v4.1.0

IMPROVEMENTS:

• compute: Added bfd to google_compute_router_peer (#3822)
• container: added gcfs_config to node_config of google_container_node_pool resource (#3828)
• provider: added retries for the resourceNotReady error returned when attempting to add resources to a recently-modified subnetwork (#3827)
• pubsub: added message_retention_duration field to google_pubsub_topic (#3831)

BUG FIXES:

• apigee: fixed a bug where multiple google_apigee_instance_attachment could not be used on the same google_apigee_instance (#3838)
• bigquery: fixed a bug following import where schema is empty on google_bigquery_table (#3839)
• billingbudget: fixed unable to provide labels on google_billing_budget (#3823)
• compute: allowed source_disk to accept full image path on google_compute_snapshot (#3835)
• compute: fixed a bug in google_compute_firewall that would cause changes in source_ranges to not correctly be applied (#3834)
• logging: fixed a bug with updating description on google_logging_project_sink, google_logging_folder_sink and google_logging_organization_sink (#3826)

v4.0.0

NOTES:

• compute: Google Compute Engine resources will now call the endpoint appropriate to the provider version rather than the beta endpoint by default (#3787)
• container: Google Kubernetes Engine resources will now call the endpoint appropriate to the provider version rather than the beta endpoint by default (#3788)

BREAKING CHANGES:

• appengine: marked google_app_engine_standard_app_version entrypoint as required (#3784)
• compute: removed the ability to specify the trace-append or trace-ro as scopes in google_compute_instance, use trace instead (#3759)
• compute: changed advanced_machine_features on google_compute_instance_template to track changes when the block is undefined in a user's config (#3786)
• compute: changed source_ranges in google_compute_firewall_rule to track changes when it is not set in a config file (#3791)
• compute: changed the import / drift detection behaviours for metadata_startup_script, metadata.startup-script in google_compute_instance. Now, metadata.startup-script will be set by default, and metadata_startup_script will only be set if present. (#3765)
• compute: removed source_disk_link field from google_compute_snapshot (#3783)
• container: instance_group_urls has been removed in favor of node_pool.instance_group_urls (#3796)
• container: changed default for enable_shielded_nodes to true for google_container_cluster (#3773)
• container: made master_auth.client_certificate_config required (#3794)
• container: removed master_auth.username and master_auth.password from google_container_cluster (#3794)
• container: removed workload_metadata_configuration.node_metadata in favor of workload_metadata_configuration.mode in google_container_cluster (#3772)
• container: removed the workload_identity_config.0.identity_namespace field from google_container_cluster, use workload_identity_config.0.workload_pool instead (#3776)
• kms: removed self_link field from google_kms_crypto_key and google_kms_key_ring (#3783)
• project: removed ability to specify bigquery-json.googleapis.com, the provider will no longer convert it as the upstream API migration is finished. Use bigquery.googleapis.com instead. (#3751)
• provider: changed credentials, access_token precedence so that credentials values in configuration take precedence over access_token values assigned through environment variables (#3766)
• provider: removed redundant default scopes. The provider's default scopes when authenticating with credentials are now exclusively "https://www.googleapis.com/auth/cloud-platform" and "https://www.googleapis.com/auth/userinfo.email". (#3756)
• pubsub: removed path from google_pubsub_subscription (#3777)
• pubsub: removed path field from google_pubsub_subscription (#3783)
• resourcemanager: made google_project remove org_id and folder_id from state when they are removed from config (#3754)
• resourcemanager: changed the project field to Required in all google_project_iam_* resources (#3767)
• sql: added drift detection to the following google_sql_database_instance fields: activation_policy (defaults ALWAYS), availability_type (defaults ZONAL), disk_type (defaults PD_SSD), encryption_key_name (#3778)
• sql: changed the database_version field to Required in google_sql_database_instance resource (#3770)
• sql: removed the following google_sql_database_instance fields: authorized_gae_applications, crash_safe_replication, replication_type (#3778)
• storage: removed bucket_policy_only from google_storage_bucket (#3769)
• storage: changed the location field to required in google_storage_bucket (#3771)

VALIDATION CHANGES:

