build(deps): update google terraform providers to v5.45.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	5.44.2 -> 5.45.0
google-beta (source)	required_provider	minor	5.44.2 -> 5.45.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.45.0

Compare Source

hashicorp/terraform-provider-google-beta (google-beta)

v5.45.0

Compare Source

OTES:

• 5.45.0 is a backport release, responding to a new Spanner feature that may result in creation of unwanted backups for users. The changes in this release will be available in 6.11.0 and users upgrading to 6.X should upgrade to that version or higher.

IMPROVEMENTS:

• spanner: added default_backup_schedule_type field to google_spanner_instance (#​8644)

5.44.2 (October 14, 2024)

Notes:

• 5.44.2 is a backport release, responding to a GKE rollout that created permadiffs for many users. The changes in this release will be available in 6.7.0 and users upgrading to 6.X should upgrade to that version or higher.

IMPROVEMENTS:

• container: google_container_cluster will now accept server-specified values for node_pool_auto_config.0.node_kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​8385)

BUG FIXES:

• container: fixed a diff triggered by a new API-side default value for node_config.0.kubelet_config.0.insecure_kubelet_readonly_port_enabled. Terraform will now accept server-specified values for node_config.0.kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​8385)

5.44.1 (September 23, 2024)

NOTES:

• 5.44.1 is a backport release, intended to pull in critical container improvements and fixes for issues introduced in 5.44.0

IMPROVEMENTS:

• container: added in-place update support for gcfs_config in in google_container_cluster and google_container_node_pool (#​8101) (#​8207)

BUG FIXES:

• container: fixed a permadiff on gcfs_config in google_container_cluster and google_container_node_pool (#​8207)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure. (#​8223)

5.44.0 (September 9, 2024)

NOTES:

• 5.44.0 is a backport release, intended to pull in critical container improvements from 6.2.0

IMPROVEMENTS:

• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​8071)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​8071)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​8076)

5.43.1 (August 30, 2024)

NOTES:

• 5.43.1 is a backport release, and some changes will not appear in 6.X series releases until 6.1.0

BUG FIXES:

• pubsub: fixed a validation bug that didn't allow empty filter definitions for google_pubsub_subscription resources (#​8055)

5.43.0 (August 26, 2024)

DEPRECATIONS:

• storage: deprecated lifecycle_rule.condition.no_age field in google_storage_bucket. Use the new lifecycle_rule.condition.send_age_if_zero field instead. (#​7994)

FEATURES:

• New Resource: google_kms_ekm_connection_iam_binding (#​7969)
• New Resource: google_kms_ekm_connection_iam_member (#​7969)
• New Resource: google_kms_ekm_connection_iam_policy (#​7969)
• New Resource: google_scc_v2_organization_scc_big_query_exports (#​8002)

IMPROVEMENTS:

• compute: exposed service side id as new output field forwarding_rule_id on resource google_compute_forwarding_rule (#​7972)
• container: added EXTENDED as a valid option for release_channel field in google_container_cluster resource (#​7973)
• logging: changed enable_analytics parsing to "no preference" in analytics if omitted, instead of explicitly disabling analytics in google_logging_project_bucket_config. (#​7964)
• networkservices: added idle_timeout field to the google_network_services_tcp_route resource (#​7996)
• pusbub: added validation to filter field in resource google_pubsub_subscription (#​7968)
• resourcemanager: added default_labels field to google_client_config data source (#​7992)
• vmwareengine: added PC undelete support in google_vmwareengine_private_cloud (#​8005)

BUG FIXES:

• alloydb: fixed a permadiff on psc_instance_config in google_alloydb_instance resource (#​7975)
• compute: fixed a malformed URL that affected updating the server_tls_policy property on google_compute_target_https_proxy resources (#​7988)
• compute: fixed force diff replacement logic for network_ip on resource google_compute_instance (#​7971)

5.42.0 (August 19, 2024)

DEPRECATIONS:

• compute: setting google_compute_subnetwork.secondary_ip_range = [] to explicitly set a list of empty objects is deprecated and will produce an error in the upcoming major release. Use send_secondary_ip_range_if_empty while removing secondary_ip_range from config instead. (#​7961)

FEATURES:

• New Data Source: google_artifact_registry_locations (#​7922)
• New Data Source: google_cloud_identity_transitive_group_memberships (#​7917)
• New Resource: google_discovery_engine_schema (#​7963)
• New Resource: google_scc_folder_notification_config (#​7928)
• New Resource: google_scc_v2_folder_notification_config (#​7927)
• New Resource: google_vertex_ai_index_endpoint_deployed_index (#​7931)

IMPROVEMENTS:

• clouddeploy: added serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.pod_selector_label and serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.service_networking.pod_selector_label fields to google_clouddeploy_delivery_pipeline resource (#​7945)
• compute: added TDX instance option to confidential_instance_type instance in google_compute_instance (#​7913)
• compute: added send_secondary_ip_range_if_empty to google_compute_subnetwork (#​7961)
• discoveryengine: added skip_default_schema_creation field to google_data_store resource (#​7900)
• dns: changed load_balancer_type field from required to optional in google_dns_record_set (#​7925)
• parallelstore: added file_stripe_level, directory_stripe_level fields to google_parallelstore_instance resource (#​7942)
• servicenetworking: added update_on_creation_fail field to google_service_networking_connection resource. When it is set to true, enforce an update of the reserved peering ranges on the existing service networking connection in case of a new connection creation failure. (#​7915)
• sql: added server_ca_mode field to google_sql_database_instance resource (#​7886)

BUG FIXES:

• bigquery: made google_bigquery_dataset_iam_member non-authoritative. To remove a bigquery dataset iam member, use an authoritative resource like google_bigquery_dataset_iam_policy (#​7960)
• cloudfunctions2: fixed a "Provider produced inconsistent final plan" bug affecting the service_config.environment_variables field in google_cloudfunctions2_function resource (#​7905)
• cloudfunctions2: fixed a permadiff on storage_source.generation in google_cloudfunctions2_function resource (#​7912)
• compute: fixed issue where sub-resources managed by google_compute_forwarding_rule prevented resource deletion (#​7958)
• logging: changed google_logging_project_bucket_config.enable_analytics behavior to set "no preference" in analytics if omitted, instead of explicitly disabling analytics. (#​19126)
• workbench: fixed a bug with google_workbench_instance metadata drifting when using custom containers. (#​7959)

5.41.0 (August 13, 2024)

DEPRECATIONS:

• resourcemanager: deprecated skip_delete field in the google_project resource. Use deletion_policy instead. (#​7817)

FEATURES:

• New Data Source: google_scc_v2_organization_source_iam_policy (#​7888)
• New Resource: google_access_context_manager_service_perimeter_dry_run_egress_policy (#​7882)
• New Resource: google_access_context_manager_service_perimeter_dry_run_ingress_policy (#​7882)
• New Resource: google_scc_v2_folder_mute_config (#​7846)
• New Resource: google_scc_v2_project_mute_config (#​7881)
• New Resource: google_scc_v2_project_notification_config (#​7892)
• New Resource: google_scc_v2_organization_source (#​7888)
• New Resource: google_scc_v2_organization_source_iam_binding (#​7888)
• New Resource: google_scc_v2_organization_source_iam_member (#​7888)
• New Resource: google_scc_v2_organization_source_iam_policy (#​7888)

IMPROVEMENTS:

• clouddeploy: added gke.proxy_url field to google_clouddeploy_target (#​7899)
• cloudrunv2: added field binary_authorization.policy to resource google_cloud_run_v2_job and resource google_cloud_run_v2_service to support named binary authorization policy. (#​7883)
• compute: added update-in-place support for the google_compute_target_https_proxy.server_tls_policy field (#​7884)
• compute: added update-in-place support for the google_compute_region_target_https_proxy.server_tls_policy field (#​7891)
• container: added auto_provisioning_locations field to google_container_cluster (#​7849)
• dataform: added kms_key_name field to google_dataform_repository resource (#​7855)
• discoveryengine: added skip_default_schema_creation field to google_discovery_engine_data_store resource (#​7900)
• gkehub: added configmanagement.management and configmanagement.config_sync.enabled fields to google_gkehub_feature_membership (#​7899)
• gkehub: added management field to google_gke_hub_feature.fleet_default_member_config.configmanagement (#​7862)
• resourcemanager: added deletion_policy field to the google_project resource. Setting deletion_policy to PREVENT will protect the project against any destroy actions caused by a terraform apply or terraform destroy. Setting deletion_policy to ABANDON allows the resource to be abandoned rather than deleted and it behaves the same with skip_delete = true. Default value is DELETE. skip_delete = true takes precedence over deletion_policy = "DELETE".
• storage: added force_destroy field to google_storage_managed_folder resource (#​7867)
• storage: added generation field to google_storage_bucket_object resource (#​7866)

