Update Terraform google to v5.22.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	5.12.0 -> 5.22.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.22.0

Compare Source

5.22.0 (Unreleased)

v5.21.0

Compare Source

FEATURES:

• New Data Source: google_apphub_discovered_service (#​17548)
• New Data Source: google_apphub_discovered_workload (#​17553)
• New Data Source: google_cloud_quotas_quota_info (#​17564)
• New Resource: google_apphub_workload (#​17561)
• New Resource: google_firebase_app_check_device_check_config (#​17517)
• New Resource: google_iap_tunnel_dest_group (#​17533)
• New Resource: google_kms_ekm_connection (#​17512)
• New Resource: google_apphub_application (#​17499)
• New Resource: google_apphub_service (#​17562)
• New Resource: google_apphub_service_project_attachment (#​17536)
• New Resource: google_network_security_firewall_endpoint_association (#​17540)

IMPROVEMENTS:

• cloudrunv2: added support for scaling.min_instance_count in google_cloud_run_v2_service. (#​17501)
• compute: added metric.single_instance_assignment and metric.filter to google_compute_region_autoscaler (#​17519)
• container: added queued_provisioning to google_container_node_pool (#​17549)
• gkeonprem: allowed vcenter_network to be set in google_gkeonprem_vmware_cluster, previously it was output-only (#​17505)
• workstations: added support for ephemeral_directories in google_workstations_workstation_config (#​17515)

BUG FIXES:

• compute: allowed sending empty values for SERVERLESS in google_compute_region_network_endpoint_group resource (#​17500)
• notebooks: fixed an issue where default tags would cause a diff recreating google_notebooks_instance resources (#​17559)
• storage: fixed an issue where two or more lifecycle rules with different values of no_age field always generates change in google_storage_bucket resource. (#​17513)

v5.20.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_custom_target_type_iam_* (#​17445)

IMPROVEMENTS:

• certificatemanager: added type field to google_certificate_manager_dns_authorization resource (#​17459)
• compute: added the network_url attribute to the consumer_accept_list-block of the google_compute_service_attachment resource (#​17492)
• gkehub: added support for policycontroller.policy_controller_hub_config.policy_content.bundles and
  policycontroller.policy_controller_hub_config.deployment_configs fields to google_gke_hub_feature_membership (#​17483)

BUG FIXES:

• artifactregistry: fixed permadiff when google_artifact_repository.docker_config field is unset (#​17484)
• bigquery: corrected plan-time validation on google_bigquery_dataset.dataset_id (#​17449)
• kms: fixed issue where google_kms_crypto_key_version.attestation.cert_chains properties were incorrectly set to type string (#​17486)

v5.19.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_automation(#​17427)
• New Resource: google_clouddeploy_target_iam_* (#​17368)

IMPROVEMENTS:

• bigquery: added remote_function_options field to google_bigquery_routine resource (#​17382)
• certificatemanager: added location field to google_certificate_manager_dns_authorization resource (#​17358)
• composer: added validations for composer 2/3 only fields in google_composer_environment (#​17361)
• compute: added certificate_manager_certificates field to google_compute_region_target_https_proxy resource (#​17365)
• compute: promoted all_instances_config field in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager to GA (#​17414)
• container: promoted enable_confidential_storage from node_config in google_container_cluster and google_container_node_pool to GA (#​17367)
• gkehub2: added namespace_labels field to google_gke_hub_scope resource (#​17421)

BUG FIXES:

• resourcemanager: added a retry to deleting the default network when auto_create_network is false in google_project (#​17419)

v5.18.0

Compare Source

BREAKING CHANGES:

• securityposture: marked policy_sets and policy_sets.policies required in google_securityposture_posture. API validation already enforced this, so no resources could be provisioned without these (#​17303)

FEATURES:

• New Data Source: google_compute_forwarding_rules (#​17342)
• New Resource: google_firebase_app_check_app_attest_config (#​17279)
• New Resource: google_firebase_app_check_play_integrity_config (#​17279)
• New Resource: google_firebase_app_check_recaptcha_enterprise_config (#​17327)
• New Resource: google_firebase_app_check_recaptcha_v3_config (#​17327)
• New Resource: google_migration_center_preference_set (#​17291)
• New Resource: google_netapp_volume_replication (#​17348)

IMPROVEMENTS:

• cloudfunctions: added output-only version_id field on google_cloudfunctions_function (#​17273)
• composer: supported patch versions of airflow on google_composer_environment (#​17345)
• compute: supported updating network_interface.stack_type field on google_compute_instance resource. (#​17295)
• container: added node_config.resource_manager_tags field to google_container_cluster resource (#​17346)
• container: added node_config.resource_manager_tags field to google_container_node_pool resource (#​17346)
• container: added output-only fields membership_id and membership_location under fleet in google_container_cluster resource (#​17305)
• looker: added custom_domain field to google_looker_instance resource (#​17301)
• netapp: added field restore_parameters and output-only fields state, state_details and create_time to google_netapp_volume resource (#​17293)
• workbench: added container_image field to google_workbench_instance resource (#​17326)
• workbench: added shielded_instance_config field to google_workbench_instance resource (#​17306)

BUG FIXES:

• bigquery: allowed users to set permissions for principal/principalSets (iamMember) in google_bigquery_dataset_iam_member. (#​17292)
• cloudfunctions2: fixed an issue where not specifying event_config.trigger_region in google_cloudfunctions2_function resulted in a permanent diff. The field now pulls a default value from the API when unset. (#​17328)
• compute: fixed issue where changes only in stateful_(internal|external)_ip would not trigger an update for google_compute_(region_)instance_group_manager (#​17297)
• compute: fixed perma-diff on min_ports_per_vm in google_compute_router_nat when the field is unset by making the field default to the API-set value (#​17337)
• dataflow: fixed crash in google_dataflox_job to return an error instead if a job's Environment field is nil when reading job information (#​17344)
• notebooks: changed tag field to default to the API's value if not specified in google_notebooks_instance (#​17323)

v5.17.0

Compare Source

NOTES:

• cloudbuildv2: changed underlying actuation engine for google_cloudbuildv2_connection, there should be no user-facing impact (#​17222)

DEPRECATIONS:

• container: deprecated support for relay_mode field in google_container_cluster.monitoring_config.advanced_datapath_observability_config in favor of enable_relay field, relay_mode field will be removed in a future major release (#​17262)

FEATURES:

• New Resource: google_firebase_app_check_debug_token (#​17242)
• New Resource: google_clouddeploy_custom_target_type (#​17254)

IMPROVEMENTS:

• cloudasset: allowed overriding the billing project for the google_cloud_asset_resources_search_all datasource
• clouddeploy: added support for canary_revision_tags, prior_revision_tags, stable_revision_tags, and stable_cutback_duration to google_clouddeploy_delivery_pipeline
• cloudfunctions: expose version_id on google_cloudfunctions_function (#​17273)
• compute: promoted user_ip_request_headers field on google_compute_security_policy resource to GA (#​17271)
• container: added support for enable_relay field to google_container_cluster.monitoring_config.advanced_datapath_observability_config (#​17262)
• eventarc: added support for http_endpoint.uri and network_config.network_attachment to google_eventarc_trigger (#​17237)
• healthcare: added reject_duplicate_message field to google_healthcare_hl7_v2_store resource (#​17267)
• identityplatform: added client, permissions, monitoring and mfa fields to google_identity_platform_config (#​17225)
• notebooks: added desired_state field to google_notebooks_instance (#​17268)
• vertexai: added feature_registry_source field to google_vertex_ai_feature_online_store_featureview resource (#​17264)
• workbench: added desired_state field to google_workbench_instance resource (#​17270)

BUG FIXES:

• compute: made resource_manager_tags updatable on google_compute_instance_template and google_compute_region_instance_template (#​17256)
• notebooks: prevented recreation of google_notebooks_instance when kms_key or service_account_scopes are changed server-side (#​17232)

v5.16.0

Compare Source

FEATURES:

• New Resource: google_clouddeploy_delivery_pipeline_iam_* (#​17180)
• New Resource: google_compute_instance_group_membership (#​17188)
• New Resource: google_discovery_engine_search_engine (#​17146)
• New Resource: google_firebase_app_check_service_config (#​17155)

IMPROVEMENTS:

• bigquery: promoted table_replication_info field on resource_bigquery_table resource to GA (#​17181)
• networksecurity: removed unused custom code from google_network_security_address_group (#​17183)
• provider: added an optional provider level label goog-terraform-provisioned to identify resources that were created by Terraform when viewing/editing these resources in other tools. (#​17170)

v5.15.0

Compare Source

FEATURES:

