v6.31.0

DEPRECATIONS:

• integrations: deprecated run_as_service_account field in google_integrations_client resource (#9767)

FEATURES:

• New Resource: google_compute_resource_policy_attachment (#9824)
• New Resource: google_compute_storage_pool (#9786)
• New Resource: google_gke_backup_backup_channel (#9819)
• New Resource: google_gke_backup_restore_channel (#9819)
• New Resource: google_iap_web_cloud_run_service_iam_binding (#9823)
• New Resource: google_iap_web_cloud_run_service_iam_member (#9823)
• New Resource: google_iap_web_cloud_run_service_iam_policy (#9823)
• New Resource: google_storage_batch_operations_job (#9779)

IMPROVEMENTS:

• accesscontextmanager: added scoped_access_settings field to gcp_user_access_binding resource (#9763)
• alloydb: added assistive_experiences_enabled field to observabilityConfig in google_alloydb_instance resource (#9808)
• alloydb: added machine_type field to google_alloydb_instance resource (#9795)
• artifactregistry: added DEBIAN_SNAPSHOT enum value to repository_base in google_artifact_registry_repository (#9770)
• compute: added log_config.optional_mode, log_config.optional_fields, backend.preference, max_stream_duration and cdn_policy.request_coalescing fields to google_compute_backend_service resource (#9818)
• container: added support for updating the confidential_nodes field in google_container_node_pool (#9804)
• discoveryengine: added allow_cross_region field to google_discovery_engine_chat_engine resource (#9782)
• gkehub: added configmanagement.config_sync.deployment_overrides field to google_gke_hub_feature_membership resource (#9828)
• kms: added new enum values for import_method field in google_kms_key_ring_import_job resource (#9769)
• metastore: added tags field to google_dataproc_metastore_service resource to allow setting tags for services at creation time (#9768)
• monitoring: added log_check_failures to google_monitoring_uptime_check_config (#9794)
• networkconnectivity: added IPv6 support to google_network_connectivity_internal_range resource (#9826)
• networkconnectivity: added exclude_cidr_ranges field to google_network_connectivity_internal_range resource (#9778)
• privateca: added backdate_duration field to the google_privateca_ca_pool resource to add support for backdating the not_before_time of certificates (#9812)
• redis: added tags field to google_redis_instance (#9783)
• sql: added custom_subject_alternative_names field to instances resource (#9799)
• sql: added data_disk_provisioned_iops and data_disk_provisioned_throughput fields to google_sql_database_instance resource (#9822)
• sql: added retain_backups_on_delete field to google_sql_database_instance resource (#9780)

BUG FIXES:

• colab: fixed perma-diff in google_colab_runtime_template caused by not returning default values. (#9784)
• discoveryengine: fixed google_discovery_engine_target_site operations to allow for enough time to index before timing out (#9800)
• compute: fixed perma-diff in google_compute_network_firewall_policy_rule when security_profile_group starts with // (#9827)
• healthcare: made google_healthcare_pipeline_job wait for creation and update operation to complete (#9785)
• identityplatform: fixed perma-diff in google_identity_platform_config when fields in blocking_functions.forward_inbound_credentials are set to false (#9814)
• sql: added diff suppression for some version changes togoogle_sql_database_instance. Diffs for database_version for MySQL 8.0 will be suppressed when the version is updated by auto version upgrade.(#22356)
• sql: fixed the issue of shortened version of failover_dr_replica_name causing unnecessary diff in google_sql_database_instance (#9775)

v6.30.0

FEATURES:

• New Resource: google_developer_connect_account_connector (#9741)
• New Resource: google_vertex_ai_feature_group_iam_* (#9735)
• New Resource: google_vertex_ai_feature_online_store_iam_* (#9735)
• New Resource: google_vertex_ai_feature_online_store_featureview_iam_* (#9735)

IMPROVEMENTS:

• cloudrunv2: added iap_enabled field to google_cloud_run_v2_service resource (#9758)
• compute: added source_disk_encryption_key.kms_key_self_link and source_disk_encryption_key.rsa_encrypted_key fields to google_compute_snapshot resource (#9730)
• compute: added source_disk_encryption_key, source_image_encryption_key and source_snapshot_encryption_key fields to google_compute_image resource (#9730)
• databasemigrationservice: allowed setting ssl.type in google_database_migration_service_connection_profile resource (#9739)
• firestore: added MONGODB_COMPATIBLE_API enum option to api_scope field in google_firestore_index resource (#9750)
• firestore: added database_edition field to google_firestore_database resource (#9750)
• firestore: added density and multikey fields to google_firestore_index resource (#9750)
• memorystore: added managed_backup_source and gcs_source fields to google_memorystore_instance resource (#9753)
• monitoring: added password_wo write-only field and password_wo_version field to google_monitoring_uptime_check_config resource (#9727)
• redis: added managed_backup_source and gcs_source fields to google_redis_cluster resource (#9745)
• storage: added support for deleting pending caches present on bucket when setting force_destory to true in google_storage_bucket resource (#9737)
• storagecontrol: added trial_config field to google_storage_control_folder_intelligence_config resource (#9724)
• storagecontrol: added trial_config field to google_storage_control_organization_intelligence_config resource (#9724)
• storagecontrol: added trial_config field to google_storage_control_project_intelligence_config resource (#9724)

BUG FIXES:

• container: fixed perma-diff in fleet field when the fleet.project field being added is null or empty in google_container_cluster resource (#9726)
• pubsub: fixed perma-diff by changing allowed_persistence_regions field to set in google_pubsub_topic resource (#9743)

v6.29.0

FEATURES:

• New Resource: google_clouddeploy_deploy_policy (#9694)
• New Resource: google_control_plane_access (#9709)
• New Resource: google_folder_service_identity (#9703)
• New Resource: google_os_config_v2_policy_orchestrator_for_organization (#9696)

IMPROVEMENTS:

• accesscontextmanager: added session_settings field to gcp_user_access_binding resource (#9720)
• cloudedeploy: added timed_promote_release_rule and repair_rollout_rule fields to google_clouddeploy_automation resource (#9694)
• compute: added group_placement_policy.0.tpu_topology field to google_compute_resource_policy resource. (#9702)
• datastream: added support for creating streams for Salesforce source in google_datastream_stream. (#9706)
• gkeonprem: added enable_advanced_cluster field to google_gkeonprem_vmware_admin_cluster resource (#9693)
• gkeonprem: added enable_advanced_cluster field to google_gkeonprem_vmware_cluster resource (#9693)
• memorystore: added automated_backup_config field to google_memorystore_instance resource (#9708)
• netapp: added tiering_policy to google_netapp_volume_replication resource (#9716)
• parametermanagerregional: added kms_key_version field to google_parameter_manager_regional_parameter_version resource and datasource (#9712)
• parametermanagerregional: added kms_key field to google_parameter_manager_regional_parameter resource and google_parameter_manager_regional_parameters datasource (#9712)
• redis: added automated_backup_config field to google_redis_cluster (#9682)
• storage: added md5hexhash field in google_storage_bucket_object (#9722)
• workbench: added confidential_instance_config field to google_workbench_instance resource (#9688)

BUG FIXES:

• colab: fixed an issue where google_colab_* resources incorrectly required a provider-level region matching the resource location (#9714)
• datastream: updated private_keyto be mutable in google_datastream_connection_profile resource. (#9689)
• gkehub: enabled partial results to be returned when a cloud region is unreachable in google_gke_hub_feature (#9715)

v6.28.0

DEPRECATIONS:

• compute: deprecated enable_flow_logs in favor of log_config on google_compute_subnetwork resource. If log_config is present, flow logs are enabled, and enable_flow_logs can be safely removed. (#9679)
• containerregistry: Deprecated google_container_registry resource, and google_container_registry_image and google_container_registry_repository data sources. Use google_artifact_registry_repository instead. (#9650)

FEATURES:

