hashicorp/terraform-provider-google v8.11.0

on GitHub

DEPRECATIONS:

• vertexai: deprecated optimized on google_vertex_ai_feature_online_store. Use bigtable for online serving instead. (#13700)

FEATURES:

• New Data Source: google_redis_cluster_token_auth_user (#13748)
• New Resource: google_backup_dr_auto_protection_policy_binding (beta) (#13669)
• New Resource: google_data_lineage_open_lineage_job (#13722)
• New Resource: google_dialogflow_companion_agent (#13699)
• New Resource: google_redis_cluster_token_auth_user (#13748)
• New Resource: google_vertex_ai_evaluation_item (#13670)

IMPROVEMENTS:

• agenticapplications: added mcp_data_sources.session_id_header and mcp_data_sources.task_id_header fields to google_agentic_applications_analyst_agent_persona resource (#13703)
• apigee: added NO_RETENTION value to retention field on google_apigee_organization resource (#13667)
• apigee: added labels field to google_apigee_api resource (#13716)
• bigquery: added external_runtime_options.volume_mounts field to google_bigquery_routine resource (beta) (#13764)
• ces: added modality and model_settings fields to google_ces_deployment resource (#13725)
• cloudbuild: added build.options.worker_release field to google_cloudbuild_trigger resource (#13750)
• compute: added ASN option to enforce_on_key and enforce_on_key_configs.enforce_on_key_type fields in google_compute_security_policy, google_compute_security_policy_rule, google_compute_region_security_policy, and google_compute_region_security_policy_rule resources (#13694)
• gemini: added has_custom_instructions field to google_gemini_gemini_gcp_enablement_setting resource (#13756)
• integrationconnectors: added eventing_config.allowed_event_types, eventing_config.global_event_filter, eventing_config.dead_letter_config, and eventing_config.enrichment_config fields to google_integration_connectors_connection resource (#13696)
• integrations: added decrypted_credential.oauth2_authorization_code.apply_reauth_policy, decrypted_credential.oauth2_authorization_code.request_type, decrypted_credential.oauth2_authorization_code.auth_params, and decrypted_credential.oauth2_authorization_code.token_params fields to google_integrations_auth_config resource (#13695)
• memorystore: added zone_distribution_config.zones and zone_distribution_config.active_zones fields to google_memorystore_instance resource (#13731)
• netapp: added destination_volume_parameters.tiering_policy.hot_tier_bypass_mode_enabled field to google_netapp_volume_replication resource (#13698)
• networkservices: added observability_mode field to google_network_services_lb_traffic_extension resource (#13668)
• provider: improved refresh speed of *_iam_member, *_iam_binding, *_iam_audit_config and *_iam_policy resources and *_iam_policy data sources that share a parent, which are no longer read one at a time (#13757)
• redis: added zone_distribution_config.zones and zone_distribution_config.active_zones fields to google_redis_cluster resource (#13731)
• resourcemanagerv3: added boundaries field to google_resource_manager_capability_config resource (#13763)
• storage: added rapid_cache_config field to google_storage_managed_folder resource (#13755)
• storageinsights: added labels field to google_storage_insights_report_config resource (#13697)
• vertexai: added spec.context_spec.memory_bank_config.customization_configs.generate_memories_examples.conversation_source.events.content.parts.speech_metadata field to google_vertex_ai_reasoning_engine resource (#13701)
• workstations: added host.gce_instance.reservation_affinity and host.gce_instance.boost_configs.reservation_affinity fields to google_workstations_workstation_config resource (beta) (#13685)

BUG FIXES:

• accesscontextmanager: fixed Resource Identity import for google_access_context_manager_access_level, google_access_context_manager_access_levels, google_access_context_manager_service_perimeter, google_access_context_manager_service_perimeters, google_access_context_manager_service_perimeter_resource, google_access_context_manager_service_perimeter_ingress_policy, and google_access_context_manager_service_perimeter_egress_policy (#13684)
• apigateway: fixed default provider region not being populated in state and Resource Identity for google_api_gateway_gateway when region is omitted from configuration (#13708)
• apigee: fixed Resource Identity import for google_apigee_addons_config, google_apigee_endpoint_attachment, google_apigee_env_keystore, google_apigee_env_references, google_apigee_envgroup, google_apigee_envgroup_attachment, google_apigee_environment, google_apigee_instance, google_apigee_instance_attachment, google_apigee_keystores_aliases_key_cert_file, google_apigee_keystores_aliases_self_signed_cert, google_apigee_nat_address, google_apigee_organization, google_apigee_sync_authorization, and google_apigee_target_server (#13718)
• bigqueryreservation: fixed server-generated capacity_commitment_id not being populated in state and Resource Identity for google_bigquery_capacity_commitment when capacity_commitment_id is omitted from configuration (#13704)
• ces: fixed Resource Identity import for google_ces_app (#13692)
• cloudasset: fixed Resource Identity import for google_cloud_asset_folder_feed, google_cloud_asset_organization_feed, and google_cloud_asset_project_feed (#13691)
• cloudidentity: fixed Resource Identity import for google_cloud_identity_policy (#13681)
• cloudsecuritycompliance: fixed organization not being populated in state and Resource Identity during import for google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment (#13705)
• colab: fixed bad diffs for euc_config.euc_disabled and shielded_vm_config.enable_secure_boot when set to false on google_colab_runtime_template (#13739)
• compute: fixed default provider region not being populated in state and Resource Identity for google_compute_region_network_policy, google_compute_region_network_firewall_policy, and google_compute_region_network_firewall_policy_with_rules when region is omitted from configuration (#13678)
• dataform: fixed default provider region not being populated in state and Resource Identity for google_dataform_repository when region is omitted from configuration (#13706)
• discoveryengine: fixed google_discovery_engine_data_store silently ignoring changes to fields nested in document_processing_config. These changes now force replacement of the resource. (#13749)
• discoveryengine: fixed a permadiff on tag in google_discovery_engine_data_connector when unset in configuration (#13727)
• discoveryengine: fixed bad diffs for ui_settings.search_addon_spec boolean fields when set to false on google_discovery_engine_widget_config (#13739)
• discoveryengine: fixed inability to change value of disable_analytics on google_discovery_engine_search_engine. Changing this field will now recreate the search engine. (#13679)
• discoveryengine: fixed server-generated target_site_id not being populated in state and Resource Identity for google_discovery_engine_target_site (#13690)
• discoveryengine: sort data_store_ids to avoid drift in google_discovery_engine_chat_engine and google_discovery_engine_search_engine (#13679)
• dlp: fixed Resource Identity import for google_data_loss_prevention_deidentify_template, google_data_loss_prevention_discovery_config, google_data_loss_prevention_inspect_template, google_data_loss_prevention_job_trigger, and google_data_loss_prevention_stored_info_type (#13713)
• healthcare: fixed Resource Identity import for google_healthcare_dicom_store, google_healthcare_fhir_store, and google_healthcare_hl7_v2_store (#13680)
• hypercomputecluster: fixed bad diffs for storage_resources.config.new_bucket.hierarchical_namespace.enabled when set to false on google_hypercomputecluster_cluster (#13739)
• kms: fixed Resource Identity import for google_kms_crypto_key (#13717)
• memcache: fixed default provider region not being populated in state and Resource Identity for google_memcache_instance when region is omitted from configuration (#13709)
• privateca: fixed bad diffs for predefined_values.key_usage.base_key_usage and predefined_values.key_usage.extended_key_usage boolean fields when set to false on google_privateca_certificate_template (#13739)
• pubsublite: fixed default provider region/zone not being populated in state and Resource Identity for google_pubsub_lite_reservation, google_pubsub_lite_subscription, and google_pubsub_lite_topic when region/zone is omitted from configuration (#13711)
• resourcemanager: fixed data.google_iam_testable_permissions to respect provider universe_domain and custom IAM endpoints instead of hardcoding iam.googleapis.com (#13744)
• saasruntime: fixed google_saas_runtime_release deletion returning before the resource was removed (beta) (#13729)
• saasruntime: fixed google_saas_runtime_rollout_kind deletion returning before the resource was removed (beta) (#13729)
• saasruntime: fixed google_saas_runtime_unit_kind deletion returning before the resource was removed (beta) (#13729)
• secretmanager: fixed Resource Identity import for google_secret_manager_secret_version and google_secret_manager_regional_secret_version (#13714)
• secretmanager: fixed google_secret_manager_secret_version requiring the secretmanager.versions.enable permission on creation when enabled is unset or true (#13759)
• secretmanagerregional: fixed google_secret_manager_regional_secret_version requiring the secretmanager.versions.enable permission on creation when enabled is unset or true (#13760)
• securesourcemanager: fixed an issue where updating disabled or service_account_auth to false on google_secure_source_manager_hook omitted the field from update requests (#13758)
• securesourcemanager: fixed an issue where updating scan_config on google_secure_source_manager_repository failed with an invalid update_mask error (#13758)
• servicenetworking: fixed project not being populated in state and Resource Identity for google_service_networking_vpc_service_controls (#13707)
• vertexai: fixed Resource Identity import name normalization and default provider region population for google_vertex_ai_tensorboard (#13687)
• vpcaccess: fixed default provider region not being populated in state and Resource Identity for google_vpc_access_connector when region is omitted from configuration (#13710)