• bigquery: at least one of statement_timeout_ms, statement_byte_budget, or key_result_statement is required on google_bigquery_job.query.script_options. (#3752)
• bigquery: exactly one of query, load, copy or extract is required on google_bigquery_job (#3752)
• bigquery: exactly one of source_table or source_model is required on google_bigquery_job.extract (#3752)
• cloudbuild: exactly one of branch_name, commit_sha or tag_name is required on google_cloudbuild_trigger.build.source.repo_source (#3752)
• compute: at least one of fixed_delay or percentage is required on google_compute_url_map.default_route_action.fault_injection_policy.delay (#3752)
• compute: at least one of fixed or percent is required on google_compute_autoscaler.autoscaling_policy.scale_down_control.max_scaled_down_replicas (#3752)
• compute: at least one of fixed or percent is required on google_compute_autoscaler.autoscaling_policy.scale_in_control.max_scaled_in_replicas (#3752)
• compute: at least one of fixed or percent is required on google_compute_region_autoscaler.autoscaling_policy.scale_down_control.max_scaled_down_replicas (#3752)
• compute: at least one of fixed or percent is required on google_compute_region_autoscaler.autoscaling_policy.scale_in_control.max_scaled_in_replicas (#3752)
• compute: at least one of max_scaled_down_replicas or time_window_sec is required on google_compute_autoscaler.autoscaling_policy.scale_down_control (#3752)
• compute: at least one of max_scaled_down_replicas or time_window_sec is required on google_compute_region_autoscaler.autoscaling_policy.scale_down_control (#3752)
• compute: at least one of max_scaled_in_replicas or time_window_sec is required on google_compute_autoscaler.autoscaling_policy.scale_in_control.0. (#3752)
• compute: at least one of max_scaled_in_replicas or time_window_sec is required on google_compute_region_autoscaler.autoscaling_policy.scale_in_control.0. (#3752)
• compute: required one of source_tags, source_ranges or source_service_accounts on INGRESS google_compute_firewall resources (#3750)
• dlp: at least one of start_time or end_time is required on google_data_loss_prevention_trigger.inspect_job.storage_config.timespan_config (#3752)
• dlp: exactly one of url or regex_file_set is required on google_data_loss_prevention_trigger.inspect_job.storage_config.cloud_storage_options.file_set (#3752)
• resourcemanager: added conflict between org_id, folder_id at plan time in google_project (#3754)
• osconfig: at least one of linux_exec_step_config or windows_exec_step_config is required on google_os_config_patch_deployment.patch_config.post_step (#3752)
• osconfig: at least one of linux_exec_step_config or windows_exec_step_config is required on google_os_config_patch_deployment.patch_config.pre_step ([#3752](https://github.com/...

v3.90.1

DEPRECATIONS:

• container: fixed an overly-broad deprecation on master_auth, constraining it to master_auth.username and master_auth.password

v3.90.0

DEPRECATIONS:

• container: deprecated workload_identity_config.0.identity_namespace and it will be removed in a future major release as it has been deprecated in the API. Use workload_identity_config.0.workload_pool instead. Switching your configuration from one value to the other will trigger a diff at plan time, and a spurious update. (#3733)
• container: deprecated the following google_container_cluster fields: instance_group_urls and master_auth (#3746)

IMPROVEMENTS:

• composer: added field environment_size to resource google_composer_environment (#3730)
• container: added node_config.0.guest_accelerator.0.gpu_partition_size field to google_container_node_pool (#3739)
• container: added workload_identity_config.0.workload_pool to google_container_cluster (#3733)
• container: made dns_cache_config conflict with GKE Autopilot mode (#3725)
• container_cluster: Updated monitoring_config to accept WORKLOAD (#3732)
• provider: Added links to nested types documentation for manually generated pages (#3736)

BUG FIXES:

• cloudrun: fixed a permadiff on the field template.spec.containers.ports.name of the google_cloud_run_service resource (#3740)
• composer: removed config.node_config.zone requirement on google_composer_environment (#3745)
• compute: fixed permadiff for failover_policy on google_compute_region_backend_service (#3728)
• compute: fixed to make description updatable without recreation on google_compute_instance_group_manager (#3735)
• container: fixed a permadiff on google_container_node_pool.workload_metadata_config.mode (#3726)
• iam: fixed request batching bug where failed requests would show unnecessary backslash escaping to the user. (#3723)
• securitycenter: fixed bug where google_scc_notification_config.streaming_config.filter was not updating. (#3727)

v3.89.0

BUG FIXES:

• compute: fixed bug where google_compute_router_peer could not set an advertised route priority of 0, causing permadiff. (#3718)
• container: fixed a crash on monitoring_config of google_container_cluster (#3717)
• iam: fixed request batching bug where failed requests would show unnecessary backslash escaping to the user. (#3723)
• storage: fixed a bug to better handle eventual consistency among google_storage_bucket resources. (#3715)

v3.88.0

NOTES:

• reorganized documentation to group all Compute Engine and Monitoring (Stackdriver) resources together. (#3686)

DEPRECATIONS:

• container: deprecated workload_metadata_configuration.node_metadata in favor of workload_metadata_configuration.mode in google_container_cluster (#3694)
• dataproc: deprecated the google_dataproc_workflow_template.version field, as it wasn't actually useful. The field is used during updates, but updates aren't currently possible with the resource. (#3675)
  BREAKING CHANGES:
• gke_hub: made the config_membership field in google_gke_hub_feature required, disallowing invalid configurations (#3681)
• gke_hub: made the configmanagement, feature, location, membership fields in google_gke_hub_feature_membership required, disallowing invalid configurations (#3681)

FEATURES:

• New Data Source: google_service_networking_peered_dns_domain (#3690)
• New Data Source: google_sourcerepo_repository (#3684)
• New Data Source: google_storage_bucket (#3678)
• New Resource: google_pubsub_lite_reservation (#3708)
• New Resource: google_service_networking_peered_dns_domain (#3690)

