chore(deps): update terraform google-beta to v7

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
google-beta (source)	provider	major	~> 6.47.0 -> ~> 7.15.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

hashicorp/terraform-provider-google-beta (google-beta)

v7.15.0

Compare Source

v7.14.1

Compare Source

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#​11302)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#​11297)

v7.14.0

Compare Source

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#​11253)

FEATURES:

• New Data Source: google_artifact_registry_versions (#​11266)
• New Data Source: google_cloud_identity_policies (#​11267)
• New Data Source: google_compute_region_security_policy (#​11254)
• New Data Source: google_compute_storage_pool (#​11251)
• New Resource: google_compute_region_health_sources (#​11271)
• New Resource: google_network_services_multicast_group_consumer_activation (#​11269)
• New Resource: google_network_services_multicast_group_producer_activation (#​11243)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#​11250)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#​11264)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#​11231)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#​11262)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#​11236)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#​11239)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#​11263)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#​11257)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#​11270)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#​11240)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#​11244)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#​11265)

v7.13.0

Compare Source

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#​11158)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#​11110)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#​11230)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#​11096)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#​11159)

FEATURES:

• New Resource: google_ces_app_version (#​11128)
• New Resource: google_dialogflow_generator (#​11144)
• New Resource: google_dialogflow_version (#​11079)
• New Resource: google_discovery_engine_widget_config (#​11166)
• New Resource: google_iam_workforce_pool_provider_scim_token (#​11113)
• New Resource: google_network_connectivity_gateway_advertised_route (#​11156)
• New Resource: google_network_security_sac_attachment (#​11146)
• New Resource: google_network_security_sac_realm (#​11084)
• New Resource: google_network_services_lb_edge_extension (#​11129)
• New Resource: google_network_services_multicast_consumer_association (#​11141)
• New Resource: google_network_services_multicast_group_range_activation (#​11174)
• New Resource: google_network_services_multicast_group_range (#​11151)
• New Resource: google_network_services_multicast_producer_association (#​11123)

IMPROVEMENTS:

• alloydb: added password_wo and password_wo_version fields to google_alloydb_user resource (#​11109)
• apphub: added identity field to google_apphub_service and google_apphub_workload resources (#​11155)
• backupdr: added encryption_config field to google_backup_dr_backup_vault resource (#​11086)
• bigquery: added external_runtime_options and python_options fields to bigquery_routine resource (#​11125)
• ces: added client_function.parameters.max_items, client_function.parameters.min_items, client_function.parameters.maximum, client_function.parameters.minimum, client_function.parameters.title, client_function.response.max_items, client_function.response.min_items, client_function.response.maximum, client_function.response.minimum, and client_function.response.title fields to google_ces_tool resource (#​11131)
• ces: added entry_agent field to google_ces_example resource (#​11081)
• ces: added google_search_tool.context_urls, google_search_tool.preferred_domains, and open_api_tool.api_authentication.bearer_token_config fields to google_ces_tool resource (#​11131)
• ces: added message.chunk.tool_response and message.chunk.tool_call fields to google_ces_example resource (#​11081)
• ces: added pinned and variable_declarations.schema.title fields to google_ces_app resource (#​11090)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework_deployment resource (#​11170)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework resource (#​11170)
• cloudsecuritycompliance: added parameter_spec.default_value.oneof_value and validation.allowed_values.values.oneof_value fields to google_cloud_security_compliance_cloud_control resource (#​11228)
• cloudsecuritycompliance: added sub_parameters field to google_cloud_security_compliance_cloud_control resource (#​11228)
• colab: added custom_environment_spec field to google_colab_notebook_execution resource (#​11167)
• compute: added network_pass_through_lb_traffic_policy field to google_compute_region_backend_service resource. (#​11088)
• compute: added params field to google_compute_interconnect resource (#​11149)
• compute: added show_nat_ips and nat_ips fields to google_compute_service_attachment (#​11127)
• compute: added snapshot_type field to google_compute_snapshot resource (#​11147)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#​11231)
• container: added autoscaled_rollout_policy field to google_container_node_pool resource (beta) (#​11154)
• container: added node_kernel_module_loading.policy field to google_container_node_pool and google_container_cluster resources (#​11171)
• filestore: added support for updating directory_services fields in place in google_filestore_instance (#​11137)
• iamworkforcepool: added claim_mapping, purge_time, and service_agent fields to google_iam_workforce_pool_provider_scim_tenant resource (#​11113)
• looker: added controlled_egress_enabled and controlled_egress_config fields to google_looker_instance resource (#​11082)
• lustre: added kms_key field to google_lustre_instance resource (#​11104)
• modelarmor: added google_mcp_server_floor_setting field to google_model_armor_floorsetting resource (#​11135)
• monitoring: fixes an issue with google_monitoring_alert_policy where it ignores the resource project during Import (#​11120)
• netapp: added public docs link for google_netapp_host_group resource (#​11160)
• netapp: added 'nfsv4' to custom update export_policy object in google_netapp_volume resource (#​11229)
• networksecurity: added field custom_mirroring_profile.mirroring_deployment_groups and output field custom_mirroring_profile.mirroring_endpoint_group_type to google_network_security_security_profile resource (beta) (#​11095)
• oracledatabase: added properties.cpu_core_count, properties.secret_id, and properties.vault_id fields to google_oracle_database_autonomous resource (#​11107)
• oracledatabase: added properties.time_zone.version field to google_oracle_database_cloud_vm_cluster resource (#​11107)
• servicedirectory: replaced metadata KeyValuePair with annotations KeyValueAnnotations in google_service_directory_service, and google_service_directory_endpoint resources (#​11078)
• sql: added write-only argument for root_password in google_sql_database_instance resource (#​11098)
• storage: added contexts for resource google_storage_bucket_object (#​11145)
• vertex_ai: added resourceLimits, minInstances, maxInstances, containerConcurrency and sourceCodeSpec fields to google_vertex_ai_reasoning_engine resource (#​11148)

BUG FIXES:

• bigquery: fixed the permadiff when email field values contain non-lower-case characters in access in google_bigquery_dataset (#​11139)
• bigquery: fixed the permadiff when table schema is unchanged for a google_bigquery_table with row access policies (#​11102)
• cloudrunv2: fixed permadiff if scaling field is unset on resource google_cloud_run_v2_service (#​11132)
• compute: fixed an issue where the bgp_always_compare_med field could not be unset in in google_compute_network. It can now be unset by configuring the new field delete_bgp_always_compare_med to a value of true. (#​11121)
• compute: fixed crashes when no network_endpoints block specified in google_compute_network_endpoints resource or no network endpoints exist (#​11085)
• compute: fixed the terms field in google_compute_router_route_policy to be updatable without forcing resource recreation (#​11122)
• container: fixed a perpetual diff in google_container_cluster resource when enable_l4_ilb_subsetting is enabled by the GKE control plane and not explicitly set in the configuration (#​11143)
• dialogflowcx: fixed update_mask in google_dialogflow_cx_playbook where a granular update mask is required. (#​11100)
• discoveryengine: fixed a permadiff on advanced_site_search_config in google_discovery_engine_data_store resource (#​11175)
• iamworkforcepool: fixed bug in google_iam_workforce_pool_provider_scim_token where base_uri wasn't set correctly from the API (#​11113)
• logging: fixed an issue with google_logging_*_sink.include_children fields not being updatable to true (#​11094)
• memorystore: fixed an issue where a permadiff on desired_auto_created_endpoints caused the google_memorystore_instance resource to recreated. (#​11119)
• spanner: prevented recreation when kms_key_name and kms_key_names are same for google_spanner_database (#​11083)

v7.12.0

Compare Source

DEPRECATIONS:

• backupdr: deprecated required_type in google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references. Both resources no longer have functionality, and will be removed in the next major release. (#​25107)

FEATURES:

• New Resource: google_ces_agent (#​11033)
• New Resource: google_ces_guardrail (#​11037)
• New Resource: google_ces_tool (#​11038)
• New Resource: google_cloud_security_compliance_cloud_control (#​11056)
• New Resource: google_cloud_security_compliance_framework_deployment (#​11057)
• New Resource: google_cloud_security_compliance_framework (#​11036)
• New Resource: google_discovery_engine_serving_config (#​11032)
• New Resource: google_oracle_database_exascale_db_storage_vault (#​11048)

IMPROVEMENTS:

• apphub: added functional_type, registration_type, and extended_metadata fields to google_apphub_service and google_apphub_workload resources (#​11062)
• ces: added bearer_token_config field to google_ces_toolset (#​11044)
• ces: added client_certificate_settings field to google_ces_app resource (#​11042)
• compute: added block_names field to google_compute_reservation resource (#​11046)
• compute: added resolve_subnetwork_mask field to the google_compute_subnetwork (#​11051)
• compute: added sub_block_names field to google_compute_reservation_block data source (#​11046)
• compute: added tls_settings field to google_compute_regional_backend_service resource (#​11025)
• container: added end_time_behavior field to google_container_cluster resource (#​11045)
• container: added secret_sync_config field to google_container_cluster resource (beta) (#​11049)
• container: added writable_cgroups field to node_config.defaults.containerd_config in google_container_cluster resource (#​25140)
• dataplex: added catalog_publishing_enabled field to data_profile_spec in google_dataplex_datascan resource (#​11060)
• dns: added forwarding_config.target_name_servers.ipv6_address argument to google_dns_managed_zone resource (#​11050)
• gkeonprem: added advanced_networking, multiple_network_interfaces_config and bgp_lb_config fields to google_gkeonprem_bare_metal_cluster resource (#​11055)
• managedkafka: added broker_capacity_config field to google_managed_kafka_cluster resource (#​11027)
• networksecurity: added endpoint_settings.jumbo_frames_enabled field to google_network_security_firewall_endpoint resource (#​11026)
• run: added readiness_probe field to cloud_run_service resource (#​11039)

BUG FIXES:

• backupdr: updated google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references to use LIST APIs, and require the correct List permissions (#​11034)
• provider: resolved an issue preventing X.509 certificates from being used for authentication when supplied as Application Default Credentials (#​11061)

v7.11.0

Compare Source

DEPRECATIONS:

• pubsublite: google_pubsub_lite_reservation will be turned down effective March 18, 2026. Use google_pubsub_reservation instead. (#​11022)
• pubsublite: google_pubsub_lite_subscription will be turned down effective March 18, 2026. Use google_pubsub_subscription instead. (#​11022)
• pubsublite: google_pubsub_lite_topic will be turned down effective March 18, 2026. Use google_pubsub_topic instead. (#​11022)

BREAKING CHANGES:

• netapp: made google_netapp_volume.export_policy.rules.squash_mode not preserve values returned by the API. Without this change, unsetting squash_mode in the provider can cause an API error. (#​11023)

FEATURES:

• New Data Source: google_artifact_registry_python_packages (#​11017)
• New Data Source: google_cloud_identity_policy (#​10991)
• New Data Source: google_compute_reservation_block (#​11005)
• New Data Source: google_compute_reservation_sub_block (#​11005)
• New Resource: google_ces_deployment (#​10990)
• New Resource: google_ces_example (#​11020)
• New Resource: google_compute_region_health_aggregation_policy (#​10995)
• New Resource: google_discovery_engine_user_store (#​11018)

IMPROVEMENTS:

