Update Terraform google to v8 - #93
Open
renovate-bot wants to merge 1 commit into
Open
Conversation
renovate-bot
force-pushed
the
renovate/google-8.x
branch
from
September 1, 2026 21:45
c25f315 to
22504a4
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
~> 2.11.0→~> 8.1.0Release Notes
hashicorp/terraform-provider-google (google)
v8.1.0Compare Source
NOTES:
google_compute_global_addressdata source to use direct HTTP rather than a client library (#29038)google_compute_interconnect_locationsdata source to use direct HTTP rather than a client library (#29055)google_compute_shared_vpc_host_projectto use direct HTTP rather than a client library (#29071)google_container_node_poolto use direct HTTP rather than a client library (#29070)google_projectto use direct HTTP rather than a client library (#29054)DEPRECATIONS:
detailsingoogle_workstations_workstation_config(no longer populated by the API; will be removed in a future major release) (#29075)FEATURES:
google_apigee_addons_config(#29039)google_apigee_api_product(#29067)google_apigee_data_collector(#29067)google_apigee_datastore(#29067)google_apigee_endpoint_attachment(#29067)google_apigee_envgroup(#29067)google_apigee_environment_keyvaluemaps(#29065)google_apigee_organization(#29065)google_apigee_target_server(#29065)google_colab_notebook_execution(#29064)google_colab_runtime(#29064)google_colab_runtime_template(#29064)google_colab_schedule(#29064)google_eventarc_pipeline_iam_binding(#29080)google_eventarc_pipeline_iam_member(#29080)google_eventarc_pipeline_iam_policy(#29080)google_monitoring_snooze(#29037)google_network_management_network_monitoring_provider(#29056)google_observability_bucket(#29076)google_scc_notification_service_account(#29043)IMPROVEMENTS:
destination_pubsub_subscriptiontogoogle_bigquery_analytics_hub_listing_subscription(#29062)api_authenticationfield togoogle_ces_tool.remote_agent_tool(#29059)error_handling_settingsfield togoogle_ces_app(#29045)instagram_credentialsandwhatsapp_credentialsfields togoogle_ces_deploymentresource (#29040)language_code_variablefield togoogle_ces_agentresource (#29063)retention_windowfield togoogle_ces_appresource (#29028)vpc_sc_settingsfield togoogle_ces_appresource (#29027)whatsapp_configfield togoogle_ces_appresource (#29030)template.containers.sandbox_launcherfield togoogle_cloud_run_v2_worker_poolresource (#29061)cpu_utilizationandconcurrency_utilizationautoscaling thresholds with0.0ingoogle_cloud_run_v2_service(#29081)last_user_update_timefield togoogle_discovery_engine_license_configresource (#29058)forward_attributesfield togoogle_network_services_authz_extension(#29025)REMOVE_PEERINGvalue todeletion_policyongoogle_service_networking_connection, which removes the VPC peering when the connection cannot be deleted because service producer resources still use it (#29036)gateway_configsfield togoogle_vertex_ai_semantic_governance_policy_engine(#29031)spec.build_spec.service_accountfield togoogle_vertex_ai_reasoning_engine(#29034)spec.deployment_spec.agent_gateway_configfield togoogle_vertex_ai_reasoning_engine(#29029)spec.source_code_spec.agent_config_sourcefield togoogle_vertex_ai_reasoning_engine(#29046)build_specto GA ingoogle_vertex_ai_reasoning_engine(#29077)BUG FIXES:
tasksfield being silently dropped frompredeployandpostdeployblocks across all strategy variants (#29035)google_composer_user_workloads_secretwriting the secretdatavalues into provider debug logs (#29042)google_container_clusterandgoogle_container_node_poolresources will proceed while not in a resting state for updates (but will continue to wait for one after creates). (#29068)google_iam_workload_identity_poolIDs ending in.svc.id.googwhere the base name ends in one of the suffix's characters (#29072)credentialsvalue could be echoed back in the error message when it failed to parse (#29057)conditionsingoogle_workstations_workstation_configandgoogle_workstations_workstation_cluster(#29075)v8.0.0Compare Source
