Update Terraform google to v7.38.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	7.33.0 → 7.38.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-google (google)

v7.38.0

Compare Source

v7.37.0

Compare Source

NOTES:

• compute: migrated EnableDisplay fields in google_compute_instance resources to use direct HTTP rather than a client library (#​27778)
• compute: migrated desired_status block and startInstanceOperation in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​27755)
• compute: migrated getInstance, getDisk, Delete and the setMetadata update block in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​27716)
• compute: migrated part of google_compute_instance to use direct HTTP rather than a client library (#​27788)

DEPRECATIONS:

• cloudrunv2: deprecated http_get.http_headers.port field in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource because it is not supported in Cloud Run API. This field will be removed in a future major release. (#​27800)
• cloudsecuritycompliance: deprecated the organization field on google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment. Use parent instead (#​27769)
• networkservices: deprecated protocols on google_network_services_agent_gateway (#​27802)

FEATURES:

• New Data Source: google_oracle_database_goldengate_deployment_versions (#​27771)
• New Data Source: google_storage_control_project_intelligence_finding (#​27764)
• New Data Source: google_storage_control_project_intelligence_findings (#​27764)
• New Resource: google_chronicle_parser (#​27801)
• New Resource: google_migration_center_import_data_file (#​27721)
• New Resource: google_network_services_agent_gateway (#​27803)
• New Resource: google_vertex_ai_tensorboard_experiment (#​27796)
• New List Resource: google_bigquery_dataset_access (#​27758)
• New List Resource: google_cloud_scheduler_job (#​27758)
• New List Resource: google_dns_record_set (#​27792)
• New List Resource: google_monitoring_alert_policy (#​27758)
• New List Resource: google_pubsub_subscription (#​27758)

IMPROVEMENTS:

• apigee: added new resource google_apigee_environment_debugmask for managing Apigee environment debug masks (#​27719)
• backupdr: added support for use_project_service_account flag in google_backup_dr_restore_workload disk and compute restores (#​27797)
• cloudrunv2: added http_get.http_headers.name field to container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource (#​27800)
• cloudrunv2: added template.client and template.client_version fields to google_cloud_run_v2_worker_pool resource (#​27757)
• cloudsecuritycompliance: added support for project parent to google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment via the new parent field. The organization field has been deprecated. (#​27769)
• compute: added params.resource_manager_tags field to google_compute_reservation resource (#​27770)
• compute: added data sources for google_compute_target_http_proxy, google_compute_target_https_proxy, google_compute_region_target_http_proxy, and google_compute_region_target_https_proxy (#​27767)
• container: added addons_config.slurm_operator_config field to google_container_cluster resource (#​27765)
• container: added node_image_config field to google_container_node_pool and google_container_cluster resources (#​27794)
• databasemigrationservice: added state and stop_on_warnings fields to google_database_migration_service_migration_job resource (#​27731)
• dns: added resource identity support for google_dns_record_set resource (#​27792)
• networksecurity: added network_rules field on google_network_security_authz_policy resource (#​27821)
• pubsub: added first_revision_id and last_revision_id fields to google_pubsub_topic resource (#​27718)
• sql: added settings.ip_configuration.psc_config.psc_auto_dns_enabled and settings.ip_configuration.psc_config.psc_write_endpoint_dns_enabled fields to google_sql_database_instance resource (#​27776)

BUG FIXES:

• apigee: fixed google_apigee_api not detecting local bundle changes due to a missing default on detect_md5hash, and fixed the test sweeper's list URL (#​27791)
• apigee: fixed google_apigee_security_action update failure by enabling PATCH-based updates now that the Apigee Security Actions API supports mutations (#​27768)
• apigee: fixed a perma-diff for api_products and scopes fields in google_apigee_developer_app resource when updating them with multiple items (#​27789)
• apigee: fixed an issue where the resource would attempt recreation if the key_expires_in field was set in google_apigee_developer_app resource (#​27779)
• ces: fixed persistent diff in google_ces_guardrail when llm_prompt_security is configured with default_settings (#​27766)
• cloudrun: fixed a permadiff for the run.googleapis.com/gpu-zonal-redundancy-disabled annotation in google_cloud_run_service (#​27787)
• cloudrunv2: fixed bug where only one http_get.http_headers block could be specified in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource (#​27800)
• compute: fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts (#​27175) (#​27720)
• compute: fixed diff when using existing_reservations field in google_region_commitment (#​27775)
• compute: fixed rules in google_compute_security_policy being unnecessarily recreated due to TypeSet hash instability (#​27754)
• sql: fixed inconsistent result after apply error when adding users of type CLOUD_IAM_GROUP with capitalized domain names for MySQL (#​27784)
• storage: fixed OOM issue for google_storage_bucket force_destroy by limiting the number of outstanding tasks to 2000 (#​27777)

v7.36.0

Compare Source

v7.35.0

Compare Source

v7.34.0

Compare Source

NOTES:

