feat(deps): Update Terraform google to v6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	>= 4.0.0, < 6 -> >= 4.0.0, < 7	6.13.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.12.0

Compare Source

FEATURES:

• New Data Source: google_access_context_manager_access_policy (#​20295)
• New Resource: google_dataproc_gdc_spark_application (#​20242)
• New Resource: google_managed_kafka_cluster and google_managed_kafka_topic (#​20237)

IMPROVEMENTS:

• artifactregistry: added common_repository field to google_artifact_registry_repository resource (#​20305)
• cloudrunv2: added urls output field to google_cloud_run_v2_service resource (#​20313)
• compute: added IDPF as a possible value for the network_interface.nic_type field in google_compute_instance resource (#​20250)
• compute: added IDPF as a possible value for the guest_os_features.type field in google_compute_image resource (#​20250)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• filestore: added performance_config field to google_filestore_instance (#​20218)
• redis: added persistence_config to google_redis_cluster. (#​20212)
• securesourcemanager: added workforce_identity_federation_config field to google_secure_source_manager_instance resource (#​20290)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• sql: added psc_auto_connections fields to google_sql_database_instance resource (#​20307)

BUG FIXES:

• accesscontextmanager: fixed permadiff in perimeter google_access_context_manager_service_perimeter_ingress_policy and google_access_context_manager_service_perimeter_egress_policy resources when there are duplicate resources in the rules (#​20294)
• • accesscontextmanager: fixed comparison of identity_type in ingress_from and egress_from when the IDENTITY_TYPE_UNSPECIFIED is set (#​20221)
• compute: fixed permadiff on attempted type field updates in google_computer_security_policy, updating this field will now force recreation of the resource (#​20316)
• identityplatform: fixed perma-diff originating from the sign_in.anonymous.enabled field in google_identity_platform_config (#​20244)

v6.11.2

Compare Source

BUG FIXES:

• vertexai: fixed issue with google_vertex_ai_endpoint where upgrading to 6.11.0 would delete all traffic splits that were set outside Terraform (which was previously a required step for all meaningful use of this resource). (#​20350)

v6.11.1

Compare Source

BUG FIXES:

• container: fixed diff on google_container_cluster.user_managed_keys_config field for resources that had not set it. (#​20314)
• container: marked google_container_cluster.user_managed_keys_config as immutable because it can't be updated in place. (#​20314)

v6.11.0

Compare Source

NOTES:

• compute: migrated google_compute_firewall_policy_rule from DCL engine to MMv1 engine. (#​20160)

BREAKING CHANGES:

• looker: made oauth_config a required field in google_looker_instance, as creating this resource without that field always triggers an API error (#​20196)

FEATURES:

• New Data Source: google_spanner_database (#​20114)
• New Resource: google_apigee_api (#​20113)
• New Resource: google_dataproc_gdc_application_environment (#​20165)
• New Resource: google_dataproc_gdc_service_instance (#​20147)
• New Resource: google_memorystore_instance (#​20108)

IMPROVEMENTS:

• apigee: added in-place update support for google_apigee_env_references (#​20182)
• apigee: added in-place update support for google_apigee_environment resource (#​20189)
• cloudrun: added empty_dir field to google_cloud_run_service (#​20185)
• cloudrunv2: added empty_dir field to google_cloud_run_v2_service and google_cloud_run_v2_job (#​20185)
• compute: added disks field to google_compute_node_template resource (#​20180)
• compute: added preconfigured_waf_config field to google_compute_security_policy resource (#​20183)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• compute: added instance_flexibility_policy field to google_compute_region_instance_group_manager resource (#​20132)
• compute: increased google_compute_security_policy timeouts from 20 minutes to 30 minutes (#​20145)
• container: added control_plane_endpoints_config field to google_container_cluster resource. (#​20193)
• container: added parallelstore_csi_driver_config field to google_container_cluster resource. (#​20163)
• container: added user_managed_keys_config field to google_container_cluster resource. (#​20105)
• firestore: allowed single field indexes to support __name__ DESC indexes in google_firestore_index resources (#​20124)
• privateca: added support for google_privateca_certificate_authority with type = "SUBORDINATE" to be activated into "STAGED" state (#​20103)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• vertexai: added traffic_split, private_service_connect_config, predict_request_response_logging_config, dedicated_endpoint_enabled, and dedicated_endpoint_dns fields to google_vertex_ai_endpoint resource (#​20179)
• workflows: added deletion_protection field to google_workflows_workflow resource (#​20106)

BUG FIXES:

• compute: fixed a diff based on server-side reordering of match.src_address_groups and match.dest_address_groups in google_compute_network_firewall_policy_rule (#​20148)
• compute: fixed permadiff on the preconfigured_waf_config field for google_compute_security_policy resource (#​20183)
• container: fixed in-place updates for node_config.containerd_config in google_container_cluster and google_container_node_pool (#​20112)

v6.10.0

Compare Source

FEATURES:

• New Data Source: google_compute_instance_guest_attributes (#​20095)
• New Data Source: google_service_accounts (#​20062)
• New Resource: google_iap_settings (#​20085)

IMPROVEMENTS:

• apphub: added GLOBAL enum value to scope.type field in google_apphub_application resource (#​20015)
• assuredworkloads: added workload_options field to google_assured_workloads_workload resource (#​19985)
• bigquery: added external_catalog_dataset_options fields to google_bigquery_dataset resource (beta) (#​20097)
• bigquery: added descriptive validation errors for missing required fields in google_bigquery_job destination table configuration (#​20077)
• compute: desired_status on google_compute_instance can now be set to TERMINATED or SUSPENDED on instance creation (#​20031)
• compute: added header_action and redirect_options fields to google_compute_security_policy_rule resource (#​20079)
• compute: added interface.ipv6-address field in google_compute_external_vpn_gateway resource (#​20091)
• compute: added propagated_connection_limit and connected_endpoints.propagated_connection_count fields to google_compute_service_attachment resource (#​20016)
• compute: added plan-time validation to name on google_compute_instance (#​20036)
• compute: added support for advanced_machine_features.turbo_mode to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template (#​20090)
• container: added in-place update support for labels, resource_manager_tags and workload_metadata_config in google_container_cluster.node_config (#​20038)
• filestore: added protocol property to resource google_filestore_instance (#​19982)
• memorystore: added mode flag to google_memorystore_instance (#​19988)
• netapp: added zone and replica_zone fields to google_netapp_storage_pool resource (#​19980)
• netapp: added zone and replica_zone fields to google_netapp_volume resource (#​19980)
• networksecurity: added tls_inspection_policy field to google_network_security_gateway_security_policy (#​19986)
• resourcemanager: added disabled to google_service_account datasource (#​20034)
• spanner: added asymmetric_autoscaling_options field to google_spanner_instance (#​20014)
• sql: removed the client-side default of ENTERPRISE for edition in google_sql_database_instance so that edition is determined by the API when unset. This will cause new instances to use ENTERPRISE_PLUS as the default for POSTGRES_16. (#​19977)
• vmwareengine: added autoscaling_settings to google_vmwareengine_private_cloud resource (#​20057)

BUG FIXES:

• accesscontextmanager: fixed permadiff for perimeter ingress / egress rule resources (#​20046)
• compute: fixed an error in google_compute_security_policy_rule that prevented updating the default rule (#​20066)
• container: fixed missing in-place updates for some google_container_cluster.node_config subfields (#​20038)

v6.9.0

Compare Source

DEPRECATIONS:

• containerattached: deprecated security_posture_config field in google_container_attached_cluster resource (#​19912)

FEATURES:

• New Data Source: google_oracle_database_autonomous_database (#​19903)
• New Data Source: google_oracle_database_autonomous_databases (#​19901)
• New Data Source: google_oracle_database_cloud_exadata_infrastructures (#​19884)
• New Data Source: google_oracle_database_cloud_vm_clusters (#​19900)
• New Resource: google_apigee_app_group (#​19921)
• New Resource: google_apigee_developer (#​19911)
• New Resource: google_network_connectivity_group (#​19902)

