Skip to content

chore(deps): update terraform - #6291

Merged
jess-lowe merged 1 commit into
google:masterfrom
renovate-bot:renovate/terraform
Nov 4, 2026
Merged

chore(deps): update terraform#6291
jess-lowe merged 1 commit into
google:masterfrom
renovate-bot:renovate/terraform

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Nov 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
gcr.io/endpoints-release/endpoints-runtime-serverless minor 2.56.1 → 2.57.1
google (source) required_provider minor ~> 8.7.0 → ~> 8.9.0 8.10.0
google-beta (source) required_provider minor ~> 8.7.0 → ~> 8.9.0 8.10.0

Release Notes

hashicorp/terraform-provider-google (google)

v8.9.0

Compare Source

NOTES:

  • compute: updated google_compute_disk, google_compute_region_disk, and google_compute_snapshot to fail at plan time instead of recreating the resource when removing the KMS key, or changing it while kms_key_service_account is set (#​30059)

DEPRECATIONS:

  • container: deprecated addons_config.parallelstore_csi_driver_config on google_container_cluster. Use addons_config.lustre_csi_driver_config instead (#​30328)
  • container: deprecated remove_default_node_pool on google_container_cluster in favor of omitting initial_node_count and node_config (or setting initial_node_count = 0). When this is set to true and the default node pool was not created, this will do a noop. (#​30375)
  • parallelstore: deprecated google_parallelstore_instance. Use google_lustre_instance instead (#​30328)

FEATURES:

  • New Data Source: google_agent_identity_auth_provider_iam_policy (#​30327)
  • New Resource: google_agent_identity_auth_provider_iam_binding (#​30327)
  • New Resource: google_agent_identity_auth_provider_iam_member (#​30327)
  • New Resource: google_agent_identity_auth_provider_iam_policy (#​30327)
  • New Resource: google_bigtable_memory_layer (#​30314)
  • New Resource: google_dataflow_flex_template_job (#​30318)
  • New Resource: google_network_services_service_lb_policies (#​30223)
  • New Resource: google_resource_manager_boundary (#​30257)
  • New Resource: google_resource_manager_boundary_config (#​30257)
  • New Resource: google_vertex_ai_custom_job (#​30220)
  • New Resource: google_vertex_ai_pipeline_job (#​30201)
  • New Resource: google_vertex_ai_rag_file (#​30272)

IMPROVEMENTS:

  • agenticapplications: added artifacts_config.audit_trail_export_options field to google_agentic_applications_analyst_agent_persona resource (#​30227)
  • bigqueryconnection: added salesforce_data_cloud field to google_bigquery_connection resource (#​30356)
  • bigqueryreservation: added scheduling_policy field to google_bigquery_reservation and google_bigquery_reservation_assignment resources (#​30065)
  • bigtable: added standard_isolation.memory_config field to google_bigtable_app_profile resource (#​30368)
  • cloudbuild: added worker_config.worker_release field to google_cloudbuild_worker_pool resource (#​30315)
  • cloudbuild: increased default create, update, and delete timeouts for google_cloudbuild_worker_pool from 20 minutes to 120 minutes (#​30079)
  • colab: added workbench_runtime.custom_container_image and kernel_name fields to google_colab_notebook_execution resource (#​30219)
  • compute: added address_id attribute for google_compute_address data source (#​30316)
  • compute: added FORCE deletion_policy support to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#​30058)
  • compute: added IDPF and SUSPEND_SAFE_FPR to guest_os_features.type in google_compute_region_disk and SUSPEND_SAFE_FPR in google_compute_image (#​30047)
  • compute: added ipv6_address field to google_compute_network_endpoint (#​30317)
  • compute: added ipv6_address field to google_compute_network_endpoints (#​30371)
  • compute: added params.resource_manager_tags field to google_compute_network_edge_security_service resource (#​30218)
  • compute: added in-place updates when adding disk_encryption_key.kms_key_self_link to google_compute_disk, disk_encryption_key.kms_key_name to google_compute_region_disk, and snapshot_encryption_key.kms_key_self_link to google_compute_snapshot when the resource has no key (#​30059)
  • compute: added server generated id as firewall_id to google_compute_firewall (#​30367)
  • compute: added server generated id as router_id to google_compute_router (#​30367)
  • compute: added server generated id as service_attachment_id to google_compute_service_attachment (#​30367)
  • compute: allowed updating provisioned_iops and provisioned_throughput in place on google_compute_instance hyperdisk boot disks instead of recreating the instance (#​30334)
  • compute: promoted instance_flexibility_policy.instance_selections.min_cpu_platform and instance_flexibility_policy.instance_selections.disks to GA in google_compute_region_instance_group_manager (#​30162)
  • compute: promoted mirror_percent in request_mirror_policy to GA for google_compute_url_map and google_compute_region_url_map (#​30224)
  • container: added default_image_type and valid_image_types fields to google_container_engine_versions data source (#​30243)
  • container: added support for SHORT_LIVED value to node_pool.upgrade_settings.strategy in google_container_cluster and upgrade_settings.strategy in google_container_node_pool (#​30322)
  • container: promoted schedule_upgrade_config to GA in google_container_cluster (#​30254)
  • container: updated google_container_cluster to support creating clusters without a default node pool when initial_node_count and node_config are omitted (or initial_node_count is set to 0). When remove_default_node_pool = true and the default node pool was not created, remove_default_node_pool will do a noop. (#​30375)
  • container: updated initial_node_count on google_container_cluster so it can be removed from config or set to null without creating a diff while still respecting 0 when set in config (#​30375)
  • dataproc: added cluster_config.master_flexible_config, cluster_config.worker_flexible_config, and cluster_config.secondary_worker_flexible_config fields to google_dataproc_cluster resource (#​30372)
  • discoveryengine: added model_configs field to google_discovery_engine_search_engine resource (#​30319)
  • discoveryengine: fixed google_discovery_engine_target_site operations by increasing timeout to 24hrs (#​30246)
  • dlp: added FILE_STORE_PROFILE as an accepted detail_of_message value in google_data_loss_prevention_discovery_config (#​30161)
  • geminidataanalytics: added datasource_references.bq.property_graph_references, datasource_references.bq.table_references.schema, datasource_references.looker.explore_references, datasource_references.studio.studio_references, example_queries.parameters, looker_golden_queries, options.model, and user_functions.bq_routines fields to published_context and staging_context in google_gemini_data_analytics_data_agent resource (#​30320)
  • networksecurity: promoted wildfire_analysis_profile field to GA on google_network_security_security_profile_group resource (#​30198)
  • networksecurity: promoted wildfire_analysis_profile to GA on google_network_security_security_profile resource (#​30198)
  • networksecurity: promoted wildfire_settings and endpoint_settings.content_cloud_region, endpoint_settings.http_partial_response_blocked fields to GA on google_network_security_firewall_endpoint resource (#​30198)
  • networkservices: increased default create, update, and delete timeouts from 20m to 30m for google_network_services_multicast_consumer_association, google_network_services_multicast_domain, google_network_services_multicast_domain_activation, google_network_services_multicast_domain_group, google_network_services_multicast_group_consumer_activation, google_network_services_multicast_group_producer_activation, google_network_services_multicast_group_range, google_network_services_multicast_group_range_activation, and google_network_services_multicast_producer_association (#​30066)
  • oracledatabase: added in-place update support for labels on google_oracle_database_cloud_exadata_infrastructure, google_oracle_database_cloud_vm_cluster, google_oracle_database_exascale_db_storage_vault, google_oracle_database_db_system, google_oracle_database_odb_subnet, google_oracle_database_goldengate_deployment, google_oracle_database_goldengate_connection, google_oracle_database_goldengate_connection_assignment and google_oracle_database_autonomous_database (#​30213)
  • oracledatabase: added support for setting properties.scan_listener_port_tcp and properties.scan_listener_port_tcp_ssl on google_oracle_database_cloud_vm_cluster creation (#​30202)
  • recaptchaenterprise: added express_settings and universal_settings fields to google_recaptcha_enterprise_key resource (#​30164)
  • vertexai: added metadata.config.algorithm_config.tree_ah_config.fraction_leaf_nodes_to_search field to google_vertex_ai_index resource (#​30323)