• compute: migrated google_compute_region_instance_template to use direct HTTP rather than a client library (#​27471)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​27441)

FEATURES:

• New Data Source: google_compute_service_attachment (#​27526)
• New Data Source: google_oracle_database_goldengate_deployment_environments (#​27499)
• New Resource: google_config_deployment (#​27438)
• New Resource: google_dialogflow_sip_trunk (#​27468)
• New Resource: google_migration_center_assets_export_job (#​27466)
• New Resource: google_migration_center_report_config (#​27395)
• New Resource: google_migration_center_settings (#​27465)
• New Resource: google_migration_center_source (#​27496)

IMPROVEMENTS:

• bigtable: added edition field to google_bigtable_instance resource (#​27507)
• ces: added fail_open field to llm_prompt_security block in google_ces_guardrail resource (#​27497)
• ces: added read-only fail_open field to llm_prompt_security block in google_ces_app_version resource (#​27497)
• compute: added ip_version and ip_collection fields to secondary_ip_range field in google_compute_subnetwork resource (#​27432)
• compute: added post_quantum_key_exchange field to google_compute_ssl_policy and google_compute_region_ssl_policy resources (#​27479)
• compute: added support in the google_compute_network datasource for looking up a network by self_link in addition to name (#​27509)
• container: added agent_sandbox_config field to google_container_cluster resource (#​27482)
• container: added node_config.gpudirect_strategy and node_pool.node_config.gpudirect_strategy to cluster resource, added node_config.gpudirect_strategy to node_pool resource (#​27495)
• dataflow: Added create_ignore_already_exists field to google_dataflow_flex_template_job resource to handle 409 conflicts (#​27476)
• datafusion: added maintenance_policy field to google_data_fusion_instance resource (#​27470)
• iam: add resource identity support for iam_member resources (#​27383)
• networkconnectivity: google_network_connectivity_transport resource promoted to GA (#​27440)
• oracledatabase: added identity_connector to google_oracle_database_cloud_vm_cluster for CMEK support (#​27435)
• project: added Resource Identity support to google_project_iam_binding (#​27502)
• project: added Resource Identity support to google_project_iam_policy (#​27503)
• sql: promoted Hyperdisk fields, data_disk_provisioned_iops and data_disk_provisioned_throughput to GA (#​27437)

BUG FIXES:

• bigtable: fixed an issue where bigtable_custom_endpoint and universe_domain were ignored when creating Bigtable resources. (#​27515)
• compute: fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts (#​27175) (#​27512)
• compute: marked encryption keys as immutable and sensitive across compute and backupdr resources (#​27508)
• dialogflow: corrected AUDIOENCODING_SPEEX_WITH_HEADER_BYTE enum value to AUDIO_ENCODING_SPEEX_WITH_HEADER_BYTE for audio_encoding field in google_dialogflow_conversation_profile resource (#​27459)
• resourcemanager: resolved a one-time diff for deletion_policy that would occur on existing and imported google_project_service resources following upgrading to v7.32.0 (#​27484)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Terraform plan in ./infrastructure in the prod workspace
With var files: ./infrastructure/prod.tfvars

Changes to Outputs.

Changes to Outputs:
!~  line_coverage_table       = (sensitive value)
!~  upload_table              = (sensitive value)

You can apply this plan to save these new output values to the Terraform
state, without changing any real infrastructure.

Warning: Deprecated value used

  on bucket/outputs.tf line 2, in output "ingest_bucket":
   2:   value = aws_s3_bucket.coverage_ingest

  The deprecation originates from module.bucket.aws_s3_bucket.coverage_ingest.acceleration_status

acceleration_status is deprecated. Use the
aws_s3_bucket_accelerate_configuration resource instead.

(and 30 more similar warnings elsewhere)

📝 Plan generated in Infrastructure #818

[coverage-robot]

Coverage Report

Merging #2622 will not change the total coverage (compared to 321df73)

Total Coverage	Diff Coverage
78.03%	ø

Tags

Tag	Lines	Covered	Partial	Uncovered	Coverage
analyse-service (Carried forward from 321df73)	2430	2124	0	306	87.41%
api-service (Carried forward from 29fe24e)	1420	1015	0	405	71.48%
clients-package (Carried forward from dd22fbc)	95	88	0	7	92.63%
configuration-package (Carried forward from dd22fbc)	665	513	0	152	77.14%
event-package (Carried forward from dd22fbc)	166	107	0	59	64.46%
ingest-service (Carried forward from 321df73)	1040	852	0	188	81.92%
local-package (Carried forward from dd22fbc)	250	169	0	81	67.6%
message-package (Carried forward from dd22fbc)	92	56	0	36	60.87%
orchestrator-service (Carried forward from 97a6bbb)	850	704	0	146	82.82%
publish-service (Carried forward from 29fe24e)	1113	718	0	395	64.51%
telemetry-package (Carried forward from dd22fbc)	108	75	0	33	69.44%

Impacted Files

No impacted files in #2622

Last update to 084f94e at 22:41pm UTC