DEPRECATIONS:
- storage: the
admit-on-second-missvalue forgoogle_storage_anywhere_cache.admission_policyis deprecated and will be removed in a future major release. The backend will ignore this attribute and treat it asadmit-on-first-miss. (#12632)
NOTES:
- compute: migrated
google_compute_instancecode related to advanced machine features to use direct HTTP rather than a client library (#12610)
FEATURES:
- New Data Source:
google_data_catalog_taxonomy(#12655) - New Data Source:
google_oracle_database_exascale_db_storage_vault(#12664) - New List Resource: 'google_project' (#12602)
- New List Resource:
google_compute_instant_snapshot(#12661) - New List Resource:
google_compute_region_instant_snapshot(#12661) - New List Resource:
google_compute_region_target_http_proxy(#12661) - New List Resource:
google_compute_region_target_tcp_proxy(#12661) - New List Resource:
google_compute_region_url_map(#12661) - New List Resource:
google_compute_rollout_plan(#12661) - New List Resource:
google_compute_target_grpc_proxy(#12661) - New List Resource:
google_compute_target_http_proxy(#12661) - New List Resource:
google_compute_target_ssl_proxy(#12661) - New List Resource:
google_compute_target_tcp_proxy(#12661) - New List Resource:
google_dns_managed_zone(#12662) - New List Resource:
google_oracle_database_exascale_db_storage_vaults(#12664) - New Resource:
google_bigquery_analytics_hub_query_template(#12669) - New Resource:
google_chronicle_environment_group(#12627) - New Resource:
google_chronicle_soar_domain(#12635) - New Resource:
google_iap_agent_registry_agent_iam_binding(#12651) - New Resource:
google_iap_agent_registry_agent_iam_member(#12651) - New Resource:
google_iap_agent_registry_agent_iam_policy(#12651) - New Resource:
google_iap_agent_registry_endpoint_iam_binding(#12651) - New Resource:
google_iap_agent_registry_endpoint_iam_member(#12651) - New Resource:
google_iap_agent_registry_endpoint_iam_policy(#12651) - New Resource:
google_iap_agent_registry_mcp_server_iam_binding(#12651) - New Resource:
google_iap_agent_registry_mcp_server_iam_member(#12651) - New Resource:
google_iap_agent_registry_mcp_server_iam_policy(#12651) - New Resource:
google_tags_tag_binding_collection(#12619) - New Resource:
google_vector_search_index(#12656) - New Resource:
google_vertex_ai_semantic_governance_policy_engine(#12624) - New Resource:
google_chronicle_data_export(#12657)
IMPROVEMENTS:
- agentregistry: added
namefield togoogle_agent_registry_bindingresource (#12629) - agentregistry: added
namefield togoogle_agent_registry_serviceresource (#12629) - appengine: added
app_engine_bundled_servicesfield togoogle_app_engine_standard_app_versionresource (#12634) - biglakeiceberg: add support for
CATALOG_TYPE_FEDERATEDwithfederated_catalog_optionstogoogle_biglake_iceberg_catalog(#12659) - compute: added
target_typeandtarget_forwarding_rulestogoogle_compute_region_network_firewall_policy_with_rulesresource (#12607) - compute: added
workload_identity_configfields toresource_compute_instanceandresource_compute_instance_templateresources (#12670) - container: added
ANY_RESERVATION_THEN_FAILoption toconsume_reservation_typefield ingoogle_container_clusterandgoogle_container_node_poolresources (#12606) - container: added
recurring_maintenance_windowfield togoogle_container_clusterresource (#12647) - container: added
custom_node_initconfiguration block tonode_config(supporting Cloud Storage and Secret Manager) for bothgoogle_container_clusterandgoogle_container_node_poolresources. (#12666) - container: added
maintenance_policyfield togoogle_container_node_poolresource (#12638) - dataplex: added
catalog_publishing_enabledfield togoogle_dataplex_datascanresource (#12652) - dlp: added
inspect_config.min_likelihood_per_info_typetogoogle_data_loss_prevention_inspect_template(#12654) - firestore: added
skip_waitfield togoogle_firestore_fieldresource, skipping the wait for index creation (#12642) - oracledatabase: added support for configuring Exascale-based VM clusters on top of dedicated storage vaults via the
exascale_db_storage_vaultparameter andstorage_management_typeto determine if VM Cluster is ASM or EXASCALE ingoogle_oracle_database_cloud_vm_cluster(#12626) - oracledatabase: added
exadata_infrastructurefield togoogle_oracle_database_exascale_db_storage_vaultresource (#12616) - oracledatabase: added
exascale_db_storage_vaultandstorage_management_typefields togoogle_oracle_database_cloud_vm_clustersdata source (#12664) - sql: added
enforce_new_sql_network_architecturefield togoogle_sql_database_instanceresource (#12653) - sql: added
psc_auto_connection_policy_enabledfield and output-onlyservice_connection_policyandservice_connection_policy_creation_resultfields togoogle_sql_database_instanceresource (#12645) - storagetransfer: added
private_network_serviceto resourcegoogle_storage_transfer_job(#12617) - vertex_ai: added
customization_configsandstructured_memory_configsfields togoogle_vertex_ai_reasoning_engineresource (#12618) - vertexai: added
traffic_config,url,agent_server_mode,agent_gateway_config,keep_alive_probe,dedicated_ingress_endpoint_enabled,agent_config_source,agent_card,example_store,build_spec,traffic_config, andexample_store_configfields togoogle_vertex_ai_reasoning_engine(#12671)
BUG FIXES:
- bigtable: fixed a bug where
row_affinityupdates did not persist ongoogle_bigtable_app_profile(#12636) - bug: fixed labels diff in
google_project(#12649) - chronicle: added retries for "409: sync mutate calls cannot be queued" error for
google_cloud_scheduler_job(#12637) - cloudscheudler: added retries for the Cloud Scheduler "409: sync mutate calls cannot be queued" error on Scheduler's Job resource mutations. (#12613)
- compute: fixed an issue where
preview = falseupdates forgoogle_compute_organization_security_policy_rulewere omitted from API requests. (#12643) - compute: fixed bug where it wasn't possible to disable
enable_proxy_protocolongoogle_compute_service_attachmentresource (#12668) - datastream: fixed a bug in update functionality in
google_datastream_connection_profilemongodb_profile.additional_options(#12660) - eventarc: fixed a type mismatch when an
google_eventarc_triggerresource returns non-emptyconditions. (#12646) - filestore: aligned
google_filestore_instanceresource timeouts with the Filestore service instance operations TTLs (#12630) - gemini: fixed truncated timeouts in
google_gemini_code_tools_setting,google_gemini_data_sharing_with_google_setting_binding,google_gemini_gemini_gcp_enablement_setting_binding, andgoogle_gemini_release_channel_setting_binding(#12640) - hypercomputecluster: fixed 20-minute timeout limit during
google_hypercomputecluster_clusterresource creation (#12621) - logging: fixed an issue where errors on update would not be propagated in
google_logging_project_bucket_config(#12603) - observability: fixed unintentionally long timeouts in
google_observability_folder_settings,google_observability_organization_settings, andgoogle_observability_project_settings(#12640) - oracledatabase: fixed early client-side timeouts and aligned default schema timeouts with backend async polling limits on
google_oracle_database_exadb_vm_cluster,google_oracle_database_odb_network,google_oracle_database_odb_subnet,google_oracle_database_goldengate_connection,google_oracle_database_goldengate_deployment, andgoogle_oracle_database_goldengate_connection_assignment. (#12648) - oracledatabase: fixed truncated timeouts in
google_oracle_database_exadb_vm_cluster,google_oracle_database_goldengate_connection, andgoogle_oracle_database_odb_subnet(#12640) - privilegedaccessmanager: fixed a permadiff on
google_privileged_access_manager_entitlementfor entitlements created without an approval workflow (#12644) - provider: fixed validation of
external_credentials.identity_tokento reject malformed JWTs containing empty segments (#12663)