fix(deps): Allow Terraform Google Provider to v5

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	>= 4.48, < 5.0 -> >= 4.48, < 5.24	5.24.0
google (source)	required_provider	major	>= 4.74, < 5.0 -> >= 4.74, < 5.24	5.24.0
google (source)	required_provider	major	< 5.0 -> < 5.24	5.24.0
google-beta (source)	required_provider	major	>= 4.48, < 5.0 -> >= 4.48, < 5.24	5.24.0
google-beta (source)	required_provider	major	< 5.0 -> < 5.24	5.24.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.23.0

Compare Source

v5.22.0

Compare Source

BREAKING CHANGES:

• networksecurity: added required field billing_project_id to google_network_security_firewall_endpoint resource. Any configuration without billing_project_id specified will cause resource creation fail (beta) (#​17630)

FEATURES:

• New Data Source: google_cloud_quotas_quota_info (#​17564)
• New Data Source: google_cloud_quotas_quota_infos (#​17617)
• New Resource: google_access_context_manager_service_perimeter_dry_run_resource (#​17614)

IMPROVEMENTS:

• accesscontextmanager: supported managing service perimeter dry run resources outside the perimeter via new resource google_access_context_manager_service_perimeter_dry_run_resource (#​17614)
• cloudrunv2: added plan-time validation to restrict number of ports to 1 in google_cloud_run_v2_service (#​17594)
• composer: added field count to validate number of DAG processors in google_composer_environment (#​17625)
• compute: added enumeration value SEV_LIVE_MIGRATABLE_V2 for the guest_os_features of google_compute_disk (#​17629)
• compute: added status.all_instances_config.revision field to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#​17595)
• compute: added field path_template_match to resource google_compute_region_url_map (#​17571)
• compute: added field path_template_rewrite to resource google_compute_region_url_map (#​17571)
• pubsub: added ingestion_data_source_settings field to google_pubsub_topic resource (#​17604)
• storage: added 'soft_delete_policy' to 'google_storage_bucket' resource (#​17624)

BUG FIXES:

• accesscontextmanager: fixed an issue with access_context_manager_service_perimeter_ingress_policy and access_context_manager_service_perimeter_egress_policy where updates could not be applied after initial creation. Any updates applied to these resources will now involve their recreation. To ensure that new policies are added before old ones are removed, add a lifecycle block with create_before_destroy = true to your resource configuration alongside other updates. (#​17596)
• firebase: made the google_firebase_android_app resource's package_name field required and immutable. This prevents API errors encountered by users who attempted to update or leave that field unset in their configurations. (#​17585)
• spanner: removed validation function for the field version_retention_period in the resource google_spanner_database and directly returned error from backend (#​17621)

v5.21.0

Compare Source

FEATURES:

• New Data Source: google_apphub_discovered_service (#​17548)
• New Data Source: google_apphub_discovered_workload (#​17553)
• New Data Source: google_cloud_quotas_quota_info (#​17564)
• New Resource: google_apphub_workload (#​17561)
• New Resource: google_firebase_app_check_device_check_config (#​17517)
• New Resource: google_iap_tunnel_dest_group (#​17533)
• New Resource: google_kms_ekm_connection (#​17512)
• New Resource: google_apphub_application (#​17499)
• New Resource: google_apphub_service (#​17562)
• New Resource: google_apphub_service_project_attachment (#​17536)
• New Resource: google_network_security_firewall_endpoint_association (#​17540)

IMPROVEMENTS:

• cloudrunv2: added support for scaling.min_instance_count in google_cloud_run_v2_service. (#​17501)
• compute: added metric.single_instance_assignment and metric.filter to google_compute_region_autoscaler (#​17519)
• container: added queued_provisioning to google_container_node_pool (#​17549)
• gkeonprem: allowed vcenter_network to be set in google_gkeonprem_vmware_cluster, previously it was output-only (#​17505)
• workstations: added support for ephemeral_directories in google_workstations_workstation_config (#​17515)

BUG FIXES:

• compute: allowed sending empty values for SERVERLESS in google_compute_region_network_endpoint_group resource (#​17500)
• notebooks: fixed an issue where default tags would cause a diff recreating google_notebooks_instance resources (#​17559)
• storage: fixed an issue where two or more lifecycle rules with different values of no_age field always generates change in google_storage_bucket resource. (#​17513)

v5.20.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_custom_target_type_iam_* (#​17445)

IMPROVEMENTS:

• certificatemanager: added type field to google_certificate_manager_dns_authorization resource (#​17459)
• compute: added the network_url attribute to the consumer_accept_list-block of the google_compute_service_attachment resource (#​17492)
• gkehub: added support for policycontroller.policy_controller_hub_config.policy_content.bundles and
  policycontroller.policy_controller_hub_config.deployment_configs fields to google_gke_hub_feature_membership (#​17483)

BUG FIXES:

• artifactregistry: fixed permadiff when google_artifact_repository.docker_config field is unset (#​17484)
• bigquery: corrected plan-time validation on google_bigquery_dataset.dataset_id (#​17449)
• kms: fixed issue where google_kms_crypto_key_version.attestation.cert_chains properties were incorrectly set to type string (#​17486)

v5.19.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_automation(#​17427)
• New Resource: google_clouddeploy_target_iam_* (#​17368)

IMPROVEMENTS:

• bigquery: added remote_function_options field to google_bigquery_routine resource (#​17382)
• certificatemanager: added location field to google_certificate_manager_dns_authorization resource (#​17358)
• composer: added validations for composer 2/3 only fields in google_composer_environment (#​17361)
• compute: added certificate_manager_certificates field to google_compute_region_target_https_proxy resource (#​17365)
• compute: promoted all_instances_config field in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager to GA (#​17414)
• container: promoted enable_confidential_storage from node_config in google_container_cluster and google_container_node_pool to GA (#​17367)
• gkehub2: added namespace_labels field to google_gke_hub_scope resource (#​17421)

BUG FIXES:

• resourcemanager: added a retry to deleting the default network when auto_create_network is false in google_project (#​17419)

v5.18.0

Compare Source

BREAKING CHANGES:

• securityposture: marked policy_sets and policy_sets.policies required in google_securityposture_posture. API validation already enforced this, so no resources could be provisioned without these (#​17303)

FEATURES:

• New Data Source: google_compute_forwarding_rules (#​17342)
• New Resource: google_firebase_app_check_app_attest_config (#​17279)
• New Resource: google_firebase_app_check_play_integrity_config (#​17279)
• New Resource: google_firebase_app_check_recaptcha_enterprise_config (#​17327)
• New Resource: google_firebase_app_check_recaptcha_v3_config (#​17327)
• New Resource: google_migration_center_preference_set (#​17291)
• New Resource: google_netapp_volume_replication (#​17348)

IMPROVEMENTS:

• cloudfunctions: added output-only version_id field on google_cloudfunctions_function (#​17273)
• composer: supported patch versions of airflow on google_composer_environment (#​17345)
• compute: supported updating network_interface.stack_type field on google_compute_instance resource. (#​17295)
• container: added node_config.resource_manager_tags field to google_container_cluster resource (#​17346)
• container: added node_config.resource_manager_tags field to google_container_node_pool resource (#​17346)
• container: added output-only fields membership_id and membership_location under fleet in google_container_cluster resource (#​17305)
• looker: added custom_domain field to google_looker_instance resource (#​17301)
• netapp: added field restore_parameters and output-only fields state, state_details and create_time to google_netapp_volume resource (#​17293)
• workbench: added container_image field to google_workbench_instance resource (#​17326)
• workbench: added shielded_instance_config field to google_workbench_instance resource (#​17306)

BUG FIXES:

• bigquery: allowed users to set permissions for principal/principalSets (iamMember) in google_bigquery_dataset_iam_member. (#​17292)
• cloudfunctions2: fixed an issue where not specifying event_config.trigger_region in google_cloudfunctions2_function resulted in a permanent diff. The field now pulls a default value from the API when unset. (#​17328)
• compute: fixed issue where changes only in stateful_(internal|external)_ip would not trigger an update for google_compute_(region_)instance_group_manager (#​17297)
• compute: fixed perma-diff on min_ports_per_vm in google_compute_router_nat when the field is unset by making the field default to the API-set value (#​17337)
• dataflow: fixed crash in google_dataflox_job to return an error instead if a job's Environment field is nil when reading job information (#​17344)
• notebooks: changed tag field to default to the API's value if not specified in google_notebooks_instance (#​17323)

v5.17.0

Compare Source

NOTES:

• cloudbuildv2: changed underlying actuation engine for google_cloudbuildv2_connection, there should be no user-facing impact (#​17222)

DEPRECATIONS:

• container: deprecated support for relay_mode field in google_container_cluster.monitoring_config.advanced_datapath_observability_config in favor of enable_relay field, relay_mode field will be removed in a future major release (#​17262)

FEATURES:

• New Resource: google_firebase_app_check_debug_token (#​17242)
• New Resource: google_clouddeploy_custom_target_type (#​17254)

IMPROVEMENTS:

• cloudasset: allowed overriding the billing project for the google_cloud_asset_resources_search_all datasource
• clouddeploy: added support for canary_revision_tags, prior_revision_tags, stable_revision_tags, and stable_cutback_duration to google_clouddeploy_delivery_pipeline
• cloudfunctions: expose version_id on google_cloudfunctions_function (#​17273)
• compute: promoted user_ip_request_headers field on google_compute_security_policy resource to GA (#​17271)
• container: added support for enable_relay field to google_container_cluster.monitoring_config.advanced_datapath_observability_config (#​17262)
• eventarc: added support for http_endpoint.uri and network_config.network_attachment to google_eventarc_trigger (#​17237)
• healthcare: added reject_duplicate_message field to google_healthcare_hl7_v2_store resource (#​17267)
• identityplatform: added client, permissions, monitoring and mfa fields to google_identity_platform_config (#​17225)
• notebooks: added desired_state field to google_notebooks_instance (#​17268)
• vertexai: added feature_registry_source field to google_vertex_ai_feature_online_store_featureview resource (#​17264)
• workbench: added desired_state field to google_workbench_instance resource (#​17270)

BUG FIXES:

• compute: made resource_manager_tags updatable on google_compute_instance_template and google_compute_region_instance_template (#​17256)
• notebooks: prevented recreation of google_notebooks_instance when kms_key or service_account_scopes are changed server-side (#​17232)

v5.16.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_delivery_pipeline_iam_* (#​17180)
• New Resource: google_compute_instance_group_membership (#​17188)
• New Resource: google_discovery_engine_search_engine (#​17146)
• New Resource: google_firebase_app_check_service_config (#​17155)

IMPROVEMENTS:

• bigquery: promoted table_replication_info field on resource_bigquery_table resource to GA (#​17181)
• networksecurity: removed unused custom code from google_network_security_address_group (#​17183)
• provider: added an optional provider level label goog-terraform-provisioned to identify resources that were created by Terraform when viewing/editing these resources in other tools. (#​17170)

v5.15.0

Compare Source

FEATURES:

• New Data Source: google_compute_machine_types (#​17107)
• New Resource: google_blockchain_node_engine_blockchain_nodes (#​17096)
• New Resource: google_compute_region_network_endpoint (#​17137)
• New Resource: google_discovery_engine_chat_engine (#​17145)
• New Resource: google_discovery_engine_search_engine (#​17146)
• New Resource: google_netapp_volume_snapshot (#​17138)

IMPROVEMENTS:

• compute: added INTERNET_IP_PORT and INTERNET_FQDN_PORT options for the google_compute_region_network_endpoint_group resource. (#​17137)
• compute: added creation_timestamp to google_compute_instance_group_manager and google_compute_region_instance_group_manager. (#​17110)
• compute: added disk_id attribute to google_compute_disk resource (#​17112)
• compute: added stack_type attribute for google_compute_interconnect_attachment resource. (#​17139)
• compute: updated the google_compute_security_policy resource's json_parsing field to accept the value STANDARD_WITH_GRAPHQL (#​17097)
• memcache: added reserved_ip_range_id field to google_memcache_instance resource (#​17101)
• netapp: added deletion_policy field to google_netapp_volume resource (#​17111)

BUG FIXES:

• alloydb: fixed an issue where database_flags in secondary google_alloydb_instance resources would cause a diff, as they are copied from the primary (#​17128)
• filestore: made google_filestore_instance.source_backup field configurable (#​17099)
• vmwareengine: fixed a bug to prevent recreation of existing google_vmwareengine_private_cloud resources when upgrading provider version from <5.10.0 (#​17135

v5.14.0

Compare Source

FEATURES:

