Update Terraform google to v7

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	major	6.29.0 → 7.19.0
google (source)	required_provider	major	< 6.30 → < 7.20

---

Release Notes

hashicorp/terraform-provider-google (google)

v7.19.0

Compare Source

v7.18.0

Compare Source

BREAKING CHANGES:

• alloydb: removed the incorrect top-level field last_successful_backup_consistency_time from google_backup_dr_backup_plan_association. No value has been present in this output-only field. (#​25928)

FEATURES:

• New Resource: google_dataplex_data_asset (#​25922)
• New Resource: google_firebase_ai_logic_prompt_template_lock (#​25877)
• New Resource: google_logging_saved_query (#​25921)

IMPROVEMENTS:

• alloydb: added restore_backupdr_backup_source, restore_backupdr_pitr_source, and backupdr_backup_source to google_alloydb_cluster (#​25928)
• alloydb: added rules_config_info.last_successful_backup_consistency_time to google_backup_dr_backup_plan_association (#​25928)
• compute: updated target_service field to support update-in-place in google_compute_service_attachment resource (#​25924)
• datafusion: added patch_revision field to google_data_fusion_instance resource (#​25923)
• firestore: added skip_wait field to google_firestore_index resource, skipping the wait for index creation (#​25934)
• gkeonprem: added skip_validations field to google_gkeonprem_vmware_cluster resource (#​25917)
• sql: added database_role field and iam_email field to google_sql_user resource to support managing Cloud SQL users with database roles. (#​25926)

BUG FIXES:

• cloudbuild: fixed google_cloudbuild_trigger to allow creation without source configuration for manual triggers (#​25925)
• cloudrunv2: fix permadiff on scaling.scaling_mode in google_cloud_run_v2_worker_pool (#​25927)
• compute: resolved issues where show_nat_ips and nat_ips in google_compute_service_attachment were causing test failures due to an underlying API problem. These fields are now temporarily non-functional and will be ignored. (#​25908)
• container: fixed a bug in google_container_node_pool that prevented creation when blue_green_settings was specified (#​25916)
• container: fixed perma-diff in google_container_cluster when setting resource_limits with disabled node autoprovisioning (#​25929)

v7.17.0

Compare Source

BREAKING CHANGES:

• networkconnectivity: changed services in google_network_connectivity_multicloud_data_transfer_config from TypeList to TypeSet. The order of or value of interpolations referencing the field may change. (#​25767)

FEATURES:

• New Resource: google_dataplex_data_product (#​25844)
• New Resource: google_dialogflow_cx_tool_version (#​25809)
• New Resource: google_firebase_ai_logic_config (#​25846)
• New Resource: google_firebase_ai_logic_prompt_template (#​25862)
• New Resource: google_firebase_ai_logic_prompt_template_lock (#​25877)
• New Resource: google_saas_runtime_unit_operation (#​25760)
• New Resource: google_vmwareengine_datastore (#​25845)
• New Data Source: google_vmwareengine_datastore (#​25845)

IMPROVEMENTS:

• backupdr: added support for restore compute instance and disk (#​25723)
• bigquery: added source_column_match field to csv_options in google_bigquery_table resource (#​25868)
• compute: added FIPS_202205 enum to PROFILE field in SSL_POLICY and REGION_SSL_POLICY resources, and added TLS_1_3 enum to MIN_TLS_VERSION field in SSL_POLICY and REGION_SSL_POLICY resources. (#​25777)
• compute: added attachments field to google_compute_interconnect_attachment_group.logicalStructure.regions.metros.facilities.zones and deprecated attachment field (#​25842)
• compute: added enable_enhanced_ipv4_allocation field to google_compute_public_delegated_prefix resource (#​25732)
• compute: added ip_collection field to google_compute_address resource (#​25732)
• compute: added source_instant_snapshot field to google_compute_snapshot resource (#​25780)
• compute: added support for "IF_L2_FORWARDING" as a value for the availableFeatures field of the google_compute_interconnect resource (#​25751)
• compute: added support for "IF_L2_FORWARDING" as a value for the requestedFeatures field of the google_compute_interconnect resource (#​25751)
• compute: added support for "L2_DEDICATED" as a value for the type field of the google_compute_interconnect_attachment resource. (#​25751)
• compute: added support for igmp_query field in google_compute_instance, google_compute_instance_template, and related instance resources. (#​25752)
• compute: added support for the l2Forwarding field to google_compute_interconnect_attachment (#​25751)
• compute: promoted request_body_inspection_size to GA in google_compute_security_policy resource (ga) (#​25775)
• container: added accelerator_network_config field to node_pool resource (#​25856)
• container: added managed_opentelemetry_config to google_container_cluster resource (#​25861)
• container: added node_drain_config field to google_container_node_pool resources (#​25791)
• container: improved google_container_cluster reconciliation time by caching node pools and instance group managers after a list call instead of getting each one seperately. (#​25784)
• datastream: added backfill_all.spanner_excluded_objects and source_config.spanner_source_config fields to google_datastream_stream (#​25804)
• datastream: added spanner_profile field to google_datastream_connection_profile (#​25804)
• dialogflowcx: added serviceAccountAuthConfig field to google_dialogflow_cx_webhook resource (#​25781)
• oracledatabase: added peerAutonomousDatabases, disasterRecoverySupportedLocations, sourceConfig fields to Autonomous database resource. (#​25859)
• tags: added allowed_values_regex field to google_tags_tag_key resource (#​25869)
• tags: added support for dynamic tag keys in google_tags_tag_binding and google_tags_location_tag_binding resources (#​25874)
• vertex_ai: added deployment_spec.psc_interface_config to google_vertex_ai_reasoning_engine (#​25765)

BUG FIXES:

• bigquery: fixed permadiff with the collation field in google_bigquery_table.schema (#​25762)
• cloudasset: fixed bug in google_cloud_asset_folder_feed where folder_id was always empty (#​25798)
• cloudbuild: fixed permadiff on google_cloudbuild_trigger.pubsub_config.service_account_email (#​25792)
• compute: fix crash when specifying an empty instance_flexibility_policy block on the google_compute_region_instance_group_manager resource (#​25731)
• compute: fixed a permadiff that could occur when using mixed short and long form IPv6 addresses in the source_ranges field of google_compute_firewall (#​25867)
• iambeta: fixed a permadiff that could occur in the jwks_json field for google_iam_workload_identity_pool_provider resource (#​25847)
• netapp: fixed export_policy update bug with squash_mode in netapp volume (#​25776)
• networkconnectivity: fixed a diff on services in google_network_connectivity_multicloud_data_transfer_config reordering elements (#​25767)
• sql: fixed an issue where transient server errors caused false failures for SQL operations that eventually completed successfully (#​25735)
• workbench: made enable-jupyterlab4 metadata key settable for google_workbench_instance (#​25769)

v7.16.0

Compare Source

DEPRECATIONS:

• cloudrunv2: deprecated custom_audience field in the google_cloud_run_v2_worker_pool resource, as this field is not applicable to the WorkerPools resource (#​25688)

FEATURES:

• New Data Source: google_compute_routers (#​25715)
• New Resource: google_backup_dr_restore_workload (#​25723)

IMPROVEMENTS:

• backupdr: added max_custom_on_demand_retention_days field to google_backup_dr_backup_plan resource (#​25704)
• bigquery: added support for merge and update operations for dataPolicies in schema field in google_bigquery_table resource when ignore_schema_changes is defined (#​25721)
• bigtable: added etag field to google_bigtable_schema_bundle resource (#​25687)
• compute: added BPS_400G enum value to bandwidth field in google_compute_interconnect_attachment resource (#​25714)
• container: added registry_hosts field to containerd_config in google_container_cluster and google_container_node_pool resources (#​25705)
• dataplex: added one_time field to google_dataplex_datascan resource (#​25695)
• datastream: added postgresql_profile.ssl_config to google_datastream_connection_profile resource (#​25671)
• networkservices: added EXT_AUTHZ_GRPC enum value to wire_format field in google_network_services_authz_extension resource (#​25706)
• networkservices: added disable_placement_policy field to google_network_services_multicast_domain_activation resource (#​25720)
• networkservices: added metadata, supported_events, request_body_send_mode, and observability_mode fields to google_network_services_lb_route_extension resource (#​25702)
• securitycenterv2: added support for supplying location values other than "GLOBAL" to the google_scc_v2_project_notification_config resource (#​25698)
• storageinsights: added activity_data_retention_period_days field to google_storage_insights_dataset_config resource (#​25703)
• workbench: added support to set post-startup script metadata keys with managed EUC in google_workbench_instance resource (#​25719)

v7.15.0

Compare Source

NOTES:

• lustre: increased delete and update operation timeouts from 20 minutes to 60 minutes for google_lustre_instance resource (#​25662)

BREAKING CHANGES:

• compute: changed cipher_suite fields in the google_compute_vpn_tunnel resource to track order (#​25657)

FEATURES:

• New Resource: google_apigee_security_feedback (#​25589)
• New Resource: google_apphub_boundary (#​25640)
• New Resource: google_biglake_iceberg_catalog_iam_binding (#​25638)
• New Resource: google_biglake_iceberg_catalog_iam_member (#​25638)
• New Resource: google_biglake_iceberg_catalog_iam_policy (#​25638)
• New Resource: google_biglake_iceberg_catalog (#​25528)
• New Resource: google_compute_organization_security_policy_association (#​25643)
• New Resource: google_network_connectivity_destination (#​25663)
• New Resource: google_network_connectivity_multicloud_data_transfer_config (#​25609)
• New Resource: google_network_security_dns_threat_detector (#​25634)

IMPROVEMENTS:

• backupdr: added ignore_read to encryption_config field in google_backup_dr_backup_vault resource (#​25685)
• biglakeiceberg: made google_biglake_iceberg_catalog use the resource project as the quota project when user_project_override is true (#​25638)
• composer: added new enum ENVIRONMENT_SIZE_EXTRA_LARGE to environment_size field to google_composer_environment resource (#​25531)
• compute: added candidate_cloud_router_ip_address, candidate_customer_router_ip_address, candidate_cloud_router_ipv6_address, and candidate_customer_router_ipv6_address fields to google_compute_interconnect_attachment resource (#​25581)
• compute: added prefix_length field to google_compute_addresses data source (#​25654)
• compute: added client_destination_port and instance fields to google_compute_region_network_endpoints resource (#​25621)
• datastream: added support for the rule_sets field in the google_datastream_stream resource, allowing configuration of customization rules, such as BigQuery destinations partitioning and clustering. (#​25529)
• iamworkforcepool: added hard_delete support in google_iam_workforce_pool_provider_scim_tenant resource (#​25656)
• looker: added periodic_export_config field to google_looker_instance resource (#​25610)
• lustre: added access_rules_options field to google_lustre_instance resource to support root squashing and IP-based access control configuration (#​25617)
• managedkafka: replaced disk_size_gb with disk_size_gib in broker_capacity_config within the google_managed_kafka_cluster resource (#​25613)
• networkservices: added state field to google_network_services_multicast_domain resource (#​25532)
• redis: added labels to google_redis_cluster (#​25639)
• sql: marked replication_cluster.psa_write_endpoint field as Computed in google_sql_database_instance resource (#​25573)
• sql: set replication_cluster when update google_sql_database_instance resource if there is a disaster recovery(DR) replica set or there is a PSA write endpoint (#​25573)
• storage: updated datasource google_storage_object_signed_url.signed_url to use virtual style hosted url (#​25568)
• vertexai: added bigtable, zone, encryption_spec, and bigtable_options fields to google_vertex_ai_feature_online_store resource (#​25601)
• vertexai: added psc_automation_configs to resource google_vertex_ai_index_endpoint (#​25570)

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#​25596)
• alloydb: fixed an issue where boolean fields were ignored when set to false for google_alloydb_cluster and google_alloydb_instance (#​25561)
• cloudrunv2: fixed a permadiff when default values of the scaling block were explicitly declared on the google_cloud_run_v2_service resource (#​25569)
• compute: fixed a crash in google_compute_disk/google_compute_region_disk when deleting a disk attached to an instance that had any scratch disks attached (#​25641)
• compute: fixed issue where endpoints.interconnects.vlan_tags wouldn't be read correctly from the API in google_compute_wire_group resource (#​25602)
• compute: fixed update logic that causes empty instance being sent for google_compute_network_endpoints (#​25621)
• datacatalog: fixed issue where fields.display_name wouldn't be read correctly from the API in google_data_catalog_tag resource (#​25602)
• discoveryengine: marked cmek_config_id field in google_discovery_engine_cmek_config resource as required (#​25527)
• securitygateway: allowed empty field for service_discovery in google_beyondcorp_security_gateway (#​25653)
• securitygateway: allowed empty fields for user_info, group_info and device_info in google_beyondcorp_security_gateway (#​25653)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed (#​25588)
• storage: fixed the behavior in google_storage_bucket resource when force_destroy is set to true. Previously, failing to list anywhere caches would prevent destroying objects on the bucket. Now, both objects and caches are processed independently. (#​25655)

v7.14.1

Compare Source

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#​25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#​25588)

v7.14.0

Compare Source

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#​25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#​25512)
• New Data Source: google_cloud_identity_policies (#​25513)
• New Data Source: google_compute_region_security_policy (#​25488)
• New Data Source: google_compute_storage_pool (#​25485)
• New Resource: google_compute_cross_site_network (#​25479)
• New Resource: google_compute_wire_group (#​25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#​25515)
• New Resource: google_network_services_multicast_group_producer_activation (#​25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#​25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#​25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#​25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#​25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#​25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#​25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#​25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#​25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#​25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#​25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#​25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#​25510)

v7.13.0

Compare Source

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#​25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#​25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#​25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#​25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#​25367)

FEATURES:

• New Resource: google_ces_app_version (#​25297)
• New Resource: google_compute_organization_security_policy (#​25322)
• New Resource: google_dialogflow_generator (#​25340)
• New Resource: google_dialogflow_version (#​25179)
• New Resource: google_discovery_engine_widget_config (#​25378)
• New Resource: google_iam_workforce_pool_provider_scim_token (#​25270)
• New Resource: google_network_services_lb_edge_extension (#​25299)
• New Resource: google_network_services_multicast_consumer_association (#​25321)
• New Resource: google_network_services_multicast_group_range_activation (#​25386)
• New Resource: google_network_services_multicast_group_range (#​25353)
• New Resource: google_network_services_multicast_producer_association (#​25291)

IMPROVEMENTS:

• alloydb: added password_wo and password_wo_version fields to google_alloydb_user resource (#​25266)
• apphub: added identity field to google_apphub_service and google_apphub_workload resources (#​25363)
• backupdr: added encryption_config field to google_backup_dr_backup_vault resource (#​25221)
• ces: added client_function.parameters.max_items, client_function.parameters.min_items, client_function.parameters.maximum, client_function.parameters.minimum, client_function.parameters.title, client_function.response.max_items, client_function.response.min_items, client_function.response.maximum, client_function.response.minimum, and client_function.response.title fields to google_ces_tool resource (#​25309)
• ces: added entry_agent field to google_ces_example resource (#​25182)
• ces: added google_search_tool.context_urls, google_search_tool.preferred_domains, and open_api_tool.api_authentication.bearer_token_config fields to google_ces_tool resource (#​25309)
• ces: added message.chunk.tool_response and message.chunk.tool_call fields to google_ces_example resource (#​25182)
• ces: added pinned and variable_declarations.schema.title fields to google_ces_app resource (#​25233)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework_deployment resource (#​25382)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework resource (#​25382)
• cloudsecuritycompliance: added parameter_spec.default_value.oneof_value and validation.allowed_values.values.oneof_value fields to google_cloud_security_compliance_cloud_control resource (#​25441)
• cloudsecuritycompliance: added sub_parameters field to google_cloud_security_compliance_cloud_control resource (#​25441)
• colab: added custom_environment_spec field to google_colab_notebook_execution resource (#​25379)
• compute: added network_pass_through_lb_traffic_policy field to google_compute_region_backend_service resource. (#​25223)
• compute: added params field to google_compute_interconnect resource (#​25350)
• compute: added show_nat_ips and nat_ips fields to google_compute_service_attachment (#​25296)
• compute: added snapshot_type field to google_compute_snapshot resource (#​25348)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#​25444)
• container: added autoscaled_rollout_policy field to google_container_node_pool resource (beta) (#​25362)
• container: added node_kernel_module_loading.policy field to google_container_node_pool and google_container_cluster resources (#​25383)
• filestore: added support for updating directory_services fields in place in google_filestore_instance (#​25315)
• iamworkforcepool: added claim_mapping, purge_time, and service_agent fields to google_iam_workforce_pool_provider_scim_tenant resource (#​25270)
• looker: added controlled_egress_enabled and controlled_egress_config fields to google_looker_instance resource (#​25214)
• lustre: added kms_key field to google_lustre_instance resource (#​25261)
• modelarmor: added google_mcp_server_floor_setting field to google_model_armor_floorsetting resource (#​25313)
• monitoring: fixes an issue with google_monitoring_alert_policy where it ignores the resource project during Import (#​25287)
• netapp: added public docs link for google_netapp_host_group resource (#​25368)
• netapp: added 'nfsv4' to custom update export_policy object in google_netapp_volume resource (#​25442)
• oracledatabase: added properties.cpu_core_count, properties.secret_id, and properties.vault_id fields to google_oracle_database_autonomous resource (#​25264)
• oracledatabase: added properties.time_zone.version field to google_oracle_database_cloud_vm_cluster resource (#​25264)
• servicedirectory: promoted google_service_directory_namespace, google_service_directory_service, and google_service_directory_endpoint to GA (#​25177)
• servicedirectory: replaced metadata KeyValuePair with annotations KeyValueAnnotations in google_service_directory_service, and google_service_directory_endpoint resources (#​25177)
• sql: added write-only argument for root_password in google_sql_database_instance resource (#​25252)
• storage: added contexts for resource google_storage_bucket_object (#​25346)
• vertex_ai: added resourceLimits, minInstances, maxInstances, containerConcurrency and sourceCodeSpec fields to google_vertex_ai_reasoning_engine resource (#​25349)

BUG FIXES:

• bigquery: fixed the permadiff when email field values contain non-lower-case characters in access in google_bigquery_dataset (#​25317)
• bigquery: fixed the permadiff when table schema is unchanged for a google_bigquery_table with row access policies (#​25256)
• cloudrunv2: fixed permadiff if scaling field is unset on resource google_cloud_run_v2_service (#​25310)
• compute: fixed an issue where the bgp_always_compare_med field could not be unset in in google_compute_network. It can now be unset by configuring the new field delete_bgp_always_compare_med to a value of true. (#​25288)
• compute: fixed crashes when no network_endpoints block specified in google_compute_network_endpoints resource or no network endpoints exist (#​25220)
• compute: fixed the terms field in google_compute_router_route_policy to be updatable without forcing resource recreation (#​25289)
• container: fixed a perpetual diff in google_container_cluster resource when enable_l4_ilb_subsetting is enabled by the GKE control plane and not explicitly set in the configuration (#​25323)
• dialogflowcx: fixed update_mask in google_dialogflow_cx_playbook where a granular update mask is required. (#​25254)
• discoveryengine: fixed a permadiff on advanced_site_search_config in google_discovery_engine_data_store resource (#​25387)
• iamworkforcepool: fixed bug in google_iam_workforce_pool_provider_scim_token where base_uri wasn't set correctly from the API (#​25270)
• logging: fixed an issue with google_logging_*_sink.include_children fields not being updatable to true (#​25247)
• memorystore: fixed an issue where a permadiff on desired_auto_created_endpoints caused the google_memorystore_instance resource to recreated. (#​25278)
• spanner: prevented recreation when kms_key_name and kms_key_names are same for google_spanner_database (#​25215)

v7.12.0

Compare Source

DEPRECATIONS:

• backupdr: deprecated required_type in google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references. Both resources no longer have functionality, and will be removed in the next major release. (#​25107)

FEATURES:

• New Resource: google_ces_agent (#​25106)
• New Resource: google_ces_guardrail (#​25112)
• New Resource: google_ces_tool (#​25113)
• New Resource: google_cloud_security_compliance_cloud_control (#​25137)
• New Resource: google_cloud_security_compliance_framework_deployment (#​25138)
• New Resource: google_cloud_security_compliance_framework (#​25111)
• New Resource: google_discovery_engine_serving_config (#​25105)
• New Resource: google_oracle_database_exascale_db_storage_vault (#​25129)

IMPROVEMENTS:

• apphub: added functional_type, registration_type, and extended_metadata fields to google_apphub_service and google_apphub_workload resources (#​25145)
• ces: added bearer_token_config field to google_ces_toolset resource (#​25119)
• ces: added client_certificate_settings field to google_ces_app resource (#​25117)
• compute: added block_names field to google_compute_reservation resource (#​25121)
• compute: added sub_block_names field to google_compute_reservation_block data source (#​25121)
• compute: added tls_settings field to google_compute_regional_backend_service resource (#​25068)
• container: added end_time_behavior field to google_container_cluster resource (#​25120)
• container: added writable_cgroups field to node_config.defaults.containerd_config in google_container_cluster resource (#​25140)
• dataplex: added catalog_publishing_enabled field to data_profile_spec in google_dataplex_datascan resource (#​25143)
• dns: added forwarding_config.target_name_servers.ipv6_address argument to google_dns_managed_zone resource (#​25131)
• gkeonprem: added advanced_networking, multiple_network_interfaces_config and bgp_lb_config fields to google_gkeonprem_bare_metal_cluster resource (#​25136)
• managedkafka: added broker_capacity_config field to google_managed_kafka_cluster resource (#​25074)
• networksecurity: added endpoint_settings.jumbo_frames_enabled field to google_network_security_firewall_endpoint resource (#​25073)
• run: added readiness_probe field to cloud_run_service resource (#​25114)

BUG FIXES:

• backupdr: updated google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references to use LIST APIs, and require the correct List permissions (#​25107)
• provider: an issue preventing X.509 certificates from being used for authentication when supplied as Application Default Credentials as been resolved (#​25144)

v7.11.0

Compare Source

DEPRECATIONS:

• pubsublite: google_pubsub_lite_reservation will be turned down effective March 18, 2026. Use google_pubsub_reservation instead. (#​25058)
• pubsublite: google_pubsub_lite_subscription will be turned down effective March 18, 2026. Use google_pubsub_subscription instead. (#​25058)
• pubsublite: google_pubsub_lite_topic will be turned down effective March 18, 2026. Use google_pubsub_topic instead. (#​25058)

BREAKING CHANGES:

• netapp: made google_netapp_volume.export_policy.rules.squash_mode not preserve values returned by the API. Without this change, unsetting squash_mode in the provider can cause an API error. (#​25059)

FEATURES:

• New Data Source: google_artifact_registry_python_packages (#​25053)
• New Data Source: google_cloud_identity_policy (#​24946)
• New Data Source: google_compute_reservation_block (#​25034)
• New Data Source: google_compute_reservation_sub_block (#​25034)
• New Resource: google_ces_deployment (#​24945)
• New Resource: google_ces_example (#​25056)
• New Resource: google_discovery_engine_user_store (#​25054)

IMPROVEMENTS:

• bigquery: added external_data_configuration.decimal_target_types to google_bigquery_table (#​24936)
• compute: added internal_ipv6_prefix field to the google_compute_subnetwork resource (#​25037)
• compute: added ipv6_access_type field and INTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#​24940)
• compute: added ipv6_access_type field to google_compute_public_advertised_prefix resource (#​24911)
• dataplex: added data_documentation_spec field to google_dataplex_datascan resource to support the DATA_DOCUMENTATION scan type (#​25044)
• dataproc: added resource_manager_tags to google_dataproc_cluster resource (#​25057)
• lustre: added placement_policy field to google_lustre_instance resource (#​25042)
• netapp: added cache_parameters field to google_netapp_volume resource (#​24909)
• secretmanager: added project and short name support for secret on google_secret_manager_secret_version (#​25045)
• secretmanager: added project and short name support for secret on ephemeral google_secret_manager_secret_version (#​25045)

BUG FIXES:

• alloydb: fixed issue with creation when initial_user.password was set to a computed value in google_alloydb_cluster (#​25036)
• bigquery: fixed extraneous diffs in google_bigquery_table.external_data_configuration.schema (#​24936)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#​25021)
• container: added KUBE_DNS as an accepted value for cluster_dns field on google_container_cluster (#​24953)
• netapp: fixed bug where unsetting export_policy.rules.squash_mode on google_netapp_volume can cause an API error (#​25059)
• pubsub: fixed bug where google_pubsub_subscription could only be updated if bigquery_config was modified (#​24952)
• sql: fixed bug where final_backup_description in google_sql_database_instance resource wasn't set on the final backup on delete (#​25055)
• storage: fixed bug where certain changes to google_storage_bucket_acl.role_entity were ignored (#​24949)
• workstations: fixed bug in google_workstations_workstation where setting source_workstation caused a permadiff that forced recreation (#​24941)
• vmwareengine: made deletion of google_vmwareengine_private_cloud wait until the deletion completes ([#​25040](https://redire

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
1 files    0 ❌
1 errors

For more details on these parsing errors, see this check.

Results for commit 2761bf1.

♻️ This comment has been updated with latest results.