BUG FIXES:

  • accesscontextmanager: added plan-time format validation and fixed a crash when perimeter_name, perimeter, access_level, egress_policy_name, or ingress_policy_name is not in the expected accessPolicies/{policy}/... format in google_access_context_manager_access_level_condition, google_access_context_manager_egress_policy, google_access_context_manager_ingress_policy, google_access_context_manager_service_perimeter_dry_run_egress_policy, google_access_context_manager_service_perimeter_dry_run_ingress_policy, google_access_context_manager_service_perimeter_dry_run_resource, google_access_context_manager_service_perimeter_egress_policy, google_access_context_manager_service_perimeter_ingress_policy, and google_access_context_manager_service_perimeter_resource (#​30332)
  • agenticapplications: fixed a bug where mcp_data_sources.0.api_key and mcp_data_sources.0.client_secret were attempting to read from the API in google_agentic_applications_analyst_agent_persona (#​30042)
  • alloydb: fixed an issue where google_alloydb_instance operations could fail with a 400 or 409 error when the instance is temporarily undergoing another update operation or unable to queue the operation (#​30265)
  • apigee: fixed a crash when importing google_apigee_endpoint_attachment (#​30330)
  • ces: fixed an eventual consistency error when deleting google_ces_app_version immediately after google_ces_deployment (#​30331)
  • cloudrun: fixed Provider produced inconsistent final plan when metadata.0.labels or metadata.0.annotations contains unknown values in google_cloud_run_service and google_cloud_run_domain_mapping (#​30270)
  • colab: fixed google_colab_runtime and google_colab_notebook_execution failures when the subnetwork is not ready during operation execution (#​30269)
  • compute: fixed google_compute_instance boot disk updates not setting the user project header correctly when user_project_override is enabled (#​30334)
  • compute: fixed google_compute_reservation, data.google_compute_reservation_block, and data.google_compute_reservation_sub_block to respect compute_custom_endpoint when querying reservation blocks and sub-blocks (#​30045)
  • compute: fixed resourceNotReady errors across Compute Engine resources by retrying HTTP 400 resourceNotReady responses globally (#​30215)
  • compute: fixed a bug where google_compute_instance_group_manager ignored the PREVENT deletion_policy (#​30058)
  • compute: increased default create, update, and delete timeouts from 20m to 30m on google_compute_snapshot_settings (#​30072)
  • compute: updated google_compute_disk, google_compute_region_disk, and google_compute_snapshot to reject a KMS key with a /cryptoKeyVersions/ suffix at plan time instead of recreating the resource on every apply (#​30046)
  • container: fixed a crash when empty configuration blocks such as node_config {} are specified on google_container_cluster or google_container_node_pool, or blocks with zero values are specified like authenticator_groups_config {} (#​30252)
  • dataproc: fixed google_dataproc_cluster creation failures when the subnetwork is not ready during cluster provisioning (#​30269)
  • dataproc: fixed creation and update failures when a referenced Compute Engine resource is not ready yet (#​30312)
  • datastream: fixed a permadiff on mongodb_profile.secret_manager_stored_password and mongodb_profile.password in google_datastream_connection_profile (#​30044)