IMPROVEMENTS:

• composer: added field enable_privately_used_public_ips to resource google_composer_environment (beta) (#3697)
• composer: added field enable_ip_masq_agent to resource google_composer_environment (beta) (#3705)
• composer: added support for composer v2 fields workloads_config and cloud_composer_network_ipv4_cidr_block to composer_environment (#3709)
• compute: added NetLB support for Connection Tracking as connectionTrackingPolicy in RegionBackendService(beta) (#3698)
• compute: added external IPv6 support on google_compute_subnetwork and google_compute_instance.network_interfaces (#3677)
• container: added support for workload_metadata_configuration.mode in google_container_cluster (#3694)
• eventarc: added support for uid output field, cloud_function destination to google_eventarc_trigger (#3681)
• gke_hub: added support for gcp_service_account_email when configuring Git sync in google_gke_hub_feature_membership (#3681)
• gke_hub: added support for resource_state, state outputs to google_gke_hub_feature (#3681)
• pubsub: added support for references to google_pubsub_lite_reservation to google_pubsub_lite_topic. (#3708)

BUG FIXES:

• monitoring: fixed typo in google_monitoring_uptime_check_config where NOT_MATCHES_REGEX could not be specified. (#3700)
• servicedirectory: marked service on google_service_directory_endpoint as ForceNew to trigger recreates on changes (#3683)

v3.87.0

3.87.0 (October 04, 2021)

DEPRECATIONS:

• dataproc: deprecated the google_dataproc_workflow_template.version field, as it wasn't actually useful. The field is used during updates, but updates aren't currently possible with the resource. (#3675)

FEATURES:

• New Resource: google_monitoring_monitored_project (#3658)
• New Resource: google_org_policy_policy (#3637)

IMPROVEMENTS:

• cloudbuild: added field service_account to google_cloudbuild_trigger (#3661)
• composer: added field scheduler_count to google_composer_environment (#3660)
• compute: Disabled recreation of GCE instances when updating resource_policies property (#3668)
• container: added support for logging_config and monitoring_config to google_container_cluster (#3641)
• kms: added support for import_only to google_kms_crypto_key (#3659)
• networkservices: boosted the default timeout for google_network_services_edge_cache_origin from 30m to 60m (#3674)

BUG FIXES:

• container: fixed an issue where a node pool created with error (eg. GKE_STOCKOUT) would not be captured in state (#3646)
• filestore: Allowed updating reserved_ip_range on google_filestore_instance via recreation of the instance (#3651)
• serviceusage: Made the service api retry failed operation calls in anticipation of transient errors that occur when first enabling the service. (#3666)

v3.86.0

BUG FIXES:

• dns: fixed an issue in google_dns_record_set where rrdatas could not be updated (#3625)
• dns: fixed an issue in google_dns_record_set where creating the resource would result in an 409 error (#3625)
• platform: fixed a bug in wrongly writing to state when creation failed on google_organization_policy (#3624)

v3.85.0

DEPRECATIONS:

• compute: deprecated interface field on google_compute_disk and google_compute_region_disk (#3611)

IMPROVEMENTS:

• bigtable: enabled support for user_project_override in google_bigtable_instance and google_bigtable_table (#3614)
• compute: added iap fields to google_compute_region_backend_service (#3605)
• compute: allowed passing an IP address to the nextHopIlb field of google_compute_route resource (#3609)
• container: added field dns_config to resource google_container_cluster (#3606)
• iam: added disabled field to google_service_account resource (#3603)
• provider: added links to nested types documentation within a resource (#3615)
• storage: added field path to google_storage_transfer_job (#3608)

BUG FIXES:

• appengine: fixed bug where deployment.container.image would update to an old version even if in ignore_changes (#3613)
• bigquery: fixed a bug where destination_encryption_config.kms_key_name stored the version rather than the key name. (#3616)
• redis: extended the default timeouts on google_redis_instance (#3604)
• serviceusage: fixed an issue in google_project_service where users could not reenable services that were disabled outside of Terraform. (#3607)

v3.84.0

DEPRECATIONS:

• compute: deprecated interface field on google_compute_disk and google_compute_region_disk (#3611)

FEATURES:

• New Data Source: google_secret_manager_secret (#3588)

IMPROVEMENTS:

• compute: added update support to google_compute_service_attachment (#3587)
• filestore: added connect_mode to networks field in google_filestore_instance (#3595)

BUG FIXES:

• container: fixed a bug in failing to remove maintenance_exclusion on google_container_cluster (#3600)
• compute: fixed advanced_machine_features error messages in google_compute_instance (#3598)
• eventarc: fixed bug where resources deleted outside of Terraform would cause errors (#3590)
• functions: fixed an error message on google_cloudfunctions_function (#3591)
• logging: fixed the data type for bucket_options.linear_buckets.width on google_logging_metric (#3589)
• osconfig: fixed import on google_os_config_guest_policies (#3594)
• storage: fixed an undetected change on days_since_noncurrent_time of google_storage_bucket (#3599)