IMPROVEMENTS:

• compute: google_compute_network_firewall_policy_association now uses MMv1 engine instead of DCL. (#​19976)
• compute: google_compute_region_network_firewall_policy_association now uses MMv1 engine instead of DCL. (#​19976)
• compute: added creation_timestamp field to google_compute_instance, google_compute_instance_template, google_compute_region_instance_template (#​19906)
• compute: added key_revocation_action_type to google_compute_instance and related resources (#​19952)
• looker: added deletion_policy to google_looker_instance to allow force-destroying instances with nested resources by setting deletion_policy = FORCE (#​19924)
• monitoring: added alert_strategy.notification_prompts field to google_monitoring_alert_policy (#​19928)
• storage: added hierarchical_namespace to google_storage_bucket resource (#​19882)
• sql: removed the client-side default of ENTERPRISE for edition in google_sql_database_instance so that edition is determined by the API when unset. This will cause new instances to use ENTERPRISE_PLUS as the default for POSTGRES_16. (#​19977)
• vmwareengine: added autoscaling_settings to google_vmwareengine_cluster resource (#​19962)
• workstations: added max_usable_workstations field to google_workstations_workstation_config resource. (#​19872)

BUG FIXES:

• compute: fixed an issue where immutable distribution_zones was incorrectly sent to the API when updating distribution_policy_target_shape in google_compute_region_instance_group_manager resource (#​19949)
• container: fixed a crash in google_container_node_pool caused by an occasional nil pointer (#​19922)
• essentialcontacts: fixed google_essential_contacts_contact import to include required parent field. (#​19877)
• sql: made google_sql_database_instance.0.settings.0.data_cache_config accept server-side changes when unset. When unset, no diffs will be created when instances change in edition and the feature is enabled or disabled as a result. (#​19972)
• storage: removed retry on 404s during refresh for google_storage_bucket, preventing hanging when refreshing deleted buckets (#​19964)

v6.8.0

Compare Source

FEATURES:

• New Data Source: google_oracle_database_cloud_exadata_infrastructure (#​19856)
• New Data Source: google_oracle_database_cloud_vm_cluster (#​19859)
• New Data Source: google_oracle_database_db_nodes (#​19871)
• New Data Source: google_oracle_database_db_servers (#​19823)
• New Resource: google_oracle_database_autonomous_database (#​19860)
• New Resource: google_oracle_database_cloud_exadata_infrastructure (#​19798)
• New Resource: google_oracle_database_cloud_vm_cluster (#​19837)
• New Resource: google_transcoder_job_template (#​19854)
• New Resource: google_transcoder_job (#​19854)

IMPROVEMENTS:

• cloudfunctions: increased the timeouts to 20 minutes for google_cloudfunctions_function resource (#​19799)
• cloudrunv2: added invoker_iam_disabled field to google_cloud_run_v2_service (#​19833)
• compute: made google_compute_network_firewall_policy_rule use MMv1 engine instead of DCL. (#​19862)
• compute: made google_compute_region_network_firewall_policy_rule use MMv1 engine instead of DCL. (#​19862)
• compute: added ip_address_selection_policy field to google_compute_backend_service and google_compute_region_backend_service. (#​19863)
• compute: added provisioned_throughput field to google_compute_instance_template resource (#​19852)
• compute: added provisioned_throughput field to google_compute_region_instance_template resource (#​19852)
• container: added support for additional values KCP_CONNECTION, and KCP_SSHDin google_container_cluster.logging_config (#​19812)
• dialogflowcx: added advanced_settings.logging_settings and advanced_settings.speech_settings to google_dialogflow_cx_agent and google_dialogflow_cx_flow (#​19801)
• networkconnectivity: added linked_producer_vpc_network field to google_network_connectivity_spoke resource (#​19806)
• secretmanager: added is_secret_data_base64 field to google_secret_manager_secret_version and google_secret_manager_secret_version_access datasources (#​19831)
• secretmanager: added is_secret_data_base64 field to google_secret_manager_regional_secret_version and google_secret_manager_regional_secret_version_access datasources (#​19831)
• spanner: added kms_key_names to encryption_config in google_spanner_database (#​19846)
• workstations: added max_usable_workstations field to google_workstations_workstation_config resource (#​19872)
• workstations: added field allowed_ports to google_workstations_workstation_config (#​19845)