  • firebaseapphosting: fixed spurious diff on google_firebase_app_hosting_domain create by polling until configuration is materialized (#​30225)
  • gkehub: fixed an issue that prevented spec.workloadidentity and spec.fleetobservability from being set to empty blocks in google_gke_hub_feature (#​30244)
  • healthcare: fixed an issue where google_healthcare_dataset creation did not wait for the create long-running operation and could fail after 5 minutes with Root object was present, but now absent (#​30199)
  • networksecurity: increased default create, update, and delete timeouts from 20m to 60m on google_network_security_firewall_endpoint_association (#​30071)
  • networkservices: increased default create, update, and delete timeouts from 20m to 60m on google_network_services_multicast_domain_activation (#​30070)
  • provider: fixed a bug where google_apikeys_key, google_assured_workloads_workload, google_cloudbuild_worker_pool, google_clouddeploy_delivery_pipeline, google_clouddeploy_target, google_container_aws_cluster, google_container_aws_node_pool, google_container_azure_client, google_container_azure_cluster, google_container_azure_node_pool, google_dataplex_asset, google_dataplex_lake, google_dataplex_zone, google_dataproc_workflow_template, google_firebaserules_release, google_firebaserules_ruleset, google_gke_hub_feature_membership, and google_recaptcha_enterprise_key were removed from state on read errors (#​30258)
  • provider: fixed a bug where google_apikeys_key, google_assured_workloads_workload, google_cloudbuild_worker_pool, google_clouddeploy_delivery_pipeline, google_clouddeploy_target, google_container_aws_cluster, google_container_aws_node_pool, google_container_azure_client, google_container_azure_cluster, google_container_azure_node_pool, google_dataplex_asset, google_dataplex_lake, google_dataplex_zone, google_dataproc_workflow_template, google_firebaserules_release, google_firebaserules_ruleset, google_gke_hub_feature_membership, and google_recaptcha_enterprise_key were removed from state when an update or delete failed (#​30156)
  • provider: fixed a bug where google_compute_firewall_policy_association, google_compute_firewall_policy_rule, google_compute_organization_security_policy_association, google_compute_organization_security_policy_rule, google_endpoints_service, google_logging_billing_account_bucket_config, google_logging_folder_bucket_config, google_logging_organization_bucket_config, google_logging_project_bucket_config, and google_service_networking_vpc_service_controls were removed from state when read, update, or delete operations failed (#​30261)
  • provider: fixed an unbound retry in IAM writes when hitting API quotas (429 error). Now, IAM read-modify-writes will exponentially backoff, and terminate (#​30057)
  • provider: removed an extra sleep on IAM writes while several concurrent changes are happening, backoff and terminate for a longer window (90s + grace period) (#​30057)
  • sql: fixed issue where creating SQL Server Entra ID users (google_sql_user with type = "ENTRAID_USER") failed state refresh due to username domain truncation (#​30229)
  • vertexai: fixed an issue where GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY environment variable in google_vertex_ai_reasoning_engine was ignored in state when explicitly configured (#​30221)
  • workbench: fixed google_workbench_instance creation and update failures when the subnetwork is not ready during operation execution (#​30269)

