DEPRECATIONS:
- dataproc: deprecated
attached_disk_config.disk_typeongoogle_dataproc_clusterandgoogle_dataproc_workflow_template. Useattached_disk_config.typeinstead. (#13321)
FEATURES:
- New Data Source:
google_gemini_data_analytics_data_agent_iam_policy(#13280) - New Resource:
google_backup_dr_auto_protection_policy(#13305) - New Resource:
google_compute_organization_snapshot_recycle_bin_policy(#13285) - New Resource:
google_compute_snapshot_recycle_bin_policy(#13285) - New Resource:
google_gemini_data_analytics_data_agent(#13280) - New Resource:
google_gemini_data_analytics_data_agent_iam_binding(#13280) - New Resource:
google_gemini_data_analytics_data_agent_iam_member(#13280) - New Resource:
google_gemini_data_analytics_data_agent_iam_policy(#13280) - New Resource:
google_vertex_ai_online_evaluator(#13286)
IMPROVEMENTS:
- bigqueryanalyticshub: added
encryption_configurationfield togoogle_bigquery_analytics_hub_query_templateresource (#13320) - ces: added
model_settings.thinking_levelfield togoogle_ces_agentresource (#13283) - cloudrunv2: added
functional_typeandtemplate.template.workload_identity_configfields togoogle_cloud_run_v2_jobresource (#13313) - cloudrunv2: added
functional_typefield togoogle_cloud_run_v2_serviceresource (#13313) - cloudsecuritycompliance: added nested
parameter_specfields (oneof_valueandsub_parameters) togoogle_cloud_security_compliance_cloud_control(#13288) - compute: added
default_route_action.dynamic_compression_policy,path_matcher.default_route_action.dynamic_compression_policy,path_matcher.path_rule.route_action.dynamic_compression_policy, andpath_matcher.route_rules.route_action.dynamic_compression_policyfields togoogle_compute_url_mapresource (#13293) - compute: added
forward_proxytogoogle_compute_backend_service(#13299) - compute: added
image_optimization_policyfield togoogle_compute_url_mapresource (#13301) - compute: added
network_interface.service_class_idfield togoogle_compute_instance,google_compute_instance_template, andgoogle_compute_region_instance_templateresources (#13296) - compute: made
disk_encryption_key.kms_key_nameupdatable in place ingoogle_compute_region_disk(#13303) - compute: made
snapshot_encryption_key.kms_key_self_linkupdatable in place ingoogle_compute_snapshot(#13291) - container: added
best_effort_provisioningfield togoogle_container_node_poolresource (#13276) - container: added
node_pool.best_effort_provisioningfield togoogle_container_clusterresource (#13276) - dataproc: added
attached_disk_config.typefield togoogle_dataproc_clusterresource (#13321) - dataproc: added
attached_disk_config.typefield togoogle_dataproc_workflow_templateresource (#13321) - dialogflow: added
free_form_context,agent_coaching_context, andtoolsfields togoogle_dialogflow_generator(#13282) - looker: added support for Regional Endpoint Policies (REP). See the provider reference for more details on configuration. (#13287)
- modelarmor: added
modalitiestotemplate_metadataingoogle_model_armor_template(#13279) - networkconnectivity: added
export_psc_configfield togoogle_network_connectivity_hubresource (#13312) - networksecurity: added
endpoint_settings.content_cloud_regionandendpoint_settings.http_partial_response_blockedfield togoogle_network_security_firewall_endpointresource (#13294) - networksecurity: added
wildfire_analysis_profilefield to thegoogle_network_security_security_profile_groupresource (#13284) - networksecurity: added
wildfire_settingsfield togoogle_network_security_firewall_endpointresource (#13294) - networksecurity: added missing matchers
ignore_case,prefix,suffixandcontainsonnetwork_rulesforgoogle_network_security_authz_policyresource (#13316) - networksecurity: added nested field
to.not_operationsonnetwork_rulesforgoogle_network_security_authz_policyresource (#13316) - networksecurity: added nested fields
from.sources.resourcesandfrom.not_sources.resourcesonnetwork_rulesforgoogle_network_security_authz_policyresource (#13316) - networkservices: added
agent_computeanddeployment_modelfields togoogle_network_services_agent_connectivity_templateresource (#13292) - networkservices: removed client-side validation of
flex_shielding.flex_shielding_regionsingoogle_network_services_edge_cache_origin, so new regions such asEUROPE_WEST3andUS_EAST5are now accepted (#13300) - oracledatabase: added
properties.vm_file_system_storage_typeandproperties.vm_backup_storage_typefields togoogle_oracle_database_cloud_vm_clusterresource (#13281) - sql: added
blue_green_deploymentfield togoogle_sql_database_instanceresource (#13306) - workbench: added
disable-bigquery,enable-opencode,enable-opencode-web, andenable-antigravityto the metadata keys that trigger a stop/restart of agoogle_workbench_instanceon update, since they only take effect at startup (#13315)
BUG FIXES:
- cloudsecuritycompliance: fixed
ExactlyOneOfvalidation betweenorganizationandparentongoogle_cloud_security_compliance_cloud_control(#13297) - cloudsecuritycompliance: fixed
ExactlyOneOfvalidation betweenorganizationandparentongoogle_cloud_security_compliance_framework(#13297) - cloudsecuritycompliance: fixed
ExactlyOneOfvalidation betweenorganizationandparentongoogle_cloud_security_compliance_framework_deployment(#13297) - compute: fixed
google_compute_subnetworkto recreate the subnetwork when changingipv6_access_type,ip_collection, orexternal_ipv6_prefixunlessstack_typeis being upgraded fromIPV4_ONLYtoIPV4_IPV6, as the API does not allow in-place updates for these fields in other cases (#13278) - compute: fixed a permanent diff in
google_compute_backend_serviceandgoogle_compute_region_backend_servicewhencdn_policy.client_ttlorcdn_policy.default_ttlis set to 0 (#13307) - compute: fixed an issue where
google_compute_forwarding_rulewas not recreated when its referencedgoogle_compute_addresswas recreated (#13317) - compute: reduced likelihood of name collisions when using a long
name_prefixongoogle_compute_instance_template,google_compute_region_instance_template,google_compute_region_ssl_certificate, andgoogle_compute_ssl_certificate(#13311) - container: fixed a bug where updating
maintenance_policyongoogle_container_node_poolwas not applied (#13308) - container: reduced likelihood of name collisions when using a long
name_prefixongoogle_container_node_poolandgoogle_container_cluster.node_pool(#13311) - dataproc: fixed
confidential_instance_config.enable_confidential_computeandresource_manager_tagsstate drift ongoogle_dataproc_cluster(#13321) - discoveryengine: fixed
json_paramsupdates not taking effect ongoogle_discovery_engine_data_connector(#13302) - filestore: fixed
ExactlyOneOfvalidation betweenlocationandzoneongoogle_filestore_instance(#13297) - sql: fixed
Invalid maintenance window. Day of week is unspecified.error when creating or updatinggoogle_sql_database_instancewith asettings.maintenance_windowthat setsupdate_trackorhourwithoutday(#13314) - sql: fixed permadiff on
settings.deny_maintenance_period.start_dateandsettings.deny_maintenance_period.end_dateingoogle_sql_database_instancewhen using zero-padded or recurringMM-DDdates (#13298) - workflows: reduced likelihood of name collisions when using a long
name_prefixongoogle_workflows_workflow(#13311)