v5.20.0

FEATURES:

• New Resource: google_clouddeploy_custom_target_type_iam_* (#7029)

IMPROVEMENTS:

• certificatemanager: added type field to google_certificate_manager_dns_authorization resource (#7036)
• compute: added the network_url attribute to the consumer_accept_list-block of the google_compute_service_attachment resource (#7047)
• gkehub: added support for policycontroller.policy_controller_hub_config.policy_content.bundles and
  policycontroller.policy_controller_hub_config.deployment_configs fields to google_gke_hub_feature_membership (#7043)

BUG FIXES:

• artifactregistry: fixed permadiff when google_artifact_repository.docker_config field is unset (#7044)
• bigquery: corrected plan-time validation on google_bigquery_dataset.dataset_id (#7032)
• kms: fixed issue where google_kms_crypto_key_version.attestation.cert_chains properties were incorrectly set to type string (#7045)

v5.19.0

FEATURES:

• New Resource: google_clouddeploy_target_iam_* (#7012)

IMPROVEMENTS:

• bigquery: added remote_function_options field to google_bigquery_routine resource (#7015)
• certificatemanager: added location field to google_certificate_manager_dns_authorization resource (#7006)
• composer: added composer_network_attachment and modified network/subnetwork to support composer 3 in google_composer_environment (#7023)
• composer: added validations for composer 2/3 only fields in google_composer_environment (#7008)
• compute: added certificate_manager_certificates field to google_compute_region_target_https_proxy resource (#7010)
• gkehub2: added namespace_labels field to google_gke_hub_scope resource (#7022)

BUG FIXES:

• resourcemanager: added a retry to deleting the default network when auto_create_network is false in google_project (#7021)

v5.18.0

BREAKING CHANGES:

• securityposture: marked policy_sets and policy_sets.policies required in google_securityposture_posture. API validation already enforced this, so no resources could be provisioned without these (#6981)

FEATURES:

• New Data Source: google_compute_forwarding_rules (#6997)
• New Resource: google_firebase_app_check_app_attest_config (#6971)
• New Resource: google_firebase_app_check_play_integrity_config (#6971)
• New Resource: google_firebase_app_check_recaptcha_enterprise_config (#6989)
• New Resource: google_firebase_app_check_recaptcha_v3_config (#6989)
• New Resource: google_migration_center_preference_set (#6974)
• New Resource: google_netapp_volume_replication (#7002)

IMPROVEMENTS:

• cloudfunctions: added output-only version_id field on google_cloudfunctions_function (#6968)
• composer: supported patch versions of airflow on google_composer_environment (#7000)
• compute: supported updating network_interface.stack_type field on google_compute_instance resource. (#6977)
• container: added node_config.resource_manager_tags field to google_container_cluster resource (#7001)
• container: added node_config.resource_manager_tags field to google_container_node_pool resource (#7001)
• container: added output-only fields membership_id and membership_location under fleet in google_container_cluster resource (#6983)
• looker: added custom_domain field to google_looker_instance resource (#6979)
• netapp: added field restore_parameters and output-only fields state, state_details and create_time to google_netapp_volume resource (#6976)
• workbench: added container_image field to google_workbench_instance resource (#6988)
• workbench: added shielded_instance_config field to google_workbench_instance resource (#6984)

BUG FIXES:

• bigquery: allowed users to set permissions for principal/principalSets (iamMember) in google_bigquery_dataset_iam_member. (#6975)
• cloudfunctions2: fixed an issue where not specifying event_config.trigger_region in google_cloudfunctions2_function resulted in a permanent diff. The field now pulls a default value from the API when unset. (#6991)
• compute: fixed perma-diff on min_ports_per_vm in google_compute_router_nat when the field is unset by making the field default to the API-set value (#6993)
• dataflow: fixed crash in google_dataflox_job to return an error instead if a job's Environment field is nil when reading job information (#6999)
• notebooks: changed tag field to default to the API's value if not specified in google_notebooks_instance (#6986)

v5.17.0

NOTES:

• cloudbuildv2: changed underlying actuation engine for google_cloudbuildv2_connection, there should be no user-facing impact (#6943)

DEPRECATIONS:

• container: deprecated support for relay_mode field in google_container_cluster.monitoring_config.advanced_datapath_observability_config in favor of enable_relay field, relay_mode field will be removed a future major release (#6960)

FEATURES:

• New Resource: google_firebase_app_check_debug_token (#6953)
• New Resource: google_network_security_firewall_endpoint (#6940)
• New Resource: google_clouddeploy_custom_target_type (#6956)
• New Resource: google_network_security_security_profile_group (#6961)

IMPROVEMENTS:

• cloudasset: allowed overriding the billing project for the google_cloud_asset_resources_search_all datasource (#6941)
• clouddeploy: added support for canary_revision_tags, prior_revision_tags, stable_revision_tags, and stable_cutback_duration to google_clouddeploy_delivery_pipeline (#6951)
• cloudfunctions: added version_id on google_cloudfunctions_function (#6968)
• container: added support for enable_relay field to google_container_cluster.monitoring_config.advanced_datapath_observability_config (#6960)
• eventarc: added support for http_endpoint.uri and network_config.network_attachment to google_eventarc_trigger (#6951)
• healthcare: added reject_duplicate_message field to google_healthcare_hl7_v2_store resource (#6964)
• identityplatform: added client, permissions, monitoring and mfa fields to google_identity_platform_config (#6944)
• notebooks: added desired_state field to google_notebooks_instance (#6965)
• vertexai: added feature_registry_source field to google_vertex_ai_feature_online_store_featureview resource (#6962)
• workbench: added desired_state field to google_workbench_instance resource (#6966)
• workstations: added support for disable_ssh in google_workstations_workstation_config (#6947)

BUG FIXES:

• compute: made resource_manager_tags updatable on google_compute_instance_template and google_compute_region_instance_template (#6958)
• notebooks: prevented recreation of google_notebooks_instance when kms_key or service_account_scopes are changed server-side (#6948)

v5.16.0

FEATURES:

• New Resource: google_clouddeploy_delivery_pipeline_iam_* (#6928)
• New Resource: google_compute_instance_group_membership (#6933)
• New Resource: google_discovery_engine_search_engine (#6919)
• New Resource: google_firebase_app_check_service_config (#6921)

IMPROVEMENTS:

• bigquery: promoted table_replication_info field on resource_bigquery_table resource to GA (#6929)
• compute: added confidential_instance_config.confidential_instance_type field to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources (#6934)
• networksecurity: removed unused custom code from google_network_security_address_group (#6931)
• provider: added an optional provider level label goog-terraform-provisioned to identify resources that were created by Terraform when viewing/editing these resources in other tools. (#6924)

BUG FIXES:

• firebasehosting: fixed typing in google_firebase_hosting_custom_domain issues.details field (#6926)

v5.15.0

FEATURES:

• New Data Source: google_compute_machine_types (#6903)
• New Resource: google_blockchain_node_engine_blockchain_nodes (#6897)
• New Resource: google_compute_region_network_endpoint (#6913)
• New Resource: google_discovery_engine_chat_engine (#6918)
• New Resource: google_discovery_engine_search_engine (#6919)
• New Resource: google_netapp_volume_snapshot (#6914)

IMPROVEMENTS:

• compute: added INTERNET_IP_PORT and INTERNET_FQDN_PORT options for the google_compute_region_network_endpoint_group resource. (#6913)
• compute: added creation_timestamp to google_compute_instance_group_manager and google_compute_region_instance_group_manager. (#6904)
• compute: added disk_id attribute to google_compute_disk resource (#6906)
• compute: added stack_type attribute for google_compute_interconnect_attachment resource. (#6915)
• compute: updated the google_compute_security_policy resource's json_parsing field to accept the value STANDARD_WITH_GRAPHQL (#6898)
• memcache: added reserved_ip_range_id field to google_memcache_instance resource (#6901)
• netapp: added deletion_policy field to google_netapp_volume resource (#6905)

BUG FIXES:

• alloydb: fixed an issue where database_flags in secondary google_alloydb_instance resources would cause a diff, as they are copied from the primary (#6910)
• filestore: made google_filestore_instance.source_backup field configurable (#6899)
• vmwareengine: fixed a bug to prevent recreation of existing google_vmwareengine_private_cloud resources when upgrading provider version from <5.10.0 (#6911)

v5.14.0

FEATURES:

• New Resource: google_discovery_engine_data_store (#6892)
• New Resource: google_securityposture_posture_deployment (#6893)
• New Resource: google_securityposture_posture (#6890)

IMPROVEMENTS:

• cloudrun: added template.spec.volumes.csi field to google_cloud_run_service resource to support mounting Cloud Storage buckets using GCSFuse (#6875)
• composer: added data_retention_config field to google_composer_environment resource (#6877)
• logging: updated the google_logging_project_bucket_config resource to be created using the asynchronous create method (#6883)
• pubsub: added use_table_schema field to google_pubsub_subscription resource (#6881)
• vertexai: added vector_search_config field to google_vertex_ai_feature_online_store_featureview resource (#6876)
• workflows: added call_log_level field to google_workflows_workflow resource (#6878)
• workstations: added readiness_checks field to google_workstations_workstation_config resource (#6895)

BUG FIXES:

• cloudfunctions2: fixed permadiff when build_config.docker_repository field is not specified on google_cloudfunctions2_function resource (#6887)
• compute: fixed error when iap field is unset for google_compute_region_backend_service resource (#6886)
• eventarc: fixed error when setting destination.cloud_function field on google_eventarc_trigger resource by making it output-only (#6879)

v5.13.0

NOTES:

• cloudbuildv2: changed underlying actuation engine for google_cloudbuildv2_repository, there should be no user-facing impact (#6843)
• provider: added support for in-place update for labels and terraform_labels fields in immutable resources (#6857)

FEATURES:

• New Resource: google_netapp_backup_policy (#6839)
• New Resource: google_netapp_volume (#6852)
• New Resource: google_network_security_address_group_iam_* (#6859)
• New Resource: google_network_security_security_profile (#6868)
• New Resource: google_vertex_ai_feature_group_feature (#6861)

IMPROVEMENTS:

• alloydb: allowed database_version as an input on google_alloydb_cluster resource (#6841)
• bigquery: added spark_options field to google_bigquery_routine resource (#6867)
• bigquery: added support for replica materialized view in google_bigquery_table resource (#6865)
• cloudrunv2: added nfs and gcs fields to google_cloud_run_v2_service.template.volumes (#6845)
• cloudrunv2: added tcp_socket field to google_cloud_run_v2.template.containers.liveness_probe (#6845)
• composer: added enable_private_environment and enable_private_builds_only fields to google_composer_environment resource (#6870)
• compute: added enable_confidential_compute field to google_compute_instance.boot_disk.initialize_params (#6842)
• gkehub2: added clusterupgrade field to google_gke_hub_feature resource (#6836)
• healthcare: added enable_history_modifications field to google_healthcare_fhir_store resource (#6864)
• notebooks: allowed machine_type and accelerator_config to be updatable on google_notebooks_runtime resource (#6854)
• workstations: added disable_tcp_connections field to google_workstations_workstation_config resource (#6863)

BUG FIXES:

• compute: fixed the bug that max_ttl is sent in API calls even it is removed from configuration when changing cache_mode to FORCE_CACHE_ALL in google_compute_backend_bucket resource (#6847)
• networkservices: fixed a perma-diff on addresses field in google_network_services_gateway resource (#6871)
• provider: fixed universe_domain behavior to correctly throw an error when explicitly configured universe_domain values did not match credentials assumed to be in the default universe (#6860)
• spanner: fixed error when adding autoscaling_config to an existing google_spanner_instance resource (#6869)

v5.12.0

FEATURES:

• New Data Source: google_dns_managed_zones (#6835)
• New Data Source: google_filestore_instance (#6822)
• New Data Source: google_vmwareengine_external_access_rule (#6811)
• New Resource: google_clouddomains_registration (#6833)
• New Resource: google_netapp_kmsconfig (#6831)
• New Resource: google_vertex_ai_feature_online_store_featureview (#6821)
• New Resource: google_vmwareengine_external_access_rule (#6811)

IMPROVEMENTS:

• compute: added md5_authentication_key field to google_compute_router_peer resource (#6815)
• compute: added in-place update support to params.resource_manager_tags field in google_compute_instance resource (#6828)
• compute: added in-place update support to description field in google_compute_instance resource (#6804)
• gkehub: added policycontroller field to google_gke_hub_feature_membership resource (#6813)
• gkehub2: added clusterupgrade field to google_gke_hub_feature resource (#6836)
• gkeonprem: added in-place update support to vsphere_config field and added host_groups field in google_gkeonprem_vmware_node_pool resource (#6802)
• iam: added create_ignore_already_exists field to google_service_account resource. If ignore_create_already_exists is set to true, resource creation would succeed when response error is 409 ALREADY_EXISTS. (#6818)
• servicenetworking: added field deletion_policy to google_service_networking_connection (#6830)
• sql: set replica_configuration, ca_cert, and server_ca_cert fields to be sensitive in google_sql_instance and google_sql_ssl_cert resources (#6823)

BUG FIXES:

• bigquery: fixed perma-diff of encryption_configuration when API returns an empty object on google_bigquery_table resource (#6817)
• compute: fixed an issue where the provider would wait_for_instances if set before deleting on google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#6829)
• compute: fixed perma-diff that reordered stateful_external_ip and stateful_internal_ip blocks on google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#6810)
• datapipeline: fixed perma-diff of scheduler_service_account_email when it's not explicitly specified in google_data_pipeline_pipeline resource (#6814)
• edgecontainer: fixed resource import on google_edgecontainer_vpn_connection resource (#6834)
• servicemanagement: fixed an issue where an inconsistent plan would be created when certain fields such as openapi_config, grpc_config, and protoc_output_base64, had computed values in google_endpoints_service resource (#6832)
• storage: fixed an issue where retry timeout wasn't being utilized when creating google_storage_bucket resource (#6806)

v5.11.0

NOTES:

• compute: changed underlying actuation engine for google_network_firewall_policy and google_region_network_firewall_policy, there should be no user-facing impact (#6776)
  DEPRECATIONS:
• gkehub2: deprecated field configmanagement.config_sync.oci.version in google_gke_hub_feature resource (#6764)

FEATURES:

• New Data Source: google_compute_reservation (#6791)
• New Resource: google_clouddeploy_automation (#6794)
• New Resource: google_integration_connectors_endpoint_attachment (#6766)
• New Resource: google_logging_folder_settings (#6754)
• New Resource: google_logging_organization_settings (#6754)
• New Resource: google_netapp_active_directory (#6781)
• New Resource: google_vertex_ai_feature_online_store (#6779)
• New Resource: google_vertex_ai_feature_group (#6780)
• New Resource: google_netapp_backup_vault (#6793)

IMPROVEMENTS:

• bigqueryanalyticshub: added restricted_export_config field to google_bigquery_analytics_hub_listing resource (#6784)
• composer: added support for composer_internal_ipv4_cidr_block field to google_composer_environment (#6761)
• composer: added config.software_config.web_server_plugins_mode, config.workloads_config and dag_processor fields to google_composer_environment. (#6797)
• compute: added provisioned_iopsand provisioned_throughput fields under boot_disk.initialize_params to google_compute_instance resource (#6792)
• compute: added resource_manager_tags and disk.resource_manager_tags for google_compute_instance_template (#6798)
• compute: added resource_manager_tags and disk.resource_manager_tags for google_compute_region_instance_template (#6798)
• container: added workload_alts_config field to google_container_cluster resource (#6762)
• dataproc: added auxiliary_node_groups field to google_dataproc_cluster resource (#6753)
• edgecontainer: increased default timeout on google_edgecontainer_cluster, google_edgecontainer_node_pool to 480m from 60m (#6796)
• gkehub2: added field version under configmanagement in google_gke_hub_feature resource (#6764)
• kms: added output-only field primary to google_kms_crypto_key (#6782)
• metastore: added consumers.custom_routes_enabled to google_dataproc_metastore_service (#6767)
• sql: added support for IAM GROUP authentication in the type field of google_sql_user (#6787)
• storagetransfer: made name field settable on google_storage_transfer_job (#6777)

BUG FIXES:

• container: added check that node_version and min_master_version are the same on create of google_container_cluster, when running terraform plan (#6763)
• container: fixed a bug where disabling PDCSI addon gce_persistent_disk_csi_driver_config during creation will result in permadiff in google_container_cluster resource (#6751)
• container: fixed an issue in which migrating from the deprecated Binauthz enablement bool to the new evaluation mode enum inadvertently caused two cluster update events, instead of none. (#6785)
• containerattached: fixed crash when updating a cluster to remove admin_users or admin_groups in google_container_attached_cluster (#6786)
• dialogflowcx: fixed a permadiff in the git_integration_settings field of google_diagflow_cx_agent (#6756)
• gkehub2: added field version under configmanagement in google_gke_hub_feature resource (#6764)
• monitoring: fixed the index out of range crash in dashboard_json for the resource google_monitoring_dashboard (#6750)