• New Resource: google_discovery_engine_data_store (#​17084)
• New Resource: google_securityposture_posture_deployment (#​17085)
• New Resource: google_securityposture_posture (#​17079)

IMPROVEMENTS:

• artifactregistry: promoted cleanup_policies and cleanup_policy_dry_run fields to GA for google_artifactregistry_repository resource (#​17074)
• composer: added data_retention_config field to google_composer_environment resource (#​17050)
• logging: updated the google_logging_project_bucket_config resource to be created using the asynchronous create method (#​17067)
• pubsub: added use_table_schema field to google_pubsub_subscription resource (#​17054)
• workflows: added call_log_level field to google_workflows_workflow resource (#​17051)

BUG FIXES:

• cloudfunctions2: fixed permadiff when build_config.docker_repository field is not specified on google_cloudfunctions2_function resource (#​17072)
• compute: fixed error when iap field is unset for google_compute_region_backend_service resource (#​17071)
• eventarc: fixed error when setting destination.cloud_function field on google_eventarc_trigger resource by making it output-only (#​17052)

v5.13.0

Compare Source

NOTES:

• cloudbuildv2: changed underlying actuation engine for google_cloudbuildv2_repository, there should be no user-facing impact (#​16969)
• provider: added support for in-place update for labels and terraform_labels fields in immutable resources (#​17016)

FEATURES:

• New Resource: google_netapp_backup_policy (#​16962)
• New Resource: google_netapp_volume (#​16990)
• New Resource: google_network_security_address_group_iam_* (#​17013)
• New Resource: google_vertex_ai_feature_group_feature (#​17015)

IMPROVEMENTS:

• alloydb: allowed database_version as an input on google_alloydb_cluster resource (#​16967)
• bigquery: added spark_options field to google_bigquery_routine resource (#​17028)
• cloudrunv2: added nfs and gcs fields to google_cloud_run_v2_service.template.volumes (#​16972)
• cloudrunv2: added tcp_socket field to google_cloud_run_v2.template.containers.liveness_probe (#​16972)
• compute: added enable_confidential_compute field to google_compute_instance.boot_disk.initialize_params (#​16968)
• compute: added enable_confidential_compute field to google_compute_disk resource (#​16968)
• gkehub2: added clusterupgrade field to google_gke_hub_feature resource (#​16951)
• notebooks: allowed machine_type and accelerator_config to be updatable on google_notebooks_runtime resource (#​16993)

BUG FIXES:

• compute: fixed the bug that max_ttl is sent in API calls even it is removed from configuration when changing cache_mode to FORCE_CACHE_ALL in google_compute_backend_bucket resource (#​16976)
• networkservices: fixed a perma-diff on addresses field in google_network_services_gateway resource (#​17035)
• provider: fixed universe_domain behavior to correctly throw an error when explicitly configured universe_domain values did not match credentials assumed to be in the default universe (#​17014)
• spanner: fixed error when adding autoscaling_config to an existing google_spanner_instance resource (#​17033)

v5.12.0

Compare Source

FEATURES:

• New Data Source: google_dns_managed_zones (#​16949)
• New Data Source: google_filestore_instance (#​16931)
• New Data Source: google_vmwareengine_external_access_rule (#​16912)
• New Resource: google_clouddomains_registration (#​16947)
• New Resource: google_netapp_kmsconfig (#​16945)
• New Resource: google_vertex_ai_feature_online_store_featureview (#​16930)
• New Resource: google_vmwareengine_external_access_rule (#​16912)

IMPROVEMENTS:

• compute: added md5_authentication_key field to google_compute_router_peer resource (#​16923)
• compute: added in-place update support to params.resource_manager_tags field in google_compute_instance resource (#​16942)
• compute: added in-place update support to description field in google_compute_instance resource (#​16900)
• gkehub: added policycontroller field to google_gke_hub_feature_membership resource (#​16916)
• gkehub2: added clusterupgrade field to google_gke_hub_feature resource (#​16951)
• gkeonprem: added in-place update support to vsphere_config field and added host_groups field in google_gkeonprem_vmware_node_pool resource (#​16896)
• iam: added create_ignore_already_exists field to google_service_account resource. If ignore_create_already_exists is set to true, resource creation would succeed when response error is 409 ALREADY_EXISTS. (#​16927)
• servicenetworking: added field deletion_policy to google_service_networking_connection (#​16944)
• sql: set replica_configuration, ca_cert, and server_ca_cert fields to be sensitive in google_sql_instance and google_sql_ssl_cert resources (#​16932)

BUG FIXES:

• bigquery: fixed perma-diff of encryption_configuration when API returns an empty object on google_bigquery_table resource (#​16926)
• compute: fixed an issue where the provider would wait_for_instances if set before deleting on google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#​16943)
• compute: fixed perma-diff that reordered stateful_external_ip and stateful_internal_ip blocks on google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#​16910)
• datapipeline: fixed perma-diff of scheduler_service_account_email when it's not explicitly specified in google_data_pipeline_pipeline resource (#​16917)
• edgecontainer: fixed resource import on google_edgecontainer_vpn_connection resource (#​16948)
• servicemanagement: fixed an issue where an inconsistent plan would be created when certain fields such as openapi_config, grpc_config, and protoc_output_base64, had computed values in google_endpoints_service resource (#​16946)
• storage: fixed an issue where retry timeout wasn't being utilized when creating google_storage_bucket resource (#​16902)

v5.11.0

Compare Source

NOTES:

• compute: changed underlying actuation engine for google_network_firewall_policy and google_region_network_firewall_policy, there should be no user-facing impact (#​16837)

DEPRECATIONS:

• gkehub2: deprecated field configmanagement.config_sync.oci.version in google_gke_hub_feature resource (#​16818)

FEATURES:

• New Data Source: google_compute_reservation (#​16860)
• New Resource: google_integration_connectors_endpoint_attachment (#​16822)
• New Resource: google_logging_folder_settings (#​16800)
• New Resource: google_logging_organization_settings (#​16800)
• New Resource: google_netapp_active_directory (#​16844)
• New Resource: google_vertex_ai_feature_online_store (#​16840)
• New Resource: google_vertex_ai_feature_group (#​16842)
• New Resource: google_netapp_backup_vault (#​16876)

IMPROVEMENTS:

• bigqueryanalyticshub: added restricted_export_config field to google_bigquery_analytics_hub_listing resource (#​16850)
• composer: added support for composer_internal_ipv4_cidr_block field to google_composer_environment (#​16815)
• compute: added provisioned_iopsand provisioned_throughput fields under boot_disk.initialize_params to google_compute_instance resource (#​16871)
• compute: added resource_manager_tags and disk.resource_manager_tags for google_compute_instance_template (#​16889)
• compute: added resource_manager_tags and disk.resource_manager_tags for google_compute_region_instance_template (#​16889)
• dataproc: added auxiliary_node_groups field to google_dataproc_cluster resource (#​16798)
• edgecontainer: increased default timeout on google_edgecontainer_cluster, google_edgecontainer_node_pool to 480m from 60m (#​16886)
• gkehub2: added field version under configmanagement in google_gke_hub_feature resource (#​16818)
• kms: added output-only field primary to google_kms_crypto_key (#​16845)
• metastore: added endpoint_protocol, metadata_integration, and auxiliary_versions to google_dataproc_metastore_service (#​16823)
• sql: added support for IAM GROUP authentication in the type field of google_sql_user (#​16853)
• storagetransfer: made name field settable on google_storage_transfer_job (#​16838)

BUG FIXES:

• container: added check that node_version and min_master_version are the same on create of google_container_cluster, when running terraform plan (#​16817)
• container: fixed a bug where disabling PDCSI addon gce_persistent_disk_csi_driver_config during creation will result in permadiff in google_container_cluster resource (#​16794)
• container: fixed an issue in which migrating from the deprecated Binauthz enablement bool to the new evaluation mode enum inadvertently caused two cluster update events, instead of none. (#​16851)
• containerattached: fixed crash when updating a cluster to remove admin_users or admin_groups in google_container_attached_cluster (#​16852)
• dialogflowcx: fixed a permadiff in the git_integration_settings field of google_diagflow_cx_agent (#​16803)
• monitoring: fixed the index out of range crash in dashboard_json for the resource google_monitoring_dashboard (#​16792)

v5.10.0

Compare Source

FEATURES:

• New Data Source: google_compute_region_disk (#​16732)
• New Data Source: google_vmwareengine_external_address (#​16698)
• New Data Source: google_vmwareengine_subnet (#​16700)
• New Data Source: google_vmwareengine_vcenter_credentials (#​16709)
• New Resource: google_vmwareengine_cluster (#​16757)
• New Resource: google_vmwareengine_external_address (#​16698)
• New Resource: google_vmwareengine_subnet (#​16700)
• New Resource: google_workbench_instance (#​16773)
• New Resource: google_workbench_instance_iam_* (#​16773)

IMPROVEMENTS:

• compute: added numeric_id field to google_compute_network resource (#​16712)
• compute: added remove_instance_on_destroy option to google_compute_per_instance_config resource (#​16729)
• compute: added remove_instance_on_destroy option to google_compute_region_per_instance_config resource (#​16729)
• container: added network_performance_config field to google_container_node_pool resource to support GKE tier 1 networking (#​16688)
• container: added support for in-place update for machine_type/disk_type/disk_size_gb in google_container_node_pool resource (#​16724)
• containerazure: added config.labels to google_container_azure_node_pool (#​16754)
• dataform: added display_name, labels and npmrc_environment_variables_secret_version fields to google_dataform_repository resource (#​16733)
• monitoring: added severity field to google_monitoring_alert_policy resource (#​16775)
• notebooks: added support for labels to google_notebooks_runtime (#​16783)
• recaptchaenterprise: added waf_settings to google_recaptcha_enterprise_key (#​16754)
• securesourcemanager: added host_config, state_note, kms_key, and private_config fields to google_secure_source_manager_instance resource (#​16731)
• spanner: added autoscaling_config.max_nodes and autoscaling_config.min_nodes to google_spanner_instance (#​16786)
• storage: added rpo field to google_storage_bucket resource (#​16756)
• vmwareengine: added type field to google_vmwareengine_private_cloud resource (#​16781)
• workloadidentity: added saml block to google_iam_workload_identity_pool_provider resource (#​16710)

BUG FIXES:

• logging: fixed an issue where value change of unique_writer_identity on google_logging_project_sink does not trigger diff on dependent's usages of writer_identity (#​16776)

v5.9.0

Compare Source

FEATURES:

• New Data Source: google_logging_folder_settings (#​16658)
• New Data Source: google_logging_organization_settings (#​16658)
• New Data Source: google_logging_project_settings (#​16658)
• New Data Source: google_vmwareengine_network_policy (#​16639)
• New Data Source: google_vmwareengine_nsx_credentials (#​16669)
• New Resource: google_scc_event_threat_detection_custom_module (#​16649)
• New Resource: google_secure_source_manager_instance (#​16637)
• New Resource: google_vmwareengine_network_policy (#​16639)

IMPROVEMENTS:

• bigqueryconnection: added spark support to google_bigquery_connection resource (#​16677)
• cloudidentity: added expiry_detail field to google_cloud_identity_group_membership resource (#​16643)
• container: added autoscaling_profile field in the cluster_autoscaling block in google_container_cluster resource (#​16653)
• gkehub: added default_cluster_config field to google_gke_hub_fleet resource (#​16630)
• gkehub: added binary_authorization_config field to google_gke_hub_fleet resource (#​16674)
• sql: added support for in-place updates to the edition field in google_sql_database_instance resource (#​16629)

BUG FIXES:

• artifactregistry: fixed permadiff due to unsorted virtual_repository_config array in google_artifact_registry_repository (#​16646)
• container: made dns_config field updatable on google_container_cluster resource (#​16652)
• dlp: added conflicting field validation in the storage_config.timespan_config block in data_loss_prevention_job_trigger resource (#​16628)
• dlp: updated the storage_config.timespan_config.timestamp_field field in data_loss_prevention_job_trigger to be optional (#​16628)
• firestore: added retries during creation of google_firestore_index resources to address retryable 409 code API errors ("Please retry, underlying data changed", and "Aborted due to cross-transaction contention") (#​16618, #​16670)
• storage: fixed unexpected lifecycle_rule conditions being added for google_storage_bucket (#​16683)

v5.8.0

Compare Source

FEATURES:

• New Data Source: google_vmwareengine_network_peering (#​16616)
• New Resource: google_migration_center_group (#​16549)
• New Resource: google_netapp_storage_pool (#​16573)
• New Resource: google_vmwareengine_network (ga) (#​16583)
• New Resource: google_vmwareengine_network_peering (#​16616)

IMPROVEMENTS:

• artifactregistry: added remote_repository_config.upstream_credentials field to google_artifact_registry_repository resource (#​16562)
• cloudbuild: added fields build.artifacts.maven_artifacts, build.artifacts.npm_packages , and build.artifacts.python_packages to resource google_cloudbuild_trigger (#​16543)
• cloudrunv2: promoted field depends_on in google_cloud_run_v2_service to GA (#​16577)
• composer: added database_config.zone field in google_composer_environment (#​16551)
• compute: added field service_directory_registrations to resource google_compute_global_forwarding_rule (#​16581)
• firestore: added virtual field deletion_policy to google_firestore_database (#​16576)
• firestore: enabled database deletion upon destroy for google_firestore_database (#​16576)
• gkehub2: added policycontroller field to fleet_default_member_config in google_gke_hub_feature (#​16542)
• iam: added allowed_services, disable_programmatic_signin fields to google_iam_workforce_pool resource (#​16580)
• vmwareengine: added STANDARD type support to google_vmwareengine_network resource (#​16583)
• vmwareengine: promoted google_vmwareengine_private_cloud resource to GA (#​16613)

BUG FIXES:

• compute: fixed a permadiff caused by issues with ipv6 diff suppression in google_compute_forwarding_rule and google_compute_global_forwarding_rule (#​16550)
• firestore: fixed an issue where google_firestore_database could be deleted when delete_protection_state was DELETE_PROTECTION_ENABLED (#​16576)
• firestore: made resource creation retry for 409 errors with the text "Aborted due to cross-transaction contention" in google_firestore_index (#​16618)

v5.7.0

Compare Source

DEPRECATIONS:

• gkehub: deprecated config_management.binauthz in google_gke_hub_feature_membership (#​16536)

IMPROVEMENTS:

• bigtable: added standard_isolation and standard_isolation.priority fields to google_bigtable_app_profile resource (#​16485)
• cloudrunv2: promoted custom_audiences field to GA on google_cloud_run_v2_service resource (#​16510)
• compute: promoted labels field to GA on google_compute_vpn_tunnel resource (#​16508)
• containerattached: added proxy_config field to google_container_attached_cluster resource (#​16524)
• gkehub: added membership_location field to google_gke_hub_feature_membership resource (#​16536)
• logging: made the change to aqcuire and update the google_logging_project_sink resource that already exists at the desired location. These logging buckets cannot be removed so deleting this resource will remove the bucket config from your terraform state but will leave the logging bucket unchanged. (#​16513)
• memcache: added MEMCACHE_1_6_15 as a possible value for memcache_version in google_memcache_instance resource (#​16531)
• monitoring: added error message to delete Alert Policies first on 400 response when deleting google_monitoring_uptime_check_config resource (#​16535)
• spanner: added autoscaling_config field to google_spanner_instance resource (#​16473)
• workflows: promoted user_env_vars field to GA on google_workflows_workflow resource (#​16477)

BUG FIXES:

• compute: changed external_ipv6_prefix field to not be output only in google_compute_subnetwork resource (#​16480)
• compute: fixed issue where google_compute_attached_disk would produce an error for certain zone configs (#​16484)
• edgecontainer: fixed update method of google_edgecontainer_cluster resource (#​16490)
• provider: fixed an issue where universe domains would not overwrite API endpoints (#​16521)
• resourcemanager: made data_source_google_project_service no longer return an error when the service is not enabled (#​16525)
• sql: ssl_mode field is not stored in terraform state if it has never been used in google_sql_database_instance resource (#​16486)

NOTES:

• dataproc: backfilled terraform_labels field for resource google_dataproc_workflow_template, so resource recreation won't happen during provider upgrade from 4.x to 5.7 (#​16517)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun