diff --git a/autogen/main/versions.tf.tmpl b/autogen/main/versions.tf.tmpl
index 26349ac176..cbee76864a 100644
--- a/autogen/main/versions.tf.tmpl
+++ b/autogen/main/versions.tf.tmpl
@@ -24,33 +24,33 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
 {% elif beta_cluster and autopilot_cluster %}
   required_providers {
     google = {
       source = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
 {% elif autopilot_cluster  %}
   required_providers {
     google = {
       source = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
 {% else %}
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
 {% endif %}
     kubernetes = {
diff --git a/metadata.yaml b/metadata.yaml
index 802f808808..cd845d42d2 100644
--- a/metadata.yaml
+++ b/metadata.yaml
@@ -826,7 +826,7 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/auth/metadata.yaml b/modules/auth/metadata.yaml
index d5a2b40f7d..e426b1b803 100644
--- a/modules/auth/metadata.yaml
+++ b/modules/auth/metadata.yaml
@@ -158,4 +158,4 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 4.47.0, != 4.49.0, != 4.50.0, < 7"
+        version: ">= 4.47.0, != 4.49.0, != 4.50.0, < 8"
diff --git a/modules/auth/versions.tf b/modules/auth/versions.tf
index 7be20161a4..391ce60ac0 100644
--- a/modules/auth/versions.tf
+++ b/modules/auth/versions.tf
@@ -21,7 +21,7 @@ terraform {
     google = {
       source = "hashicorp/google"
       # Avoid v4.49 and v4.50 for https://github.com/hashicorp/terraform-provider-google/issues/13507
-      version = ">= 4.47.0, != 4.49.0, != 4.50.0, < 7"
+      version = ">= 4.47.0, != 4.49.0, != 4.50.0, < 8"
     }
   }
 
diff --git a/modules/beta-autopilot-private-cluster/metadata.yaml b/modules/beta-autopilot-private-cluster/metadata.yaml
index 2e9e78114a..daf91311b5 100644
--- a/modules/beta-autopilot-private-cluster/metadata.yaml
+++ b/modules/beta-autopilot-private-cluster/metadata.yaml
@@ -569,9 +569,9 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/beta-autopilot-private-cluster/versions.tf b/modules/beta-autopilot-private-cluster/versions.tf
index 5fbffdc4cf..646b0eacb3 100644
--- a/modules/beta-autopilot-private-cluster/versions.tf
+++ b/modules/beta-autopilot-private-cluster/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/beta-autopilot-public-cluster/metadata.yaml b/modules/beta-autopilot-public-cluster/metadata.yaml
index f33dd9b4c1..9bbfce2333 100644
--- a/modules/beta-autopilot-public-cluster/metadata.yaml
+++ b/modules/beta-autopilot-public-cluster/metadata.yaml
@@ -543,9 +543,9 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/beta-autopilot-public-cluster/versions.tf b/modules/beta-autopilot-public-cluster/versions.tf
index ac68255fe6..c183003cb5 100644
--- a/modules/beta-autopilot-public-cluster/versions.tf
+++ b/modules/beta-autopilot-public-cluster/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/beta-private-cluster-update-variant/metadata.yaml b/modules/beta-private-cluster-update-variant/metadata.yaml
index 7b2a1e1d3a..eda6878b2d 100644
--- a/modules/beta-private-cluster-update-variant/metadata.yaml
+++ b/modules/beta-private-cluster-update-variant/metadata.yaml
@@ -861,9 +861,9 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/beta-private-cluster-update-variant/versions.tf b/modules/beta-private-cluster-update-variant/versions.tf
index 9cc35730bd..f7cd00ee9a 100644
--- a/modules/beta-private-cluster-update-variant/versions.tf
+++ b/modules/beta-private-cluster-update-variant/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/beta-private-cluster/metadata.yaml b/modules/beta-private-cluster/metadata.yaml
index be96b429c8..501111fdad 100644
--- a/modules/beta-private-cluster/metadata.yaml
+++ b/modules/beta-private-cluster/metadata.yaml
@@ -861,9 +861,9 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/beta-private-cluster/versions.tf b/modules/beta-private-cluster/versions.tf
index 97e3923362..8f9d51dd6e 100644
--- a/modules/beta-private-cluster/versions.tf
+++ b/modules/beta-private-cluster/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/beta-public-cluster-update-variant/metadata.yaml b/modules/beta-public-cluster-update-variant/metadata.yaml
index 9b4f41b930..a4feebd885 100644
--- a/modules/beta-public-cluster-update-variant/metadata.yaml
+++ b/modules/beta-public-cluster-update-variant/metadata.yaml
@@ -835,9 +835,9 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/beta-public-cluster-update-variant/versions.tf b/modules/beta-public-cluster-update-variant/versions.tf
index b8681d95b7..8a38083c21 100644
--- a/modules/beta-public-cluster-update-variant/versions.tf
+++ b/modules/beta-public-cluster-update-variant/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/beta-public-cluster/metadata.yaml b/modules/beta-public-cluster/metadata.yaml
index 710d7a5ca6..cd93cb5f55 100644
--- a/modules/beta-public-cluster/metadata.yaml
+++ b/modules/beta-public-cluster/metadata.yaml
@@ -835,9 +835,9 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/beta-public-cluster/versions.tf b/modules/beta-public-cluster/versions.tf
index 95fdf2f959..db0f8cb124 100644
--- a/modules/beta-public-cluster/versions.tf
+++ b/modules/beta-public-cluster/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/binary-authorization/metadata.yaml b/modules/binary-authorization/metadata.yaml
index 6304c4ee46..d509b4a08e 100644
--- a/modules/binary-authorization/metadata.yaml
+++ b/modules/binary-authorization/metadata.yaml
@@ -162,6 +162,6 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: < 7
+        version: < 8
       - source: hashicorp/google-beta
-        version: < 7
+        version: < 8
diff --git a/modules/binary-authorization/versions.tf b/modules/binary-authorization/versions.tf
index ed4ace6e60..e6b9767aa3 100644
--- a/modules/binary-authorization/versions.tf
+++ b/modules/binary-authorization/versions.tf
@@ -20,11 +20,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = "< 7"
+      version = "< 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = "< 7"
+      version = "< 8"
     }
   }
   provider_meta "google" {
diff --git a/modules/fleet-membership/metadata.yaml b/modules/fleet-membership/metadata.yaml
index 444bb6df81..7994816aee 100644
--- a/modules/fleet-membership/metadata.yaml
+++ b/modules/fleet-membership/metadata.yaml
@@ -170,6 +170,6 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 5.6.0, < 7"
+        version: ">= 5.6.0, < 8"
       - source: hashicorp/google-beta
-        version: ">= 5.6.0, < 7"
+        version: ">= 5.6.0, < 8"
diff --git a/modules/fleet-membership/versions.tf b/modules/fleet-membership/versions.tf
index b37aa69f77..7325ea9037 100644
--- a/modules/fleet-membership/versions.tf
+++ b/modules/fleet-membership/versions.tf
@@ -21,11 +21,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 5.6.0, < 7"
+      version = ">= 5.6.0, < 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 5.6.0, < 7"
+      version = ">= 5.6.0, < 8"
     }
   }
 
diff --git a/modules/gke-autopilot-cluster/metadata.yaml b/modules/gke-autopilot-cluster/metadata.yaml
index 46e2626ebc..9a9ddf02ed 100644
--- a/modules/gke-autopilot-cluster/metadata.yaml
+++ b/modules/gke-autopilot-cluster/metadata.yaml
@@ -569,12 +569,12 @@ spec:
     roles:
       - level: Project
         roles:
+          - roles/iam.serviceAccountUser
           - roles/compute.admin
           - roles/container.admin
-          - roles/iam.serviceAccountUser
     services:
       - compute.googleapis.com
       - container.googleapis.com
     providerVersions:
       - source: hashicorp/google-beta
-        version: ">= 6.33.0, < 7"
+        version: ">= 6.33.0, < 8"
diff --git a/modules/gke-autopilot-cluster/versions.tf b/modules/gke-autopilot-cluster/versions.tf
index b1fa22ba0b..0f81ed16a3 100644
--- a/modules/gke-autopilot-cluster/versions.tf
+++ b/modules/gke-autopilot-cluster/versions.tf
@@ -20,7 +20,7 @@ terraform {
   required_providers {
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.33.0, < 7"
+      version = ">= 6.33.0, < 8"
     }
   }
   provider_meta "google-beta" {
diff --git a/modules/gke-node-pool/metadata.yaml b/modules/gke-node-pool/metadata.yaml
index 8de6bddc20..86d1200ce3 100644
--- a/modules/gke-node-pool/metadata.yaml
+++ b/modules/gke-node-pool/metadata.yaml
@@ -403,12 +403,12 @@ spec:
     roles:
       - level: Project
         roles:
-          - roles/compute.admin
           - roles/container.admin
           - roles/iam.serviceAccountUser
+          - roles/compute.admin
     services:
       - compute.googleapis.com
       - container.googleapis.com
     providerVersions:
       - source: hashicorp/google-beta
-        version: ">= 6.33.0, < 7"
+        version: ">= 6.33.0, < 8"
diff --git a/modules/gke-node-pool/versions.tf b/modules/gke-node-pool/versions.tf
index b1fa22ba0b..0f81ed16a3 100644
--- a/modules/gke-node-pool/versions.tf
+++ b/modules/gke-node-pool/versions.tf
@@ -20,7 +20,7 @@ terraform {
   required_providers {
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.33.0, < 7"
+      version = ">= 6.33.0, < 8"
     }
   }
   provider_meta "google-beta" {
diff --git a/modules/gke-standard-cluster/metadata.yaml b/modules/gke-standard-cluster/metadata.yaml
index 56631d1b66..dc67120a3b 100644
--- a/modules/gke-standard-cluster/metadata.yaml
+++ b/modules/gke-standard-cluster/metadata.yaml
@@ -1016,4 +1016,4 @@ spec:
       - container.googleapis.com
     providerVersions:
       - source: hashicorp/google-beta
-        version: ">= 6.33.0, < 7"
+        version: ">= 6.33.0, < 8"
diff --git a/modules/gke-standard-cluster/versions.tf b/modules/gke-standard-cluster/versions.tf
index b1fa22ba0b..0f81ed16a3 100644
--- a/modules/gke-standard-cluster/versions.tf
+++ b/modules/gke-standard-cluster/versions.tf
@@ -20,7 +20,7 @@ terraform {
   required_providers {
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 6.33.0, < 7"
+      version = ">= 6.33.0, < 8"
     }
   }
   provider_meta "google-beta" {
diff --git a/modules/hub-legacy/metadata.yaml b/modules/hub-legacy/metadata.yaml
index fa270f7210..e4360149c8 100644
--- a/modules/hub-legacy/metadata.yaml
+++ b/modules/hub-legacy/metadata.yaml
@@ -191,6 +191,6 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: < 7
+        version: < 8
       - source: hashicorp/google-beta
-        version: < 7
+        version: < 8
diff --git a/modules/hub-legacy/versions.tf b/modules/hub-legacy/versions.tf
index 5ba4875f3a..75de9d14f1 100644
--- a/modules/hub-legacy/versions.tf
+++ b/modules/hub-legacy/versions.tf
@@ -20,11 +20,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = "< 7"
+      version = "< 8"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = "< 7"
+      version = "< 8"
     }
   }
   provider_meta "google" {
diff --git a/modules/private-cluster-update-variant/metadata.yaml b/modules/private-cluster-update-variant/metadata.yaml
index f64b350763..d2a5276ff8 100644
--- a/modules/private-cluster-update-variant/metadata.yaml
+++ b/modules/private-cluster-update-variant/metadata.yaml
@@ -812,7 +812,7 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/private-cluster-update-variant/versions.tf b/modules/private-cluster-update-variant/versions.tf
index e0ab850ab7..e67ffcb93e 100644
--- a/modules/private-cluster-update-variant/versions.tf
+++ b/modules/private-cluster-update-variant/versions.tf
@@ -21,7 +21,7 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/private-cluster/metadata.yaml b/modules/private-cluster/metadata.yaml
index 8a81945472..752648f672 100644
--- a/modules/private-cluster/metadata.yaml
+++ b/modules/private-cluster/metadata.yaml
@@ -812,7 +812,7 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 6.42.0, < 7"
+        version: ">= 6.42.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.10
       - source: hashicorp/random
diff --git a/modules/private-cluster/versions.tf b/modules/private-cluster/versions.tf
index 2e12fd872e..800ea74e5f 100644
--- a/modules/private-cluster/versions.tf
+++ b/modules/private-cluster/versions.tf
@@ -21,7 +21,7 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/modules/workload-identity/metadata.yaml b/modules/workload-identity/metadata.yaml
index 635cb8b03d..bb6d3efbf2 100644
--- a/modules/workload-identity/metadata.yaml
+++ b/modules/workload-identity/metadata.yaml
@@ -224,6 +224,6 @@ spec:
           - roles/editor
     providerVersions:
       - source: hashicorp/google
-        version: ">= 5.12.0, < 7"
+        version: ">= 5.12.0, < 8"
       - source: hashicorp/kubernetes
         version: ~> 2.13
diff --git a/modules/workload-identity/versions.tf b/modules/workload-identity/versions.tf
index 63293ca7f7..4ec64a8244 100644
--- a/modules/workload-identity/versions.tf
+++ b/modules/workload-identity/versions.tf
@@ -21,7 +21,7 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 5.12.0, < 7"
+      version = ">= 5.12.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
diff --git a/versions.tf b/versions.tf
index 9dc937f31a..f6ad6d5cdb 100644
--- a/versions.tf
+++ b/versions.tf
@@ -21,7 +21,7 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 6.42.0, < 7"
+      version = ">= 6.42.0, < 8"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"