v4.56.0

DEPRECATIONS:

• gkehub: deprecated mesh.control_plane in google_gke_hub_feature_membership. Use mesh.management instead (#5258)

FEATURES:

• New Resource: google_scc_mute_config (#5241)
• New Resource: google_workstations_workstation_config (#5246)

IMPROVEMENTS:

• cloudbuild: added peered_network_ip_range field to google_cloudbuild_worker_pool resource (#5258)
• clouddeploy: added multi_target field to google_clouddeploy_target resource (#5258)
• cloudrun: added template.0.containers0.liveness_probe.grpc, template.0.containers0.startup_probe.grpc fields to google_cloud_run_v2_service resource (#5259)
• compute: added internal_ip and external_ip to google_compute_per_instance_config and google_compute_region_per_instance_config (beta) (#5256)
• compute: added max_distance field to resource-policy resource (#5257)
• compute: added field deletion_policy to resource google_compute_shared_vpc_service_project (#5243)
• container: added field protect_config to google_container_cluster (beta) (#5255)
• containerazure: added azure_services_authentication to google_container_azure_cluster (#5258)
• networkservices: increased maximum allow_origins from 5 to 25 on network_services_edge_cache_service (#5239)
• storagetransfer: added general field sink_agent_pool_name and source_agent_pool_name to google_storage_transfer_job (#5262)

BUG FIXES:

• artifactregistry: fixed an issue where google-beta used an outdated beta API rather than the GA service API. New format values like "KFP" will now be accepted by both providers. (#5247)
• cloudfunctions: fixed no diff found on event_trigger.resource of google_cloudfunctions_function (#5261)
• dataproc: fixed an issue where master_config.num_instances would not force recreation when changed in google_dataproc_cluster (#5251)
• spanner: fixed the error when updating deletion_protection on google_spanner_database (#5242)
• spanner: fixed the error when updating force_destroy on google_spanner_instance (#5242)

v4.55.0

FEATURES:

• New Resource: google_cloudbuild_bitbucket_server_config (#5218)
• New Resource: google_firebase_hosting_release (#5229)
• New Resource: google_firebase_hosting_version (#5229)

IMPROVEMENTS:

• container: added support for node_config.kubelet_config.pod_pids_limit on google_container_node_pool (#5217)
• storage: changed the default create timeout of google_storage_bucket to 10m from 4m (#5222)

BUG FIXES:

• container: fixed a crash when leaving placement_policy blank on google_container_node_pool (#5233)
• serviceusage: removed unneeded Optional schema behaviour from email field in google_project_service_identity (#5226)

v4.54.0

FEATURES:

• New Data Source: google_firebase_hosting_channel (#5188)
• New Data Source: google_logging_sink (#5207)
• New Data Source: google_sql_databases (#5204)

IMPROVEMENTS:

• cloudbuild: added bitbucket_server_trigger_config field to google_cloudbuild_trigger resource (#5198)
• cloudbuild: added github.enterprise_config_resource_name field to google_cloudbuild_trigger resource (#5205)
• compute: added field rsa_encrypted_key to google_compute_disk resource (#5187)
• compute: added additional fields to rules[].rate_limit_options in google_compute_security_policy to support Cloud Armor Rate Limit Options (#5193)
• sql: added replica promotion support to google_sql_database_instance. This change will allow users to promote read replica as stand alone primary instance. (#5184)

BUG FIXES:

• bigquery: fixed permadiff on max_time_travel_hours of google_bigquery_dataset (#5190)
• compute: added possibility to remove stateful_disk in compute_instance_group_manager and compute_region_instance_group_manager. (#5203)
• sql: fixed an issue with updating the settings.activation_policy field in google_sql_database_instance (#5202)

v4.53.1

BUG FIXES:

• provider: fixed crash when trying to configure the provider without the userinfo-email scope or with invalid credentials

v4.53.0

FEATURES:

• New Resource: google_apigee_addons_config (#5171)
• New Resource: google_cloudbuildv2_connection_iam_binding (#5158)
• New Resource: google_cloudbuildv2_connection_iam_member (#5158)
• New Resource: google_cloudbuildv2_connection_iam_policy (#5158)
• New Resource: google_firestore_database (#5181)
• New Resource: google_workstations_workstation_cluster (#5154)

IMPROVEMENTS:

• compute: added resource_policies field to google_compute_instance_template (#5182)
• compute: added field force_update_on_repair to instance_lifecycle_policy (#5172)
• compute: added field instance_lifecycle_policy to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#5172)
• compute: added the labels field to the google_compute_external_vpn_gateway resource (#5162)
• datastream: added postgresql_source_config & oracle_source_config in google_datastream_stream (#5166)
• datastream: added support for creating google_datastream_stream with desired_state=RUNNING (#5166)
• datastream: exposed validation errors during google_datastream_stream creation (#5166)
• firebase: marked deletion_policy as updatable without recreation on google_firebase_android_app and google_firebase_apple_app (#5163)
• sql: added enable_private_path_for_google_cloud_services field to google_sql_database_instance resource (#5177)
• vertex_ai: added offline_storage_ttl_days to google_vertex_ai_featurestore_entitytype resource (#5178)
• vertex_ai: added online_storage_ttl_days to google_vertex_ai_featurestore resource (#5178)
• vertex_ai: added the field description to google_vertex_ai_featurestore_entitytype (#5161)

BUG FIXES:

• composer: fixed an issue with cleaning up environments created in an error state (#5164)
• compute: fixed wrong maximum limit description for possible VPC MTUs (#5180)
• datafusion: fixed version can't be updated on google_data_fusion_instance (#5175)

v4.52.0

FEATURES:

• New Data Source: google_secret_manager_secret_version_access (#5147)
• New Resource: google_cloudbuildv2_connection (#5140)
• New Resource: google_cloudbuildv2_repository (#5140)
• New Resource: google_workstations_workstation_cluster (#5154)

IMPROVEMENTS:

• bigquery: added support for federated Azure identities to BigQuery Omni connections. (#5150)
• bigquery: added cloud_spanner.use_serverless_analytics field (#5139)
• bigquery: added cloud_sql.service_account_id and azure.identity output fields (#5139)
• cloudbuild: added field repository_event_config to resource trigger (#5142)
• compute: added locality_lb_policies field to google_compute_backend_service (#5146)
• sql: updated the settings.deletion_protection_enabled property documentation. (#13581)
• sql: made root_password field updatable in google_sql_database_instance (#5133)

BUG FIXES:

• cloudfunctions: updated max_instances field to take API's result as default value (#13575)
• container: fixed an issue with resuming failed cluster creation (#5136)
• datacatalog: fixed the import failure when the project is different from the default on google_data_catalog_taxonomy (#5145)
• secretmanager: fixed incorrect required_with for topics in google_secret_managed_secret (#5149)

v4.51.0

DEPRECATIONS:

• cloudrunv2: deprecated liveness_probe.tcp_socket field from google_cloud_run_v2_service resource as it is not supported by the API and it will be removed in a future major release (#5128)
• cloudrunv2: deprecated startup_probe and liveness_probe fields from google_cloud_run_v2_job resource as they are not supported by the API and they will be removed in a future major release (#5118)

FEATURES:

• New Resource: google_iam_access_boundary_policy (#5130)
• New Resource: google_tags_location_tag_bindings (#5115)

IMPROVEMENTS:

• cloudbuild: added github_enterprise_config fields to google_cloudbuild_trigger resource. (#5110)
• cloudrunV2: added annotations to google_cloud_run_v2_service resource (#5108)
• composer: Added field cloud_data_lineage_integration to resource google_composer_environment (beta) (#5109)
• compute: added tcp_time_wait_timeout_sec field to google_compute_router_nat resource (#5123)
• compute: Added fields to resource google_compute_security_policy to support Cloud Armor Auto Deploy (beta) (#5116)
• compute: added share_settings field to the google_compute_node_group resource. (#5113)
• containerattached: added deletion_policy field to google_container_attached_cluster resource. (#5121)
• datastream: added customer_managed_encryption_key and destination_config.bigquery_destination_config.source_hierarchy_datasets.dataset_template.kms_key_name fields to google_datastream_stream resource (#5120)
• dlp: added publish_findings_to_cloud_data_catalog and publish_summary_to_cscc to google_data_loss_prevention_job_trigger resource (#5127)
• sql: added point_in_time_recovery_enabled for SQLServer in google_sql_database_instance (#5124)
• spanner: added support for IAM conditions with google_spanner_database_iam_member and google_spanner_instance_iam_member (#5125)
• sql: added additional fields to google_sql_source_representation_instance(#5114)

BUG FIXES:

• bigquery: fixed bug where valid iam member values for bigquery were prevented from actuation by validation (#5111)
• bigquery: fixed permadiff on external_data_configuration.connection_id of google_bigquery_table (#5126)
• gke: fixed the error of Invalid address to set on config_connector_config of the data source google_container_cluster (#5131)
• google_project: fixes misleading examples that could cause firebase:enabled label to be accidentally removed. (#5122)

v4.50.0

FEATURES:

• New Data Source: google_compute_network_peering (#5092)
• New Data Source: google_compute_router_nat (#5091)
• New Resource: google_cloud_run_v2_job_iam_binding (#5099)
• New Resource: google_cloud_run_v2_job_iam_member (#5099)
• New Resource: google_cloud_run_v2_job_iam_policy (#5099)
• New Resource: google_cloud_run_v2_service_iam_binding (#5099)
• New Resource: google_cloud_run_v2_service_iam_member (#5099)
• New Resource: google_cloud_run_v2_service_iam_policy (#5099)
• New Resource: google_gke_backup_backup_plan_iam_binding (#5107)
• New Resource: google_gke_backup_backup_plan_iam_member (#5107)
• New Resource: google_gke_backup_backup_plan_iam_policy (#5107)

IMPROVEMENTS:

• bigquery_table - added reference_file_schema_uri (#5100)
• billingbudget: made fields credit_types and subaccounts updatable for google_billing_budget (#5087)
• cloudrunV2: added annotations to CloudRunV2_service resource (#5108)
• composer: added recovery_config in google_composer_environment resource (#5105)
• compute: added support for 'edge_security_policy' field to 'google_compute_backend_service' resource. (#5101)
• compute: added max_run_duration field to google_compute_instance and google_compute_instance_template resource (beta) (#5096)
• dataproc: added support for dataproc_metric_config to resource google_dataproc_cluster (#5093)
• dlp: added all subfields under deidentify_template.record_transformations.field_transformations.primitive_transformation to google_data_loss_prevention_deidentify_template (#5104)
• sql: changed the default create timeout of google_sql_database_instance to 40m from 30m (#5094)

BUG FIXES:

• certificatemanager: removed incorrect indication that the self_managed field in google_certificate_manager_certificate was treated as sensitive, and marked self_managed.pem_private_key as sensitive (#5106)
• cloudplatform: fixed the error with header X-Goog-User-Project on google_client_openid_userinfo (#5090)
• cloudsql: fixed disk_type can't be updated on google_sql_database_instance (#5095)
• vertexai: fixed updating value_type in google_vertex_ai_featurestore_entitytype_feature (#5098)

v4.49.0

FEATURES:

• New Data Source: google_project_service (#5067)
• New Data Source: google_sql_database_instances (#5066)
• New Data Source: google_container_attached_install_manifest (#5073)
• New Data Source: google_container_attached_install_manifest (#5080)
• New Data Source: google_container_attached_versions (#5073)
• New Resource: google_datastream_stream (#5045)

IMPROVEMENTS:

• android_app: added general fields sha1_hashes, sha256_hashes and etag to google_firebase_android_app. (#5074)
• cloudids: added threat_exception field to google_cloud_ids_endpoint (#5072)
• composer: added triggerer field in google_composer_environment (#5055)
• compute: enabled deletion for stateful_ips fields in instance_group_manager and region_instance_group_manager. (#5064)
• compute: added field expire_time to resource google_compute_region_ssl_certificate (#5049)
• compute: added field expire_time to resource google_compute_ssl_certificate (#5049)
• container: added release_channel_latest_version in google_container_engine_versions datasource (#5044)
• container: added google_container_aws_node_pool autoscaling_metrics_collection field (#5084)
• container: added update support for google_container_aws_node_pool tags field (#5084)
• dataproc: added support for node_group_affinity. in google_dataproc_cluster (#5053)
• dataproc: added support for reservation_affinity in google_dataproc_cluster (#5050)
• dlp: added field 'identifyingFields' to 'bigQueryOptions' for creating DLP jobs. (#5085)
• metastore: added telemetry_config field to google_dataproc_metastore_service (#5065)
• sql: added the ability to set point_in_time_recovery_enabled flag in google_sql_database_instance for SQLSERVER instance, since the API supports it now. (#5079)
• sql: added instance_type field to google_sql_database_instance resource (#5057)
• vertexai: added scaling field in google_vertex_ai_featurestore (#5081)

