Deprecated google_iap_client and google_iap_brand (#14345) (#23431)

[upstream:b7254f5ddcf9a76e8b1b2c0eb09e442e19b7392b]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/14345.txt

@@ -0,0 +1,3 @@
+```release-note:deprecation
+iap: deprecated `google_iap_client` and `google_iap_brand`
+```

google/services/iap/resource_iap_brand.go

@@ -53,6 +53,8 @@ func ResourceIapBrand() *schema.Resource {
 			tpgresource.DefaultProviderProject,
 		),
 
+		DeprecationMessage: "after July 2025, the `google_iap_brand` Terraform resource will no longer function as intended due to the deprecation of the IAP OAuth Admin API",
+
 		Schema: map[string]*schema.Schema{
 			"application_title": {
 				Type:        schema.TypeString,

google/services/iap/resource_iap_client.go

@@ -48,6 +48,8 @@ func ResourceIapClient() *schema.Resource {
 			Delete: schema.DefaultTimeout(20 * time.Minute),
 		},
 
+		DeprecationMessage: "After July 2025, the `google_iap_client` Terraform resource will no longer function as intended due to the deprecation of the IAP OAuth Admin API",
+
 		Schema: map[string]*schema.Schema{
 			"brand": {
 				Type:     schema.TypeString,

website/docs/r/iap_brand.html.markdown

@@ -20,6 +20,7 @@ description: |-
 ---
 
 # google_iap_brand
+~> **Warning:** after July 2025, the `google_iap_brand` Terraform resource will no longer function as intended due to the deprecation of the IAP OAuth Admin API
 
 OAuth brand data. Only "Organization Internal" brands can be created
 programmatically via API. To convert it into an external brands

website/docs/r/iap_client.html.markdown

@@ -20,6 +20,7 @@ description: |-
 ---
 
 # google_iap_client
+~> **Warning:** After July 2025, the `google_iap_client` Terraform resource will no longer function as intended due to the deprecation of the IAP OAuth Admin API
 
 Contains the data that describes an Identity Aware Proxy owned client.