v3.74.0

FEATURES:

• New Resource: google_app_engine_service_network_settings (#9414)
• New Resource: google_vertex_ai_dataset (#9411)
• New Resource: google_cloudbuild_worker_pool (#9417)

IMPROVEMENTS:

• bigtable: added cluster.kms_key_name field to google_bigtable_instance (#9393)
• compute: promoted all cdn_policy sub fields in google_compute_backend_service, google_compute_region_backend_service and google_compute_backend_bucket to GA (#9432)
• secretmanager: added ttl, expire_time, topics and rotation fields to google_secret_manager_secret (#9398)

BUG FIXES:

• container: allowed setting node_config.service_account at the same time as enable_autopilot = true for google_container_cluster (#9399)
• container: fixed issue where creating a node pool with a name that already exists would import that resource. google_container_node_pool (#9424)
• dataproc: fixed crash when creating google_dataproc_workflow_template with secondary_worker_config empty except for num_instances = 0 (#9381)
• filestore: fixed an issue in google_filestore_instance where creating two instances simultaneously resulted in an error. (#9396)
• sql: added support for binary_logging on replica instances for googe_sql_database_instance (#9428)

v3.73.0

FEATURES:

• New Resource: google_dialogflow_cx_agent (#9338)

IMPROVEMENTS:

• provider: added support for mtls authentication (#9382)
• compute: added advanced_machine_features fields to google_compute_instance_template (#9363)
• compute: promoted custom_response_headers to GA for google_compute_backend_service and google_compute_backend_bucket (#9374)
• redis: allowed redis_version to be upgraded on google_redis_instance (#9378)
• redis: promoted fields transit_encryption_mode and server_ca_certs to GA on google_redis_instance (#9378)

BUG FIXES:

• apigee: added SLASH_23 support for peering_cidr_range on google_apigee_instance (#9343)
• cloudrun: fixed a bug where plan would should a diff on google_cloud_run_service if the order of the template.spec.containers.env list was re-ordered outside of terraform. (#9340)
• container: added user_project_override support to the ContainerOperationWaiter used by google_container_cluster (#9379)

3.72.0

IMPROVEMENTS:

• compute: added support for IPsec-encrypted Interconnect in the form of new fields on google_compute_router, google_compute_ha_vpn_gateway, google_compute_interconnect_attachment and google_compute_address(#9288)
• container: Allowed specifying a cluster id field for google_container_node_pool.cluster to ensure that a node pool is recreated if the associated cluster is recreated. (#9309)
• storagetransfer: added support for azure_blob_storage_data_source to google_storage_transfer_job (#9311)

BUG FIXES:

• bigquery: Fixed google_bigquery_table.schema handling of policyTags (#9302)
• bigtable: fixed bug that would error if creating multiple bigtable gc policies at the same time (#9305)
• compute: fixed bug where encryption showed a perma-diff on resources created prior to the feature being released. (#9303)

v3.71.0

FEATURES:

• New Resource: google_dialogflow_fulfillment (#9253)

IMPROVEMENTS:

• compute: added reservation_affinity to google_compute_instance and google_compute_instance_template (#9256)
• compute: added support for wait_for_instances_status on google_compute_instance_group_manager and google_compute_region_instance_group_manager (#9231)
• compute: added support for output-only status field on google_compute_instance_group_manager and google_compute_region_instance_group_manager (#9231)
• compute: promoted log_config field of google_compute_health_check and google_compute_region_health_check to GA (#9274)
• compute: set the default value for log_config.enable on google_compute_region_health_check to avoid permanent diff on plan/apply. (#9274)

BUG FIXES:

• composer: fixed a check that did not allow for preview versions in google_composer_environment (#9255)
• storage: fixed error when matches_storage_class is set empty on google_storage_bucket (#9221)
• vpcaccess: fixed permadiff when max_throughput is not set on google_vpc_access_connector (#9282)

v3.70.0

IMPROVEMENTS:

• compute: added provisioned_iops to google_compute_disk (#9193)
• compute: promoted distribution_policy_target_shape field in google_compute_region_instance_group_manager to GA. (#9186)
• sql: added field disk_autoresize_limit to sql_database_instance (#9203)

BUG FIXES:

• cloudrun: fixed a bug where resources would return successfully due to responses based on a previous version of the resource (#9213)
• storage: fixed error when matches_storage_class is set empty on google_storage_bucket (#9221)

v3.69.0

IMPROVEMENTS:

• compute: added "description" field to "google_compute_resource_policy" resource (#9176)
• compute: added "instance_schedule_policy" field to "google_compute_resource_policy" resource (#9176)
• compute: promoted field autoscaling_policy.scaling_schedules on google_compute_autoscaler and google_compute_region_autoscaler to ga (#9165)
• compute: promoted autoscaling_policy.cpu_utilization.predictive_method on google_compute_autoscaler and google_compute_region_autoscaler to ga. (#9156)

BUG FIXES:

• cloudidentity: fixed recreation on the initial_group_config of google_cloud_identity_group (#9143)
• compute: added mutex in google_compute_metadata_item to reduce retries + quota errors (#9168)
• container: fixed bug where enable_shielded_nodes could not be false on resource google_container_cluster (#9131)

v3.68.0

FEATURES:

• New Resource: google_pubsub_schema (#9116)

IMPROVEMENTS:

• compute: added initial_size in resource google_compute_node_group to account for scenarios where size may change under the hood (#9078)
• compute: added support for setting kms_key_name on google_compute_machine_image (#9107)
• dataflow: enabled updates for google_dataflow_flex_template_job (#9123)

BUG FIXES:

• compute: fixed bug where, when an organization security policy association was removed outside of terraform, the next plan/apply would fail. (#9095)
• container: added validation to check that both node_version and remove_default_node_pool cannot be set on google_container_cluster (#9100)
• dns: suppressed spurious diffs due to case changes in DS records (#9099)

v3.67.0

FEATURES:

• New Resource: google_memcache_instance (#8982)

NOTES:

• all: changed default HTTP request timeout from 30 seconds to 120 seconds (#8966)
  DEPRECATIONS:
• compute: deprecated distribution_policy_target_shape in google_compute_region_instance_group_manager Use the google-beta provider to continue using this field (#8970)
• compute: deprecated min_ready_sec in google_compute_region_instance_group_manager & google_compute_instance_group_manager Use the google-beta provider to continue using this field (#8970)
• container: deprecated pod_security_policy_config field on resource google_container_cluster. Use the google-beta provider to continue using this field (#8970)

BREAKING CHANGES:

• bigquery: updating dataset_id or project_id in google_bigquery_dataset will now recreate the resource (#8973)

IMPROVEMENTS:

• accesscontextmanager: added support for require_verified_chrome_os in basic access levels. (#9071)
• billingbudget: added support for import of google_billing_budget (#8990)
• cloud_identity: added support for initial_group_config to the google_cloud_identity_group resource (#9035)
• cloudrun: added support to bind secrets from Secret Manager to environment variables or files to google_cloud_run_service (#9073)
• compute: added initial_size to account for scenarios where size may change under the hood in resource google_compute_node_group (#9078)
• healthcare: added support for stream_configs in google_healthcare_dicom_store (#8986)
• secretmanager: added support for setting a CMEK on google_secret_manager_secret (#9046)
• spanner: added force_destroy to google_spanner_instance to delete instances that have backups enabled. (#9076)
• spanner: added support for setting a CMEK on google_spanner_database (#8966)
• workflows: marked source_contents and service_account as updatable on google_workflows_workflow (#9018)

BUG FIXES:

• bigquery: fixed dataset_id to force new resource if name is changed. (#8973)
• cloudrun: fixed permadiff on google_cloud_run_domain_mapping.metadata.labels (#8971)
• composer: changed google_composer_environment.master_ipv4_cidr_block to draw default from the API (#9017)
• container: fixed container node pool not removed from the state when received 404 error on delete call for the resource google_container_node_pool (#9034)
• dns: fixed empty rrdatas list on google_dns_record_set for AAAA records (#9029)
• kms: fixed indirectly force replacement via skip_initial_version_creation on google_kms_crypto_key (#8988)
• logging: fixed metric_descriptor.labels can't be updated on 'google_logging_metric' (#9057)
• pubsub: fixed diff for minimum_backoff & maximum_backoff on google_pubsub_subscription (#9048)
• resourcemanager: fixed broken handling of IAM conditions for google_organization_iam_member, google_organization_iam_binding, and google_organization_iam_policy (#9047)
• serviceusage: added google_project_service.service validation to reject invalid service domains that don't contain a period (#8987)
• storage: fixed bug where role_entity user wouldn't update if the role changed. (#9008)

v3.66.1

BUG FIXES:

• compute: fixed bug where terraform would crash if updating from no service_account.scopes to more. (#9032)

v3.66.0

NOTES:

• all: changed default HTTP request timeout from 30 seconds to 120 seconds (#8966)

BREAKING CHANGES:

• datacatalog: updating parent in google_data_catalog_tag will now recreate the resource (#8964)

FEATURES:

• New Data Source: google_compute_ha_vpn_gateway (#8952)
• New Resource: google_dataproc_workflow_template (#8962)

IMPROVEMENTS:

• bigquery: Added BigTable source format in BigQuery table (#8923)
• cloudfunctions: removed bounds on the supported memory range in google_cloudfunctions_function.available_memory_mb (#8946)
• compute: marked scheduling.0.node_affinities as updatable in google_compute_instance (#8927)
• dataproc: added shielded_instance_config fields to google_dataproc_cluster (#8910)
• spanner: added support for setting a CMEK on google_spanner_database (#8966)

BUG FIXES:

• compute: fixed error when creating empty scopes on google_compute_instance (#8953)
• container: fixed a bug that allowed specifying node_config on google_container_cluster when autopilot is used (#8905)
• datacatalog: fixed an issue where parent in google_data_catalog_tag attempted to update the resource when change instead of recreating it (#8964)
• datacatalog: set default false for force_delete on google_data_catalog_tag_template (#8922)
• dns: added missing record types to google_dns_record_set resource (#8919)
• sql: set clone.point_in_time optional for google_sql_database_instance (#8965)