terraform-google-module-template
terraform-google-module-template copied to clipboard
feat(deps): Update Terraform google to v6
This PR contains the following updates:
| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| google (source) | required_provider | major | >= 3.53, < 6 -> >= 3.53, < 7 |
6.4.0 |
Release Notes
hashicorp/terraform-provider-google (google)
v6.3.0
FEATURES:
- New Data Source:
google_bigquery_tables(#19402) - New Resource:
google_developer_connect_connection(#19431) - New Resource:
google_developer_connect_git_repository_link(#19431) - New Resource:
google_memorystore_instance(#19398)
IMPROVEMENTS:
- compute: added
connected_endpoints.consumer_networkandconnected_endpoints.psc_connection_idfields togoogle_compute_service_attachmentresource (#19426) - compute: added field
http_keep_alive_timeout_sectogoogle_region_compute_target_https_proxyandgoogle_region_compute_target_http_proxyresources (#19432) - compute: added support for
boot_disk.initialize_params.resource_policiesingoogle_compute_instanceandgoogle_instance_template(#19407) - container: added
storage_poolstonode_configingoogle_container_clusterandgoogle_container_node_pool(#19423) - containerattached: added
security_posture_configfield togoogle_container_attached_clusterresource (#19411) - netapp: added
large_capacityandmultiple_endpointstogoogle_netapp_volumeresource (#19384) - resourcemanager: added
tagsfield togoogle_folderto allow setting tags for folders at creation time (#19380)
BUG FIXES:
- compute: setting
network_ipto "" will no longer cause diff and will be treated the same asnull(#19400) - dataproc: updated
google_dataproc_clusterto protect against handling nilkerberos_configvalues (#19401) - dns: added a mutex to
google_dns_record_setto prevent conflicts when multiple resources attempt to operate on the same record set (#19416) - managedkafka: added 5 second wait post
google_managed_kafka_topiccreation to fix eventual consistency errors (#19429)
v6.2.0
FEATURES:
- New Data Source:
google_certificate_manager_certificates(#19361) - New Resource:
google_network_security_server_tls_policy(#19314) - New Resource:
google_scc_v2_folder_scc_big_query_export(#19327) - New Resource:
google_scc_v2_project_scc_big_query_export(#19311)
IMPROVEMENTS:
- assuredworkload: added field
partner_service_billing_accounttogoogle_assured_workloads_workload(#19358) - bigtable: added support for
column_family.typeingoogle_bigtable_table(#19302) - cloudrun: promoted support for nfs and csi volumes (for Cloud Storage FUSE) for
google_cloud_run_serviceto GA (#19359) - cloudrunv2: promoted support for nfs and gcs volumes for
google_cloud_run_v2_jobto GA (#19359) - compute: added
boot_disk.interfacefield togoogle_compute_instanceresource (#19319) - container: added
node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabledfield togoogle_container_cluster. (#19320) - container: added
insecure_kubelet_readonly_port_enabledtonode_pool.node_config.kubelet_configandnode_config.kubelet_configingoogle_container_node_poolresource. (#19312) - container: added
insecure_kubelet_readonly_port_enabledtonode_pool_defaults.node_config_defaults,node_pool.node_config.kubelet_config, andnode_config.kubelet_configingoogle_container_clusterresource. (#19312) - container: added support for in-place updates for
google_compute_node_pool.node_config.gcfs_configandgoogle_container_cluster.node_config.gcfs_clusterandgoogle_container_cluster.node_pool.node_config.gcfs_cluster(#19365) - container: promoted the
additive_vpc_scope_dns_domainfield on thegoogle_container_clusterresource to GA (#19313) - iambeta: added
x509field togoogle_iam_workload_identity_pool_providerresource (#19375) - networkconnectivity: added
include_export_rangestogoogle_network_connectivity_spoke(#19346) - pubsub: added
cloud_storage_config.max_messagesandcloud_storage_config.avro_config.use_topic_schemafields togoogle_pubsub_subscriptionresource (#19338) - redis: added the
maintenance_policyfield to thegoogle_redis_clusterresource (#19341) - resourcemanager: added
tagsfield togoogle_projectto allow setting tags for projects at creation time (#19351) - securitycenter: added support for empty
streaming_config.filtervalues ingoogle_scc_notification_configresources (#19369)
BUG FIXES:
- compute: fixed
google_compute_interconnectto support correctavailable_featuresoption ofIF_MACSEC(#19330) - compute: fixed a bug where
advertised_route_prioritywas accidentally set to 0 during updates ingoogle_compute_router_peer(#19366) - compute: fixed a permadiff caused by setting
start_timein an incorrect H:mm format ingoogle_compute_resource_policiesresources (#19297) - compute: fixed
network_interface.subnetwork_projectvalidation to match with the project innetwork_interface.subnetworkfield whennetwork_interface.subnetworkhas full self_link ingoogle_compute_instanceresource (#19348) - container: removed unnecessary force replacement in node pool
gcfs_config(#19365 - kms: updated the
google_kms_autokey_configresource'sfolderfield to accept values that are either full resource names (folders/{folder_id}) or just the folder id ({folder_id}only) (#19364)) - storage: added retry support for 429 errors in
google_storage_bucketresource (#19353)
v6.1.0
FEATURES:
- New Data Source:
google_kms_crypto_key_latest_version(#19249) - New Data Source:
google_kms_crypto_key_versions(#19241)
IMPROVEMENTS:
- databasemigrationservice: added support in
google_database_migration_service_connection_profilefor creating DMS connection profiles that link to existing Cloud SQL instances/AlloyDB clusters. (#19291) - alloydb: added
subscription_typeandtrial_metadatafield togoogle_alloydb_clusterresource (#19262) - bigquery: added
encryption_configurationfield togoogle_bigquery_data_transfer_configresource (#19267) - bigqueryanalyticshub: added
selected_resources, andrestrict_direct_table_accesstogoogle_bigquery_analytics_hub_listingresource (#19244) - bigqueryanalyticshub: added
sharing_environment_configtogoogle_bigquery_analytics_hub_data_exchangeresource (#19244) - cloudtasks: added
http_targetfield togoogle_cloud_tasks_queueresource (#19253) - compute: added
acceleratorsfield togoogle_compute_node_templateresource (#19292) - compute: allowed disabling
server_tls_policyduring update ingoogle_compute_target_https_proxyresources (#19233) - container: added
secret_manager_configfield togoogle_container_clusterresource (#19288) - datastream: added
transaction_logsandchange_tablesto thedatastream_streamresource (#19248) - discoveryengine: added
chunking_configandlayout_parsing_configfields togoogle_discovery_engine_data_storeresource (#19274) - dlp: added
inspect_template_modified_cadencefield tobig_query_targetandcloud_sql_targetingoogle_data_loss_prevention_discovery_configresource (#19282) - dlp: added
tag_resourcesfield togoogle_data_loss_prevention_discovery_configresource (#19282) - networksecurity: promoted
google_network_security_client_tls_policyto GA (#19293)
BUG FIXES:
- bigquery: fixed an error which could occur with email field values containing non-lower-case characters in
google_bigquery_dataset_accessresource (#19259) - bigqueryanalyticshub: made
bigquery_datasetimmutable ingoogle_bigquery_analytics_hub_listingas it was not updatable in the API. Now modifying the field in Terraform will correctly recreate the resource rather than causing Terraform to report it would attempt an invalid update. (#19244) - container: fixed update inconsistency in
google_container_clusterresource (#19247) - pubsub: fixed a validation bug that didn't allow empty filter definitions for
google_pubsub_subscriptionresources (#19284) - resourcemanager: fixed a bug where data.google_client_config failed silently when inadequate credentials were used to configure the provider (#19286)
- sql: fixed importing
google_sql_userwherehostis an IPv4 CIDR (#19243) - sql: fixed overwriting of
namefield for IAM Group user ingoogle_sql_userresource (#19234)
v6.0.1
BREAKING CHANGES:
- sql: removed
settings.ip_configuration.require_sslfromgoogle_sql_database_instancein favor ofsettings.ip_configuration.ssl_mode. This field was intended to be removed in 6.0.0. (#19263)
v6.0.0
Terraform Google Provider 6.0.0 Upgrade Guide
BREAKING CHANGES:
- provider: changed provider labels to add the
goog-terraform-provisioned: truelabel by default. (#19190) - activedirectory: added
deletion_protectionfield togoogle_active_directory_domainresource. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection = falsebefore destroying the resource. (#18906) - alloydb: removed
networkingoogle_alloy_db_cluster. Usenetwork_config.networkinstead. (#19181) - bigquery: added client-side validation to prevent table view creation if schema contains required fields for
google_bigquery_tableresource (#18767) - bigquery: removed
allow_resource_tags_on_deletionfromgoogle_bigquery_table. Resource tags are now always allowed on table deletion. (#19077) - bigqueryreservation: removed
multi_region_auxiliaryfromgoogle_bigquery_reservation(#18922) - billing: revised the format of
idforgoogle_billing_project_info(#18823) - cloudrunv2: added
deletion_protectionfield togoogle_cloudrunv2_service. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection = falsebefore destroying the resource.(#19019) - cloudrunv2: changed
liveness_probeto no longer infer a default value from api ongoogle_cloud_run_v2_service. Removing this field and applying the change will now remove liveness probe from the Cloud Run service. (#18764) - cloudrunv2: retyped
containers.envto SET from ARRAY forgoogle_cloud_run_v2_serviceandgoogle_cloud_run_v2_job. (#18855) - composer:
ip_allocation_policy = []ingoogle_composer_environmentis no longer valid configuration. Removing the field from configuration should not produce a diff. (#19207) - compute: added new required field
enabledingoogle_compute_backend_serviceandgoogle_compute_region_backend_service(#18772) - compute: changed
certifcate_idingoogle_compute_managed_ssl_certificateto correctly be output only. (#19069) - compute: revised and in some cases removed default values of
connection_draining_timeout_sec,balancing_modeandoutlier_detectioningoogle_compute_region_backend_serviceandgoogle_compute_backend_service. (#18720) - compute: revised the format of
idforcompute_network_endpoints(#18844) - compute:
guest_accelerator = []is no longer valid configuration ingoogle_compute_instance. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#19207) - compute:
google_compute_instance_from_templateandgoogle_compute_instance_from_machine_imagenetwork_interface.alias_ip_range, network_interface.access_config, attached_disk, guest_accelerator, service_account, scratch_diskcan no longer be set to an empty block[]. Removing the fields from configuration should not produce a diff. (#19207) - compute:
secondary_ip_ranges = []ingoogle_compute_subnetworkis no longer valid configuration. To set an explicitly empty list, usesend_secondary_ip_range_if_emptyand completely removesecondary_ip_rangefrom config. (#19207) - container: made
advanced_datapath_observability_config.enable_relayrequired ingoogle_container_cluster(#19060) - container: removed deprecated field
advanced_datapath_observability_config.relay_modefromgoogle_container_clusterresource. Users are expected to useenable_relayfield instead. (#19060) - container: three label-related fields are now in
google_container_clusterresource.resource_labelsfield is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-onlyterraform_labelsfield merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-onlyeffective_labelsfield lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#19062) - container: made three fields
resource_labels,terraform_labels, andeffective_labelsbe present ingoogle_container_clusterdatasources. All three fields will have all of labels present on the resource in GCP including the labels configured through Terraform, the system, and other clients, equivalent toeffective_labelson the resource. (#19062) - container:
guest_accelerator = []is no longer valid configuration ingoogle_container_clusterandgoogle_container_node_pool. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#19207) - container:
guest_accelerator.gpu_driver_installation_config = []andguest_accelerator.gpu_sharing_config = []are no longer valid configuration ingoogle_container_clusterandgoogle_container_node_pool. Removing the fields from configuration should not produce a diff. (#19207) - datastore: removed
google_datastore_indexin favor ofgoogle_firestore_index(#19160) - edgenetwork: three label-related fields are now in
google_edgenetwork_networkandgoogle_edgenetwork_subnetresources.labelsfield is non-authoritative and only manages the labels defined by the users on the resource through Terraform. The new output-onlyterraform_labelsfield merges the labels defined by the users on the resource through Terraform and the default labels configured on the provider. The new output-onlyeffective_labelsfield lists all of labels present on the resource in GCP, including the labels configured through Terraform, the system, and other clients. (#19062) - identityplatform: removed resource
google_identity_platform_project_default_configin favor ofgoogle_identity_platform_project_config(#18992) - pubsub: allowed
schema_settingsingoogle_pubsub_topicto be removed (#18631) - integrations: removed
create_sample_workflowsandprovision_gmekfromgoogle_integrations_client(#19148) - redis: added a
deletion_protection_enabledfield to thegoogle_redis_clusterresource. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection_enabled = falsebefore destroying the resource. (#19173) - resourcemanager: added
deletion_protectionfield togoogle_folderto make deleting them require an explicit intent. Folder resources now cannot be destroyed unlessdeletion_protection = falseis set for the resource. (#19021) - resourcemanager: made
deletion_policyingoogle_project'PREVENT' by default. This makes deleting them require an explicit intent.google_projectresources cannot be destroyed unlessdeletion_policyis set to 'ABANDON' or 'DELETE' for the resource. (#19114) - sql: removed
settings.ip_configuration.require_sslingoogle_sql_database_instance. Please usesettings.ip_configuration.ssl_modeinstead. (#18843) - storage: removed
no_agefield fromlifecycle_rule.conditionin thegoogle_storage_bucketresource (#19048) - vpcaccess: removed default values for
min_throughputandmin_instancesfields ongoogle_vpc_access_connectorand made them default to values returned from the API when not provided by users (#18697) - vpcaccess: added a conflicting fields restriction between
min_throughputandmin_instancesfields ongoogle_vpc_access_connector(#18697) - vpcaccess: added a conflicting fields restriction between
max_throughputandmax_instancesfields ongoogle_vpc_access_connector(#18697) - workstation: defaulted
host.gce_instance.disable_sshto true forgoogle_workstations_workstation_config(#19101) IMPROVEMENTS: - compute: added fields
reserved_internal_rangeandsecondary_ip_ranges[].reserved_internal_rangetogoogle_compute_subnetworkresource (#19151) - compute: changed the behavior of
name_prefixin multiple Compute resources to allow for a longer max length of 54 characters. See the upgrade guide and resource documentation for more details. (#19152) BUG FIXES: - compute: fixed an issue regarding sending
enabledfield by default for nulliapmessage ingoogle_compute_backend_serviceandgoogle_compute_region_backend_service(#18772)
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.