chore(deps): update terraform google to v7

[red-hat-konflux]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
google (source)	provider	major	~> 6.47.0 → ~> 7.42.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

hashicorp/terraform-provider-google (google)

v7.42.0

Compare Source

NOTES:

• compute: migrated google_compute_region_instance_template resource to use direct HTTP rather than a client library (#​28431)

DEPRECATIONS:

• vertexai: deprecated google_vertex_ai_schedule, an accidentally-added duplicate resource; use google_colab_schedule instead. (#​28406)

FEATURES:

• New Data Source: google_cloud_quotas_quota_adjuster_settings (#​28383)
• New List Resource: google_service_account_key (#​28430)
• New Resource: google_agent_identity_auth_provider (#​28447)
• New Resource: google_apihub_runtime_project_attachment (#​28449)
• New Resource: google_chronicle_big_query_export (#​28403)
• New Resource: google_compute_global_vm_extension_policy (#​28445)
• New Resource: google_compute_rollout_plan (#​28445)
• New Resource: google_vector_search_data_object (#​28434)
• New Resource: google_vertex_ai_persistent_resource (#​28435)

IMPROVEMENTS:

• bigquery: added table_type field to google_bigquery_routine resource (#​28446)
• cloudrunv2: added start_execution_token and run_execution_token fields to google_cloud_run_v2_jobresource (#​28384)
• colab: added catch_up, create_pipeline_job_request, create_time, last_pause_time, last_resume_time, last_scheduled_run_response, max_concurrent_active_run_count, next_run_time, started_run_count, and update_time fields, and sub-fields under create_notebook_execution_job_request.notebook_execution_job (create_time, custom_environment_spec, encryption_spec, job_state, kernel_name, labels, name, schedule_resource_name, workbench_runtime) and under create_notebook_execution_job_request (notebook_execution_job_id, parent) to google_colab_schedule resource (#​28406)
• compute: added effective_location field to google_compute_interconnect resource (#​28416)
• compute: added request_headers and response_headers fields to log_config on google_compute_backend_service and google_compute_region_backend_service resources (#​28421)
• compute: added identity support to google_compute_instance, allowing resource import using an identity block (#​28433)
• compute: changed location field to mutable for google_compute_interconnect resource (#​28416)
• container: added addons_config.node_readiness_config field to google_container_cluster resource (#​28417)
• container: added rollback_safe_upgrade, desired_emulated_version, and emulated_version fields to google_container_cluster resource (#​28442)
• container: increased default timeout to 2 hours for google_container_node_poolresource (#​28382)
• dataproc: added confidential_instance_type field to google_dataproc_cluster resource (#​28371)
• gkehub: added min_control_plane_version, min_node_version, target_control_plane_version, target_node_version, and operational_state fields to google_gke_hub_rollout_sequence resource (#​28429)
• hypercomputecluster: increased default timeouts for google_hypercomputecluster_cluster to 120 minutes (#​28448)
• modelarmor: added field template_metadata.filter_version_selector to google_model_armor_template resource (#​28402)
• sql: added identity support to google_sql_user for terraform query support (#​28428)

BUG FIXES:

• bigtable: fixed an issue where bigtable_custom_endpoint and universe_domain were ignored when creating Bigtable resources (#​28404)
• compute: fixed an issue where diffs in google_compute_security_policy were not detected (#​28420)
• gkehub: fixed rollout_creation_scope and upgrade_types fields in google_gke_hub_rollout_sequence resource (#​28429)
• osconfig: added client-side validation to ensure resource_hierarchy_selector and location_selector are not set at the same time in google_os_config_v2_policy_orchestrator, google_os_config_v2_policy_orchestrator_for_folder, and google_os_config_v2_policy_orchestrator_for_organization (#​28407)
• secretmanager: fixed an issue where google_secret_manager_secret_version would fail at apply time if neither secret_data nor secret_data_wo was set (#​28419)
• sql: fixed issue where updates to settings.ip_configuration.psc_config.allowed_consumer_projects in google_sql_database_instance were silently ignored on in-place updates (#​28444)
• vertexai: fixed google_vertex_ai_endpoint_with_model_garden_deployment destroying and recreating the endpoint when min_replica_count, max_replica_count, required_replica_count, or autoscaling_metric_specs changed (#​28401)

v7.41.0

Compare Source

FEATURES:

• New Resource: google_chronicle_environment_group (#​28338)
• New Resource: google_compute_router_named_set (#​28326)
• New List Resource: google_compute_backend_bucket_signed_url_key (#​28357)
• New List Resource: google_compute_backend_service_signed_url_key (#​28357)
• New List Resource: google_compute_network_firewall_policy (#​28357)
• New List Resource: google_compute_network_firewall_policy_association (#​28357)
• New List Resource: google_compute_network_firewall_policy_packet_mirroring_rule (#​28357)
• New List Resource: google_compute_preview_feature (#​28357)
• New List Resource: google_compute_public_advertised_prefix (#​28357)
• New List Resource: google_compute_region_backend_bucket (#​28357)
• New List Resource: google_compute_region_network_firewall_policy (#​28357)

IMPROVEMENTS:

• accesscontextmanager: added allowed_service_patterns and service_patterns_enforcement_scopes fields to google_access_context_manager_service_perimeter to support VPC Service Controls for non-GCP APIs. (#​28349)
• accesscontextmanager: added pscEndpoint to sources in ingress_from and egress_from under resources google_access_context_manager_service_perimeter and variants (#​28307)
• backupdr: added backup_blocked_by_vault_access_restriction to data.google_backup_dr_data_source resource (#​28361)
• backupdr: added force_update_access_restriction to google_backup_dr_backup_vault resource (#​28361)
• backupdr: added update support for access_restriction to google_backup_dr_backup_vault resource (#​28361)
• certificatemanager: added in-place update support for the self_managed certificate data (pem_certificate / pem_private_key) on google_certificate_manager_certificate; changing the certificate data is now applied via update instead of forcing recreation (#​28337)
• cloudrunv2: added tags field to google_cloud_run_v2_service and google_cloud_run_v2_job resources to allow setting tags for services and jobs at creation time. (#​28328)
• cloudsql: added max_custom_on_demand_retention_days to create backup_plan example for sqladmin (#​28343)
• compute: added 3500GB and 7000GB SSD partition size to google_compute_instance_template resource (#​28352)
• compute: added FLEX_START and RESERVATION_BOUND support to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources (#​28365)
• container: added the support for updating node_image_config and image_type fields at the same time (#​28283)
• dataproc: added confidential_instance_type to google_dataproc_cluster resource (#​28371)
• dataproc: added instance_selection.disk_config field to google_dataproc_cluster resource (#​28339)
• discoveryengine: added enable_llm_layout_parsing and enable_get_processed_document fields to google_discovery_engine_data_store resource (#​28284)
• sql: added instance_auto_dns_status and write_endpoint_auto_dns_status output fields to psc_auto_connections block in google_sql_database_instance resource (#​28331)
• sql: added include_replicas_for_major_version_upgrade field to google_sql_database_instance resource (#​28345)
• sql: added switch_transaction_logs_to_cloud_storage_enabled field to google_sql_database_instance resource (#​28318)
• vertexai: promoted google_vertex_ai_semantic_governance_policy_engine resource to GA (#​28347)
• workbench: added enable_deletion_protection field to google_workbench_instance resource (#​28355)
• workbench: added resource_policies field to google_workbench_instance resource (#​28354)
• workbench: added support for min_cpu_platform in google_workbench_instance resource (#​28369)
• workstations: added instance_metadata field to google_workstations_workstation_config resource (#​28342)

BUG FIXES:

• compute: fixed bug where a permadiff on google_compute_reservation_region_commitment.existing_reservations would persist after upgrading (#​28353)
• compute: fixed permadiff on keepalive_interval for google_compute_router bgp block when set to default value (#​28285)
• resourcemanager: fixed validation of target_service_account and delegates in the google_service_account_access_token, google_service_account_id_token, and google_service_account_jwt data sources, and of name in the google_service_account_key data source, to reject identifiers that contain path separators (#​28308)
• securityposture: fixed a bug where the enforce field in google_securityposture_posture was always set, causing failures for list constraints. (#​28359)
• vmwareengine: added correct update_mask value to google_vmwareengine_private_cloud updates (#​28360)

v7.40.0

Compare Source

DEPRECATIONS:

• storage: the admit-on-second-miss value for google_storage_anywhere_cache.admission_policy is deprecated and will be removed in a future major release. The backend will ignore this attribute and treat it as admit-on-first-miss. (#​28210)

NOTES:

• compute: migrated google_compute_instance code related to advanced machine features to use direct HTTP rather than a client library (#​28160)

FEATURES:

• New Data Source: google_data_catalog_taxonomy (#​28237)
• New Data Source: google_oracle_database_exascale_db_storage_vault (#​28260)
• New List Resource: 'google_project' (#​28041)
• New List Resource: google_compute_instant_snapshot (#​28256)
• New List Resource: google_compute_region_instant_snapshot (#​28256)
• New List Resource: google_compute_region_target_http_proxy (#​28256)
• New List Resource: google_compute_region_target_tcp_proxy (#​28256)
• New List Resource: google_compute_region_url_map (#​28256)
• New List Resource: google_compute_rollout_plan (#​28256)
• New List Resource: google_compute_target_grpc_proxy (#​28256)
• New List Resource: google_compute_target_http_proxy (#​28256)
• New List Resource: google_compute_target_ssl_proxy (#​28256)
• New List Resource: google_compute_target_tcp_proxy (#​28256)
• New List Resource: google_dns_managed_zone (#​28257)
• New List Resource: google_oracle_database_exascale_db_storage_vaults (#​28260)
• New Resource: google_chronicle_findings_refinement_deployment (#​28240)
• New Resource: google_chronicle_soar_domain (#​28214)
• New Resource: google_iap_agent_registry_agent_iam_binding (#​28231)
• New Resource: google_iap_agent_registry_agent_iam_member (#​28231)
• New Resource: google_iap_agent_registry_agent_iam_policy (#​28231)
• New Resource: google_iap_agent_registry_endpoint_iam_binding (#​28231)
• New Resource: google_iap_agent_registry_endpoint_iam_member (#​28231)
• New Resource: google_iap_agent_registry_endpoint_iam_policy (#​28231)
• New Resource: google_iap_agent_registry_mcp_server_iam_binding (#​28231)
• New Resource: google_iap_agent_registry_mcp_server_iam_member (#​28231)
• New Resource: google_iap_agent_registry_mcp_server_iam_policy (#​28231)
• New Resource: google_tags_tag_binding_collection (#​28180)
• New Resource: google_vector_search_index (#​28238)
• New Resource: google_chronicle_environment (#​28206)
• New Resource: google_chronicle_data_export (#​28239)

IMPROVEMENTS:

• agentregistry: added name field to google_agent_registry_binding resource (#​28207)
• agentregistry: added name field to google_agent_registry_service resource (#​28207)
• appengine: added app_engine_bundled_services field to google_app_engine_standard_app_version resource (#​28213)
• biglakeiceberg: add support for CATALOG_TYPE_FEDERATED with federated_catalog_options to google_biglake_iceberg_catalog (#​28241)
• compute: added target_type and target_forwarding_rules to google_compute_region_network_firewall_policy_with_rules resource (#​28061)
• compute: added workload_identity_config fields to google_compute_instance and google_compute_instance_template resources (#​28266)
• compute: added instance_lifecycle_policy.on_repair.allow_changing_zone field to google_compute_instance_group_manager and google_compute_instance_region_group_manager. (#​28174)
• container: added ANY_RESERVATION_THEN_FAIL option to consume_reservation_type field in google_container_cluster and google_container_node_pool resources (#​28060)
• container: added custom_node_init configuration block to node_config (supporting Cloud Storage and Secret Manager) for both google_container_cluster and google_container_node_pool resources. (#​28262)
• container: added maintenance_policy field to google_container_node_pool resource (#​28217)
• container: added recurring_maintenance_window field to google_container_cluster resource (#​28227)
• dataplex: added catalog_publishing_enabled field to google_dataplex_datascan resource (#​28232)
• dlp: added inspect_config.min_likelihood_per_info_type to google_data_loss_prevention_inspect_template (#​28236)
• firestore: added skip_wait field to google_firestore_field resource, skipping the wait for index creation (#​28222)
• oracledatabase: added support for configuring Exascale-based VM clusters on top of dedicated storage vaults via the exascale_db_storage_vault parameter and storage_management_type to determine if VM Cluster is ASM or EXASCALE in google_oracle_database_cloud_vm_cluster (#​28197)
• oracledatabase: added exadata_infrastructure field to google_oracle_database_exascale_db_storage_vault resource (#​28177)
• oracledatabase: added exascale_db_storage_vault and storage_management_type fields to google_oracle_database_cloud_vm_clusters data source (#​28260)
• sql: added enforce_new_sql_network_architecture field to google_sql_database_instance resource (#​28233)
• sql: added psc_auto_connection_policy_enabled field and output-only service_connection_policy and service_connection_policy_creation_result fields to google_sql_database_instance resource (#​28225)
• storagetransfer: added private_network_service to resource google_storage_transfer_job (#​28178)

BUG FIXES:

• bigtable: fixed a bug where row_affinity updates did not persist on google_bigtable_app_profile (#​28215)
• bug: fixed labels diff in google_project (#​28229)
• chronicle: suppressed a permadiff on google_chronicle_rule.text caused by the Chronicle API appending a trailing newline to every stored rule body (#​28216)
• cloudscheudler: added retries for "409: sync mutate calls cannot be queued" error for google_cloud_scheduler_job (#​28164)
• compute: fixed an issue where preview = false updates for google_compute_organization_security_policy_rule were omitted from API requests. (#​28223)
• compute: fixed bug where it wasn't possible to disable enable_proxy_protocol on google_compute_service_attachment resource (#​28264)
• datastream: fixed a bug in update functionality in google_datastream_connection_profile mongodb_profile.additional_options (#​28254)
• eventarc: fixed a type mismatch when an google_eventarc_trigger resource returns non-empty conditions. (#​28226)
• filestore: aligned google_filestore_instance resource timeouts with the Filestore service instance operations TTLs (#​28208)
• gemini: fixed truncated timeouts in google_gemini_code_tools_setting, google_gemini_data_sharing_with_google_setting_binding, google_gemini_gemini_gcp_enablement_setting_binding, and google_gemini_release_channel_setting_binding (#​28220)
• hypercomputecluster: fixed 20-minute timeout limit during google_hypercomputecluster_cluster resource creation (#​28182)
• logging: fixed an issue where errors on update would not be propagated in google_logging_project_bucket_config (#​28055)
• observability: fixed unintentionally long timeouts in google_observability_folder_settings, google_observability_organization_settings, and google_observability_project_settings (#​28220)
• oracledatabase: fixed early client-side timeouts and aligned default schema timeouts with backend async polling limits on google_oracle_database_exadb_vm_cluster, google_oracle_database_odb_network, google_oracle_database_odb_subnet, google_oracle_database_goldengate_connection, google_oracle_database_goldengate_deployment, and google_oracle_database_goldengate_connection_assignment. (#​28228)
• oracledatabase: fixed truncated timeouts in google_oracle_database_exadb_vm_cluster, google_oracle_database_goldengate_connection, and google_oracle_database_odb_subnet (#​28220)
• privilegedaccessmanager: fixed a permadiff on google_privileged_access_manager_entitlement for entitlements created without an approval workflow (#​28224)
• provider: fixed validation of external_credentials.identity_token to reject malformed JWTs containing empty segments (#​28258)

v7.39.0

Compare Source

NOTES:

• compute: migrated google_compute_instance_template resource partially to use direct HTTP rather than a client library (#​28010)
• compute: migrated google_compute_network_peering resource to use direct HTTP rather than a client library (#​28021)
• compute: migrated metadata handling to use direct HTTP rather than a client library (#​27968)

FEATURES:

• New Data Source: google_agent_registry_agent (#​28028)
• New Data Source: google_agent_registry_endpoint (#​28028)
• New Data Source: google_agent_registry_mcp_server (#​28028)
• New Data Source: google_compute_instance_groups (#​27981)
• New Data Source: google_storage_control_folder_intelligence_findings_summary (#​28019)
• New Data Source: google_storage_control_organization_intelligence_findings_summary (#​28019)
• New Data Source: google_storage_control_project_intelligence_findings_summary (#​28019)
• New Resource: google_agent_registry_binding (#​28028)
• New Resource: google_agent_registry_service (#​28028)
• New Resource: google_artifact_registry_project_config (#​28009)
• New Resource: google_chronicle_findings_refinement (#​28035)
• New Resource: google_compute_bulk_per_instance_config (#​28031)
• New Resource: google_compute_firewall_policy_iam_binding (#​27978)
• New Resource: google_compute_firewall_policy_iam_member (#​27978)
• New Resource: google_compute_firewall_policy_iam_policy (#​27978)
• New Resource: google_compute_network_firewall_policy_iam_binding (#​27978)
• New Resource: google_compute_network_firewall_policy_iam_member (#​27978)
• New Resource: google_compute_network_firewall_policy_iam_policy (#​27978)
• New Resource: google_compute_region_network_firewall_policy_iam_binding (#​27978)
• New Resource: google_compute_region_network_firewall_policy_iam_member (#​27978)
• New Resource: google_compute_region_network_firewall_policy_iam_policy (#​27978)
• New Resource: google_compute_region_resize_request (#​27984)
• New Resource: google_compute_zone_vm_extension_policy (#​28034)
• New Resource: google_gke_hub_rollout_sequence (#​28007)
• New Resource: google_iap_agent_registry_iam_binding (#​28032)
• New Resource: google_iap_agent_registry_iam_member (#​28032)
• New Resource: google_iap_agent_registry_iam_policy (#​28032)
• New Resource: google_iap_location_web_iam_binding (#​28032)
• New Resource: google_iap_location_web_iam_member (#​28032)
• New Resource: google_iap_location_web_iam_policy (#​28032)
• New Resource: google_oracle_database_cloud_exadata_infrastructure_exascale_config (#​28033)
• New List Resource: google_bigquery_dataset (#​28005)
• New List Resource: google_compute_cross_site_network (#​28018)
• New List Resource: google_compute_external_vpn_gateway (#​28018)
• New List Resource: google_compute_global_network_endpoint_group (#​28018)
• New List Resource: google_compute_ha_vpn_gateway (#​28018)
• New List Resource: google_compute_interconnect_attachment_group (#​28018)
• New List Resource: google_compute_interconnect_group (#​28018)
• New List Resource: google_compute_public_delegated_prefix (#​28018)
• New List Resource: google_compute_region_commitment (#​28018)
• New List Resource: google_compute_region_network_endpoint_group (#​28018)
• New List Resource: google_compute_vpn_gateway (#​28018)
• New List Resource: google_compute_wire_group (#​28018)
• New List Resource: google_folder_iam_member (#​27993)
• New List Resource: google_kms_crypto_key_version (#​28006)
• New List Resource: google_project (#​28041)
• New List Resource: google_project_service (#​27989)

IMPROVEMENTS:

• bigquery: added external_runtime_options.container_request_concurrency field to google_bigquery_routine resource (#​28029)
• compute: added instance_lifecycle_policy.on_failed_health_check field in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager (ga) (#​27992)
• container: added new fields shutdown_grace_period_seconds and shutdown_grace_period_critical_pods_seconds to node_kubelet_config block. (#​28015)
• container: promoted agent_sandbox_config addon field under addons_config in google_container_cluster to GA (#​28017)
• dataplex: added icon field to google_dataplex_data_product resource (#​27986)
• dataplex: added name field to google_dataplex_data_product_data_asset resource (#​28020)
• dlp: added allow_limited_availability_info_types to google_data_loss_prevention_inspect_template (#​28024)
• networkservices: added forward_attributes field to google_network_services_lb_edge_extension, google_network_services_lb_route_extension, and google_network_services_lb_traffic_extension resources (#​28012)

BUG FIXES:

• compute: fixed a panic in google_compute_project_metadata and google_compute_project_metadata_item when project common instance metadata items contain null/empty values. (#​28008)
• compute: fixed a validation error on google_compute_instance (Provisioned IOPS cannot be specified with disk type pd-balanced) that occurred during updates on instances with Hyperdisk Balanced boot disks. (#​27975)
• dataproc: fixed a bug where changing policy_id on google_dataproc_autoscaling_policy planned an in-place update and failed; it now correctly forces resource replacement (destroy and recreate). (#​28036)
• firestore: added retries on 409 errors in google_firestore_user_creds resource (#​27972)
• iam: fixed ephemeral google_service_account_key producing a 404 due to duplicate /keys in the URL when fetch_key = true and name is provided (#​27980)

v7.38.0

Compare Source

NOTES:

• bigquery: migrated google_bigquery_table resource to use direct HTTP rather than a client library (#​27909)
• compute: migrated resource_compute_instance_template_test.go.tmpl resource to use direct HTTP rather than a client library (#​27859)
• compute: migrated google_compute_resource_compute_instance to use direct HTTP rather than a client library (#​27925)
• compute: migrated parts of google_compute_instance and shared instance functions to use direct HTTP (#​27815)

FEATURES:

• New Data Source: google_storage_control_project_intelligence_finding_revision (#​27912)
• New Data Source: google_storage_control_project_intelligence_finding_revisions (#​27912)
• New Resource: google_biglake_hive_catalog (#​27892)
• New Resource: google_chronicle_feed (#​27860)
• New Resource: google_chronicle_parser_extension (#​27906)
• New Resource: google_dataplex_metadata_feed (#​27934)
• New Resource: google_network_services_agent_gateway (#​27803)
• New Resource: google_vertex_ai_schedule (#​27895)
• New Resource: google_vertex_ai_tensorboard_run (#​27913)
• New List Resource: google_compute_address (#​27917)
• New List Resource: google_compute_cross_site_network (#​27864)
• New List Resource: google_compute_https_health_check (#​27917)
• New List Resource: google_compute_node_template (#​27917)
• New List Resource: google_compute_packet_mirroring (#​27917)
• New List Resource: google_compute_region_autoscaler (#​27917)
• New List Resource: google_compute_region_composite_health_check (#​27917)
• New List Resource: google_compute_region_health_aggregation_policy (#​27917)
• New List Resource: google_compute_region_health_source (#​27917)
• New List Resource: google_project_iam_member (#​27905)
• New List Resource: google_pubsub_topic (#​27914)
• New List Resource: google_secret_manager_secret (#​27910)

IMPROVEMENTS:

• apigee: added consumer_key and consumer_secret fields to google_apigee_developer_app to allow specifying a static credential (#​27820)
• artifactregistry: added update support for upstream_credentials to google_artifact_registry_repository (#​27819)
• biglakeiceberg: added CATALOG_TYPE_BIGLAKE enum to catalog_type field and added restricted_locations_config.restricted_locations field in google_biglake_iceberg_catalog resource (#​27930)
• biglakeiceberg: added sort_order field to google_biglake_iceberg_table resource (#​27865)
• ces: added timeout and tool_fake_config fields to google_ces_tool and google_ces_toolset resource (#​27907)
• compute: added params.resource_manager_tags field to google_compute_snapshot resource (#​27869)
• compute: made network_endpoints.ip_address optional in google_compute_network_endpoints resource to support attaching endpoints to a network endpoint group of type GCE_VM_IP_DEDICATED_BACKEND (#​27870)
• container: added dataplane_optimization_mode in google_container_cluster (#​27861)
• container: added ignore_node_count_changes field to google_container_cluster and google_container_node_pool resources. When set to true, the provider ignores drift via external node count changes and skips related IGM API queries, resolving long plan times on clusters with a large number of instance groups. (#​27896)
• container: added skip_node_pool_refresh field to google_container_cluster resource. When set to true, the google_container_cluster skips refreshing and setting node_pools from the API, resolving long plan times on clusters with a large number of node pools. Note that this results in node_pools being set to an empty list in state (#​27896)
• container: added taint_config block to google_container_cluster and google_container_node_pool (#​27884)
• container: improved GKE node pool read performance by caching instance group metadata longer (#​27896)
• datastream: added additional_options field to google_datastream_connection_profile resource (#​27915)
• iamworkforcepool: write-only support for oidc.client_secret in google_iam_workforce_pool_provider (#​27867)
• kms: added resource identity support for google_kms_crypto_key_version resource (#​27883)
• networkservices: added dns_peering_config field to google_network_services_agent_gateway resource (#​27813)
• sql: added mode, dns_servers, admin_credential_secret_name, and organizational_unit fields to active_directory_config block in google_sql_database_instance resource for SQL Server instances (#​27862)
• storage: added lifecycle_rule.condition.size_above_bytes and lifecycle_rule.condition.size_below_bytes fields to google_storage_bucket resource (#​27857)

BUG FIXES:

• apigee: google_apigee_developer_app now updates api_products and scopes on the existing credential instead of creating a new credential (consumer key) on update (#​27929)
• biglake: allow location to be set on google_biglake_iceberg_namespace (#​27814)
• biglake: fixed creation failure of google_biglake_iceberg_table resource when the referenced google_biglake_iceberg_catalog has credential_mode set to CREDENTIAL_MODE_VENDED_CREDENTIALS due to a missing X-Iceberg-Access-Delegation header (#​27903)
• compute: fixed broken import of share_settings on google_compute_reservation (#​27916)
• datastream: fixed a positional diff when adding objects to the salesforce_source_config.include_objects field in google_datastream_stream resource (#​27926)
• iamworkforcepool: marked sensitive and ignore_read as true for security_token in google_iam_workforce_pool_provider_scim_token resource (#​27812)
• networkconnectivity: fixed google_network_connectivity_regional_endpoint being recreated on every apply when address is set to a resource URI (#​27923)
• networkservices: fixed name field expansion for google_network_services_agent_gateway resources so that short names are automatically expanded to full resource names, preventing API validation errors on create and update. (#​27902)

v7.37.0

Compare Source

NOTES:

• compute: migrated EnableDisplay fields in google_compute_instance resources to use direct HTTP rather than a client library (#​27778)
• compute: migrated desired_status block and startInstanceOperation in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​27755)
• compute: migrated getInstance, getDisk, Delete and the setMetadata update block in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​27716)
• compute: migrated part of google_compute_instance to use direct HTTP rather than a client library (#​27788)

DEPRECATIONS:

• cloudrunv2: deprecated http_get.http_headers.port field in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource because it is not supported in Cloud Run API. This field will be removed in a future major release. (#​27800)
• cloudsecuritycompliance: deprecated the organization field on google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment. Use parent instead (#​27769)
• networkservices: deprecated protocols on google_network_services_agent_gateway (#​27802)

FEATURES:

• New Data Source: google_oracle_database_goldengate_deployment_versions (#​27771)
• New Data Source: google_storage_control_project_intelligence_finding (#​27764)
• New Data Source: google_storage_control_project_intelligence_findings (#​27764)
• New Resource: google_chronicle_parser (#​27801)
• New Resource: google_migration_center_import_data_file (#​27721)
• New Resource: google_network_services_agent_gateway (#​27803)
• New Resource: google_vertex_ai_tensorboard_experiment (#​27796)
• New List Resource: google_bigquery_dataset_access (#​27758)
• New List Resource: google_cloud_scheduler_job (#​27758)
• New List Resource: google_dns_record_set (#​27792)
• New List Resource: google_monitoring_alert_policy (#​27758)
• New List Resource: google_pubsub_subscription (#​27758)

IMPROVEMENTS:

• apigee: added new resource google_apigee_environment_debugmask for managing Apigee environment debug masks (#​27719)
• backupdr: added support for use_project_service_account flag in google_backup_dr_restore_workload disk and compute restores (#​27797)
• cloudrunv2: added http_get.http_headers.name field to container

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.