diff --git a/docs/upgrading_to_vpn_v5.0.md b/docs/upgrading_to_vpn_v5.0.md
new file mode 100644
index 0000000..f028e8e
--- /dev/null
+++ b/docs/upgrading_to_vpn_v5.0.md
@@ -0,0 +1,5 @@
+# Upgrading to v5.0.0
+
+The v5.0 release contains backwards-incompatible changes.
+
+This update requires upgrading the minimum provider version `6.21`.
diff --git a/modules/vpn_ha/main.tf b/modules/vpn_ha/main.tf
index 7c6d888..7132a3c 100644
--- a/modules/vpn_ha/main.tf
+++ b/modules/vpn_ha/main.tf
@@ -41,6 +41,7 @@ resource "google_compute_ha_vpn_gateway" "ha_gateway" {
   region     = var.region
   network    = var.network
   stack_type = var.stack_type
+  labels     = var.labels
 }
 
 resource "google_compute_external_vpn_gateway" "external_gateway" {
diff --git a/modules/vpn_ha/versions.tf b/modules/vpn_ha/versions.tf
index 715ccb9..b19dc6e 100644
--- a/modules/vpn_ha/versions.tf
+++ b/modules/vpn_ha/versions.tf
@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 5.7, < 7"
+      version = ">= 6.21, < 7"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 5.7, < 7"
+      version = ">= 6.21, < 7"
     }
     random = {
       source  = "hashicorp/random"