chore(deps): update terraform google to v4 #20
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.5.0
->4.5.0
Release Notes
hashicorp/terraform-provider-google
v4.5.0
Compare Source
FEATURES:
IMPROVEMENTS:
return_table_type
field togoogle_bigquery_routine
(#10743)available_secrets
togoogle_cloudbuild_trigger
(#10714)min_instances
togoogle_cloudfunctions_function
(#10712)cloud_composer_connection_subnetwork
ingoogle_composer_environment
(#10724)google_compute_instance
'scan_ip_forward
could not be updated without recreating or restarting the instance. (#10741)public_access_prevention
to resourcebucket
(beta) (#10740)google_privateca_certificate
,google_privateca_certificate_authority
, andgoogle_privateca_ca_pool
via thenon_ca
andzero_max_issuer_path_length
fields (#10702)BUG FIXES:
google_assured_workloads_workload
from being created in any region other than us-central1 (#10749)v4.4.0
Compare Source
DEPRECATIONS:
zone
ongoogle_filestore_instance
in favor oflocation
to allow for regional instances (#10662)FEATURES:
google_os_config_os_policy_assignment
(#10676)google_recaptcha_enterprise_key
(#10672)google_spanner_instance_iam_policy
(#10695)google_spanner_instance_iam_binding
(#10695)google_spanner_instance_iam_member
(#10695)IMPROVEMENTS:
ENTERPRISE
value ongoogle_filestore_instance
tier
(#10662)google_privateca_certificate
,google_privateca_certificate_authority
, andgoogle_privateca_ca_pool
via thenon_ca
andzero_max_issuer_path_length
fields (#10702)allocated_ip_range
to resourcegoogle_sql_database_instance
(#10687)BUG FIXES:
INTERNAL_MANAGED
google_compute_region_backend_service
. (#10664)instance_group_manager
would not start update ifwait_for_instances
was set and initial status was notSTABLE
(#10680)ROUTES
value for thenetworking_mode
field ingoogle_container_cluster
. A recent API change unintentionally changed the default to aVPC_NATIVE
cluster, and removed the ability to create aROUTES
-based one. Provider versions prior to this one will default toVPC_NATIVE
due to this change, and are unable to createROUTES
clusters. (#10686)v4.3.0
Compare Source
FEATURES:
google_compute_router_status
(#10573)google_folders
(#10658)google_notebooks_runtime
(#10627)google_vertex_ai_metadata_store
(#10657)google_cloudbuild_worker_pool
(#10617)IMPROVEMENTS:
google_apigee_environment
. (#10608)google_apigee_instance
. (#10636)node_group
tonode_config
for container clusters and node pools to support sole tenancy (#10646)replicaCount
,nodes
,readEndpoint
,readEndpointPort
,readReplicasMode
ingoogle_redis_instance
(#10607)BUG FIXES:
email
ingoogle_essential_contacts_contact
as requiring recreation (#10592)CertificateAuthority
(#10577)v4.2.1
Compare Source
BUG FIXES:
v4.2.0
for Terraform0.13
and above. This release should be compatible with Terraform0.12.31
v4.2.0
Compare Source
FEATURES:
google_compute_router_status
(#10573)IMPROVEMENTS:
queue_count
togoogle_compute_instance.network_interface
andgoogle_compute_instance_template.network_interface
(#10571)BUG FIXES:
google_bigquery_routine
. (#10546)cache_mode
is set to FORCE_CACHE_ALL ongoogle_compute_backend_bucket
(#10572)google_compute_region_health_check
whenlog_config.enable
is set to false (#10553)google_service_directory_endpoint
. (#10569)v4.1.0
Compare Source
IMPROVEMENTS:
bfd
togoogle_compute_router_peer
(#10487)gcfs_config
tonode_config
ofgoogle_container_node_pool
resource (#10499)confidential_nodes
field ingoogle_container_cluster
to GA (#10531)resourceNotReady
error returned when attempting to add resources to a recently-modified subnetwork (#10498)message_retention_duration
field togoogle_pubsub_topic
(#10501)BUG FIXES:
google_apigee_instance_attachment
could not be used on the samegoogle_apigee_instance
(#10520)google_bigquery_table
(#10521)labels
ongoogle_billing_budget
(#10490)source_disk
to accept full image path ongoogle_compute_snapshot
(#10516)google_compute_firewall
that would cause changes insource_ranges
to not correctly be applied (#10515)description
ongoogle_logging_project_sink
,google_logging_folder_sink
andgoogle_logging_organization_sink
(#10493)v4.0.0
Compare Source
NOTES:
BREAKING CHANGES:
google_app_engine_standard_app_version
entrypoint
as required (#10425)trace-append
ortrace-ro
as scopes ingoogle_compute_instance
, usetrace
instead (#10377)advanced_machine_features
ongoogle_compute_instance_template
to track changes when the block is undefined in a user's config (#10427)source_ranges
ingoogle_compute_firewall_rule
to track changes when it is not set in a config file (#10439)metadata_startup_script
,metadata.startup-script
ingoogle_compute_instance
. Now,metadata.startup-script
will be set by default, andmetadata_startup_script
will only be set if present. (#10392)source_disk_link
field fromgoogle_compute_snapshot
(#10424)enable_display
field fromgoogle_compute_instance_template
(#10410)update_policy.min_ready_sec
field fromgoogle_compute_instance_group_manager
,google_compute_region_instance_group_manager
(#10410)instance_group_urls
has been removed in favor ofnode_pool.managed_instance_group_urls
(#10442)enable_shielded_nodes
to true forgoogle_container_cluster
(#10403)master_auth.client_certificate_config
to required (#10441)master_auth.username
andmaster_auth.password
fromgoogle_container_cluster
(#10441)workload_metadata_configuration.node_metadata
in favor ofworkload_metadata_configuration.mode
ingoogle_container_cluster
(#10400)pod_security_policy_config
field fromgoogle_container_cluster
(#10410)workload_identity_config.0.identity_namespace
field fromgoogle_container_cluster
, useworkload_identity_config.0.workload_pool
instead (#10410)bigquery-json.googleapis.com
, the provider will no longer convert it as the upstream API migration is finished. Usebigquery.googleapis.com
instead. (#10370)credentials
,access_token
precedence so thatcredentials
values in configuration take precedence overaccess_token
values assigned through environment variables (#10393)path
field fromgoogle_pubsub_subscription
(#10424)google_project
removeorg_id
andfolder_id
from state when they are removed from config (#10373)org_id
,folder_id
at plan time ingoogle_project
(#10373)project
field toRequired
in allgoogle_project_iam_*
resources (#10394)google
(GA) provider includinggoogle_runtimeconfig_config
,google_runtimeconfig_variable
,google_runtimeconfig_config_iam_policy
,google_runtimeconfig_config_iam_binding
,google_runtimeconfig_config_iam_member
,data.google_runtimeconfig_config
. They are only available in thegoogle-beta
provider, as the underlying service is in beta. (#10410)google_sql_database_instance
fields:activation_policy
(defaultsALWAYS
),availability_type
(defaultsZONAL
),disk_type
(defaultsPD_SSD
),encryption_key_name
(#10412)database_version
field toRequired
ingoogle_sql_database_instance
resource (#10398)google_sql_database_instance
fields:authorized_gae_applications
,crash_safe_replication
,replication_type
(#10412)bucket_policy_only
fromgoogle_storage_bucket
(#10397)location
field to required ingoogle_storage_bucket
(#10399)VALIDATION CHANGES:
statement_timeout_ms
,statement_byte_budget
, orkey_result_statement
is required ongoogle_bigquery_job.query.script_options.
(#10371)query
,load
,copy
orextract
is required ongoogle_bigquery_job
(#10371)source_table
orsource_model
is required ongoogle_bigquery_job.extract
(#10371)branch_name
,commit_sha
ortag_name
is required ongoogle_cloudbuild_trigger.build.source.repo_source
(#10371)fixed_delay
orpercentage
is required ongoogle_compute_url_map.default_route_action.fault_injection_policy.delay
(#10371)fixed
orpercent
is required ongoogle_compute_autoscaler.autoscaling_policy.scale_down_control.max_scaled_down_replicas
(#10371)fixed
orpercent
is required ongoogle_compute_autoscaler.autoscaling_policy.scale_in_control.max_scaled_in_replicas
(#10371)fixed
orpercent
is required ongoogle_compute_region_autoscaler.autoscaling_policy.scale_down_control.max_scaled_down_replicas
(#10371)fixed
orpercent
is required ongoogle_compute_region_autoscaler.autoscaling_policy.scale_in_control.max_scaled_in_replicas
(#10371)max_scaled_down_replicas
ortime_window_sec
is required ongoogle_compute_autoscaler.autoscaling_policy.scale_down_control
(#10371)max_scaled_down_replicas
ortime_window_sec
is required ongoogle_compute_region_autoscaler.autoscaling_policy.scale_down_control
(#10371)max_scaled_in_replicas
ortime_window_sec
is required ongoogle_compute_autoscaler.autoscaling_policy.scale_in_control.0.
(#10371)max_scaled_in_replicas
ortime_window_sec
is required ongoogle_compute_region_autoscaler.autoscaling_policy.scale_in_control.0.
(#10371)source_tags
,source_ranges
orsource_service_accounts
on INGRESSgoogle_compute_firewall
resources (#10369)start_time
orend_time
is required ongoogle_data_loss_prevention_trigger.inspect_job.storage_config.timespan_config
(#10371)url
orregex_file_set
is required ongoogle_data_loss_prevention_trigger.inspect_job.storage_config.cloud_storage_options.file_set
(#10371)self_link
field fromgoogle_kms_crypto_key
andgoogle_kms_key_ring
(#10424)linux_exec_step_config
orwindows_exec_step_config
is required ongoogle_os_config_patch_deployment.patch_config.post_step
(#10371)linux_exec_step_config
orwindows_exec_step_config
is required ongoogle_os_config_patch_deployment.patch_config.pre_step
(#10371)reboot_config
,apt
,yum
,goo
zypper
,windows_update
,pre_step
orpre_step
is required ongoogle_os_config_patch_deployment.patch_config
(#10371)security
,minimal
,excludes
orexclusive_packages
is required ongoogle_os_config_patch_deployment.patch_config.yum
(#10371)type
,excludes
orexclusive_packages
is required ongoogle_os_config_patch_deployment.patch_config.apt
(#10371)with_optional
,with_update
,categories
,severities
,excludes
orexclusive_patches
is required ongoogle_os_config_patch_deployment.patch_config.zypper
(#10371)classifications
,excludes
orexclusive_patches
is required ongoogle_os_config_patch_deployment.inspect_job.patch_config.windows_update
(#10371)num_nodes
orprocessing_units
is required ongoogle_spanner_instance
(#10371)IMPROVEMENTS:
encrypted_interconnect_router
togoogle_compute_router
(#10454)managed_instance_group_urls
togoogle_container_node_pool
to replaceinstance_group_urls
ongoogle_container_cluster
(#10467)google_kms_crypto_key.protection_level
(#10391)billing_project
ongoogle_project_service
(#10395)google_spanner_instance
operations from 4 minutes to 20 minutes, significantly reducing the likelihood that resources will time out (#10437)BUG FIXES:
google_bigquery_table
(#10421)ttl
fields ongoogle_compute_backend_bucket
(#10375)subnetwork
when it is optional ongoogle_compute_network_endpoint_group
(#10420)log_config.enable
of bothgoogle_compute_backend_service
andgoogle_compute_region_backend_service
(#10378)google_compute_instance_group_manager.update_policy.0.min_ready_sec
field so that updating it to0
works (#10457)google_compute_region_instance_group_manager.update_policy.0.min_ready_sec
field so that updating it to0
works (#10457)data.google_spanner_instance
so that non-configurable fields are considered outputs (#10450)v3.90.1
Compare Source
DEPRECATIONS:
master_auth
, constraining it tomaster_auth.username
andmaster_auth.password
v3.90.0
Compare Source
DEPRECATIONS:
workload_identity_config.0.identity_namespace
and it will be removed in a future major release as it has been deprecated in the API. Useworkload_identity_config.0.workload_pool
instead. Switching your configuration from one value to the other will trigger a diff at plan time, and a spurious update. (#10327)google_container_cluster
fields:instance_group_urls
andmaster_auth
(#10356)IMPROVEMENTS:
node_config.0.guest_accelerator.0.gpu_partition_size
field to google_container_node_pool (#10339)workload_identity_config.0.workload_pool
togoogle_container_cluster
(#10327)monitoring_config
to acceptWORKLOAD
(#10321)BUG FIXES:
template.spec.containers.ports.name
of thegoogle_cloud_run_service
resource (#10340)config.node_config.zone
requirement ongoogle_composer_environment
(#10353)failover_policy
ongoogle_compute_region_backend_service
(#10316)description
updatable without recreation ongoogle_compute_instance_group_manager
(#10329)google_container_node_pool.workload_metadata_config.mode
(#10313)google_scc_notification_config.streaming_config.filter
was not updating. (#10315)v3.89.0
Compare Source
DEPRECATIONS:
enable_display
field ingoogle_compute_instance_template
in thegoogle
(GA) provider. It will only be available in thegoogle-beta
provider in a future release, as the underlying feature is in beta. (#10281)BUG FIXES:
google_compute_router_peer
could not set an advertised route priority of 0, causing permadiff. (#10292)monitoring_config
ofgoogle_container_cluster
(#10290)google_storage_bucket
resources. (#10287)v3.88.0
Compare Source
NOTES:
DEPRECATIONS:
workload_metadata_configuration.node_metadata
in favor ofworkload_metadata_configuration.mode
ingoogle_container_cluster
(#10238)google_dataproc_workflow_template.version
field, as it wasn't actually useful. The field is used during updates, but updates aren't currently possible with the resource. (#10183)google
(GA) provider includinggoogle_runtimeconfig_config
,google_runtimeconfig_variable
,google_runtimeconfig_config_iam_policy
,google_runtimeconfig_config_iam_binding
,google_runtimeconfig_config_iam_member
,data.google_runtimeconfig_config
. They will only be available in thegoogle-beta
provider in a future release, as the underlying service is in beta. (#10232)BREAKING CHANGES:
config_membership
field ingoogle_gke_hub_feature
required, disallowing invalid configurations (#10199)configmanagement
,feature
,location
,membership
fields ingoogle_gke_hub_feature_membership
required, disallowing invalid configurations (#10199)FEATURES:
google_service_networking_peered_dns_domain
(#10229)google_sourcerepo_repository
(#10203)google_storage_bucket
(#10190)google_pubsub_lite_reservation
(#10263)google_service_networking_peered_dns_domain
(#10229)IMPROVEMENTS:
workloads_config
andcloud_composer_network_ipv4_cidr_block
tocomposer_environment
(10269)google_compute_subnetwork
andgoogle_compute_instance.network_interfaces
(#10189)workload_metadata_configuration.mode
ingoogle_container_cluster
(#10238)uid
output field,cloud_function
destination togoogle_eventarc_trigger
(#10199)gcp_service_account_email
when configuring Git sync ingoogle_gke_hub_feature_membership
(#10199)resource_state
,state
outputs togoogle_gke_hub_feature
(#10199)google_pubsub_lite_reservation
togoogle_pubsub_lite_topic
. (#10263)BUG FIXES:
google_monitoring_uptime_check_config
whereNOT_MATCHES_REGEX
could not be specified. (#10249)v3.87.0
Compare Source
DEPRECATIONS:
google_dataproc_workflow_template.version
field, as it wasn't actually useful. The field is used during updates, but updates aren't currently possible with the resource. (#10183)FEATURES:
google_org_policy_policy
(#10111)IMPROVEMENTS:
service_account
togoogle_cloudbuild_trigger
(#10159)scheduler_count
togoogle_composer_environment
(#10158)resource_policies
property (#10173)logging_config
andmonitoring_config
togoogle_container_cluster
(#10125)import_only
togoogle_kms_crypto_key
(#10157)google_network_services_edge_cache_origin
from 30m to 60m (#10182)BUG FIXES:
reserved_ip_range
ongoogle_filestore_instance
via recreation of the instance (#10146)v3.86.0
Compare Source
IMPROVEMENTS:
google_healthcare_hl7_v2_store.parseConfig.version
to GA (#10099)BUG FIXES:
google_dns_record_set
whererrdatas
could not be updated (#10089)google_dns_record_set
where creating the resource would result in an 409 error (#10089)google_organization_policy
(#10082)v3.85.0
Compare Source
IMPROVEMENTS:
user_project_override
ingoogle_bigtable_instance
andgoogle_bigtable_table
(#10060)iap
fields togoogle_compute_region_backend_service
(#10038)nextHopIlb
field ofgoogle_compute_route
resource (#10048)disabled
field togoogle_service_account
resource (#10033)path
togoogle_storage_transfer_job
(#10047)BUG FIXES:
deployment.container.image
would update to an old version even if inignore_changes
(#10058)destination_encryption_config.kms_key_name
stored the version rather than the key name. (#10068)google_redis_instance
(#10037)google_project_service
where users could not reenable services that were disabled outside of Terraform. (#10045)v3.84.0
Compare Source
FEATURES:
google_secret_manager_secret
(#9983)IMPROVEMENTS:
google_compute_service_attachment
(#9982)BUG FIXES:
maintenance_exclusion
ongoogle_container_cluster
(#10025)google_compute_router_nat
where removinglog_config
resulted in a perma-diff (#9950)advanced_machine_features
error messages ingoogle_compute_instance
(#10023)google_cloudfunctions_function
(#10011)bucket_options.linear_buckets.width
ongoogle_logging_metric
(#9985)google_os_config_guest_policies
(#10019)days_since_noncurrent_time
ofgoogle_storage_bucket
(#10024)v3.83.0
Compare Source
FEATURES:
google_privateca_certificate_template
(#9905)IMPROVEMENTS:
certificate_template
togoogle_privateca_certificate
. (#9915)ip_address
field ofgoogle_compute_router_peer
(#9913)google_compute_service_attachment
to ga (#9914)role
andpurpose
fields ingoogle_compute_subnetwork
to ga (#9914)destroy_scheduled_duration
togoogle_kms_crypto_key
(#9911)BUG FIXES:
config_id
ongoogle_endpoints_service
(#9912)google_cloudbuild_trigger
as requiring one of branch_name/tag_name/commit_sha within build.source.repo_source (#9952)enable
field ofgoogle_compute_router_peer
(#9940)next_hop_instance_zone
ongoogle_compute_route
whennext_hop_instance
was set to a self link (#9931)google_compute_router_nat
where removinglog_config
resulted in a perma-diff (#9950)publishing_options
ongoogle_privateca_ca_pool
when both attributes set false (#9926)google_storage_bucket_object
(#9937)v3.82.0
Compare Source
FEATURES:
google_privateca_certificate_template
(#9905)google_compute_firewall_policy
(#9887)google_compute_firewall_policy_association
(#9887)google_compute_firewall_policy_rule
(#9887)IMPROVEMENTS:
collation
togoogle_sql_database_instance
(#9888)BUG FIXES:
apigateway
resources (#9871)google_dns_managed_zone
(#9898)google_healthcare_hl7_v2_store.parser_config
subfields would error with "...parser_config.version field is immutable..." (#9900)google_os_config_guest_policies
(#9872)google_pubsub_schema
to deal with eventually consistent deletes (#9863)replication
fields would not update ingoogle_secret_manager_secret
(#9894)google_service_usage_consumer_quota_override
(#9876)type
when BUILT_IN ongoogle_sql_user
(#9864)google_sql_user
with CLOUD_IAM_USERs on POSTGRES. (#9859)v3.81.0
Compare Source
IMPROVEMENTS:
enable
attribute togoogle_compute_router_peer
(#9776)L3_DEFAULT
asip_protocol
forgoogle_compute_forwarding_rule
andUNSPECIFIED
asprotocol
forgoogle_compute_region_backend_service
to support network load balancers that forward all protocols and ports. (#9799)security_settings
togoogle_compute_backend_service
(#9797)google_essential_contacts_contact
to GA (#9822)google_gke_hub_membership
support for both//container.googleapis.com/${google_container_cluster.my-cluster.id}
andgoogle_container_cluster.my-cluster.id
inendpoint.0.gke_cluster.0.resource_link
(#9765)request_reason
(#9794)billing_project
across all resources. Ifuser_project_override
is set totrue
and abilling_project
is set, theX-Goog-User-Project
header will be sent for all resources. (#9852)BUG FIXES:
google_assured_workloads_workload
can delete what it creates (#9835)location
of thegoogle_bigquery_dataset
(#9810)wait_for_instances
ingoogle_compute_instance_group_manager
andgoogle_compute_region_instance_group_manager
to no longer block plan / refresh, waiting on managed instance statuses during apply instead (#9832)negative_caching_policy
cannot be set always revalidate ongoogle_compute_backend_service
(#9821)/projects
after the host (#9834)__name__
ongoogle_firestore_index
(#9820)google_privateca_certificate_authority
withmax_issuer_path_length = 0
. (#9856)ignore_active_certificates_on_deletion
on the importedgoogle_privateca_certificate_authority
(#9781)v3.80.0
Compare Source
FEATURES:
google_dialogflow_cx_environment
(#9738)IMPROVEMENTS:
//container.googleapis.com/${google_container_cluster.my-cluster.id}
andgoogle_container_cluster.my-cluster.id
references ingoogle_gke_hub_membership.endpoint.0.gke_cluster.0.resource_link
(#9765)name
field togoogle_kms_crypto_key_version
datasource (#9762)BUG FIXES:
google_apigee_envgroup
(#9740)google_privateca_certificate_authority
of typeSUBORDINATE
due to an invalid attempt to activate it on creation. (#9761)v3.79.0
Compare Source
NOTES:
num_nodes
field ongoogle_spanner_instance
will have its default removed in a future major release, and eithernum_nodes
orprocessing_units
will be required. (#9716)FEATURES:
google_dialogflow_cx_entity_type
(#9717)google_dialogflow_cx_page
(#9683)IMPROVEMENTS:
processing_units
togoogle_spanner_instance
(#9716)customer_encryption
onresource_storage_bucket_object
(#9704)v3.78.0
Compare Source
FEATURES:
google_gke_hub_membership
(#9616)IMPROVEMENTS:
user_project_override
andbilling_project
togoogle_service_networking_connection
(#9668)BUG FIXES:
azure_blob_storage_data_source
forgoogle_storage_transfer_job
(#9644)google_sql_user
in state for iam users. (#9625)azure_credentials
was defined ingoogle_storage_transfer_job
(#9671)v3.77.0
Compare Source
FEATURES:
google_scc_notification_config
(#9578)IMPROVEMENTS:
log_config
field ofgoogle_compute_region_backend_service
(#9568)crypto_replace_ffx_fpe_config
andcrypto_replace_ffx_fpe_config
as primitive transformation types togoogle_data_loss_prevention_deidentify_template
(#9572)BUG FIXES:
destination_dataset_id
was required, it is now optional. (#9605)budget_filter. projects
ongoogle_billing_budget
(#9598)0.8
fromgoogle_backend_service.backend.max_utilization
and it will now default from API. Allmax_connections_xxx
andmax_rate_xxx
will also default from API as these are all conditional on balancing mode. (#9587)Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.