feat(deps): Update Terraform Google Provider to v5 (major) - autoclosed #8
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
>= 3.50, < 5.0
->>= 3.50, < 5.32
5.32.0
>= 3.50, < 5.0
->>= 3.50, < 5.32
5.32.0
Release Notes
hashicorp/terraform-provider-google (google)
v5.31.1
Compare Source
BUG FIXES:
google_service_account
to reduce eventual consistency errors. See https://github.com/hashicorp/terraform-provider-google/issues/18024 for more details (#18261)v5.31.0
Compare Source
FEATURES:
google_compute_subnetworks
(#18159)google_dataplex_aspect_type
(#18201)google_dataplex_entry_group
(#18188)google_kms_autokey_config
(#18179)google_kms_key_handle
(#18179)google_network_services_lb_route_extension
(#18195)IMPROVEMENTS:
instance_ip_mode
to resourcegoogle_app_engine_flexible_app_version
resource (beta) (#18168)external_data_configuration.bigtable_options
togoogle_bigquery_table
(#18181)google_composer_user_workloads_secret
via the "{{environment}}/{{name}}" format. (#7390)google_composer_user_workloads_secret
. (#7390)TLS_JA3_FINGERPRINT
andUSER_IP
options in fieldrate_limit_options.enforce_on_key
togoogle_compute_security_policy
resource (#18167)google_compute_region_ssl_policy
'sregion
field to optional and allow to be inferred from environment (#18178)subnet_length
field togoogle_compute_interconnect_attachment
resource (#18187)containerd_config
field and subfields togoogle_container_cluster
andgoogle_container_node_pool
resources, to allow those resources to access private image registries. (#18160)enable_autopilot
andworkload_identity_config
to be set ingoogle_container_cluster
resource. (#18166)create_without_validation
field togoogle_datastream_connection_profile
,google_datastream_private_connection
andgoogle_datastream_stream
resources (#18176)trust_config
,min_tls_version
,tls_feature_profile
andcustom_tls_features
fields togoogle_network_security_tls_inspection_policy
resource (#18139)load_balancing_scheme
immutable in resourcegoogle_network_services_lb_traffic_extension
, as in-place updating is always failing (#18195)extension_chains.extensions.authority
andextension_chains.extensions.timeout
optional in resourcegoogle_network_services_lb_traffic_extension
(#18195)LOAD_BALANCING_SCHEME_UNSPECIFIED
from the fieldload_balancing_scheme
in resourcegoogle_network_services_lb_traffic_extension
(#18195)cloud_storage_config.filename_datetime_format
field togoogle_pubsub_subscription
resource (#18180)type
ofaccelerator_config
togoogle_tpu_v2_vm
resource (#18148)BUG FIXES:
monitored_resource.labels
property in thegoogle_monitoring_uptime_check_config
resource (#18174)autoclass
block is generating permadiff whenever the block is removed from the config ingoogle_storage_bucket
resource (#18197)transfer_spec.0.aws_s3_data_source.0.aws_access_key
resource_storage_transfer_job
(#18190)v5.30.0
Compare Source
v5.29.1
Compare Source
5.29.1 (May 14, 2024)
BREAKING CHANGES:
secondary_ip_range.reserved_internal_range
field fromgoogle_compute_subnetwork
(18133)v5.29.0
Compare Source
NOTES:
md5_authentication_key
field ingoogle_compute_router_peer
resource. The field was introduced in v5.12.0, but documentation was unintentionally omitted at that time. (#17991)FEATURES:
google_bigtable_authorized_view
(#18006)google_integration_connectors_managed_zone
(#18029)google_network_connectivity_regional_endpoint
(#18014)google_network_security_security_profile
(#18025)google_network_security_security_profile_group
(#18025)google_network_security_firewall_endpoint
(#18025)google_network_security_firewall_endpoint_association
(#18025)IMPROVEMENTS:
custom_target
field togoogle_clouddeploy_target
resource (#18000)google_cloud_build_repo
tocustom_target_type
resource (#18040)preconfigured_waf_config
field togoogle_compute_region_security_policy_rule
resource; (#18039)rate_limit_options
field togoogle_compute_region_security_policy_rule
resource; (#18039)security_profile_group
,tls_inspect
togoogle_compute_firewall_policy_rule
(#18000)security_profile_group
,tls_inspect
togoogle_compute_network_firewall_policy_rule
(#18000)reserved_internal_range
andsecondary_ip_ranges.reserved_internal_range
togoogle_compute_subnetwork
resource (#18026)dns_config.additive_vpc_scope_dns_domain
field togoogle_container_cluster
resource (#18031)enable_nested_virtualization
field togoogle_container_node_pool
andgoogle_container_cluster
resource. (#18015)extra_attributes_oauth2_client
field togoogle_iam_workforce_pool_provider
resource (#18027)maximum_lifetime
field togoogle_privateca_certificate_template
resource (#18000)v5.28.0
Compare Source
DEPRECATIONS:
create_sample_workflows
andprovision_gmek
fields ingoogle_integrations_client
. (#17945)FEATURES:
google_storage_buckets
(#17960)google_compute_security_policy_rule
(#17937)IMPROVEMENTS:
maintenance_update_policy
field togoogle_alloydb_cluster
resource (#17954)external_dataset_reference
ingoogle_bigquery_dataset
to GA (#17944)config.software_config.image_version
in-place update to GA in resourcegoogle_composer_environment
(#17986)node_config.secondary_boot_disks
field togoogle_container_node_pool
(#17962)create_sample_integrations
field togoogle_integrations_client
, replacing deprecated fieldcreate_sample_workflows
. (#17945)redis_configs
field togoogle_redis_cluster
resource (#17956)BUG FIXES:
google_dns_managed_zone
resources was blocked by any associated SOA-typegoogle_dns_record_set
resources (#17989)google_storage_bucket_object
andgoogle_storage_bucket_objects
data sources would ignore custom endpoints (#17952)v5.27.0
Compare Source
FEATURES:
google_storage_bucket_objects
(#17920)google_compute_security_policy_rule
(#17937)google_data_loss_prevention_discovery_config
(#17887)google_integrations_auth_config
(#17917)google_network_connectivity_internal_range
(#17909)IMPROVEMENTS:
network_config
field togoogle_alloydb_instance
resource (#17921)public_ip_address
field togoogle_alloydb_instance
resource (#17921)forward_proxy_uri
field togoogle_apigee_environment
resource (#17902)data_masking_policy.routine
field togoogle_bigquery_data_policy
resource (#17885)server_tls_policy
field togoogle_compute_region_target_https_proxy
resource (#17934)intercept_children
field togoogle_logging_organization_sink
andgoogle_logging_folder_sink
resources (#17932)service_agent_authentication
field togoogle_monitoring_uptime_check_config
resource (#17929)subject_key_id
field togoogle_privateca_certificate
andgoogle_privateca_certificate_authority
resources (#17923)version_destroy_ttl
field togoogle_secret_manager_secret
resource (#17888)BUG FIXES:
google_app_engine_standard_app_version.automatic_scaling
when the block is unset in configuration (#17905)enable_google_ml_integration
field ingoogle_sql_database_instance
resource (#17878)v5.26.0
Compare Source
FEATURES:
google_project_iam_member_remove
(#17871)IMPROVEMENTS:
api_consumer_data_location
,api_consumer_data_encryption_key_name
, andcontrol_plane_encryption_key_name
ingoogle_apigee_organization
(#17874)remote_repository_config.<facade>_repository.custom_repository.uri
field togoogle_artifact_registry_repository
resource. (#17840)resource_tags
field togoogle_bigquery_table
resource (#17876)ownership_scope
field togoogle_billing_budget
resource (#17868)build_config.service_account
field togoogle_cloudfunctions2_function
resource (#17841)api_method
to datasourcegoogle_active_folder
so you can use eitherSEARCH
orLIST
to find your folder (#17877)google_storage_bucket
resource (#17806)BUG FIXES:
google_apigee_organization.properties.property
. (#17850)metadata.0.labels
andmetadata.0.annotations
fields don't appear in terraform plan when creating resourcegoogle_cloud_run_service
andgoogle_cloud_run_domain_mapping
(#17815)dns
data sources (#17847)create_ignore_already_exists
on existing resources ingoogle_service_account
. (#17856)enable_google_ml_integration
field ingoogle_sql_database_instance
resource (#17878)name
field ingoogle_storage_bucket
resource (#17858)google_vmwareengine_private_cloud
(#17875)v5.25.0
Compare Source
FEATURES:
google_tags_tag_keys
(#17782)google_tags_tag_values
(#17782)IMPROVEMENTS:
google_bigquery_table
resource (#17777)endpoint_types
field togoogle_compute_router_nat
resource (#17771)google_compute_security_policy
resource (#17793)google_compute_instance_settings
to GA (#17781)stateful_ha_config
field togoogle_container_cluster
resource (#17796)vector_config
field togoogle_firestore_index
resource (#17758)backup_schedule.rpo_config
field togoogle_gke_backup_backup_plan
resource (#17805)disabled
field togoogle_network_security_firewall_endpoint_association
resource; (#17762)enable_google_ml_integration
field togoogle_sql_database_instance
resource (#17798)google_storage_bucket
resource (#17806)preferred_zone
andsecondary_zone
fields togoogle_vmwareengine_private_cloud
resource (#17803)BUG FIXES:
google_network_security_firewall_endpoint_association
resources could not be created due to a bad parameter (#17762)google_privateca_certificate_authority
resource (#17783)v5.24.0
Compare Source
IMPROVEMENTS:
enable_cilium_clusterwide_network_policy
field togoogle_container_cluster
resource (#17738)node_pool_auto_config.resource_manager_tags
field togoogle_container_cluster
resource (#17715)disable_bundled_ingress
field togoogle_gkeonprem_vmware_cluster
resource (#17718)node_type
andprecise_size_gb
fields togoogle_redis_cluster
(#17742)project_number
attribute togoogle_storage_bucket
resource and data source (#17719)project
argument togoogle_storage_bucket
data source. This will not impact reading the resource's data, instead this helps users avoid calls to the Compute API within the data source. (#17719)BUG FIXES:
google_app_engine_flexible_app_version
due to thedeployment
field not being returned by the API (#17744)google_bigquery_table
had aprimary_key.columns
entry set to""
(#17721)google_compute_region_target_https_proxy
andgoogle_compute_target_https_proxy
resources. (#17733)v5.23.0
Compare Source
NOTES:
DEPRECATIONS:
attestation.external_protection_level_options
in favor ofexternal_protection_level_options
ingoogle_kms_crypto_key_version
(#17704)FEATURES:
google_apphub_application
(#17679)google_cloud_quotas_quota_preference
(#17637)google_vertex_ai_deployment_resource_pool
(#17707)google_integrations_client
(#17640)IMPROVEMENTS:
dataGovernanceType
togoogle_bigquery_routine
resource (#17689)external_data_configuration.json_extension
togoogle_bigquery_table
(#17663)cloud_router_ipv6_address
,customer_router_ipv6_address
fields togoogle_compute_interconnect_attachment
resource (#17692)generated_id
field togoogle_compute_region_backend_service
resource (#17639)google_integrations_client
resource (#17678)crypto_key_backend
field togoogle_kms_crypto_key
resource (#17704)scheduled_backup
field togoogle_dataproc_metastore_service
resource (#17673)name_from_id
for retrieving the short-form name of a resource from its self link or id (#17694)project_from_id
for retrieving the project id from a resource's self link or id (#17694)region_from_zone
for deriving a region from a zone's name (#17694)location_from_id
,region_from_id
, andzone_from_id
for retrieving the location/region/zone names from a resource's self link or id (#17694)BUG FIXES:
google_cloud_run_v2_job
creation fails (#17711)google_cloud_run_v2_service
creation fails (#17711)google_container_cluster
permadiff whenmaster_ipv4_cidr_block
is set for a private flexible cluster (#17687)enableStreamingEngine
is set as aparameter
value ingoogle_dataflow_flex_template_job
(#17712)external_protection_level_options
field ingoogle_kms_crypto_key_version
resource (#17704)v5.22.0
Compare Source
BREAKING CHANGES:
billing_project_id
togoogle_network_security_firewall_endpoint
resource. Any configuration withoutbilling_project_id
specified will cause resource creation fail (beta) (#17630)FEATURES:
google_cloud_quotas_quota_info
(#17564)google_cloud_quotas_quota_infos
(#17617)google_access_context_manager_service_perimeter_dry_run_resource
(#17614)IMPROVEMENTS:
google_access_context_manager_service_perimeter_dry_run_resource
(#17614)google_cloud_run_v2_service
(#17594)count
to validate number of DAG processors ingoogle_composer_environment
(#17625)SEV_LIVE_MIGRATABLE_V2
for theguest_os_features
ofgoogle_compute_disk
(#17629)status.all_instances_config.revision
field togoogle_compute_instance_group_manager
andgoogle_compute_region_instance_group_manager
(#17595)path_template_match
to resourcegoogle_compute_region_url_map
(#17571)path_template_rewrite
to resourcegoogle_compute_region_url_map
(#17571)ingestion_data_source_settings
field togoogle_pubsub_topic
resource (#17604)BUG FIXES:
access_context_manager_service_perimeter_ingress_policy
andaccess_context_manager_service_perimeter_egress_policy
where updates could not be applied after initial creation. Any updates applied to these resources will now involve their recreation. To ensure that new policies are added before old ones are removed, add alifecycle
block withcreate_before_destroy = true
to your resource configuration alongside other updates. (#17596)google_firebase_android_app
resource'spackage_name
field required and immutable. This prevents API errors encountered by users who attempted to update or leave that field unset in their configurations. (#17585)version_retention_period
in the resourcegoogle_spanner_database
and directly returned error from backend (#17621)v5.21.0
Compare Source
FEATURES:
google_apphub_discovered_service
(#17548)google_apphub_discovered_workload
(#17553)google_cloud_quotas_quota_info
(#17564)google_apphub_workload
(#17561)google_firebase_app_check_device_check_config
(#17517)google_iap_tunnel_dest_group
(#17533)google_kms_ekm_connection
(#17512)google_apphub_application
(#17499)google_apphub_service
(#17562)google_apphub_service_project_attachment
(#17536)google_network_security_firewall_endpoint_association
(#17540)IMPROVEMENTS:
scaling.min_instance_count
ingoogle_cloud_run_v2_service
. (#17501)metric.single_instance_assignment
andmetric.filter
togoogle_compute_region_autoscaler
(#17519)queued_provisioning
togoogle_container_node_pool
(#17549)vcenter_network
to be set ingoogle_gkeonprem_vmware_cluster
, previously it was output-only (#17505)ephemeral_directories
ingoogle_workstations_workstation_config
(#17515)BUG FIXES:
SERVERLESS
ingoogle_compute_region_network_endpoint_group
resource (#17500)google_notebooks_instance
resources (#17559)no_age
field always generates change ingoogle_storage_bucket
resource. (#17513)v5.20.0
Compare Source
FEATURES:
google_clouddeploy_custom_target_type_iam_*
(#17445)IMPROVEMENTS:
type
field togoogle_certificate_manager_dns_authorization
resource (#17459)network_url
attribute to theconsumer_accept_list
-block of thegoogle_compute_service_attachment
resource (#17492)policycontroller.policy_controller_hub_config.policy_content.bundles
andpolicycontroller.policy_controller_hub_config.deployment_configs
fields togoogle_gke_hub_feature_membership
(#17483)BUG FIXES:
google_artifact_repository.docker_config
field is unset (#17484)google_bigquery_dataset.dataset_id
(#17449)google_kms_crypto_key_version.attestation.cert_chains
properties were incorrectly set to type string (#17486)v5.19.0
Compare Source
FEATURES:
google_clouddeploy_automation
(#17427)google_clouddeploy_target_iam_*
(#17368)IMPROVEMENTS:
remote_function_options
field togoogle_bigquery_routine
resource (#17382)location
field togoogle_certificate_manager_dns_authorization
resource (#17358)google_composer_environment
(#17361)certificate_manager_certificates
field togoogle_compute_region_target_https_proxy
resource (#17365)all_instances_config
field in resourcesgoogle_compute_instance_group_manager
andgoogle_compute_region_instance_group_manager
to GA (#17414)enable_confidential_storage
fromnode_config
ingoogle_container_cluster
andgoogle_container_node_pool
to GA (#17367)namespace_labels
field togoogle_gke_hub_scope
resource (#17421)BUG FIXES:
auto_create_network
is false ingoogle_project
(#17419)v5.18.0
Compare Source
BREAKING CHANGES:
policy_sets
andpolicy_sets.policies
required ingoogle_securityposture_posture
. API validation already enforced this, so no resources could be provisioned without these (#17303)FEATURES:
google_compute_forwarding_rules
(#17342)google_firebase_app_check_app_attest_config
(#17279)google_firebase_app_check_play_integrity_config
(#17279)google_firebase_app_check_recaptcha_enterprise_config
(#17327)google_firebase_app_check_recaptcha_v3_config
(#17327)google_migration_center_preference_set
(#17291)google_netapp_volume_replication
(#17348)IMPROVEMENTS:
version_id
field ongoogle_cloudfunctions_function
(#17273)google_composer_environment
(#17345)network_interface.stack_type
field ongoogle_compute_instance
resource. (#17295)node_config.resource_manager_tags
field togoogle_container_cluster
resource (#17346)node_config.resource_manager_tags
field togoogle_container_node_pool
resource (#17346)membership_id
andmembership_location
underfleet
ingoogle_container_cluster
resource (#17305)custom_domain
field togoogle_looker_instance
resource (#17301)restore_parameters
and output-only fieldsstate
,state_details
andcreate_time
togoogle_netapp_volume
resource (#17293)container_image
field togoogle_workbench_instance
resource (#17326)shielded_instance_config
field togoogle_workbench_instance
resource (#17306)BUG FIXES:
principal
/principalSets
(iamMember
) ingoogle_bigquery_dataset_iam_member
. (#17292)event_config.trigger_region
ingoogle_cloudfunctions2_function
resulted in a permanent diff. The field now pulls a default value from the API when unset. (#17328)stateful_(internal|external)_ip
would not trigger an update forgoogle_compute_(region_)instance_group_manager
(#17297)min_ports_per_vm
ingoogle_compute_router_nat
when the field is unset by making the field default to the API-set value (#17337)google_dataflox_job
to return an error instead if a job's Environment field is nil when reading job information (#17344)tag
field to default to the API's value if not specified ingoogle_notebooks_instance
(#17323)v5.17.0
Compare Source
NOTES:
google_cloudbuildv2_connection
, there should be no user-facing impact (#17222)DEPRECATIONS:
relay_mode
field ingoogle_container_cluster.monitoring_config.advanced_datapath_observability_config
in favor ofenable_relay
field,relay_mode
field will be removed in a future major release (#17262)FEATURES:
google_firebase_app_check_debug_token
(#17242)google_clouddeploy_custom_target_type
(#17254)IMPROVEMENTS:
google_cloud_asset_resources_search_all
datasourcecanary_revision_tags
,prior_revision_tags
,stable_revision_tags
, andstable_cutback_duration
togoogle_clouddeploy_delivery_pipeline
version_id
ongoogle_cloudfunctions_function
(#17273)user_ip_request_headers
field ongoogle_compute_security_policy
resource to GA (#17271)enable_relay
field togoogle_container_cluster.monitoring_config.advanced_datapath_observability_config
(#17262)http_endpoint.uri
andnetwork_config.network_attachment
togoogle_eventarc_trigger
(#17237)reject_duplicate_message
field togoogle_healthcare_hl7_v2_store
resource (#17267)client
,permissions
,monitoring
andmfa
fields togoogle_identity_platform_config
(#17225)desired_state
field togoogle_notebooks_instance
(#17268)feature_registry_source
field togoogle_vertex_ai_feature_online_store_featureview
resource (#17264)desired_state
field togoogle_workbench_instance
resource (#17270)BUG FIXES:
resource_manager_tags
updatable ongoogle_compute_instance_template
andgoogle_compute_region_instance_template
(#17256)google_notebooks_instance
whenkms_key
orservice_account_scopes
are changed server-side (#17232)v5.16.0
Compare Source
FEATURES:
google_clouddeploy_delivery_pipeline_iam_*
(#17180)google_compute_instance_group_membership
(#17188)google_discovery_engine_search_engine
(#17146)google_firebase_app_check_service_config
(#17155)IMPROVEMENTS:
table_replication_info
field onresource_bigquery_table
resource to GA (#17181)google_network_security_address_group
(#17183)goog-terraform-provisioned
to identify resources that were created by Terraform when viewing/editing these resources in other tools. (#17170)v5.15.0
Compare Source
FEATURES:
google_compute_machine_types
(#17107)google_blockchain_node_engine_blockchain_nodes
(#17096)google_compute_region_network_endpoint
(#17137)google_discovery_engine_chat_engine
(#17145)google_discovery_engine_search_engine
(#17146)google_netapp_volume_snapshot
(#17138)IMPROVEMENTS:
INTERNET_IP_PORT
andINTERNET_FQDN_PORT
options for thegoogle_compute_region_network_endpoint_group
resource. (#17137)creation_timestamp
togoogle_compute_instance_group_manager
andgoogle_compute_region_instance_group_manager
. (#17110)disk_id
attribute togoogle_compute_disk
resource (#17112)stack_type
attribute forgoogle_compute_interconnect_attachment
resource. (#17139)google_compute_security_policy
resource'sjson_parsing
field to accept the valueSTANDARD_WITH_GRAPHQL
(#17097)reserved_ip_range_id
field togoogle_memcache_instance
resource (#17101)deletion_policy
field togoogle_netapp_volume
resource (#17111)BUG FIXES:
database_flags
in secondarygoogle_alloydb_instance
resources would cause a diff, as they are copied from the primary (#17128)google_filestore_instance.source_backup
field configurable (#17099)google_vmwareengine_private_cloud
resources when upgrading provider version from <5.10.0 (#17135v5.14.0
Compare Source
FEATURES:
google_discovery_engine_data_store
(#17084)google_securityposture_posture_deployment
(#17085)google_securityposture_posture
(#17079)IMPROVEMENTS:
cleanup_policies
andcleanup_policy_dry_run
fields to GA forgoogle_artifactregistry_repository
resource (#17074)data_retention_config
field togoogle_composer_environment
resource (#17050)google_logging_project_bucket_config
resource to be created using the asynchronous create method (#17067)use_table_schema
field togoogle_pubsub_subscription
resource (#17054)call_log_level
field togoogle_workflows_workflow
resource (#17051)BUG FIXES:
build_config.docker_repository
field is not specified ongoogle_cloudfunctions2_function
resource (#17072)iap
field is unset forgoogle_compute_region_backend_service
resource (#17071)destination.cloud_function
field ongoogle_eventarc_trigger
resource by making it output-only (#17052)v5.13.0
Compare Source
NOTES:
google_cloudbuildv2_repository
, there should be no user-facing impact (#16969)labels
andterraform_labels
fields in immutable resources (#17016)FEATURES:
google_netapp_backup_policy
(#16962)google_netapp_volume
(#16990)google_network_security_address_group_iam_*
(#17013)google_vertex_ai_feature_group_feature
(#17015)IMPROVEMENTS:
database_version
as an input ongoogle_alloydb_cluster
resource (#16967)spark_options
field togoogle_bigquery_routine
resource (#17028)nfs
andgcs
fields togoogle_cloud_run_v2_service.template.volumes
(#16972)tcp_socket
field togoogle_cloud_run_v2.template.containers.liveness_probe
(#16972)enable_confidential_compute
field togoogle_compute_instance.boot_disk.initialize_params
(#16968)enable_confidential_compute
field togoogle_compute_disk
resource ([#16968](https://togithub.com/hashicorp/terraform-provider-google/pull/1696Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.