Terraform Google Provider 7.0.0 Upgrade Guide
BREAKING RESOURCE REMOVALS:
- beyondcorp: removed
google_beyondcorp_application
, its associated IAM resourcesgoogle_beyondcorp_application_iam_binding
,google_beyondcorp_application_iam_member
, andgoogle_beyondcorp_application_iam_policy
, and thegoogle_beyondcorp_application_iam_policy
datasource. Usegoogle_beyondcorp_security_gateway_application
instead. #10536 - notebooks: removed
google_notebooks_location
#10350 - tpu: removed
google_tpu_node
. Usegoogle_tpu_v2_vm
instead. #10516
BREAKING FIELD REMOVALS:
- cloudrunv2: removed
template.containers.depends_on
withinresource google_cloud_run_v2_worker_pool
#10444 - colab: removed
post_startup_script_config
field from fromgoogle_colab_runtime_template
resource #10555 - compute: removed field
enable_flow_logs
fromgoogle_compute_subnetwork
#10398 - gkehub: removed
configmanagement.binauthz
field ingoogle_gke_hub_feature_membership
#10585 - gkehub: removed
description
field ingoogle_gke_hub_membership
#10344 - memorystore: removed
allow_fewer_zones_deployment
field fromgoogle_memorystore_instance
resource because it isn't user-configurable #10588 - redis: removed
allow_fewer_zones_deployment
field fromgoogle_redis_cluster
resource because it isn't user-configurable #10588 - resourcemanager: removed non-functional
project
field fromgoogle_service_account_key
datasource #10537
BREAKING INCREASED VALIDATION:
- cloudfunctions2: made
event_type
a required field forevent_trigger
ingoogle_cloudfunctions2_function
#10501 - networkservices: made
load_balancing_scheme
required ingoogle_network_services_lb_traffic_extension
#10419 - sql: made
password_wo_version
required whenpassword_wo
is set ingoogle_sql_user
#10591 - storage: added validation requiring the
topic
field to be in the form "projects//topics/" ingoogle_storage_notification
#10602 - storagetransfer: added path validation for GCS path source and sink in
google_storage_transfer_job
#10297 - vertexai: made
metadata
, andmetadata.config
required ingoogle_vertex_ai_index
. Resource creation would fail without these attributes already, so no change is necessary to existing configurations. #10520
OTHER BREAKING CHANGES:
- provider: fixed many import functions throughout the provider that erroneously matched a subset of the provided input, leading to unclear error messages when using
terraform input
with invalid resource IDs. #10545 - alloydb: added
deletion_protection
field with a default value oftrue
togoogle_alloydb_cluster
resource #10553 - apigee: changed
certs_info
field ingoogle_apigee_keystores_aliases_key_cert_file
to be output-only #10602 - apigee: migrated
google_apigee_keystores_aliases_key_cert_file
to the plugin framework #10602 - artifactregistry: removed the default values for
public_repository
fields ingoogle_artifact_registry_repository
. If your state is reliant on them, they will now need to be manually included in your configuration. #10519 - bigquery: removed the default value of
view.use_legacy_sql
ingoogle_bigquery_table
#10578 - bigtable: renamed instance to
instance_name
for bigtable_table_iam objects #10248 - billing: made
budget_filter.credit types
andbudget_filter.subaccounts
no longer optional+computed, only optional, ingoogle_billing_budget
resource #10587 - cloudfunctions2: changed
service_config.service
field ingoogle_cloudfunctions2_function
resource to be output-only #10432 - compute:
subnetworks
andinstances
fields ingoogle_compute_packet_mirroring
have been converted from arrays to sets #10550 - compute:
advertised_ip_ranges
field group ingoogle_compute_router
has been converted from a list to a set #10557 - compute:
disk.type
,disk.mode
anddisk.interface
no longer use provider configured default values and instead will be set by the API ingoogle_compute_instance_template
andgoogle_compute_region_instance_template
resources #10569 - gkehub: updated beta api endpoint from v1beta1 to v1beta #10344
- resourcemanager: changed
disable_on_destroy
default value tofalse
ingoogle_project_service
#10508 - securesourcemanager: changed
deletion_policy
default value fromDELETE
toPREVENT
#10515 - storage: changed
retention_period
tostring
data type in resourcegoogle_storage_bucket
#10311 - storage: migrated
google_storage_notification
to the plugin framework #10602
FEATURES:
- New Data Source:
google_artifact_registry_npm_package
(#10582) - New Data Source:
google_certificate_manager_dns_authorization
(#10544) - New Resource:
google_iap_web_region_forwarding_rule_service_iam_binding
(#10561) - New Resource:
google_iap_web_region_forwarding_rule_service_iam_member
(#10561) - New Resource:
google_iap_web_region_forwarding_rule_service_iam_policy
(#10561) - New Resource:
google_saas_runtime_saas
(#10556)
IMPROVEMENTS:
- bigquery: added support for "connection_properties" for bigquery to
google_bigquery_job
(beta) (#10554) - cloudbuild: added
developer_connect_event_config
field togoogle_cloudbuild_trigger
resource (#10563) - cloudtasks: added
desired_state
field togoogle_cloud_tasks_queue
resource (#10567) - cloudrunv2: added
max_instance_count
field togoogle_cloud_run_v2_service
resource. (#10558) - compute: added
params.resourceManagerTags
field to thegoogle_compute_backend_service
(#10575) - compute: added
params.resource_manager_tags
field togoogle_compute_backend_bucket
(#10581) - compute: added
short_name
field togoogle_compute_organization_security_policy
resource (#10572) - container: added
cluster_autoscaling.default_compute_class_enabled
field togoogle_container_cluster
resource (#10552) - dialogflowcx: added
enableMultiLanguageTraining
,locked
,answerFeedbackSettings
,personalizationSettings
,clientCertificateSettings
,startPlaybook
,satisfiesPzs
, andsatisfiesPzi
togoogle_dialogflow_cx_agent
resource. (#10543) - lustre: increased
google_lustre_instance
resource create timeout to 120m from 20m (#10570) - oracledatabase: enabled default_from_api flag for ODB Network related fields in
google_oracle_database_cloud_vm_cluster
resource (#10564) - sql: added feature to restore
google_sql_database_instance
usingbackupdr_backup
(#10579) - ssm: made
ca_pool
argument optional for private instances that use Google-managed trusted certificates.to
secure_source_manager` resource (#10559)
BUG FIXES:
- container: fixed issue where a failed creation on
google_container_node_pool
would result in an unrecoverable tainted state (#10586) - gkeonprem: set
default_from_api
in image field ingoogle_vmware_node_pool
(#10551) - workbench: made
install-monitoring-agent
metadata key settable forgoogle_workbench_instance
(#10589)