-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(deps): Update Terraform Google Provider to v5 (major) #1763
Conversation
/gcbrun |
This will need a manual change to update the templates, e.g. https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/blob/master/autogen/main/versions.tf.tmpl#L27 |
abc0f80
to
c431388
Compare
/gcbrun |
c431388
to
a8b9fff
Compare
/gcbrun |
a8b9fff
to
bcda671
Compare
/gcbrun |
bcda671
to
3689279
Compare
/gcbrun |
3689279
to
91e273f
Compare
/gcbrun |
91e273f
to
1eddefc
Compare
/gcbrun |
1eddefc
to
edcbad0
Compare
/gcbrun |
Close in favor of #1761 |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
This PR contains the following updates:
>= 3.39.0, < 5.0
->>= 3.39.0, < 5.3
5.3.0
< 5.0
->< 5.3
5.3.0
Release Notes
hashicorp/terraform-provider-google (google)
v5.2.0
Compare Source
FEATURES:
google_secret_manager_secrets
(#16182)google_alloydb_user
(#16141)google_firestore_backup_schedule
(#16186)google_redis_cluster
(#16203)IMPROVEMENTS:
cluster_type
andsecondary_config
fields to support secondary clusters ingoogle_alloydb_cluster
resource. (#16197)recreate_closed_psc
flag to support recreating the PSC Consumer forwarding rule if thepsc_connection_status
is closed ongoogle_compute_forwarding_rule
. (#16188)INTERNET_IP_PORT
,INTERNET_FQDN_PORT
,SERVERLESS
, andPRIVATE_SERVICE_CONNECT
as acceptable values for thenetwork_endpoint_type
field for theresource_compute_network_endpoint_group
resource (#16194)SEV_LIVE_MIGRATABLE_V2
toguest_os_features
enum ongoogle_compute_image
resource. (#16187)allow_subnet_cidr_routes_overlap
field togoogle_compute_subnetwork
resource (#16116)labels
,effective_labels
,terraform_labels
, andlabel_fingerprint
fields ingoogle_compute_address
to GA (#16120)internal_ip
andexternal_ip
fields in resourcesgoogle_compute_instance_group_manager
andgoogle_compute_region_instance_group_manager
to GA (#16140)internal_ip
andexternal_ip
fields in resourcesgoogle_compute_per_instance_config
andgoogle_compute_region_per_instance_config
to GA (#16140)oidc.jwks_json
in resourcegoogle_iam_workforce_pool
to GA (#16199)BUG FIXES:
client_connection_config
field togoogle_alloydb_instance
resource (#16202)view
,materialized_view
, andschema
for thegoogle_bigquery_table
resource (#16193)certificate_manager_certificates
field togoogle_compute_target_https_proxy
resource (#16179)google_compute_global_address
can't be created whennetwork_tier
ingoogle_compute_project_default_network_tier
is set toSTANDARD
(#16144)ip_address
when it is set to ipv6 ongoogle_compute_forwarding_rule
(#16115)v5.1.0
Compare Source
FEATURES:
google_database_migration_service_private_connection
(#16104)google_edgecontainer_cluster
(#16055)google_edgecontainer_node_pool
(#16055)google_edgecontainer_vpn_connection
(#16055)google_firebase_hosting_custom_domain
(#16062)google_gke_hub_fleet
(#16072)IMPROVEMENTS:
device_name
field toscratch_disk
block ofgoogle_compute_instance
resource (#16049)node_config.linux_node_config.cgroup_mode
field togoogle_container_node_pool
(#16103)oracle
profiles togoogle_database_migration_service_connection_profile
(#16087)api_scope
field togoogle_firestore_index
resource (#16085)location
field togoogle_gke_hub_membership_iam_*
resources (#16105)location
field togoogle_gke_hub_membership
resource (#16105)vcenter
fields ingoogle_gkeonprem_vmware_cluster
(#16073)sms_region_config
to the resourcegoogle_identity_platform_config
(#16044)BUG FIXES:
google_dns_record_set
(#16042)terraform_labels
field even if no fields were updated (#16111)v5.0.0
Compare Source
KNOWN ISSUES:
5.1.0
, see https://github.com/hashicorp/terraform-provider-google/issues/16091 for details.Terraform Google Provider 5.0.0 Upgrade Guide
NOTES:
LABELS REWORK:
default_labels
field are now supported. The default labels configured on the provider will be applied to all of the resources with standardlabels
field.labels
field.labels
field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-onlyterraform_labels
field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-onlyeffective_labels
field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients.annotations
field. Theannotations
field is non-authoritative and only manages the annotations defined by the users on the resource through Terraform. The new output-onlyeffective_annotations
field lists all of annotations present on the resource in GCP, including the annotations configured through Terraform, the system, and other clients.labels
,terraform_labels
, andeffective_labels
are now present in most resource-based datasources. All three fields have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent toeffective_labels
on the resource.annotations
andeffective_annotations
are now present in most resource-based datasources. Both fields have all of annotations present on the resource in GCP including the annotations configured through Terraform, the system, and other clients, equivalent toeffective_annotations
on the resource.BREAKING CHANGES:
credentials
,access_token
,impersonate_service_account
,project
,billing_project
,region
,zone
(#15968)google_bigquery_table
schema (#15338)routine_type
required forgoogle_bigquery_routine
(#15517)location
required ongoogle_cloudfunctions2_function
(#15830)google_cloudiot_registry_iam_policy
(#15739)google_cloudiot_device
(#15739)google_cloudiot_registry
(#15739)google_cloudiot_registry_iam_*
(#15739)liveness_probe.tcp_socket
fromgoogle_cloud_run_v2_service
resource. (#15430)startup_probe
andliveness_probe
fromgoogle_cloud_run_v2_job
resource. (#15430)volumes.cloud_sql_instance.instances
to SET from ARRAY forgoogle_cloud_run_v2_service
(#15831)google_compute_node_group
require one ofinitial_size
orautoscaling_policy
fields configured upon resource creation (#16006)size
ingoogle_compute_node_group
an output only field. (#16006)rule.rate_limit_options.encorce_on_key
on resourcegoogle_compute_security_policy
(#15681)consumer_accept_lists
to a SET from an ARRAY type forgoogle_compute_service_attachment
(#15985)deletion_protection
togoogle_container_cluster
which is enabled totrue
by default. When enabled, this field prevents Terraform from deleting the resource. (#16013)management.auto_repair
andmanagement.auto_upgrade
defaults to true ingoogle_container_node_pool
(#15931)networking_mode
default toVPC_NATIVE
for newly createdgoogle_container_cluster
resources (#6402)enable_binary_authorization
ingoogle_container_cluster
(#15868)logging_variant
ingoogle_container_node_pool
(#15931)network_policy.provider
ingoogle_container_cluster
(#15920)google_container_cluster
will delete the cluster if it's created in an error state. Instead, it will mark the cluster as tainted, allowing manual inspection and intervention. To proceed with deletion, run anotherterraform apply
. (#15887)taint
field ingoogle_container_cluster
andgoogle_container_node_pool
to only manage a subset of taint keys based on those already in state. Most existing resources are unaffected, unless they usesandbox_config
- see upgrade guide for details. (#15959)data_profile_result
anddata_quality_result
fromgoogle_dataplex_scan
(#15505)deletion_policy
default toDELETE
forgoogle_firebase_web_app
. (#15406)google_firebase_project_location
(#15764)gameservices
(#15558)unique_writer_identity
fromfalse
totrue
ingoogle_logging_project_sink
. (#15743)growth_factor
,num_finite_buckets
, andscale
required forgoogle_logging_metric
(#15680)LOOKER_MODELER
as a possible value ingoogle_looker_instance.platform_edition
(#15956)google_monitoring_dashboard.dashboard_json
by suppressing values returned by the API that are not in configuration (#16014)labels
immutable ingoogle_monitoring_metric_descriptor
(#15988)config_values
,pem_certificates
fromgoogle_privateca_certificate
(#15537)automatic
field ingoogle_secret_manager_secret
resource (#15859)google_service_networking_connection
(#15761)deleteConnection
method to delete the resourcegoogle_service_networking_connection
(#15934)FEATURES:
google_scc_folder_custom_module
(#15979)google_scc_organization_custom_module
(#16012)IMPROVEMENTS:
google_alloydb_instance
andgoogle_alloydb_backup
(#15973)google_artifact_registry_repository
(#15973)google_bare_metal_admin_cluster
to better align with actual behavior (#16010)state
output attribute togoogle_bigtable_instance
clusters (#15961)google_compute_node_group
mutable (#16006)effective_taints
attribute togoogle_container_cluster
andgoogle_container_node_pool
, outputting all known taint values (#15959)addons_config.gcs_fuse_csi_driver_config
ongoogle_container_cluster
withenable_autopilot: true
. (#15996)binary_authorization
togoogle_container_aws_cluster
(#15989)update_settings
togoogle_container_aws_node_pool
(#15989)week_day_of_month.day_offset
field to thegoogle_os_config_patch_deployment
resource (#15997)rotation.rotation_period
field ingoogle_secret_manager_secret
resource (#15952)preferred_zone
field togoogle_sql_database_instance
resource (#15971)event_stream
field togoogle_storage_transfer_job
resource (#16004)BUG FIXES:
external_data_configuration.connection_id
ingoogle_bigquery_table
(#15983)google_bigquery_table
(#15442)google_bigtable_instance
when cluster is still updating and storage type changed (#15961)google_bigtable_instance
(#15940)reconcile_connections
in resourcegoogle_compute_service_attachment
, the field will now default to a value returned by the API when not set in configuration (#15919)enable_endpoint_independent_mapping
with APIs default in resourcegoogle_compute_router_nat
(#15478)google_container_node_pool
where emptylinux_node_config.sysctls
would crash the provider (#15941)google_dataflow_flex_template_job
(#15976)google_dataflow_flex_template_job
(#15976)google_dataflow_flex_template_job
(#15976)sign_in
ingoogle_identity_platform_config
resource (#15907)google_firebase_rules.release
immutable (#15989)metadata
was not able to be updated ingoogle_monitoring_metric_descriptor
(#16014)google_monitoring_notification_channel
failed when no default project was supplied in provider configuration or through environment variables (#15929)google_secretmanager_secret
where replacingreplication.automatic
withreplication.auto
would destroy and recreate the resource (#15922)database_flags
ingoogle_sql_database_instance
(#15678)google_tags_tag_binding
(#16005)contents_delta_uri
a required field ingoogle_vertex_ai_index
as omitting it would result in an error (#15992)hashicorp/terraform-provider-google-beta (google-beta)
v5.2.0
Compare Source
FEATURES:
google_secret_manager_secrets
(#6463)google_alloydb_user
(#6454)google_firestore_backup_schedule
(#6465)IMPROVEMENTS:
cluster_type
andsecondary_config
fields to support secondary clusters ingoogle_alloydb_cluster
resource. (#6474)recreate_closed_psc
flag to support recreating the PSC Consumer forwarding rule if thepsc_connection_status
is closed ongoogle_compute_forwarding_rule
. (#6468)INTERNET_IP_PORT
,INTERNET_FQDN_PORT
,SERVERLESS
, andPRIVATE_SERVICE_CONNECT
as acceptable values for thenetwork_endpoint_type
field for theresource_compute_network_endpoint_group
resource (#6472)SEV_LIVE_MIGRATABLE_V2
toguest_os_features
enum ongoogle_compute_image
resource. (#6466)allow_subnet_cidr_routes_overlap
field togoogle_compute_subnetwork
resource (#6445)ssh_authentication_config
andservice_account
togoogle_dataform_repository
resource (#6480)BUG FIXES:
client_connection_config
field togoogle_alloydb_instance
resource (#6478)view
,materialized_view
, andschema
for thegoogle_bigquery_table
resource (#6471)certificate_manager_certificates
field togoogle_compute_target_https_proxy
resource (#6460)rule.action.source_nat_active_ranges
togoogle_compute_router_nat
resource (#6467)google_compute_global_address
can't be created whennetwork_tier
ingoogle_compute_project_default_network_tier
is set toSTANDARD
(#6456)ip_address
when it is set to ipv6 ongoogle_compute_forwarding_rule
(#6444)advanced_options_config.user_ip_request_headers
field with empty value was not cleaning the list (#6470)v5.1.0
Compare Source
FEATURES:
google_database_migration_service_private_connection
(#6436)))google_edgecontainer_cluster
(#6406)google_edgecontainer_node_pool
(#6406)google_edgecontainer_vpn_connection
(#6406)google_firebase_hosting_custom_domain
(#6409)google_gke_hub_fleet
(#6417)IMPROVEMENTS:
device_name
field toscratch_disk
block ofgoogle_compute_instance
resource (#6401)node_config.linux_node_config.cgroup_mode
field togoogle_container_node_pool
(#6435)oracle
profiles togoogle_database_migration_service_connection_profile
(#6426)api_scope
field togoogle_firestore_index
resource (#6424)location
field togoogle_gke_hub_membership_iam_*
resources (#6437)location
field togoogle_gke_hub_membership
resource (#6437)vcenter
fields ingoogle_gkeonprem_vmware_cluster
(#6418)sms_region_config
to the resourcegoogle_identity_platform_config
(#6398)BUG FIXES:
google_dns_record_set
(#6397)terraform_labels
field even if no fields were updated (#6443)v5.0.0
Compare Source
KNOWN ISSUES:
5.1.0
, see https://github.com/hashicorp/terraform-provider-google/issues/16091 for details.Terraform Google Provider 5.0.0 Upgrade Guide
NOTES:
LABELS REWORK:
default_labels
field are now supported. The default labels configured on the provider will be applied to all of the resources with standardlabels
field.labels
field.labels
field is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-onlyterraform_labels
field merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-onlyeffective_labels
field lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients.annotations
field. Theannotations
field is non-authoritative and only manages the annotations defined by the users on the resource through Terraform. The new output-onlyeffective_annotations
field lists all of annotations present on the resource in GCP, including the annotations configured through Terraform, the system, and other clients.labels
,terraform_labels
, andeffective_labels
are now present in most resource-based datasources. All three fields have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent toeffective_labels
on the resource.annotations
andeffective_annotations
are now present in most resource-based datasources. Both fields have all of annotations present on the resource in GCP including the annotations configured through Terraform, the system, and other clients, equivalent toeffective_annotations
on the resource.BREAKING CHANGES:
credentials
,access_token
,impersonate_service_account
,project
,billing_project
,region
,zone
(#6358)google_bigquery_table
schema (#5975)routine_type
required forgoogle_bigquery_routine
(#6080)location
required ongoogle_cloudfunctions2_function
(#6260)google_cloudiot_registry_iam_policy
(#6206)google_cloudiot_device
(#6206)google_cloudiot_registry
(#6206)google_cloudiot_registry_iam_*
(#6206)liveness_probe.tcp_socket
fromgoogle_cloud_run_v2_service
resource. (#6029)startup_probe
andliveness_probe
fromgoogle_cloud_run_v2_job
resource. (#6029)volumes.cloud_sql_instance.instances
to SET from ARRAY forgoogle_cloud_run_v2_service
(#6261)google_compute_node_group
require one ofinitial_size
orautoscaling_policy
fields configured upon resource creation (#6384)size
ingoogle_compute_node_group
an output only field. (#6384)rule.rate_limit_options.encorce_on_key
on resourcegoogle_compute_security_policy
(#6174)consumer_accept_lists
to a SET from an ARRAY type forgoogle_compute_service_attachment
(#6369)deletion_protection
togoogle_container_cluster
which is enabled totrue
by default. When enabled, this field prevents Terraform from deleting the resource. (#6391)management.auto_repair
andmanagement.auto_upgrade
defaults to true ingoogle_container_node_pool
(#6329)networking_mode
default toVPC_NATIVE
for newly createdgoogle_container_cluster
resources (#6402)enable_binary_authorization
ingoogle_container_cluster
(#6285)logging_variant
ingoogle_container_node_pool
(#6329)network_policy.provider
ingoogle_container_cluster
(#6323)google_container_cluster
will delete the cluster if it's created in an error state. Instead, it will mark the cluster as tainted, allowing manual inspection and intervention. To proceed with deletion, run anotherterraform apply
. (#6301)taint
field ingoogle_container_cluster
andgoogle_container_node_pool
to only manage a subset of taint keys based on those already in state. Most existing resources are unaffected, unless they usesandbox_config
- see upgrade guide for details. (#6351)data_profile_result
anddata_quality_result
fromgoogle_dataplex_scan
(#6070)deletion_policy
default toDELETE
forgoogle_firebase_web_app
. (#6018)google_firebase_project_location
(#6223)gameservices
(#6112)unique_writer_identity
fromfalse
totrue
ingoogle_logging_project_sink
. (#6210)growth_factor
,num_finite_buckets
, andscale
required forgoogle_logging_metric
(#6173)LOOKER_MODELER
as a possible value ingoogle_looker_instance.platform_edition
(#6349)google_monitoring_dashboard.dashboard_json
by suppressing values returned by the API that are not in configuration (#6392)labels
immutable ingoogle_monitoring_metric_descriptor
(#6372)config_values
,pem_certificates
fromgoogle_privateca_certificate
(#6097)automatic
field ingoogle_secret_manager_secret
resource (#6279)google_service_networking_connection
(#6222)deleteConnection
method to delete the resourcegoogle_service_networking_connection
(#6332)FEATURES:
google_scc_folder_custom_module
(#6367)google_scc_organization_custom_module
(#6390)IMPROVEMENTS:
google_alloydb_instance
andgoogle_alloydb_backup
(#6363)google_artifact_registry_repository
(#6362)google_bare_metal_admin_cluster
to better align with actual behavior (#6388)state
output attribute togoogle_bigtable_instance
clusters (#6353)google_compute_node_group
mutable (#6384)network_interface.security_policy
field togoogle_compute_instance
resource (#6343)type
field togoogle_compute_router_nat
resource (#6331)rules.action.source_nat_active_ranges
andrules.action.source_nat_drain_ranges
field togoogle_compute_router_nat
resource (#6331)network_attachment
togoogle_compute_instance
(#6331)effective_taints
attribute togoogle_container_cluster
andgoogle_container_node_pool
, outputting all known taint values (#6351)addons_config.gcs_fuse_csi_driver_config
ongoogle_container_cluster
withenable_autopilot: true
. (#6378)binary_authorization
togoogle_container_aws_cluster
(#6373)update_settings
togoogle_container_aws_node_pool
(#6373)week_day_of_month.day_offset
field to thegoogle_os_config_patch_deployment
resource (#6379)rotation.rotation_period
field ingoogle_secret_manager_secret
resource (#6345)preferred_zone
field togoogle_sql_database_instance
resource (#6360)event_stream
field togoogle_storage_transfer_job
resource (#6382)replica_zones
,service_account_scopes
, andenable_audit_agent
togoogle_workstations_workstation_config
(beta) (#6355)BUG FIXES:
external_data_configuration.connection_id
ingoogle_bigquery_table
(#6368)google_bigquery_table
(#6034)google_bigtable_instance
when cluster is still updating and storage type changed (#6353)google_bigtable_instance
(#6338)metric.filter
in the resourcegoogle_compute_autoscaler
(beta) (#6082)reconcile_connections
in resourcegoogle_compute_service_attachment
, the field will now default to a value returned by the API when not set in configuration (#6322)enable_endpoint_independent_mapping
with APIs default in resourcegoogle_compute_router_nat
(#6053)google_container_node_pool
where emptylinux_node_config.sysctls
would crash the provider (#6339)google_dataflow_flex_template_job
(#6357)google_dataflow_flex_template_job
(#6357)google_dataflow_flex_template_job
(#6357)google_firebase_rules.release
immutable (#6373)sign_in
ingoogle_identity_platform_config
resource (#6317)metadata
was not able to be updated ingoogle_monitoring_metric_descriptor
(#6372)google_monitoring_notification_channel
failed when no default project was supplied in provider configuration or through environment variables (#6327)google_secretmanager_secret
where replacingreplication.automatic
withreplication.auto
would destroy and recreate the resource (#6325)database_flags
ingoogle_sql_database_instance
(#6172)google_tags_tag_binding
(#6383)contents_delta_uri
a required field ingoogle_vertex_ai_index
as omitting it would result in an error (#6374)host.gce_instance.accelerators
ingoogle_workstation_config
(#6354)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.