Update Terraform google to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	major	~> 3.0 -> ~> 4.0

---

Release Notes

hashicorp/terraform-provider-google

v4.57.0

Compare Source

FEATURES:

• New Resource: google_access_context_manager_authorized_orgs_desc (#​13925)
• New Resource: google_bigquery_capacity_commitment (#​13902)
• New Resource: google_workstations_workstation (#​13885)
• New Resource: google_apigee_env_keystore (#​13876)
• New Resource: google_apigee_env_references (#​13876)
• New Resource: google_firestore_database (#​13874)

BUG FIXES:

• cloudidentity: fixed an issue on google_cloud_identity_group initial_group_config field when importing (#​13875)
• compute: fixed the error of invalid value for field failover_policy when UDP is selected on google_compute_region_backend_service (#​13897)
• firebase: allowed specifying a project field on datasources for google_firebase_android_app, google_firebase_web_app, and google_firebase_apple_app. (#​13927)
• tags: fixed a bug preventing use of google_tags_location_tag_binding with zonal parent resources (#​13880)

v4.56.0

Compare Source

FEATURES:

• New Resource: google_data_catalog_policy_tag (#​13818)
• New Resource: google_data_catalog_taxonomy (#​13818)
• New Resource: google_scc_mute_config (#​13818)
• New Resource: google_workstations_workstation_config (#​13832)

IMPROVEMENTS:

• cloudbuild: added peered_network_ip_range field to google_cloudbuild_worker_pool resource (#​13854)
• cloudrun: added template.0.containers0.liveness_probe.grpc, template.0.containers0.startup_probe.grpc fields to google_cloud_run_v2_service resource (#​13855)
• compute: added max_distance field to resource-policy resource (#​13853)
• compute: added field deletion_policy to resource google_compute_shared_vpc_service_project (#​13822)
• containerazure: added azure_services_authentication to google_container_azure_cluster (#​13854)
• networkservices: increased maximum allow_origins from 5 to 25 on network_services_edge_cache_service (#​13808)
• storagetransfer: added general field sink_agent_pool_name and source_agent_pool_name to google_storage_transfer_job (#​13865)

BUG FIXES:

• cloudfunctions: fixed no diff found on event_trigger.resource of google_cloudfunctions_function (#​13862)
• dataproc: fixed an issue where master_config.num_instances would not force recreation when changed in google_dataproc_cluster (#​13837)
• spanner: fixed the error when updating deletion_protection on google_spanner_database (#​13821)
• spanner: fixed the error when updating force_destroy on google_spanner_instance (#​13821)

v4.55.0

Compare Source

FEATURES:

• New Resource: google_cloudbuild_bitbucket_server_config (#​13767)
• New Resource: google_firebase_hosting_release (#​13793)
• New Resource: google_firebase_hosting_version (#​13793)

IMPROVEMENTS:

• container: added support for node_config.kubelet_config.pod_pids_limit on google_container_node_pool (#​13762)
• storage: changed the default create timeout of google_storage_bucket to 10m from 4m (#​13774)

BUG FIXES:

• container: fixed a crash when leaving placement_policy blank on google_container_node_pool (#​13797)

v4.54.0

Compare Source

FEATURES:

• New Data Source: google_firebase_hosting_channel (#​13686)
• New Data Source: google_logging_sink (#​13742)
• New Data Source: google_sql_databases (#​13738)

IMPROVEMENTS:

• cloudbuild: added bitbucket_server_trigger_config field to google_cloudbuild_trigger resource (#​13728)
• cloudbuild: added github.enterprise_config_resource_name field to google_cloudbuild_trigger resource (#​13739)
• compute: added field rsa_encrypted_key to google_compute_disk resource (#​13685)
• sql: added replica promotion support to google_sql_database_instance. This change will allow users to promote read replica as stand alone primary instance. (#​13682)

BUG FIXES:

• bigquery: fixed permadiff on max_time_travel_hours of google_bigquery_dataset (#​13691)
• compute: added possibility to remove stateful_disk in compute_instance_group_manager and compute_region_instance_group_manager. (#​13737)
• sql: fixed an issue with updating the settings.activation_policy field in google_sql_database_instance(#​13736)

v4.53.1

Compare Source

BUG FIXES:

• provider: fixed crash when trying to configure the provider with invalid credentials

v4.53.0

Compare Source

FEATURES:

• New Resource: google_apigee_addons_config (#​13654)
• New Resource: google_alloydb_backup (#​13639)
• New Resource: google_alloydb_cluster (#​13639)
• New Resource: google_alloydb_instance (#​13639)
• New Resource: google_compute_region_target_tcp_proxy (#​13640)
• New Resource: google_firestore_database (#​13675)
• New Resource: google_workstations_workstation_cluster (#​13619)

IMPROVEMENTS:

• compute: added resource_policies field to google_compute_instance_template (#​13677)
• compute: added the labels field to the google_compute_external_vpn_gateway resource (#​13642)
• datastream: added postgresql_source_config & oracle_source_config in google_datastream_stream (#​13646)
• datastream: added support for creating google_datastream_stream with desired_state=RUNNING (#​13646)
• datastream: exposed validation errors during google_datastream_stream creation (#​13646)
• firebase: marked deletion_policy as updatable without recreation on google_firebase_android_app and google_firebase_apple_app (#​13643)
• sql: added enable_private_path_for_google_cloud_services field to google_sql_database_instance resource (#​13668)
• vertex_ai: added the field description to google_vertex_ai_featurestore_entitytype (#​13641)

BUG FIXES:

• composer: fixed an issue with cleaning up environments created in an error state (#​13644)
• compute: fixed wrong maximum limit description for possible VPC MTUs (#​13674)
• datafusion: fixed version can't be updated on google_data_fusion_instance (#​13658)

v4.52.0

Compare Source

FEATURES:

• New Data Source: google_secret_manager_secret_version_access (#​13605)
• New Resource: google_workstations_workstation_cluster (#​13619)

IMPROVEMENTS:

• bigquery: added support for federated Azure identities to BigQuery Omni connections. (#​13614)
• bigquery: added cloud_spanner.use_serverless_analytics field (#​13588)
• bigquery: added cloud_sql.service_account_id and azure.identity output fields (#​13588)
• compute: added locality_lb_policies field to google_compute_backend_service (#​13604)
• sql: updated the settings.deletion_protection_enabled property documentation. (#​13581)
• sql: made root_password field updatable in google_sql_database_instance (#​13574)

BUG FIXES:

• cloudfunctions: updated max_instances field to take API's result as default value (#​13575)
• container: fixed an issue with resuming failed cluster creation (#​13580)
• gke: fixed the error of Invalid address to set on config_connector_config of the data source google_container_cluster (#​13566)
• secretmanager: fixed incorrect required_with for topics in google_secret_managed_secret (#​13612)

v4.51.0

Compare Source

DEPRECATIONS:

• cloudrunv2: deprecated liveness_probe.tcp_socket field from google_cloud_run_v2_service resource as it is not supported by the API and it will be removed in a future major release (#​13563)
• cloudrunv2: deprecated startup_probe and liveness_probe fields from google_cloud_run_v2_job resource as they are not supported by the API and they will be removed in a future major release (#​13531)

FEATURES:

• New Resource: google_iam_access_boundary_policy (#​13565)
• New Resource: google_tags_location_tag_bindings (#​13524)

IMPROVEMENTS:

• cloudbuild: added github_enterprise_config fields to google_cloudbuild_trigger resource. (#​13518)
• cloudrunV2: added annotations to google_cloud_run_v2_service resource (#​13509)
• compute: added tcp_time_wait_timeout_sec field to google_compute_router_nat resource (#​13554)
• compute: added share_settings field to the google_compute_node_group resource. (#​13522)
• containerattached: added deletion_policy field to google_container_attached_cluster resource. (#​13551)
• datastream: added customer_managed_encryption_key and destination_config.bigquery_destination_config.source_hierarchy_datasets.dataset_template.kms_key_name fields to google_datastream_stream resource (#​13549)
• dlp: added publish_findings_to_cloud_data_catalog and publish_summary_to_cscc to google_data_loss_prevention_job_trigger resource (#​13562)
• sql: added point_in_time_recovery_enabled for SQLServer in google_sql_database_instance (#​13555)
• spanner: added support for IAM conditions with google_spanner_database_iam_member and google_spanner_instance_iam_member (#​13556)
• sql: added additional fields to google_sql_source_representation_instance (#​13523)

BUG FIXES:

• bigquery: fixed bug where valid iam member values for bigquery were prevented from actuation by validation (#​13520)
• bigquery: fixed permadiff on external_data_configuration.connection_id of google_bigquery_table (#​13560)
• gke: fixed the error of Invalid address to set on config_connector_config of the data source google_container_cluster (#​13566)
• google_project: fixes misleading examples that could cause firebase:enabled label to be accidentally removed. (#​13552)

v4.50.0

Compare Source

FEATURES:

• New Data Source: google_compute_network_peering (#​13476)
• New Data Source: google_compute_router_nat (#​13475)
• New Resource: google_cloud_run_v2_job_iam_binding (#​13492)
• New Resource: google_cloud_run_v2_job_iam_member (#​13492)
• New Resource: google_cloud_run_v2_job_iam_policy (#​13492)
• New Resource: google_cloud_run_v2_service_iam_binding (#​13492)
• New Resource: google_cloud_run_v2_service_iam_member (#​13492)
• New Resource: google_cloud_run_v2_service_iam_policy (#​13492)
• New Resource: google_gke_backup_backup_plan_iam_binding (#​13508)
• New Resource: google_gke_backup_backup_plan_iam_member (#​13508)
• New Resource: google_gke_backup_backup_plan_iam_policy (#​13508)

IMPROVEMENTS:

• bigquery_table - added reference_file_schema_uri (#​13493)
• billingbudget: made fields credit_types and subaccounts updatable for google_billing_budget (#​13466)
• cloudrunV2: added annotations to CloudRunV2_service resource (#​13509)
• composer: added recovery_config in google_composer_environment resource (#​13504)
• compute: added support for 'edge_security_policy' field to 'google_compute_backend_service' resource. (#​13494)
• compute: added max_run_duration field to google_compute_instance and google_compute_instance_template resource (beta) (#​13489)
• dataproc: added support for dataproc_metric_config to resource google_dataproc_cluster (#​13480)
• dlp: added all subfields under deidentify_template.record_transformations.field_transformations.primitive_transformation to google_data_loss_prevention_deidentify_template (#​13498)
• sql: changed the default create timeout of google_sql_database_instance to 40m from 30m (#​13481)

BUG FIXES:

• certificatemanager: removed incorrect indication that the self_managed field in google_certificate_manager_certificate was treated as sensitive, and marked self_managed.pem_private_key as sensitive (#​13505)
• cloudplatform: fixed the error with header X-Goog-User-Project on google_client_openid_userinfo (#​13474)
• cloudsql: fixed disk_type can't be updated on google_sql_database_instance (#​13483)
• vertexai: fixed updating value_type in google_vertex_ai_featurestore_entitytype_feature (#​13491)

v4.49.0

Compare Source

FEATURES:

• New Data Source: google_project_service (#​13434)
• New Data Source: google_sql_database_instances (#​13433)
• New Data Source: google_container_attached_install_manifest (#​13443)
• New Data Source: google_container_attached_install_manifest (#​13455)
• New Data Source: google_container_attached_versions (#​13443)
• New Resource: google_datastream_stream (#​13385)

IMPROVEMENTS:

• android_app: added general fields sha1_hashes, sha256_hashes and etag to google_firebase_android_app. (#​13444)
• cloudids: added threat_exception field to google_cloud_ids_endpoint resource (#​13442)
• compute: added deletion for statefulIps fields in instance_group_manager and region_instance_group_manager. (#​13428)
• compute: added field expire_time to resource google_compute_region_ssl_certificate (#​13392)
• compute: added field expire_time to resource google_compute_ssl_certificate (#​13392)
• container: added release_channel_latest_version in google_container_engine_versions datasource (#​13384)
• container: added google_container_aws_node_pool autoscaling_metrics_collection field (#​13462)
• container: added update support for google_container_aws_node_pool tags field (#​13462)
• container: added config_connector_config addon field to google_container_cluster (#​13380)
• container: added kubelet_config field to google_container_node_pool (#​13423)
• dataproc: added support for node_group_affinity. in google_dataproc_cluster (#​13400)
• dataproc: added support for reservation_affinity in google_dataproc_cluster (#​13393)
• dlp: added field identifying_fields to big_query_options for creating DLP jobs. (#​13463)
• metastore: added telemetry_config field to google_dataproc_metastore_service (#​13432)
• sql: added the ability to set point_in_time_recovery_enabled flag for google_sql_database_instance SQLSERVER instances (#​13454)
• sql: added instance_type field to google_sql_database_instance resource (#​13406)
• vertexai: added scaling field in google_vertex_ai_featurestore (#​13458)