BUG FIXES:

• android_app: modified the package_name field suffix to always start with a letter in google_firebase_android_app. (#5074)
• bigqueryconnection: fixed a bug where aws.access_role.iam_role_id cannot be updated on google_bigquery_connection (#5083)
• container: fixed a bug preventing updates to master_global_access_config in google_container_cluster (#5043)
• container: fixed perma-diff based on a server set taint kubernetes.io/arch on google_container_node_pool (#5054)
• spanner: fixed crash when google_spanner_database.ddl item was nil (#5071)

v4.48.0

FEATURES:

• New Data Source: google_beyondcorp_app_connection (#5025)
• New Data Source: google_beyondcorp_app_connector (#5008)
• New Data Source: google_beyondcorp_app_gateway (#5008)
• New Data Source: google_cloudbuild_trigger (#5017)
• New Data Source: google_compute_instance_group_manager (#5002)
• New Data Source: google_firebase_apple_app_config (#5031)
• New Data Source: google_firebase_apple_app (#4978)
• New Data Source: google_pubsub_subscription (#5001)
• New Data Source: google_sql_database (#5038)
• New Resource: google_apigee_sync_authorization (#5015)
• New Resource: google_beyondcorp_app_connection (#5012)
• New Resource: google_container_attached_cluster (#5037)
• New Resource: google_dns_managed_zone_iam_* (#5007)
• New Resource: google_firebase_database_instance(#5019)

IMPROVEMENTS:

• cloudfunctions2: added available_cpu and max_instance_request_concurrency to support concurrency in google_cloudfunctions2_function (#5011)
• gkehub: added support for configmanagement.config_sync.oci field to google_gke_hub_feature_membership resource(#5013)
• compute: added support for local IP ranges in google_compute_firewall (#4979)
• compute: added router_appliance_instance field to google_compute_router_bgp_peer (#5035)
• compute: added support for generated_id field in google_compute_backend_service to get the value of id defined by the server (#4981)
• compute: added support for image_encryption_key to google_compute_image (#4989)
• compute: added support for source_snapshot, source_snapshot_encyption_key, and source_image_encryption_key to google_compute_instance_template (#4989)
• compute: added stateful ip fields stateful_internal_ip and stateful_external_ip to google_compute_instance_group_manager (#4992)
• container: added gateway_api_config block to google_container_cluster resource for supporting the gke gateway api controller (#4976)
• container: supported in-place update for labels in google_container_node_pool (#4998)
• dataproc: added support for SPOT option for preemptibility in google_dataproc_cluster (#5024)
• dlp: added field deidentify_config.record_transformations.field_transformations to google_data_loss_prevention_deidentify_template (#4996)
• dlp: added field deidentify_config.record_transformations.record_suppressions to google_data_loss_prevention_deidentify_template (#5004)
• dlp: added version field to google_data_loss_prevention_inspect_template resource (#5032)
• osconfig: added support for skip_await_rollout in google_os_config_os_policy_assignment (#5026)
• sql: added new deletion protection feature deletion_protection_enabled in google_sql_database_instance to guard against deletion from all surfaces (#4987)
• sql: made settings.sql_server_audit_config.bucket field in google_sql_database_instance to be optional. (#4988)
• storagetransfer: supported in-place update for schedule in google_storage_transfer_job (#4993)

BUG FIXES:

• bigquery: fixed a permadiff on labels of google_bigquery_dataset when it is referenced in google_dataplex_asset (#5022)
• compute: fixed a permadiff on private_ip_google_access of google_compute_subnetwork (#4983)
• compute: fixed an issue where enable_dynamic_port_allocation was not able to set to false in google_compute_router_nat (#4982)
• container: fixed a permadiff on location_policy of google_container_cluster and google_container_node_pool (#4997)
• identityplatform: fixed issues with google_identity_platform_config creation (#5005)
• resourcemanager: fixed the google_project datasource silently returning empty results when the project was not found or not in the ACTIVE state. Now, an error will be surfaced instead. (#5029)
• sql: fixed sql_database_instance leaking root users (#4991)