Terraform Google Provider 8.0.0 Upgrade Guide
BREAKING RESOURCE REMOVALS:
google_beyondcorp_app_connection,google_beyondcorp_app_connector, andgoogle_beyondcorp_app_gatewayresources, and thegoogle_beyondcorp_app_connection,google_beyondcorp_app_connector, andgoogle_beyondcorp_app_gatewaydata sources. Usegoogle_beyondcorp_security_gatewayandgoogle_beyondcorp_security_gateway_applicationinstead. (#18675)google_iap_brandandgoogle_iap_clientresources, and thegoogle_iap_clientdata source. (#18679)google_ml_engine_modelresource. Migrate machine learning deployments togoogle_vertex_ai_endpointor Vertex AI Model Garden resources. (#18681)google_notebooks_environment,google_notebooks_instance(and associated IAM resources), andgoogle_notebooks_runtime(and associated IAM resources). Migrate togoogle_workbench_instance. (#18583)google_vertex_ai_scheduleresource. Usegoogle_colab_scheduleinstead. (#18673)BREAKING FIELD REMOVALS:
resource_typeargument fromgoogle_backup_dr_backup_plan_associationsandgoogle_backup_dr_data_source_referencesdata sources. (#18688)custom_audiencesfield fromgoogle_cloud_run_v2_worker_poolresource. (#18193)http_get.http_headers.portprobe field fromgoogle_cloud_run_v2_worker_poolresource. (#18290)attachmentattribute withinlogical_structure.*.zonesfromgoogle_compute_interconnect_attachment_groupresource in favor ofattachments. (#18676)reservation_block_countfield fromgoogle_compute_reservationresource in favor ofresource_status[0].reservation_block_count. (#18611)actions.publish_findings_to_cloud_data_catalogfield fromgoogle_data_loss_prevention_job_triggerresource in favor ofactions.publish_findings_to_dataplex_catalog. (#18530)run_as_service_accountargument fromgoogle_integrations_clientresource. (#18680)BREAKING INCREASED VALIDATION:
sensitive_params.0.secret_access_keyandsensitive_params.0.secret_access_key_wofromAtLeastOneOftoExactlyOneOfingoogle_bigquery_data_transfer_configresource. (#18325)http_get.http_headers.namerequired whenhttp_get.http_headersis set ingoogle_cloud_run_v2_worker_poolresource. (#18290)claim_mappinga required field on create ingoogle_iam_workforce_pool_provider_scim_tenantresource. (#18348)http_check.0.auth_info.0.passwordandhttp_check.0.auth_info.0.password_wotoExactlyOneOfingoogle_monitoring_uptime_check_configresource. (#18325)secret_data_wo_versionrequired whensecret_data_wois set (RequiredWith) ingoogle_secret_manager_secret_versionresource. (#18325)source_contentsa required argument ingoogle_workflows_workflowresource. (#18411)OTHER BREAKING CHANGES:
sensitive_params.0.secret_access_key_wo_versionfromIntegertoStringdata type with state migration ingoogle_bigquery_data_transfer_configresource. (#18731)default_from_apifordefault_collationingoogle_bigquery_datasetresource; settingdefault_collation = ""now explicitly clears collation. (#18585)cloud_control_detailsfromlisttosetingoogle_cloud_security_compliance_frameworkresource. (#18596)"") toproject_id_or_num,network_url, andendpoint_urlwithinconsumer_accept_listsingoogle_compute_service_attachmentresource to resolve permadiffs. (#18276)load_balancing_schemefromEXTERNALtoEXTERNAL_MANAGEDingoogle_compute_backend_serviceandgoogle_compute_global_forwarding_ruleresources. (#18557)guest_acceleratoringoogle_compute_instanceto plan and apply removal/replacement whencountis explicitly set to0(orguest_accelerator = []). (#18426)nat_subnetsandconsumer_reject_listsfromlisttosetingoogle_compute_service_attachmentresource. (#18694)name_prefixmax length from 14 to 31 characters ingoogle_container_node_poolandgoogle_container_clusterresources. (#18477)enable_componentsinlogging_configandmonitoring_configfromlisttosetingoogle_container_clusterresource. (#18262)secret_data_wo_versionfromIntegertoStringdata type with state migration ingoogle_secret_manager_secret_versionresource. (#18325)v7.46.0Compare Source