BUG FIXES:

• compute: fixed google_compute_instance.alias_ip_range update behavior to avoid temporarily deleting unchanged alias IP ranges (#​7898)
• compute: fixed the bug that creation of PSC forwarding rules fails in google_compute_forwarding_rule resource when provider default labels are set (#​7873)
• sql: fixed a perma-diff in settings.insights_config in google_sql_database_instance (#​7861)

5.40.0 (August 5, 2024)

IMPROVEMENTS:

• bigquery: added support for value DELTA_LAKE to source_format in google_bigquery_table resource (#​7841)
• compute: added access_mode field to google_compute_disk resource (#​7813)
• compute: added stack_type, and gateway_ip_version fields to google_compute_router resource (#​7801)
• container: added field ray_operator_config for resource_container_cluster (#​7795)
• monitoring: updated goal field to accept a max threshold of up to 0.9999 in google_monitoring_slo resource to 0.9999 (#​7807)
• networkconnectivity: added export_psc field to google_network_connectivity_hub resource (#​7816)
• sql: added enable_dataplex_integration field to google_sql_database_instance resource (#​7810)

BUG FIXES:

• bigquery: fixed a permadiff when handling "assets" in params in the google_bigquery_data_transfer_config resource (#​7833)
• bigquery: fixed an issue preventing certain keys in params from being assigned values in google_bigquery_data_transfer_config (#​7828)
• compute: fixed perma-diff in google_compute_router (#​7818)
• container: fixed perma-diff on node_config.guest_accelerator.gpu_driver_installation_config field in GKE 1.30+ in google_container_node_pool resource (#​7799)
• sql: fixed a perma-diff in settings.insights_config in google_sql_database_instance (#​7861)

5.39.1 (July 30, 2024)

BUG FIXES:

• datastream: fixed a breaking change in 5.39.0 google_datastream_stream that made one of destination_config.0.bigquery_destination_config.0.merge or destination_config.0.bigquery_destination_config.0.append_only required (#​7835)

5.39.0 (July 29, 2024)

NOTES:

• networkconnectivity: migrated google_network_connectivity_hub from DCL to MMv1 (#​7724)
• networkconnectivity: migrated google_network_connectivity_spoke from DCL to MMv1 (#​7762)

DEPRECATIONS:

• bigquery: deprecated allow_resource_tags_on_deletion in google_bigquery_table. (#​7782)
• bigqueryreservation: deprecated multi_region_auxiliary on google_bigquery_reservation. (#​7778)
• datastore: deprecated the resource google_datastore_index. Use the google_firestore_index resource instead. (#​7764)

FEATURES:

• New Resource: google_apigee_environment_keyvaluemaps_entries (#​7717)
• New Resource: google_apigee_environment_keyvaluemaps (#​7717)
• New Resource: google_compute_resize_request (#​7725)
• New Resource: google_compute_router_route_policy (#​7748)
• New Resource: google_scc_v2_organization_mute_config (#​7744)

IMPROVEMENTS:

• alloydb: added observability_config field to google_alloydb_instance resource (#​7737)
• bigquery: added resource_tags field to google_bigquery_table resource (#​7735)
• bigtable: added data_boost_isolation_read_only and data_boost_isolation_read_only.compute_billing_owner fields to google_bigtable_app_profile resource (#​7789)
• cloudfunctions: added build_service_account field to google_cloudfunctions_function resource (#​7713)
• compute: added aws_v4_authentication field to google_compute_backend_service resource (#​7775)
• compute: added custom_learned_ip_ranges and custom_learned_route_priority fields to google_compute_router_peer resource (#​7727)
• compute: added export_policies and import_policies fields to google_compute_router_peer resource (#​7748)
• compute: added shared_secret field to google_compute_public_advertised_prefix resource (#​7767)
• compute: added storage_pool under boot_disk.initialize_params to google_compute_instance resource (#​7787)
• compute: changed target_service field on the google_compute_service_attachment resource to accept a ForwardingRule or Gateway URL. (#​7736)
• container: added field ray_operator_config for google_container_cluster (#​7795)
• datastream: added merge and append_only fields to google_datastream_stream resource (#​7726)
• dlp: added cloud_storage_target field to google_data_loss_prevention_discovery_config resource (#​7734)
• resourcemanager: added check_if_service_has_usage_on_destroy field to google_project_service resource (#​7745)
• resourcemanager: added the member property to google_project_service_identity (#​7708)
• vmwareengine: added deletion_delay_hours field to google_vmwareengine_private_cloud resource (#​7710)
• vmwareengine: supported type change from TIME_LIMITED to STANDARD for multi-node google_vmwareengine_private_cloud resource (#​7710)
• workbench: added access_configs to google_workbench_instance resource (#​7732)

BUG FIXES:

• compute: fixed perma-diff for interconnect_type being DEDICATED in google_compute_interconnect resource (#​7750)
• dialogflowcx: fixed intermittent issues with retrieving resource state soon after creating google_dialogflow_cx_security_settings resources (#​7772)
• firestore: fixed missing import of field for google_firestore_field. (#​7757)
• firestore: fixed bug where fields database, collection, document_id, and field could not be updated on google_firestore_document and google_firestore_field resources. (#​7791)
• netapp: made the smb_settings field on the google_netapp_volume resource default to the value returned from the API. This solves permadiffs when the field is unset. (#​7770)
• networksecurity: added recreate functionality on update for client_validation_mode and client_validation_trust_config in google_network_security_server_tls_policy (#​7756)

5.38.0 (July 15, 2024)

FEATURES:

• New Data Source: google_gke_hub_membership_binding (#​7696)
• New Data Source: google_site_verification_token (#​7704)
• New Resource: google_scc_project_notification_config (#​7698)

IMPROVEMENTS:

• cloudkms: added key_access_justifications_policy field to google_kms_crypto_key resource (#​7693)
• compute: made the google_compute_resource_policy resource updatable in-place (#​7692)
• vertexai: added project_number field to google_vertex_ai_feature_online_store_featureview resource (#​7680)

BUG FIXES:

• cloudfunctions2: fixed permadiffs on service_config.environment_variables field in google_cloudfunctions2_function resource (#​7684)
• networksecurity: fixed permadiffs on purpose field in google_network_security_address_group resource (#​7687)

5.37.0 (July 8, 2024)

FEATURES:

• New Data Source: google_kms_crypto_keys (#​7656)
• New Data Source: google_kms_key_rings (#​7662)
• New Resource: google_scc_v2_organization_notification_config (#​7649)
• New Resource: google_secure_source_manager_repository (#​7634)
• New Resource: google_storage_managed_folder_iam (#​7620)
• New Resource: google_storage_managed_folder (#​7620)

IMPROVEMENTS:

• certificatemanager: added allowlisted_certificates field to google_certificate_manager_trust_config resource (#​7643)
• compute: added source_regions field to google_compute_healthcheck resource (#​7647)
• dataplex: added sql_assertion field to google_dataplex_datascan resource (#​7623)
• gkehub: added fleet_default_member_config.configmanagement.config_sync.enabled field to google_gke_hub_feature resource (#​7639)
• netapp: added zone and replica_zone field to google_netapp_storage_pool resource (#​7660)
• networksecurity: added purpose field to google_network_security_address_group resource (#​7677)
• vertexai: added project_number field to google_vertex_ai_feature_online_store_featureview resource (#​7680)
• workstations: added host.gce_instance.vm_tags field to google_workstations_workstation_config resource (#​7644)

BUG FIXES:

• compute: fixed a bug preventing the creation of google_compute_autoscaler and google_compute_region_autoscaler resources if both autoscaling_policy.max_replicas and autoscaling_policy.min_replicas were configured as zero. (#​7658)
• resourcemanager: mitigated eventual consistency issues by adding a 10s wait after google_service_account_key resource creation (#​7629)
• vertexai: fixed issue where updating "metadata" field could fail in google_vertex_ai_index resource (#​7675)

5.36.0 (July 1, 2024)

FEATURES:

• New Resource: google_storage_managed_folder_iam (#​7620)
• New Resource: google_storage_managed_folder (#​7620)

IMPROVEMENTS:

• bigtable: added ignore_warnings field to google_bigtable_gc_policy resource (#​7571)
• cloudfunctions2: added build_config.automatic_update_policy and build_config.on_deploy_update_policy to google_cloudfunctions2_function resource (#​7608)
• compute: added tls_early_data field to google_compute_target_https_proxy resource (#​7588)
• compute: added custom_error_response_policy and default_custom_error_response_policy fields to google_compute_url_map resource (#​7587)
• datafusion: added connection_type and private_service_connect_config fields to google_data_fusion_instance resource (#​7598)
• firebasehosting: added support for google_firebase_hosting_site resource to be used for an existing site without using import (#​7594)
• healthcare: added encryption_spec field to google_healthcare_dataset resource (#​7601)
• monitoring: added links field to google_monitoring_alert_policy resource (#​7616)
• vertexai: added update support for big_query.entity_id_columns field on google_vertex_ai_feature_group resource (#​7572)

BUG FIXES:

• accesscontextmanager: fixed perma-diff caused by ordering of service_perimeters in google_access_context_manager_service_perimeters resource (#​7595)
• compute: fixed a crash in google_compute_reservation resource when share_settings field has changes (#​7577)
• compute: fixed issue in google_compute_instance resource where service_account is not set when specifying service_account.email and no service_account.scopes (#​7596)
• gkehub2: fixed google_gke_hub_feature resource to allow fleet_default_member_config field to be unset (#​7568)
• identityplatform: fixed perma-diff on google_identity_platform_config resource when sms_region_config is not set (#​7607)
• logging: fixed perma-diff on index_configs in google_logging_organization_bucket_config resource (#​7579)

5.35.0 (June 24, 2024)

FEATURES:

• New Data Source: google_artifact_registry_docker_image (#​7544)
• New Data Source: google_composer_user_workloads_config_map (#​7519)
• New Resource: google_service_networking_vpc_service_controls (#​7545)

IMPROVEMENTS:

• bigquery: added resource_tags field to google_bigquery_dataset resource (#​7549)
• billingbudget: added enable_project_level_recipients field to google_billing_budget resource (#​7539)
• cloudrunv2: added fields start_execution_token and run_execution_token to resource google_cloud_run_v2_job (#​7525)
• compute: added action_token_site_keys and session_token_site_keys fields to google_compute_security_policy and google_compute_security_policy_rule resources (#​7520)
• dataprocmetastore: added autoscaling_config field to google_dataproc_metastore_service resource (#​7528)
• gkehub2: added ENTERPRISE option to security_posture_config field on google_gke_hub_fleet resource (#​7541)
• pubsub: added bigquery_config.service_account_email field to google_pubsub_subscription resource (#​7543)
• redis: added maintenance_version field to google_redis_instance (#​7527)
• storage: changed update behavior in google_storage_bucket_object to no longer delete to avoid object deletion on content update (#​7564)
• sql: added support for more MySQL values in type field of google_sql_user resource (#​7548)
• sql: increased timeouts on google_sql_database_instance to 90m to account for longer-running actions such as creation through cloning (#​7553)
• workbench: added update support to gce_setup.boot_disk and gce_setup.data_disks fields in google_workbench_instance resource (#​7566)

BUG FIXES:

• compute: updated google_compute_instance to force reboot if min_node_cpus is updated (#​7524)
• compute: fixed description field in google_compute_firewall to support empty/null values on update (#​7563)
• compute: fixed perma-diff on google_compute_disk for Ubuntu amd64 canonical LTS images (#​7522)
• storage: fixed lowercased custom_placement_config values in google_storage_bucket causing perma-destroy (#​7551)
• workbench: fixed issue where instance was not starting after an update in google_workbench_instance resource (#​7557)
• workbench: fixed perma-diff caused by empty accelerator_configs in google_workbench_instance resource (#​7557)

5.34.0 (June 17, 2024)

NOTES:

• compute: Updated field description of connection_draining_timeout_sec, balancing_mode and outlier_detection in google_compute_region_backend_service and google_compute_backend_service to inform that default values will be changed in 6.0.0 (#​7513)

DEPRECATIONS:

• vertexai: deprecated beta field embedding_management for google_vertex_ai_feature_online_store resource (#​7473)

FEATURES:

• New Data Source: google_composer_user_workloads_config_map (beta) (#​7519)
• New Data Source: google_composer_user_workloads_secret (beta) (#​7474)
• New Resource: google_composer_user_workloads_config_map (beta) (#​7497)
• New Resource: google_managed_kafka_cluster (beta) (#​7477)
• New Resource: google_managed_kafka_topic (beta) (#​7503)
• New Resource: google_netapp_backup (#​7479)
• New Resource: google_network_services_service_lb_policies (#​7463)
• New Resource: google_scc_management_folder_security_health_analytics_custom_module (#​7483)
• New Resource: google_scc_management_organization_project_security_health_analytics_custom_module (#​7489)
• New Resource: google_scc_management_organization_security_health_analytics_custom_module (#​7493)

IMPROVEMENTS:

• alloydb: changed the resource google_alloydb_instance to be created directly with public IP enabled instead of creating the resource with public IP disabled and then enabling it (#​7469)
• bigtable: added automated_backup_configuration field to google_bigtable_table resource (#​7468)
• cloudbuildv2: added support for connecting to Bitbucket Data Center and Bitbucket Cloud with the bitbucket_data_center_config and bitbucket_cloud_config fields in google_cloudbuildv2_connection (#​7494)
• compute: added support for Port Mapping NEG and endpoint. New NEG type is a regional type of GCE_VM_IP_PORTMAP that requires endpoints with instance, port and client_destination_port (beta) (#​7471)
• compute: added update support to ssl_policy field in google_compute_region_target_https_proxy resource (#​7484)
• compute: removed enum validation on guest_os_features.type in google_compute_disk to allow for new features to be used without provider update (#​7465)
• compute: updated documentation of google_compute_target_https_proxy and google_compute_region_target_https_proxy (#​7481)
• container: added support for security_posture_config.mode value "ENTERPRISE" in resource_container_cluster (#​7467)
• discoveryengine: added document_processing_config field to google_discovery_engine_data_store resource (#​7475)
• edgecontainer: added maintenance_exclusions field to google_edgecontainer_cluster resource (#​7490)
• gkehub: added prevent_drift field to ConfigManagement fleet_default_member_config (#​7464)
• netapp: added administrators field to google_netapp_active_directory resource (#​7466)
• vertexai: promoted optimized field to GA for google_vertex_ai_feature_online_store resource (#​7473)
• workbench: updated the metadata keys managed by the backend. (#​7488)

BUG FIXES:

• compute: fixed an issue where google_compute_instance_group_manager with a pending operation was incorrectly removed due to the operation no longer being present in the backend (#​7498)
• compute: fixed issue where users could not create google_compute_security_policy resources with layer_7_ddos_defense_config explicitly disabled (#​7470)
• workbench: fixed a bug in the google_workbench_instance resource where specifying a network in some scenarios would cause instance creation to fail (#​7518)

5.33.0 (June 10, 2024)

DEPRECATIONS:

• healthcare: deprecated notification_config deprecated notification_config in google_healthcare_fhir_store resource. Use notification_configs instead. (#​7450)

FEATURES:

• New Data Source: google_compute_security_policy (#​7453)
• New Resource: google_compute_project_cloud_armor_tier (#​7456)
• New Resource: google_network_services_service_lb_policies (#​7463)
• New Resource: google_scc_management_organization_event_threat_detection_custom_module (#​7454)
• New Resource: google_spanner_instance_config (#​7459)

IMPROVEMENTS:

• appengine: added flexible_runtime_settings field to google_app_engine_flexible_app_version resource (#​7462)
• bigtable: added force_destroy field to google_bigtable_instance resource. This will force delete any backups present in the instance and allow the instance to be deleted. (#​7441)
• clouddeploy: added execution_configs.verbose field to google_clouddeploy_target resource (#​7442)
• compute: added partner_metadata field to google_compute_instance_template resource (#​7449)
• compute: added partner_metadata field to google_compute_instance resource (#​7449)
• compute: added partner_metadata field to google_compute_regional_instance_template resource (#​7449)
• compute: added standby_policy, target_suspended_size and target_stopped_size fields to google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#​7436)
• compute: added storage_pool field to google_compute_disk resource (#​7434)
• container: added secret_manager_config field to google_container_cluster resource (#​7448)
• dlp: added secrets_discovery_target, cloud_sql_target.filter.database_resource_reference, and big_query_target.filter.table_reference fields to google_data_loss_prevention_discovery_config resource (#​7461)
• gkebackup: added backup_schedule.backup_config.permissive_mode field to google_gke_backup_backup_plan resource (#​7430)
• gkebackup: added restore_config.restore_order field to google_gke_backup_restore_plan resource (#​7430)
• gkebackup: added restore_config.volume_data_restore_policy_bindings field to google_gke_backup_restore_plan resource (#​7430)
• gkebackup: added new enum values MERGE_SKIP_ON_CONFLICT, MERGE_REPLACE_VOLUME_ON_CONFLICT and MERGE_REPLACE_ON_CONFLICT to field restore_config.namespaced_resource_restore_mode in google_gke_backup_restore_plan resource (#​7430)
• healthcare: added notification_config.send_for_bulk_import field to google_healthcare_dicom_store (#​7457)
• integrationconnectors: added endpoint_global_access field to google_integration_connectors_endpoint_attachment resource (#​7443)
• netapp: added backup_config field to google_netapp_volume resource (#​7439)
• redis: added zone_distribution_config field to google_redis_cluster resource (#​7451)
• resourcemanager: added support for range_type = "default-domains-netblocks" in google_netblock_ip_ranges data source (#​7440)
• secretmanager: added support for IAM conditions in google_secret_manager_secret_iam_* resources (#​7444)
• workstations: added boot_disk_size_gb, enable_nested_virtualization, and pool_size to host.gce_instance.boost_configs in google_workstations_workstation_config resource (#​7452)

BUG FIXES:

• container: fixed google_container_node_pool crash if node_config.secondary_boot_disks.mode is not set (#​7460)
• dlp: removed required on inspect_config.limits.max_findings_per_info_type.info_type field to allow the use of default limit by not setting this field in google_data_loss_prevention_inspect_template resource (#​7438)
• provider: fixed application default credential and access token authorization when universe_domain is set (#​7433)

5.32.0 (June 3, 2024)

NOTES:

• privateca: converted google_privateca_certificate_template to now use the MMv1 engine instead of DCL (#​7409)

FEATURES:

• New Resource: google_dataplex_entry_type (#​7412)
• New Resource: google_logging_log_view_iam_binding (#​7420)
• New Resource: google_logging_log_view_iam_member (#​7420)
• New Resource: google_logging_log_view_iam_policy (#​7420)

IMPROVEMENTS:

• alloydb: added psc_config field to google_alloydb_cluster resource (#​7429)
• alloydb: added psc_instance_config field to google_alloydb_instance resource (#​7429)
• cloudrunv2: added default_uri_disabled field to google_cloud_run_v2_service resourceto (#​7422)
• compute: added NONE to acceptable options for update_policy.minimal_action field in google_compute_instance_group_manager resource (#​7417)
• sql: updated support for a new value week5 in field setting.maintenance_window.update_track in google_sql_database_instance resource (#​7408)

BUG FIXES:

• cloudrunv2: added validation for timeout field to google_cloud_run_v2_job, google_cloud_run_v2_service resources (#​7426)
• compute: fixed permadiff in ordering of advertised_ip_ranges.range field on google_compute_router resource (#​7411)
• iam: added a 10 second sleep when creating google_service_account resource (#​7427)
• storage: fixed google_storage_bucket.lifecycle_rule.condition block fields days_since_noncurrent_time and days_since_custom_time and num_newer_versions were not working for 0 value. (#​7414)

5.31.0 (May 28, 2024)

FEATURES:

• New Data Source: google_compute_subnetworks (#​7371)
• New Resource: google_dataplex_aspect_type (#​7397)
• New Resource: google_dataplex_entry_group (#​7389)
• New Resource: google_kms_autokey_config (#​7385)
• New Resource: google_kms_key_handle (#​7385)
• New Resource: google_network_services_lb_route_extension (#​7394)

IMPROVEMENTS:

• appengine: added field instance_ip_mode to resource google_app_engine_flexible_app_version resource (beta) (#​7377)
• bigquery: added external_data_configuration.bigtable_options to google_bigquery_table (#​7387)
• cloudrun: added support for nfs to google_cloudrun_service (beta). (#​7381)
• composer: added support for importing google_composer_user_workloads_secret via the "{{environment}}/{{name}}" format. (#​7390)
• composer: improved timeouts for google_composer_user_workloads_secret. (#​7390)
• compute: added TLS_JA3_FINGERPRINT and USER_IP options in field rate_limit_options.enforce_on_key to google_compute_security_policy resource (#​7376)
• compute: added 'rateLimitOptions' field to 'google_compute_security_policy_rule' resource (#​7376)
• compute: changed google_compute_region_ssl_policy's region field to optional and allow to be inferred from environment ([#​73

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.