v8.8.1

Compare Source

NOTES:

v8.8.0

Compare Source

FEATURES:

  • New Data Source: google_cloud_run_v2_instance_iam_policy (#​29991)
  • New Resource: google_cloud_run_v2_instance (#​29991)
  • New Resource: google_cloud_run_v2_instance_iam_binding (#​29991)
  • New Resource: google_cloud_run_v2_instance_iam_member (#​29991)
  • New Resource: google_cloud_run_v2_instance_iam_policy (#​29991)
  • New Resource: google_dns_outbound_endpoint (#​30018)
  • New Resource: google_document_ai_schema_version (#​29915)

IMPROVEMENTS:

  • accesscontextmanager: added scoped_access_settings.scope.client_scope.restricted_project and principal.federated_principal fields to google_access_context_manager_gcp_user_access_binding resource (#​29964)
  • ces: added data_store_tool.modality_configs.rewriter_config.model_settings.thinking_level and data_store_tool.modality_configs.summarization_config.model_settings.thinking_level fields to google_ces_tool resource (#​29974)
  • ces: added data_store_tool.modality_configs.snippets_config.max_snippets field to google_ces_tool resource (#​29988)
  • ces: added llm_policy.model_settings.thinking_level and llm_prompt_security.custom_policy.model_settings.thinking_level fields to google_ces_guardrail resource (#​29953)
  • ces: added model_settings.thinking_level field to google_ces_app resource (#​29949)
  • ces: added remote_agent_tool.input_variable_mapping, remote_agent_tool.output_variable_mapping, and remote_agent_tool.stateful_agent fields to google_ces_tool resource (#​29966)
  • cloudsecuritycompliance: added update support for google_cloud_security_compliance_framework_deployment (#​29919)
  • compute: promoted preconfigured_waf_config.exclusion.request_body field to GA for google_compute_security_policy_rule and google_compute_region_security_policy_rule, rule.preconfigured_waf_config.exclusion.request_body for google_compute_security_policy, and rules.preconfigured_waf_config.exclusion.request_body for google_compute_region_security_policy (#​29920)
  • container: added MICROVM support to node_config.sandbox_config.type in google_container_cluster and google_container_node_pool (#​29985)
  • container: promoted managed_opentelemetry_config field on google_container_cluster to GA (#​29962)
  • dialogflow: added stt_config.use_gemini_asr and stt_config.gemini_asr_config fields to google_dialogflow_conversation_profile resource (#​29950)
  • dns: added alternative_name_server_config.outbound_endpoints field to google_dns_policy resource (#​30023)
  • dns: added forwarding_config.outbound_endpoints field to google_dns_managed_zone resource (#​30023)
  • gemini: added gemini_enterprise_project and release_channel fields to google_gemini_gemini_gcp_enablement_setting resource (#​29986)
  • managedkafka: increased the update timeout of google_managed_kafka_cluster to 150 minutes (#​29997)
  • memorystore: added TOKEN_AUTH value and update support for authorization_mode on google_memorystore_instance resource (#​30014)
  • networkconnectivity: promoted hub, psc_routing_enabled, and auto_accept fields on google_network_connectivity_transport resource to GA (#​29968)
  • privateca: added issuance_policy.allow_requester_specified_not_before_time field to google_privateca_ca_pool resource (#​29998)
  • privateca: added requested_not_before_time field to google_privateca_certificate resource (#​29998)
  • pubsub: added bigtable_config field to google_pubsub_subscription resource (#​30011)
  • redis: added AUTH_MODE_TOKEN_AUTH value and update support for authorization_mode on google_redis_cluster resource (#​30014)
  • securitycenter: added deletion_notifications_enabled field to google_scc_folder_notification_config resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_folder_scc_big_query_export resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_notification_config resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_organization_scc_big_query_export resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_project_notification_config resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_project_scc_big_query_export resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_folder_notification_config resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_folder_scc_big_query_export resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_organization_notification_config resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_organization_scc_big_query_export resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_organization_scc_big_query_exports resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_project_notification_config resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_project_scc_big_query_export resource (#​29970)
  • vectorsearch: added skip_wait field to google_vector_search_index resource (#​29994)
  • vertexai: added resource_runtime_spec.ray_spec field to google_vertex_ai_persistent_resource resource (#​30020)
  • vertexai: added support for updating resource_pools.replica_count in-place on google_vertex_ai_persistent_resource resource (#​30020)

BUG FIXES:

  • compute: fixed an issue causing google_compute_region_backend_service update to fail when params.resource_manager_tags is set (#​29967)
  • compute: fixed an issue where setting security_policy on google_compute_region_backend_service failed during creation when protocol was set to UDP (#​29972)
  • container: fixed a permadiff on dns_config.cluster_dns in google_container_cluster when omitted, set to null, or set to PROVIDER_UNSPECIFIED (#​30021)
  • container: fixed permadiff and update error on google_container_cluster when managed_opentelemetry_config is empty or managed_opentelemetry_config.scope is omitted (#​29962)
  • discoveryengine: fixed json_schema forcing resource replacement on every change in google_discovery_engine_schema (#​29952)
  • memorystore: fixed google_memorystore_instance update failures when multiple fields (such as node_type and engine_version) are changed in the same apply (#​29989)
hashicorp/terraform-provider-google-beta (google-beta)

v8.9.0

Compare Source

NOTES:

  • compute: updated google_compute_disk, google_compute_region_disk, and google_compute_snapshot to fail at plan time instead of recreating the resource when removing the KMS key, or changing it while kms_key_service_account is set (#​13405)

DEPRECATIONS:

  • appengine: deprecated vpc_access.egress_setting in google_app_engine_standard_app_version; use vpc_access.vpc_egress instead (#​13483)
  • container: deprecated addons_config.parallelstore_csi_driver_config on google_container_cluster. Use addons_config.lustre_csi_driver_config instead (#​13523)
  • container: deprecated remove_default_node_pool on google_container_cluster in favor of omitting initial_node_count and node_config (or setting initial_node_count = 0). When this is set to true and the default node pool was not created, this will do a noop. (#​13547)
  • parallelstore: deprecated google_parallelstore_instance. Use google_lustre_instance instead (#​13523)