v7.45.0Compare Source
v7.44.0Compare Source
FEATURES:
google_bigquery_dataset_iam_member(#28578)google_bigquery_table(#28576)google_chronicle_custom_list(#28618)google_chronicle_soar_network(#28649)google_dataform_repository(#28642)google_dataform_repository_iam_binding(#28642)google_dataform_repository_iam_member(#28642)google_dataform_repository_iam_policy(#28642)google_iam_folder_access_policy(#28664)google_iam_organization_access_policy(#28664)google_iam_project_access_policy(#28664)google_vertex_ai_evaluation_metric(#28665)IMPROVEMENTS:
google_bigquery_table(#28574)host_error_timeout_secondsfield ingoogle_compute_instance,google_compute_instance_templateandgoogle_compute_region_instance_templateto GA (#28671)high_scale_checkpointing_configblock toaddons_configingoogle_container_cluster(#28669)attached_disk_configtodisk_configto support attached disks in thegoogle_dataproc_clusterresource (#28590)TOKEN_AUTHas agoogle-beta-only value forauthorization_modefield ongoogle_memorystore_instanceresource (#28584)allow_global_accessfield togoogle_network_services_gateway(#28589)identity_connectortogoogle_oracle_database_exadb_vm_clusterfor CMEK support (#28615)service_accountandscan_configfields togoogle_secure_source_manager_repository(#28662)password_secret_versionanduserfields intogoogle_sql_provision_scriptresource (#28619)ForceNewconfig fromdisk_typefield ingoogle_sql_database_instance, allowing it to change in future without requiring the database instance to be destroyed and recreated (#28616)BUG FIXES:
google_backup_dr_restore_workloaddroppedresource_manager_tagsduring restore requests, causing tags shown in plan to not be applied to restored resources (#28586)google_biglake_iceberg_tableby suppressing diffs onlocationwhen the API-returned path contains a suffix folder (#28577)write.parquet.compression-codecingoogle_biglake_iceberg_table(#28650)google_bigquery_dataset_iam_member(#28617)template.scaling.max_instance_countto computed ingoogle_cloud_run_v2_service(#28644)template.containers.resources.limitsblock ingoogle_cloud_run_v2_serviceresource (#28670)supported_enforcement_modesingoogle_cloud_security_compliance_frameworkresource (#28676)ignore_node_count_changeswas not persisted ingoogle_container_cluster.node_pool(#28573)google_container_node_poolandgoogle_container_clusterfailed to invalidate their Instance Group Manager cache when a resize occurred or whenignore_node_count_changeswas active (#28585)networkfield ingoogle_network_connectivity_transportoptional (#28639)google_recaptcha_enterprise_keyso existingchallenge_settings.action_settingsentries are preserved when the action map changes (#28673)google_service_networking_connectionignoring the configureddeletetimeout, which used thecreatetimeout instead (#28641)v7.43.0Compare Source
v7.42.0Compare Source
NOTES:
google_compute_region_instance_templateresource to use direct HTTP rather than a client library (#28431)DEPRECATIONS:
google_vertex_ai_schedule, an accidentally-added duplicate resource; usegoogle_colab_scheduleinstead. (#28406)FEATURES:
google_cloud_quotas_quota_adjuster_settings(#28383)google_service_account_key(#28430)google_agent_identity_auth_provider(#28447)google_apihub_runtime_project_attachment(#28449)google_chronicle_big_query_export(#28403)google_compute_global_vm_extension_policy(#28445)google_compute_rollout_plan(#28445)google_vector_search_data_object(#28434)google_vertex_ai_persistent_resource(#28435)IMPROVEMENTS:
table_typefield togoogle_bigquery_routineresource (#28446)start_execution_tokenandrun_execution_tokenfields togoogle_cloud_run_v2_jobresource (#28384)catch_up,create_pipeline_job_request,create_time,last_pause_time,last_resume_time,last_scheduled_run_response,max_concurrent_active_run_count,next_run_time,started_run_count, andupdate_timefields, and sub-fields undercreate_notebook_execution_job_request.notebook_execution_job(create_time,custom_environment_spec,encryption_spec,job_state,kernel_name,labels,name,schedule_resource_name,workbench_runtime) and undercreate_notebook_execution_job_request(notebook_execution_job_id,parent) togoogle_colab_scheduleresource (#28406)effective_locationfield togoogle_compute_interconnectresource (#28416)request_headersandresponse_headersfields tolog_configongoogle_compute_backend_serviceandgoogle_compute_region_backend_serviceresources (#28421)google_compute_instance, allowing resource import using anidentityblock (#28433)locationfield to mutable forgoogle_compute_interconnectresource (#28416)addons_config.node_readiness_configfield togoogle_container_clusterresource (#28417)rollback_safe_upgrade,desired_emulated_version, andemulated_versionfields togoogle_container_clusterresource (#28442)google_container_node_poolresource (#28382)confidential_instance_typefield togoogle_dataproc_clusterresource (#28371)min_control_plane_version,min_node_version,target_control_plane_version,target_node_version, andoperational_statefields togoogle_gke_hub_rollout_sequenceresource (#28429)google_hypercomputecluster_clusterto 120 minutes (#28448)template_metadata.filter_version_selectortogoogle_model_armor_templateresource (#28402)google_sql_userforterraform querysupport (#28428)BUG FIXES:
bigtable_custom_endpointanduniverse_domainwere ignored when creating Bigtable resources (#28404)google_compute_security_policywere not detected (#28420)rollout_creation_scopeandupgrade_typesfields ingoogle_gke_hub_rollout_sequenceresource (#28429)resource_hierarchy_selectorandlocation_selectorare not set at the same time ingoogle_os_config_v2_policy_orchestrator,google_os_config_v2_policy_orchestrator_for_folder, andgoogle_os_config_v2_policy_orchestrator_for_organization(#28407)google_secret_manager_secret_versionwould fail at apply time if neithersecret_datanorsecret_data_wowas set (#28419)settings.ip_configuration.psc_config.allowed_consumer_projectsingoogle_sql_database_instancewere silently ignored on in-place updates (#28444)google_vertex_ai_endpoint_with_model_garden_deploymentdestroying and recreating the endpoint whenmin_replica_count,max_replica_count,required_replica_count, orautoscaling_metric_specschanged (#28401)v7.41.0Compare Source
v7.40.0Compare Source
DEPRECATIONS:
admit-on-second-missvalue forgoogle_storage_anywhere_cache.admission_policyis deprecated and will be removed in a future major release. The backend will ignore this attribute and treat it asadmit-on-first-miss. (#28210)NOTES:
google_compute_instancecode related to advanced machine features to use direct HTTP rather than a client library (#28160)FEATURES:
google_data_catalog_taxonomy(#28237)google_oracle_database_exascale_db_storage_vault(#28260)google_compute_instant_snapshot(#28256)google_compute_region_instant_snapshot(#28256)google_compute_region_target_http_proxy(#28256)google_compute_region_target_tcp_proxy(#28256)google_compute_region_url_map(#28256)google_compute_rollout_plan(#28256)google_compute_target_grpc_proxy(#28256)google_compute_target_http_proxy(#28256)google_compute_target_ssl_proxy(#28256)google_compute_target_tcp_proxy(#28256)google_dns_managed_zone(#28257)google_oracle_database_exascale_db_storage_vaults(#28260)google_chronicle_findings_refinement_deployment(#28240)google_chronicle_soar_domain(#28214)google_iap_agent_registry_agent_iam_binding(#28231)google_iap_agent_registry_agent_iam_member(#28231)google_iap_agent_registry_agent_iam_policy(#28231)google_iap_agent_registry_endpoint_iam_binding(#28231)google_iap_agent_registry_endpoint_iam_member(#28231)google_iap_agent_registry_endpoint_iam_policy(#28231)google_iap_agent_registry_mcp_server_iam_binding(#28231)google_iap_agent_registry_mcp_server_iam_member(#28231)google_iap_agent_registry_mcp_server_iam_policy(#28231)google_tags_tag_binding_collection(#28180)google_vector_search_index(#28238)google_chronicle_environment(#28206)google_chronicle_data_export(#28239)IMPROVEMENTS:
namefield togoogle_agent_registry_bindingresource (#28207)namefield togoogle_agent_registry_serviceresource (#28207)app_engine_bundled_servicesfield togoogle_app_engine_standard_app_versionresource (#28213)CATALOG_TYPE_FEDERATEDwithfederated_catalog_optionstogoogle_biglake_iceberg_catalog(#28241)target_typeandtarget_forwarding_rulestogoogle_compute_region_network_firewall_policy_with_rulesresource (#28061)workload_identity_configfields togoogle_compute_instanceandgoogle_compute_instance_templateresources (#28266)instance_lifecycle_policy.on_repair.allow_changing_zonefield togoogle_compute_instance_group_managerandgoogle_compute_instance_region_group_manager. (#28174)ANY_RESERVATION_THEN_FAILoption toconsume_reservation_typefield ingoogle_container_clusterandgoogle_container_node_poolresources (#28060)custom_node_initconfiguration block tonode_config(supporting Cloud Storage and Secret Manager) for bothgoogle_container_clusterandgoogle_container_node_poolresources. (#28262)maintenance_policyfield togoogle_container_node_poolresource (#28217)recurring_maintenance_windowfield togoogle_container_clusterresource (#28227)catalog_publishing_enabledfield togoogle_dataplex_datascanresource (#28232)inspect_config.min_likelihood_per_info_typetogoogle_data_loss_prevention_inspect_template(#28236)skip_waitfield togoogle_firestore_fieldresource, skipping the wait for index creation (#28222)exascale_db_storage_vaultparameter andstorage_management_typeto determine if VM Cluster is ASM or EXASCALE ingoogle_oracle_database_cloud_vm_cluster(#28197)exadata_infrastructurefield togoogle_oracle_database_exascale_db_storage_vaultresource (#28177)exascale_db_storage_vaultandstorage_management_typefields togoogle_oracle_database_cloud_vm_clustersdata source (#28260)enforce_new_sql_network_architecturefield togoogle_sql_database_instanceresource (#28233)psc_auto_connection_policy_enabledfield and output-onlyservice_connection_policyandservice_connection_policy_creation_resultfields togoogle_sql_database_instanceresource (#28225)private_network_serviceto resourcegoogle_storage_transfer_job(#28178)BUG FIXES:
row_affinityupdates did not persist ongoogle_bigtable_app_profile(#28215)google_project(#28229)google_chronicle_rule.textcaused by the Chronicle API appending a trailing newline to every stored rule body (#28216)google_cloud_scheduler_job(#28164)preview = falseupdates forgoogle_compute_organization_security_policy_rulewere omitted from API requests. (#28223)enable_proxy_protocolongoogle_compute_service_attachmentresource (#28264)google_datastream_connection_profilemongodb_profile.additional_options(#28254)google_eventarc_triggerresource returns non-emptyconditions. (#28226)google_filestore_instanceresource timeouts with the Filestore service instance operations TTLs (#28208)google_gemini_code_tools_setting,google_gemini_data_sharing_with_google_setting_binding,google_gemini_gemini_gcp_enablement_setting_binding, andgoogle_gemini_release_channel_setting_binding(#28220)google_hypercomputecluster_clusterresource creation (#28182)google_logging_project_bucket_config(#28055)google_observability_folder_settings,google_observability_organization_settings, andgoogle_observability_project_settings(#28220)google_oracle_database_exadb_vm_cluster,google_oracle_database_odb_network,google_oracle_database_odb_subnet,google_oracle_database_goldengate_connection,google_oracle_database_goldengate_deployment, andgoogle_oracle_database_goldengate_connection_assignment. (#28228)google_oracle_database_exadb_vm_cluster,google_oracle_database_goldengate_connection, andgoogle_oracle_database_odb_subnet(#28220)google_privileged_access_manager_entitlementfor entitlements created without an approval workflow (#28224)external_credentials.identity_tokento reject malformed JWTs containing empty segments (#28258)v7.39.0Compare Source
NOTES:
google_compute_instance_templateresource partially to use direct HTTP rather than a client library (#28010)google_compute_network_peeringresource to use direct HTTP rather than a client library (#28021)FEATURES:
google_agent_registry_agent(#28028)google_agent_registry_endpoint(#28028)google_agent_registry_mcp_server(#28028)google_compute_instance_groups(#27981)google_storage_control_folder_intelligence_findings_summary(#28019)google_storage_control_organization_intelligence_findings_summary(#28019)google_storage_control_project_intelligence_findings_summary(#28019)google_agent_registry_binding(#28028)google_agent_registry_service(#28028)google_artifact_registry_project_config(#28009)google_chronicle_findings_refinement(#28035)google_compute_bulk_per_instance_config(#28031)google_compute_firewall_policy_iam_binding(#27978)google_compute_firewall_policy_iam_member(#27978)google_compute_firewall_policy_iam_policy(#27978)google_compute_network_firewall_policy_iam_binding(#27978)google_compute_network_firewall_policy_iam_member(#27978)google_compute_network_firewall_policy_iam_policy(#27978)google_compute_region_network_firewall_policy_iam_binding(#27978)google_compute_region_network_firewall_policy_iam_member(#27978)google_compute_region_network_firewall_policy_iam_policy(#27978)google_compute_region_resize_request(#27984)google_compute_zone_vm_extension_policy(#28034)google_gke_hub_rollout_sequence(#28007)google_iap_agent_registry_iam_binding(#28032)google_iap_agent_registry_iam_member(#28032)google_iap_agent_registry_iam_policy(#28032)google_iap_location_web_iam_binding(#28032)google_iap_location_web_iam_member(#28032)google_iap_location_web_iam_policy(#28032)google_oracle_database_cloud_exadata_infrastructure_exascale_config(#28033)google_bigquery_dataset(#28005)google_compute_cross_site_network(#28018)google_compute_external_vpn_gateway(#28018)google_compute_global_network_endpoint_group(#28018)google_compute_ha_vpn_gateway(#28018)google_compute_interconnect_attachment_group(#28018)google_compute_interconnect_group(#28018)google_compute_public_delegated_prefix(#28018)google_compute_region_commitment(#28018)google_compute_region_network_endpoint_group(#28018)google_compute_vpn_gateway(#28018)google_compute_wire_group(#28018)google_folder_iam_member(#27993)google_kms_crypto_key_version(#28006)google_project(#28041)google_project_service(#27989)IMPROVEMENTS:
external_runtime_options.container_request_concurrencyfield togoogle_bigquery_routineresource (#28029)instance_lifecycle_policy.on_failed_health_checkfield in resourcesgoogle_compute_instance_group_managerandgoogle_compute_region_instance_group_manager(ga) (#27992)shutdown_grace_period_secondsandshutdown_grace_period_critical_pods_secondstonode_kubelet_configblock. (#28015)agent_sandbox_configaddon field underaddons_configingoogle_container_clusterto GA (#28017)iconfield togoogle_dataplex_data_productresource (#27986)namefield togoogle_dataplex_data_product_data_assetresource (#28020)allow_limited_availability_info_typestogoogle_data_loss_prevention_inspect_template(#28024)forward_attributesfield to `google_network_services_lConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.