• New Data Source: google_compute_machine_types (#​17107)
• New Resource: google_blockchain_node_engine_blockchain_nodes (#​17096)
• New Resource: google_compute_region_network_endpoint (#​17137)
• New Resource: google_discovery_engine_chat_engine (#​17145)
• New Resource: google_discovery_engine_search_engine (#​17146)
• New Resource: google_netapp_volume_snapshot (#​17138)

IMPROVEMENTS:

• compute: added INTERNET_IP_PORT and INTERNET_FQDN_PORT options for the google_compute_region_network_endpoint_group resource. (#​17137)
• compute: added creation_timestamp to google_compute_instance_group_manager and google_compute_region_instance_group_manager. (#​17110)
• compute: added disk_id attribute to google_compute_disk resource (#​17112)
• compute: added stack_type attribute for google_compute_interconnect_attachment resource. (#​17139)
• compute: updated the google_compute_security_policy resource's json_parsing field to accept the value STANDARD_WITH_GRAPHQL (#​17097)
• memcache: added reserved_ip_range_id field to google_memcache_instance resource (#​17101)
• netapp: added deletion_policy field to google_netapp_volume resource (#​17111)

BUG FIXES:

• alloydb: fixed an issue where database_flags in secondary google_alloydb_instance resources would cause a diff, as they are copied from the primary (#​17128)
• filestore: made google_filestore_instance.source_backup field configurable (#​17099)
• vmwareengine: fixed a bug to prevent recreation of existing google_vmwareengine_private_cloud resources when upgrading provider version from <5.10.0 (#​17135

v5.14.0

Compare Source

FEATURES:

• New Resource: google_discovery_engine_data_store (#​17084)
• New Resource: google_securityposture_posture_deployment (#​17085)
• New Resource: google_securityposture_posture (#​17079)

IMPROVEMENTS:

• artifactregistry: promoted cleanup_policies and cleanup_policy_dry_run fields to GA for google_artifactregistry_repository resource (#​17074)
• composer: added data_retention_config field to google_composer_environment resource (#​17050)
• logging: updated the google_logging_project_bucket_config resource to be created using the asynchronous create method (#​17067)
• pubsub: added use_table_schema field to google_pubsub_subscription resource (#​17054)
• workflows: added call_log_level field to google_workflows_workflow resource (#​17051)

BUG FIXES:

• cloudfunctions2: fixed permadiff when build_config.docker_repository field is not specified on google_cloudfunctions2_function resource (#​17072)
• compute: fixed error when iap field is unset for google_compute_region_backend_service resource (#​17071)
• eventarc: fixed error when setting destination.cloud_function field on google_eventarc_trigger resource by making it output-only (#​17052)

v5.13.0

Compare Source

NOTES:

• cloudbuildv2: changed underlying actuation engine for google_cloudbuildv2_repository, there should be no user-facing impact (#​16969)
• provider: added support for in-place update for labels and terraform_labels fields in immutable resources (#​17016)

FEATURES:

• New Resource: google_netapp_backup_policy (#​16962)
• New Resource: google_netapp_volume (#​16990)
• New Resource: google_network_security_address_group_iam_* (#​17013)
• New Resource: google_vertex_ai_feature_group_feature (#​17015)

IMPROVEMENTS:

• alloydb: allowed database_version as an input on google_alloydb_cluster resource (#​16967)
• bigquery: added spark_options field to google_bigquery_routine resource (#​17028)
• cloudrunv2: added nfs and gcs fields to google_cloud_run_v2_service.template.volumes (#​16972)
• cloudrunv2: added tcp_socket field to google_cloud_run_v2.template.containers.liveness_probe (#​16972)
• compute: added enable_confidential_compute field to google_compute_instance.boot_disk.initialize_params (#​16968)
• compute: added enable_confidential_compute field to google_compute_disk resource (#​16968)
• gkehub2: added clusterupgrade field to google_gke_hub_feature resource (#​16951)
• notebooks: allowed machine_type and accelerator_config to be updatable on google_notebooks_runtime resource (#​16993)

BUG FIXES:

• compute: fixed the bug that max_ttl is sent in API calls even it is removed from configuration when changing cache_mode to FORCE_CACHE_ALL in google_compute_backend_bucket resource (#​16976)
• networkservices: fixed a perma-diff on addresses field in google_network_services_gateway resource (#​17035)
• provider: fixed universe_domain behavior to correctly throw an error when explicitly configured universe_domain values did not match credentials assumed to be in the default universe (#​17014)
• spanner: fixed error when adding autoscaling_config to an existing google_spanner_instance resource (#​17033)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.