BUG FIXES:

• bigquery: fixed a regression that caused google_bigquery_dataset_iam_* resources to attempt to set deleted IAM members, thereby triggering an API error (#​19857)
• compute: fixed an issue in google_compute_backend_service and google_compute_region_backend_service to allow sending false for iap.enabled (#​19795)
• container: node_config.linux_node_config, node_config.workload_metadata_config and node_config.kubelet_config will now successfully send empty messages to the API when terraform plan indicates they are being removed, rather than null, which caused an error. The sole reliable case is node_config.linux_node_config when the block is removed, where there will still be a permadiff, but the update request that's triggered will no longer error and other changes displayed in the plan should go through. (#​19842)

v6.7.0

Compare Source

FEATURES:

• New Resource: google_healthcare_pipeline_job (#​19717)
• New Resource: google_secure_source_manager_branch_rule (#​19773)

IMPROVEMENTS:

• container: google_container_cluster will now accept server-specified values for node_pool_auto_config.0.node_kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​19817)
• discoveryengine: added chat_engine_config.dialogflow_agent_to_link field to google_discovery_engine_chat_engine resource (#​19723)
• networkconnectivity: added field migration to resource google_network_connectivity_internal_range (#​19757)
• networkservices: added routing_mode field to google_network_services_gateway resource (#​19764)

BUG FIXES:

• bigtable: fixed an error where BigTable IAM resources could be created with conditions but the condition was not stored in state (#​19725)
• container: fixed issue which caused to not being able to disable enable_cilium_clusterwide_network_policy field on google_container_cluster. (#​19736)
• container: fixed a diff triggered by a new API-side default value for node_config.0.kubelet_config.0.insecure_kubelet_readonly_port_enabled. Terraform will now accept server-specified values for node_config.0.kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​19817)
• dataproc: fixed a bug in google_dataproc_cluster that prevented creation of clusters with internal_ip_only set to false (#​19782)
• iam: addressed google_service_account creation issues caused by the eventual consistency of the GCP IAM API by ignoring 403 errors returned on polling the service account after creation. (#​19727)
• logging: fixed the whitespace permadiff on exclusions.filter field in google_logging_billing_account_sink, google_logging_folder_sink, google_logging_organization_sink and google_logging_project_sink resources (#​19744)
• pubsub: fixed permadiff with configuring an empty retry_policy in google_pubsub_subscription. This will result in minimum_backoff and maximum_backoff using server-side defaults. To use "immedate retry", do not specify a retry_policy block at all. (#​19784)
• secretmanager: fixed the issue of unpopulated fields labels, annotations and version_destroy_ttl in the terraform state for the google_secret_manager_secrets datasource (#​19748)

v6.6.0

Compare Source

FEATURES:

• New Resource: google_dataproc_batch (#​19686)
• New Resource: google_healthcare_pipeline_job (#​19717)
• New Resource: google_site_verification_owner (#​19641)

IMPROVEMENTS:

• assuredworkloads: added HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS and HEALTHCARE_AND_LIFE_SCIENCES_CONTROLS_WITH_US_SUPPORT enum values to compliance_regime in the google_assuredworkload_workload resource (#​19714)
• compute: added bgp_best_path_selection_mode ,bgp_bps_always_compare_med and bgp_bps_inter_region_cost fields to google_compute_network resource (#​19708)
• compute: added next_hop_origin ,next_hop_med and next_hop_inter_region_cost output fields to google_compute_route resource (#​19708)
• compute: added enum STATEFUL_COOKIE_AFFINITY and strong_session_affinity_cookie field to google_compute_backend_service and google_compute_region_backend_service resource (#​19665)
• compute: moved TDX instance option for confidential_instance_type in google_compute_instance from Beta to GA (#​19706)
• containeraws: added kubelet_config field group to the google_container_aws_node_pool resource (#​19714)
• pubsub: added GCS ingestion settings and platform log settings to google_pubsub_topic resource (#​19669)
• sourcerepo: added create_ignore_already_exists field to google_sourcerepo_repository resource (#​19716)
• sql: added in-place update support for settings.time_zone in google_sql_database_instance resource (#​19654)
• tags: increased maximum accepted input length for the short_name field in google_tags_tag_key and google_tags_tag_value resources (#​19712)

BUG FIXES:

• bigquery: fixed google_bigquery_dataset_iam_member to be able to delete itself and overwrite the existing iam members for bigquery dataset keeping the authorized datasets as they are. (#​19682)
• bigquery: fixed an error which could occur with service account field values containing non-lower-case characters in google_bigquery_dataset_access (#​19705)
• compute: fixed an issue where the boot_disk.initialize_params.resource_policies field in google_compute_instance forced a resource recreation when used in combination with google_compute_disk_resource_policy_attachment (#​19692)
• compute: fixed the issue that labels is not set when creating the resource google_compute_interconnect (#​19632)
• tags: removed google_tags_location_tag_binding resource from the Terraform state when its parent resource has been removed outside of Terraform (#​19693)
• workbench: fixed a bug in the google_workbench_instance resource where the removal of labels was not functioning as expected. (#​19620)

v6.5.0

Compare Source

DEPRECATIONS:

• compute: deprecated macsec.pre_shared_keys.fail_open field in google_compute_interconnect resource. Use the new macsec.fail_open field instead (#​19572)

FEATURES:

• New Data Source: google_compute_region_instance_group_manager (#​19589)
• New Data Source: google_privileged_access_manager_entitlement (#​19580)
• New Data Source: google_secret_manager_regional_secret_version_access (#​19538)
• New Data Source: google_secret_manager_regional_secret_version (#​19514)
• New Data Source: google_secret_manager_regional_secrets (#​19532)
• New Resource: google_compute_router_nat_address (#​19550)
• New Resource: google_logging_log_scope (#​19559)

IMPROVEMENTS:

• apigee: added activate field to google_apigee_nat_address resource (#​19591)
• bigquery: added biglake_configuration field to google_bigquery_table resource to support BigLake Managed Tables (#​19541)
• cloudrunv2: promoted scaling field in google_cloud_run_v2_service resource to GA (#​19588)
• composer: promoted config.workloads_config.cloud_data_lineage_integration field in google_composer_environment resource to GA (#​19612)
• compute: added existing_reservations field to google_compute_region_commitment resource (#​19585)
• compute: added hostname field to google_compute_instance data source (#​19607)
• compute: added initial_nat_ip field to google_compute_router_nat resource (#​19550)
• compute: added macsec.fail_open field to google_compute_interconnect resource (#​19572)
• compute: added SUSPENDED as a possible value to desired_state field in google_compute_instance resource (#​19586)
• compute: added import support for projects/{{project}}/meta-data/{{key}} format for google_compute_project_metadata_item resource (#​19613)
• compute: marked customer_name and location fields as optional in google_compute_interconnect resource to support cross cloud interconnect (#​19619)
• container: added linux_node_config.hugepages_config field to google_container_node_pool resource (#​19521)
• container: promoted gcfs_config field in google_container_cluster resource to GA (#​19617)
• looker: added psc_enabled and psc_config fields to google_looker_instance resource (#​19523)
• networkconnectivity: added include_import_ranges field to google_network_connectivity_spoke resource for linked_vpn_tunnels, linked_interconnect_attachments and linked_router_appliance_instances (#​19530)
• secretmanagerregional: added version_aliases field to google_secret_manager_regional_secret resource (#​19514)
• workbench: increased create timeout to 20 minutes for google_workbench_instance resource (#​19551)

BUG FIXES:

• bigquery: fixed in-place update of google_bigquery_table resource when external_data_configuration.schema field is set (#​19558)
• bigquerydatapolicy: fixed permadiff on policy_tag field in google_bigquery_datapolicy_data_policy resource (#​19563)
• composer: fixed storage_config.bucket field to support a bucket name with or without "gs://" prefix (#​19552)
• container: added support for setting addons_config.gcp_filestore_csi_driver_config and enable_autopilot in the same google_container_cluster (#​19590)
• container: fixed node_config.kubelet_config updates in google_container_cluster resource (#​19562)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true would cause google_container_cluster resource creation failure (#​19543)
• workbench: fixed a bug in the google_workbench_instance resource where the removal of labels was not functioning as expected (#​19620)

v6.4.0

Compare Source

DEPRECATIONS:

• securitycenterv2: deprecated google_scc_v2_organization_scc_big_query_exports. Use google_scc_v2_organization_scc_big_query_export instead. (#​19457)

FEATURES:

• New Data Source: google_secret_manager_regional_secret_version (#​19514)
• New Data Source: google_secret_manager_regional_secret (#​19491)
• New Resource: google_database_migration_service_migration_job (#​19488)
• New Resource: google_discovery_engine_target_site (#​19469)
• New Resource: google_healthcare_workspace (#​19476)
• New Resource: google_scc_folder_scc_big_query_export (#​19480)
• New Resource: google_scc_organization_scc_big_query_export (#​19465)
• New Resource: google_scc_project_scc_big_query_export (#​19466)
• New Resource: google_scc_v2_organization_scc_big_query_export (#​19457)
• New Resource: google_secret_manager_regional_secret_version (#​19504)
• New Resource: google_secret_manager_regional_secret (#​19461)
• New Resource: google_site_verification_web_resource (#​19477)
• New Resource: google_spanner_backup_schedule (#​19449)

IMPROVEMENTS:

• alloydb: added enable_outbound_public_ip field to google_alloydb_instance resource (#​19444)
• apigee: added in-place update for consumer_accept_list field in google_apigee_instance resource (#​19442)
• compute: added interface field to google_compute_attached_disk resource (#​19440)
• compute: added in-place update in google_compute_interconnect resource, except for remote_location and requested_features fields (#​19508)
• filestore: added deletion_protection_enabled and deletion_protection_reason fields to google_filestore_instance resource (#​19446)
• looker: added fips_enabled field to google_looker_instance resource (#​19511)
• metastore: added deletion_protection field to google_dataproc_metastore_service resource (#​19505)
• netapp: added allow_auto_tiering field to google_netapp_storage_pool resource (#​19454)
• netapp: added tiering_policy field to google_netapp_volume resource (#​19454)
• secretmanagerregional: added version_aliases field to google_secret_manager_regional_secret resource (#​19514)
• spanner: added edition field to google_spanner_instance resource (#​19449)

BUG FIXES:

• compute: fixed a permadiff on iap field in google_compute_backend and google_compute_region_backend resources (#​19509)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure (#​19543)
• container: fixed a permadiff on node_config.gcfs_config field in google_container_cluster and google_container_node_pool resources (#​19512)
• container: fixed the in-place update for node_config.gcfs_config field in google_container_cluster and google_container_node_pool resources (#​19512)
• container: made node_config.kubelet_config.cpu_manager_policy field optional to fix its update in google_container_cluster resource (#​19464)
• dns: fixed a permadiff on dnssec_config field in google_dns_managed_zone resource (#​19456)
• pubsub: allowed filter field to contain line breaks in google_pubsub_subscription resource (#​19451)

v6.3.0

Compare Source

FEATURES:

• New Data Source: google_bigquery_tables (#​19402)
• New Resource: google_developer_connect_connection (#​19431)
• New Resource: google_developer_connect_git_repository_link (#​19431)
• New Resource: google_memorystore_instance (#​19398)

IMPROVEMENTS:

• compute: added connected_endpoints.consumer_network and connected_endpoints.psc_connection_id fields to google_compute_service_attachment resource (#​19426)
• compute: added field http_keep_alive_timeout_sec to google_region_compute_target_https_proxy and google_region_compute_target_http_proxy resources (#​19432)
• compute: added support for boot_disk.initialize_params.resource_policies in google_compute_instance and google_instance_template (#​19407)
• container: added storage_pools to node_config in google_container_cluster and google_container_node_pool (#​19423)
• containerattached: added security_posture_config field to google_container_attached_cluster resource (#​19411)
• netapp: added large_capacity and multiple_endpoints to google_netapp_volume resource (#​19384)
• resourcemanager: added tags field to google_folder to allow setting tags for folders at creation time (#​19380)

BUG FIXES:

• compute: setting network_ip to "" will no longer cause diff and will be treated the same as null (#​19400)
• dataproc: updated google_dataproc_cluster to protect against handling nil kerberos_config values (#​19401)
• dns: added a mutex to google_dns_record_set to prevent conflicts when multiple resources attempt to operate on the same record set (#​19416)
• managedkafka: added 5 second wait post google_managed_kafka_topic creation to fix eventual consistency errors (#​19429)

v6.2.0

Compare Source

FEATURES:

• New Data Source: google_certificate_manager_certificates (#​19361)
• New Resource: google_network_security_server_tls_policy (#​19314)
• New Resource: google_scc_v2_folder_scc_big_query_export (#​19327)
• New Resource: google_scc_v2_project_scc_big_query_export (#​19311)

IMPROVEMENTS:

• assuredworkload: added field partner_service_billing_account to google_assured_workloads_workload (#​19358)
• bigtable: added support for column_family.type in google_bigtable_table (#​19302)
• cloudrun: promoted support for nfs and csi volumes (for Cloud Storage FUSE) for google_cloud_run_service to GA (#​19359)
• cloudrunv2: promoted support for nfs and gcs volumes for google_cloud_run_v2_job to GA (#​19359)
• compute: added boot_disk.interface field to google_compute_instance resource (#​19319)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​19320)
• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​19312)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​19312)
• container: added support for in-place updates for google_compute_node_pool.node_config.gcfs_config and google_container_cluster.node_config.gcfs_cluster and google_container_cluster.node_pool.node_config.gcfs_cluster (#​19365)
• container: promoted the additive_vpc_scope_dns_domain field on the google_container_cluster resource to GA (#​19313)
• iambeta: added x509 field to google_iam_workload_identity_pool_provider resource (#​19375)
• networkconnectivity: added include_export_ranges to google_network_connectivity_spoke (#​19346)
• pubsub: added cloud_storage_config.max_messages and cloud_storage_config.avro_config.use_topic_schema fields to google_pubsub_subscription resource (#​19338)
• redis: added the maintenance_policy field to the google_redis_cluster resource (#​19341)
• resourcemanager: added tags field to google_project to allow setting tags for projects at creation time (#​19351)
• securitycenter: added support for empty streaming_config.filter values in google_scc_notification_config resources (#​19369)

BUG FIXES:

• compute: fixed google_compute_interconnect to support correct available_features option of IF_MACSEC (#​19330)
• compute: fixed a bug where advertised_route_priority was accidentally set to 0 during updates in google_compute_router_peer (#​19366)
• compute: fixed a permadiff caused by setting start_time in an incorrect H:mm format in google_compute_resource_policies resources (#​19297)
• compute: fixed network_interface.subnetwork_project validation to match with the project in network_interface.subnetwork field when network_interface.subnetwork has full self_link in google_compute_instance resource (#​19348)
• container: removed unnecessary force replacement in node pool gcfs_config (#​19365
• kms: updated the google_kms_autokey_config resource's folder field to accept values that are either full resource names (folders/{folder_id}) or just the folder id ({folder_id} only) (#​19364))
• storage: added retry support for 429 errors in google_storage_bucket resource (#​19353)

v6.1.0

Compare Source

FEATURES:

• New Data Source: google_kms_crypto_key_latest_version (#​19249)
• New Data Source: google_kms_crypto_key_versions (#​19241)

IMPROVEMENTS:

• databasemigrationservice: added support in google_database_migration_service_connection_profile for creating DMS connection profiles that link to existing Cloud SQL instances/AlloyDB clusters. ([#​19291](https://redirect.gi

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun