Release 1.154.1

• Special shout-outs to @acpana, @anfernee, @anhdle-sso, @barney-s, @codebot-robot, @gemmahou, @himanigulati01, @iamkonohamaru, @justinsb, @katrielt, @ldanielmadariaga, @maqiuyujoyce, and @suwandim for their contributions to this release.

New Alpha Resources (Direct Reconciler):

• ApigeeApiProduct

  • Manage Apigee API products to bundle APIs and make them available to developers.

• ApigeeRegistryApi

  • Manage Apigee Registry APIs to catalog and manage APIs.

• ApigeeRegistryArtifact

  • Manage Apigee Registry artifacts associated with APIs, versions, or specs.

• APIHubExternalAPI

  • Manage API Hub external APIs to track APIs hosted outside of GCP.

• APIHubInstance

  • Manage API Hub instances to enable enterprise API management.

• AppOptimizeReport

  • Manage App Hub Optimize reports.

• ArtifactRegistryVPCSCConfig

  • Manage Artifact Registry VPC Service Controls configurations to secure repository access.

• BigQueryMigrationMigrationWorkflow

  • Manage BigQuery Migration workflows to orchestrate data migration to BigQuery.

• BlockchainNodeEngineBlockchainNode

  • Manage Blockchain Node Engine blockchain nodes to deploy and manage dedicated blockchain nodes.

• CCInsightsConversation

  • Manage Contact Center Insights conversations to analyze customer interactions.

• CCInsightsIssueModel

  • Manage Contact Center Insights issue models to categorize conversation topics.

• CCInsightsPhraseMatcher

  • Manage Contact Center Insights phrase matchers to detect specific phrases in conversations.

• CESApp

  • Manage Consumer Experience Suite (CES) applications.

• CloudBuildConnection

  • Manage Cloud Build 2nd gen connections to integrate external source repositories.

• CloudSecurityComplianceFramework

  • Manage Cloud Security Compliance frameworks.

• ConnectorsConnection

  • Manage Integration Connectors connections to connect to SaaS, databases, and enterprise systems.

• ContentWarehouseDocument

  • Manage Document AI Warehouse documents.

• ContentWarehouseRuleSet

  • Manage Document AI Warehouse rule sets to enforce document policies.

• ContentWarehouseSynonymSet

  • Manage Document AI Warehouse synonym sets to expand search queries.

• DatabaseMigrationPrivateConnection

  • Manage Database Migration Service private connections to securely connect source databases to GCP.

• DataformFolder

  • Manage Dataform folders in Dataform repositories.

• DataformTeamFolder

  • Manage Dataform team folders to organize repository assets.

• DataLabelingDataset

  • Manage AI Platform Data Labeling datasets for annotating training data.

• DataLabelingEvaluationJob

  • Manage AI Platform Data Labeling evaluation jobs to assess model quality.

• DataLineageProcess

  • Manage Dataplex Data Lineage processes to track data origin and movement.

• DataplexAspectType

  • Manage Dataplex aspect types to define metadata schemas.

• DataplexDataAttributeBinding

  • Manage Dataplex data attribute bindings to map security and governance attributes to assets.

• DataplexDataScan

  • Manage Dataplex data scans for data profiling and quality.

• DataplexDataTaxonomy

  • Manage Dataplex data taxonomies to organize business metadata.

• DataplexGlossary

  • Manage Dataplex business glossaries for consistent vocabulary.

• DataplexMetadataJob

  • Manage Dataplex metadata jobs for metadata extraction.

• DevConnectConnection

  • Manage Developer Connect connections to securely link third-party Git hosts.

• DialogflowConversationDataset

  • Manage Dialogflow conversation datasets for agent training.

• DialogflowSecuritySettings

  • Manage Dialogflow security settings for data redaction and access control.

• DialogflowSipTrunk

  • Manage Dialogflow SIP trunks for telecom integration.

• DiscoveryEngineControl

  • Manage Discovery Engine controls to boost or filter search results.

• DiscoveryEngineSampleQuerySet

  • Manage Discovery Engine sample query sets to evaluate search performance.

• DLPConnection

  • Manage Sensitive Data Protection (DLP) connections.

• DLPDiscoveryConfig

  • Manage Sensitive Data Protection (DLP) discovery configurations for profiling data assets.

• EventarcGoogleApiSource

  • Manage Eventarc Google API sources to configure event routing.

• GeminiDataAnalyticsConversation

  • Manage Gemini Data Analytics conversations.

• GKEBackupBackupChannel

  • Manage Backup for GKE backup channels.

• LiveStreamAsset

  • Manage Live Stream assets for processing live video.

• ManagedKafkaConnectCluster

  • Manage Apache Kafka for BigQuery connections.

• MigrationCenterGroup

  • Manage Migration Center groups to organize assets for migration assessment.

• NetworkSecurityAddressGroup

  • Manage Network Security address groups to define reusable network criteria.

• NetworkSecurityAuthzPolicy

  • Manage Network Security authorization policies to secure network paths.

• NetworkSecurityFirewallEndpoint

  • Manage Network Security firewall endpoints for Cloud Firewall Plus threat inspection.

• NetworkSecurityFirewallEndpointAssociation

  • Manage Network Security firewall endpoint associations to apply threat inspection to networks.

• NetworkSecurityGatewaySecurityPolicy

  • Manage Network Security gateway security policies for Secure Web Proxy configurations.

