v6.5.0

Compare Source

DEPRECATIONS:

• compute: deprecatedmacsec.pre_shared_keys.fail_open field ingoogle_compute_interconnect resource. Use the newmacsec.fail_open field instead (#​19572)

FEATURES:

• New Data Source:google_compute_region_instance_group_manager (#​19589)
• New Data Source:google_privileged_access_manager_entitlement (#​19580)
• New Data Source:google_secret_manager_regional_secret_version_access (#​19538)
• New Data Source:google_secret_manager_regional_secret_version (#​19514)
• New Data Source:google_secret_manager_regional_secrets (#​19532)
• New Resource:google_compute_router_nat_address (#​19550)
• New Resource:google_logging_log_scope (#​19559)

IMPROVEMENTS:

• apigee: addedactivate field togoogle_apigee_nat_address resource (#​19591)
• bigquery: addedbiglake_configuration field togoogle_bigquery_table resource to support BigLake Managed Tables (#​19541)
• cloudrunv2: promotedscaling field ingoogle_cloud_run_v2_service resource to GA (#​19588)
• composer: promotedconfig.workloads_config.cloud_data_lineage_integration field ingoogle_composer_environment resource to GA (#​19612)
• compute: addedexisting_reservations field togoogle_compute_region_commitment resource (#​19585)
• compute: addedhostname field togoogle_compute_instance data source (#​19607)
• compute: addedinitial_nat_ip field togoogle_compute_router_nat resource (#​19550)
• compute: addedmacsec.fail_open field togoogle_compute_interconnect resource (#​19572)
• compute: addedSUSPENDED as a possible value todesired_state field ingoogle_compute_instance resource (#​19586)
• compute: added import support forprojects/{{project}}/meta-data/{{key}} format forgoogle_compute_project_metadata_item resource (#​19613)
• compute: markedcustomer_name andlocation fields as optional ingoogle_compute_interconnect resource to support cross cloud interconnect (#​19619)
• container: addedlinux_node_config.hugepages_config field togoogle_container_node_pool resource (#​19521)
• container: promotedgcfs_config field ingoogle_container_cluster resource to GA (#​19617)
• looker: addedpsc_enabled andpsc_config fields togoogle_looker_instance resource (#​19523)
• networkconnectivity: addedinclude_import_ranges field togoogle_network_connectivity_spoke resource forlinked_vpn_tunnels,linked_interconnect_attachments andlinked_router_appliance_instances (#​19530)
• secretmanagerregional: addedversion_aliases field togoogle_secret_manager_regional_secret resource (#​19514)
• workbench: increased create timeout to 20 minutes forgoogle_workbench_instance resource (#​19551)

BUG FIXES:

• bigquery: fixed in-place update ofgoogle_bigquery_table resource whenexternal_data_configuration.schema field is set (#​19558)
• bigquerydatapolicy: fixed permadiff onpolicy_tag field ingoogle_bigquery_datapolicy_data_policy resource (#​19563)
• composer: fixedstorage_config.bucket field to support a bucket name with or without "gs://" prefix (#​19552)
• container: added support for settingaddons_config.gcp_filestore_csi_driver_config andenable_autopilot in the samegoogle_container_cluster (#​19590)
• container: fixednode_config.kubelet_config updates ingoogle_container_cluster resource (#​19562)
• container: fixed a bug where specifyingnode_pool_defaults.node_config_defaults withenable_autopilot = true would causegoogle_container_cluster resource creation failure (#​19543)
• workbench: fixed a bug in thegoogle_workbench_instance resource where the removal oflabels was not functioning as expected (#​19620)

v6.4.0

Compare Source

DEPRECATIONS:

• securitycenterv2: deprecatedgoogle_scc_v2_organization_scc_big_query_exports. Usegoogle_scc_v2_organization_scc_big_query_export instead. (#​19457)

FEATURES:

• New Data Source:google_secret_manager_regional_secret_version (#​19514)
• New Data Source:google_secret_manager_regional_secret (#​19491)
• New Resource:google_database_migration_service_migration_job (#​19488)
• New Resource:google_discovery_engine_target_site (#​19469)
• New Resource:google_healthcare_workspace (#​19476)
• New Resource:google_scc_folder_scc_big_query_export (#​19480)
• New Resource:google_scc_organization_scc_big_query_export (#​19465)
• New Resource:google_scc_project_scc_big_query_export (#​19466)
• New Resource:google_scc_v2_organization_scc_big_query_export (#​19457)
• New Resource:google_secret_manager_regional_secret_version (#​19504)
• New Resource:google_secret_manager_regional_secret (#​19461)
• New Resource:google_site_verification_web_resource (#​19477)
• New Resource:google_spanner_backup_schedule (#​19449)

IMPROVEMENTS:

• alloydb: addedenable_outbound_public_ip field togoogle_alloydb_instance resource (#​19444)
• apigee: added in-place update forconsumer_accept_list field ingoogle_apigee_instance resource (#​19442)
• compute: addedinterface field togoogle_compute_attached_disk resource (#​19440)
• compute: added in-place update ingoogle_compute_interconnect resource, except forremote_location andrequested_features fields (#​19508)
• filestore: addeddeletion_protection_enabled anddeletion_protection_reason fields togoogle_filestore_instance resource (#​19446)
• looker: addedfips_enabled field togoogle_looker_instance resource (#​19511)
• metastore: addeddeletion_protection field togoogle_dataproc_metastore_service resource (#​19505)
• netapp: addedallow_auto_tiering field togoogle_netapp_storage_pool resource (#​19454)
• netapp: addedtiering_policy field togoogle_netapp_volume resource (#​19454)
• secretmanagerregional: addedversion_aliases field togoogle_secret_manager_regional_secret resource (#​19514)
• spanner: addededition field togoogle_spanner_instance resource (#​19449)

BUG FIXES:

• compute: fixed a permadiff oniap field ingoogle_compute_backend andgoogle_compute_region_backend resources (#​19509)
• container: fixed a bug where specifyingnode_pool_defaults.node_config_defaults withenable_autopilot = true will causegoogle_container_cluster resource creation failure (#​19543)
• container: fixed a permadiff onnode_config.gcfs_config field ingoogle_container_cluster andgoogle_container_node_pool resources (#​19512)
• container: fixed the in-place update fornode_config.gcfs_config field ingoogle_container_cluster andgoogle_container_node_pool resources (#​19512)
• container: madenode_config.kubelet_config.cpu_manager_policy field optional to fix its update ingoogle_container_cluster resource (#​19464)
• dns: fixed a permadiff ondnssec_config field ingoogle_dns_managed_zone resource (#​19456)
• pubsub: allowedfilter field to contain line breaks ingoogle_pubsub_subscription resource (#​19451)

v6.3.0

Compare Source

FEATURES:

• New Data Source:google_bigquery_tables (#​19402)
• New Resource:google_developer_connect_connection (#​19431)
• New Resource:google_developer_connect_git_repository_link (#​19431)
• New Resource:google_memorystore_instance (#​19398)

IMPROVEMENTS:

• compute: addedconnected_endpoints.consumer_network andconnected_endpoints.psc_connection_id fields togoogle_compute_service_attachment resource (#​19426)
• compute: added fieldhttp_keep_alive_timeout_sec togoogle_region_compute_target_https_proxy andgoogle_region_compute_target_http_proxy resources (#​19432)
• compute: added support forboot_disk.initialize_params.resource_policies ingoogle_compute_instance andgoogle_instance_template (#​19407)
• container: addedstorage_pools tonode_config ingoogle_container_cluster andgoogle_container_node_pool (#​19423)
• containerattached: addedsecurity_posture_config field togoogle_container_attached_cluster resource (#​19411)
• netapp: addedlarge_capacity andmultiple_endpoints togoogle_netapp_volume resource (#​19384)
• resourcemanager: addedtags field togoogle_folder to allow setting tags for folders at creation time (#​19380)

BUG FIXES:

• compute: settingnetwork_ip to "" will no longer cause diff and will be treated the same asnull (#​19400)
• dataproc: updatedgoogle_dataproc_cluster to protect against handling nilkerberos_config values (#​19401)
• dns: added a mutex togoogle_dns_record_set to prevent conflicts when multiple resources attempt to operate on the same record set (#​19416)
• managedkafka: added 5 second wait postgoogle_managed_kafka_topic creation to fix eventual consistency errors (#​19429)

v6.2.0

Compare Source

FEATURES:

• New Data Source:google_certificate_manager_certificates (#​19361)
• New Resource:google_network_security_server_tls_policy (#​19314)
• New Resource:google_scc_v2_folder_scc_big_query_export (#​19327)
• New Resource:google_scc_v2_project_scc_big_query_export (#​19311)

IMPROVEMENTS:

• assuredworkload: added fieldpartner_service_billing_account togoogle_assured_workloads_workload (#​19358)
• bigtable: added support forcolumn_family.type ingoogle_bigtable_table (#​19302)
• cloudrun: promoted support for nfs and csi volumes (for Cloud Storage FUSE) forgoogle_cloud_run_service to GA (#​19359)
• cloudrunv2: promoted support for nfs and gcs volumes forgoogle_cloud_run_v2_job to GA (#​19359)
• compute: addedboot_disk.interface field togoogle_compute_instance resource (#​19319)
• container: addednode_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field togoogle_container_cluster. (#​19320)
• container: addedinsecure_kubelet_readonly_port_enabled tonode_pool.node_config.kubelet_config andnode_config.kubelet_config ingoogle_container_node_pool resource. (#​19312)
• container: addedinsecure_kubelet_readonly_port_enabled tonode_pool_defaults.node_config_defaults,node_pool.node_config.kubelet_config, andnode_config.kubelet_config ingoogle_container_cluster resource. (#​19312)
• container: added support for in-place updates forgoogle_compute_node_pool.node_config.gcfs_config andgoogle_container_cluster.node_config.gcfs_cluster andgoogle_container_cluster.node_pool.node_config.gcfs_cluster (#​19365)
• container: promoted theadditive_vpc_scope_dns_domain field on thegoogle_container_cluster resource to GA (#​19313)
• iambeta: addedx509 field togoogle_iam_workload_identity_pool_provider resource (#​19375)
• networkconnectivity: addedinclude_export_ranges togoogle_network_connectivity_spoke (#​19346)
• pubsub: addedcloud_storage_config.max_messages andcloud_storage_config.avro_config.use_topic_schema fields togoogle_pubsub_subscription resource (#​19338)
• redis: added themaintenance_policy field to thegoogle_redis_cluster resource (#​19341)
• resourcemanager: addedtags field togoogle_project to allow setting tags for projects at creation time (#​19351)
• securitycenter: added support for emptystreaming_config.filter values ingoogle_scc_notification_config resources (#​19369)

BUG FIXES:

• compute: fixedgoogle_compute_interconnect to support correctavailable_features option ofIF_MACSEC (#​19330)
• compute: fixed a bug whereadvertised_route_priority was accidentally set to 0 during updates ingoogle_compute_router_peer (#​19366)
• compute: fixed a permadiff caused by settingstart_time in an incorrect H:mm format ingoogle_compute_resource_policies resources (#​19297)
• compute: fixednetwork_interface.subnetwork_project validation to match with the project innetwork_interface.subnetwork field whennetwork_interface.subnetwork has full self_link ingoogle_compute_instance resource (#​19348)
• container: removed unnecessary force replacement in node poolgcfs_config (#​19365
• kms: updated thegoogle_kms_autokey_config resource'sfolder field to accept values that are either full resource names (folders/{folder_id}) or just the folder id ({folder_id} only) (#​19364))
• storage: added retry support for 429 errors ingoogle_storage_bucket resource (#​19353)

v6.1.0

Compare Source

FEATURES:

• New Data Source:google_kms_crypto_key_latest_version (#​19249)
• New Data Source:google_kms_crypto_key_versions (#​19241)

IMPROVEMENTS:

• databasemigrationservice: added support ingoogle_database_migration_service_connection_profile for creating DMS connection profiles that link to existing Cloud SQL instances/AlloyDB clusters. (#​19291)
• alloydb: addedsubscription_type andtrial_metadata field togoogle_alloydb_cluster resource (#​19262)
• bigquery: addedencryption_configuration field togoogle_bigquery_data_transfer_config resource (#​19267)
• bigqueryanalyticshub: addedselected_resources, andrestrict_direct_table_access togoogle_bigquery_analytics_hub_listing resource (#​19244)
• bigqueryanalyticshub: addedsharing_environment_config togoogle_bigquery_analytics_hub_data_exchange resource (#​19244)
• cloudtasks: addedhttp_target field togoogle_cloud_tasks_queue resource (#​19253)
• compute: addedaccelerators field togoogle_compute_node_template resource (#​19292)
• compute: allowed disablingserver_tls_policy during update ingoogle_compute_target_https_proxy resources (#​19233)
• container: addedsecret_manager_config field togoogle_container_cluster resource (#​19288)
• datastream: addedtransaction_logs andchange_tables to thedatastream_stream resource (#​19248)
• discoveryengine: addedchunking_config andlayout_parsing_config fields togoogle_discovery_engine_data_store resource (#​19274)
• dlp: addedinspect_template_modified_cadence field tobig_query_target andcloud_sql_target ingoogle_data_loss_prevention_discovery_config resource (#​19282)
• dlp: addedtag_resources field togoogle_data_loss_prevention_discovery_config resource (#​19282)
• networksecurity: promotedgoogle_network_security_client_tls_policy to GA (#​19293)

BUG FIXES:

• bigquery: fixed an error which could occur with email field values containing non-lower-case characters ingoogle_bigquery_dataset_access resource (#​19259)
• bigqueryanalyticshub: madebigquery_dataset immutable ingoogle_bigquery_analytics_hub_listing as it was not updatable in the API. Now modifying the field in Terraform will correctly recreate the resource rather than causing Terraform to report it would attempt an invalid update. (#​19244)
• container: fixed update inconsistency ingoogle_container_cluster resource (#​19247)
• pubsub: fixed a validation bug that didn't allow empty filter definitions forgoogle_pubsub_subscription resources (#​19284)
• resourcemanager: fixed a bug where data.google_client_config failed silently when inadequate credentials were used to configure the provider (#​19286)
• sql: fixed importinggoogle_sql_user wherehost is an IPv4 CIDR (#​19243)
• sql: fixed overwriting ofname field for IAM Group user ingoogle_sql_user resource (#​19234)

v6.0.1

Compare Source

BREAKING CHANGES:

• sql: removedsettings.ip_configuration.require_ssl fromgoogle_sql_database_instance in favor ofsettings.ip_configuration.ssl_mode. This field was intended to be removed in 6.0.0. (#​19263)

v6.0.0

Compare Source

Terraform Google Provider 6.0.0 Upgrade Guide

BREAKING CHANGES:

• provider: changed provider labels to add thegoog-terraform-provisioned: true label by default. (#​19190)
• activedirectory: addeddeletion_protection field togoogle_active_directory_domain resource. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection = false before destroying the resource. (#​18906)
• alloydb: removednetwork ingoogle_alloy_db_cluster. Usenetwork_config.network instead. (#​19181)
• bigquery: added client-side validation to prevent table view creation if schema contains required fields forgoogle_bigquery_table resource (#​18767)
• bigquery: removedallow_resource_tags_on_deletion fromgoogle_bigquery_table. Resource tags are now always allowed on table deletion. (#​19077)
• bigqueryreservation: removedmulti_region_auxiliary fromgoogle_bigquery_reservation (#​18922)
• billing: revised the format ofid forgoogle_billing_project_info (#​18823)
• cloudrunv2: addeddeletion_protection field togoogle_cloudrunv2_service. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection = false before destroying the resource.(#​19019)
• cloudrunv2: changedliveness_probe to no longer infer a default value from api ongoogle_cloud_run_v2_service. Removing this field and applying the change will now remove liveness probe from the Cloud Run service. (#​18764)
• cloudrunv2: retypedcontainers.env to SET from ARRAY forgoogle_cloud_run_v2_service andgoogle_cloud_run_v2_job. (#​18855)
• composer:ip_allocation_policy = [] ingoogle_composer_environment is no longer valid configuration. Removing the field from configuration should not produce a diff. (#​19207)
• compute: added new required fieldenabled ingoogle_compute_backend_service andgoogle_compute_region_backend_service (#​18772)
• compute: changedcertifcate_id ingoogle_compute_managed_ssl_certificate to correctly be output only. (#​19069)
• compute: revised and in some cases removed default values ofconnection_draining_timeout_sec,balancing_mode andoutlier_detection ingoogle_compute_region_backend_service andgoogle_compute_backend_service. (#​18720)
• compute: revised the format ofid forcompute_network_endpoints (#​18844)
• compute:guest_accelerator = [] is no longer valid configuration ingoogle_compute_instance. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#​19207)
• compute:google_compute_instance_from_template andgoogle_compute_instance_from_machine_imagenetwork_interface.alias_ip_range, network_interface.access_config, attached_disk, guest_accelerator, service_account, scratch_disk can no longer be set to an empty block[]. Removing the fields from configuration should not produce a diff. (#​19207)
• compute:secondary_ip_ranges = [] ingoogle_compute_subnetwork is no longer valid configuration. To set an explicitly empty list, usesend_secondary_ip_range_if_empty and completely removesecondary_ip_range from config. (#​19207)
• container: madeadvanced_datapath_observability_config.enable_relay required ingoogle_container_cluster (#​19060)
• container: removed deprecated fieldadvanced_datapath_observability_config.relay_mode fromgoogle_container_cluster resource. Users are expected to useenable_relay field instead. (#​19060)
• container: three label-related fields are now ingoogle_container_cluster resource.resource_labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-onlyterraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-onlyeffective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#​19062)
• container: made three fieldsresource_labels,terraform_labels, andeffective_labels be present ingoogle_container_cluster datasources. All three fields will have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent toeffective_labels on the resource. (#​19062)
• container:guest_accelerator = [] is no longer valid configuration ingoogle_container_cluster andgoogle_container_node_pool. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#​19207)
• container:guest_accelerator.gpu_driver_installation_config = [] andguest_accelerator.gpu_sharing_config = [] are no longer valid configuration ingoogle_container_cluster andgoogle_container_node_pool. Removing the fields from configuration should not produce a diff. (#​19207)
• datastore: removedgoogle_datastore_index in favor ofgoogle_firestore_index (#​19160)
• edgenetwork: three label-related fields are now ingoogle_edgenetwork_network andgoogle_edgenetwork_subnet resources.labels field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-onlyterraform_labels field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-onlyeffective_labels field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#​19062)
• identityplatform: removed resourcegoogle_identity_platform_project_default_config in favor ofgoogle_identity_platform_project_config (#​18992)
• pubsub: allowedschema_settings ingoogle_pubsub_topic to be removed (#​18631)
• integrations: removedcreate_sample_workflows andprovision_gmek fromgoogle_integrations_client (#​19148)
• redis: added adeletion_protection_enabled field to thegoogle_redis_cluster resource. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection_enabled = false before destroying the resource. (#​19173)
• resourcemanager: addeddeletion_protection field togoogle_folder to make deleting them require an explicit intent. Folder resources now cannot be destroyed unlessdeletion_protection = false is set for the resource. (#​19021)
• resourcemanager: madedeletion_policy ingoogle_project 'PREVENT' by default. This makes deleting them require an explicit intent.google_project resources cannot be destroyed unlessdeletion_policy is set to 'ABANDON' or 'DELETE' for the resource. (#​19114)
• sql: removedsettings.ip_configuration.require_ssl ingoogle_sql_database_instance. Please usesettings.ip_configuration.ssl_mode instead. (#​18843)
• storage: removedno_age field fromlifecycle_rule.condition in thegoogle_storage_bucket resource (#​19048)
• vpcaccess: removed default values formin_throughput andmin_instances fields ongoogle_vpc_access_connector and made them default to values returned from the API when not provided by users (#​18697)
• vpcaccess: added a conflicting fields restriction betweenmin_throughput andmin_instances fields ongoogle_vpc_access_connector (#​18697)
• vpcaccess: added a conflicting fields restriction betweenmax_throughput andmax_instances fields ongoogle_vpc_access_connector (#​18697)
• workstation: defaultedhost.gce_instance.disable_ssh to true forgoogle_workstations_workstation_config (#​19101)
  IMPROVEMENTS:
• compute: added fieldsreserved_internal_range andsecondary_ip_ranges[].reserved_internal_range togoogle_compute_subnetwork resource (#​19151)
• compute: changed the behavior ofname_prefix in multiple Compute resources to allow for a longer max length of 54 characters. See the upgrade guide and resource documentation for more details. (#​19152)
  BUG FIXES:
• compute: fixed an issue regarding sendingenabled field by default for nulliap message ingoogle_compute_backend_service andgoogle_compute_region_backend_service (#​18772)

v6.5.0

Compare Source

DEPRECATIONS:

• compute: deprecatedmacsec.pre_shared_keys.fail_open field ingoogle_compute_interconnect resource. Use the newmacsec.fail_open field instead (#​8245)

FEATURES:

• New Data Source:google_compute_region_instance_group_manager (#​8259)
• New Data Source:google_privileged_access_manager_entitlement (#​8253)
• New Data Source:google_secret_manager_regional_secret_version_access (#​8220)
• New Data Source:google_secret_manager_regional_secret_version (#​8209)
• New Data Source:google_secret_manager_regional_secrets (#​8217)
• New Resource:google_compute_region_network_firewall_policy_with_rules (#​8225)
• New Resource:google_compute_router_nat_address (#​8227)
• New Resource:google_logging_log_scope (#​8235)

IMPROVEMENTS:

• apigee: addedactivate field togoogle_apigee_nat_address resource (#​8261)
• bigquery: addedbiglake_configuration field togoogle_bigquery_table resource to support BigLake Managed Tables (#​8221)
• cloudrun: addednode_selector field togoogle_cloud_run_service resource (#​8216)
• cloudrunv2: addednode_selector field togoogle_cloud_run_v2_service resource (#​8216)
• compute: addedexisting_reservations field togoogle_compute_region_commitment resource (#​8256)
• compute: addedhost_error_timeout_seconds field togoogle_compute_instance resource (#​8252)
• compute: addedhostname field togoogle_compute_instance data source (#​8268)
• compute: addedinitial_nat_ip field togoogle_compute_router_nat resource (#​8227)
• compute: addedmacsec.fail_open field togoogle_compute_interconnect resource (#​8245)
• compute: addedSUSPENDED as a possible value todesired_state field ingoogle_compute_instance resource (#​8257)
• compute: added import support forprojects/{{project}}/meta-data/{{key}} format forgoogle_compute_project_metadata_item resource (#​8274)
• compute: markedcustomer_name andlocation fields as optional ingoogle_compute_interconnect resource to support cross cloud interconnect (#​8279)
• container: addedlinux_node_config.hugepages_config field togoogle_container_node_pool resource (#​8210)
• looker: addedpsc_enabled andpsc_config fields togoogle_looker_instance resource (#​8211)
• networkconnectivity: addedinclude_import_ranges field togoogle_network_connectivity_spoke resource forlinked_vpn_tunnels,linked_interconnect_attachments andlinked_router_appliance_instances (#​8215)
• secretmanagerregional: addedversion_aliases field togoogle_secret_manager_regional_secret resource (#​8209)
• workbench: increased create timeout to 20 minutes forgoogle_workbench_instance resource (#​8228)

BUG FIXES:

• bigquery: fixed in-place update ofgoogle_bigquery_table resource whenexternal_data_configuration.schema field is set (#​8234)
• bigquerydatapolicy: fixed permadiff onpolicy_tag field ingoogle_bigquery_datapolicy_data_policy resource (#​8239)
• composer: fixedstorage_config.bucket field to support a bucket name with or without "gs://" prefix (#​8229)
• container: added support for settingaddons_config.gcp_filestore_csi_driver_config andenable_autopilot in the samegoogle_container_cluster (#​8260)
• container: fixednode_config.kubelet_config updates ingoogle_container_cluster resource (#​8238)
• container: fixed a bug where specifyingnode_pool_defaults.node_config_defaults withenable_autopilot = true would causegoogle_container_cluster resource creation failure (#​8223)
• workbench: fixed a bug in thegoogle_workbench_instance resource where the removal oflabels was not functioning as expected (#​8280)

v6.4.0

Compare Source

DEPRECATIONS:

• securitycenterv2: deprecatedgoogle_scc_v2_organization_scc_big_query_exports. Usegoogle_scc_v2_organization_scc_big_query_export instead. (#​8166)

FEATURES:

• New Data Source:google_secret_manager_regional_secret_version (#​8209)
• New Data Source:google_secret_manager_regional_secret (#​8189)
• New Resource:google_compute_firewall_policy_with_rules (#​8181)
• New Resource:google_database_migration_service_migration_job (#​8187)
• New Resource:google_discovery_engine_target_site (#​8174)
• New Resource:google_healthcare_workspace (#​8179)
• New Resource:google_scc_folder_scc_big_query_export (#​8183)
• New Resource:google_scc_organization_scc_big_query_export (#​8172)
• New Resource:google_scc_project_scc_big_query_export (#​8173)
• New Resource:google_scc_v2_organization_scc_big_query_export (#​8166)
• New Resource:google_secret_manager_regional_secret_version (#​8199)
• New Resource:google_secret_manager_regional_secret (#​8170)
• New Resource:google_site_verification_web_resource (#​8180)
• New Resource:google_spanner_backup_schedule (#​8160)

IMPROVEMENTS:

• alloydb: addedenable_outbound_public_ip field togoogle_alloydb_instance resource (#​8156)
• apigee: added in-place update forconsumer_accept_list field ingoogle_apigee_instance resource (#​8155)
• compute: addedinterface field togoogle_compute_attached_disk resource (#​8154)
• compute: added in-place update ingoogle_compute_interconnect resource except forremote_location andrequested_features fields (#​8203)
• filestore: addeddeletion_protection_enabled anddeletion_protection_reason fields togoogle_filestore_instance resource (#​8158)
• looker: addedfips_enabled field togoogle_looker_instance resource (#​8206)
• metastore: addeddeletion_protection field togoogle_dataproc_metastore_service resource (#​8200)
• netapp: addedallow_auto_tiering field togoogle_netapp_storage_pool resource (#​8163)
• netapp: addedtiering_policy field togoogle_netapp_volume resource (#​8163)
• secretmanagerregional: addedversion_aliases field togoogle_secret_manager_regional_secret resource (#​8209)
• spanner: addededition field togoogle_spanner_instance resource (#​8160)

BUG FIXES:

• compute: fixed a permadiff oniap field ingoogle_compute_backend andgoogle_compute_region_backend resources (#​8204)
• container: fixed a bug where specifyingnode_pool_defaults.node_config_defaults withenable_autopilot = true will causegoogle_container_cluster resource creation failure (#​8223)
• container: fixed a permadiff onnode_config.gcfs_config field ingoogle_container_cluster andgoogle_container_node_pool resources (#​8207)
• container: fixed the in-place update fornode_config.gcfs_config ingoogle_container_cluster andgoogle_container_node_pool resources (#​8207)
• container: madenode_config.kubelet_config.cpu_manager_policy field optional to fix its update ingoogle_container_cluster resource (#​8171)
• dns: fixed a permadiff ondnssec_config field ingoogle_dns_managed_zone resource (#​8165)
• pubsub: allowedfilter field to contain line breaks ingoogle_pubsub_subscription resource (#​8161)

v6.3.0

Compare Source

FEATURES:

• New Data Source:google_bigquery_tables (#​8130)
• New Resource:google_compute_network_firewall_policy_with_rules (#​8118)
• New Resource:google_developer_connect_connection (#​8150)
• New Resource:google_developer_connect_git_repository_link (#​8150)
• New Resource:google_memorystore_instance (#​8126)

IMPROVEMENTS:

• compute: addedconnected_endpoints.consumer_network andconnected_endpoints.psc_connection_id fields togoogle_compute_service_attachment resource (#​8148)
• compute: addedpropagated_connection_limit andconnected_endpoints.propagated_connection_count fields togoogle_compute_service_attachment resource (#​8148)
• compute: added fieldhttp_keep_alive_timeout_sec togoogle_region_compute_target_http_proxy andgoogle_region_compute_target_http_proxy resources (#​8151)
• compute: added support forboot_disk.initialize_params.resource_policies ingoogle_compute_instance andgoogle_instance_template (#​8134)
• container: addedstorage_pools tonode_config ingoogle_container_cluster andgoogle_container_node_pool (#​8146)
• containerattached: addedsecurity_posture_config field togoogle_container_attached_cluster resource (#​8137)
• netapp: addedlarge_capacity andmultiple_endpoints togoogle_netapp_volume resource (#​8116)
• resourcemanager: addedtags field togoogle_folder to allow setting tags for folders at creation time (#​8113)

BUG FIXES:

• compute: settingnetwork_ip to "" will no longer cause diff and will be treated the same asnull (#​8128)
• dataproc: updatedgoogle_dataproc_cluster to protect against handling nilkerberos_config values (#​8129)
• dns: added a mutex togoogle_dns_record_set to prevent conflicts when multiple resources attempt to operate on the same record set (#​8139)
• managedkafka: added 5 second wait postgoogle_managed_kafka_topic creation to fix eventual consistency errors (#​8149)

v6.2.0

Compare Source

FEATURES:

• New Data Source:google_certificate_manager_certificates (#​8099)
• New Resource:google_backup_dr_backup_vault (#​8083)
• New Resource:google_scc_v2_folder_scc_big_query_export ([#​8079](https://redirect.git