chore(deps): update terraform google-beta to ~> 6.43.0

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
google-beta (source)	provider	minor	~> 6.39.0 -> ~> 6.43.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

hashicorp/terraform-provider-google-beta (google-beta)

v6.43.0

Compare Source

DEPRECATIONS:

• iap: deprecated google_iap_client and google_iap_brand (#​10269)

FEATURES:

• New Data Source: google_network_management_connectivity_test_run (#​10300)
• New Data Source: google_redis_cluster (#​10273)
• New Resource: google_contact_center_insights_analysis_rule (#​10272)
• New Resource: google_model_armor_template (#​10270)

IMPROVEMENTS:

• bigquery: added ignore_schema_changes virtual field to google_bigquery_table resource. Only dataPolicies field is supported in ignore_schema_changes for now. (#​10299)
• billing: added currency_code to google_billing_account data source (#​10284)
• compute: added params.resource_manager_tags field to google_compute_network resource (#​10266)
• compute: added load_balancing_scheme field to google_compute_backend_bucket resource (#​10301)
• compute: added params.resource_manager_tags field to google_compute_route resource (#​10293)
• compute: added update_strategy field to google_compute_network_peering resource (#​10275)
• container: added secret_manager_config.rotation_config field to google_container_cluster resource (#​10291)
• container: added anonymous_authentication_config field to google_container_cluster resource (#​10295)
• dataplex: added suspended field to google_dataplex_datascan resource (#​10276)
• discoveryengine: added enable_table_annotation, enable_image_annotation, structured_content_types, exclude_html_elements, exclude_html_classes and exclude_html_ids fields to layout_parsing_config of google_discovery_engine_data_store resource (#​10288)
• discoveryengine: added kms_key_name field to google_discovery_engine_data_store resource (#​10281)
• memorystore: added managed_server_ca field to google_memorystore_instance resource (#​10268)
• secretmanager: added deletion_protection field to google_secret_manager_secret resource to optionally make deleting them require an explicit intent (#​10289)
• secretmanager: added fetch_secret_data to google_secret_manager_secret_version to optionally skip fetching the secret data (#​10282)

BUG FIXES:

• compute: fixed match field in google_compute_router_route_policy resource to be marked as required (#​10298)
• compute: fixed an issue with bgp_always_compare_med in google_compute_network where it was unable to be set from true to false (#​10286)
• compute: made no replication status in google_compute_disk_async_replication a retryable error (#​10296)
• gkeonprem: fixed type of load_balancer.0.bgp_lb_config.0.address_pools.0.manual_assign in google_gkeonprem_bare_metal_cluster, making it a boolean instead of a string (#​10283)
• integrationconnectors: removed validation from auth configs in google_integration_connectors_connection resource (#​10267)

v6.42.0

Compare Source

FEATURES:

• New Resource: google_apihub_plugin_instance (#​10225)
• New Resource: google_apihub_plugin (#​10254)
• New Resource: google_compute_wire_group (#​10255)
• New Resource: google_dialogflow_cx_generative_settings (#​10244)

IMPROVEMENTS:

• cloudidentity: added create_ignore_already_exists field to google_cloud_identity_group_membership resource (#​10229)
• cloudkms: added etag field to google_kms_autokey_config resource (#​10227)
• cloudrunv2: added node_selector field to google_cloud_run_v2_job resource (#​10234)
• compute: added access_mode field to google_compute_region_disk resource (#​10256)
• compute: added match.src_secure_tags and target_secure_tags fields to google_compute_firewall_policy_rule resource (#​10261)
• compute: added params.resource_manager_tags field to google_compute_network resource (#​10266)
• compute: added policy_type field to google_compute_network_firewall_policy, google_compute_network_firewall_policy_with_rules, google_compute_region_network_firewall_policy, and google_compute_region_network_firewall_policy_with_rules resources (#​10239)
• compute: added resource_policies.workload_policy field to google_compute_instance_group_manager resource (#​10265)
• container: added confidential_nodes.confidential_instance_type field to google_container_cluster resource (#​10257)
• container: added gke_auto_upgrade_config field to google_container_cluster resource (#​10258)
• container: added node_config.confidential_nodes.confidential_instance_type field to google_container_node_pool resource (#​10257)
• firestore: revoked deprecation of deletion_policy field in google_firestore_database resource (#​10251)
• iam_beta: added attestation_rules field to google_iam_workload_identity_pool_managed_identity resource (#​10250)
• memorystore: added kms_key field to google_memorystore_instance resource (#​10246)
• redis: added effective_reserved_ip_range field to google_redis_instance resource (#​10235)
• secretmanager: added deletion_protection field to google_secret_manager_regional_secret resource (#​10247)
• spanner: added encryption_config.kms_key_name field to google_spanner_backup_schedule resource (#​10230)
• storage: added allow_cross_org_vpcs and allow_all_service_agent_access fields to google_storage_bucket resource (#​10252)

BUG FIXES:

• bigqueryanalyticshub: supported in-place update for log_linked_dataset_query_user_email in google_bigquery_analytics_hub_listing and google_bigquery_analytics_hub_data_exchange resources. Once enabled, this feature cannot be disabled. (#​10241)
• bigquerydatatransfer: stopped surfacing persistent warnings recommending write-only field when using secret_access_key on google_bigquery_data_transfer_config (#​10263)
• memorystore: added the ability to set the replica_count field in google_memorystore_instance resource to 0 (#​10259)
• monitoring: made description and displayName optional and mutable in google_monitoring_metric_descriptor resource (#​10233)
• redis: fixed reserved_ip_range field not being populated for google_redis_instance data source (#​10235)
• secretmanager: stopped surfacing persistent warnings recommending write-only field when using secret_data on google_secret_manager_secret_version (#​10263)
• sql: stopped surfacing persistent warnings recommending write-only field when using password on google_sql_user (#​10263)
• workbench: added support for setting serial-port-logging-enable key in metadata field in google_workbench_instance resource (#​10253)

v6.41.0

Compare Source

BREAKING CHANGES:

• lustre: added per_unit_storage_throughput as a required field to google_lustre_instance resource in response to a change in the API surface (#​10211)

FEATURES:

• New Data Source: google_dataplex_data_quality_rules (#​10189)
• New Resource: google_apihub_plugin_instance (#​10225)
• New Resource: google_contact_center_insights_view (#​10192)
• New Resource: google_dataproc_session_template (#​10204)
• New Resource: google_dialogflow_encryption_spec (#​10220)

IMPROVEMENTS:

• alloydb: added network_config.allocated_ip_range_override field to google_alloydb_instance resource (#​10216)
• bigqueryanalyticshub: added log_linked_dataset_query_user_email field to google_bigquery_analytics_hub_data_exchange resource (#​10200)
• bigqueryanalyticshub: added log_linked_dataset_query_user_email field to google_bigquery_analytics_hub_listing_subscription resource (#​10202)
• bigqueryanalyticshub: added pubsub_topic field to google_bigquery_analytics_hub_listing resource (#​10219)
• bigtable: added row_key_schema to google_bigtable_table resource (#​10222)
• cloudasset: added support for universe domain handling for google_cloud_asset_resources_search_all datasource. (#​10210)
• cloudquotas: added inherited and inherited_from fields to google_cloud_quotas_quota_adjuster_settings resource (#​10223)
• compute: added CROSS_SITE_NETWORK option to requested_features field in google_compute_interconnect resource (#​10207)
• compute: added TLS_JA4_FINGERPRINT option to enforce_on_key field in google_compute_region_security_policy, google_compute_security_policy, and google_compute_security_policy_rule resources (#​10199)
• compute: added send_propagated_connection_limit_if_zero to google_compute_service_attachment to resolve an issue where propagated_connection_limit were not working for 0 value previously. Now setting send_propagated_connection_limit_if_zero = true will send propagated_connection_limit = 0 when it's unset or set to 0. (#​10213)
• compute: added wire_groups field to google_compute_interconnect resource (#​10207)
• container: added performance_monitoring_unit in node_config/advanced_machine_features to 'google_container_cluster' resource (#​10191)
• container: added release_channel_upgrade_target_version to google_container_engine_versions data source (#​10221)
• dataplex: added support for discovery scan in google_dataplex_datascan resource (#​10205)
• provider: added support for adc impersonation in different universes (#​10212)
• storage: added source_md5hash field in google_storage_bucket_object (#​10196)

BUG FIXES:

• compute: fixed google_compute_firewall_policy_rule staying disabled after apply with disabled = false (#​10215)
• compute: marked name in google_compute_node_group, google_compute_node_template as required as it was impossible to create successfully without a value (#​10224)
• sql: fixed an error in updating connection_pool_config in google_sql_database_instance (#​10218)
• tags: fixed perma-diff for parent field in google_tags_location_tag_binding resource (#​10217)

v6.40.0

Compare Source

DEPRECATIONS:

• notebook: google_notebook_runtime is deprecated and will be removed in a future major release. Use google_workbench_instance instead. (#​10186)

FEATURES:

• New Data Source: google_dataplex_data_quality_rules (#​10189)
• New Resource: google_dialogflow_cx_tool (#​10154)

IMPROVEMENTS:

• backupdr: added 'supported_resource_types' field to google_backup_dr_backup_plan resource (#​10155)
• backupdr: added support for updating in-place to the google_backup_dr_backup_plan_association resource (#​10176)
• bigqueryanalyticshub: added log_linked_dataset_query_user_email field to google_bigquery_analytics_hub_listing resource (#​10177)
• compute: added cipher_suite block with phase1 and phase2 encryption configurations to google_compute_vpn_tunnel resource. (#​10188)
• compute: added fingerprint field in google_compute_target_http_proxy and google_compute_target_https_proxy resources. (#​10175)
• compute: added headers, expected_output_url, and expected_redirect_response_code fields to test in google_compute_url_map resource and made service field optional (#​10161)
• compute: added path_matcher.default_route_action fields to google_compute_region_url_map resource (#​10171)
• gkehub: added custom_role field to google_gke_hub_scope_rbac_role_binding resource (#​10151)
• integrationconnectors: added support for log_config.level for google_integration_connectors_connection (#​10170)
• netapp: added enable_hot_tier_auto_resize and hot_tier_size_gib fields to google_netapp_storage_pool resource (#​10153)
• netapp: added tiering_policy.hot_tier_bypass_mode_enabled field to google_netapp_volume resource (#​10153)
• networkconnectivity: added psc_config.producer_instance_location and psc_config.allowed_google_producers_resource_hierarchy_level fields to google_network_connectivity_service_connection_policy (#​10179)
• redis: added managed_server_ca to google_redis_cluster resource (#​10169)
• resourcemanager: allowed dataproc-control.googleapis.com and stackdriverprovisioning.googleapis.com services in google_project_service resource (#​10174)
• storage: removed the hardcoded 80m timeout used during google_storage_bucket deletion when removing an anywhere cache, polling instead. This should speed up deletion in these cases. (#​10160)
• vertexai: added region to google_vertex_ai_index_endpoint_deployed_index (#​10184)

BUG FIXES:

• beyondcorp: fixed the issue where hubs.internet_gateway.assigned_ips was not populated correctly in the google_beyondcorp_security_gateway resource (#​10182)
• compute: fixed google_compute_router_nat where changes to auto_network_tier are always showed after initial apply (#​10152)
• compute: fixed validation for target_service field in google_compute_service_attachment resource causing issues when targeting a google_network_services_gateway resource (#​10178)
• dataflow: fields network, subnetwork, num_workers, max_num_workers and machine_type will no longer cause permadiff on dataflow_flex_template_job (#​10168)
• dataproc: fixed a permadiff with "prodcurrent" and "prodprevious" within image subminor version for google_dataproc_cluster (#​10163)
• networksecurity: marked google_network_security_address_group capacity as immutable because it can't be updated in place. (#​10165)

---

Configuration

📅 Schedule: Branch creation - "after 5am on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[sourcery-ai]

Reviewer's Guide

This PR updates the Terraform Google Beta provider version constraint to ~> 6.40.0 in the deployment configuration, ensuring that the latest minor release is used.

File-Level Changes

Change	Details	Files
Upgrade Google Beta Terraform provider version constraint	Updated the version attribute in the google-beta provider block from ~> 6.39.0 to ~> 6.40.0	deployment/main.tf

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.