Skip to content

chore(deps): update terraform to v8 - #5956

Open
renovate-bot wants to merge 1 commit into
google:masterfrom
renovate-bot:renovate/major-terraform
Open

chore(deps): update terraform to v8#5956
renovate-bot wants to merge 1 commit into
google:masterfrom
renovate-bot:renovate/major-terraform

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
google (source) required_provider major ~> 7.46.0 → ~> 8.3.0 8.4.0
google-beta (source) required_provider major ~> 7.46.0 → ~> 8.3.0 8.4.0

Release Notes

hashicorp/terraform-provider-google (google)

v8.3.0

Compare Source

v8.2.0

Compare Source

NOTES:

  • compute: migrate google_compute_subnetworks data source to use direct HTTP rather than a client library (#​29226)

FEATURES:

  • New List Resource: google_appengine_domain_mapping (#​29174)
  • New List Resource: google_appengine_service_network_settings (#​29174)
  • New List Resource: google_appengine_service_split_traffic (#​29174)
  • New List Resource: google_contact_center_insights_analysis_rule (#​29146)
  • New List Resource: google_contact_center_insights_assessment_rule (#​29146)
  • New List Resource: google_contact_center_insights_auto_labeling_rule (#​29146)
  • New List Resource: google_contact_center_insights_qa_scorecard (#​29146)
  • New List Resource: google_contact_center_insights_view (#​29146)
  • New List Resource: google_identityplatform_inbound_saml_config (#​29166)
  • New List Resource: google_identityplatform_oauth_idp_config (#​29166)
  • New List Resource: google_identityplatform_tenant (#​29166)
  • New List Resource: google_network_security_authz_policy (#​29142)
  • New List Resource: google_network_security_intercept_deployment_group (#​29142)
  • New List Resource: google_network_security_intercept_deployment (#​29142)
  • New List Resource: google_network_security_intercept_endpoint_group_association (#​29142)
  • New List Resource: google_network_security_intercept_endpoint_group (#​29142)
  • New List Resource: google_network_security_mirroring_deployment_group (#​29142)
  • New List Resource: google_network_security_mirroring_deployment (#​29142)
  • New List Resource: google_network_security_mirroring_endpoint_group_association (#​29142)
  • New List Resource: google_network_security_mirroring_endpoint_group (#​29142)
  • New List Resource: google_network_security_mirroring_endpoint (#​29142)
  • New List Resource: google_secret_manager_secret_iam_member (#​29221)
  • New List Resource: google_vertexai_dataset (#​29147)
  • New List Resource: google_vertexai_deployment_resource_pool (#​29147)
  • New List Resource: google_vertexai_evaluation_metric (#​29147)
  • New List Resource: google_vertexai_feature_group (#​29147)
  • New List Resource: google_vertexai_feature_online_store (#​29147)
  • New List Resource: google_vertexai_featurestore (#​29147)
  • New List Resource: google_vertexai_index (#​29147)
  • New List Resource: google_vertexai_persistent_resource (#​29147)
  • New List Resource: google_vertexai_reasoning_engine (#​29147)
  • New List Resource: google_vertexai_tensorboard (#​29147)
  • New Resource: google_biglake_hive_catalog (#​29223)
  • New Resource: google_biglake_hive_database (#​29223)
  • New Resource: google_biglake_hive_table (#​29223)
  • New Resource: google_bigquery_data_transfer_data_source_enrollment (#​29140)
  • New Resource: google_chronicle_case_close_definition (#​29228)
  • New Resource: google_chronicle_case_tag_definition (#​29236)
  • New Resource: google_observability_bucket (#​29225)
  • New Resource: google_observability_folder_settings (#​29225)
  • New Resource: google_observability_link (#​29161)
  • New Resource: google_observability_link (#​29225)
  • New Resource: google_observability_organization_settings (#​29225)
  • New Resource: google_observability_project_settings (#​29225)
  • New Resource: google_service_usage_v2_consumer_policy (#​29222)
  • New Resource: google_storage_ftp_user, google_storage_ftp_server (#​29155)

IMPROVEMENTS:

  • apikeys: added check_existing_usage field and FORCE deletion_policy support to google_apikeys_key (#​29153)
  • apikeys: added check_existing_usage field and FORCE deletion_policy support to google_apikeys_key (#​29154)
  • ces: added evaluation_metrics_thresholds.golden_hallucination_metric_behavior and evaluation_metrics_thresholds.scenario_hallucination_metric_behavior fields to google_ces_app and google_ces_app_version (#​29234)
  • ces: added locked and default_channel_profile.web_widget_config.security_settings fields to google_ces_app (#​29235)
  • ces: added logging_settings.metric_analysis_settings field to google_ces_app (#​29232)
  • ces: added proactive_execution_enabled field to google_ces_guardrail (#​29106)
  • cloudrunv2: supported explicitly disabling cpu_utilization and concurrency_utilization autoscaling thresholds with 0.0 in google_cloud_run_v2_service (#​29081)
  • compute: added architecture field to google_compute_machine_types data source (#​29170)
  • dlp: added big_query_target.cadence.refresh_frequency field to google_data_loss_prevention_discovery_config resource (#​29181)
  • gemini: added mutations_enabled field to google_gemini_gemini_gcp_enablement_setting (#​29164)
  • iap: added support for forwarding_rule resource types in google_iap_settings (#​29159)
  • storageftp: added labels field to google_storage_ftp_server (#​29173)
  • storageftp: added labels field to google_storage_ftp_user (#​29172)
  • vertexai: added audio_transcription field to google_vertex_ai_reasoning_engine resource (#​29144)
  • vertexai: added context_spec field to google_vertex_ai_reasoning_engine (#​29139)

BUG FIXES:

  • alloydb: fixed permadiff on network_config for google_alloydb_instance when enable_public_ip is set to false (#​29157)
  • apigee: fixed an issue where concurrently creating google_apigee_endpoint_attachment, google_apigee_instance_attachment, google_apigee_envgroup_attachment, google_apigee_environment, google_apigee_envgroup or google_apigee_nat_address resources could fail with a 400 error stating the resource is locked by another operation (#​29175)
  • colab: fixed an issue in google_colab_schedule where notebook_execution_job.workbench_runtime could not be configured with an empty value (#​29177)
  • compute: fix permadiff regression on google_compute_backend_service when iap is omitted (#​29156)
  • dataproc: fixed schema validation error when configuring disk_config under cluster_config.preemptible_worker_config on google_dataproc_cluster (#​29158)
  • gkehub: fixed issue the prevented workloadidentity and fleetobservability fields being set to empty values in the google_gke_hub_feature resource (#​29145)
  • storage: fixed a bug in data.google_storage_object_signed_url where an extension_headers name that was not all lowercase had its value dropped from the signature (#​29138)
  • vertexai: fixed google_vertex_ai_endpoint_with_model_garden_deployment not detecting drift in replica counts, because the resource had no Read implementation; out-of-band changes to min_replica_count, max_replica_count and required_replica_count are now surfaced on terraform plan (#​29104)

v8.1.0

Compare Source

NOTES:

  • compute: migrated google_compute_global_address data source to use direct HTTP rather than a client library (#​29038)
  • compute: migrated google_compute_interconnect_locations data source to use direct HTTP rather than a client library (#​29055)
  • compute: migrated google_compute_shared_vpc_host_project to use direct HTTP rather than a client library (#​29071)
  • container: migrated google_container_node_pool to use direct HTTP rather than a client library (#​29070)
  • resourcemanager: migrated google_project to use direct HTTP rather than a client library (#​29054)

DEPRECATIONS:

  • workstations: deprecated details in google_workstations_workstation_config (no longer populated by the API; will be removed in a future major release) (#​29075)

FEATURES:

  • New List Resource: google_apigee_addons_config (#​29039)
  • New List Resource: google_apigee_api_product (#​29067)
  • New List Resource: google_apigee_data_collector (#​29067)
  • New List Resource: google_apigee_datastore (#​29067)
  • New List Resource: google_apigee_endpoint_attachment (#​29067)
  • New List Resource: google_apigee_envgroup (#​29067)
  • New List Resource: google_apigee_environment_keyvaluemaps (#​29065)
  • New List Resource: google_apigee_organization (#​29065)
  • New List Resource: google_apigee_target_server (#​29065)
  • New List Resource: google_colab_notebook_execution (#​29064)
  • New List Resource: google_colab_runtime (#​29064)
  • New List Resource: google_colab_runtime_template (#​29064)
  • New List Resource: google_colab_schedule (#​29064)
  • New Resource: google_eventarc_pipeline_iam_binding (#​29080)
  • New Resource: google_eventarc_pipeline_iam_member (#​29080)
  • New Resource: google_eventarc_pipeline_iam_policy (#​29080)
  • New Resource: google_monitoring_snooze (#​29037)
  • New Resource: google_network_management_network_monitoring_provider (#​29056)
  • New Resource: google_observability_bucket (#​29076)
  • New Resource: google_scc_notification_service_account (#​29043)

IMPROVEMENTS:

  • bigqueryanalyticshub: added destination_pubsub_subscription to google_bigquery_analytics_hub_listing_subscription (#​29062)
  • ces: added api_authentication field to google_ces_tool.remote_agent_tool (#​29059)
  • ces: added error_handling_settings field to google_ces_app (#​29045)
  • ces: added instagram_credentials and whatsapp_credentials fields to google_ces_deployment resource (#​29040)
  • ces: added language_code_variable field to google_ces_agent resource (#​29063)
  • ces: added retention_window field to google_ces_app resource (#​29028)
  • ces: added vpc_sc_settings field to google_ces_app resource (#​29027)
  • ces: added whatsapp_config field to google_ces_app resource (#​29030)
  • cloudrunv2: added template.containers.sandbox_launcher field to google_cloud_run_v2_worker_pool resource (#​29061)
  • cloudrunv2: supported explicitly disabling cpu_utilization and concurrency_utilization autoscaling thresholds with 0.0 in google_cloud_run_v2_service (#​29081)
  • discoveryengine: added last_user_update_time field to google_discovery_engine_license_config resource (#​29058)
  • networkservices: added forward_attributes field to google_network_services_authz_extension (#​29025)
  • servicenetworking: added REMOVE_PEERING value to deletion_policy on google_service_networking_connection, which removes the VPC peering when the connection cannot be deleted because service producer resources still use it (#​29036)
  • vertexai: added gateway_configs field to google_vertex_ai_semantic_governance_policy_engine (#​29031)
  • vertexai: added spec.build_spec.service_account field to google_vertex_ai_reasoning_engine (#​29034)
  • vertexai: added spec.deployment_spec.agent_gateway_config field to google_vertex_ai_reasoning_engine (#​29029)
  • vertexai: added spec.source_code_spec.agent_config_source field to google_vertex_ai_reasoning_engine (#​29046)
  • vertexai: promoted build_spec to GA in google_vertex_ai_reasoning_engine (#​29077)

BUG FIXES:

  • clouddeploy: fixed tasks field being silently dropped from predeploy and postdeploy blocks across all strategy variants (#​29035)
  • composer: fixed google_composer_user_workloads_secret writing the secret data values into provider debug logs (#​29042)
  • container: switched to server side request validation to allow for concurrent Cluster Upgrades. google_container_cluster and google_container_node_pool resources will proceed while not in a resting state for updates (but will continue to wait for one after creates). (#​29068)
  • iam: fixed validation of google_iam_workload_identity_pool IDs ending in .svc.id.goog where the base name ends in one of the suffix's characters (#​29072)
  • provider: fixed an issue where an invalid credentials value could be echoed back in the error message when it failed to parse (#​29057)
  • workstations: fixed unconvertible type error when reading conditions in google_workstations_workstation_config and google_workstations_workstation_cluster (#​29075)

v8.0.0

Compare Source

Terraform Google Provider 8.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

  • beyondcorp: removed google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources, and the google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#​18675)
  • iap: removed google_iap_brand and google_iap_client resources, and the google_iap_client data source. (#​18679)
  • mlengine: removed google_ml_engine_model resource. Migrate machine learning deployments to google_vertex_ai_endpoint or Vertex AI Model Garden resources. (#​18681)
  • notebooks: removed google_notebooks_environment, google_notebooks_instance (and associated IAM resources), and google_notebooks_runtime (and associated IAM resources). Migrate to google_workbench_instance. (#​18583)
  • vertexai: removed google_vertex_ai_schedule resource. Use google_colab_schedule instead. (#​18673)

BREAKING FIELD REMOVALS:

  • backupdr: removed resource_type argument from google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references data sources. (#​18688)
  • cloudrunv2: removed custom_audiences field from google_cloud_run_v2_worker_pool resource. (#​18193)
  • cloudrunv2: removed http_get.http_headers.port probe field from google_cloud_run_v2_worker_pool resource. (#​18290)
  • compute: removed attachment attribute within logical_structure.*.zones from google_compute_interconnect_attachment_group resource in favor of attachments. (#​18676)
  • compute: removed reservation_block_count field from google_compute_reservation resource in favor of resource_status[0].reservation_block_count. (#​18611)
  • datalossprevention: removed actions.publish_findings_to_cloud_data_catalog field from google_data_loss_prevention_job_trigger resource in favor of actions.publish_findings_to_dataplex_catalog. (#​18530)
  • integrations: removed run_as_service_account argument from google_integrations_client resource. (#​18680)

BREAKING INCREASED VALIDATION:

  • bigquerydatatransfer: changed constraint between sensitive_params.0.secret_access_key and sensitive_params.0.secret_access_key_wo from AtLeastOneOf to ExactlyOneOf in google_bigquery_data_transfer_config resource. (#​18325)
  • cloudrunv2: made http_get.http_headers.name required when http_get.http_headers is set in google_cloud_run_v2_worker_pool resource. (#​18290)
  • iamworkforcepool: made claim_mapping a required field on create in google_iam_workforce_pool_provider_scim_tenant resource. (#​18348)
  • monitoring: changed constraint between http_check.0.auth_info.0.password and http_check.0.auth_info.0.password_wo to ExactlyOneOf in google_monitoring_uptime_check_config resource. (#​18325)
  • secretmanager: made secret_data_wo_version required when secret_data_wo is set (RequiredWith) in google_secret_manager_secret_version resource. (#​18325)
  • workflows: made source_contents a required argument in google_workflows_workflow resource. (#​18411)

OTHER BREAKING CHANGES:

  • bigquerydatatransfer: converted sensitive_params.0.secret_access_key_wo_version from Integer to String data type with state migration in google_bigquery_data_transfer_config resource. (#​18731)
  • bigquery: removed default_from_api for default_collation in google_bigquery_dataset resource; setting default_collation = "" now explicitly clears collation. (#​18585)
  • cloudsecuritycompliance: converted cloud_control_details from list to set in google_cloud_security_compliance_framework resource. (#​18596)
  • compute: added default empty strings ("") to project_id_or_num, network_url, and endpoint_url within consumer_accept_lists in google_compute_service_attachment resource to resolve permadiffs. (#​18276)
  • compute: changed default value of load_balancing_scheme from EXTERNAL to EXTERNAL_MANAGED in google_compute_backend_service and google_compute_global_forwarding_rule resources. (#​18557)
  • compute: updated guest_accelerator in google_compute_instance to plan and apply removal/replacement when count is explicitly set to 0 (or guest_accelerator = []). (#​18426)
  • compute: converted nat_subnets and consumer_reject_lists from list to set in google_compute_service_attachment resource. (#​18694)
  • container: extended name_prefix max length from 14 to 31 characters in google_container_node_pool and google_container_cluster resources. (#​18477)
  • container: converted enable_components in logging_config and monitoring_config from list to set in google_container_cluster resource. (#​18262)
  • secretmanager: converted secret_data_wo_version from Integer to String data type with state migration in google_secret_manager_secret_version resource. (#​18325)
hashicorp/terraform-provider-google-beta (google-beta)

v8.3.0

Compare Source

FEATURES:

  • New Data Source: google_compute_service_attachments (#​13086)
  • New List Resource: google_firebase_android_app (#​13102)
  • New List Resource: google_firebase_apple_app (#​13102)
  • New List Resource: google_firebase_web_app (#​13102)
  • New List Resource: google_pubsub_topic_iam_member (#​13093)
  • New Resource: google_chronicle_case_close_definition (#​13069)
  • New Resource: google_chronicle_case_stage_definition (#​13105)
  • New Resource: google_chronicle_case_tag_definition (#​13074)
  • New Resource: google_data_loss_prevention_content_policy (#​13121)
  • New Resource: google_gemini_gda_observability_setting_binding (#​13112)
  • New Resource: google_gemini_gda_observability_setting (#​13112)
  • New Resource: google_parameter_manager_template (#​13098)
  • New Resource: google_vertex_ai_rag_corpus (#​13085)

IMPROVEMENTS:

  • accesscontextmanager: added etag field to google_access_context_manager_service_perimeter (#​13095)
  • alloydb: added ALLOYDB_IAM_GROUP as a possible value for user_type in google_alloydb_user (#​13104)
  • bigquerydatatransfer: added output fields to google_bigquery_data_transfer_data_source_enrollment (#​13101)
  • ces: added channel_profile.whatsapp_config field to google_ces_deployment (#​13107)
  • ces: added evaluation_metrics_thresholds.golden_evaluation_metrics_thresholds.tool_matching_settings.extra_tool_call_behavior field to google_ces_app (#​13080)
  • ces: added evaluation_metrics_thresholds.golden_evaluation_metrics_thresholds.turn_level_metrics_thresholds.semantic_similarity_channel field to google_ces_app (#​13077)
  • ces: added evaluation_metrics_thresholds.golden_hallucination_metric_behavior and evaluation_metrics_thresholds.scenario_hallucination_metric_behavior fields to google_ces_app and google_ces_app_version (#​13072)
  • ces: added locked and default_channel_profile.web_widget_config.security_settings fields to google_ces_app (#​13073)
  • ces: added logging_settings.metric_analysis_settings field to google_ces_app (#​13070)
  • ces: added mcp_toolset.tool_overrides field to google_ces_toolset (#​13117)
  • ces: added transfer_rules field to google_ces_agent (#​13096)
  • chronicle: added base64_image, dynamic_parameters, instance_uri, and weight fields to google_chronicle_environment (#​13099)
  • cloudsecuritycompliance: added parameter_spec.sub_parameters.sub_parameters and nested oneof_value fields to google_cloud_security_compliance_cloud_control (#​13123)
  • dataplex: added data_documentation_spec.sql_dialect field to google_dataplex_datascan (#​13111)
  • dataproc: added instance_flexibility_policy to master_config, worker_config, and secondary_worker_config in google_dataproc_workflow_template (#​13113)
  • gkehub: added default_cluster_config.compliance_posture_config and labels to google_gke_hub_fleet (#​13078)
  • managedkafka: added public_cluster_config, public_cluster_details, and bootstrap_address fields to google_managed_kafka_cluster resource (#​13103)
  • parametermanager: added tags field to google_parameter_manager_parameter and google_parameter_manager_regional_parameter to allow setting tags for parameters at creation time (#​13124)

BUG FIXES:

  • accesscontextmanager: fixed bug in google_access_context_manager_service_perimeter where changes to the status / spec fields could cause updates to related ingress/egress policies even if those fields weren't specified on google_access_context_manager_service_perimeter (#​13095)
  • accesscontextmanager: fixed sending of etag on update requests for google_access_context_manager_service_perimeter_egress_policy and google_access_context_manager_service_perimeter_ingress_policy to prevent concurrent requests from impacting each other (#​13095)
  • biglakeiceberg: fixed an issue where creating a partitioned google_biglake_iceberg_table failed due to missing field-id (#​13120)
  • compute: fixed a bug where an explicitly configured advanced_machine_features.performance_monitoring_unit = "STANDARD" was dropped on creation for google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template (#​13127)
  • config: fixed diff when artifacts_gcs_bucket is not specified on google_config_deployment (#​13092)
  • provider: added validation to reject more than one external_credentials or batching block, matching the existing SDK behavior (#​13100)

v8.2.0

Compare Source

NOTES:

  • compute: migrate google_compute_subnetworks data source to use direct HTTP rather than a client library (#​13067)

FEATURES:

