chore(deps): update tf modules

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 21.0 -> ~> 23.0
terraform-google-modules/project-factory/google (source)	module	major	~> 10.2 -> ~> 14.0
terraform-google-modules/project-factory/google (source)	module	major	~> 13.0 -> ~> 14.0

---

Release Notes

terraform-google-modules/terraform-google-kubernetes-engine

v23.2.0

Compare Source

Features

• add support for provisioning windows node pools (92d7c67)
• Allow configuring cluster_autoscaling for safer cluster variants (#​1407) (a661eea)

v23.1.0

Compare Source

Features

• add enable_referential_rules variable (#​1394) (1fd7184)
• adds placement policy argument to the beta modules (#​1385) (c0f5881)
• Allow enabling GKE backup agent for safer cluster variants (#​1367) (5fb077d)
• cloud dns support for safer clusters (#​1384) (4e817be)
• enable PoCo referential_rules for ACM (#​1373) (b9287de)

v23.0.0

Compare Source

⚠ BREAKING CHANGES

• Increased minimum Google Provider version to 4.29 (#​1353)
• The new binary_authorization (#​1332) may result in the first apply after upgrading taking additional time

Features

• add module_depends_on to workload-identity (#​1341) (a6dce1a)
• promote notification config & dns to ga (#​1327) (47b5ff6)

Bug Fixes

• add depends_on to asm module google_container_cluster data resource (#​1365) (9140c60)
• change asm module depends_on method (#​1354) (300eb1f)
• new binary_authorization (#​1332) requires TPG 4.29 (#​1353) (4f0d19e)

v22.1.0

Compare Source

Features

• add gke_backup_agent_config arg (#​1316) (cff4428)
• add module_depends_on for asm sub module (#​1323) (4d526f9)
• add var and output for ACM version (#​1322) (35b2bf5)
• cloud-dns support (#​1317) (4bf0011)
• expose disable_default_snat in GA modules (#​1336) (a8ea7c7)
• promote max_pods_per_node, max_surge, and max_unavailable fields to ga (#​1318) (ed64058)

Bug Fixes

• resolve deprecation warning for binary authorization (#​1332) (f8a5cca), closes #​1331
• support explicit k8s version with unspecified release channel (#​1335) (dc1de85)

v22.0.0

Compare Source

⚠ BREAKING CHANGES

• Minimum Google/Google Beta provider versions increased to v4.25.0.
• promote Spot VM to GA (#​1294)
• support maintenance_exclusion (#​1273)

Features

• Allow enabling managed Prometheus in beta cluster submodules (#​1307) (71e7067)
• expose use_existing_context variable in WI module (#​1295) (d802e49)
• promote Spot VM to GA (#​1294) (274da2f)
• support gVNIC (#​1296) (5d6eac1)
• support maintenance_exclusion (#​1273) (425bf93)
• Support managed Prometheus for safer cluster variants (#​1311) (55faaf5)
• WorkloadIdenity allow to use k8s sa from the different project (#​1275) (4f5dded)

Bug Fixes

• Create new node pool when shielded_instance_config changes (#​1237) (a2272f0)
• support managed prometheus for autopilot (#​1310) (568c824)

terraform-google-modules/terraform-google-project-factory

v14.0.0

Compare Source

⚠ BREAKING CHANGES

• Increase to minimum TPG version 4.28 (#​738)

Features

• add random_project_id_length (#​735) (773ea4b)
• Add support for custom time periods in budget module (#​738) (9273052)

v13.1.0

Compare Source

Features

• Add support to project cloud storage public access prevention (#​740) (e9ba8a2)
• update test/setup to pfactory 13.0 (321bed2)

Bug Fixes

• add propagation to test/setup (#​708) (321bed2)
• ensure test/setup/outputs.folder_id returns proper ID (#​712) (8f72474)

v13.0.0

Compare Source

⚠ BREAKING CHANGES

• add upgrade guide, update provider constraints (#​705)
• Add dimensions argument to consumer quota override (#​683)
• replace grant_services_network_role with grant_network_role for networkUser role management (#​697)

Features

• Add dimensions argument to consumer quota override (#​683) (d1d7624)
• replace grant_services_network_role with grant_network_role for networkUser role management (#​697) (d309270)
• setup-sa.sh use add-iam-policy-binding (#​689) (616ede9)

Bug Fixes

• add upgrade guide, update provider constraints (#​705) (644f596)
• update TPG version constraints to allow 4.0 and TF v0.13+ format (#​700) (b66a080)
• use module release rather than repo head (#​704) (522f3cc)
• VPC-SC SA destroy sequence with default SA (#​691) (0e5420b)

v12.0.0

Compare Source

⚠ BREAKING CHANGES

• Budget module should support filtering on labels (#​627)
• Minimum provider version increased to v4.5 (#​627)

Features

• Add Essential Contacts support (#​617) (f89e1a0)
• Budget module should support filtering on labels (#​627) (44a9fec)
• expose spend_basis for budget alerts (#​681) (ea3961c)

11.3.1 (2022-01-11)

Bug Fixes

• ConflictsWith in project org_id & folder_id (#​676) (2e59c9a)
• grant roles/billing.viewer to the seed service account in helper. (#​666) (e444e2a)
• Wrap budget_name output with length check (#​673) (21871b2)

v11.3.1

Compare Source

v11.3.0

Compare Source

Features

• add network service tier setting (#​640) (f5cce9e)
• update TPG version constraints to allow 4.0 (#​636) (dd9beb3)

11.2.3 (2021-10-20)

Bug Fixes

• Update required_providers in budget submodule (#​631) (de67066)

11.2.2 (2021-10-13)

Bug Fixes

• Allow explicit provider configuration in module (#​624) (621c527)
• billing_budget resource should use GA provider (#​626) (b6d7bf1)
• Don't attempt to activate service identity for compute.googleapis.com (#​628) (777092c)

11.2.1 (2021-09-23)

Bug Fixes

• plumb grant_services_network_role for root module (#​619) (560396d)

v11.2.3

Compare Source

v11.2.2

Compare Source

v11.2.1

Compare Source

v11.2.0

Compare Source

Features

• added the grant_services_network_role flag to control network IAM (#​618) (f116dd5)
• Give VPC Access Agent Service Account for Cloud Run permissions on Shared VPC (#​615) (87d2df0)

11.1.1 (2021-07-29)

Bug Fixes

• Added dependancies on Shared VPC attachment to work with VPC service controls (#​608) (59b7b96)

v11.1.1

Compare Source

v11.1.0

Compare Source

Features

• allow budget display name customization (#​599) (f54adbf)

Bug Fixes

• Using project_id output is not forcing to wait for the fabric-project creation (#​601) (551833a)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• Buckets now enable uniform bucket-level access by default. See the upgrade guide for details.

Features

• Add support for enforcing uniform IAM access to project GCS bucket (#​585) (d9bd377)

Bug Fixes

• billing budget tests (#​594) (64461a2)
• Increasing versions of null & random providers to support arm (#​583) (28547ed)
• remove unused vars, add upgrade guide (#​596) (e4c9b03)

10.3.2 (2021-04-05)

Bug Fixes

• Simplify project_id output in core_project_factory (#​572) (1bde0af)

10.3.1 (2021-03-30)

Bug Fixes

• Add force_destroy option for included GCS bucket (#​545) (1774999)
• Change quota manager submodule required versions to allow 0.14 (#​569) (448456c)
• Replace "true"/"false" strings with bool values (#​559) (2d082f3)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.

[comment-bot-dev]

Thanks for the PR! 🚀
✅ Lint checks have passed.