v7.13.0

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#11158)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#11110)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#11230)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#11096)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#11159)

FEATURES:

• New Resource: google_ces_app_version (#11128)
• New Resource: google_dialogflow_generator (#11144)
• New Resource: google_dialogflow_version (#11079)
• New Resource: google_discovery_engine_widget_config (#11166)
• New Resource: google_iam_workforce_pool_provider_scim_token (#11113)
• New Resource: google_network_connectivity_gateway_advertised_route (#11156)
• New Resource: google_network_security_sac_attachment (#11146)
• New Resource: google_network_security_sac_realm (#11084)
• New Resource: google_network_services_lb_edge_extension (#11129)
• New Resource: google_network_services_multicast_consumer_association (#11141)
• New Resource: google_network_services_multicast_group_range_activation (#11174)
• New Resource: google_network_services_multicast_group_range (#11151)
• New Resource: google_network_services_multicast_producer_association (#11123)

IMPROVEMENTS:

• alloydb: added password_wo and password_wo_version fields to google_alloydb_user resource (#11109)
• apphub: added identity field to google_apphub_service and google_apphub_workload resources (#11155)
• backupdr: added encryption_config field to google_backup_dr_backup_vault resource (#11086)
• bigquery: added external_runtime_options and python_options fields to bigquery_routine resource (#11125)
• ces: added client_function.parameters.max_items, client_function.parameters.min_items, client_function.parameters.maximum, client_function.parameters.minimum, client_function.parameters.title, client_function.response.max_items, client_function.response.min_items, client_function.response.maximum, client_function.response.minimum, and client_function.response.title fields to google_ces_tool resource (#11131)
• ces: added entry_agent field to google_ces_example resource (#11081)
• ces: added google_search_tool.context_urls, google_search_tool.preferred_domains, and open_api_tool.api_authentication.bearer_token_config fields to google_ces_tool resource (#11131)
• ces: added message.chunk.tool_response and message.chunk.tool_call fields to google_ces_example resource (#11081)
• ces: added pinned and variable_declarations.schema.title fields to google_ces_app resource (#11090)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework_deployment resource (#11170)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework resource (#11170)
• cloudsecuritycompliance: added parameter_spec.default_value.oneof_value and validation.allowed_values.values.oneof_value fields to google_cloud_security_compliance_cloud_control resource (#11228)
• cloudsecuritycompliance: added sub_parameters field to google_cloud_security_compliance_cloud_control resource (#11228)
• colab: added custom_environment_spec field to google_colab_notebook_execution resource (#11167)
• compute: added network_pass_through_lb_traffic_policy field to google_compute_region_backend_service resource. (#11088)
• compute: added params field to google_compute_interconnect resource (#11149)
• compute: added show_nat_ips and nat_ips fields to google_compute_service_attachment (#11127)
• compute: added snapshot_type field to google_compute_snapshot resource (#11147)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#11231)
• container: added autoscaled_rollout_policy field to google_container_node_pool resource (beta) (#11154)
• container: added node_kernel_module_loading.policy field to google_container_node_pool and google_container_cluster resources (#11171)
• filestore: added support for updating directory_services fields in place in google_filestore_instance (#11137)
• iamworkforcepool: added claim_mapping, purge_time, and service_agent fields to google_iam_workforce_pool_provider_scim_tenant resource (#11113)
• looker: added controlled_egress_enabled and controlled_egress_config fields to google_looker_instance resource (#11082)
• lustre: added kms_key field to google_lustre_instance resource (#11104)
• modelarmor: added google_mcp_server_floor_setting field to google_model_armor_floorsetting resource (#11135)
• monitoring: fixes an issue with google_monitoring_alert_policy where it ignores the resource project during Import (#11120)
• netapp: added public docs link for google_netapp_host_group resource (#11160)
• netapp: added 'nfsv4' to custom update export_policy object in google_netapp_volume resource (#11229)
• networksecurity: added field custom_mirroring_profile.mirroring_deployment_groups and output field custom_mirroring_profile.mirroring_endpoint_group_type to google_network_security_security_profile resource (beta) (#11095)
• oracledatabase: added properties.cpu_core_count, properties.secret_id, and properties.vault_id fields to google_oracle_database_autonomous resource (#11107)
• oracledatabase: added properties.time_zone.version field to google_oracle_database_cloud_vm_cluster resource ([#11107](https://github.com/hashicorp/t...

v7.12.0

DEPRECATIONS:

• backupdr: deprecated required_type in google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references. Both resources no longer have functionality, and will be removed in the next major release. (#25107)

FEATURES:

• New Resource: google_ces_agent (#11033)
• New Resource: google_ces_guardrail (#11037)
• New Resource: google_ces_tool (#11038)
• New Resource: google_cloud_security_compliance_cloud_control (#11056)
• New Resource: google_cloud_security_compliance_framework_deployment (#11057)
• New Resource: google_cloud_security_compliance_framework (#11036)
• New Resource: google_discovery_engine_serving_config (#11032)
• New Resource: google_oracle_database_exascale_db_storage_vault (#11048)

IMPROVEMENTS:

• apphub: added functional_type, registration_type, and extended_metadata fields to google_apphub_service and google_apphub_workload resources (#11062)
• ces: added bearer_token_config field to google_ces_toolset (#11044)
• ces: added client_certificate_settings field to google_ces_app resource (#11042)
• compute: added block_names field to google_compute_reservation resource (#11046)
• compute: added resolve_subnetwork_mask field to the google_compute_subnetwork (#11051)
• compute: added sub_block_names field to google_compute_reservation_block data source (#11046)
• compute: added tls_settings field to google_compute_regional_backend_service resource (#11025)
• container: added end_time_behavior field to google_container_cluster resource (#11045)
• container: added secret_sync_config field to google_container_cluster resource (beta) (#11049)
• container: added writable_cgroups field to node_config.defaults.containerd_config in google_container_cluster resource (#25140)
• dataplex: added catalog_publishing_enabled field to data_profile_spec in google_dataplex_datascan resource (#11060)
• dns: added forwarding_config.target_name_servers.ipv6_address argument to google_dns_managed_zone resource (#11050)
• gkeonprem: added advanced_networking, multiple_network_interfaces_config and bgp_lb_config fields to google_gkeonprem_bare_metal_cluster resource (#11055)
• managedkafka: added broker_capacity_config field to google_managed_kafka_cluster resource (#11027)
• networksecurity: added endpoint_settings.jumbo_frames_enabled field to google_network_security_firewall_endpoint resource (#11026)
• run: added readiness_probe field to cloud_run_service resource (#11039)

BUG FIXES:

• backupdr: updated google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references to use LIST APIs, and require the correct List permissions (#11034)
• provider: resolved an issue preventing X.509 certificates from being used for authentication when supplied as Application Default Credentials (#11061)

v7.11.0

DEPRECATIONS:

• pubsublite: google_pubsub_lite_reservation will be turned down effective March 18, 2026. Use google_pubsub_reservation instead. (#11022)
• pubsublite: google_pubsub_lite_subscription will be turned down effective March 18, 2026. Use google_pubsub_subscription instead. (#11022)
• pubsublite: google_pubsub_lite_topic will be turned down effective March 18, 2026. Use google_pubsub_topic instead. (#11022)

BREAKING CHANGES:

• netapp: made google_netapp_volume.export_policy.rules.squash_mode not preserve values returned by the API. Without this change, unsetting squash_mode in the provider can cause an API error. (#11023)

FEATURES:

• New Data Source: google_artifact_registry_python_packages (#11017)
• New Data Source: google_cloud_identity_policy (#10991)
• New Data Source: google_compute_reservation_block (#11005)
• New Data Source: google_compute_reservation_sub_block (#11005)
• New Resource: google_ces_deployment (#10990)
• New Resource: google_ces_example (#11020)
• New Resource: google_compute_region_health_aggregation_policy (#10995)
• New Resource: google_discovery_engine_user_store (#11018)
• New Ephemeral Resource: google_client_config (#10975)

IMPROVEMENTS:

• bigquery: added external_data_configuration.decimal_target_types to google_bigquery_table (#10983)
• compute: added internal_ipv6_prefix field to the google_compute_subnetwork resource (#11007)
• compute: added ipv6_access_type field and INTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#10985)
• compute: added ipv6_access_type field to google_compute_public_advertised_prefix resource (#10978)
• dataplex: added data_documentation_spec field to google_dataplex_datascan resource to support the DATA_DOCUMENTATION scan type (#11014)
• dataproc: added resource_manager_tags to google_dataproc_cluster resource (#11021)
• lustre: added placement_policy field to google_lustre_instance resource (#11011)
• netapp: added cache_parameters field to google_netapp_volume resource (#10976)
• secretmanager: added project and short name support for secret on google_secret_manager_secret_version (#11015)
• secretmanager: added project and short name support for secret on ephemeral google_secret_manager_secret_version (#11015)

BUG FIXES:

• alloydb: fixed issue with creation when initial_user.password was set to a computed value in google_alloydb_cluster (#11006)
• bigquery: fixed extraneous diffs in google_bigquery_table.external_data_configuration.schema (#10983)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#10998)
• container: added KUBE_DNS as an accepted value for cluster_dns field on google_container_cluster (#10997)
• netapp: fixed bug where unsetting export_policy.rules.squash_mode on google_netapp_volume can cause an API error (#11023)
• pubsub: fixed bug where google_pubsub_subscription could only be updated if bigquery_config was modified (#10996)
• sql: fixed bug where final_backup_description in google_sql_database_instance resource wasn't set on the final backup on delete (#11019)
• storage: fixed bug where certain changes to google_storage_bucket_acl.role_entity were ignored (#10994)
• workstations: fixed bug in google_workstations_workstation where setting source_workstation caused a permadiff that forced recreation (#10986)
• vmwareengine: made deletion of google_vmwareengine_private_cloud wait until the deletion completes (#11010)

v7.10.0

BREAKING CHANGES:

• alloydb: marked initial_user.password as required on create of new google_alloydb_cluster resources. This change aligns the provider with existing API constraints to surface errors earlier. (#10999)

FEATURES:

• New Resource: google_ces_app (#10950)
• New Resource: google_ces_toolset (#10967)
• New Resource: google_client_config (#10975)
• New Resource: google_discovery_engine_control (#10966)
• New Resource: google_netapp_host_group (#10959)
• New Resource: google_network_security_mirroring_endpoint (#10941)
• New Resource: google_network_services_multicast_domain (#10952)
• New Resource: google_privileged_access_manager_settings (#10961)

IMPROVEMENTS:

• cloudfunctions2: added direct_vpc_network_interface and direct_vpc_egress field to google_cloudfunctions2_function resource (#10971)
• cloudrunv2: added template.container.depends_on field to google_cloud_run_v2_worker_pool resource (#10970)
• container: added network_tier_config to google_container_cluster resource. (#10960)
• eventarc: added labels field to google_eventarc_channel resource (#10944)
• netapp: added block_devices field and ISCSI protocol support to goolge_netapp_volume resource, and increased timeouts on its operations (#10974)
• netapp: added additional field type in google_netapp_storage_pool resource (#10953)
• vertexai: added psc_automation_configs field to google_vertex_ai_endpoint resource (#10956)
• vertexai: added sync_config.continuous field to google_vertex_ai_feature_online_store_featureview (#10964)

BUG FIXES:

• accesscontextmanager: fixed issue where google_access_context_manager_service_perimeter_[dry_run_][egress|ingress]_policy caused the provider to crash when a provided identity casing was invalid. (#10968)
• apigee: fixed issue where credentials block was not populated in the Terraform state in google_apigee_developer_app resource (#10963)
• compute: fixed google_compute_network_firewall_policy_rule staying disabled after apply with disabled = false (#10962)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#10998)
• compute: resolve permadiff for display_name in new deployments of google_compute_organization_security_policy (#10965)
• storage: fixed a conversion error in google_storage_bucket state migration. This bug impacted Pulumi users. (#10943)

v7.9.0

BREAKING CHANGES:

• beyondcorp: made the ports field in endpoint_matchers required in response to a change in the API surface. (#10909)

FEATURES:

• New Resource: google_firestore_user_creds (#10922)
• New Resource: google_network_security_dns_threat_detector (#10898)

IMPROVEMENTS:

• appengine: added ssl_policy to application on google_app_engine_application resource (#10915)
• bigquery: added support for IAM conditions in google_bigquery_dataset_iam_* resources (#10913)
• container: added dns_endpoint_confg.enable_k8s_tokens_via_dns and dns_endpoint_config.enable_k8s_certs_via_dns fields to google_container_cluster resource (#10910)
• container: added fleet.membership_type field to google_container_cluster resource (#10901)
• dataplex: added data_classification field to google_dataplex_aspect_type resource (#10929)
• iamworkforcepool: added scim_usage field to workforce_pool_provider resource (#10916)
• memorystore: added available_maintenance_versions field to google_memorystore_instance resource (#10899)
• memorystore: added maintenance_version field to google_memorystore_instance resource (#10896)
• redis: added available_maintenance_versions field to google_redis_cluster resource (#10899)
• redis: added maintenance_version field to google_redis_cluster resource (#10896)
• storagetransfer: added transfer_manifest field to google_storage_transfer_job resource (#10907)

BUG FIXES:

• bigquery: added validation for target_types in google_bigquery_dataset_access (#10932)
• cloudquotas: resolved permadiff for preferred_value in google_cloud_quotas_quota_preference (#10911)
• compute: fixed scenario where google_compute_instance would not be staged for recreation if guest_accelerator.count was updated to 0 from non-zero value (#10902)
• sql: fixed an issue where dataDiskSize was unintentionally null instead of set to the current value in API requests, triggering unrelated errors (#10919)

v7.8.0

FEATURES:

• New Data Source: google_artifact_registry_packages (#10869)
• New Data Source: google_network_management_connectivity_tests (#10856)
• New Resource: google_apigee_environment_api_revision_deployment (#10862)
• New Resource: google_dataplex_entry_link (#10893)
• New Resource: google_discovery_engine_assistant (#10885)
• New Resource: google_observability_trace_scope (#10873)
• New Resource: google_oracle_database_db_system (#10889)
• New Resource: google_saas_runtime_unit (#10865)

IMPROVEMENTS:

• compute: added IN_FLIGHT to balancing_mode on google_compute_backend_service resource (#10875)
• compute: added ncc_gateway field to google_compute_router resource (beta) (#10894)
• compute: added new field instance_lifecycle_policy.on_repair.allow_changing_zone to google_compute_region_instance_group_manager & google_compute_instance_group_manager (#10871)
• compute: promoted security_policy in compute_region_backend_service resource to GA (#10866)
• compute: promoted the google_compute_preview_feature resource to GA. (#10886)
• compute: the activation_status attribute within the google_compute_preview_feature resource now uses the ACTIVATION_STATE_UNSPECIFIED value instead of DISABLED. Support for DISABLED will be added in a future release. (#10886)
• datastream: added backfill_all.mongodb_excluded_objects and source_config.mongodb_source_config fields to google_datastream_stream (#10888)
• datastream: added mongodb_profile field to google_datastream_connection_profile (#10888)
• discoveryengine: added connector_modes, sync_mode, incremental_refresh_interval, auto_run_disabled, and incremental_sync_disabled fields to google_discovery_engine_data_connector resource (#10863)
• discoveryengine: added kms_key_name field to google_discovery_engine_search_engine resource (#10863)
• discoveryengine: added in-place update support for entities.params and entities.key_property_mappings in google_discovery_engine_data_connector (#10895)
• dlp: added publish_findings_to_dataplex_catalog field to google_data_loss_prevention_job_trigger (#10883)
• iambeta: allowed GKE workload identity pool pattern in workload_identity_pool_id field of google_iam_workload_identity_pool resource. (#10861)
• memorystore: added maintenance_version field to google_memorystore_instance resource (#10896)
• memorystore: added available_maintenance_versions field to google_memorystore_instance resource (#10899)
• networkconnectivity: added HYBRID_INSPECTION enum value to preset_topology field in google_network_connectivity_hub resource (#10894)
• networkconnectivity: added gateway field to google_network_connectivity_spoke resource (beta) (#10894)
• networkservices: added isolationConfig on google_network_services_service_lb_policies resource (#10858)
• redis: added deletion_protection field to redis_instance to make deleting them require an explicit intent. redis_instance resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#10860)
• redis: added maintenance_version field to google_redis_cluster resource (#10896)
• redis: added available_maintenance_versions field to google_redis_cluster resource (#10899)
• saas_runtime: added default_release field to google_saas_runtime_unit_kind resource (#10887)
• sql: added read_pool_auto_scale_config support to sql_database_instance resource (#10884)

BUG FIXES:

• bigquery: fixed the issue where google_bigquery_table detected an incorrect schema diff on tables with row access policies when the schema was unchanged. (#10876)
• compute: allow requested_link_count to be updated in-place in google_compute_interconnect resource (#10870)

v7.7.0

BREAKING CHANGES:

• discoveryengine: changed type of google_discovery_engine_data_connector.entities.params. Previously, it was a map of string keys to string values; now, it must be a JSON-encoded string containing an object. This change is being made in a minor release because the field wasn't usable as intended – specifically, all current valid uses require mapping strings to lists of strings. (#10863)

FEATURES:

• New Data Source: google_network_management_connectivity_tests (#10856)
• New Resource: google_apigee_developer_app (#10851)
• New Resource: google_discovery_engine_license_config (#10848)
• New Resource: google_iam_workforce_pool_provider_scim_tenant (#10834)
• New Resource: google_kms_project_kaj_policy_config (#10850)
• New Resource: google_saas_runtime_tenant (#10841)

IMPROVEMENTS:

• apigee: updated the scopes argument in google_apigee_api_product resource to be order-insensitive. (#10851)
• beyondcorp: added proxy_protocol_config and service_discovery fields to google_beyondcorp_security_gateway resource (#10842)
• cloudrunv2: added health_check_disabled field to google_cloud_run_v2_service resource. (#10839)
• compute: added params field to google_compute_router resource (GA) (#10844)
• discoveryengine: added connector_modes, sync_mode, incremental_refresh_interval, auto_run_disabled, and incremental_sync_disabled fields to google_discovery_engine_data_connector resource (#10863)
• discoveryengine: added kms_key_name field to google_discovery_engine_search_engine resource (#10863)
• dlp: added publish_to_dataplex_catalog field to discovery_config resource (#10849)
• gkeonprem: made it possible to set the on_prem_version field on google_gkeonprem_vmware_node_pool (previously output-only) (#10847)
• memcache: added deletion_protection field to memcache_instance to make deleting them require an explicit intent. memcache_instance resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#10846)
• metastore: added tags field to google_dataproc_metastore_service and 'google_dataproc_metastore_federation' resources to allow setting tags for services and federation at creation time (#10854)
• networksecurity: added URL_FILTERING option to enum field type for google_network_security_security_profile resource (#10829)
• networksecurity: added url_filtering_profile field to google_network_security_security_profile_group resource (#10829)
• networksecurity: added url_filtering_profile field to google_network_security_security_profile resource (#10829)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#10827)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#10827)

BUG FIXES:

• bigqueryanalyticshub: fixed google_bigquery_analytics_hub_listing_subscription import (#10855)
• discoveryengine: fixed bug where it wasn't possible to specify values for knowledgeBaseSysId or catalogSysId in google_discovery_engine_data_connector.entities.params. (#10863)

v7.6.0

DEPRECATIONS:

• networksecurity: deprecated ignore_case, exact, prefix, suffix and contains fields in http_rules.from.not_sources.principals and http_rules.from.sources.principals blocks in google_network_security_authz_policy resource. Use the equivalent fields in http_rules.from.not_sources.principals.principal or http_rules.from.sources.principals.principal instead. (#10809)

BREAKING CHANGES:

• container: node_config blocks that had set kubelet_config without explicitly setting cpu_cfs_quota implicitly set cfu_cfs_quota to false when unset. From this version onwards, an unset cpu_cfs_quota will instead match the API default of true true. Resources that are recreated will receive the new value; old resources are unaffected, and may change values by explicitly setting the intended one. (#10823)
• storageinsights: removed activity_data_retention_period_days field from google_storage_insights_dataset_config resource due to a delayed launch. It will be readded when the feature launches. (#10824)

FEATURES:

• New Resource: google_kms_folder_kaj_policy_config (#10798)
• New Resource: google_vertex_ai_cache_config (#10807)
• New Resource: google_vertex_ai_reasoning_engine (#10797)

IMPROVEMENTS:

• backupdr: added data_source and rules_config_info fields to google_backup_dr_backup_plan_associations datasource (#10802)
• beyondcorp: added external, proxy_protocol, and schema fields to google_beyondcorp_security_gateway_application resource (#10808)
• beyondcorp: changed endpoint_matchers field to not be required anymore in the google_beyondcorp_security_gateway_application resource (#10808)
• bigquery: added reservation field to google_bigquery_job resource (#10796)
• compute: added backend.max_in_flight_requests, backend.max_in_flight_requests_per_instance, backend.max_in_flight_requests_per_endpoint and backend.traffic_duration fields to google_compute_backend_service resource (#10799)
• compute: added shared_secret_wo and shared_secret_wo_version fields to google_compute_vpn_tunnel resource, enabling write-only management of the shared secret. (#10788)
• dlp: added SENSITIVITY_UNKNOWN as possible enum value for actions.tag_resources.tag_conditions.sensitivity_score.score in google_data_loss_prevention_discovery_config resource (#10820)
• dlp: added actions.save_findings.output_config.storage_path field to google_data_loss_prevention_job_trigger resource (#10816)
• lustre: increased creation timeout from 20min to 40min for google_lustre_instance resource (#10817)
• netapp: added hybrid_replication_user_commands field with subfield commands to google_netapp_volume_replication resource (#10813)
• netapp: added replication_schedule, hybrid_replication_type, large_volume_constituent_count fields to hybrid_replication_parameters field in google_netapp_volume resource (#10813)
• networksecurity: added ip_blocks field to google_network_security_authz_policy resource (#10809)
• secretmanager: added ephemeral support for google_secret_manager_secret_version resource (#10821)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#10827)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#10827)
• storagetransfer: added user_project_override and billing_project fields to google_storage_transfer_job resource (#10790)

BUG FIXES:

• container: fixed the default for node_config.kubelet_config.cpu_cfs_quota on google_container_cluster, google_container_node_pool, google_container_cluster.node_pool to align with the API. Terraform will now send a true value when the field is unset on creation, and preserve any previously set value when unset. Explicitly set values will work as defined in configuration. (#10823)

v7.5.0

BREAKING CHANGES:

• netapp: changed peer_ip_addresses field type from String to Array in google_netapp_volume resource, as it was unusable otherwise (#10757)

FEATURES:

• New Data Source: google_artifact_registry_maven_artifacts (#10785)
• New Data Source: google_artifact_registry_npm_packages (#10784)
• New Resource: google_apigee_api_deployment (#10776)
• New Resource: google_discovery_engine_data_connector (#10778)
• New Resource: google_kms_organization_kaj_policy_config (#10777)
• New Resource: google_saas_runtime_rollout_kind (#10764)

IMPROVEMENTS:

• cloudrunv2: added startup_probe and liveness_probe to google_cloud_run_v2_worker_pool resource (#10749)
• compute: added bandwidth_allocation field to google_compute_wire_group resource (#10770)
• compute: added shared_secret_wo and shared_secret_wo_version fields for google_compute_vpn_tunnel resource, enabling write-only management of the shared secret. (#10788)
• dialogflow: added new_recognition_result_notification_config field to google_dialogflow_conversation_profile resource (#10775)
• discoveryengine: added features field to google_discovery_engine_search_engine resource (#10762)
• dlp: added other_cloud_target and other_cloud_starting_location to google_data_loss_prevention_discovery_config (#10773)
• gkebackup: added backup_config.selected_namespace_labels field to google_gke_backup_backup_plan resource (#10756)
• looker: added gemini_enabled field to google_looker_instance resource (#10771)
• netapp: added hot_tier_size_used_gib fields to google_netapp_volume (#10766)
• netapp: added cold_tier_size_used_gib and hot_tier_size_used_gib fields to google_netapp_storage_pool (#10766)
• networksecurity: added type and mirroring_deployment_groups fields to google_network_security_mirroring_endpoint_group resource (#10783)
• oracledatabase: added gcp_oracle_zone field to google_oracle_database_odb_network resource (#10767)
• privilegedaccessmanager: added approval_workflow.steps.id field to google_privileged_access_manager_entitlement resource (#10750)
• pubsub: added support for tags field to google_pubsub_topic and google_pubsub_subscription resources (#10760)
• sql: added point_in_time_restore_context field to google_sql_database_instance (#10786)
• storage: added force_destroy field to google_storage_insights_report_config resource (#10772)
• storageinsights: added activity_data_retention_period_days field to google_storage_insights_dataset_config resource (#10769)
• vertexai: added endpoint_config.private_service_connect_config block to google_vertex_ai_endpoint_with_model_garden_deployment resource (#10754)
• vertexai: added encryption_spec.kms_key_name field to google_vertex_ai_index_endpoint resource (#10787)
• vertexai: added encryption_spec.kms_key_name field to google_vertex_ai_index resource (#10759)

BUG FIXES:

• apihub: fixed a permadiff on config_template in google_apihub_plugin resource (#10758)
• storage: fixed a panic caused by empty cors blocks google_storage_bucket resource (#10781)

v7.4.0

DEPRECATIONS:

• compute: deprecated the option to deploy a container during VM creation using the container startup agent in google_compute_instance. Use alternative services to run containers on your VMs. Learn more at https://cloud.google.com/compute/docs/containers/migrate-containers. (#10725)

FEATURES:

• New Data Source: google_artifact_registry_maven_artifact (#10718)
• New Data Source: google_compute_interconnect_location (#10727)
• New Resource: google_network_services_wasm_plugin (#10742)

IMPROVEMENTS:

• compute: added scheduling.0.skip_guest_os_shutdown field to google_compute_instance_template resource (#10729)
• compute: added scheduling.0.skip_guest_os_shutdown field to google_compute_instance resource (#10729)
• compute: added scheduling.0.skip_guest_os_shutdown field to google_compute_region_instance_template resource (#10729)
• compute: added tunneling_config field to google_compute_service_attachment resource (#10730)
• container: added auto_ipam_config to google_container_cluster resource. (#10737)
• privilegedaccessmanager: added privileged_access.gcp_iam_access.role_bindings.id field to google_privileged_access_manager_entitlement resource (#10743)
• storage: added support for timeouts to google_storage_bucket_iam_binding, google_storage_bucket_iam_member, google_storage_bucket_iam_policy resources (#10726)

BUG FIXES:

• bigtable: fixed node_scaling_factor forcing new instance on google_bigtable_instance when adding new cluster (#10744)
• cloudscheduler: fixed a type assertion panic in google_cloud_scheduler_job when processing HTTP headers with nil or unexpected data types (#10720)
• compute: fixed the Network field cannot be modified issue in google_compute_region_backend_service. Now updating the network field will force the resource to be recreated (#10738)
• netapp: fixed incorrect default value handling in google_netapp_volume for export_policy.rules attributes has_root_access and squash_mode. When not specified, these fields will now take on the API default value with no diff. (#10736)
• netapp: updated google_netapp_storage_pool to source the default value for the qos_type field from the API. If not specified in the configuration, qos_type will now default to the value provided by the NetApp Volumes API. (#10735)
• sql: fixed the permadiffs on disk_size when disk_autoresize is enabled in google_sql_database_instance (#10739)
• workbench: added retry for unable to queue the operation 409 errors in google_workbench_instance resource. (#10733)