v3.64.0

FEATURES:

• New Resource: google_tags_tag_binding (#3121)
• New Resource: google_tags_tag_key_iam_binding (#3124)
• New Resource: google_tags_tag_key_iam_member (#3124)
• New Resource: google_tags_tag_key_iam_policy (#3124)
• New Resource: google_tags_tag_value_iam_binding (#3124)
• New Resource: google_tags_tag_value_iam_member (#3124)
• New Resource: google_tags_tag_value_iam_policy (#3124)
• New Resource: google_apigee_envgroup_attachment (#3129)

IMPROVEMENTS:

• bigquery: added require_partition_filter field to google_bigquery_table when provisioning hive_partitioning_options (#3106)
• cloudbuild: added new machine types for google_cloudbuild_trigger (#3115)
• compute: added field maintenance_window.start_time to google_compute_node_group (#3125)
• compute: added gVNIC support for google_compute_instance_template (#3123)
• datacatalog: added description field to google_data_catalog_tag_template resource (#3128)
• iam: added support for third party identities via the principle and principleSet IAM members (#3133)

BUG FIXES:

• compute: reverted datatype change for mtu in google_compute_interconnect_attachment as it was incompatible with existing state representation (#3112)
• iam: fixed issue with principle and principleSet members not retaining their casing (#3133)
• storage: fixed intermittent Provider produced inconsistent result after apply error when creating (#3107)

v3.63.0

FEATURES:

• New Data Source: google_monitoring_istio_canonical_service (#3092)
• New Resource: google_apigee_instance_attachment (#3093)
• New Resource: google_gke_hub_membership (#3079)
• New Resource: google_tags_tag_value (#3097)

IMPROVEMENTS:

• added support for Apple silicon chip (updated to go 1.16) (#3057)
• container:
  • added support for GKE Autopilot in google_container_cluster(#3101)
  • added enable_l4_ilb_subsetting (beta) and private_ipv6_google_access fields to google_container_cluster (#3095)
• sql: changed the default timeout of google_sql_database_instance to 30m from 20m (#3099)

BUG FIXES:

• bigquery: fixed issue where you couldn't extend an existing schema with additional columns in google_bigquery_table (#3100)
• cloudidentity: modified google_cloud_identity_groups and google_cloud_identity_group_memberships to respect the user_project_override and billing_project configurations and send the appropriate headers to establish a quota project (#3081)
• compute: added minimum for scopes field to google_compute_instance resource (#3098)
• notebooks: fixed permadiff on labels for google_notebook_instance (#3096)
• secretmanager: set required on secrest_data in google_secret_manager_secret_version (#3094)

v3.62.0

FEATURES:

• New Data Source: google_compute_health_check (#3066)
• New Data Source: google_kms_secret_asymmetric (#3076)
• New Resource: google_gke_hub_membership (#3079)
• New Resource: google_tags_tag_key (#3062)
• New Resource: google_data_catalog_tag_template_iam_* (#3071)

IMPROVEMENTS:

• accesscontextmanager: added support for ingress and egress policies to google_access_context_manager_service_perimeter (#3064)
• artifactregistry: relaxed field validations for field format on google_artifact_registry_repository (#3068)
• compute: added proxy_bind to google_compute_target_tcp_proxy, google_compute_target_http_proxy and google_compute_target_https_proxy (#3061)

BUG FIXES:

• compute: fixed an issue where exceeding the operation rate limit would fail without retrying (#3077)
• compute: corrected underlying type to integer for field mtu in google_compute_interconnect_attachment (#3075

v3.61.0

IMPROVEMENTS:

• provider: The provider now supports Workload Identity Federation. The federated json credentials must be loaded through the GOOGLE_APPLICATION_CREDENTIALS environment variable. (#3054)
• compute: added proxy_bind to google_compute_target_tcp_proxy, google_compute_target_http_proxy and google_compute_target_https_proxy (#3061)
• compute: changed google_compute_subnetwork to accept more values in the purpose field (#3043)
• dataflow: added enable_streaming_engine argument (#3049)
• vpcaccess: added subnet, machine_type beta fields to google_vpc_access_connector (#3042)

BUG FIXES:

• bigtable: fixed bug where gc_policy would attempt to recreate the resource when switching from deprecated attribute but maintaining the same value underlying value (#3037)
• binaryauthorization: fixed permadiff in google_binary_authorization_attestor (#3035)
• container: Fixed updates on export_custom_routes and import_custom_routes in google_compute_network_peering (#3045)

v3.60.0

FEATURES:

• New Resource: google_workflows_workflow (#2989)
• New Resource: google_apigee_envgroup (#3039)
• New Resource: google_apigee_environment (#3020)
• New Resource: google_apigee_instance (#2986)

IMPROVEMENTS:

• cloudrun: suppressed metadata.labels["cloud.googleapis.com/location"] value in google_cloud_run_service (#3005)
• compute: added mtu field to google_compute_interconnect_attachment (#3006)
• compute: added autoscaling_policy.cpu_utilization.predictive_method field to google_compute_autoscaler and google_compute_region_autoscaler (#2987)
• compute: added support for nic_type to google_compute_instance (GA only) (#2998)
• container: added field ephemeral_storage_config to resource google_container_node_pool and google_container_cluster (beta) (#3023)
• datafusion: added support for the DEVELOPER instance type to google_data_fusion_instance (#3015)
• monitoring: added windows based availability sli to the resource google_monitoring_slo (#3013)
• sql: added settings.0.backup_configuration.transaction_log_retention_days and settings.0.backup_configuration.transaction_log_retention_days fields to google_sql_database_instance (#3010)
• storage: added kms_key_name to google_storage_bucket_object resource (#3026)

BUG FIXES:

• bigquery: fixed materialized view to be recreated when query changes (#3032)
• bigtable: fixed bug where gc_policy would attempt to recreate the resource when switching from deprecated attribute but maintaining the same underlying value (#3037)
• bigtable: required resource recreation if any fields change on resource_bigtable_gc_policy (#2991)
• binaryauthorization: fixed permadiff in google_binary_authorization_attestor (#3035)
• cloudfunction: added retry logic for google_cloudfunctions_function updates (#2992)
• cloudidentity: fixed a bug where google_cloud_identity_group would periodically fail with a 403 (#3012)
• compute: fixed a perma-diff for nat_ips that were specified as short forms in google_compute_router_nat (#3007)
• compute: fixed perma-diff for cos-family disk images (#3024)
• compute: Fixed service account scope alias to be updated. (#3021)
• container: fixed container cluster not removed from the state when received 404 error on delete call for the resource google_container_cluster (#3018)
• container: Fixed failure in deleting maintenance_exclusion for google_container_cluster (#3014)
• container: fixed an issue where release channel UNSPECIFIED could not be set (#3019)
• essentialcontacts: made language_tag required for google_essential_contacts_contact (#2994)
• serviceusage: fixed an issue in google_service_usage_consumer_quota_override where setting the override_value to 0 would result in a permanent diff (#2985)
• serviceusage: fixed an issue in google_service_usage_consumer_quota_override where setting the override_value to 0 would result in a permanent diff (#3025)

v3.59.0

FEATURES:

• New Resource: google_dataproc_metastore_service (#2977)
• New Resource: google_workflows_workflow (#2989)
• New Resource: google_apigee_instance (#2986)
• New Resource: google_eventarc_trigger (#2972)

IMPROVEMENTS:

• composer: added encryption_config to google_composer_environment resource (#2967)
• compute: Added graceful termination to google_container_node_pool create calls so that partially created node pools will resume the original operation if the Terraform process is killed mid create. (#2969)
• redis : marked auth_string on the resource_redis_instance resource as sensitive (#2974)

BUG FIXES:

• apigee: fixed IDs when importing google_apigee_organization resource (#2966)
• artifactregistry: fixed issue where updating google_artifact_registry_repository always failed (#2968)
• compute : fixed a bug where guest_flush could not be set to false for the resource google_compute_resource_policy (#2975)
• compute: fixed a panic on empty target_size in google_compute_region_instance_group_manager (#2979)
• redis: fixed invalid value error on auth_string in google_redis_instance (#2970)

v3.58.0

NOTES:

• google_bigquery_table resources now cannot be destroyed unless deletion_protection = false is set in state for the resource. (#2954)

FEATURES:

• New Data Source: google_runtimeconfig_variable (#2945)
• New Data Source: google_iap_client (#2951)

IMPROVEMENTS:

• bigquery: added deletion_protection field to google_bigquery_table to make deleting them require an explicit intent. (#2954)
• cloudrun: updated retry logic to attempt to retry 409 errors from the Cloud Run API, which may be returned intermittently on create. (#2948)
• compute: removed max items limit from google_compute_target_ssl_proxy. The API currently allows upto 15 Certificates. (#2964)
• compute: added support for Private Services Connect for Google APIs in google_compute_global_address and google_compute_global_forwarding_rule (#2956)
• iam: added a retry condition that retries editing iam_binding and iam_member resources on policies that have frequently deleted service accounts (#2963)
• redis: added transit encryption mode support for google_redis_instance (#2955)
• secretmanager: changed endpoint to use v1 instead of v1beta1 as it is more up-to-date (#2946)
• sql: added insights_config block to google_sql_database_instance resource (#2944)

BUG FIXES:

• compute: fixed an issue where the provider could return an error on a successful delete operation (#2958)
• datacatalog: fixed import issue for google_data_catalog_taxonomy (#2961)
• dataproc : fixed max_failure_per_hour not sent in API request for the resource google_dataproc_job (#2949)
• dlp : modified google_data_loss_prevention_stored_info_type regex.group_indexes field to trigger resource recreation on update (#2947)
• sql: fixed diffs based on case for charset in google_sql_database (#2957)

3.57.0

DEPRECATIONS:

• compute: deprecated source_disk_url field in google_compute_snapshot. (#2939)
• kms: deprecated self_link field in google_kms_keyring and google_kms_cryptokey resource as it is identical value to id field. (#2939)
• pubsub: deprecated path field in google_pubsub_subscription resource as it is identical value to id field. (#2939)

FEATURES:

• New Resource: google_essential_contacts_contact (#2943)
• New Resource: google_privateca_certificate (#2924)

IMPROVEMENTS:

• bigquery: added status field to google_bigquery_job (#2926)
• compute: added disk.resource_policies field to resource google_compute_instance_template (#2929)
• compute: added nic_type field to google_compute_instance_template resource to support gVNIC (#2941)
• compute: added nic_type field to google_compute_instance resource to support gVNIC (#2941)
• pubsub: marked kms_key_name field in google_pubsub_topic as updatable (#2942)

BUG FIXES:

• appengine: added retry for P4SA propagation delay (#2938)
• compute: fixed overly-aggressive detection of changes to google_compute_security_policy rules (#2940)

v3.56.0

FEATURES:

• New Resource: google_privateca_certificate (#2924)

IMPROVEMENTS:

• all: added plan time validations for fields that expect base64 values. (#2906)
• compute: added disk.resource_policies field to resource google_compute_instance_template (#2929)
• sql: added support for point-in-time-recovery to google_sql_database_instance (#2923)
• monitoring : added availability sli metric support for the resource google_monitoring_slo (#2908)

BUG FIXES:

• bigquery: fixed bug where you could not reorder columns on schema for resource google_bigquery_table (#2913)
• cloudrun: suppressed run.googleapis.com/ingress-status annotation in google_cloud_run_service (#2920)
• serviceaccount: loosened restrictions on account_id for datasource google_service_account (#2917)

v3.55.0

BREAKING CHANGES:

• Reverted * bigquery: made incompatible changes to the google_bigquery_table.schema field to cause the resource to be recreated ([#8232](https://github.com/hashicorp/terraform-provider-google/pull/8232)) due to unintended interactions with a bug introduced in an earlier version of the resource.

FEATURES:

• New Data Source: google_runtimeconfig_config (#8268)

IMPROVEMENTS:

• compute: added distribution_policy_target_shape field to google_compute_region_instance_group_manager resource (#8277)
• container: promoted master_global_access_config, tpu_ipv4_cidr_block, default_snat_status and datapath_provider fields of google_container_cluster to GA. (#8303)
• dataproc: Added field temp_bucket to google_dataproc_cluster cluster config. (#8131)
• notebooks: added tags, service_account_scopes,shielded_instance_config to google_notebooks_instance (#8289)
• provider: added plan time validations for fields that expect base64 values. (#8304)

BUG FIXES:

• bigquery: fixed permadiff on expiration_ms for google_bigquery_table (#8298)
• billing: fixed perma-diff on currency_code in google_billing_budget (#8266)
• compute: changed private_ipv6_google_access in google_compute_subnetwork to correctly send a fingerprint (#8290)
• healthcare: add retry logic on healthcare dataset not initialized error (#8256)