• NetworkSecurityPartnerSSEGateway

  • Manage Network Security partner Secure Service Edge (SSE) gateways.

• NetworkSecurityPartnerSSERealm

  • Manage Network Security partner Secure Service Edge (SSE) realms.

• NetworkSecuritySecurityProfile

  • Manage Network Security security profiles to group threat prevention policies.

• NetworkSecurityTLSInspectionPolicy

  • Manage Network Security TLS inspection policies to inspect encrypted traffic.

• NetworkServicesAuthzExtension

  • Manage Network Services authorization extensions to integrate third-party callouts.

• NotebooksSchedule

  • Manage Vertex AI Workbench schedules to run automated notebooks.

• RedisClusterEndpoint

  • Manage Google Cloud Memorystore for Redis Cluster endpoints.

• RunWorkerPool

  • Manage Cloud Run worker pools for long-running non-HTTP workloads.

• SaasServiceMgmtRelease

  • Manage SaaS Service Management releases.

• SQLAdminBackup

  • Manage Cloud SQL backups (read-only/reference representation).

• StorageInsightsDatasetConfig

  • Manage Storage Insights dataset configurations to generate storage inventories.

• TestingDeviceSession

  • Manage Firebase Test Lab device sessions.

• TranslateAdaptiveMtDataset

  • Manage Cloud Translation adaptive machine translation datasets.

• VectorSearchCollection

  • Manage Vertex AI Vector Search collections.

• VertexAIFeatureGroup

  • Manage Vertex AI Feature Store feature groups to organize features.

• VertexAIFeatureOnlineStore

  • Manage Vertex AI Feature Store feature online stores for low-latency serving.

• VertexAIPipelineJob

  • Manage Vertex AI pipeline jobs to run machine learning pipelines.

• VertexAISpecialistPool

  • Manage Vertex AI specialist pools for human labeling.

• VertexAIStudy

  • Manage Vertex AI Vizier studies for hyperparameter tuning.

• VertexAITuningJob

  • Manage Vertex AI model tuning jobs for model customization.

• VideoStitcherCDNKey

  • Manage Video Stitcher CDN keys to authenticate to external CDNs.

• VisionProduct

  • Manage Cloud Vision products for product search cataloging.

• VMwareEnginePrivateConnection

  • Manage VMware Engine private connections to connect private clouds to other services.

New Fields:

• ComputeSubnetwork

  • Added spec.reservedInternalRange field.

• NetworkConnectivityInternalRange

  • Added spec.allocationOptions field.

• ComputeNetwork

  • Added spec.networkProfile field.

• ComputeSecurityPolicy

  • Added spec.region field.

• DNSRecordSet

  • Added support for routing policy healthCheckRef and rrdatasRefs fields.

• ComputeAddress

  • Added spec.ipCollection field.

• ComputeURLMap

  • Added spec.defaultCustomErrorResponsePolicy field.
  • Added spec.test[].expectedOutputUrl and spec.test[].expectedRedirectResponseCode fields.

• RedisCluster

  • Added spec.crossClusterReplicationConfig field.

• MonitoringAlertPolicy

  • Added spec.conditions[].conditionSql field (SQL Condition).

• StorageBucket

  • Added spec.ipFilter field.

• PubSubTopic

  • Added spec.messageStoragePolicy.enforceInTransit field.

• ComputeRouterNAT

  • Added Private NAT feature support.

Reconciliation Improvements

We have added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object.

• BigQueryReservationCapacityCommitment
• BigtableGCPolicy
• BillingBudgetsBudget
• CertificateManagerCertificateMap
• CertificateManagerCertificateMapEntry
• ComputeAddress
• ComputeAutoscaler
• ComputeBackendServiceSignedURLKey
• ComputeDisk
• ComputeDiskResourcePolicyAttachment
• ComputeExternalVPNGateway
• ComputeFirewall
• ComputeFirewallPolicy
• ComputeHTTPHealthCheck
• ComputeHTTPSHealthCheck
• ComputeImage
• ComputeInstance
• ComputeInstanceGroup
• ComputeInstanceGroupManager
• ComputeNetwork
• ComputeNodeTemplate
• ComputeRoute
• ComputeRouter
• ComputeRouterInterface
• ComputeRouterNAT
• ComputeSSLPolicy
• ComputeSecurityPolicy
• ComputeTargetHTTPSProxy
• ComputeURLMap
• DataflowJob
• DataprocAutoscalingPolicy
• DataprocCluster
• DNSResponsePolicy
• KMSCryptoKey
• KMSKeyRing
• LoggingLogExclusion
• MonitoringAlertPolicy
• NetworkServicesGateway
• PrivateCACertificateAuthority
• PrivateCACertificateTemplate
• PubSubSubscription
• RecaptchaEnterpriseKey
• RedisInstance
• ServiceDirectoryEndpoint
• ServiceDirectoryNamespace
• Service
• ServiceIdentity

Bug Fixes:

• ComposerEnvironment: Fix storageConfig.bucketRef mapping.
• MemorystoreInstance: Prevent infinite reconciliation drift loop by aligning connections list length.
• MemorystoreInstance: Prevent false drift and update attempts on unspecified immutable fields.
• ComputeBackendService: Fix config-connector export tool to export backend field.
• KMSAutokeyConfig: Clean up and improve autokey config identity and deletion resolution.
• BigQuery: Fix perpetual diff on tables inheriting dataset encryption.
• NotebooksInstance: Fix direct controller for NotebookInstance to resolve references.