Update Terraform google to ~> 6.28.0

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	provider	minor	~> 6.27.0 -> ~> 6.28.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.28.0

Compare Source

DEPRECATIONS:

• compute: deprecated enable_flow_logs in favor of log_config on google_compute_subnetwork resource. If log_config is present, flow logs are enabled, and enable_flow_logs can be safely removed. (#​22111)
• containerregistry: Deprecated google_container_registry resource, and google_container_registry_image and google_container_registry_repository data sources. Use google_artifact_registry_repository instead. (#​22071)

FEATURES:

• New Data Source: google_compute_region_backend_service (#​21986)
• New Data Source: google_organization_iam_custom_roles (#​22035)
• New Data Source: google_parameter_manager_parameter_version_render (#​22099)
• New Data Source: google_parameter_manager_parameter_version (#​22099)
• New Data Source: google_parameter_manager_parameter (#​22099)
• New Data Source: google_parameter_manager_parameters (#​22099)
• New Data Source: google_parameter_manager_regional_parameter_version_render (#​22099)
• New Data Source: google_parameter_manager_regional_parameter_version (#​22099)
• New Data Source: google_parameter_manager_regional_parameter (#​22099)
• New Data Source: google_parameter_manager_regional_parameters (#​22099)
• New Data Source: google_storage_control_folder_intelligence_config (#​22077)
• New Data Source: google_storage_control_organization_intelligence_config (#​22077)
• New Data Source: google_storage_control_project_intelligence_config (#​22077)
• New Resource: google_apigee_dns_zone (#​21992)
• New Resource: google_chronicle_data_access_scope (#​21982)
• New Resource: google_chronicle_referencelist (#​22090)
• New Resource: google_chronicle_retrohunt (#​22092)
• New Resource: google_chronicle_rule (#​22089)
• New Resource: google_chronicle_rule_deployment (#​22093)
• New Resource: google_chronicle_watchlist (#​21989)
• New Resource: google_dataproc_metastore_database_iam_* resources (#​21985)
• New Resource: google_dataproc_metastore_table_iam_* (#​22064)
• New Resource: google_discovery_engine_sitemap (#​21976)
• New Resource: google_eventarc_enrollment (#​22028)
• New Resource: google_firebase_app_hosting_build (#​22063)
• New Resource: google_memorystore_instance_desired_user_created_connections (#​22073)
• New Resource: google_parameter_manager_parameter_version (#​22099)
• New Resource: google_parameter_manager_parameter (#​22099)
• New Resource: google_parameter_manager_regional_parameter_version (#​22099)
• New Resource: google_parameter_manager_regional_parameter (#​22099)
• New Resource: google_storage_control_folder_intelligence_config (#​22061)
• New Resource: google_storage_control_organization_intelligence_config (#​21987)

IMPROVEMENTS:

• accesscontextmanager: added roles field to ingress and egress policies of google_access_context_manager_service_perimeter* resources (#​22086)
• cloudfunctions2: added binary_authorization_policy field to google_cloudfunctions2_function resource (#​22070)
• cloudrun: promoted node_selector field in google_cloud_run_service resource to GA (#​22054)
• cloudrunv2: added gpu_zonal_redundancy_disabled field to google_cloud_run_v2_service resource (#​22054)
• cloudrunv2: promoted node_selector field in google_cloud_run_v2_service resource to GA (#​22054)
• compute: added md5_authentication_keys field to google_compute_router resource (#​22101)
• compute: added EXTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#​22037)
• compute: added external_ipv6_prefix, stack_type, and ipv6_access_type fields to google_compute_subnetwork data source (#​22085)
• compute: added several boot_disk, attached_disk, and instance_encryption_key fields to google_compute_instance and google_compute_instance_template resources (#​22096)
• compute: added image_encryption_key.raw_key and image_encryption_key.rsa_encrypted_key fields to google_compute_image resource (#​22096)
• compute: added snapshot_encryption_key.rsa_encrypted_key field to google_compute_snapshot resource (#​22096)
• container: added auto_monitoring_config field to google_container_cluster resource (#​21970)
• container: added disable_l4_lb_firewall_reconciliation field to google_container_cluster resource (#​22065)
• datafusion: added tags field to google_data_fusion_instance resource to allow setting tags for instances at creation time (#​21977)
• datastream: added blmt_config field to bigquery_destination_config resource to enable support for BigLake Managed Tables streams (#​22109)
• datastream: added secret_manager_stored_password field to google_datastream_connection_profile resource (#​22046)
• identityplatform: added disabled_user_signup and disabled_user_deletion to google_identity_platform_tenant resource (#​21983)
• memorystore: added psc_attachment_details field to google_memorystore_instance resource, to enable use of the fine-grained resource google_memorystore_instance_desired_user_created_connections (#​22073)
• memorystore: added the cross_cluster_replication_config field to the google_redis_cluster resource (#​22097)
• metastore: added deletion_protection field to google_dataproc_metastore_federation resource (#​22106)
• networksecurity: added antivirus_overrides field to google_network_security_security_profile resource (#​22060)
• networksecurity: added connected_deployment_groups and associations fields to google_network_security_mirroring_endpoint_group resource (#​21974)
• networksecurity: added locations field to google_network_security_mirroring_deployment_group resource (#​21975)
• networksecurity: added locations field to google_network_security_mirroring_endpoint_group_association resource (#​21971)
• parametermanager: added kms_key_version field to google_parameter_manager_parameter_version resource and datasource (#​22058)
• parametermanager: added kms_key field to google_parameter_manager_parameter resource and google_parameter_manager_parameters datasource (#​22058)
• provider: added external_credentials block in provider (#​22081)
• redis: added automated_backup_config field to google_redis_cluster resource (#​22117)
• storage: added content_base64 field in google_storage_bucket_object_content datasource (#​22051)

BUG FIXES:

• alloydb: added a mutex to google_alloydb_cluster to prevent conflicts among multiple cluster operations (#​21972)
• artifactregistry: fixed type assertion panic in google_artifact_registry_repository resource (#​22100)
• bigtable: fixed automated_backup_policy field for google_bigtable_table resource (#​22034)
• cloudrunv2: fixed the diffs for unchanged template.template.containers.env in google_cloud_run_v2_job resource (#​22115)
• compute: fixed a regression in google_compute_subnetwork where setting log_config would not enable flow logs without enable_flow_logs also being set to true. To enable or disable flow logs, please use log_config. enable_flow_logs is now deprecated and will be removed in the next major release. (#​22111)
• compute: fixed unable to update the preview field for google_compute_security_policy_rule resource (#​21984)
• orgpolicy: fix permadiff in google_org_policy_policy when multiple rules are present (#​21981)
• resourcemanager: increased page size for list services api to help any teams hitting ListEnabledRequestsPerMinutePerProject quota issues (#​22050)
• spanner: fixed issue with applying changes in provider default_labels on google_spanner_instance resource (#​22036)
• storage: fixed google_storage_anywhere_cache to cancel long-running operations after create and update requests timeout (#​22031)
• workbench: fixed metadata permadiff in google_workbench_instance resource (#​22056)

---

Configuration

📅 Schedule: Branch creation - "after 5am on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment