chore(deps): update terraform google-beta to v6 #5935
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
This PR contains the following updates:
~> 2.16->~> 6.0Release Notes
hashicorp/terraform-provider-google-beta (google-beta)
v6.10.0Compare Source
FEATURES:
google_compute_instance_guest_attributes(#8556)google_service_accounts(#8532)google_iap_settings(#8548)IMPROVEMENTS:
GLOBALenum value toscope.typefield ingoogle_apphub_applicationresource (#8504)workload_optionsfield togoogle_assured_workloads_workloadresource (#8495)networksfield optional ingoogle_backup_dr_management_serverresource (#8594)external_catalog_dataset_optionsfields togoogle_bigquery_datasetresource (beta) (#8558)google_bigquery_jobdestination table configuration (#8542)desired_statuson google_compute_instance can now be set toTERMINATEDorSUSPENDEDon instance creation (#8515)header_actionandredirect_optionsfields togoogle_compute_security_policy_ruleresource (#8544)interface.ipv6-addressfield ingoogle_compute_external_vpn_gatewayresource (#8552)nameongoogle_compute_instance(#8520)advanced_machine_features.turbo_modetogoogle_compute_instance,google_compute_instance_template, andgoogle_compute_region_instance_template(#8551)labels,resource_manager_tagsandworkload_metadata_configingoogle_container_cluster.node_config(#8522)modeflag togoogle_memorystore_instance(#8498)disabledtogoogle_service_accountdatasource (#8518)asymmetric_autoscaling_optionsfield togoogle_spanner_instance(#8503)ENTERPRISEforeditioningoogle_sql_database_instanceso thateditionis determined by the API when unset. This will cause new instances to useENTERPRISE_PLUSas the default for POSTGRES_16. (#8490)autoscaling_settingstogoogle_vmwareengine_private_cloudresource (#8529)BUG FIXES:
google_compute_region_security_policy_rulethat prevented updating the default rule (#8535)google_compute_security_policy_rulethat prevented updating the default rule (#8535)google_container_cluster.node_configsubfields (#8522)v6.9.0Compare Source
DEPRECATIONS:
security_posture_configfield ingoogle_container_attached_clusterresource (#8446)FEATURES:
google_oracle_database_autonomous_database(#8440)google_oracle_database_autonomous_databases(#8438)google_oracle_database_cloud_exadata_infrastructures(#8430)google_oracle_database_cloud_vm_clusters(#8437)google_apigee_app_group(#8451)google_apigee_developer(#8445)google_network_connectivity_group(#8439)IMPROVEMENTS:
google_compute_network_firewall_policy_associationnow uses MMv1 engine instead of DCL. (#8489)google_compute_region_network_firewall_policy_associationnow uses MMv1 engine instead of DCL. (#8489)creation_timestampfield togoogle_compute_instance,google_compute_instance_template,google_compute_region_instance_template(#8442)key_revocation_action_typetogoogle_compute_instanceand related resources (#8473)deletion_policytogoogle_looker_instanceto allow force-destroying instances with nested resources by settingdeletion_policy = FORCE(#8453)alert_strategy.notification_promptsfield togoogle_monitoring_alert_policy(#8457)hierarchical_namespacetogoogle_storage_bucketresource (#8428)ENTERPRISEforeditioningoogle_sql_database_instanceso thateditionis determined by the API when unset. This will cause new instances to useENTERPRISE_PLUSas the default for POSTGRES_16. (#8490)autoscaling_settingstogoogle_vmwareengine_clusterresource (#8477)max_usable_workstationsfield togoogle_workstations_workstation_configresource. (#8421)BUG FIXES:
distribution_zoneswas incorrectly sent to the API when updatingdistribution_policy_target_shapeingoogle_compute_region_instance_group_managerresource (#8470)google_container_node_poolcaused by an occasional nil pointer (#8452)google_essential_contacts_contactimport to include required parent field. (#8423)google_sql_database_instance.0.settings.0.data_cache_configaccept server-side changes when unset. When unset, no diffs will be created when instances change ineditionand the feature is enabled or disabled as a result. (#8485)google_storage_bucket, preventing hanging when refreshing deleted buckets (#8478)v6.8.0Compare Source
FEATURES:
google_oracle_database_cloud_exadata_infrastructure(#8407)google_oracle_database_cloud_vm_cluster(#8410)google_oracle_database_db_nodes(#8420)google_oracle_database_db_servers(#8389)google_oracle_database_autonomous_database(#8411)google_oracle_database_cloud_exadata_infrastructure(#8371)google_oracle_database_cloud_vm_cluster(#8397)google_transcoder_job_template(#8406)google_transcoder_job(#8406)IMPROVEMENTS:
google_cloudfunctions_functionresource (#8372)invoker_iam_disabledfield togoogle_cloud_run_v2_service(#8395)google_compute_network_firewall_policy_ruleuse MMv1 engine instead of DCL. (#8412)google_compute_region_network_firewall_policy_ruleuse MMv1 engine instead of DCL. (#8412)ip_address_selection_policyfield togoogle_compute_backend_serviceandgoogle_compute_region_backend_service. (#8413)provisioned_throughputfield togoogle_compute_instance_templateresource (#8405)provisioned_throughputfield togoogle_compute_region_instance_templateresource (#8405)google_container_clusterwill now accept server-specified values fornode_pool_auto_config.0.node_kubelet_configwhen it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#8385)KCP_CONNECTION, andKCP_SSHDingoogle_container_cluster.logging_config(#8381)advanced_settings.logging_settingsandadvanced_settings.speech_settingstogoogle_dialogflow_cx_agentandgoogle_dialogflow_cx_flow(#8374)linked_producer_vpc_networkfield togoogle_network_connectivity_spokeresource (#8376)is_secret_data_base64field togoogle_secret_manager_secret_versionandgoogle_secret_manager_secret_version_accessdatasources (#8394)is_secret_data_base64field togoogle_secret_manager_regional_secret_versionandgoogle_secret_manager_regional_secret_version_accessdatasources (#8394)kms_key_namestoencryption_configingoogle_spanner_database(#8403)max_usable_workstationsfield togoogle_workstations_workstation_configresource (#8421)allowed_portstogoogle_workstations_workstation_config(#8402)BUG FIXES:
google_bigquery_dataset_iam_*resources to attempt to set deleted IAM members, thereby triggering an API error (#8408)google_compute_backend_serviceandgoogle_compute_region_backend_serviceto allow sendingfalseforiap.enabled(#8369)node_config.linux_node_config,node_config.workload_metadata_configandnode_config.kubelet_configwill now successfully send empty messages to the API whenterraform planindicates they are being removed, rather than null, which caused an error. The sole reliable case isnode_config.linux_node_configwhen the block is removed, where there will still be a permadiff, but the update request that's triggered will no longer error and other changes displayed in the plan should go through. (#8400)retry_policyingoogle_pubsub_subscription(#8365)v6.7.0Compare Source
FEATURES:
google_healthcare_pipeline_job(#8330)google_secure_source_manager_branch_rule(#8360)IMPROVEMENTS:
google_container_clusterwill now accept server-specified values fornode_pool_auto_config.0.node_kubelet_configwhen it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#8385)chat_engine_config.dialogflow_agent_to_linkfield togoogle_discovery_engine_chat_engineresource (#8333)migrationto resourcegoogle_network_connectivity_internal_range(#8350)routing_modefield togoogle_network_services_gatewayresource (#8355)BUG FIXES:
enable_cilium_clusterwide_network_policyfield ongoogle_container_cluster. (#8338)node_config.0.kubelet_config.0.insecure_kubelet_readonly_port_enabled. Terraform will now accept server-specified values fornode_config.0.kubelet_configwhen it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#8385)google_dataproc_clusterthat prevented creation of clusters withinternal_ip_onlyset to false (#8363)google_service_accountcreation issues caused by the eventual consistency of the GCP IAM API by ignoring 403 errors returned on polling the service account after creation. (#8336)exclusions.filterfield ingoogle_logging_billing_account_sink,google_logging_folder_sink,google_logging_organization_sinkandgoogle_logging_project_sinkresources (#8343)retry_policy. (#8365)labels,annotationsandversion_destroy_ttlin the terraform state for thegoogle_secret_manager_secretsdatasource (#8346)v6.6.0Compare Source
FEATURES:
google_dataproc_batch(#8306)google_healthcare_pipeline_job(#8330)google_site_verification_owner(#8287)IMPROVEMENTS:
HEALTHCARE_AND_LIFE_SCIENCES_CONTROLSandHEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_WITH_US_SUPPORTenum values tocompliance_regimein thegoogle_assured_workloads_workloadresource (#8326)bgp_best_path_selection_mode,bgp_bps_always_compare_medandbgp_bps_inter_region_costfields togoogle_compute_networkresource (#8321)next_hop_origin,next_hop_medandnext_hop_inter_region_costoutput fields togoogle_compute_routeresource (#8321)STATEFUL_COOKIE_AFFINITYandstrong_session_affinity_cookiefield togoogle_compute_backend_serviceandgoogle_compute_region_backend_serviceresource (#8296)TDXinstance option forconfidential_instance_typeingoogle_compute_instance(#8320)kubelet_configfield group to thegoogle_container_aws_node_poolresource (#8326)google_dataproc_autoscaling_policyresource (#8306)google_pubsub_topicresource (#8298)create_ignore_already_existsfield togoogle_sourcerepo_repositoryresource (#8329)settings.time_zoneingoogle_sql_database_instanceresource (#8293)short_namefield ingoogle_tags_tag_keyandgoogle_tags_tag_valueresources (#8324)BUG FIXES:
google_bigquery_dataset_iam_memberto be able to delete itself and overwrite the existing iam members for bigquery dataset keeping the authorized datasets as they are. (#8304)google_bigquery_dataset_access(#8319)boot_disk.initialize_params.resource_policiesfield ingoogle_compute_instanceforced a resource recreation when used in combination withgoogle_compute_disk_resource_policy_attachment(#8309)labelswas not set when creating the resourcegoogle_compute_interconnect(#8284)google_tags_location_tag_bindingresource from the Terraform state when its parent resource has been removed outside of Terraform (#8310)google_workbench_instanceresource where the removal oflabelswas not functioning as expected. (#8280)v6.5.0Compare Source
DEPRECATIONS:
macsec.pre_shared_keys.fail_openfield ingoogle_compute_interconnectresource. Use the newmacsec.fail_openfield instead (#8245)FEATURES:
google_compute_region_instance_group_manager(#8259)google_privileged_access_manager_entitlement(#8253)google_secret_manager_regional_secret_version_access(#8220)google_secret_manager_regional_secret_version(#8209)google_secret_manager_regional_secrets(#8217)google_compute_region_network_firewall_policy_with_rules(#8225)google_compute_router_nat_address(#8227)google_logging_log_scope(#8235)IMPROVEMENTS:
activatefield togoogle_apigee_nat_addressresource (#8261)biglake_configurationfield togoogle_bigquery_tableresource to support BigLake Managed Tables (#8221)node_selectorfield togoogle_cloud_run_serviceresource (#8216)node_selectorfield togoogle_cloud_run_v2_serviceresource (#8216)existing_reservationsfield togoogle_compute_region_commitmentresource (#8256)host_error_timeout_secondsfield togoogle_compute_instanceresource (#8252)hostnamefield togoogle_compute_instancedata source (#8268)initial_nat_ipfield togoogle_compute_router_natresource (#8227)macsec.fail_openfield togoogle_compute_interconnectresource (#8245)SUSPENDEDas a possible value todesired_statefield ingoogle_compute_instanceresource (#8257)projects/{{project}}/meta-data/{{key}}format forgoogle_compute_project_metadata_itemresource (#8274)customer_nameandlocationfields as optional ingoogle_compute_interconnectresource to support cross cloud interconnect (#8279)linux_node_config.hugepages_configfield togoogle_container_node_poolresource (#8210)psc_enabledandpsc_configfields togoogle_looker_instanceresource (#8211)include_import_rangesfield togoogle_network_connectivity_spokeresource forlinked_vpn_tunnels,linked_interconnect_attachmentsandlinked_router_appliance_instances(#8215)version_aliasesfield togoogle_secret_manager_regional_secretresource (#8209)google_workbench_instanceresource (#8228)BUG FIXES:
google_bigquery_tableresource whenexternal_data_configuration.schemafield is set (#8234)policy_tagfield ingoogle_bigquery_datapolicy_data_policyresource (#8239)storage_config.bucketfield to support a bucket name with or without "gs://" prefix (#8229)addons_config.gcp_filestore_csi_driver_configandenable_autopilotin the samegoogle_container_cluster(#8260)node_config.kubelet_configupdates ingoogle_container_clusterresource (#8238)node_pool_defaults.node_config_defaultswithenable_autopilot = truewould causegoogle_container_clusterresource creation failure (#8223)google_workbench_instanceresource where the removal oflabelswas not functioning as expected (#8280)v6.4.0Compare Source
DEPRECATIONS:
google_scc_v2_organization_scc_big_query_exports. Usegoogle_scc_v2_organization_scc_big_query_exportinstead. (#8166)FEATURES:
google_secret_manager_regional_secret_version(#8209)google_secret_manager_regional_secret(#8189)google_compute_firewall_policy_with_rules(#8181)google_database_migration_service_migration_job(#8187)google_discovery_engine_target_site(#8174)google_healthcare_workspace(#8179)google_scc_folder_scc_big_query_export(#8183)google_scc_organization_scc_big_query_export(#8172)google_scc_project_scc_big_query_export(#8173)google_scc_v2_organization_scc_big_query_export(#8166)google_secret_manager_regional_secret_version(#8199)google_secret_manager_regional_secret(#8170)google_site_verification_web_resource(#8180)google_spanner_backup_schedule(#8160)IMPROVEMENTS:
enable_outbound_public_ipfield togoogle_alloydb_instanceresource (#8156)consumer_accept_listfield ingoogle_apigee_instanceresource (#8155)interfacefield togoogle_compute_attached_diskresource (#8154)google_compute_interconnectresource except forremote_locationandrequested_featuresfields (#8203)deletion_protection_enabledanddeletion_protection_reasonfields togoogle_filestore_instanceresource (#8158)fips_enabledfield togoogle_looker_instanceresource (#8206)deletion_protectionfield togoogle_dataproc_metastore_serviceresource (#8200)allow_auto_tieringfield togoogle_netapp_storage_poolresource (#8163)tiering_policyfield togoogle_netapp_volumeresource (#8163)version_aliasesfield togoogle_secret_manager_regional_secretresource (#8209)editionfield togoogle_spanner_instanceresource (#8160)BUG FIXES:
iapfield ingoogle_compute_backendandgoogle_compute_region_backendresources (#8204)node_pool_defaults.node_config_defaultswithenable_autopilot = truewill causegoogle_container_clusterresource creation failure (#8223)node_config.gcfs_configfield ingoogle_container_clusterandgoogle_container_node_poolresources (#8207)node_config.gcfs_configingoogle_container_clusterandgoogle_container_node_poolresources (#8207)node_config.kubelet_config.cpu_manager_policyfield optional to fix its update ingoogle_container_clusterresource (#8171)dnssec_configfield ingoogle_dns_managed_zoneresource (#8165)filterfield to contain line breaks ingoogle_pubsub_subscriptionresource (#8161)v6.3.0Compare Source
FEATURES:
google_bigquery_tables(#8130)google_compute_network_firewall_policy_with_rules(#8118)google_developer_connect_connection(#8150)google_developer_connect_git_repository_link(#8150)google_memorystore_instance(#8126)IMPROVEMENTS:
connected_endpoints.consumer_networkandconnected_endpoints.psc_connection_idfields togoogle_compute_service_attachmentresource (#8148)propagated_connection_limitandconnected_endpoints.propagated_connection_countfields togoogle_compute_service_attachmentresource (#8148)http_keep_alive_timeout_sectogoogle_region_compute_target_http_proxyandgoogle_region_compute_target_http_proxyresources (#8151)boot_disk.initialize_params.resource_policiesingoogle_compute_instanceandgoogle_instance_template(#8134)storage_poolstonode_configingoogle_container_clusterandgoogle_container_node_pool(#8146)security_posture_configfield togoogle_container_attached_clusterresource (#8137)large_capacityandmultiple_endpointstogoogle_netapp_volumeresource (#8116)tagsfield togoogle_folderto allow setting tags for folders at creation time (#8113)BUG FIXES:
network_ipto "" will no longer cause diff and will be treated the same asnull(#8128)google_dataproc_clusterto protect against handling nilkerberos_configvalues (#8129)google_dns_record_setto prevent conflicts when multiple resources attempt to operate on the same record set (#8139)google_managed_kafka_topiccreation to fix eventual consistency errors (#8149)v6.2.0Compare Source
FEATURES:
google_certificate_manager_certificates(#8099)google_backup_dr_backup_vault(#8083)google_scc_v2_folder_scc_big_query_export(#8079)google_scc_v2_project_scc_big_query_export(#8070)IMPROVEMENTS:
partner_service_billing_accounttogoogle_assured_workloads_workload(#8097)column_family.typeingoogle_bigtable_table(#8069)template.service_meshtogoogle_cloud_run_v2_service(#8096)boot_disk.interfacefield togoogle_compute_instanceresource (#8075)node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabledfield togoogle_container_cluster. (#8076)insecure_kubelet_readonly_port_enabledtonode_pool.node_config.kubelet_configandnode_config.kubelet_configingoogle_container_node_poolresource. (#8071)insecure_kubelet_readonly_port_enabledtonode_pool_defaults.node_config_defaults,node_pool.node_config.kubelet_config, andnode_config.kubelet_configingoogle_container_clusterresource. (#8071)google_compute_node_pool.node_config.gcfs_configandgoogle_container_cluster.node_config.gcfs_clusterandgoogle_container_cluster.node_pool.node_config.gcfs_cluster(#8101)x509field togoogle_iam_workload_identity_pool_providerresource (#8110)include_export_rangestogoogle_network_connectivity_spoke(#8088)cloud_storage_config.max_messagesandcloud_storage_config.avro_config.use_topic_schemafields togoogle_pubsub_subscriptionresource (#8086)maintenance_policyfield to thegoogle_redis_clusterresource (#8087)tagsfield togoogle_projectto allow setting tags for projects at creation time (#8091)streaming_config.filtervalues ingoogle_scc_notification_configresources (#8105)BUG FIXES:
google_compute_interconnectto support correctavailable_featuresoption ofIF_MACSEC(#8082)advertised_route_prioritywas accidentally set to 0 during updates ingoogle_compute_router_peer(#8102)start_timein an incorrectH:mmformat ingoogle_compute_resource_policiesresources (#8067)network_interface.subnetwork_projectvalidation to match with the project innetwork_interface.subnetworkfield whennetwork_interface.subnetworkhas full self_link ingoogle_compute_instanceresource (#8089)google_kms_autokey_configresource'sfolderfield to accept values that are either full resource names (folders/{folder_id}) or just the folder id ({folder_id}only) (#8100)google_storage_bucketresource (#8092)v6.1.0Compare Source
FEATURES:
google_kms_crypto_key_latest_version(#8032)google_kms_crypto_key_versions(#8026)IMPROVEMENTS:
google_database_migration_service_connection_profilefor creating DMS connection profiles that link to existing Cloud SQL instances/AlloyDB clusters. (#8062)subscription_typeandtrial_metadatafield togoogle_alloydb_clusterresource (#8042)encryption_configurationfield togoogle_bigquery_data_transfer_configresource (#8045)selected_resources, andrestrict_direct_table_accesstogoogle_bigquery_analytics_hub_listingresource (#8029)sharing_environment_configtogoogle_bigquery_analytics_hub_data_exchangeresource (#8029)http_targetfield togoogle_cloud_tasks_queueresource (#8033)acceleratorsfield togoogle_compute_node_templateresource (#8063)server_tls_policyduring update ingoogle_compute_target_https_proxyresources (#8023)transaction_logsandchange_tablestodatastream_streamresource (#8031)chunking_configandlayout_parsing_configfields togoogle_discovery_engine_data_storeresource (#8049)inspect_template_modified_cadencefield tobig_query_targetandcloud_sql_targetingoogle_data_loss_prevention_discovery_configresource (#8054)tag_resourcesfield togoogle_data_loss_prevention_discovery_configresource (#8054)BUG FIXES:
google_bigquery_dataset_accessresource (#8039)bigquery_datasetimmutable ingoogle_bigquery_analytics_hub_listingas it was not updatable in the API. Now modifying the field in Terraform will correctly recreate the resource rather than causing Terraform to report it would attempt an invalid update. (#8029)google_container_clusterresource (#8030)google_pubsub_subscriptionresources (#8055)google_sql_userwherehostis an IPv4 CIDR (#8028)namefield for IAM Group user forgoogle_sql_userresource (#8024)v6.0.1Compare Source
BREAKING CHANGES:
settings.ip_configuration.require_sslfromgoogle_sql_database_instancein favor ofsettings.ip_configuration.ssl_mode. This field was intended to be removed in 6.0.0. (#8043)v6.0.0Compare Source
Terraform Google Provider 6.0.0 Upgrade Guide
BREAKING CHANGES:
goog-terraform-provisioned: truelabel by default. (#8004)deletion_protectionfield togoogle_active_directory_domainresource. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection = falsebefore destroying the resource. (#7837)networkingoogle_alloy_db_cluster. Usenetwork_config.networkinstead. (#7999)idforgoogle_billing_project_info(#7793)google_bigquery_tableresource (#7755)allow_resource_tags_on_deletionfromgoogle_bigquery_table. Resource tags are now always allowed on table deletion. (#7940)multi_region_auxiliaryfromgoogle_bigquery_reservation(#7844)deletion_protectionfield togoogle_cloudrunv2_serviceto make deleting them require an explicit intent. This field defaults totrue, preventing accidental deletions. To delete the resource, you must first setdeletion_protection = falsebefore destroying the resource. (#7901)liveness_probeto no longer infer a default value from api ongoogle_cloud_run_v2_service. Removing this field and applying the change will now remove liveness probe from the Cloud Run service. (#7753)containers.envto SET from ARRAY forgoogle_cloud_run_v2_serviceandgoogle_cloud_run_v2_job. (#7812)ip_allocation_policy = []ingoogle_composer_environmentis no longer valid configuration. Removing the field from configuration should not produce a diff. (#8011)enabledingoogle_compute_backend_serviceandgoogle_compute_region_backend_service(#7758)connection_draining_timeout_sec,balancing_modeandoutlier_detectioningoogle_compute_region_backend_serviceandgoogle_compute_backend_service. (#7723)compute_network_endpoints(#7806)certifcate_idfield ingoogle_compute_managed_ssl_certificateresource being incorrectly marked as a user-configurable value when it should just be an output. (#7936)guest_accelerator = []is no longer valid configuration ingoogle_compute_instance. To explicitly set an empty list of objects, set guest_accelerator.count = 0. (#8011)google_compute_instance_from_templateandgoogle_compute_instance_from_machine_imagenetwork_interface.alias_ip_range, network_interface.access_config, attached_disk, guest_accelerator, service_account, scratch_diskcan no longer be set to an empty block[]. Removing the fields from configuration should not produce a diff. (#8011)secondary_ip_ranges = []ingoogle_compute_subnetworkis no longer valid configuration. To set an explicitly empty list, usesend_secondary_ip_range_if_emptyand completely removesecondary_ip_rangefrom config. ([#8011](https://redirConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.