​19426)
• compute: added field http_keep_alive_timeout_sec to google_region_compute_target_https_proxy and google_region_compute_target_http_proxy resources (#​19432)
• compute: added support for boot_disk.initialize_params.resource_policies in google_compute_instance and google_instance_template (#​19407)
• container: added storage_pools to node_config in google_container_cluster and google_container_node_pool (#​19423)
• containerattached: added security_posture_config field to google_container_attached_cluster resource (#​19411)
• netapp: added large_capacity and multiple_endpoints to google_netapp_volume resource (#​19384)
• resourcemanager: added tags field to google_folder to allow setting tags for folders at creation time (#​19380)

BUG FIXES:

• compute: setting network_ip to "" will no longer cause diff and will be treated the same as null (#​19400)
• dataproc: updated google_dataproc_cluster to protect against handling nil kerberos_config values (#​19401)
• dns: added a mutex to google_dns_record_set to prevent conflicts when multiple resources attempt to operate on the same record set (#​19416)
• managedkafka: added 5 second wait post google_managed_kafka_topic creation to fix eventual consistency errors (#​19429)

v6.2.0

Compare Source

FEATURES:

• New Data Source: google_certificate_manager_certificates (#​19361)
• New Resource: google_network_security_server_tls_policy (#​19314)
• New Resource: google_scc_v2_folder_scc_big_query_export (#​19327)
• New Resource: google_scc_v2_project_scc_big_query_export (#​19311)

IMPROVEMENTS:

• assuredworkload: added field partner_service_billing_account to google_assured_workloads_workload (#​19358)
• bigtable: added support for column_family.type in google_bigtable_table (#​19302)
• cloudrun: promoted support for nfs and csi volumes (for Cloud Storage FUSE) for google_cloud_run_service to GA (#​19359)
• cloudrunv2: promoted support for nfs and gcs volumes for google_cloud_run_v2_job to GA (#​19359)
• compute: added boot_disk.interface field to google_compute_instance resource (#​19319)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​19320)
• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​19312)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​19312)
• container: added support for in-place updates for google_compute_node_pool.node_config.gcfs_config and google_container_cluster.node_config.gcfs_cluster and google_container_cluster.node_pool.node_config.gcfs_cluster (#​19365)
• container: promoted the additive_vpc_scope_dns_domain field on the google_container_cluster resource to GA (#​19313)
• iambeta: added x509 field to google_iam_workload_identity_pool_provider resource (#​19375)
• networkconnectivity: added include_export_ranges to google_network_connectivity_spoke (#​19346)
• pubsub: added cloud_storage_config.max_messages and cloud_storage_config.avro_config.use_topic_schema fields to google_pubsub_subscription resource (#​19338)
• redis: added the maintenance_policy field to the google_redis_cluster resource (#​19341)
• resourcemanager: added tags field to google_project to allow setting tags for projects at creation time (#​19351)
• securitycenter: added support for empty streaming_config.filter values in google_scc_notification_config resources (#​19369)

BUG FIXES:

• compute: fixed google_compute_interconnect to support correct available_features option of IF_MACSEC (#​19330)
• compute: fixed a bug where advertised_route_priority was accidentally set to 0 during updates in google_compute_router_peer (#​19366)
• compute: fixed a permadiff caused by setting start_time in an incorrect H:mm format in google_compute_resource_policies resources (#​19297)
• compute: fixed network_interface.subnetwork_project validation to match with the project in network_interface.subnetwork field when network_interface.subnetwork has full self_link in google_compute_instance resource (#​19348)
• container: removed unnecessary force replacement in node pool gcfs_config (#​19365
• kms: updated the google_kms_autokey_config resource's folder field to accept values that are either full resource names (folders/{folder_id}) or just the folder id ({folder_id} only) (#​19364))
• storage: added retry support for 429 errors in google_storage_bucket resource (#​19353)

v6.1.0

Compare Source

FEATURES:

• New Data Source: google_kms_crypto_key_latest_version (#​19249)
• New Data Source: google_kms_crypto_key_versions (#​19241)

IMPROVEMENTS:

• databasemigrationservice: added support in google_database_migration_service_connection_profile for creating DMS connection profiles that link to existing Cloud SQL instances/AlloyDB clusters. (#​19291)
• alloydb: added subscription_type and trial_metadata field to google_alloydb_cluster resource (#​19262)
• bigquery: added encryption_configuration field to google_bigquery_data_transfer_config resource (#​19267)
• bigqueryanalyticshub: added selected_resources, and restrict_direct_table_access to google_bigquery_analytics_hub_listing resource (#​19244)
• bigqueryanalyticshub: added sharing_environment_config to google_bigquery_analytics_hub_data_exchange resource (#​19244)
• cloudtasks: added http_target field to google_cloud_tasks_queue resource (#​19253)
• compute: added accelerators field to google_compute_node_template resource (#​19292)
• compute: allowed disabling server_tls_policy during update in google_compute_target_https_proxy resources (#​19233)
• container: added secret_manager_config field to google_container_cluster resource (#​19288)
• datastream: added transaction_logs and change_tables to the datastream_stream resource (#​19248)
• discoveryengine: added chunking_config and layout_parsing_config fields to google_discovery_engine_data_store resource (#​19274)
• dlp: added inspect_template_modified_cadence field to big_query_target and cloud_sql_target in google_data_loss_prevention_discovery_config resource (#​19282)
• dlp: added tag_resources field to google_data_loss_prevention_discovery_config resource (#​19282)
• networksecurity: promoted google_network_security_client_tls_policy to GA (#​19293)

BUG FIXES:

• bigquery: fixed an error which could occur with email field values containing non-lower-case characters in google_bigquery_dataset_access resource (#​19259)
• bigqueryanalyticshub: made bigquery_dataset immutable in google_bigquery_analytics_hub_listing as it was not updatable in the API. Now modifying the field in Terraform will correctly recreate the resource rather than causing Terraform to report it would attempt an invalid update. (#​19244)
• container: fixed update inconsistency in google_container_cluster resource (#​19247)
• pubsub: fixed a validation bug that didn't allow empty filter definitions for google_pubsub_subscription resources (#​19284)
• resourcemanager: fixed a bug where data.google_client_config failed silently when inadequate credentials were used to configure the provider (#​19286)
• sql: fixed importing google_sql_user where host is an IPv4 CIDR (#​19243)
• sql: fixed overwriting of name field for IAM Group user in google_sql_user resource (#​19234)

v6.0.1

Compare Source

BREAKING CHANGES:

• sql: removed settings.ip_configuration.require_ssl from google_sql_database_instance in favor of settings.ip_configuration.ssl_mode. This field was intended to be removed in 6.0.0. (#​19263)

v6.0.0

Compare Source

Terraform Google Provider 6.0.0 Upgrade Guide

BREAKING CHANGES:

• provider: changed provider labels to add the goog-terraform-provisioned: true label by default. (#​19190)
• activedirectory: added deletion_protection field to google_active_directory_domain resource. This field defaults to true, preventing accidental deletions. To delete the resource, you must first set deletion_protection = false before destroying the resource. (#​18906)
• alloydb: removed network in google_alloy_db_cluster. Use network_config.network instead. (#​19181)
• bigquery: added client-side validation to prevent table view creation if schema contains required fields for google_bigquery_table resource (#​18767)
• bigquery: removed allow_resource_tags_on_deletion from google_bigquery_table. Resource tags are now always allowed on table deletion. (#​19077)
• bigqueryreservation: removed multi_region_auxiliary from google_bigquery_reservation (#​18922)
• billing: revised the format of id for google_billing_project_info (#​18823)
• cloudrunv2: added deletion_protection field to google_cloudrunv2_service. This field defaults to true, preventing accidental deletions. To delete the resource, you must first set deletion_protection = false before destroying the resource.(#​19019)
• cloudrunv2: changed liveness_probe to no longer infer a default value from api on google_cloud_run_v2_service. Removing this field and applying the change will now remove liveness probe from the Cloud Run service. (#​18764)
• cloudrunv2: retyped containers.env to SET from ARRAY for google_cloud_run_v2_service and google_cloud_run_v2_job. (#​18855)
• composer: ip_allocation_policy = [] in google_composer_environment is no longer valid configuration. Removing the field from configuration should not produce a diff. (#​19207)
• compute: added new required field enabled in google_compute_backend_service and google_compute_region_backend_service (#​18772)
• compute: changed certifcate_id in google_compute_managed_ssl_certificate to correctly be output only. (#​19069)
• compute: revised and in some cases removed default values of connection_draining_timeout_sec, balancing_mode and outlier_detection in google_compute_region_backend_service and google_compute_backend_service. (#​18720)
• compute: revised the format of id for compute_network_endpoints (#​18844)
• compute: guest_accelerator = [] is no longer valid configuration in google_compute_instance. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#​19207)
• compute: google_compute_instance_from_template and google_compute_instance_from_machine_image network_interface.alias_ip_range, network_interface.access_config, attached_disk, guest_accelerator, service_account, scratch_disk can no longer be set to an empty block []. Removing the fields from configuration should not produce a diff. (#​19207)
• compute: secondary_ip_ranges = [] in google_compute_subnetwork is no longer valid configuration. To set an explicitly empty list, use send_secondary_ip_range_if_empty and completely remove secondary_ip_range from config. (#​19207)
• container: made advanced_datapath_observability_config.enable_relay required in google_container_cluster (#​19060)
• container: removed deprecated field advanced_datapath_observability_config.relay_mode from google_container_cluster resource. Users are expected to use enable_relay field instead. (#​19060)
• container: three label-related fields are now in google_container_cluster resource. resource_labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-only terraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-only effective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#​19062)
• container: made three fields resource_labels, terraform_labels, and effective_labels be present in google_container_cluster datasources. All three fields will have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent to effective_labels on the resource. (#​19062)
• container: guest_accelerator = [] is no longer valid configuration in google_container_cluster and google_container_node_pool. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#​19207)
• container: guest_accelerator.gpu_driver_installation_config = [] and guest_accelerator.gpu_sharing_config = [] are no longer valid configuration in google_container_cluster and google_container_node_pool. Removing the fields from configuration should not produce a diff. (#​19207)
• datastore: removed google_datastore_index in favor of google_firestore_index (#​19160)
• edgenetwork: three label-related fields are now in google_edgenetwork_network and google_edgenetwork_subnet resources. labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-only terraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-only effective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#​19062)
• identityplatform: removed resource google_identity_platform_project_default_config in favor of google_identity_platform_project_config (#​18992)
• pubsub: allowed schema_settings in google_pubsub_topic to be removed (#​18631)
• integrations: removed create_sample_workflows and provision_gmek from google_integrations_client (#​19148)
• redis: added a deletion_protection_enabled field to the google_redis_cluster resource. This field defaults to true, preventing accidental deletions. To delete the resource, you must first set deletion_protection_enabled = false before destroying the resource. (#​19173)
• resourcemanager: added deletion_protection field to google_folder to make deleting them require an explicit intent. Folder resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#​19021)
• resourcemanager: made deletion_policy in google_project 'PREVENT' by default. This makes deleting them require an explicit intent. google_project resources cannot be destroyed unless deletion_policy is set to 'ABANDON' or 'DELETE' for the resource. (#​19114)
• sql: removed settings.ip_configuration.require_ssl in google_sql_database_instance. Please use settings.ip_configuration.ssl_mode instead. (#​18843)
• storage: removed no_age field from lifecycle_rule.condition in the google_storage_bucket resource (#​19048)
• vpcaccess: removed default values for min_throughput and min_instances fields on google_vpc_access_connector and made them default to values returned from the API when not provided by users (#​18697)
• vpcaccess: added a conflicting fields restriction between min_throughput and min_instances fields on google_vpc_access_connector (#​18697)
• vpcaccess: added a conflicting fields restriction between max_throughput and max_instances fields on google_vpc_access_connector (#​18697)
• workstation: defaulted host.gce_instance.disable_ssh to true for google_workstations_workstation_config (#​19101)
  IMPROVEMENTS:
• compute: added fields reserved_internal_range and secondary_ip_ranges[].reserved_internal_range to google_compute_subnetwork resource (#​19151)
• compute: changed the behavior of name_prefix in multiple Compute resources to allow for a longer max length of 54 characters. See the upgrade guide and resource documentation for more details. (#​19152)
  BUG FIXES:
• compute: fixed an issue regarding sending enabled field by default for null iap message in google_compute_backend_service and google_compute_region_backend_service (#​18772)

v5.44.1

Compare Source

NOTES:

• 5.44.1 is a backport release, intended to pull in critical container improvements and fixes for issues introduced in 5.44.0

IMPROVEMENTS:

• container: added in-place update support for gcfs_config in in google_container_cluster and google_container_node_pool (#​19365) (#​19512)

BUG FIXES:

• container: fixed a permadiff on gcfs_config in google_container_cluster and google_container_node_pool (#​19512)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure. (#​19543)

v5.44.0

Compare Source

NOTES:

• 5.44.0 is a backport release, intended to pull in critical container improvements from 6.2.0

IMPROVEMENTS:

• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​19312)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​19312)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​19320)

v5.43.1

Compare Source

NOTES:

• 5.43.1 is a backport release, and some changes will not appear in 6.X series releases until 6.1.0

BUG FIXES:

• pubsub: fixed a validation bug that didn't allow empty filter definitions for google_pubsub_subscription resources (#​19284)

v5.43.0

Compare Source

DEPRECATIONS:

• storage: deprecated lifecycle_rule.condition.no_age field in google_storage_bucket. Use the new lifecycle_rule.condition.send_age_if_zero field instead. (#​19172)

FEATURES:

• New Resource: google_kms_ekm_connection_iam_binding (#​19132)
• New Resource: google_kms_ekm_connection_iam_member (#​19132)
• New Resource: google_kms_ekm_connection_iam_policy (#​19132)
• New Resource: google_scc_v2_organization_scc_big_query_exports (#​19184)

IMPROVEMENTS:

• compute: added label_fingerprint field to google_compute_global_address resource (#​19204)
• compute: exposed service side id as new output field forwarding_rule_id on resource google_compute_forwarding_rule (#​19139)
• container: added EXTENDED as a valid option for release_channel field in google_container_cluster resource (#​19141)
• logging: changed enable_analytics parsing to "no preference" in analytics if omitted, instead of explicitly disabling analytics in google_logging_project_bucket_config (#​19126)
• pusbub: added validation to filter field in resource google_pubsub_subscription (#​19131)
• resourcemanager: added default_labels field to google_client_config data source (#​19170)
• vmwareengine: added PC undelete support in google_vmwareengine_private_cloud (#​19192)

BUG FIXES:

• alloydb: fixed a permadiff on psc_instance_config in google_alloydb_instance resource (#​19143)
• compute: fixed a malformed URL that affected updating the server_tls_policy property on google_compute_target_https_proxy resources (#​19164)
• compute: fixed bug where the labels field could not be updated on google_compute_global_address (#​19204)
• compute: fixed force diff replacement logic for network_ip on resource google_compute_instance (#​19135)

v5.42.0

Compare Source

DEPRECATIONS:

• compute: setting google_compute_subnetwork.secondary_ip_range = [] to explicitly set a list of empty objects is deprecated and will produce an error in the upcoming major release. Use send_secondary_ip_range_if_empty while removing secondary_ip_range from config instead. (#​19122)

FEATURES:

• New Data Source: google_artifact_registry_locations (#​19047)
• New Data Source: google_cloud_identity_transitive_group_memberships (#​19038)
• New Resource: google_discovery_engine_schema (#​19124)
• New Resource: google_scc_folder_notification_config (#​19057)
• New Resource: google_scc_v2_folder_notification_config (#​19055)
• New Resource: google_vertex_ai_index_endpoint_deployed_index (#​19061)

IMPROVEMENTS:

• clouddeploy: added serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.pod_selector_label and serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.service_networking.pod_selector_label fields to google_clouddeploy_delivery_pipeline resource (#​19100)
• compute: added send_secondary_ip_range_if_empty to google_compute_subnetwork (#​19122)
• discoveryengine: added skip_default_schema_creation field to google_data_store resource (#​19017)
• dns: changed load_balancer_type field from required to optional in google_dns_record_set (#​19050)
• firestore: added cmek_config field to google_firestore_database resource (#​19107)
• servicenetworking: added update_on_creation_fail field to google_service_networking_connection resource. When it is set to true, enforce an update of the reserved peering ranges on the existing service networking connection in case of a new connection creation failure. (#​19035)
• sql: added server_ca_mode field to google_sql_database_instance resource (#​18998)

BUG FIXES:

• bigquery: made google_bigquery_dataset_iam_member non-authoritative. To remove a bigquery dataset iam member, use an authoritative resource like google_bigquery_dataset_iam_policy (#​19121)
• cloudfunctions2: fixed a "Provider produced inconsistent final plan" bug affecting the service_config.environment_variables field in google_cloudfunctions2_function resource (#​19024)
• cloudfunctions2: fixed a permadiff on storage_source.generation in google_cloudfunctions2_function resource (#​19031)
• compute: fixed issue where sub-resources managed by google_compute_forwarding_rule prevented resource deletion (#​19117)
• logging: changed google_logging_project_bucket_config.enable_analytics behavior to set "no preference" in analytics if omitted, instead of explicitly disabling analytics. (#​19126)
• workbench: fixed a bug with google_workbench_instance metadata drifting when using custom containers. (#​19119)

v5.41.0

Compare Source

DEPRECATIONS:

• resourcemanager: deprecated skip_delete field in the google_project resource. Use deletion_policy instead. (#​18867)

FEATURES:

• New Data Source: google_logging_log_view_iam_policy (#​18990)
• New Data Source: google_scc_v2_organization_source_iam_policy (#​19004)
• New Resource: google_access_context_manager_service_perimeter_dry_run_egress_policy (#​18994)
• New Resource: google_access_context_manager_service_perimeter_dry_run_ingress_policy (#​18994)
• New Resource: google_scc_v2_folder_mute_config (#​18924)
• New Resource: google_scc_v2_project_mute_config (#​18993)
• New Resource: google_scc_v2_project_notification_config (#​19008)
• New Resource: google_scc_v2_organization_source (#​19004)
• New Resource: google_scc_v2_organization_source_iam_binding (#​19004)
• New Resource: google_scc_v2_organization_source_iam_member (#​19004)
• New Resource: google_scc_v2_organization_source_iam_policy (#​19004)
• New Resource: google_logging_log_view_iam_binding (#​18990)
• New Resource: google_logging_log_view_iam_member (#​18990)
• New Resource: google_logging_log_view_iam_policy (#​18990)

IMPROVEMENTS:

• clouddeploy: added gke.proxy_url field to google_clouddeploy_target (#​19016)
• cloudrunv2: added field binary_authorization.policy to resource google_cloud_run_v2_job and resource google_cloud_run_v2_service to support named binary authorization policy. (#​18995)
• compute: added source_regions field to google_compute_healthcheck resource (#​19006)
• compute: added update-in-place support for the google_compute_target_https_proxy.server_tls_policy field (#​18996)
• compute: added update-in-place support for the google_compute_region_target_https_proxy.server_tls_policy field (#​19007)
• container: added auto_provisioning_locations field to google_container_cluster (#​18928)
• dataform: added kms_key_name field to google_dataform_repository resource (#​18947)
• discoveryengine: added skip_default_schema_creation field to google_discovery_engine_data_store resource (#​19017)
• gkehub: added configmanagement.management and configmanagement.config_sync.enabled fields to google_gkehub_feature_membership (#​19016)
• gkehub: added management field to google_gke_hub_feature.fleet_default_member_config.configmanagement (#​18963)
• resourcemanager: added deletion_policy field to the google_project resource. Setting deletion_policy to PREVENT will protect the project against any destroy actions caused by a terraform apply or terraform destroy. Setting deletion_policy to ABANDON allows the resource to be abandoned rather than deleted and it behaves the same with skip_delete = true. Default value is DELETE. skip_delete = true takes precedence over deletion_policy = "DELETE".
• storage: added force_destroy field to google_storage_managed_folder resource (#​18973)
• storage: added generation field to google_storage_bucket_object resource (#​18971)

BUG FIXES:

• compute: fixed google_compute_instance.alias_ip_range update behavior to avoid temporarily deleting unchanged alias IP ranges (#​19015)
• compute: fixed the bug that creation of PSC forwarding rules fails in google_compute_forwarding_rule resource when provider default labels are set (#​18984)
• sql: fixed a perma-diff in settings.insights_config in google_sql_database_instance (#​18962)

v5.40.0

Compare Source

IMPROVEMENTS:

• bigquery: added support for value DELTA_LAKE to source_format in google_bigquery_table resource (#​18915)
• compute: added access_mode field to google_compute_disk resource (#​18857)
• compute: added stack_type, and gateway_ip_version fields to google_compute_router resource (#​18839)
• container: added field ray_operator_config for resource_container_cluster (#​18825)
• container:

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun