v7.7.0

BREAKING CHANGES:

• discoveryengine: changed type of google_discovery_engine_data_connector.entities.params. Previously, it was a map of string keys to string values; now, it must be a JSON-encoded string containing an object. This change is being made in a minor release because the field wasn't usable as intended – specifically, all current valid uses require mapping strings to lists of strings. (#10863)

FEATURES:

• New Data Source: google_network_management_connectivity_tests (#10856)
• New Resource: google_apigee_developer_app (#10851)
• New Resource: google_discovery_engine_license_config (#10848)
• New Resource: google_iam_workforce_pool_provider_scim_tenant (#10834)
• New Resource: google_kms_project_kaj_policy_config (#10850)
• New Resource: google_saas_runtime_tenant (#10841)

IMPROVEMENTS:

• apigee: updated the scopes argument in google_apigee_api_product resource to be order-insensitive. (#10851)
• beyondcorp: added proxy_protocol_config and service_discovery fields to google_beyondcorp_security_gateway resource (#10842)
• cloudrunv2: added health_check_disabled field to google_cloud_run_v2_service resource. (#10839)
• compute: added params field to google_compute_router resource (GA) (#10844)
• discoveryengine: added connector_modes, sync_mode, incremental_refresh_interval, auto_run_disabled, and incremental_sync_disabled fields to google_discovery_engine_data_connector resource (#10863)
• discoveryengine: added kms_key_name field to google_discovery_engine_search_engine resource (#10863)
• dlp: added publish_to_dataplex_catalog field to discovery_config resource (#10849)
• gkeonprem: made it possible to set the on_prem_version field on google_gkeonprem_vmware_node_pool (previously output-only) (#10847)
• memcache: added deletion_protection field to memcache_instance to make deleting them require an explicit intent. memcache_instance resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#10846)
• metastore: added tags field to google_dataproc_metastore_service and 'google_dataproc_metastore_federation' resources to allow setting tags for services and federation at creation time (#10854)
• networksecurity: added URL_FILTERING option to enum field type for google_network_security_security_profile resource (#10829)
• networksecurity: added url_filtering_profile field to google_network_security_security_profile_group resource (#10829)
• networksecurity: added url_filtering_profile field to google_network_security_security_profile resource (#10829)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#10827)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#10827)

BUG FIXES:

• bigqueryanalyticshub: fixed google_bigquery_analytics_hub_listing_subscription import (#10855)
• discoveryengine: fixed bug where it wasn't possible to specify values for knowledgeBaseSysId or catalogSysId in google_discovery_engine_data_connector.entities.params. (#10863)

v7.6.0

DEPRECATIONS:

• networksecurity: deprecated ignore_case, exact, prefix, suffix and contains fields in http_rules.from.not_sources.principals and http_rules.from.sources.principals blocks in google_network_security_authz_policy resource. Use the equivalent fields in http_rules.from.not_sources.principals.principal or http_rules.from.sources.principals.principal instead. (#10809)

BREAKING CHANGES:

• container: node_config blocks that had set kubelet_config without explicitly setting cpu_cfs_quota implicitly set cfu_cfs_quota to false when unset. From this version onwards, an unset cpu_cfs_quota will instead match the API default of true true. Resources that are recreated will receive the new value; old resources are unaffected, and may change values by explicitly setting the intended one. (#10823)
• storageinsights: removed activity_data_retention_period_days field from google_storage_insights_dataset_config resource due to a delayed launch. It will be readded when the feature launches. (#10824)

FEATURES:

• New Resource: google_kms_folder_kaj_policy_config (#10798)
• New Resource: google_vertex_ai_cache_config (#10807)
• New Resource: google_vertex_ai_reasoning_engine (#10797)

IMPROVEMENTS:

• backupdr: added data_source and rules_config_info fields to google_backup_dr_backup_plan_associations datasource (#10802)
• beyondcorp: added external, proxy_protocol, and schema fields to google_beyondcorp_security_gateway_application resource (#10808)
• beyondcorp: changed endpoint_matchers field to not be required anymore in the google_beyondcorp_security_gateway_application resource (#10808)
• bigquery: added reservation field to google_bigquery_job resource (#10796)
• compute: added backend.max_in_flight_requests, backend.max_in_flight_requests_per_instance, backend.max_in_flight_requests_per_endpoint and backend.traffic_duration fields to google_compute_backend_service resource (#10799)
• compute: added shared_secret_wo and shared_secret_wo_version fields to google_compute_vpn_tunnel resource, enabling write-only management of the shared secret. (#10788)
• dlp: added SENSITIVITY_UNKNOWN as possible enum value for actions.tag_resources.tag_conditions.sensitivity_score.score in google_data_loss_prevention_discovery_config resource (#10820)
• dlp: added actions.save_findings.output_config.storage_path field to google_data_loss_prevention_job_trigger resource (#10816)
• lustre: increased creation timeout from 20min to 40min for google_lustre_instance resource (#10817)
• netapp: added hybrid_replication_user_commands field with subfield commands to google_netapp_volume_replication resource (#10813)
• netapp: added replication_schedule, hybrid_replication_type, large_volume_constituent_count fields to hybrid_replication_parameters field in google_netapp_volume resource (#10813)
• networksecurity: added ip_blocks field to google_network_security_authz_policy resource (#10809)
• secretmanager: added ephemeral support for google_secret_manager_secret_version resource (#10821)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#10827)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#10827)
• storagetransfer: added user_project_override and billing_project fields to google_storage_transfer_job resource (#10790)

BUG FIXES:

• container: fixed the default for node_config.kubelet_config.cpu_cfs_quota on google_container_cluster, google_container_node_pool, google_container_cluster.node_pool to align with the API. Terraform will now send a true value when the field is unset on creation, and preserve any previously set value when unset. Explicitly set values will work as defined in configuration. (#10823)

v7.5.0

BREAKING CHANGES:

• netapp: changed peer_ip_addresses field type from String to Array in google_netapp_volume resource, as it was unusable otherwise (#10757)

FEATURES:

• New Data Source: google_artifact_registry_maven_artifacts (#10785)
• New Data Source: google_artifact_registry_npm_packages (#10784)
• New Resource: google_apigee_api_deployment (#10776)
• New Resource: google_discovery_engine_data_connector (#10778)
• New Resource: google_kms_organization_kaj_policy_config (#10777)
• New Resource: google_saas_runtime_rollout_kind (#10764)

IMPROVEMENTS:

• cloudrunv2: added startup_probe and liveness_probe to google_cloud_run_v2_worker_pool resource (#10749)
• compute: added bandwidth_allocation field to google_compute_wire_group resource (#10770)
• compute: added shared_secret_wo and shared_secret_wo_version fields for google_compute_vpn_tunnel resource, enabling write-only management of the shared secret. (#10788)
• dialogflow: added new_recognition_result_notification_config field to google_dialogflow_conversation_profile resource (#10775)
• discoveryengine: added features field to google_discovery_engine_search_engine resource (#10762)
• dlp: added other_cloud_target and other_cloud_starting_location to google_data_loss_prevention_discovery_config (#10773)
• gkebackup: added backup_config.selected_namespace_labels field to google_gke_backup_backup_plan resource (#10756)
• looker: added gemini_enabled field to google_looker_instance resource (#10771)
• netapp: added hot_tier_size_used_gib fields to google_netapp_volume (#10766)
• netapp: added cold_tier_size_used_gib and hot_tier_size_used_gib fields to google_netapp_storage_pool (#10766)
• networksecurity: added type and mirroring_deployment_groups fields to google_network_security_mirroring_endpoint_group resource (#10783)
• oracledatabase: added gcp_oracle_zone field to google_oracle_database_odb_network resource (#10767)
• privilegedaccessmanager: added approval_workflow.steps.id field to google_privileged_access_manager_entitlement resource (#10750)
• pubsub: added support for tags field to google_pubsub_topic and google_pubsub_subscription resources (#10760)
• sql: added point_in_time_restore_context field to google_sql_database_instance (#10786)
• storage: added force_destroy field to google_storage_insights_report_config resource (#10772)
• storageinsights: added activity_data_retention_period_days field to google_storage_insights_dataset_config resource (#10769)
• vertexai: added endpoint_config.private_service_connect_config block to google_vertex_ai_endpoint_with_model_garden_deployment resource (#10754)
• vertexai: added encryption_spec.kms_key_name field to google_vertex_ai_index_endpoint resource (#10787)
• vertexai: added encryption_spec.kms_key_name field to google_vertex_ai_index resource (#10759)

BUG FIXES:

• apihub: fixed a permadiff on config_template in google_apihub_plugin resource (#10758)
• storage: fixed a panic caused by empty cors blocks google_storage_bucket resource (#10781)

v7.4.0

DEPRECATIONS:

• compute: deprecated the option to deploy a container during VM creation using the container startup agent in google_compute_instance. Use alternative services to run containers on your VMs. Learn more at https://cloud.google.com/compute/docs/containers/migrate-containers. (#10725)

FEATURES:

• New Data Source: google_artifact_registry_maven_artifact (#10718)
• New Data Source: google_compute_interconnect_location (#10727)
• New Resource: google_network_services_wasm_plugin (#10742)

IMPROVEMENTS:

• compute: added scheduling.0.skip_guest_os_shutdown field to google_compute_instance_template resource (#10729)
• compute: added scheduling.0.skip_guest_os_shutdown field to google_compute_instance resource (#10729)
• compute: added scheduling.0.skip_guest_os_shutdown field to google_compute_region_instance_template resource (#10729)
• compute: added tunneling_config field to google_compute_service_attachment resource (#10730)
• container: added auto_ipam_config to google_container_cluster resource. (#10737)
• privilegedaccessmanager: added privileged_access.gcp_iam_access.role_bindings.id field to google_privileged_access_manager_entitlement resource (#10743)
• storage: added support for timeouts to google_storage_bucket_iam_binding, google_storage_bucket_iam_member, google_storage_bucket_iam_policy resources (#10726)

BUG FIXES:

• bigtable: fixed node_scaling_factor forcing new instance on google_bigtable_instance when adding new cluster (#10744)
• cloudscheduler: fixed a type assertion panic in google_cloud_scheduler_job when processing HTTP headers with nil or unexpected data types (#10720)
• compute: fixed the Network field cannot be modified issue in google_compute_region_backend_service. Now updating the network field will force the resource to be recreated (#10738)
• netapp: fixed incorrect default value handling in google_netapp_volume for export_policy.rules attributes has_root_access and squash_mode. When not specified, these fields will now take on the API default value with no diff. (#10736)
• netapp: updated google_netapp_storage_pool to source the default value for the qos_type field from the API. If not specified in the configuration, qos_type will now default to the value provided by the NetApp Volumes API. (#10735)
• sql: fixed the permadiffs on disk_size when disk_autoresize is enabled in google_sql_database_instance (#10739)
• workbench: added retry for unable to queue the operation 409 errors in google_workbench_instance resource. (#10733)

v6.50.0

NOTES:

• bigtable: It is recommended for google_bigtable_table_iam_* resources to upgrade to v6.50.0 and switch from instance to instance_name in your configuration before upgrading to v7.X (#10746)

DEPRECATIONS:

• bigtable: deprecated instance in favor of instance_name in google_bigtable_table_iam_* resources (#10746)

IMPROVEMENTS:

• bigtable: added instance_name field to google_bigtable_table_iam_* resources (#10746)

v7.3.0

FEATURES:

• New Data Source: google_backup_dr_data_source_reference (#10707)
• New Resource: google_bigquery_datapolicyv2_data_policy (#10693)
• New Resource: google_saas_runtime_release (#10685)
• New Resource: google_secure_source_manager_hook (#10706)

IMPROVEMENTS:

• cloudrun: added sub_path field to google_cloud_run_service resource. (#10705)
• cloudrunv2: added sub_path field to google_cloud_run_v2_service google_cloud_run_v2_job and google_cloud_run_v2_worker_pool resource. (#10705)
• compute: added labels and label_fingerprint fields to google_compute_security_policy resource (#10696)
• compute: labels under initialize_params are now updatable on google_compute_instance (#10710)
• container: added new fields memory_manager and topology_manager to node_kubelet_config block (#10681)
• datastream: added destination_config.bigquery_destination_config.source_hierarchy_datasets.project_id field to google_datastream_stream resource (#10704)
• discoveryengine: added app_type field to google_discovery_engine_search_engine resource (#10694)
• gkeonprem: added proxy field to google_gkeonprem_vmware_admin_cluster resource (#10702)
• healthcare: added validation_config to google_healthcare_fhir_store resource (#10700)
• iamworkforcepool: added extended_attributes field to workforce_pool_provider resource (#10688)
• netapp: added export_policy.rules.squash_mode field to google_netapp_volume resource. (#10711)
• privateca: added encryption_spec field to google_privateca_ca_pool resource (#10699)
• run: added connector to vpcAccess on google_cloud_run_v2_worker_pool resource (#10701)
• tags: added the DATA_GOVERNANCE value to google_tags_tag_key.purpose (#10687)

BUG FIXES:

• bigquery: updated the schema change detection for google_bigquery_table to take into account presence of row access policy (#10683)
• compute: fixed allow_global_access to correctly be immutable for google_compute_forwarding_rule resources with load balancing scheme of INTERNAL_MANAGED (#10692)
• compute: fixed a crash in google_compute_security_policy due to a changed API response for empty match.0.expr_options blocks (#10715)
• dialogflow: added support for non-global endpoints for google_dialogflow_conversation_profile (#10712)
• publicca: use RawURLEncoding instead of URLEncoding for unpadded base64 encoding (#10682)
• secretmanager: fixed a panic in google_secret_manager_secret_version in a secret_manager (#10698)
• workbench: fixed issue that resource creation with computed labels field fails in google_workbench_instance resource (#10691)
• workbench: made report-notebook-metrics metadata key settable for google_workbench_instance (#10690)

v6.49.3

BUG FIXES:

• compute: fixed a crash in google_compute_security_policy due to a changed API response for empty match.0.expr_options blocks (#10715)

v7.2.0

FEATURES:

• New Data Source: google_artifact_registry_python_package (#10671)
• New Data Source: google_backup_dr_data_source_references (#10672)
• New Resource: google_discovery_engine_acl_config (#10680)
• New Resource: google_saas_runtime_unit_kind (#10652)

IMPROVEMENTS:

• chronicle: made the scope_info field in google_chronicle_reference_list configurable (#10663)
• compute: added header_action to path_matcher and default_service level on google_compute_region_url_map resource (#10665)
• container: added secret_manager_config.rotation_config field to google_container_cluster resource (#10659)
• container: added new fields memory_manager and topology_manager to google_container_cluster.node_config.kubelet_config and google_container_node_pool.node_config.kubelet_config (#10681)
• healthcare: added consent_config field to google_healthcare_fhir_store resource (#10666)
  New Resource: google_network_management_organization_vpc_flow_logs_config (#10660)
• sql: added final_backup_description and final_backup_config fields to google_sql_database_instance resource (#10678)
• storage: added aws_s3_compatible_data_source to google_storage_transfer_job resource (#10656)

BUG FIXES:

• provider: fixed an issue with universe_domain where the provider tried to connect to "googleapis.com" for user email logging when universe_domain was set (#10654)
• container: fixed a faulty diff for arrays on user_managed_keys_config that caused faulty cluster updates to be triggered in google_container_cluster (#10668)
• osconfig: fixed permadiff in google_osconfig_patch_deployment where patch_config.yum.minimal doesn't send false for empty values (#10661)

v7.1.1

• bigtable: fixed an error encountered when applying google_bigtable_table_iam_* resources after upgrading to 7.x and replacing instance with instance_name (#10667)

v7.1.0

DEPRECATIONS:

• container: deprecated enterprise_config field in google_container_cluster resource. GKE Enterprise features are now available without an Enterprise tier. (#10646)
• storage: removed deprecated status for field to detect_md5hash in google_storage_bucket_object resource (#10605)

FEATURES:

• New Data Source: google_iap_web_forwarding_rule_service_iam_policy (#10621)
• New Resource: google_iap_web_forwarding_rule_service_iam_binding (#10621)
• New Resource: google_iap_web_forwarding_rule_service_iam_member (#10621)
• New Resource: google_iap_web_forwarding_rule_service_iam_policy (#10621)

IMPROVEMENTS:

• artifactregistry: added registry_uri as attribute to google_artifact_registry_repository (#10618)
• backupdr: added create_time field to google_backup_dr_backup data source (#10626)
• cloudbuild: added worker_config.enable_nested_virtualization field to google_cloudbuild_worker_pool resource (#10619)
• cloudrunv2: added support for multi_region_settings field to google_cloud_run_v2_service resource (#10607)
• compute: add params.resource_manager_tags field to the google_compute_region_backend_service (#10634)
• compute: added public_delegated_sub_prefixs field to resource google_compute_public_delegated_prefix (#10638)
• compute: added update_strategy field to google_compute_network_peering resource (#10623)
• firestore: added unique field to google_firestore_index resource (#10617)
• netapp: added qos_type and available_throughput_mibps fields to google_netapp_storage_pool resource (#10615)
• netapp: added throughput_mibps field to google_netapp_volume resource (#10615)
• networkservices: allowed EXPLICIT_ROUTING_MODE for routing_mode on google_network_services_gateway resource (#10608)
• sql: added consumer_network_status, ip_address, and status fields to psc_auto_connections field on google_sql_database_instance resource (#10637)
• storagetransfer: added service_account field to google_storage_transfer_job resource (#10635)
• storagetransfer: added transfer_spec.aws_s3_data_source.credentials_secret to google_storage_transfer_job resource (#10609)

BUG FIXES:

• compute: fixed certain spurious diffs for google_compute_region_backend_service.backend.group (#10611)
• compute: fixed permadiff on google_compute_region_network_endpoint_group when no network is specified (#10625)
• memorystore: fixed permadiffs that cause destroy+recreate on new google_memorystore_instance when desired_psc_auto_connections is set (#10648)
• netapp: fixed a permadiff on total_iops in google_netapp_storage_pool resource (#10643)
• oracledatabase: fixed permadiffs on google_oracle_database_autonomous_database resource for the odb_network and odb_subnet fields (#10627)