feat(deps): Update Terraform google to v5

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	>= 3.53, < 5.0 -> >= 3.53, < 5.37	5.37.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.36.0

Compare Source

FEATURES:

• New Resource: google_storage_managed_folder_iam (#​18555)
• New Resource: google_storage_managed_folder (#​18555)

IMPROVEMENTS:

• bigtable: added ignore_warnings field to google_bigtable_gc_policy resource (#​18492)
• cloudfunctions2: added build_config.automatic_update_policy and build_config.on_deploy_update_policy fields to google_cloudfunctions2_function resource (#​18540)
• compute: added confidential_instance_config.confidential_instance_type field to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources (#​18554)
• compute: added custom_error_response_policy and default_custom_error_response_policy fields to google_compute_url_map resource (#​18511)
• compute: added tls_early_data field to google_compute_target_https_proxy resource (#​18512)
• compute: promoted google_compute_network_attachment resource from beta to GA (#​18494)
• datafusion: added connection_type and private_service_connect_config fields to google_data_fusion_instance resource (#​18525)
• healthcare: added encryption_spec field to google_healthcare_dataset resource (#​18528)
• monitoring: added links field to google_monitoring_alert_policy resource (#​18549)
• vertexai: added update support for big_query.entity_id_columns field on google_vertex_ai_feature_group resource (#​18493)
• vertexai: promoted dedicated_serving_endpoint field on google_vertex_ai_feature_online_store resource from beta to GA (#​18513)

BUG FIXES:

• accesscontextmanager: fixed perma-diff caused by ordering of service_perimeters in google_access_context_manager_service_perimeters resource (#​18520)
• compute: fixed a crash in google_compute_reservation resource when share_settings field has changes (#​18498)
• compute: fixed issue in google_compute_instance resource where service_account is not set when specifying service_account.email and no service_account.scopes (#​18521)
• gkehub2: fixed google_gke_hub_feature resource to allow fleet_default_member_config field to be unset (#​18487)
• identityplatform: fixed perma-diff on google_identity_platform_config resource when sms_region_config is not set (#​18537)
• logging: fixed perma-diff on index_configs in google_logging_organization_bucket_config resource (#​18501)

v5.35.0

Compare Source

v5.34.0

Compare Source

NOTES:

• compute: Updated field description of connection_draining_timeout_sec, balancing_mode and outlier_detection in google_compute_region_backend_service and google_compute_backend_service to inform that default values will be changed in 6.0.0 (#​18399)

FEATURES:

• New Resource: google_netapp_backup (#​18357)
• New Resource: google_network_services_service_lb_policies (#​18326)
• New Resource: google_scc_management_folder_security_health_analytics_custom_module (#​18360)
• New Resource: google_scc_management_organization_project_security_health_analytics_custom_module (#​18369)
• New Resource: google_scc_management_organization_security_health_analytics_custom_module (#​18374)

IMPROVEMENTS:

• alloydb: changed the resource google_alloydb_instance to be created directly with public IP enabled instead of creating the resource with public IP disabled and then enabling it (#​18344)
• bigtable: added automated_backup_configuration field to google_bigtable_table resource (#​18335)
• cloudbuildv2: added support for connecting to Bitbucket Data Center and Bitbucket Cloud with the bitbucket_data_center_config and bitbucket_cloud_config fields in google_cloudbuildv2_connection (#​18375)
• compute: added update support to ssl_policy field in google_compute_region_target_https_proxy resource (#​18361)
• compute: removed enum validation on guest_os_features.type in google_compute_disk to allow for new features to be used without provider update (#​18331)
• compute: updated documentation of google_compute_target_https_proxy and google_compute_region_target_https_proxy (#​18358)
• container: added support for security_posture_config.mode value "ENTERPRISE" in resource_container_cluster (#​18334)
• discoveryengine: added document_processing_config field to google_discovery_engine_data_store resource (#​18350)
• edgecontainer: added 'maintenance_exclusions' field to 'google_edgecontainer_cluster' resource (#​18370)
• gkehub: added prevent_drift field to ConfigManagement fleet_default_member_config (#​18330)
• netapp: added administrators field to google_netapp_active_directory resource (#​18333)
• vertexai: promoted optimized field to GA for google_vertex_ai_feature_online_store resource (#​18348)
• workbench: updated the metadata keys managed by the backend. (#​18367)

BUG FIXES:

• compute: fixed an issue where google_compute_instance_group_manager with a pending operation was incorrectly removed due to the operation no longer being present in the backend (#​18380)
• compute: fixed issue where users could not create google_compute_security_policy resources with layer_7_ddos_defense_config explicitly disabled (#​18345)
• workbench: fixed a bug in the google_workbench_instance resource where specifying a network in some scenarios would cause instance creation to fail (#​18404

v5.33.0

Compare Source

DEPRECATIONS:

• healthcare: deprecated notification_config in google_healthcare_fhir_store resource. Use notification_configs instead. (#​18306)

FEATURES:

• New Data Source: google_compute_security_policy (#​18316)
• New Resource: google_compute_project_cloud_armor_tier (#​18319)
• New Resource: google_network_services_service_lb_policies (#​18326)
• New Resource: google_scc_management_organization_event_threat_detection_custom_module (#​18317)
• New Resource: google_spanner_instance_config (#​18322)

IMPROVEMENTS:

• appengine: added flexible_runtime_settings field to google_app_engine_flexible_app_version resource (#​18325)
• bigtable: added force_destroy field to google_bigtable_instance resource. This will force delete any backups present in the instance and allow the instance to be deleted. (#​18291)
• clouddeploy: added execution_configs.verbose field to google_clouddeploy_target resource (#​18292)
• compute: added storage_pool field to google_compute_disk resource (#​18273)
• dlp: added secrets_discovery_target, cloud_sql_target.filter.database_resource_reference, and big_query_target.filter.table_reference fields to google_data_loss_prevention_discovery_config resource (#​18324)
• gkebackup: added backup_schedule.backup_config.permissive_mode field to google_gke_backup_backup_plan resource (#​18266)
• gkebackup: added restore_config.restore_order field to google_gke_backup_restore_plan resource (#​18266)
• gkebackup: added restore_config.volume_data_restore_policy_bindings field to google_gke_backup_restore_plan resource (#​18266)
• gkebackup: added new enum values MERGE_SKIP_ON_CONFLICT, MERGE_REPLACE_VOLUME_ON_CONFLICT and MERGE_REPLACE_ON_CONFLICT to field restore_config.namespaced_resource_restore_mode in google_gke_backup_restore_plan resource (#​18266)
• healthcare: added notification_config.send_for_bulk_import field to google_healthcare_dicom_store resource (#​18320)
• healthcare: added notification_configs field to google_healthcare_fhir_store resource (#​18306)
• integrationconnectors: added endpoint_global_access field to google_integration_connectors_endpoint_attachment resource (#​18293)
• netapp: added backup_config field to google_netapp_volume resource (#​18286)
• redis: added zone_distribution_config field to google_redis_cluster resource (#​18307)
• resourcemanager: added support for range_type = "default-domains-netblocks" in google_netblock_ip_ranges data source (#​18290)
• secretmanager: added support for IAM conditions in google_secret_manager_secret_iam_* resources (#​18294)
• workstations: added boot_disk_size_gb, enable_nested_virtualization, and pool_size to host.gce_instance.boost_configs in google_workstations_workstation_config resource (#​18310)

BUG FIXES:

• container: fixed google_container_node_pool crash if node_config.secondary_boot_disks.mode is not set (#​18323)
• dlp: removed required on inspect_config.limits.max_findings_per_info_type.info_type field to allow the use of default limit by not setting this field in google_data_loss_prevention_inspect_template resource (#​18285)
• provider: fixed application default credential and access token authorization when universe_domain is set (#​18272)

v5.32.0

Compare Source

NOTES:

• privateca: converted google_privateca_certificate_template to now use the MMv1 engine instead of DCL (#​18224)

FEATURES:

• New Resource: google_dataplex_entry_type (#​18229)
• New Resource: google_logging_log_view_iam_binding (#​18243)
• New Resource: google_logging_log_view_iam_member (#​18243)
• New Resource: google_logging_log_view_iam_policy (#​18243)

IMPROVEMENTS:

• alloydb: added psc_config field to google_alloydb_cluster resource (#​18263)
• alloydb: added psc_instance_config field to google_alloydb_instance resource (#​18263)
• cloudrunv2: added default_uri_disabled field to resource google_cloud_run_v2_service resource (#​18246)
• compute: added NONE to acceptable options for update_policy.minimal_action field in google_compute_instance_group_manager resource (#​18236)
• looker: increased validation length of name to google_looker_instance resource (#​18244)
• sql: updated support for a new value week5 in field setting.maintenance_window.update_track in google_sql_database_instance resource (#​18223)

BUG FIXES:

• cloudrunv2: added validation for timeout field to google_cloud_run_v2_job and google_cloud_run_v2_service resources (#​18260)
• compute: fixed permadiff in ordering of advertised_ip_ranges.range field on google_compute_router resource (#​18228)
• iam: added a 10 second sleep when creating a 'google_service_account' resource to reduce eventual consistency errors(#​18261)
• storage: fixed google_storage_bucket.lifecycle_rule.condition block fields days_since_noncurrent_time and days_since_custom_time and num_newer_versions were not working for 0 value (#​18231)

v5.31.1

Compare Source

BUG FIXES:

• iam: added a 10 second sleep when creating a google_service_account to reduce eventual consistency errors. See https://github.com/hashicorp/terraform-provider-google/issues/18024 for more details (#​18261)

v5.31.0

Compare Source

FEATURES:

• New Data Source: google_compute_subnetworks (#​18159)
• New Resource: google_dataplex_aspect_type (#​18201)
• New Resource: google_dataplex_entry_group (#​18188)
• New Resource: google_kms_autokey_config (#​18179)
• New Resource: google_kms_key_handle (#​18179)
• New Resource: google_network_services_lb_route_extension (#​18195)

IMPROVEMENTS:

• appengine: added field instance_ip_mode to resource google_app_engine_flexible_app_version resource (beta) (#​18168)
• bigquery: added external_data_configuration.bigtable_options to google_bigquery_table (#​18181)
• composer: added support for importing google_composer_user_workloads_secret via the "{{environment}}/{{name}}" format. (#​7390)
• composer: improved timeouts for google_composer_user_workloads_secret. (#​7390)
• compute: added TLS_JA3_FINGERPRINT and USER_IP options in field rate_limit_options.enforce_on_key to google_compute_security_policy resource (#​18167)
• compute: added 'rateLimitOptions' field to 'google_compute_security_policy_rule' resource (#​18167)
• compute: changed google_compute_region_ssl_policy's region field to optional and allow to be inferred from environment (#​18178)
• compute: added subnet_length field to google_compute_interconnect_attachment resource (#​18187)
• container: added containerd_config field and subfields to google_container_cluster and google_container_node_pool resources, to allow those resources to access private image registries. (#​18160)
• container: allowed both enable_autopilot and workload_identity_config to be set in google_container_cluster resource. (#​18166)
• datastream: added create_without_validation field to google_datastream_connection_profile, google_datastream_private_connection and google_datastream_stream resources (#​18176)
• network-security: added trust_config, min_tls_version, tls_feature_profile and custom_tls_features fields to google_network_security_tls_inspection_policy resource (#​18139)
• networkservices: made field load_balancing_scheme immutable in resource google_network_services_lb_traffic_extension, as in-place updating is always failing (#​18195)
• networkservices: made required fields extension_chains.extensions.authority and extension_chains.extensions.timeout optional in resource google_network_services_lb_traffic_extension (#​18195)
• networkservices: removed unsupported load balancing scheme LOAD_BALANCING_SCHEME_UNSPECIFIED from the field load_balancing_scheme in resource google_network_services_lb_traffic_extension (#​18195)
• pubsub: added cloud_storage_config.filename_datetime_format field to google_pubsub_subscription resource (#​18180)
• tpu: added type of accelerator_config to google_tpu_v2_vm resource (#​18148)

BUG FIXES:

• monitoring: fixed a permadiff with monitored_resource.labels property in the google_monitoring_uptime_check_config resource (#​18174)
• storage: fixed a bug where field autoclass block is generating permadiff whenever the block is removed from the config in google_storage_bucket resource (#​18197)
• storagetransfer: fixed a permadiff with transfer_spec.0.aws_s3_data_source.0.aws_access_key resource_storage_transfer_job (#​18190)

v5.30.0

Compare Source

FEATURES:

• New Data Source: google_cloud_asset_resources_search_all (#​18129)
• New Resource: google_compute_interconnect (#​18064)
• New Resource: google_network_services_lb_traffic_extension (#​18138)

IMPROVEMENTS:

• compute: added kms_key_name field to google_bigquery_connection resource (#​18057)
• compute: added auto_network_tier field to google_compute_router_nat resource (#​18055)
• compute: promoted enable_ipv4, ipv4_nexthop_address and peer_ipv4_nexthop_address fields in google_compute_router_peer resource to GA (#​18056)
• compute: promoted identifier_range field in google_compute_router resource to GA (#​18056)
• compute: promoted ip_version field in google_compute_router_interface resource to GA (#​18056)
• container: added KUBELET and CADVISOR options to monitoring_config.enable_components in google_container_cluster resource (#​18090)
• dataproc: added local_ssd_interface to google_dataproc_cluster resource (#​18137)
• dataprocmetastore: promoted google_dataproc_metastore_federation to GA (#​18084)
• dlp: added cloud_sql_target field to google_data_loss_prevention_discovery_config resource (#​18063)
• netapp: added FLEX value to field service_level in google_netapp_storage_pool resource (#​18088)
• networksecurity: added trust_config, min_tls_version, tls_feature_profile and custom_tls_features fields to google_network_security_tls_inspection_policy resource (#​18139)
• networkservices: supported in-place update for gateway_security_policy and certificate_urls fields in google_network_services_gateway resource (#​18082)

BUG FIXES:

• compute: fixed a perma-diff on machine_type field in google_compute_instance resource (#​18071)
• compute: fixed a perma-diff on type field in google_compute_disk resource (#​18071)
• storage: fixed update issue for lifecycle_rule.condition.custom_time_before and lifecycle_rule.condition.noncurrent_time_before in google_storage_bucket resource (#​18127)

v5.29.1

Compare Source

BREAKING CHANGES:

• compute: removed secondary_ip_range.reserved_internal_range field from google_compute_subnetwork (18133)

v5.29.0

Compare Source

NOTES:

• compute: added documentation for md5_authentication_key field in google_compute_router_peer resource. The field was introduced in v5.12.0, but documentation was unintentionally omitted at that time. (#​17991)

FEATURES:

• New Resource: google_bigtable_authorized_view (#​18006)
• New Resource: google_integration_connectors_managed_zone (#​18029)
• New Resource: google_network_connectivity_regional_endpoint (#​18014)
• New Resource: google_network_security_security_profile (#​18025)
• New Resource: google_network_security_security_profile_group (#​18025)
• New Resource: google_network_security_firewall_endpoint (#​18025)
• New Resource: google_network_security_firewall_endpoint_association (#​18025)

IMPROVEMENTS:

• clouddeploy: added custom_target field to google_clouddeploy_target resource (#​18000)
• clouddeploy: added google_cloud_build_repo to custom_target_type resource (#​18040)
• compute: added preconfigured_waf_config field to google_compute_region_security_policy_rule resource; (#​18039)
• compute: added rate_limit_options field to google_compute_region_security_policy_rule resource; (#​18039)
• compute: added security_profile_group, tls_inspect to google_compute_firewall_policy_rule (#​18000)
• compute: added security_profile_group, tls_inspect to google_compute_network_firewall_policy_rule (#​18000)
• compute: added fields reserved_internal_range and secondary_ip_ranges.reserved_internal_range to google_compute_subnetwork resource (#​18026)
• container: added dns_config.additive_vpc_scope_dns_domain field to google_container_cluster resource (#​18031)
• container: added enable_nested_virtualization field to google_container_node_pool and google_container_cluster resource. (#​18015)
• iam: added extra_attributes_oauth2_client field to google_iam_workforce_pool_provider resource (#​18027)
• privateca: added maximum_lifetime field to google_privateca_certificate_template resource (#​18000)

v5.28.0

Compare Source

DEPRECATIONS:

• integrations: deprecated create_sample_workflows and provision_gmek fields in google_integrations_client. (#​17945)

FEATURES:

• New Data Source: google_storage_buckets (#​17960)
• New Resource: google_compute_security_policy_rule (#​17937)

IMPROVEMENTS:

• alloydb: added maintenance_update_policy field to google_alloydb_cluster resource (#​17954)
• bigquery: promoted external_dataset_reference in google_bigquery_dataset to GA (#​17944)
• composer: promoted config.software_config.image_version in-place update to GA in resource google_composer_environment (#​17986)
• container: added node_config.secondary_boot_disks field to google_container_node_pool (#​17962)
• integrations: added create_sample_integrations field to google_integrations_client, replacing deprecated field create_sample_workflows. (#​17945)
• redis: added redis_configs field to google_redis_cluster resource (#​17956)

BUG FIXES:

• dns: fixed bug where the deletion of google_dns_managed_zone resources was blocked by any associated SOA-type google_dns_record_set resources (#​17989)
• storage: fixed an issue where google_storage_bucket_object and google_storage_bucket_objects data sources would ignore custom endpoints (#​17952)

v5.27.0

Compare Source

FEATURES:

• New Data Source: google_storage_bucket_objects (#​17920)
• New Resource: google_compute_security_policy_rule (#​17937)
• New Resource: google_data_loss_prevention_discovery_config (#​17887)
• New Resource: google_integrations_auth_config (#​17917)
• New Resource: google_network_connectivity_internal_range (#​17909)

IMPROVEMENTS:

• alloydb: added network_config field to google_alloydb_instance resource (#​17921)
• alloydb: added public_ip_address field to google_alloydb_instance resource (#​17921)
• apigee: added forward_proxy_uri field to google_apigee_environment resource (#​17902)
• bigquerydatapolicy: added data_masking_policy.routine field to google_bigquery_data_policy resource (#​17885)
• compute: added server_tls_policy field to google_compute_region_target_https_proxy resource (#​17934)
• logging: added intercept_children field to google_logging_organization_sink and google_logging_folder_sink resources (#​17932)
• monitoring: added service_agent_authentication field to google_monitoring_uptime_check_config resource (#​17929)
• privateca: added subject_key_id field to google_privateca_certificate and google_privateca_certificate_authority resources (#​17923)
• secretmanager: added version_destroy_ttl field to google_secret_manager_secret resource (#​17888)

BUG FIXES:

• appengine: added suppression for a diff in google_app_engine_standard_app_version.automatic_scaling when the block is unset in configuration (#​17905)
• sql: fixed issues with updating the enable_google_ml_integration field in google_sql_database_instance resource (#​17878)

v5.26.0

Compare Source

FEATURES:

• New Resource: google_project_iam_member_remove (#​17871)

IMPROVEMENTS:

• apigee: added support for api_consumer_data_location, api_consumer_data_encryption_key_name, and control_plane_encryption_key_name in google_apigee_organization (#​17874)
• artifactregistry: added remote_repository_config.<facade>_repository.custom_repository.uri field to google_artifact_registry_repository resource. (#​17840)
• bigquery: added resource_tags field to google_bigquery_table resource (#​17876)
• billing: added ownership_scope field to google_billing_budget resource (#​17868)
• cloudfunctions2: added build_config.service_account field to google_cloudfunctions2_function resource (#​17841)
• resourcemanager: added the field api_method to datasource google_active_folder so you can use either SEARCH or LIST to find your folder (#​17877)
• storage: added labels validation to google_storage_bucket resource (#​17806)

BUG FIXES:

• apigee: fixed permadiff in ordering of google_apigee_organization.properties.property. (#​17850)
• cloudrun: fixed the bug that computed metadata.0.labels and metadata.0.annotations fields don't appear in terraform plan when creating resource google_cloud_run_service and google_cloud_run_domain_mapping (#​17815)
• dns: fixed bug where some methods of authentication didn't work when using dns data sources (#​17847)
• iam: fixed a bug that prevented setting create_ignore_already_exists on existing resources in google_service_account. (#​17856)
• sql: fixed issues with updating the enable_google_ml_integration field in google_sql_database_instance resource (#​17878)
• storage: added validation to name field in google_storage_bucket resource (#​17858)
• vmwareengine: fixed stretched cluster creation in google_vmwareengine_private_cloud (#​17875)

v5.25.0

Compare Source

FEATURES:

• New Data Source: google_tags_tag_keys (#​17782)
• New Data Source: google_tags_tag_values (#​17782)

IMPROVEMENTS:

• bigquery: added in-place schema column drop support for google_bigquery_table resource (#​17777)
• compute: added endpoint_types field to google_compute_router_nat resource (#​17771)
• compute: increased timeouts from 8 minutes to 20 minutes for google_compute_security_policy resource (#​17793)
• compute: promoted google_compute_instance_settings to GA (#​17781)
• container: added stateful_ha_config field to google_container_cluster resource (#​17796)
• firestore: added vector_config field to google_firestore_index resource (#​17758)
• gkebackup: added backup_schedule.rpo_config field to google_gke_backup_backup_plan resource (#​17805)
• networksecurity: added disabled field to google_network_security_firewall_endpoint_association resource; (#​17762)
• sql: added enable_google_ml_integration field to google_sql_database_instance resource (#​17798)
• storage: added labels validation to google_storage_bucket resource (#​17806)
• vmwareengine: added preferred_zone and secondary_zone fields to google_vmwareengine_private_cloud resource (#​17803)

BUG FIXES:

• networksecurity: fixed an issue where google_network_security_firewall_endpoint_association resources could not be created due to a bad parameter (#​17762)
• privateca: fixed permission issue by specifying signer certs chain when activating a sub-CA across regions for google_privateca_certificate_authority resource (#​17783)

v5.24.0

Compare Source

IMPROVEMENTS:

• container: added enable_cilium_clusterwide_network_policy field to google_container_cluster resource (#​17738)
• container: added node_pool_auto_config.resource_manager_tags field to google_container_cluster resource (#​17715)
• gkeonprem: added disable_bundled_ingress field to google_gkeonprem_vmware_cluster resource (#​17718)
• redis: added node_type and precise_size_gb fields to google_redis_cluster (#​17742)
• storage: added project_number attribute to google_storage_bucket resource and data source (#​17719)
• storage: added ability to provide project argument to google_storage_bucket data source. This will not impact reading the resource's data, instead this helps users avoid calls to the Compute API within the data source. (#​17719)

BUG FIXES:

• appengine: fixed a crash in google_app_engine_flexible_app_version due to the deployment field not being returned by the API (#​17744)
• bigquery: fixed a crash when google_bigquery_table had a primary_key.columns entry set to "" (#​17721)
• compute: fixed update scenarios ongoogle_compute_region_target_https_proxy and google_compute_target_https_proxy resources. (#​17733)

v5.23.0

Compare Source

NOTES:

• provider: introduced support for provider-defined functions. This feature is in Terraform v1.8.0+. (#​17694)

DEPRECATIONS:

• kms: deprecated attestation.external_protection_level_options in favor of external_protection_level_options in google_kms_crypto_key_version (#​17704)

FEATURES:

• New Data Source: google_apphub_application (#​17679)
• New Resource: google_cloud_quotas_quota_preference (#​17637)
• New Resource: google_vertex_ai_deployment_resource_pool (#​17707)
• New Resource: google_integrations_client (#​17640)

IMPROVEMENTS:

• bigquery: added dataGovernanceType to google_bigquery_routine resource (#​17689)
• bigquery: added support for external_data_configuration.json_extension to google_bigquery_table (#​17663)
• compute: added cloud_router_ipv6_address, customer_router_ipv6_address fields to google_compute_interconnect_attachment resource (#​17692)
• compute: added generated_id field to google_compute_region_backend_service resource (#​17639)
• integrations: added deletion support for google_integrations_client resource (#​17678)
• kms: added crypto_key_backend field to google_kms_crypto_key resource (#​17704)
• metastore: added scheduled_backup field to google_dataproc_metastore_service resource (#​17673)
• provider: added provider-defined function name_from_id for retrieving the short-form name of a resource from its self link or id (#​17694)
• provider: added provider-defined function project_from_id for retrieving the project id from a resource's self link or id (#​17694)
• provider: added provider-defined function region_from_zone for deriving a region from a zone's name (#​17694)
• provider: added provider-defined functions location_from_id, region_from_id, and zone_from_id for retrieving the location/region/zone names from a resource's self link or id (#​17694)

BUG FIXES:

• cloudrunv2: fixed Terraform state inconsistency when resource google_cloud_run_v2_job creation fails (#​17711)
• cloudrunv2: fixed Terraform state inconsistency when resource google_cloud_run_v2_service creation fails (#​17711)
• container: fixed google_container_cluster permadiff when master_ipv4_cidr_block is set for a private flexible cluster (#​17687)
• dataflow: fixed an issue where the provider would crash when enableStreamingEngine is set as a parameter value in google_dataflow_flex_template_job (#​17712)
• kms: added top-level external_protection_level_options field in google_kms_crypto_key_version resource (#​17704)

v5.22.0

Compare Source

BREAKING CHANGES:

• networksecurity: added required field billing_project_id to google_network_security_firewall_endpoint resource. Any configuration without billing_project_id specified will cause resource creation fail (beta) (#​17630)

FEATURES:

• New Data Source: google_cloud_quotas_quota_info (#​17564)
• New Data Source: google_cloud_quotas_quota_infos (#​17617)
• New Resource: google_access_context_manager_service_perimeter_dry_run_resource (#​17614)

IMPROVEMENTS:

• accesscontextmanager: supported managing service perimeter dry run resources outside the perimeter via new resource google_access_context_manager_service_perimeter_dry_run_resource (#​17614)
• cloudrunv2: added plan-time validation to restrict number of ports to 1 in google_cloud_run_v2_service (#​17594)
• composer: added field count to validate number of DAG processors in google_composer_environment (#​17625)
• compute: added enumeration value SEV_LIVE_MIGRATABLE_V2 for the guest_os_features of google_compute_disk (#​17629)
• compute: added status.all_instances_config.revision field to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#​17595)
• compute: added field path_template_match to resource google_compute_region_url_map (#​17571)
• compute: added field path_template_rewrite to resource google_compute_region_url_map (#​17571)
• pubsub: added ingestion_data_source_settings field to google_pubsub_topic resource (#​17604)
• storage: added 'soft_delete_policy' to 'google_storage_bucket' resource (#​17624)

BUG FIXES:

• accesscontextmanager: fixed an issue with access_context_manager_service_perimeter_ingress_policy and access_context_manager_service_perimeter_egress_policy where updates could not be applied after initial creation. Any updates applied to these resources will now involve their recreation. To ensure that new policies are added before old ones are removed, add a lifecycle block with create_before_destroy = true to your resource configuration alongside other updates. (#​17596)
• firebase: made the google_firebase_android_app resource's package_name field required and immutable. This prevents API errors encountered by users who attempted to update or leave that field unset in their configurations. (#​17585)
• spanner: removed validation function for the field version_retention_period in the resource google_spanner_database and directly returned error from backend (#​17621)

v5.21.0

Compare Source

FEATURES:

• New Data Source: google_apphub_discovered_service (#​17548)
• New Data Source: google_apphub_discovered_workload (#​17553)
• New Data Source: google_cloud_quotas_quota_info (#​17564)
• New Resource: google_apphub_workload (#​17561)
• New Resource: google_firebase_app_check_device_check_config (#​17517)
• New Resource: google_iap_tunnel_dest_group (#​17533)
• New Resource: google_kms_ekm_connection (#​17512)
• New Resource: google_apphub_application (#​17499)
• New Resource: google_apphub_service (#​17562)
• New Resource: google_apphub_service_project_attachment (#​17536)
• New Resource: google_network_security_firewall_endpoint_association (#​17540)

IMPROVEMENTS:

• cloudrunv2: added support for scaling.min_instance_count in google_cloud_run_v2_service. (#​17501)
• compute: added metric.single_instance_assignment and metric.filter to google_compute_region_autoscaler (#​17519)
• container: added queued_provisioning to google_container_node_pool (#​17549)
• gkeonprem: allowed vcenter_network to be set in google_gkeonprem_vmware_cluster, previously it was output-only (#​17505)
• workstations: added support for ephemeral_directories in google_workstations_workstation_config (#​17515)

BUG FIXES:

• compute: allowed sending empty values for SERVERLESS in google_compute_region_network_endpoint_group resource (#​17500)
• notebooks: fixed an issue where default tags would cause a diff recreating google_notebooks_instance resources (#​17559)
• storage: fixed an issue where two or more lifecycle rules with different values of no_age field always generates change in google_storage_bucket resource. (#​17513)

v5.20.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_custom_target_type_iam_* (#​17445)

IMPROVEMENTS:

• certificatemanager: added type field to google_certificate_manager_dns_authorization resource (#​17459)
• compute: added the network_url attribute to the consumer_accept_list-block of the google_compute_service_attachment resour

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun