v6.29.0

FEATURES:

• New Resource: google_clouddeploy_deploy_policy (#9694)
• New Resource: google_control_plane_access (#9709)
• New Resource: google_folder_service_identity (#9703)
• New Resource: google_os_config_v2_policy_orchestrator_for_organization (#9696)

IMPROVEMENTS:

• accesscontextmanager: added session_settings field to gcp_user_access_binding resource (#9720)
• cloudedeploy: added timed_promote_release_rule and repair_rollout_rule fields to google_clouddeploy_automation resource (#9694)
• compute: added group_placement_policy.0.tpu_topology field to google_compute_resource_policy resource. (#9702)
• datastream: added support for creating streams for Salesforce source in google_datastream_stream. (#9706)
• gkeonprem: added enable_advanced_cluster field to google_gkeonprem_vmware_admin_cluster resource (#9693)
• gkeonprem: added enable_advanced_cluster field to google_gkeonprem_vmware_cluster resource (#9693)
• memorystore: added automated_backup_config field to google_memorystore_instance resource (#9708)
• netapp: added tiering_policy to google_netapp_volume_replication resource (#9716)
• parametermanagerregional: added kms_key_version field to google_parameter_manager_regional_parameter_version resource and datasource (#9712)
• parametermanagerregional: added kms_key field to google_parameter_manager_regional_parameter resource and google_parameter_manager_regional_parameters datasource (#9712)
• redis: added automated_backup_config field to google_redis_cluster (#9682)
• storage: added md5hexhash field in google_storage_bucket_object (#9722)
• workbench: added confidential_instance_config field to google_workbench_instance resource (#9688)

BUG FIXES:

• colab: fixed an issue where google_colab_* resources incorrectly required a provider-level region matching the resource location (#9714)
• datastream: updated private_keyto be mutable in google_datastream_connection_profile resource. (#9689)
• gkehub: enabled partial results to be returned when a cloud region is unreachable in google_gke_hub_feature (#9715)

v6.28.0

DEPRECATIONS:

• compute: deprecated enable_flow_logs in favor of log_config on google_compute_subnetwork resource. If log_config is present, flow logs are enabled, and enable_flow_logs can be safely removed. (#9679)
• containerregistry: Deprecated google_container_registry resource, and google_container_registry_image and google_container_registry_repository data sources. Use google_artifact_registry_repository instead. (#9650)

FEATURES:

• New Data Source: google_compute_region_backend_service (#9616)
• New Data Source: google_organization_iam_custom_roles (#9628)
• New Data Source: google_storage_control_folder_intelligence_config (#9655)
• New Data Source: google_storage_control_organization_intelligence_config (#9655)
• New Data Source: google_storage_control_project_intelligence_config (#9655)
• New Resource: google_apigee_dns_zone (#9622)
• New Resource: google_dataproc_metastore_database_iam_* resources (#9615)
• New Resource: google_dataproc_metastore_table_iam_* (#9647)
• New Resource: google_discovery_engine_sitemap (#9608)
• New Resource: google_eventarc_enrollment (#9623)
• New Resource: google_firebase_app_hosting_build (#9646)
• New Resource: google_memorystore_instance_desired_user_created_endpoints (#9652)
• New Resource: google_storage_control_folder_intelligence_config (#9644)
• New Resource: google_storage_control_organization_intelligence_config (#9617)

IMPROVEMENTS:

• accesscontextmanager: added roles field to ingress and egress policies of google_access_context_manager_service_perimeter* resources (#9661)
• cloudfunctions2: added binary_authorization_policy field to google_cloudfunctions2_function resource (#9649)
• cloudrunv2: added gpu_zonal_redundancy_disabled field to google_cloud_run_v2_service resource (#9639)
• compute: added md5_authentication_keys field to google_compute_router resource (#9673)
• compute: added EXTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#9630)
• compute: added external_ipv6_prefix, stack_type, and ipv6_access_type fields to google_compute_subnetwork data source (#9660)
• compute: added path_matchers.route_rules.custom_error_response_policy field to google_compute_url_map resource (#9656)
• compute: added source_machine_image_encryption_key field to google_compute_instance_from_machine_image resource (#9632)
• compute: added tls_settings field to google_compute_backend_service resource (#9654)
• compute: added several boot_disk, attached_disk, and instance_encryption_key fields to google_compute_instance and google_compute_instance_template resources (#9669)
• compute: added image_encryption_key.raw_key and image_encryption_key.rsa_encrypted_key fields to google_compute_image resource (#9669)
• compute: added snapshot_encryption_key.rsa_encrypted_key field to google_compute_snapshot resource (#9669)
• container: added disable_l4_lb_firewall_reconciliation field to google_container_cluster resource (#9648)
• datafusion: added tags field to google_data_fusion_instance resource to allow setting tags for instances at creation time (#9609)
• datastream: added blmt_config field to bigquery_destination_config resource to enable support for BigLake Managed Tables streams (#9677)
• datastream: added secret_manager_stored_password field to google_datastream_connection_profile resource (#9633)
• identityplatform: added disabled_user_signup and disabled_user_deletion to google_identity_platform_tenant resource (#9613)
• memorystore: added psc_attachment_details field to google_memorystore_instance resource, to enable use of the fine-grained resource google_memorystore_instance_desired_user_created_connections (#9652)
• memorystore: added the cross_cluster_replication_config field to the google_redis_cluster resource (#9670)
• metastore: added deletion_protection field to google_dataproc_metastore_federation resource (#9674)
• networksecurity: added antivirus_overrides field to google_network_security_security_profile resource (#9643)
• networksecurity: added connected_deployment_groups and associations fields to google_network_security_mirroring_endpoint_group resource (#9606)
• networksecurity: added locations field to google_network_security_mirroring_deployment_group resource (#9607)
• networksecurity: added locations field to google_network_security_mirroring_endpoint_group_association resource (#9603)
• parametermanager: added kms_key_version field to google_parameter_manager_parameter_version resource and datasource (#9642)
• parametermanager: added kms_key field to google_parameter_manager_parameter resource and google_parameter_manager_parameters datasource (#9642)
• provider: added external_credentials block in provider (#9658)
• redis: added automated_backup_config field to google_redis_cluster resource (#9682)
• storage: added content_base64 field in google_storage_bucket_object_content datasource (#9638)

BUG FIXES:

• alloydb: added a mutex to google_alloydb_cluster to prevent conflicts among multiple cluster operations (#9604)
• artifactregistry: fixed type assertion panic in google_artifact_registry_repository resource (#9672)
• bigtable: fixed automated_backup_policy field for google_bigtable_table resource (#9627)
• cloudrunv2: fixed the diffs for unchanged template.template.containers.env in google_cloud_run_v2_job resource (#9681)
• compute: fixed a regression in google_compute_subnetwork where setting log_config would not enable flow logs without enable_flow_logs also being set to true. To enable or disable flow logs, please use log_config. enable_flow_logs is now deprecated and will be removed in the next major release. (#9679)
• compute: fixed unable to update the preview field for google_compute_region_security_policy_rule resource (#9614)
• compute: fixed unable to update the preview field for google_compute_security_policy_rule resource ([#9614](https://github.com/hashicorp/terraform-provider-...

v6.27.0

FEATURES:

• New Data Source: google_compute_images (#9556)
• New Data Source: google_organization_iam_custom_role (#9577)
• New Resource: google_lustre_instance (#9601)
• New Resource: google_os_config_v2_policy_orchestrator (#9579)
• New Resource: google_storage_control_project_intelligence_config (#9570)

IMPROVEMENTS:

• bigquery: added secondary_location and replication_status fields to support managed disaster recovery feature in google_bigquery_reservation (#9575)
• clouddeploy: added dns_endpoint field to to google_clouddeploy_target resource (#9553)
• compute: added group_placement_policy.0.gpu_topology field to google_compute_resource_policy resource (#9555)
• compute: added shielded_instance_initial_state structure to google_compute_image resource (#9583)
• compute: added LINK_TYPE_ETHERNET_400G_LR4 enum value to link_type field in google_compute_interconnect resource (#9571)
• compute: added architecture and guest_os_features to google_compute_instance (#9558)
• compute: added instance_lifecycle_policy.on_failed_health_check field in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager (#9598)
• compute: added workload_policy.type, workload_policy.max_topology_distance and workload_policy.accelerator_topology fields to google_compute_resource_policy resource (#9599)
• container: added ip_endpoints_config field to google_container_cluster resource (#9597)
• container: added node_config.windows_node_config field to google_container_node_pool resource. (#9559)
• container: added pod_autoscaling field to google_container_cluster resource (#9574)
• memorystore: added the maintenance_policy field to the google_memorystore_instance resource (#9595)
• memorystore: enabled update support for node_type field in google_memorystore_instance resource (#9568)
• networkmanagement: added destination.forwarding_rule, destination.gke_master_cluster, destination.fqdn, destination.cloud_sql_instance, destination.redis_instance, destination.redis_cluster, fields to google_network_management_connectivity_test resource (#9591)
• networkmanagement: added round_trip, bypass_firewall_checks fields to google_network_management_connectivity_test resource (#9591)
• networkmanagement: added source.gke_master_cluster, source.cloud_sql_instance, source.cloud_function, source.app_engine_version, source.cloud_run_revision fields to google_network_management_connectivity_test resource (#9591)
• networksecurity: added connected_deployment_group and associations fields to google_network_security_intercept_endpoint_group resource (#9586)
• networksecurity: added locations field to google_network_security_intercept_deployment_group resource (#9578)
• networksecurity: added locations field to google_network_security_intercept_endpoint_group_association resource (#9600)
• redis: added update support for google_redis_cluster node_type (#9554)
• storage: added metadata_options in google_storage_transfer_job (#9567)

BUG FIXES:

• bigqueryanalyticshub: fixed a bug in google_bigquery_analytics_hub_listing_subscription where a subscription using a different project than the dataset would not work (#9596)
• cloudrun: fixed the perma-diffs for unchanged template.spec.containers.env in google_cloud_run_service resource (#9572)
• cloudrunv2: fixed the perma-diffs for unchanged template.containers.env in google_cloud_run_v2_service resource (#9572)
• compute: fixed the issue that user can't use regional disk in google_compute_instance_template (#9569)
• dataflow: fixed a permadiff on template_gcs_path in google_dataflow_job resource (#9564)
• storage: lowered the minimum required items for custom_placement_config.data_locations from 2 to 1, and removed the Terraform-enforced maximum item limit for the field in google_storage_bucket (#9562)

v6.26.0

FEATURES:

• New Data Source: google_project_iam_custom_role (#9551)
• New Data Source: google_project_iam_custom_roles (#9519)
• New Resource: google_eventarc_pipeline (#9508)
• New Resource: google_firebase_app_hosting_backend (#9531)
• New Resource: google_managed_kafka_connect_cluster (#9552)
• New Resource: google_managed_kafka_connector (#9552)

IMPROVEMENTS:

• alloydb: added psc_config field to ``google_alloydb_cluster` resource (#9548)
• bigquery: added table_metadata_view query param to google_bigquery_table (#9530)
• bigquery: added support for continuous query to google_bigquery_job (#9520)
• clouddeploy: added dns_endpoint field to to google_clouddeploy_target resource (#9553)
• compute: added UNRESTRICTED option to the tls_early_data field in the google_compute_target_https_proxy resource (#9527)
• compute: added enable_flow_logs and state fields to google_compute_subnetwork resource (#9541)
• container: added additional value KCP_HPA for logging_config.enable_components field in google_container_cluster resource (#9529)
• dataform: added deletion_policy field to google_dataform_repository resource. Default value is DELETE. Setting deletion_policy to FORCE will delete any child resources of this repository as well. (#9549)
• memorystore: added update support for engine_version field in google_memorystore_instance resource (#9534)
• metastore: added create_time and update_time fields to google_dataproc_metastore_federation resource (#9528)
• metastore: added create_time and update_time fields to google_dataproc_metastore_service resource (#9523)
• networksecurity: added not_operations field to google_network_security_authz_policy resource (#9511)
• networkservices: added ip_version and envoy_headers fields to google_network_services_gateway resource (#9514)
• sql: increased settings.insights_config.query_string_length and settings.insights_config.query_string_length limits for Enterprise Plus edition sql_database_instance resource. (#9539)
• storageinsights: added parquet_options field to google_storage_insights_report_config resource (#9522)
• workflows: added execution_history_level field to google_workflows_workflow resource (#9509)

BUG FIXES:

• accesscontextmanager: fixed panic on empty access_policies in google_access_context_manager_access_policy (#9536)
• compute: adjusted mapped image names that were preventing usage of fedora-coreos in google_compute_image resource (#9513)
• container: re-added DNS_SCOPE_UNSPECIFIED value to the dns_config.cluster_dns_scope field in google_container_cluster resource and suppressed diffs between DNS_SCOPE_UNSPECIFIED in config and empty/null in state (#9547)
• discoveryengine: changed field dataStoreIds to mutable in google_discovery_engine_search_engine (#9506)
• networksecurity: min_tls_version and tls_feature_profile fields updated to use the server assigned default and prevent a permadiff in google_network_security_tls_inspection_policy resource. (#9514)
• oslogin: added a wait after creating google_os_login_ssh_public_key to allow for propagation (#9546)
• spanner: fixed issue with disabling autoscaling in google_spanner_instance (#9542)

v6.25.0

NOTES:

• eventarc: google_eventarc_channel now uses MMv1 engine instead of DCL. (#9488)
• workbench: increased create timeout for google_workbench_instance to 40mins. (#9468)

FEATURES:

• New Data Source: google_compute_region_ssl_policy (#9439)
• New Resource: google_eventarc_google_api_source (#9492)
• New Resource: google_iam_oauth_client_credential (#9491)
• New Resource: google_iam_oauth_client (#9456)
• New Resource: google_network_security_backend_authentication_config (#9481)

IMPROVEMENTS:

• alloydb: added psc_instance_config.psc_interface_configs field to google_alloydb_instance resource (#9469)
• compute: added create_snapshot_before_destroy to google_compute_disk and google_compute_region_disk to enable creating a snapshot before disk deletion (#9442)
• compute: added custom_metrics field to google_compute_backend_service and google_compute_region_backend_service (#9473)
• compute: added ip_collection and ipv6_gce_endpoint fields to google_compute_subnetwork resource (#9490)
• compute: added log_config.optional_mode and log_config.optional_fields fields to google_compute_region_backend_service resource (#9484)
• compute: added rsa_encrypted_key to google_compute_region_disk (#9442)
• compute: added scheduling.termination_time field to google_compute_instance, google_compute_instance_from_machine_image, google_compute_instance_from_template, google_compute_instance_template, and google_compute_region_instance_template resources (#9479)
• compute: added update support for firewall_policy in google_compute_firewall_policy_association resource. It is recommended to only perform this operation in combination with a protective lifecycle tag such as "create_before_destroy" or "prevent_destroy" on your previous firewall_policy resource in order to prevent situations where a target attachment has no associated policy. (#9495)
• compute: made purpose field updatable in google_compute_subnetwork. (#9489)
• container: added "JOBSET" as a supported value for enable_components in google_container_cluster resource (#9453)
• datastream: added support for creating connection profiles for Salesforce in google_datastream_connection_profile (#9482)
• firebasedataconnect: added deletion_policy field to google_firebase_data_connect_service resource (#9496)
• networksecurity: added description field to google_network_security_intercept_deployment, google_network_security_intercept_deployment_group, google_network_security_intercept_endpoint_group resources (#9474)
• networksecurity: added description field to google_network_security_mirroring_deployment, google_network_security_mirroring_deployment_group, google_network_security_mirroring_endpoint_group resources (#9476)
• tpuv2: added spot field to google_tpu_v2_vm resource (#9478)
• workstations: added tags field to google_workstations_workstation_cluster resource (#9441)

BUG FIXES:

• backupdr: added missing SUNDAY option to days_of_week field in google_backup_dr_backup_plan resource (#9446)
• compute: fixed network_interface.internal_ipv6_prefix_length not being set or read in Terraform state in google_compute_instance resource (#9444)
• compute: fixed bug in google_compute_router_nat where max_ports_per_vm couldn't be unset once set. (#9483)
• container: fixed perma-diff in google_container_cluster when cluster_dns_scope is unspecified (#9443)
• networksecurity: added wait time on google_network_security_gateway_security_policy_rule resource when creating and deleting to prevent race conditions (#9448)

v6.24.0

NOTES:

• gemini: removed unsupported value GEMINI_CLOUD_ASSIST for field product in google_gemini_logging_setting_binding resource (#9438)
• gemini: removed unsupported value GEMINI_CODE_ASSIST for field product in google_gemini_data_sharing_with_google_setting_binding resource (Beta) (#9437)
• iam: added member value to the error message when member validation fails for google_project_iam_* (#9406)

DEPRECATIONS:

• datacatalog: deprecated google_data_catalog_entry and google_data_catalog_tag resources. For steps to transition your Data Catalog users, workloads, and content to Dataplex Catalog, see https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog. (#9393)
• notebooks: deprecated non-functional google_notebooks_location resource (#9373)

FEATURES:

• New Data Source: google_memorystore_instance (#9400)
• New Resource: google_apihub_host_project_registration (#9419)
• New Resource: google_compute_instant_snapshot (#9412)
• New Resource: google_eventarc_message_bus (#9423)
• New Resource: google_gemini_data_sharing_with_google_setting_binding (GA) (#9437)
• New Resource: google_gemini_gcp_enablement_setting_binding (GA) (#9407)
• New Resource: google_gemini_gemini_gcp_enablement_setting_binding (#9392)
• New Resource: google_storage_anywhere_cache (#9389)

IMPROVEMENTS:

• compute: added creation_timestamp, next_hop_peering, warnings.code, warnings.message, warnings.data.key, warnings.data.value, next_hop_hub, route_type, as_paths.path_segment_type, as_paths.as_lists and route_status fields to google_compute_route resource (#9386)
• compute: added max_stream_duration field to google_compute_url_map resource (#9387)
• compute: added fields architecture, source_instant_snapshot, source_storage_object, resource_manager_tags to google_compute_disk. (#9412)
• container: added enum value UPGRADE_INFO_EVENT for GKE notification filter in google_container_cluster resource (#9421)
• iam: added AZURE_AD_GROUPS_ID field to google_iam_workforce_pool_provider.extra_attributes_oauth2_client.attributes_type resource (#9433)
• networkconnectivity: added policy_mode field to google_network_connectivity_hub resource (#9409)
• networkservices: added location field to google_network_services_grpc_route resource (#9429)
• storagetransfer: added logging_config field to google_storage_transfer_job resource (#9378)

BUG FIXES:

• bigquery: updated the max_staleness field in google_bigquery_table to be a computed field (#9411)
• chronicle: fixed an error during resource creation with certain run_frequency configurations in google_chronicle_rule_deployment (#9422)
• discoveryengine: fixed bug preventing creation of google_discovery_engine_target_site resources (#9436)
• eventarc: fixed an issue where google_eventarc_trigger creation failed due to the region could not be parsed from the trigger's name (#9383)
• gemini: fixed permadiff on product field in google_gemini_data_sharing_with_google_setting_binding resource (Beta) (#9437)
• publicca: encoded b64_mac_key in base64url, instead of base64 in google_public_ca_external_account_key (#9424)
• storage: fixed a 412 error returned on some google_storage_bucket_iam_policy deletions (#9434)

v6.23.0

NOTES:

• The google_sql_user resource now supports password_wo write-only arguments
• The google_bigquery_data_transfer_config resource now supports secret_access_key_wo write-only arguments
• The google_secret_version resource now supports secret_data_wo write-only arguments

IMPROVEMENTS:

• sql: added password_wo and password_wo_version fields to google_sql_user resource (#21616)
• bigquerydatatransfer: added secret_access_key_wo and secret_access_key_wo_version fields to google_bigquery_data_transfer_config resource (#21617)
• secretmanager: added secret_data_wo and secret_data_wo_version fields to google_secret_version resource (#21618)

v6.22.0

NOTES:

• provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.

DEPRECATIONS:

• datacatalog: deprecated google_data_catalog_tag_template. Use google_dataplex_aspect_type instead. For steps to transition your Data Catalog users, workloads, and content to Dataplex Catalog, see https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog. (#9347)
• datacatalog: deperecated google_data_catalog_entry_group. Use google_dataplex_entry_group instead. For steps to transition your Data Catalog users, workloads, and content to Dataplex Catalog, see https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog. (#9349)

FEATURES:

• New Data Source: google_alloydb_cluster (#9361)
• New Data Source: google_project_ancestry (#9326)
• New Resource: google_gemini_data_sharing_with_google_setting_binding (#9356)
• New Resource: google_spanner_instance_partition (#9354)

IMPROVEMENTS:

• compute: added import_subnet_routes_with_public_ip and export_subnet_routes_with_public_ip fields to google_compute_network_peering_routes_config resource (#9320)
• developerconnect: added bitbucket_cloud_config and bitbucket_data_center_config fields to google_developer_connect_connection resource (ga) (#9338)
• iam: added extra_attributes_oauth2_client field to google_iam_workforce_pool_provider resource (#9336)
• redis: added kms_key field to google_redis_cluster resource (#9334)
• tpuv2: added network_config field to google_tpu_v2_queued_resource resource (#9332)

BUG FIXES:

• apigee: fixed error when deleting google_apigee_organization (#9352)
• bigtable: fixed a bug where sometimes updating an instance's cluster list could result in an error if there was an existing cluster with autoscaling enabled (#9368)
• chronicle: fixed bug setting enabled on creation in google_chronicle_rule_deployment (#9343)

v6.21.0

NOTES:

• provider: There was an issue with Registry metadata that made some platforms unavailable between 2025/02/18 and 2025/02/19. This issue has now been resolved and google-beta 6.21.0 should work as expected on all platforms. Tracking issue: hashicorp/terraform-provider-google#21493
• provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.

FEATURES:

• New Data Source: google_alloydb_instance (#9307)
• New Resource: google_firebase_data_connect_service (#9304)
• New Resource: google_gemini_data_sharing_with_google_setting (#9250)
• New Resource: google_gemini_gemini_gcp_enablement_setting (beta) (#9253)
• New Resource: google_gemini_logging_setting_binding (#9292)
• New Resource: google_gemini_release_channel_setting_binding (#9287)
• New Resource: google_netapp_volume_quota_rule (#9248)

IMPROVEMENTS:

• accesscontextmanager: added etag to access context manager directional policy resources google_access_context_manager_service_perimeter_dry_run_egress_policy, google_access_context_manager_service_perimeter_dry_run_ingress_policy, google_access_context_manager_service_perimeter_egress_policy and google_access_context_manager_service_perimeter_ingress_policy to prevent overriding changes (#9302)
• accesscontextmanager: added title field to policy blocks under google_access_context_manager_service_perimeter and variants (#9259)
• artifactregistry: set pageSize to 1000 to speedup google_artifact_registry_docker_image data source queries (#9297)
• compute: added graceful_shutdown field to google_compute_instance, google_compute_instance_template and google_compute_region_instance_template resource (#9278)
• compute: added labels field to google_compute_ha_vpn_gateway resource (#9309)
• compute: added validation for disk names in google_compute_disk (#9280)
• container: added new fields container_log_max_size, container_log_max_files, image_gc_low_threshold_percent, image_gc_high_threshold_percent, image_minimum_gc_age, image_maximum_gc_age, and allowed_unsafe_sysctls to node_kubelet_config block in google_container_cluster resource. (#9274)
• monitoring: added condition_sql field to google_monitoring_alert_policy resource (#9242)
• networkservices: added location field to google_network_services_mesh resource (#9282)
• workstations: added update support to persistent_directories.gce_pd.size_gb and persistent_directories.gce_pd.disk_type in google_workstations_workstation_config resource (#9305)
• securitycenter: added type, expiry_time field to google_scc_mute_config resource (#9273)

BUG FIXES:

• chronicle: fixed creation issues when optional fields were missing for google_chronicle_rule_deployment resource (#9312)
• dns: fixed a bug where google_dns_managed_zone is unable to update with service_directory_config specified (#9239)
• databasemigrationservice: fixed error details type on google_database_migration_service_migration_job (#9244)
• networkservices: fixed a bug with google_network_services_authz_extension.wire_format sending an invalid default value by removing the Terraform default and letting the API set the default. (#9245)

v6.20.0

NOTES:

• provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.
• compute: google_compute_firewall_policy now uses MMv1 engine instead of DCL. (#9228)

FEATURES:

• New Data Source: google_beyondcorp_application_iam_policy (#9205)
• New Data Source: google_parameter_manager_parameter_version_render (#9190)
• New Data Source: google_parameter_manager_regional_parameter_version_render (#9232)
• New Resource: google_beyondcorp_application (#9205)
• New Resource: google_beyondcorp_application_iam_binding (#9205)
• New Resource: google_beyondcorp_application_iam_member (#9205)
• New Resource: google_beyondcorp_application_iam_policy (#9205)
• New Resource: google_bigquery_analytics_hub_listing_subscription (#9195)
• New Resource: google_colab_notebook_execution (#9186)
• New Resource: google_colab_schedule (#9226)
• New Resource: google_compute_network_firewall_policy_packet_mirroring_rule (#9202)
• New Resource: google_gemini_logging_setting (#9198)
• New Resource: google_gemini_release_channel_setting (#9207)

IMPROVEMENTS:

• accesscontextmanager: added resource to sources in egress_from under resources google_access_context_manager_service_perimeter, google_access_context_manager_service_perimeters, google_access_context_manager_service_perimeter_egress_policy, google_access_context_manager_service_perimeter_dry_run_egress_policy (#9196)
• cloudrunv2: added base_image_uri and build_info to google_cloud_run_v2_service (#9229)
• colab: added auto_upgrade field to google_colab_runtime (#9216)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#9206)
• colab: added desired_state field to google_colab_runtime, making it startable/stoppable (#9209)
• compute: added ip_collection field to google_compute_forwarding_rule resource (#9194)
• compute: added mode and allocatable_prefix_length fields to google_compute_public_delegated_prefix resource (#9218)
• compute: allow parallelization of google_compute_per_instance_config and google_compute_region_per_instance_config deletions by not locking on the parent resource, but including instance name. (#9181)
• container: added auto_monitoring_config field and subfields to the google_container_cluster resource (#9224)
• filestore: added initial_replication field for peer instance configuration and effective_replication output for replication configuration output to google_filestore_instance (#9200)
• memorystore: added CLUSTER_DISABLED to mode field in google_memorystore_instance (#9178)
• networkservices: added compression_mode and allowed_methods fields to google_network_services_edge_cache_service resource (#9201)
• privateca: added user_defined_access_urls and subfields to google_privateca_certificate_authority resource to add support for custom CDP AIA URLs (#9221)
• workbench: added enable_third_party_identity field to google_workbench_instance resource (#9236)

BUG FIXES:

• appengine: added a mitigation for an upcoming default change to standard_scheduler_settings.max_instances for new google_app_engine_standard_app_version resources. If the field is not specified in configuration, diffs will now be ignored. (#9233)
• bigquery: added diff suppression for legacy values in renewal_plan field in google_bigquery_capacity_commitment resource (#9189)
• compute: fixed google_compute_(region_)resize_request requiring region/zone to be specified in all cases. They can now be pulled from the provider. (#9235)
• container: reverted locking behavior in google_container_node_pool that caused regression of operation apply time spike started in v6.15 (#9188)
• dns: fixed a bug where google_dns_managed_zone is unable to update with service_directory_config specified (#9239)
• workbench: fixed a bug with google_workbench_instance metadata removal not working as expected (#9208)