• New Data Source: google_compute_region_backend_service (#9616)
• New Data Source: google_organization_iam_custom_roles (#9628)
• New Data Source: google_storage_control_folder_intelligence_config (#9655)
• New Data Source: google_storage_control_organization_intelligence_config (#9655)
• New Data Source: google_storage_control_project_intelligence_config (#9655)
• New Resource: google_apigee_dns_zone (#9622)
• New Resource: google_dataproc_metastore_database_iam_* resources (#9615)
• New Resource: google_dataproc_metastore_table_iam_* (#9647)
• New Resource: google_discovery_engine_sitemap (#9608)
• New Resource: google_eventarc_enrollment (#9623)
• New Resource: google_firebase_app_hosting_build (#9646)
• New Resource: google_memorystore_instance_desired_user_created_endpoints (#9652)
• New Resource: google_storage_control_folder_intelligence_config (#9644)
• New Resource: google_storage_control_organization_intelligence_config (#9617)

IMPROVEMENTS:

• accesscontextmanager: added roles field to ingress and egress policies of google_access_context_manager_service_perimeter* resources (#9661)
• cloudfunctions2: added binary_authorization_policy field to google_cloudfunctions2_function resource (#9649)
• cloudrunv2: added gpu_zonal_redundancy_disabled field to google_cloud_run_v2_service resource (#9639)
• compute: added md5_authentication_keys field to google_compute_router resource (#9673)
• compute: added EXTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#9630)
• compute: added external_ipv6_prefix, stack_type, and ipv6_access_type fields to google_compute_subnetwork data source (#9660)
• compute: added path_matchers.route_rules.custom_error_response_policy field to google_compute_url_map resource (#9656)
• compute: added source_machine_image_encryption_key field to google_compute_instance_from_machine_image resource (#9632)
• compute: added tls_settings field to google_compute_backend_service resource (#9654)
• compute: added several boot_disk, attached_disk, and instance_encryption_key fields to google_compute_instance and google_compute_instance_template resources (#9669)
• compute: added image_encryption_key.raw_key and image_encryption_key.rsa_encrypted_key fields to google_compute_image resource (#9669)
• compute: added snapshot_encryption_key.rsa_encrypted_key field to google_compute_snapshot resource (#9669)
• container: added disable_l4_lb_firewall_reconciliation field to google_container_cluster resource (#9648)
• datafusion: added tags field to google_data_fusion_instance resource to allow setting tags for instances at creation time (#9609)
• datastream: added blmt_config field to bigquery_destination_config resource to enable support for BigLake Managed Tables streams (#9677)
• datastream: added secret_manager_stored_password field to google_datastream_connection_profile resource (#9633)
• identityplatform: added disabled_user_signup and disabled_user_deletion to google_identity_platform_tenant resource (#9613)
• memorystore: added psc_attachment_details field to google_memorystore_instance resource, to enable use of the fine-grained resource google_memorystore_instance_desired_user_created_connections (#9652)
• memorystore: added the cross_cluster_replication_config field to the google_redis_cluster resource (#9670)
• metastore: added deletion_protection field to google_dataproc_metastore_federation resource (#9674)
• networksecurity: added antivirus_overrides field to google_network_security_security_profile resource (#9643)
• networksecurity: added connected_deployment_groups and associations fields to google_network_security_mirroring_endpoint_group resource (#9606)
• networksecurity: added locations field to google_network_security_mirroring_deployment_group resource (#9607)
• networksecurity: added locations field to google_network_security_mirroring_endpoint_group_association resource (#9603)
• parametermanager: added kms_key_version field to google_parameter_manager_parameter_version resource and datasource (#9642)
• parametermanager: added kms_key field to google_parameter_manager_parameter resource and google_parameter_manager_parameters datasource (#9642)
• provider: added external_credentials block in provider (#9658)
• redis: added automated_backup_config field to google_redis_cluster resource (#9682)
• storage: added content_base64 field in google_storage_bucket_object_content datasource (#9638)

BUG FIXES:

• alloydb: added a mutex to google_alloydb_cluster to prevent conflicts among multiple cluster operations (#9604)
• artifactregistry: fixed type assertion panic in google_artifact_registry_repository resource (#9672)
• bigtable: fixed automated_backup_policy field for google_bigtable_table resource (#9627)
• cloudrunv2: fixed the diffs for unchanged template.template.containers.env in google_cloud_run_v2_job resource (#9681)
• compute: fixed a regression in google_compute_subnetwork where setting log_config would not enable flow logs without enable_flow_logs also being set to true. To enable or disable flow logs, please use log_config. enable_flow_logs is now deprecated and will be removed in the next major release. (#9679)
• compute: fixed unable to update the preview field for google_compute_region_security_policy_rule resource (#9614)
• compute: fixed unable to update the preview field for google_compute_security_policy_rule resource ([#9614](https://github.com/hashicorp/terraform-provider-...

v6.27.0

FEATURES:

• New Data Source: google_compute_images (#9556)
• New Data Source: google_organization_iam_custom_role (#9577)
• New Resource: google_lustre_instance (#9601)
• New Resource: google_os_config_v2_policy_orchestrator (#9579)
• New Resource: google_storage_control_project_intelligence_config (#9570)

IMPROVEMENTS:

• bigquery: added secondary_location and replication_status fields to support managed disaster recovery feature in google_bigquery_reservation (#9575)
• clouddeploy: added dns_endpoint field to to google_clouddeploy_target resource (#9553)
• compute: added group_placement_policy.0.gpu_topology field to google_compute_resource_policy resource (#9555)
• compute: added shielded_instance_initial_state structure to google_compute_image resource (#9583)
• compute: added LINK_TYPE_ETHERNET_400G_LR4 enum value to link_type field in google_compute_interconnect resource (#9571)
• compute: added architecture and guest_os_features to google_compute_instance (#9558)
• compute: added instance_lifecycle_policy.on_failed_health_check field in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager (#9598)
• compute: added workload_policy.type, workload_policy.max_topology_distance and workload_policy.accelerator_topology fields to google_compute_resource_policy resource (#9599)
• container: added ip_endpoints_config field to google_container_cluster resource (#9597)
• container: added node_config.windows_node_config field to google_container_node_pool resource. (#9559)
• container: added pod_autoscaling field to google_container_cluster resource (#9574)
• memorystore: added the maintenance_policy field to the google_memorystore_instance resource (#9595)
• memorystore: enabled update support for node_type field in google_memorystore_instance resource (#9568)
• networkmanagement: added destination.forwarding_rule, destination.gke_master_cluster, destination.fqdn, destination.cloud_sql_instance, destination.redis_instance, destination.redis_cluster, fields to google_network_management_connectivity_test resource (#9591)
• networkmanagement: added round_trip, bypass_firewall_checks fields to google_network_management_connectivity_test resource (#9591)
• networkmanagement: added source.gke_master_cluster, source.cloud_sql_instance, source.cloud_function, source.app_engine_version, source.cloud_run_revision fields to google_network_management_connectivity_test resource (#9591)
• networksecurity: added connected_deployment_group and associations fields to google_network_security_intercept_endpoint_group resource (#9586)
• networksecurity: added locations field to google_network_security_intercept_deployment_group resource (#9578)
• networksecurity: added locations field to google_network_security_intercept_endpoint_group_association resource (#9600)
• redis: added update support for google_redis_cluster node_type (#9554)
• storage: added metadata_options in google_storage_transfer_job (#9567)

BUG FIXES:

• bigqueryanalyticshub: fixed a bug in google_bigquery_analytics_hub_listing_subscription where a subscription using a different project than the dataset would not work (#9596)
• cloudrun: fixed the perma-diffs for unchanged template.spec.containers.env in google_cloud_run_service resource (#9572)
• cloudrunv2: fixed the perma-diffs for unchanged template.containers.env in google_cloud_run_v2_service resource (#9572)
• compute: fixed the issue that user can't use regional disk in google_compute_instance_template (#9569)
• dataflow: fixed a permadiff on template_gcs_path in google_dataflow_job resource (#9564)
• storage: lowered the minimum required items for custom_placement_config.data_locations from 2 to 1, and removed the Terraform-enforced maximum item limit for the field in google_storage_bucket (#9562)

v6.26.0

FEATURES:

• New Data Source: google_project_iam_custom_role (#9551)
• New Data Source: google_project_iam_custom_roles (#9519)
• New Resource: google_eventarc_pipeline (#9508)
• New Resource: google_firebase_app_hosting_backend (#9531)
• New Resource: google_managed_kafka_connect_cluster (#9552)
• New Resource: google_managed_kafka_connector (#9552)

IMPROVEMENTS:

• alloydb: added psc_config field to ``google_alloydb_cluster` resource (#9548)
• bigquery: added table_metadata_view query param to google_bigquery_table (#9530)
• bigquery: added support for continuous query to google_bigquery_job (#9520)
• clouddeploy: added dns_endpoint field to to google_clouddeploy_target resource (#9553)
• compute: added UNRESTRICTED option to the tls_early_data field in the google_compute_target_https_proxy resource (#9527)
• compute: added enable_flow_logs and state fields to google_compute_subnetwork resource (#9541)
• container: added additional value KCP_HPA for logging_config.enable_components field in google_container_cluster resource (#9529)
• dataform: added deletion_policy field to google_dataform_repository resource. Default value is DELETE. Setting deletion_policy to FORCE will delete any child resources of this repository as well. (#9549)
• memorystore: added update support for engine_version field in google_memorystore_instance resource (#9534)
• metastore: added create_time and update_time fields to google_dataproc_metastore_federation resource (#9528)
• metastore: added create_time and update_time fields to google_dataproc_metastore_service resource (#9523)
• networksecurity: added not_operations field to google_network_security_authz_policy resource (#9511)
• networkservices: added ip_version and envoy_headers fields to google_network_services_gateway resource (#9514)
• sql: increased settings.insights_config.query_string_length and settings.insights_config.query_string_length limits for Enterprise Plus edition sql_database_instance resource. (#9539)
• storageinsights: added parquet_options field to google_storage_insights_report_config resource (#9522)
• workflows: added execution_history_level field to google_workflows_workflow resource (#9509)

BUG FIXES:

• accesscontextmanager: fixed panic on empty access_policies in google_access_context_manager_access_policy (#9536)
• compute: adjusted mapped image names that were preventing usage of fedora-coreos in google_compute_image resource (#9513)
• container: re-added DNS_SCOPE_UNSPECIFIED value to the dns_config.cluster_dns_scope field in google_container_cluster resource and suppressed diffs between DNS_SCOPE_UNSPECIFIED in config and empty/null in state (#9547)
• discoveryengine: changed field dataStoreIds to mutable in google_discovery_engine_search_engine (#9506)
• networksecurity: min_tls_version and tls_feature_profile fields updated to use the server assigned default and prevent a permadiff in google_network_security_tls_inspection_policy resource. (#9514)
• oslogin: added a wait after creating google_os_login_ssh_public_key to allow for propagation (#9546)
• spanner: fixed issue with disabling autoscaling in google_spanner_instance (#9542)

v6.25.0

NOTES:

• eventarc: google_eventarc_channel now uses MMv1 engine instead of DCL. (#9488)
• workbench: increased create timeout for google_workbench_instance to 40mins. (#9468)

FEATURES:

• New Data Source: google_compute_region_ssl_policy (#9439)
• New Resource: google_eventarc_google_api_source (#9492)
• New Resource: google_iam_oauth_client_credential (#9491)
• New Resource: google_iam_oauth_client (#9456)
• New Resource: google_network_security_backend_authentication_config (#9481)

IMPROVEMENTS:

• alloydb: added psc_instance_config.psc_interface_configs field to google_alloydb_instance resource (#9469)
• compute: added create_snapshot_before_destroy to google_compute_disk and google_compute_region_disk to enable creating a snapshot before disk deletion (#9442)
• compute: added custom_metrics field to google_compute_backend_service and google_compute_region_backend_service (#9473)
• compute: added ip_collection and ipv6_gce_endpoint fields to google_compute_subnetwork resource (#9490)
• compute: added log_config.optional_mode and log_config.optional_fields fields to google_compute_region_backend_service resource (#9484)
• compute: added rsa_encrypted_key to google_compute_region_disk (#9442)
• compute: added scheduling.termination_time field to google_compute_instance, google_compute_instance_from_machine_image, google_compute_instance_from_template, google_compute_instance_template, and google_compute_region_instance_template resources (#9479)
• compute: added update support for firewall_policy in google_compute_firewall_policy_association resource. It is recommended to only perform this operation in combination with a protective lifecycle tag such as "create_before_destroy" or "prevent_destroy" on your previous firewall_policy resource in order to prevent situations where a target attachment has no associated policy. (#9495)
• compute: made purpose field updatable in google_compute_subnetwork. (#9489)
• container: added "JOBSET" as a supported value for enable_components in google_container_cluster resource (#9453)
• datastream: added support for creating connection profiles for Salesforce in google_datastream_connection_profile (#9482)
• firebasedataconnect: added deletion_policy field to google_firebase_data_connect_service resource (#9496)
• networksecurity: added description field to google_network_security_intercept_deployment, google_network_security_intercept_deployment_group, google_network_security_intercept_endpoint_group resources (#9474)
• networksecurity: added description field to google_network_security_mirroring_deployment, google_network_security_mirroring_deployment_group, google_network_security_mirroring_endpoint_group resources (#9476)
• tpuv2: added spot field to google_tpu_v2_vm resource (#9478)
• workstations: added tags field to google_workstations_workstation_cluster resource (#9441)

BUG FIXES:

• backupdr: added missing SUNDAY option to days_of_week field in google_backup_dr_backup_plan resource (#9446)
• compute: fixed network_interface.internal_ipv6_prefix_length not being set or read in Terraform state in google_compute_instance resource (#9444)
• compute: fixed bug in google_compute_router_nat where max_ports_per_vm couldn't be unset once set. (#9483)
• container: fixed perma-diff in google_container_cluster when cluster_dns_scope is unspecified (#9443)
• networksecurity: added wait time on google_network_security_gateway_security_policy_rule resource when creating and deleting to prevent race conditions (#9448)

v6.24.0

NOTES:

• gemini: removed unsupported value GEMINI_CLOUD_ASSIST for field product in google_gemini_logging_setting_binding resource (#9438)
• gemini: removed unsupported value GEMINI_CODE_ASSIST for field product in google_gemini_data_sharing_with_google_setting_binding resource (Beta) (#9437)
• iam: added member value to the error message when member validation fails for google_project_iam_* (#9406)

DEPRECATIONS:

• datacatalog: deprecated google_data_catalog_entry and google_data_catalog_tag resources. For steps to transition your Data Catalog users, workloads, and content to Dataplex Catalog, see https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog. (#9393)
• notebooks: deprecated non-functional google_notebooks_location resource (#9373)

FEATURES:

• New Data Source: google_memorystore_instance (#9400)
• New Resource: google_apihub_host_project_registration (#9419)
• New Resource: google_compute_instant_snapshot (#9412)
• New Resource: google_eventarc_message_bus (#9423)
• New Resource: google_gemini_data_sharing_with_google_setting_binding (GA) (#9437)
• New Resource: google_gemini_gcp_enablement_setting_binding (GA) (#9407)
• New Resource: google_gemini_gemini_gcp_enablement_setting_binding (#9392)
• New Resource: google_storage_anywhere_cache (#9389)

IMPROVEMENTS:

• compute: added creation_timestamp, next_hop_peering, warnings.code, warnings.message, warnings.data.key, warnings.data.value, next_hop_hub, route_type, as_paths.path_segment_type, as_paths.as_lists and route_status fields to google_compute_route resource (#9386)
• compute: added max_stream_duration field to google_compute_url_map resource (#9387)
• compute: added fields architecture, source_instant_snapshot, source_storage_object, resource_manager_tags to google_compute_disk. (#9412)
• container: added enum value UPGRADE_INFO_EVENT for GKE notification filter in google_container_cluster resource (#9421)
• iam: added AZURE_AD_GROUPS_ID field to google_iam_workforce_pool_provider.extra_attributes_oauth2_client.attributes_type resource (#9433)
• networkconnectivity: added policy_mode field to google_network_connectivity_hub resource (#9409)
• networkservices: added location field to google_network_services_grpc_route resource (#9429)
• storagetransfer: added logging_config field to google_storage_transfer_job resource (#9378)

BUG FIXES:

• bigquery: updated the max_staleness field in google_bigquery_table to be a computed field (#9411)
• chronicle: fixed an error during resource creation with certain run_frequency configurations in google_chronicle_rule_deployment (#9422)
• discoveryengine: fixed bug preventing creation of google_discovery_engine_target_site resources (#9436)
• eventarc: fixed an issue where google_eventarc_trigger creation failed due to the region could not be parsed from the trigger's name (#9383)
• gemini: fixed permadiff on product field in google_gemini_data_sharing_with_google_setting_binding resource (Beta) (#9437)
• publicca: encoded b64_mac_key in base64url, instead of base64 in google_public_ca_external_account_key (#9424)
• storage: fixed a 412 error returned on some google_storage_bucket_iam_policy deletions (#9434)

v6.23.0

NOTES:

• The google_sql_user resource now supports password_wo write-only arguments
• The google_bigquery_data_transfer_config resource now supports secret_access_key_wo write-only arguments
• The google_secret_version resource now supports secret_data_wo write-only arguments

IMPROVEMENTS:

• sql: added password_wo and password_wo_version fields to google_sql_user resource (#21616)
• bigquerydatatransfer: added secret_access_key_wo and secret_access_key_wo_version fields to google_bigquery_data_transfer_config resource (#21617)
• secretmanager: added secret_data_wo and secret_data_wo_version fields to google_secret_version resource (#21618)

v6.22.0

NOTES:

• provider: The Terraform Provider for Google Cloud's regular release date will move from Monday to Tuesday in early March. The 2025/03/10 release will be made on 2025/03/11.

DEPRECATIONS:

• datacatalog: deprecated google_data_catalog_tag_template. Use google_dataplex_aspect_type instead. For steps to transition your Data Catalog users, workloads, and content to Dataplex Catalog, see https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog. (#9347)
• datacatalog: deperecated google_data_catalog_entry_group. Use google_dataplex_entry_group instead. For steps to transition your Data Catalog users, workloads, and content to Dataplex Catalog, see https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog. (#9349)

FEATURES:

• New Data Source: google_alloydb_cluster (#9361)
• New Data Source: google_project_ancestry (#9326)
• New Resource: google_gemini_data_sharing_with_google_setting_binding (#9356)
• New Resource: google_spanner_instance_partition (#9354)

IMPROVEMENTS:

• compute: added import_subnet_routes_with_public_ip and export_subnet_routes_with_public_ip fields to google_compute_network_peering_routes_config resource (#9320)
• developerconnect: added bitbucket_cloud_config and bitbucket_data_center_config fields to google_developer_connect_connection resource (ga) (#9338)
• iam: added extra_attributes_oauth2_client field to google_iam_workforce_pool_provider resource (#9336)
• redis: added kms_key field to google_redis_cluster resource (#9334)
• tpuv2: added network_config field to google_tpu_v2_queued_resource resource (#9332)

BUG FIXES:

• apigee: fixed error when deleting google_apigee_organization (#9352)
• bigtable: fixed a bug where sometimes updating an instance's cluster list could result in an error if there was an existing cluster with autoscaling enabled (#9368)
• chronicle: fixed bug setting enabled on creation in google_chronicle_rule_deployment (#9343)