  • New List Resource: google_appengine_domain_mapping (#​13055)
  • New List Resource: google_appengine_service_network_settings (#​13055)
  • New List Resource: google_appengine_service_split_traffic (#​13055)
  • New List Resource: google_contact_center_insights_analysis_rule (#​13036)
  • New List Resource: google_contact_center_insights_assessment_rule (#​13036)
  • New List Resource: google_contact_center_insights_auto_labeling_rule (#​13036)
  • New List Resource: google_contact_center_insights_qa_scorecard (#​13036)
  • New List Resource: google_contact_center_insights_view (#​13036)
  • New List Resource: google_identityplatform_inbound_saml_config (#​13050)
  • New List Resource: google_identityplatform_oauth_idp_config (#​13050)
  • New List Resource: google_identityplatform_tenant (#​13050)
  • New List Resource: google_network_security_authz_policy (#​13032)
  • New List Resource: google_network_security_intercept_deployment_group (#​13032)
  • New List Resource: google_network_security_intercept_deployment (#​13032)
  • New List Resource: google_network_security_intercept_endpoint_group_association (#​13032)
  • New List Resource: google_network_security_intercept_endpoint_group (#​13032)
  • New List Resource: google_network_security_mirroring_deployment_group (#​13032)
  • New List Resource: google_network_security_mirroring_deployment (#​13032)
  • New List Resource: google_network_security_mirroring_endpoint_group_association (#​13032)
  • New List Resource: google_network_security_mirroring_endpoint_group (#​13032)
  • New List Resource: google_network_security_mirroring_endpoint (#​13032)
  • New List Resource: google_network_security_sac_realm (#​13032)
  • New List Resource: google_secret_manager_secret_iam_member (#​13062)
  • New List Resource: google_vertexai_dataset (#​13037)
  • New List Resource: google_vertexai_deployment_resource_pool (#​13037)
  • New List Resource: google_vertexai_evaluation_metric (#​13037)
  • New List Resource: google_vertexai_feature_group (#​13037)
  • New List Resource: google_vertexai_feature_online_store (#​13037)
  • New List Resource: google_vertexai_featurestore (#​13037)
  • New List Resource: google_vertexai_index (#​13037)
  • New List Resource: google_vertexai_persistent_resource (#​13037)
  • New List Resource: google_vertexai_reasoning_engine (#​13037)
  • New List Resource: google_vertexai_tensorboard (#​13037)
  • New Resource: google_bigquery_data_transfer_data_source_enrollment (#​13030)
  • New Resource: google_chronicle_case_close_definition (#​13069)
  • New Resource: google_observability_link (#​13046)
  • New Resource: google_service_usage_v2_consumer_policy (#​13063)
  • New Resource: google_storage_ftp_user, google_storage_ftp_server (#​13040)

IMPROVEMENTS:

  • apikeys: added check_existing_usage field and FORCE deletion_policy support to google_apikeys_key (#​13038)
  • apikeys: added check_existing_usage field and FORCE deletion_policy support to google_apikeys_key (#​13039)
  • appengine: added vpc_access field to google_app_engine_standard_app_version resource (#​13027)
  • ces: added proactive_execution_enabled field to google_ces_guardrail (#​13025)
  • cloudrunv2: supported explicitly disabling cpu_utilization and concurrency_utilization autoscaling thresholds with 0.0 in google_cloud_run_v2_service (#​13022)
  • compute: added architecture field to google_compute_machine_types data source (#​13052)
  • dlp: added big_query_target.cadence.refresh_frequency field to google_data_loss_prevention_discovery_config resource (#​13060)
  • gemini: added mutations_enabled field to google_gemini_gemini_gcp_enablement_setting (#​13049)
  • iap: added support for forwarding_rule resource types in google_iap_settings (#​13044)
  • storageftp: added labels field to google_storage_ftp_server (#​13054)
  • storageftp: added labels field to google_storage_ftp_user (#​13053)
  • vertexai: added audio_transcription field to google_vertex_ai_reasoning_engine resource (#​13034)

BUG FIXES:

  • alloydb: fixed permadiff on network_config for google_alloydb_instance when enable_public_ip is set to false (#​13042)
  • apigee: fixed an issue where concurrently creating google_apigee_endpoint_attachment, google_apigee_instance_attachment, google_apigee_envgroup_attachment, google_apigee_environment, google_apigee_envgroup or google_apigee_nat_address resources could fail with a 400 error stating the resource is locked by another operation (#​13056)
  • colab: fixed an issue in google_colab_schedule where notebook_execution_job.workbench_runtime could not be configured with an empty value (#​13057)
  • compute: fix permadiff regression on google_compute_backend_service when iap is omitted (#​13041)
  • dataproc: fixed schema validation error when configuring disk_config under cluster_config.preemptible_worker_config on google_dataproc_cluster (#​13043)
  • gkehub: fixed issue the prevented workloadidentity and fleetobservability fields being set to empty values in the google_gke_hub_feature resource (#​13035)
  • storage: fixed a bug in data.google_storage_object_signed_url where an extension_headers name that was not all lowercase had its value dropped from the signature (#​13028)
  • vertexai: fixed google_vertex_ai_endpoint_with_model_garden_deployment not detecting drift in replica counts, because the resource had no Read implementation; out-of-band changes to min_replica_count, max_replica_count and required_replica_count are now surfaced on terraform plan (#​13023)

v8.1.0

Compare Source

v8.0.0

Compare Source

Terraform Google Provider Beta 8.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

  • beyondcorp: removed google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources, and the google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#​18675)
  • iap: removed google_iap_brand and google_iap_client resources, and the google_iap_client data source. (#​18679)
  • mlengine: removed google_ml_engine_model resource. Migrate machine learning deployments to google_vertex_ai_endpoint or Vertex AI Model Garden resources. (#​18681)
  • notebooks: removed google_notebooks_environment, google_notebooks_instance (and associated IAM resources), and google_notebooks_runtime (and associated IAM resources). Migrate to google_workbench_instance. (#​18583)
  • vertexai: removed google_vertex_ai_schedule resource. Use google_colab_schedule instead. (#​18673)

BREAKING FIELD REMOVALS:

  • backupdr: removed resource_type argument from google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references data sources. (#​18688)
  • cloudrunv2: removed custom_audiences field from google_cloud_run_v2_worker_pool resource. (#​18193)
  • cloudrunv2: removed http_get.http_headers.port probe field from google_cloud_run_v2_worker_pool resource. (#​18290)
  • compute: removed attachment attribute within logical_structure.*.zones from google_compute_interconnect_attachment_group resource in favor of attachments. (#​18676)
  • compute: removed reservation_block_count field from google_compute_reservation resource in favor of resource_status[0].reservation_block_count. (#​18611)
  • datalossprevention: removed actions.publish_findings_to_cloud_data_catalog field from google_data_loss_prevention_job_trigger resource in favor of actions.publish_findings_to_dataplex_catalog. (#​18530)
  • integrations: removed run_as_service_account argument from google_integrations_client resource. (#​18680)
  • netapp: removed scale_tier argument from google_netapp_storage_pool resource in favor of scale_type. (#​18286)

BREAKING INCREASED VALIDATION:

  • bigquerydatatransfer: changed constraint between sensitive_params.0.secret_access_key and sensitive_params.0.secret_access_key_wo from AtLeastOneOf to ExactlyOneOf in google_bigquery_data_transfer_config resource. (#​18325)
  • cloudrunv2: made http_get.http_headers.name required when http_get.http_headers is set in google_cloud_run_v2_worker_pool resource. (#​18290)
  • iamworkforcepool: made claim_mapping a required field on create in google_iam_workforce_pool_provider_scim_tenant resource. (#​18348)
  • monitoring: changed constraint between http_check.0.auth_info.0.password and http_check.0.auth_info.0.password_wo to ExactlyOneOf in google_monitoring_uptime_check_config resource. (#​18325)
  • secretmanager: made secret_data_wo_version required when secret_data_wo is set (RequiredWith) in google_secret_manager_secret_version resource. (#​18325)
  • workflows: made source_contents a required argument in google_workflows_workflow resource. (#​18411)

OTHER BREAKING CHANGES:

  • bigquerydatatransfer: converted sensitive_params.0.secret_access_key_wo_version from Integer to String data type with state migration in google_bigquery_data_transfer_config resource. (#​18731)
  • bigquery: removed default_from_api for default_collation in google_bigquery_dataset resource; setting default_collation = "" now explicitly clears collation. (#​18585)
  • cloudsecuritycompliance: converted cloud_control_details from list to set in google_cloud_security_compliance_framework resource. (#​18596)
  • compute: added default empty strings ("") to project_id_or_num, network_url, and endpoint_url within consumer_accept_lists in google_compute_service_attachment resource to resolve permadiffs. ([#​18276](https://redirect.github.com/Google

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on wednesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026
@renovate-bot
renovate-bot force-pushed the renovate/major-terraform branch 6 times, most recently from 6dfc2ee to b33d8fe Compare September 8, 2026 18:23
@renovate-bot
renovate-bot force-pushed the renovate/major-terraform branch 5 times, most recently from de2ef3f to d71f2a1 Compare September 16, 2026 04:31
@renovate-bot
renovate-bot force-pushed the renovate/major-terraform branch from d71f2a1 to ba28b98 Compare September 16, 2026 12:55
michaelkedar
michaelkedar previously approved these changes Sep 18, 2026
View reviewed changes
@renovate-bot
renovate-bot force-pushed the renovate/major-terraform branch 2 times, most recently from a30bcc1 to d2c1637 Compare September 23, 2026 20:46
@renovate-bot
renovate-bot force-pushed the renovate/major-terraform branch from d2c1637 to e401dfb Compare September 24, 2026 22:57

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@michaelkedar michaelkedar michaelkedar left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @michaelkedar