feat(deps): Update Terraform google to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	major	>= 4.3.0, < 5.0 -> >= 4.3.0, < 5.11

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.10.0

Compare Source

FEATURES:

• New Data Source: google_compute_region_disk (#​16732)
• New Data Source: google_vmwareengine_external_address (#​16698)
• New Data Source: google_vmwareengine_subnet (#​16700)
• New Data Source: google_vmwareengine_vcenter_credentials (#​16709)
• New Resource: google_vmwareengine_cluster (#​16757)
• New Resource: google_vmwareengine_external_address (#​16698)
• New Resource: google_vmwareengine_subnet (#​16700)
• New Resource: google_workbench_instance (#​16773)
• New Resource: google_workbench_instance_iam_* (#​16773)

IMPROVEMENTS:

• compute: added numeric_id field to google_compute_network resource (#​16712)
• compute: added remove_instance_on_destroy option to google_compute_per_instance_config resource (#​16729)
• compute: added remove_instance_on_destroy option to google_compute_region_per_instance_config resource (#​16729)
• container: added network_performance_config field to google_container_node_pool resource to support GKE tier 1 networking (#​16688)
• container: added support for in-place update for machine_type/disk_type/disk_size_gb in google_container_node_pool resource (#​16724)
• containerazure: added config.labels to google_container_azure_node_pool (#​16754)
• dataform: added display_name, labels and npmrc_environment_variables_secret_version fields to google_dataform_repository resource (#​16733)
• monitoring: added severity field to google_monitoring_alert_policy resource (#​16775)
• notebooks: added support for labels to google_notebooks_runtime (#​16783)
• recaptchaenterprise: added waf_settings to google_recaptcha_enterprise_key (#​16754)
• securesourcemanager: added host_config, state_note, kms_key, and private_config fields to google_secure_source_manager_instance resource (#​16731)
• spanner: added autoscaling_config.max_nodes and autoscaling_config.min_nodes to google_spanner_instance (#​16786)
• storage: added rpo field to google_storage_bucket resource (#​16756)
• vmwareengine: added type field to google_vmwareengine_private_cloud resource (#​16781)
• workloadidentity: added saml block to google_iam_workload_identity_pool_provider resource (#​16710)

BUG FIXES:

• logging: fixed an issue where value change of unique_writer_identity on google_logging_project_sink does not trigger diff on dependent's usages of writer_identity (#​16776)

v5.9.0

Compare Source

FEATURES:

• New Data Source: google_logging_folder_settings (#​16658)
• New Data Source: google_logging_organization_settings (#​16658)
• New Data Source: google_logging_project_settings (#​16658)
• New Data Source: google_vmwareengine_network_policy (#​16639)
• New Data Source: google_vmwareengine_nsx_credentials (#​16669)
• New Resource: google_scc_event_threat_detection_custom_module (#​16649)
• New Resource: google_secure_source_manager_instance (#​16637)
• New Resource: google_vmwareengine_network_policy (#​16639)

IMPROVEMENTS:

• bigqueryconnection: added spark support to google_bigquery_connection resource (#​16677)
• cloudidentity: added expiry_detail field to google_cloud_identity_group_membership resource (#​16643)
• container: added autoscaling_profile field in the cluster_autoscaling block in google_container_cluster resource (#​16653)
• gkehub: added default_cluster_config field to google_gke_hub_fleet resource (#​16630)
• gkehub: added binary_authorization_config field to google_gke_hub_fleet resource (#​16674)
• sql: added support for in-place updates to the edition field in google_sql_database_instance resource (#​16629)

BUG FIXES:

• artifactregistry: fixed permadiff due to unsorted virtual_repository_config array in google_artifact_registry_repository (#​16646)
• container: made dns_config field updatable on google_container_cluster resource (#​16652)
• dlp: added conflicting field validation in the storage_config.timespan_config block in data_loss_prevention_job_trigger resource (#​16628)
• dlp: updated the storage_config.timespan_config.timestamp_field field in data_loss_prevention_job_trigger to be optional (#​16628)
• firestore: added retries during creation of google_firestore_index resources to address retryable 409 code API errors ("Please retry, underlying data changed", and "Aborted due to cross-transaction contention") (#​16618, #​16670)
• storage: fixed unexpected lifecycle_rule conditions being added for google_storage_bucket (#​16683)

v5.8.0

Compare Source

FEATURES:

• New Data Source: google_vmwareengine_network_peering (#​16616)
• New Resource: google_migration_center_group (#​16549)
• New Resource: google_netapp_storage_pool (#​16573)
• New Resource: google_vmwareengine_network (ga) (#​16583)
• New Resource: google_vmwareengine_network_peering (#​16616)

IMPROVEMENTS:

• artifactregistry: added remote_repository_config.upstream_credentials field to google_artifact_registry_repository resource (#​16562)
• cloudbuild: added fields build.artifacts.maven_artifacts, build.artifacts.npm_packages , and build.artifacts.python_packages to resource google_cloudbuild_trigger (#​16543)
• cloudrunv2: promoted field depends_on in google_cloud_run_v2_service to GA (#​16577)
• composer: added database_config.zone field in google_composer_environment (#​16551)
• compute: added field service_directory_registrations to resource google_compute_global_forwarding_rule (#​16581)
• firestore: added virtual field deletion_policy to google_firestore_database (#​16576)
• firestore: enabled database deletion upon destroy for google_firestore_database (#​16576)
• gkehub2: added policycontroller field to fleet_default_member_config in google_gke_hub_feature (#​16542)
• iam: added allowed_services, disable_programmatic_signin fields to google_iam_workforce_pool resource (#​16580)
• vmwareengine: added STANDARD type support to google_vmwareengine_network resource (#​16583)
• vmwareengine: promoted google_vmwareengine_private_cloud resource to GA (#​16613)

BUG FIXES:

• compute: fixed a permadiff caused by issues with ipv6 diff suppression in google_compute_forwarding_rule and google_compute_global_forwarding_rule (#​16550)
• firestore: fixed an issue where google_firestore_database could be deleted when delete_protection_state was DELETE_PROTECTION_ENABLED (#​16576)
• firestore: made resource creation retry for 409 errors with the text "Aborted due to cross-transaction contention" in google_firestore_index (#​16618)

v5.7.0

Compare Source

DEPRECATIONS:

• gkehub: deprecated config_management.binauthz in google_gke_hub_feature_membership (#​16536)

IMPROVEMENTS:

• bigtable: added standard_isolation and standard_isolation.priority fields to google_bigtable_app_profile resource (#​16485)
• cloudrunv2: promoted custom_audiences field to GA on google_cloud_run_v2_service resource (#​16510)
• compute: promoted labels field to GA on google_compute_vpn_tunnel resource (#​16508)
• containerattached: added proxy_config field to google_container_attached_cluster resource (#​16524)
• gkehub: added membership_location field to google_gke_hub_feature_membership resource (#​16536)
• logging: made the change to aqcuire and update the google_logging_project_sink resource that already exists at the desired location. These logging buckets cannot be removed so deleting this resource will remove the bucket config from your terraform state but will leave the logging bucket unchanged. (#​16513)
• memcache: added MEMCACHE_1_6_15 as a possible value for memcache_version in google_memcache_instance resource (#​16531)
• monitoring: added error message to delete Alert Policies first on 400 response when deleting google_monitoring_uptime_check_config resource (#​16535)
• spanner: added autoscaling_config field to google_spanner_instance resource (#​16473)
• workflows: promoted user_env_vars field to GA on google_workflows_workflow resource (#​16477)

BUG FIXES:

• compute: changed external_ipv6_prefix field to not be output only in google_compute_subnetwork resource (#​16480)
• compute: fixed issue where google_compute_attached_disk would produce an error for certain zone configs (#​16484)
• edgecontainer: fixed update method of google_edgecontainer_cluster resource (#​16490)
• provider: fixed an issue where universe domains would not overwrite API endpoints (#​16521)
• resourcemanager: made data_source_google_project_service no longer return an error when the service is not enabled (#​16525)
• sql: ssl_mode field is not stored in terraform state if it has never been used in google_sql_database_instance resource (#​16486)

NOTES:

• dataproc: backfilled terraform_labels field for resource google_dataproc_workflow_template, so resource recreation won't happen during provider upgrade from 4.x to 5.7 (#​16517)
• • provider: backfilled terraform_labels field for some immutable resources, so resource recreation won't happen during provider upgrade from 4.X to 5.7 (#​16518)

v5.6.0

Compare Source

FEATURES:

• New Resource: google_integration_connectors_connection (#​16468)

IMPROVEMENTS:

• assuredworkloads: added enable_sovereign_controls, partner, partner_permissions, violation_notifications_enabled, and several other output-only fields to google_assured_workloads_workloads (#​16433)
• composer: added storage_config to google_composer_environment (#​16455)
• container: added fleet field to google_container_cluster resource (#​16466)
• containeraws: added admin_groups to google_container_aws_cluster (#​16433)
• containerazure: added admin_groups to google_container_azure_cluster (#​16433)
• dataproc: added support for instance_flexibility_policy in google_dataproc_cluster (#​16417)
• dialogflowcx: added is_default_start_flow field to google_dialogflow_cx_flow resource to allow management of default flow resources via Terraform (#​16441)
• dialogflowcx: added is_default_welcome_intent and is_default_negative_intent fields to google_dialogflow_cx_intent resource to allow management of default intent resources via Terraform (#​16441)
• • gkehub: added fleet_default_member_config field to google_gke_hub_feature resource (#​16457)
• gkehub: added metrics_gcp_service_account_email to google_gke_hub_feature_membership (#​16433)
• logging: added index_configs field to logging_bucket_config resource (#​16437)
• logging: added index_configs field to logging_project_bucket_config resource (#​16437)
• monitoring: added pings_count, user_labels, and custom_content_type fields to google_monitoring_uptime_check_config resource (#​16420)
• spanner: added autoscaling_config field to google_spanner_instance (#​16473)
• sql: added ssl_mode field to google_sql_database_instance resource (#​16394)
• vertexai: added private_service_connect_config to google_vertex_ai_index_endpoint (#​16471)
• workstations: added domain_config field to resource google_workstations_workstation_cluster (beta) (#​16464)

BUG FIXES:

• assuredworkloads: made the violation_notifications_enabled field on the google_assured_workloads_workload resource default to values returned from the API when unset in a users configuration (#​16465)
• provider: made terraform_labels immutable in immutable resources to not block the upgrade. This will create a Terraform plan that recreates the resource on 4.X -> 5.6.0 upgrade for affected resources. A mitigation to backfill the values during the upgrade is planned, and will release resource-by-resource. (#​16469)

v5.5.0

Compare Source

FEATURES:

• New Data Source: google_bigquery_dataset (#​16368)

IMPROVEMENTS:

• alloydb: added SECONDARY as an option for instance_type field in google_alloydb_instance resource, to support creation of secondary instance inside a secondary cluster. (#​16398)
• alloydb: added deletion_policy field to google_alloydb_cluster resource, to allow force-destroying instances along with their cluster. This is necessary to delete secondary instances, which cannot be deleted otherwise. (#​16398)
• alloydb: added support to promote google_alloydb_cluster resources from secondary to primary (#​16413)
• alloydb: increased default timeout on google_alloydb_instance to 120m from 40m (#​16398)
• dataproc: added instance_flexibility_policy field ro google_dataproc_cluster resource (#​16417)
• monitoring: added subject field to google_monitoring_alert_policy resource (#​16414)
• storage: added enable_object_retention field to google_storage_bucket resource (#​16412)
• storage: added retention field to google_storage_bucket_object resource (#​16412)

BUG FIXES:

• firestore: fixed an issue with creation of multiple google_firestore_field resources (#​16372)

v5.4.0

Compare Source

DEPRECATIONS:

• bigquery: deprecated cloud_spanner.use_serverless_analytics on google_bigquery_connection. Use cloud_spanner.use_data_boost instead. (#​16310)

NOTES:

• provider: added universe_domain attribute as a provider attribute (#​16323)

BREAKING CHANGES:

• cloudrunv2: marked location field as required in resource google_cloud_run_v2_job. Any configuration without location specified will cause resource creation fail (#​16311)
• cloudrunv2: marked location field as required in resource google_cloud_run_v2_service. Any configuration without location specified will cause resource creation fail (#​16311)

FEATURES:

• New Data Source: google_cloud_identity_group_lookup (#​16296)
• New Resource: google_network_connectivity_policy_based_route (#​16326)
• New Resource: google_pubsub_schema_iam_* (#​16301)

IMPROVEMENTS:

• accesscontextmanager: added support for specifying vpc_network_sources to google_access_context_manager_access_levels, google_access_context_manager_access_level, and google_access_context_manager_access_level_condition (#​16327)
• apigee: added support for type in google_apigee_environment (#​16349)
• bigquery: added cloud_spanner.database_role, cloud_spanner.use_data_boost, and cloud_spanner.max_parallelism fields to google_bigquery_connection (#​16310)
• bigquery: added support for iam_member to google_bigquery_dataset.access (#​16322)
• container: promoted field identity_service_config in google_container_cluster to GA (#​16305)
• container: added update support for google_container_node_pool.node_config.taint (#​16306)
• containerattached: added admin_groups field to google_container_attached_cluster resource (#​16307)
• dialogflowcx: added advanced_settings field to google_dialogflow_cx_flow resource (#​16315)
• dialogflowcx: added advanced_settings fields to google_dialogflow_cx_page resource (#​16315)
• dialogflowcx: added advanced_settings, text_to_speech_settings, git_integration_settings fields to google_dialogflow_cx_agent resource (#​16315)

BUG FIXES:

• bigquery: fixed a bug when updating a google_bigquery_dataset that contained an iamMember access rule added out of band with Terraform (#​16322)
• bigqueryreservation: fixed bug of incorrect resource recreation when capacity_commitment_id is unspecified in resource google_bigquery_capacity_commitment (#​16320)
• cloudrunv2: made annotations field on the google_cloud_run_v2_job data source include all annotations present on the resource in GCP (#​16300)
• cloudrunv2: made annotations field on the google_cloud_run_v2_service data source include all annotations present on the resource in GCP (#​16300)
• cloudrunv2: made labels and terraform labels fields on the google_cloud_run_v2_job data source include all annotations present on the resource in GCP (#​16300)
• cloudrunv2: made labels and terraform labels fields on the google_cloud_run_v2_service data source include all annotations present on the resource in GCP (#​16300)
• edgecontainer: fixed an issue where the update endpoint for google_edgecontainer_cluster was incorrect. (#​16347)
• redis: allow replica_count to be set to zero in the google_redis_cluster resource (#​16302)

v5.3.0

Compare Source

DEPRECATIONS:

• bigquery: deprecated time_partitioning.require_partition_filter in favor of new top level field require_partition_filter in resource google_bigquery_table (#​16238)

FEATURES:

• New Data Source: google_cloud_run_v2_job (#​16260)
• New Data Source: google_cloud_run_v2_service (#​16290)
• New Data Source: google_compute_networks (#​16240)
• New Resource: google_org_policy_custom_constraint (#​16220)

IMPROVEMENTS:

• cloudidentity: added additional_group_keys attribute to google_cloud_identity_group resource (#​16250)
• composer: promoted config.0.workloads_config.0.triggerer to GA in resource google_composer_environment (#​16218)
• compute: added internal_ipv6_range to google_compute_network data source and internal_ipv6_prefix field to google_compute_subnetwork data source (#​16267)
• container: added support for security_posture_config.vulnerability_mode value VULNERABILITY_ENTERPRISEin google_container_cluster (#​16283)
• dataform: added ssh_authentication_config and service_account to google_dataform_repository resource (#​16205)
• dataproc: added min_num_instances field to google_dataproc_cluster resource (#​16249)
• gkeonprem: promoted google_gkeonprem_bare_metal_admin_cluster, google_gkeonprem_bare_metal_cluster, and google_gkeonprem_bare_metal_node_pool resources to GA (#​16237)
• gkeonprem: promoted google_gkeonprem_vmware_cluster and google_gkeonprem_vmware_node_pool resources to GA (#​16237)
• logging: added custom_writer_identity field to google_logging_project_sink (#​16216)
• secretmanager: made ttl field mutable in google_secret_manager_secret (#​16285)
• storage: added terminal_storage_class to the autoclass field in google_storage_bucket resource (#​16282)

BUG FIXES:

• bigquerydatatransfer: fixed an error when updating google_bigquery_data_transfer_config related to incorrect update masks (#​16269)
• compute: fixed an error during the deletion when post was set to 0 on google_compute_global_network_endpoint (#​16286)
• compute: fixed an issue with TTLs being sent for google_compute_backend_service when cache_mode is set to USE_ORIGIN_HEADERS (#​16245)
• container: fixed an issue where empty autoscaling block would crash the provider for google_container_node_pool (#​16212)
• dataflow: fixed a bug where resource updates returns an error if only labels has changes for batch google_dataflow_job and google_dataflow_flex_template_job (#​16248)
• dialogflowcx: fixed updating google_dialogflow_cx_version; updates will no longer time out. (#​16214)
• sql: fixed a bug where adding the edition field to a google_sql_database_instance resource that already existed and used ENTERPRISE edition resulted in a permant diff in plans (#​16215)
• sql: removed host validation to support IP address and DNS address in host in google_sql_source_representation_instance resource (#​16235)

v5.2.0

Compare Source

FEATURES:

• New Data Source: google_secret_manager_secrets (#​16182)
• New Resource: google_alloydb_user (#​16141)
• New Resource: google_firestore_backup_schedule (#​16186)
• New Resource: google_redis_cluster (#​16203)

IMPROVEMENTS:

• alloydb: added cluster_type and secondary_config fields to support secondary clusters in google_alloydb_cluster resource. (#​16197)
• compute: added recreate_closed_psc flag to support recreating the PSC Consumer forwarding rule if the psc_connection_status is closed on google_compute_forwarding_rule. (#​16188)
• compute: added INTERNET_IP_PORT, INTERNET_FQDN_PORT, SERVERLESS, and PRIVATE_SERVICE_CONNECT as acceptable values for the network_endpoint_type field for the resource_compute_network_endpoint_group resource (#​16194)
• compute: added SEV_LIVE_MIGRATABLE_V2 to guest_os_features enum on google_compute_image resource. (#​16187)
• compute: added allow_subnet_cidr_routes_overlap field to google_compute_subnetwork resource (#​16116)
• compute: promoted labels, effective_labels, terraform_labels, and label_fingerprint fields in google_compute_address to GA (#​16120)
• compute: promoted internal_ip and external_ip fields in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager to GA (#​16140)
• compute: promoted internal_ip and external_ip fields in resources google_compute_per_instance_config and google_compute_region_per_instance_config to GA (#​16140)
• iamworkforcepool: promoted field oidc.jwks_json in resource google_iam_workforce_pool to GA (#​16199)

BUG FIXES:

• alloydb: added client_connection_config field to google_alloydb_instance resource (#​16202)
• bigquery: removed mutual exclusivity checks for view, materialized_view, and schema for the google_bigquery_table resource (#​16193)
• compute: added certificate_manager_certificates field to google_compute_target_https_proxy resource (#​16179)
• compute: fixed an issue where external google_compute_global_address can't be created when network_tier in google_compute_project_default_network_tier is set to STANDARD (#​16144)
• compute: fixed a false permadiff on ip_address when it is set to ipv6 on google_compute_forwarding_rule (#​16115)
• provider: fixed a bug where an update request was sent to services when updateMask is empty (#​16111)

v5.1.0

Compare Source

FEATURES:

• New Resource: google_database_migration_service_private_connection (#​16104)
• New Resource: google_edgecontainer_cluster (#​16055)
• New Resource: google_edgecontainer_node_pool (#​16055)
• New Resource: google_edgecontainer_vpn_connection (#​16055)
• New Resource: google_firebase_hosting_custom_domain (#​16062)
• New Resource: google_gke_hub_fleet (#​16072)

IMPROVEMENTS:

• compute: added device_name field to scratch_disk block of google_compute_instance resource (#​16049)
• container: added node_config.linux_node_config.cgroup_mode field to google_container_node_pool (#​16103)
• databasemigrationservice: added support for oracle profiles to google_database_migration_service_connection_profile (#​16087)
• firestore: added api_scope field to google_firestore_index resource (#​16085)
• gkehub: added location field to google_gke_hub_membership_iam_* resources (#​16105)
• gkehub: added location field to google_gke_hub_membership resource (#​16105)
• gkeonprem: added update-in-place support for vcenter fields in google_gkeonprem_vmware_cluster (#​16073)
• identityplatform: added sms_region_config to the resource google_identity_platform_config (#​16044)

BUG FIXES:

• dns: fixed record set configuration parsing in google_dns_record_set (#​16042)
• provider: fixed an issue where the plugin-framework implementation of the provider handled default region values that were self-links differently to the SDK implementation. This issue is not believed to have affected users because of downstream functions that turn self links into region names. (#​16100)
• provider: fixed a bug that caused update requests to be sent for resources with a terraform_labels field even if no fields were updated (#​16111)

v5.0.0

Compare Source

KNOWN ISSUES:

• Updating some resources post-upgrade results in an error like "The update_mask in the Update{{Resource}}Request must be set". This should be resolved in 5.1.0, see https://github.com/hashicorp/terraform-provider-google/issues/16091 for details.

Terraform Google Provider 5.0.0 Upgrade Guide

NOTES:

• provider: some provider default values are now shown at plan-time (#​15707)

LABELS REWORK:

• provider: default labels configured on the provider through the new default_labels field are now supported. The default labels configured on the provider will be applied to all of the resources with standard labels field.
• provider: resources with labels - three label-related fields are now in all of the resources with standard labels field. labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-only terraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-only effective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients.
• provider: resources with annotations - two annotation-related fields are now in all of the resources with standard annotations field. The annotations field is non-authoritative and only manages the annotations defined by the users on the resource through Terraform. The new output-only effective_annotations field lists all of annotations present on the resource in GCP, including the annotations configured through Terraform, the system, and other clients.
• provider: datasources with labels - three fields labels, terraform_labels, and effective_labels are now present in most resource-based datasources. All three fields have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent to effective_labels on the resource.
• provider: datasources with annotations - both annotations and effective_annotations are now present in most resource-based datasources. Both fields have all of annotations present on the resource in GCP including the annotations configured through Terraform, the system, and other clients, equivalent to effective_annotations on the resource.

BREAKING CHANGES:

• provider: added provider-level validation so these fields are not set as empty strings in a user's config: credentials, access_token, impersonate_service_account, project, billing_project, region, zone (#​15968)
• provider: fixed many import functions throughout the provider that matched a subset of the provided input when possible. Now, the GCP resource id supplied to "terraform import" must match exactly. (#​15977)
• provider: made data sources return errors on 404s when applicable instead of silently failing (#​15799)
• provider: made empty strings in the provider configuration block no longer be ignored when configuring the provider(#​15968)
• accesscontextmanager: changed multiple array fields to sets where appropriate to prevent duplicates and fix diffs caused by server side reordering. (#​15756)
• bigquery: added more input validations for google_bigquery_table schema (#​15338)
• bigquery: made routine_type required for google_bigquery_routine (#​15517)
• cloudfunction2: made location required on google_cloudfunctions2_function (#​15830)
• cloudiot: removed deprecated datasource google_cloudiot_registry_iam_policy (#​15739)
• cloudiot: removed deprecated resource google_cloudiot_device (#​15739)
• cloudiot: removed deprecated resource google_cloudiot_registry (#​15739)
• cloudiot: removed deprecated resource google_cloudiot_registry_iam_* (#​15739)
• cloudrunv2: removed deprecated field liveness_probe.tcp_socket from google_cloud_run_v2_service resource. (#​15430)
• cloudrunv2: removed deprecated fields startup_probe and liveness_probe from google_cloud_run_v2_job resource. (#​15430)
• cloudrunv2: retyped volumes.cloud_sql_instance.instances to SET from ARRAY for google_cloud_run_v2_service (#​15831)
• compute: made google_compute_node_group require one of initial_size or autoscaling_policy fields configured upon resource creation (#​16006)
• compute: made size in google_compute_node_group an output only field. (#​16006)
• compute: removed default value for rule.rate_limit_options.encorce_on_key on resource google_compute_security_policy (#​15681)
• compute: retyped consumer_accept_lists to a SET from an ARRAY type for google_compute_service_attachment (#​15985)
• container: added deletion_protection to google_container_cluster which is enabled to true by default. When enabled, this field prevents Terraform from deleting the resource. (#​16013)
• container: changed management.auto_repair and management.auto_upgrade defaults to true in google_container_node_pool (#​15931)
• container: changed networking_mode default to VPC_NATIVE for newly created google_container_cluster resources (#​6402)
• container: removed enable_binary_authorization in google_container_cluster (#​15868)
• container: removed default for logging_variant in google_container_node_pool (#​15931)
• container: removed default value in network_policy.provider in google_container_cluster (#​15920)
• container: removed the behaviour that google_container_cluster will delete the cluster if it's created in an error state. Instead, it will mark the cluster as tainted, allowing manual inspection and intervention. To proceed with deletion, run another terraform apply. (#​15887)
• container: reworked the taint field in google_container_cluster and google_container_node_pool to only manage a subset of taint keys based on those already in state. Most existing resources are unaffected, unless they use sandbox_config- see upgrade guide for details. (#​15959)
• dataplex: removed data_profile_result and data_quality_result from google_dataplex_scan (#​15505)
• firebase: changed deletion_policy default to DELETE for google_firebase_web_app. (#​15406)
• firebase: removed google_firebase_project_location (#​15764)
• gameservices: removed Terraform support for gameservices (#​15558)
• logging: changed the default value of unique_writer_identity from false to true in google_logging_project_sink. (#​15743)
• logging: made growth_factor, num_finite_buckets, and scale required for google_logging_metric (#​15680)
• looker: removed LOOKER_MODELER as a possible value in google_looker_instance.platform_edition (#​15956)
• monitoring: fixed perma-diffs in google_monitoring_dashboard.dashboard_json by suppressing values returned by the API that are not in configuration (#​16014)
• monitoring: made labels immutable in google_monitoring_metric_descriptor (#​15988)
• privateca: removed deprecated fields config_values, pem_certificates from google_privateca_certificate (#​15537)
• secretmanager: removed automatic field in google_secret_manager_secret resource (#​15859)
• servicenetworking: used Create instead of Patch to create google_service_networking_connection (#​15761)
• servicenetworking: used the deleteConnection method to delete the resource google_service_networking_connection (#​15934)

FEATURES:

• New Resource: google_scc_folder_custom_module (#​15979)
• New Resource: google_scc_organization_custom_module (#​16012)

IMPROVEMENTS:

• alloydb: added additional fields to google_alloydb_instance and google_alloydb_backup (#​15973)
• artifactregistry: added support for remote APT and YUM repositories to google_artifact_registry_repository (#​15973)
• baremetal: made delete a noop for the resource google_bare_metal_admin_cluster to better align with actual behavior (#​16010)
• bigtable: added state output attribute to google_bigtable_instance clusters (#​15961)
• compute: made google_compute_node_group mutable (#​16006)
• container: added the effective_taints attribute to google_container_cluster and google_container_node_pool, outputting all known taint values (#​15959)
• container: allowed setting addons_config.gcs_fuse_csi_driver_config on google_container_cluster with enable_autopilot: true. (#​15996)
• containeraws: added binary_authorization to google_container_aws_cluster (#​15989)
• containeraws: added update_settings to google_container_aws_node_pool (#​15989)
• google_compute_instance (#​15933)
• osconfig: added week_day_of_month.day_offset field to the google_os_config_patch_deployment resource (#​15997)
• secretmanager: allowed update for rotation.rotation_period field in google_secret_manager_secret resource (#​15952)
• sql: added preferred_zone field to google_sql_database_instance resource (#​15971)
• storagetransfer: added event_stream field to google_storage_transfer_job resource (#​16004)

BUG FIXES:

• bigquery: fixed diff suppression in external_data_configuration.connection_id in google_bigquery_table (#​15983)
• bigquery: fixed view and materialized view creation when schema is specified in google_bigquery_table (#​15442)
• bigtable: avoided re-creation of google_bigtable_instance when cluster is still updating and storage type changed (#​15961)
• bigtable: fixed a bug where dynamically created clusters would incorrectly run into duplication error in google_bigtable_instance (#​15940)
• compute: removed the default value for field reconcile_connections in resource google_compute_service_attachment, the field will now default to a value returned by the API when not set in configuration (#​15919)
• compute: replaced incorrect default value for enable_endpoint_independent_mapping with APIs default in resource google_compute_router_nat (#​15478)
• container: fixed an issue in google_container_node_pool where empty linux_node_config.sysctls would crash the provider (#​15941)
• dataflow: fixed issue causing error message when max_workers and num_workers were supplied via parameters in google_dataflow_flex_template_job (#​15976)
• dataflow: fixed max_workers read value permanently displaying as 0 in google_dataflow_flex_template_job (#​15976)
• dataflow: fixed permadiff when SdkPipeline values are supplied via parameters in google_dataflow_flex_template_job (#​15976)
• identityplayform: fixed a potential perma-diff for sign_in in google_identity_platform_config resource (#​15907)
• firebase: made google_firebase_rules.release immutable (#​15989)
• monitoring: fixed an issue where metadata was not able to be updated in google_monitoring_metric_descriptor (#​16014)
• monitoring: fixed bug where importing google_monitoring_notification_channel failed when no default project was supplied in provider configuration or through environment variables (#​15929)
• secretmanager: fixed an issue in google_secretmanager_secret where replacing replication.automatic with replication.auto would destroy and recreate the resource (#​15922)
• sql: fixed diffs when re-ordering existing database_flags in google_sql_database_instance ([#​15678](https://togithub.com/hashicorp/terraform-

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.