BUG FIXES:

• android_app: modified the package_name field suffix to always start with a letter in google_firebase_android_app. (#​13444)
• bigqueryconnection: fixed a bug where aws.access_role.iam_role_id cannot be updated on google_bigquery_connection (#​13460)
• cloudplatform: fixed a bug where google_folder deletion would fail to handle async operations (#​13377)
• container: fixed a bug preventing updates to master_global_access_config in google_container_cluster (#​13383)
• spanner: fixed crash when google_spanner_database.ddl item was nil (#​13441)

v4.48.0

Compare Source

FEATURES:

• New Data Source: google_beyondcorp_app_connection (#​13336)
• New Data Source: google_beyondcorp_app_connector (#​13305)
• New Data Source: google_beyondcorp_app_gateway (#​13305)
• New Data Source: google_cloudbuild_trigger (#​13329)
• New Data Source: google_compute_instance_group_manager (#​13297)
• New Data Source: google_firebase_apple_app (#​13239)
• New Data Source: google_pubsub_subscription (#​13296)
• New Data Source: google_sql_database (#​13376)
• New Resource: google_apigee_sync_authorization (#​13324)
• New Resource: google_beyondcorp_app_connection (#​13318)
• New Resource: google_container_attached_cluster (#​13374)
• New Resource: google_dns_managed_zone_iam_* (#​13304)
• New Resource: google_gke_backup_backup_plan (#​13359)
• New Resource: google_iam_workforce_pool_provider (#​13299)
• New Resource: google_iam_workforce_pool (#​13299)

IMPROVEMENTS:

• cloudfunctions2: added available_cpu and max_instance_request_concurrency to support concurrency in google_cloudfunctions2_function resource (#​13315)
• compute: added support for local IP ranges in google_compute_firewall (#​13240)
• compute: added router_appliance_instance field to google_compute_router_bgp_peer (#​13373)
• compute: added support for generated_id field in google_compute_backend_service to get the value of id defined by the server (#​13242)
• compute: added support for image_encryption_key to google_compute_image (#​13253)
• compute: added support for source_snapshot, source_snapshot_encyption_key, and source_image_encryption_key to google_compute_instance_template (#​13253)
• container: promoted google_container_node_pool.placement_policy to GA (#​13372)
• container: added gateway_api_config block to google_container_cluster resource for supporting the gke gateway api controller (#​13233)
• container: supported in-place update for labels in google_container_node_pool (#​13284)
• dataproc: added support for SPOT option for preemptibility in google_dataproc_cluster (#​13335)
• dlp: added field deidentify_config.record_transformations.field_transformations to google_data_loss_prevention_deidentify_template (#​13282)
• dlp: added field deidentify_config.record_transformations.record_suppressions to google_data_loss_prevention_deidentify_template (#​13300)
• dlp: added version field to google_data_loss_prevention_inspect_template resource (#​13366)
• osconfig: added support for skip_await_rollout in google_os_config_os_policy_assignment (#​13340)
• sql: added new deletion protection feature deletion_protection_enabled in google_sql_database_instance to guard against deletion from all surfaces (#​13249)
• sql: made settings.sql_server_audit_config.bucket field in google_sql_database_instance to be optional. (#​13252)
• storagetransfer: supported in-place update for schedule in google_storage_transfer_job (#​13262)

BUG FIXES:

• bigquery: fixed a permadiff on labels of google_bigquery_dataset when it is referenced in google_dataplex_asset (#​13333)
• compute: fixed a permadiff on private_ip_google_access of google_compute_subnetwork (#​13244)
• compute: fixed an issue where enable_dynamic_port_allocation was not able to set to false in google_compute_router_nat (#​13243)
• container: fixed a permadiff on location_policy of google_container_cluster and google_container_node_pool (#​13283)
• identityplatform: fixed issues with google_identity_platform_config creation (#​13301)
• resourcemanager: fixed the google_project datasource silently returning empty results when the project was not found or not in the ACTIVE state. Now, an error will be surfaced instead. (#​13358)
• sql: fixed sql_database_instance leaking root users (#​13258)

v4.47.0

Compare Source

NOTES:

• sql: fixed an issue where google_sql_database was abandoned by default as of version 4.45.0. Users who have upgraded to 4.45.0 or 4.46.0 will see a diff when running their next terraform apply after upgrading this version, indicating the deletion_policy field's value has changed from "ABANDON" to "DELETE". This will create a no-op call against the API, but can otherwise be safely applied. (#​13226)

FEATURES:

• New Resource: google_alloydb_backup (#​13202)
• New Resource: google_filestore_backup (#​13209)

IMPROVEMENTS:

• bigtable: added deletion_protection field to google_bigtable_table (#​13232)
• compute: made google_compute_subnetwork.ipv6_access_type field updatable in-place (#​13211)
• container: added auto_provisioning_defaults.cluster_autoscaling.upgrade_settings in google_container_cluster (#​13199)
• container: added gateway_api_config block to google_container_cluster resource for supporting the gke gateway api controller (#​13233)
• container: promoted gke_backup_agent_config in google_container_cluster to GA (#​13223)
• container: promoted min_cpu_platform in google_container_cluster to GA (#​13199)
• datacatalog: added update support for fields in google_data_catalog_tag_template (#​13216)
• iam: Added plan-time validation for IAM members (#​13203)
• logging: added bucket_name field to google_logging_metric (#​13210)
• logging: made metric_descriptor field optional for google_logging_metric (#​13225)

BUG FIXES:

• composer: fixed a crash when updating ip_allocation_policy of google_composer_environment (#​13188)
• sql: fixed an issue where google_sql_database was abandoned by default as of version 4.45.0. Users who have upgraded to 4.45.0 or 4.46.0 will see a diff when running their next terraform apply after upgrading this version, indicating the deletion_policy field's value has changed from "ABANDON" to "DELETE". This will create a no-op call against the API, but can otherwise be safely applied. (#​13226)

v4.46.0

Compare Source

FEATURES:

• New Data Source: google_firebase_android_app (#​13186)
• New Resource: google_cloud_run_v2_job (#​13154)
• New Resource: google_cloud_run_v2_service (#​13166)
• New Resource: google_gke_backup_backup_plan (beta) (#​13176)
• New Resource: google_firebase_storage_bucket (#​13183)

IMPROVEMENTS:

• network_services: added origin_override_action and origin_redirect to google_network_services_edge_cache_origin (#​13153)
• bigquerydatatransfer: recreate google_bigquery_data_transfer_config for Cloud Storage transfers when immutable params data_path_template and destination_table_name_template are changed (#​13137)
• compute: Added fields to resource google_compute_security_policy to support Cloud Armor bot management (#​13159)
• container: Added support for concurrent node pool mutations on a cluster. Previously, node pool mutations were restricted to run synchronously clientside. NOTE: While this feature is supported in Terraform from this release onwards, only a limited number of GCP projects will support this behavior initially. The provider will automatically process mutations concurrently as the feature rolls out generally. (#​13173)
• container: promoted managed_prometheus field in google_container_cluster to GA (#​13150)
• metastore: added general field network_config to google_dataproc_metastore_service (#​13184)
• storage: added support for autoclass in google_storage_bucket resource (#​13185)

BUG FIXES:

• alloydb: made machine_config.cpu_count updatable on google_alloydb_instance (#​13144)
• composer: fixed a crash when updating ip_allocation_policy of google_composer_environment (#​13188)
• container: fixed GKE permadiff/thrashing when update_settings. max_surge or update_settings. max_unavailable values are updating on google_container_node_pool (#​13171)
• datastream: fixed google_datastream_private_connection ignoring failures during creation (#​13160)
• kms: fixed issues with deleting crypto key versions in states other than ENABLED (#​13167)

v4.45.0

Compare Source

FEATURES:

• New Data Source: google_logging_project_cmek_settings (#​13078)
• New Resource: google_vertex_ai_tensorboard (#​13065)
• New Resource: google_data_fusion_instance_iam_binding (#​13134)
• New Resource: google_data_fusion_instance_iam_member (#​13134)
• New Resource: google_data_fusion_instance_iam_policy (#​13134)
• New Resource: google_eventarc_google_channel_config (#​13080)
• New Resource: google_vertex_ai_index (#​13132)

IMPROVEMENTS:

• bigquerydatatransfer: forced recreation on google_bigquery_data_transfer_config for Cloud Storage transfers when immutable params data_path_template and destination_table_name_template are changed (#​13137)
• bigtable: added support for abandoning GC policy (#​13066)
• cloudsql: added connector_enforcement field to google_sql_database_instance resource (#​13059)
• compute: added default_route_action.cors_policy field to google_compute_region_url_map resource (#​13063)
• compute: added default_route_action.fault_injection_policy field to google_compute_region_url_map resource (#​13063)
• compute: added default_route_action.timeout field to google_compute_region_url_map resource (#​13063)
• compute: added default_route_action.url_rewrite field to google_compute_region_url_map resource (#​13063)
• compute: added include_http_headers field to the cdn_policy field of google_compute_backend_service resource (#​13093)
• compute: added field list_managed_instances_results to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#​13079)
• compute: added subnetwork and private_ip_address arguments to resource_compute_router_interface (#​13105)
• container: added resource_labels field to node_config resource (#​13104)
• container: added field enable_private_nodes in network_config to google_container_node_pool (#​13128)
• container: added field gcp_public_cidrs_access_enabled and private_endpoint_subnetwork to google_container_cluster (#​13128)
• container: added update support for enable_private_endpoint and enable_private_nodes in google_container_cluster (#​13128)
• container: promoted network_config in google_container_node_pool to GA. (#​13128)
• datafusion: added api_endpoint and p4_service_account attributes to google_data_fusion_instance (#​13134)
• datafusion: added zone, display_name, crypto_key_config, event_publish_config, and enable_rbac args to google_data_fusion_instance (#​13134)
• logging: added cmek_settings field to google_logging_project_bucket_config resource (#​13078)
• sql: added 'deny_maintenance_period' field for 'google_sql_database_instance' within which 'end_date', 'start_date' and 'time' fields are present. (#​13106)
• sql: added field deletion_policy to resource google_sql_database (#​13107)

BUG FIXES:

• compute: fixed a crash with google_compute_instance_template on a newly released field when advanced_machine_features was set (#​13108)
• compute: fixed a failure in updating most_disruptive_allowed_action on google_compute_per_instance_config and google_compute_region_per_instance_config (#​13067)
• compute: fixed the error when metadata and machine_type are updated while metadata_startup_script was already provided on google_compute_instance (#​13077)
• container: fixed the inability to update authenticator_groups_config on google_container_cluster (#​13111)
• container: fixed the data source google_container_cluster to return an error if it does not exist (#​13070)
• sql: fixed googe_sql_database_instance to include backup_configuration in initial create request (#​13092)
• storage: fixed permdiff when website, website.main_page_suffix, website.not_found_page are removed on google_storage_bucket (#​13069)

v4.44.1

Compare Source

BUG FIXES:

• compute: fixed a crash with google_compute_instance_template on a newly released field when advanced_machine_features was set (#​13108)

v4.44.0

Compare Source

FEATURES:

• New Resource: google_alloydb_instance (#​12981)
• New Resource: google_beyondcorp_app_connector (#​13011)
• New Resource: google_beyondcorp_app_gateway (#​13011)
• New Resource: google_compute_network_firewall_policy_association (#​13013)
• New Resource: google_compute_network_firewall_policy_rule (#​13031)
• New Resource: google_compute_network_firewall_policy (#​12969)
• New Resource: google_compute_region_network_firewall_policy_association (#​13013)
• New Resource: google_compute_region_network_firewall_policy_rule (#​13031)
• New Resource: google_compute_region_network_firewall_policy (#​12969)
• New Resource: google_eventarc_channel (#​13021)
• New Resource: google_firebase_apple_app (#​13047)
• New Resource: google_firebase_hosting_channel (#​13053)
• New Resource: google_firebase_hosting_site (#​12960)
• New Resource: google_kms_crypto_key_versions (#​12926)
• New Resource: google_storage_transfer_agent_pool (#​12945)
• New Resource: google_identity_platform_project_default_config (#​12977)

IMPROVEMENTS:

• bigquery: supported authorized routines on resource bigquery_dataset and bigquery_dataset_access (#​12979)
• cloudidentity: made security label settable by making labels updatable in google_cloud_identity_groups (#​12943)
• cloudsql: added connector_enforcement field to google_sql_database_instance resource (#​13059)
• compute: added optional redundant_interface argument to google_compute_router_interface resource (#​13032)
• compute: added default_route_action.request_mirror_policy field to google_compute_region_url_map resource (#​13030)
• compute: added default_route_action.retry_policy field to google_compute_region_url_map resource (#​13030)
• compute: added default_route_action.weighted_backend_services field to google_compute_region_url_map resource (#​13030)
• compute: modified machine_type field in compute instance resource to accept short name. (#​12965)
• compute: added visible_core_count field to google_compute_instance (#​13043)
• container: added enable_l4_ilb_subsetting to GA google_container_cluster (#​12988)
• container: added node_config.logging_variant to google_container_node_pool. (#​13049)
• container: added node_pool_defaults.node_config_defaults.logging_variant, node_pool.node_config.logging_variant, and node_config.logging_variant to google_container_cluster. (#​13049)
• container: added support for Shielded Instance configuration for node auto-provisioning to google_container_cluster (#​12930)
• container: added management attribute to the google_container_cluster resource (#​12987)
• container: added field blue_green_settings to google_container_node_pool (#​12984)
• container: added field strategy to google_container_node_pool (#​12984)
• container: added support for additional values APISERVER, CONTROLLER_MANAGER, and SCHEDULER in google_container_cluster.monitoring_config (#​12978)
• datafusion: added enable_rbac field to google_data_fusion_instance resource (#​12992)
• dlp: added fields rows_limit, rows_limit_percent, and sample_method to big_query_options in google_data_loss_prevention_job_trigger (#​12980)
• dlp: added pubsub action to google_data_loss_prevention_job_trigger (#​12929)
• dns: added gke_clusters field to google_dns_managed_zone resource (#​13048)
• dns: added gke_clusters field to google_dns_response_policy resource (#​13048)
• eventarc: added field channel to google_eventarc_trigger (#​13021)
• gkehub: added mesh field and management subfield to resource feature_membership (#​13012)
• networkservices: added aws_v4_authentication field to google_network_services_edge_cache_origin to support S3-compatible Origins (#​13020)
• networkservices: added signed_token_options and add_signatures field to google_network_services_edge_cache_service and validation_shared_keys to google_network_services_edge_cache_keyset to support dual-token authentication (#​13041)
• sql: added query_plan_per_minute field to insights_config in google_sql_database_instance resource (#​12951)
• vertexai: added fields to vertex_ai_featurestore_entitytype to support feature value monitoring (#​12983)

BUG FIXES:

• apigee: fixed permadiff on consumer_accept_list for google_apigee_instance (#​13037)
• appengine: fixed permadiff on serviceaccount for 'google_app_engine_flexible_app_version' (#​12982)
• bigtable: updated ForceNew logic for kms_key_name (#​13018)
• bigtable: updated the error handling logic to remove the resource on resource not found error only (#​12953)
• billingbudget: fixed a bug where budget_filter.credit_types_treatment in google_billing_budget resource was not updating. (#​12947)
• cloudbuild: fixed a failure when BITBUCKET is provided for repo_type on google_cloudbuild_trigger (#​13027)
• cloudids: fixed endpoint_forwarding_rule and endpoint_ip attributes for google_cloud_ids_endpoint (#​12957)
• compute: fixed perma-diff on google_compute_disk for new amd64 images ([#​12961](https://t

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.