diff --git a/.secrets.baseline b/.secrets.baseline
index 434d3ddc..44be5965 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -3,7 +3,7 @@
     "files": "go.sum|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2023-06-03T04:36:46Z",
+  "generated_at": "2023-11-07T13:53:51Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
diff --git a/README.md b/README.md
index 91634a6d..e8b7fe5f 100644
--- a/README.md
+++ b/README.md
@@ -93,7 +93,7 @@ To attach access management tags to resources in this module, you need the follo
 | Name | Version |
 |------|---------|
 | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3.0, <1.6.0 |
-| <a name="requirement_ibm"></a> [ibm](#requirement\_ibm) | >= 1.56.0 |
+| <a name="requirement_ibm"></a> [ibm](#requirement\_ibm) | >= 1.58.0 |
 | <a name="requirement_time"></a> [time](#requirement\_time) | >= 0.9.1 |
 
 ### Modules
@@ -133,6 +133,7 @@ To attach access management tags to resources in this module, you need the follo
 | <a name="input_default_network_acl_name"></a> [default\_network\_acl\_name](#input\_default\_network\_acl\_name) | OPTIONAL - Name of the Default ACL. If null, a name will be automatically generated | `string` | `null` | no |
 | <a name="input_default_routing_table_name"></a> [default\_routing\_table\_name](#input\_default\_routing\_table\_name) | OPTIONAL - Name of the Default Routing Table. If null, a name will be automatically generated | `string` | `null` | no |
 | <a name="input_default_security_group_name"></a> [default\_security\_group\_name](#input\_default\_security\_group\_name) | OPTIONAL - Name of the Default Security Group. If null, a name will be automatically generated | `string` | `null` | no |
+| <a name="input_enable_hub"></a> [enable\_hub](#input\_enable\_hub) | Indicates whether this VPC is enabled as a DNS name resolution hub. | `bool` | `false` | no |
 | <a name="input_enable_vpc_flow_logs"></a> [enable\_vpc\_flow\_logs](#input\_enable\_vpc\_flow\_logs) | Flag to enable vpc flow logs. If true, flow log collector will be created | `bool` | `false` | no |
 | <a name="input_existing_cos_instance_guid"></a> [existing\_cos\_instance\_guid](#input\_existing\_cos\_instance\_guid) | GUID of the COS instance to create Flow log collector | `string` | `null` | no |
 | <a name="input_existing_storage_bucket_name"></a> [existing\_storage\_bucket\_name](#input\_existing\_storage\_bucket\_name) | Name of the COS bucket to collect VPC flow logs | `string` | `null` | no |
diff --git a/common-dev-assets b/common-dev-assets
index 505d8342..66ecde40 160000
--- a/common-dev-assets
+++ b/common-dev-assets
@@ -1 +1 @@
-Subproject commit 505d83425f29425fe832213f49bfe0a219ea0c42
+Subproject commit 66ecde4065be51ba0c1eb5dbfd0ef1f4fb152d9b
diff --git a/examples/basic/version.tf b/examples/basic/version.tf
index 3c75ec59..85f6fc87 100644
--- a/examples/basic/version.tf
+++ b/examples/basic/version.tf
@@ -4,7 +4,7 @@ terraform {
     # Pin to the lowest provider version of the range defined in the main module's version.tf to ensure lowest version still works
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.56.0"
+      version = "1.58.0"
     }
   }
 }
diff --git a/examples/default/version.tf b/examples/default/version.tf
index 3c75ec59..85f6fc87 100644
--- a/examples/default/version.tf
+++ b/examples/default/version.tf
@@ -4,7 +4,7 @@ terraform {
     # Pin to the lowest provider version of the range defined in the main module's version.tf to ensure lowest version still works
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.56.0"
+      version = "1.58.0"
     }
   }
 }
diff --git a/examples/landing_zone/version.tf b/examples/landing_zone/version.tf
index e85562a1..2ca56856 100644
--- a/examples/landing_zone/version.tf
+++ b/examples/landing_zone/version.tf
@@ -3,7 +3,7 @@ terraform {
   required_providers {
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = ">= 1.56.0"
+      version = ">= 1.58.0"
     }
   }
 }
diff --git a/examples/no-prefix/version.tf b/examples/no-prefix/version.tf
index 3c75ec59..85f6fc87 100644
--- a/examples/no-prefix/version.tf
+++ b/examples/no-prefix/version.tf
@@ -4,7 +4,7 @@ terraform {
     # Pin to the lowest provider version of the range defined in the main module's version.tf to ensure lowest version still works
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = "1.56.0"
+      version = "1.58.0"
     }
   }
 }
diff --git a/main.tf b/main.tf
index 355c28d8..421b8e24 100644
--- a/main.tf
+++ b/main.tf
@@ -22,6 +22,10 @@ resource "ibm_is_vpc" "vpc" {
   tags                        = var.tags
   access_tags                 = var.access_tags
   no_sg_acl_rules             = var.clean_default_sg_acl
+
+  dns {
+    enable_hub = var.enable_hub
+  }
 }
 
 ##############################################################################
diff --git a/module-metadata.json b/module-metadata.json
index dcfac2ba..5946fe82 100644
--- a/module-metadata.json
+++ b/module-metadata.json
@@ -128,6 +128,16 @@
       "matches": "^([a-z]|[a-z][-a-z0-9]*[a-z0-9])$",
       "computed": true
     },
+    "enable_hub": {
+      "name": "enable_hub",
+      "type": "bool",
+      "description": "Indicates whether this VPC is enabled as a DNS name resolution hub.",
+      "default": false,
+      "pos": {
+        "filename": "variables.tf",
+        "line": 463
+      }
+    },
     "enable_vpc_flow_logs": {
       "name": "enable_vpc_flow_logs",
       "type": "bool",
@@ -518,7 +528,7 @@
     "ibm": {
       "source": "IBM-Cloud/ibm",
       "version_constraints": [
-        "\u003e= 1.56.0"
+        "\u003e= 1.58.0"
       ]
     },
     "time": {
@@ -542,7 +552,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 124
+        "line": 128
       }
     },
     "ibm_is_flow_log.flow_logs": {
@@ -563,7 +573,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 135
+        "line": 139
       }
     },
     "ibm_is_network_acl.network_acl": {
@@ -598,7 +608,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 102
+        "line": 106
       }
     },
     "ibm_is_security_group_rule.default_vpc_rule": {
@@ -663,7 +673,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 42
+        "line": 46
       }
     },
     "ibm_is_vpc_address_prefix.subnet_prefix": {
@@ -690,7 +700,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 67
+        "line": 71
       }
     },
     "ibm_is_vpc_routing_table_route.routing_table_routes": {
@@ -705,7 +715,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 76
+        "line": 80
       }
     },
     "time_sleep.wait_for_authorization_policy": {
@@ -717,7 +727,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 57
+        "line": 61
       }
     }
   },
@@ -731,7 +741,7 @@
       },
       "pos": {
         "filename": "main.tf",
-        "line": 50
+        "line": 54
       }
     }
   },
diff --git a/variables.tf b/variables.tf
index 6b8172b3..a2818af5 100644
--- a/variables.tf
+++ b/variables.tf
@@ -455,3 +455,13 @@ variable "is_flow_log_collector_active" {
 }
 
 ##############################################################################
+
+##############################################################################
+# VPC Hub-Spoke support
+##############################################################################
+
+variable "enable_hub" {
+  description = "Indicates whether this VPC is enabled as a DNS name resolution hub."
+  type        = bool
+  default     = false
+}
diff --git a/version.tf b/version.tf
index 029c648e..6111a3e3 100644
--- a/version.tf
+++ b/version.tf
@@ -4,7 +4,7 @@ terraform {
     # Use "greater than or equal to" range in modules
     ibm = {
       source  = "IBM-Cloud/ibm"
-      version = ">= 1.56.0"
+      version = ">= 1.58.0"
     }
     time = {
       source  = "hashicorp/time"