FEATURES:

  • New Data Source: google_agent_identity_auth_provider_iam_policy (#​13522)
  • New Resource: google_agent_identity_auth_provider_iam_binding (#​13522)
  • New Resource: google_agent_identity_auth_provider_iam_member (#​13522)
  • New Resource: google_agent_identity_auth_provider_iam_policy (#​13522)
  • New Resource: google_bigtable_memory_layer (#​13509)
  • New Resource: google_network_services_cdn_edge_extension (#​13400)
  • New Resource: google_network_services_telemetry_policy (#​13521)
  • New Resource: google_resource_manager_boundary (#​13491)
  • New Resource: google_resource_manager_boundary_config (#​13491)
  • New Resource: google_vertex_ai_custom_job (#​13459)
  • New Resource: google_vertex_ai_pipeline_job (#​13440)
  • New Resource: google_vertex_ai_rag_file (#​13506)

IMPROVEMENTS:

  • agenticapplications: added artifacts_config.audit_trail_export_options field to google_agentic_applications_analyst_agent_persona resource (#​13466)
  • appengine: added vpc_access.vpc_egress field to google_app_engine_standard_app_version (#​13483)
  • bigqueryconnection: added salesforce_data_cloud field to google_bigquery_connection resource (#​13530)
  • bigqueryreservation: added scheduling_policy field to google_bigquery_reservation and google_bigquery_reservation_assignment resources (#​13409)
  • bigtable: added standard_isolation.memory_config field to google_bigtable_app_profile resource (#​13540)
  • cloudbuild: added worker_config.worker_release field to google_cloudbuild_worker_pool resource (#​13510)
  • cloudbuild: increased default create, update, and delete timeouts for google_cloudbuild_worker_pool from 20 minutes to 120 minutes (#​13423)
  • colab: added workbench_runtime.custom_container_image and kernel_name fields to google_colab_notebook_execution resource (#​13458)
  • compute: added address_id attribute for google_compute_address data source (#​13511)
  • compute: added CUSTOM_HARDWARE_LINK as a supported value for purpose in google_compute_subnetwork resource (#​13548)
  • compute: added FORCE deletion_policy support to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#​13403)
  • compute: added IDPF and SUSPEND_SAFE_FPR to guest_os_features.type in google_compute_region_disk and SUSPEND_SAFE_FPR in google_compute_image (#​13392)
  • compute: added ipv6_address field to google_compute_network_endpoint (#​13512)
  • compute: added ipv6_address field to google_compute_network_endpoints (#​13543)
  • compute: added params.resource_manager_tags field to google_compute_network_edge_security_service resource (#​13457)
  • compute: added in-place updates when adding disk_encryption_key.kms_key_self_link to google_compute_disk, disk_encryption_key.kms_key_name to google_compute_region_disk, and snapshot_encryption_key.kms_key_self_link to google_compute_snapshot when the resource has no key (#​13405)
  • compute: added server generated id as firewall_id to google_compute_firewall (#​13539)
  • compute: added server generated id as router_id to google_compute_router (#​13539)
  • compute: added server generated id as service_attachment_id to google_compute_service_attachment (#​13539)
  • compute: allowed updating provisioned_iops and provisioned_throughput in place on google_compute_instance hyperdisk boot disks instead of recreating the instance (#​13529)
  • container: added default_image_type and valid_image_types fields to google_container_engine_versions data source (#​13476)
  • container: added support for SHORT_LIVED value to node_pool.upgrade_settings.strategy in google_container_cluster and upgrade_settings.strategy in google_container_node_pool (#​13517)
  • container: updated google_container_cluster to support creating clusters without a default node pool when initial_node_count and node_config are omitted (or initial_node_count is set to 0). When remove_default_node_pool = true and the default node pool was not created, remove_default_node_pool will do a noop. (#​13547)
  • container: updated initial_node_count on google_container_cluster so it can be removed from config or set to null without creating a diff while still respecting 0 when set in config (#​13547)
  • dataproc: added cluster_config.master_flexible_config, cluster_config.worker_flexible_config, and cluster_config.secondary_worker_flexible_config fields to google_dataproc_cluster resource (#​13544)
  • discoveryengine: added model_configs field to google_discovery_engine_search_engine resource (#​13514)
  • discoveryengine: fixed google_discovery_engine_target_site operations by increasing timeout to 24hrs (#​13479)
  • dlp: added FILE_STORE_PROFILE as an accepted detail_of_message value in google_data_loss_prevention_discovery_config (#​13431)
  • geminidataanalytics: added datasource_references.bq.property_graph_references, datasource_references.bq.table_references.schema, datasource_references.looker.explore_references, datasource_references.studio.studio_references, example_queries.parameters, looker_golden_queries, options.model, and user_functions.bq_routines fields to published_context and staging_context in google_gemini_data_analytics_data_agent resource (#​13515)
  • hypercomputecluster: added compute_resources.config.new_flex_start_instances.network_tags, compute_resources.config.new_on_demand_instances.network_tags, compute_resources.config.new_reserved_instances.network_tags, compute_resources.config.new_spot_instances.network_tags, orchestrator.slurm.login_nodes.network_tags, and storage_resources.config.existing_nfs fields to google_hypercomputecluster_cluster resource (#​13478)
  • networkservices: increased default create, update, and delete timeouts from 20m to 30m for google_network_services_multicast_consumer_association, google_network_services_multicast_domain, google_network_services_multicast_domain_activation, google_network_services_multicast_domain_group, google_network_services_multicast_group_consumer_activation, google_network_services_multicast_group_producer_activation, google_network_services_multicast_group_range, google_network_services_multicast_group_range_activation, and google_network_services_multicast_producer_association (#​13410)
  • oracledatabase: added in-place update support for labels on google_oracle_database_cloud_exadata_infrastructure, google_oracle_database_cloud_vm_cluster, google_oracle_database_exascale_db_storage_vault, google_oracle_database_db_system, google_oracle_database_odb_subnet, google_oracle_database_goldengate_deployment, google_oracle_database_goldengate_connection, google_oracle_database_goldengate_connection_assignment and google_oracle_database_autonomous_database (#​13452)
  • oracledatabase: added support for setting properties.scan_listener_port_tcp and properties.scan_listener_port_tcp_ssl on google_oracle_database_cloud_vm_cluster creation (#​13441)
  • recaptchaenterprise: added express_settings and universal_settings fields to google_recaptcha_enterprise_key resource (#​13433)
  • vertexai: added metadata.config.algorithm_config.tree_ah_config.fraction_leaf_nodes_to_search field to google_vertex_ai_index resource (#​13518)
  • workstations: added host.gce_instance.boost_configs.enable_automatic_failover field to google_workstations_workstation_config resource (#​13498)

