hashicorp/terraform-provider-google v7.40.0

on GitHub

DEPRECATIONS:

• storage: the admit-on-second-miss value for google_storage_anywhere_cache.admission_policy is deprecated and will be removed in a future major release. The backend will ignore this attribute and treat it as admit-on-first-miss. (#28210)

NOTES:

• compute: migrated google_compute_instance code related to advanced machine features to use direct HTTP rather than a client library (#28160)

FEATURES:

• New Data Source: google_data_catalog_taxonomy (#28237)
• New Data Source: google_oracle_database_exascale_db_storage_vault (#28260)
• New List Resource: 'google_project' (#28041)
• New List Resource: google_compute_instant_snapshot (#28256)
• New List Resource: google_compute_region_instant_snapshot (#28256)
• New List Resource: google_compute_region_target_http_proxy (#28256)
• New List Resource: google_compute_region_target_tcp_proxy (#28256)
• New List Resource: google_compute_region_url_map (#28256)
• New List Resource: google_compute_rollout_plan (#28256)
• New List Resource: google_compute_target_grpc_proxy (#28256)
• New List Resource: google_compute_target_http_proxy (#28256)
• New List Resource: google_compute_target_ssl_proxy (#28256)
• New List Resource: google_compute_target_tcp_proxy (#28256)
• New List Resource: google_dns_managed_zone (#28257)
• New List Resource: google_oracle_database_exascale_db_storage_vaults (#28260)
• New Resource: google_chronicle_findings_refinement_deployment (#28240)
• New Resource: google_chronicle_soar_domain (#28214)
• New Resource: google_iap_agent_registry_agent_iam_binding (#28231)
• New Resource: google_iap_agent_registry_agent_iam_member (#28231)
• New Resource: google_iap_agent_registry_agent_iam_policy (#28231)
• New Resource: google_iap_agent_registry_endpoint_iam_binding (#28231)
• New Resource: google_iap_agent_registry_endpoint_iam_member (#28231)
• New Resource: google_iap_agent_registry_endpoint_iam_policy (#28231)
• New Resource: google_iap_agent_registry_mcp_server_iam_binding (#28231)
• New Resource: google_iap_agent_registry_mcp_server_iam_member (#28231)
• New Resource: google_iap_agent_registry_mcp_server_iam_policy (#28231)
• New Resource: google_tags_tag_binding_collection (#28180)
• New Resource: google_vector_search_index (#28238)
• New Resource: google_chronicle_environment (#28206)
• New Resource: google_chronicle_data_export (#28239)

IMPROVEMENTS:

• agentregistry: added name field to google_agent_registry_binding resource (#28207)
• agentregistry: added name field to google_agent_registry_service resource (#28207)
• appengine: added app_engine_bundled_services field to google_app_engine_standard_app_version resource (#28213)
• biglakeiceberg: add support for CATALOG_TYPE_FEDERATED with federated_catalog_options to google_biglake_iceberg_catalog (#28241)
• compute: added target_type and target_forwarding_rules to google_compute_region_network_firewall_policy_with_rules resource (#28061)
• compute: added workload_identity_config fields to google_compute_instance and google_compute_instance_template resources (#28266)
• compute: added instance_lifecycle_policy.on_repair.allow_changing_zone field to google_compute_instance_group_manager and google_compute_instance_region_group_manager. (#28174)
• container: added ANY_RESERVATION_THEN_FAIL option to consume_reservation_type field in google_container_cluster and google_container_node_pool resources (#28060)
• container: added custom_node_init configuration block to node_config (supporting Cloud Storage and Secret Manager) for both google_container_cluster and google_container_node_pool resources. (#28262)
• container: added maintenance_policy field to google_container_node_pool resource (#28217)
• container: added recurring_maintenance_window field to google_container_cluster resource (#28227)
• dataplex: added catalog_publishing_enabled field to google_dataplex_datascan resource (#28232)
• dlp: added inspect_config.min_likelihood_per_info_type to google_data_loss_prevention_inspect_template (#28236)
• firestore: added skip_wait field to google_firestore_field resource, skipping the wait for index creation (#28222)
• oracledatabase: added support for configuring Exascale-based VM clusters on top of dedicated storage vaults via the exascale_db_storage_vault parameter and storage_management_type to determine if VM Cluster is ASM or EXASCALE in google_oracle_database_cloud_vm_cluster (#28197)
• oracledatabase: added exadata_infrastructure field to google_oracle_database_exascale_db_storage_vault resource (#28177)
• oracledatabase: added exascale_db_storage_vault and storage_management_type fields to google_oracle_database_cloud_vm_clusters data source (#28260)
• sql: added enforce_new_sql_network_architecture field to google_sql_database_instance resource (#28233)
• sql: added psc_auto_connection_policy_enabled field and output-only service_connection_policy and service_connection_policy_creation_result fields to google_sql_database_instance resource (#28225)
• storagetransfer: added private_network_service to resource google_storage_transfer_job (#28178)

BUG FIXES:

• bigtable: fixed a bug where row_affinity updates did not persist on google_bigtable_app_profile (#28215)
• bug: fixed labels diff in google_project (#28229)
• chronicle: suppressed a permadiff on google_chronicle_rule.text caused by the Chronicle API appending a trailing newline to every stored rule body (#28216)
• cloudscheudler: added retries for "409: sync mutate calls cannot be queued" error for google_cloud_scheduler_job (#28164)
• compute: fixed an issue where preview = false updates for google_compute_organization_security_policy_rule were omitted from API requests. (#28223)
• compute: fixed bug where it wasn't possible to disable enable_proxy_protocol on google_compute_service_attachment resource (#28264)
• datastream: fixed a bug in update functionality in google_datastream_connection_profile mongodb_profile.additional_options (#28254)
• eventarc: fixed a type mismatch when an google_eventarc_trigger resource returns non-empty conditions. (#28226)
• filestore: aligned google_filestore_instance resource timeouts with the Filestore service instance operations TTLs (#28208)
• gemini: fixed truncated timeouts in google_gemini_code_tools_setting, google_gemini_data_sharing_with_google_setting_binding, google_gemini_gemini_gcp_enablement_setting_binding, and google_gemini_release_channel_setting_binding (#28220)
• hypercomputecluster: fixed 20-minute timeout limit during google_hypercomputecluster_cluster resource creation (#28182)
• logging: fixed an issue where errors on update would not be propagated in google_logging_project_bucket_config (#28055)
• observability: fixed unintentionally long timeouts in google_observability_folder_settings, google_observability_organization_settings, and google_observability_project_settings (#28220)
• oracledatabase: fixed early client-side timeouts and aligned default schema timeouts with backend async polling limits on google_oracle_database_exadb_vm_cluster, google_oracle_database_odb_network, google_oracle_database_odb_subnet, google_oracle_database_goldengate_connection, google_oracle_database_goldengate_deployment, and google_oracle_database_goldengate_connection_assignment. (#28228)
• oracledatabase: fixed truncated timeouts in google_oracle_database_exadb_vm_cluster, google_oracle_database_goldengate_connection, and google_oracle_database_odb_subnet (#28220)
• privilegedaccessmanager: fixed a permadiff on google_privileged_access_manager_entitlement for entitlements created without an approval workflow (#28224)
• provider: fixed validation of external_credentials.identity_token to reject malformed JWTs containing empty segments (#28258)