BUG FIXES:

  • accesscontextmanager: added plan-time format validation and fixed a crash when perimeter_name, perimeter, access_level, egress_policy_name, or ingress_policy_name is not in the expected accessPolicies/{policy}/... format in google_access_context_manager_access_level_condition, google_access_context_manager_egress_policy, google_access_context_manager_ingress_policy, google_access_context_manager_service_perimeter_dry_run_egress_policy, google_access_context_manager_service_perimeter_dry_run_ingress_policy, google_access_context_manager_service_perimeter_dry_run_resource, google_access_context_manager_service_perimeter_egress_policy, google_access_context_manager_service_perimeter_ingress_policy, and google_access_context_manager_service_perimeter_resource (#​13527)
  • agenticapplications: fixed a bug where mcp_data_sources.0.api_key and mcp_data_sources.0.client_secret were attempting to read from the API in google_agentic_applications_analyst_agent_persona (#​13387)
  • alloydb: fixed an issue where google_alloydb_instance operations could fail with a 400 or 409 error when the instance is temporarily undergoing another update operation or unable to queue the operation (#​13499)
  • apigee: fixed a crash when importing google_apigee_endpoint_attachment (#​13525)
  • appengine: fixed diff on API-provided values for vpc_access.network_interfaces.network and vpc_access.network_interfaces.subnetwork in google_app_engine_standard_app_version (#​13483)
  • ces: fixed an eventual consistency error when deleting google_ces_app_version immediately after google_ces_deployment (#​13526)
  • cloudrun: fixed Provider produced inconsistent final plan when metadata.0.labels or metadata.0.annotations contains unknown values in google_cloud_run_service and google_cloud_run_domain_mapping (#​13504)
  • colab: fixed google_colab_runtime and google_colab_notebook_execution failures when the subnetwork is not ready during operation execution (#​13503)
  • compute: fixed google_compute_instance boot disk updates not setting the user project header correctly when user_project_override is enabled (#​13529)
  • compute: fixed google_compute_reservation, data.google_compute_reservation_block, and data.google_compute_reservation_sub_block to respect compute_custom_endpoint when querying reservation blocks and sub-blocks (#​13390)
  • compute: fixed resourceNotReady errors across Compute Engine resources by retrying HTTP 400 resourceNotReady responses globally (#​13454)
  • compute: fixed a bug where google_compute_instance_group_manager ignored the PREVENT deletion_policy (#​13403)
  • compute: increased default create, update, and delete timeouts from 20m to 30m on google_compute_snapshot_settings (#​13415)
  • compute: updated google_compute_disk, google_compute_region_disk, and google_compute_snapshot to reject a KMS key with a /cryptoKeyVersions/ suffix at plan time instead of recreating the resource on every apply (#​13391)
  • container: fixed a crash when empty configuration blocks such as node_config {} are specified on google_container_cluster or google_container_node_pool, or blocks with zero values are specified like authenticator_groups_config {} (#​13485)
  • dataproc: fixed google_dataproc_cluster creation failures when the subnetwork is not ready during cluster provisioning (#​13503)
  • dataproc: fixed creation and update failures when a referenced Compute Engine resource is not ready yet (#​13507)
  • datastream: fixed a permadiff on mongodb_profile.secret_manager_stored_password and mongodb_profile.password in google_datastream_connection_profile (#​13389)
  • firebaseapphosting: fixed spurious diff on google_firebase_app_hosting_domain create by polling until configuration is materialized (#​13464)
  • gkehub: fixed an issue that prevented spec.workloadidentity and spec.fleetobservability from being set to empty blocks in google_gke_hub_feature (#​13477)
  • healthcare: fixed an issue where google_healthcare_dataset creation did not wait for the create long-running operation and could fail after 5 minutes with Root object was present, but now absent (#​13438)
  • networksecurity: increased default create, update, and delete timeouts from 20m to 60m on google_network_security_firewall_endpoint_association (#​13414)
  • networkservices: increased default create, update, and delete timeouts from 20m to 60m on google_network_services_multicast_domain_activation (#​13413)
  • provider: fixed a bug where google_apikeys_key, google_assured_workloads_workload, google_cloudbuild_worker_pool, google_clouddeploy_delivery_pipeline, google_clouddeploy_target, google_container_aws_cluster, google_container_aws_node_pool, google_container_azure_client, google_container_azure_cluster, google_container_azure_node_pool, google_dataplex_asset, google_dataplex_lake, google_dataplex_zone, google_dataproc_workflow_template, google_firebaserules_release, google_firebaserules_ruleset, google_gke_hub_feature_membership, and google_recaptcha_enterprise_key were removed from state on read errors (#​13492)
  • provider: fixed a bug where google_apikeys_key, google_assured_workloads_workload, google_cloudbuild_worker_pool, google_clouddeploy_delivery_pipeline, google_clouddeploy_target, google_container_aws_cluster, google_container_aws_node_pool, google_container_azure_client, google_container_azure_cluster, google_container_azure_node_pool, google_dataplex_asset, google_dataplex_lake, google_dataplex_zone, google_dataproc_workflow_template, google_firebaserules_release, google_firebaserules_ruleset, google_gke_hub_feature_membership, and google_recaptcha_enterprise_key were removed from state when an update or delete failed (#​13426)
  • provider: fixed a bug where google_compute_firewall_policy_association, `google_compute_firewall_po

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on wednesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Nov 3, 2026
@jess-lowe
jess-lowe merged commit b8ec032 into google:master Nov 4, 2026
25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jess-lowe jess-lowe jess-lowe approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @jess-lowe