• bigquery: added external_data_configuration.decimal_target_types to google_bigquery_table (#​10983)
• compute: added internal_ipv6_prefix field to the google_compute_subnetwork resource (#​11007)
• compute: added ipv6_access_type field and INTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#​10985)
• compute: added ipv6_access_type field to google_compute_public_advertised_prefix resource (#​10978)
• dataplex: added data_documentation_spec field to google_dataplex_datascan resource to support the DATA_DOCUMENTATION scan type (#​11014)
• dataproc: added resource_manager_tags to google_dataproc_cluster resource (#​11021)
• lustre: added placement_policy field to google_lustre_instance resource (#​11011)
• netapp: added cache_parameters field to google_netapp_volume resource (#​10976)
• secretmanager: added project and short name support for secret on google_secret_manager_secret_version (#​11015)
• secretmanager: added project and short name support for secret on ephemeral google_secret_manager_secret_version (#​11015)

BUG FIXES:

• alloydb: fixed issue with creation when initial_user.password was set to a computed value in google_alloydb_cluster (#​11006)
• bigquery: fixed extraneous diffs in google_bigquery_table.external_data_configuration.schema (#​10983)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#​10998)
• container: added KUBE_DNS as an accepted value for cluster_dns field on google_container_cluster (#​10997)
• netapp: fixed bug where unsetting export_policy.rules.squash_mode on google_netapp_volume can cause an API error (#​11023)
• pubsub: fixed bug where google_pubsub_subscription could only be updated if bigquery_config was modified (#​10996)
• sql: fixed bug where final_backup_description in google_sql_database_instance resource wasn't set on the final backup on delete (#​11019)
• storage: fixed bug where certain changes to google_storage_bucket_acl.role_entity were ignored (#​10994)
• workstations: fixed bug in google_workstations_workstation where setting source_workstation caused a permadiff that forced recreation (#​10986)
• vmwareengine: made deletion of google_vmwareengine_private_cloud wait until the deletion completes (#​11010)

v7.10.0

Compare Source

BREAKING CHANGES:

• alloydb: marked initial_user.password as required on create of new google_alloydb_cluster resources. This change aligns the provider with existing API constraints to surface errors earlier. (#​10999)

FEATURES:

• New Resource: google_ces_app (#​10950)
• New Resource: google_ces_toolset (#​10967)
• New Resource: google_discovery_engine_control (#​10966)
• New Resource: google_netapp_host_group (#​10959)
• New Resource: google_network_security_mirroring_endpoint (beta) (#​10941)
• New Resource: google_network_services_multicast_domain (#​10952)
• New Resource: google_privileged_access_manager_settings (#​10961)
• New Ephemeral Resource: google_client_config (#​10975)

IMPROVEMENTS:

• cloudfunctions2: added direct_vpc_network_interface and direct_vpc_egress field to google_cloudfunctions2_function resource (#​10971)
• cloudrunv2: added template.container.depends_on field to google_cloud_run_v2_worker_pool resource (#​10970)
• container: added network_tier_config to google_container_cluster resource. (#​10960)
• eventarc: added labels field to google_eventarc_channel resource (#​10944)
• netapp: added block_devices field and ISCSI protocol support to goolge_netapp_volume resource, and increased timeouts on its operations (#​10974)
• netapp: added additional field type in google_netapp_storage_pool resource (#​10953)
• vertexai: added psc_automation_configs field to google_vertex_ai_endpoint resource (#​10956)
• vertexai: added sync_config.continuous field to google_vertex_ai_feature_online_store_featureview (#​10964)

BUG FIXES:

• accesscontextmanager: fixed issue where google_access_context_manager_service_perimeter_[dry_run_][egress|ingress]_policy caused the provider to crash when a provided identity casing was invalid. (#​10968)
• apigee: fixed issue where credentials block was not populated in the Terraform state in google_apigee_developer_app resource (#​10963)
• compute: fixed google_compute_network_firewall_policy_rule staying disabled after apply with disabled = false (#​10962)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#​10998)
• compute: resolve permadiff for display_name in new deployments of google_compute_organization_security_policy (#​10965)
• storage: fixed a conversion error in google_storage_bucket state migration. This bug impacted Pulumi users. (#​10943)

v7.9.0

Compare Source

BREAKING CHANGES:

• beyondcorp: made the ports field in endpoint_matchers required in response to a change in the API surface. (#​10909)

FEATURES:

• New Resource: google_firestore_user_creds (#​10922)
• New Resource: google_network_security_dns_threat_detector (#​10898)

IMPROVEMENTS:

• appengine: added ssl_policy to application on google_app_engine_application resource (#​10915)
• bigquery: added support for IAM conditions in google_bigquery_dataset_iam_* resources (#​10913)
• container: added dns_endpoint_confg.enable_k8s_tokens_via_dns and dns_endpoint_config.enable_k8s_certs_via_dns fields to google_container_cluster resource (#​10910)
• container: added fleet.membership_type field to google_container_cluster resource (#​10901)
• dataplex: added data_classification field to google_dataplex_aspect_type resource (#​10929)
• iamworkforcepool: added scim_usage field to workforce_pool_provider resource (#​10916)
• memorystore: added available_maintenance_versions field to google_memorystore_instance resource (#​10899)
• memorystore: added maintenance_version field to google_memorystore_instance resource (#​10896)
• redis: added available_maintenance_versions field to google_redis_cluster resource (#​10899)
• redis: added maintenance_version field to google_redis_cluster resource (#​10896)
• storagetransfer: added transfer_manifest field to google_storage_transfer_job resource (#​10907)

BUG FIXES:

• bigquery: added validation for target_types in google_bigquery_dataset_access (#​10932)
• cloudquotas: resolved permadiff for preferred_value in google_cloud_quotas_quota_preference (#​10911)
• compute: fixed scenario where google_compute_instance would not be staged for recreation if guest_accelerator.count was updated to 0 from non-zero value (#​10902)
• sql: fixed an issue where dataDiskSize was unintentionally null instead of set to the current value in API requests, triggering unrelated errors (#​10919)

v7.8.0

Compare Source

FEATURES:

• New Data Source: google_artifact_registry_packages (#​10869)
• New Data Source: google_network_management_connectivity_tests (#​10856)
• New Resource: google_apigee_environment_api_revision_deployment (#​10862)
• New Resource: google_dataplex_entry_link (#​10893)
• New Resource: google_discovery_engine_assistant (#​10885)
• New Resource: google_observability_trace_scope (#​10873)
• New Resource: google_oracle_database_db_system (#​10889)
• New Resource: google_saas_runtime_unit (#​10865)

IMPROVEMENTS:

• compute: added IN_FLIGHT to balancing_mode on google_compute_backend_service resource (#​10875)
• compute: added ncc_gateway field to google_compute_router resource (beta) (#​10894)
• compute: added new field instance_lifecycle_policy.on_repair.allow_changing_zone to google_compute_region_instance_group_manager & google_compute_instance_group_manager (#​10871)
• compute: promoted security_policy in compute_region_backend_service resource to GA (#​10866)
• compute: promoted the google_compute_preview_feature resource to GA. (#​10886)
• compute: the activation_status attribute within the google_compute_preview_feature resource now uses the ACTIVATION_STATE_UNSPECIFIED value instead of DISABLED. Support for DISABLED will be added in a future release. (#​10886)
• datastream: added backfill_all.mongodb_excluded_objects and source_config.mongodb_source_config fields to google_datastream_stream (#​10888)
• datastream: added mongodb_profile field to google_datastream_connection_profile (#​10888)
• discoveryengine: added connector_modes, sync_mode, incremental_refresh_interval, auto_run_disabled, and incremental_sync_disabled fields to google_discovery_engine_data_connector resource (#​10863)
• discoveryengine: added kms_key_name field to google_discovery_engine_search_engine resource (#​10863)
• discoveryengine: added in-place update support for entities.params and entities.key_property_mappings in google_discovery_engine_data_connector (#​10895)
• dlp: added publish_findings_to_dataplex_catalog field to google_data_loss_prevention_job_trigger (#​10883)
• iambeta: allowed GKE workload identity pool pattern in workload_identity_pool_id field of google_iam_workload_identity_pool resource. (#​10861)
• memorystore: added maintenance_version field to google_memorystore_instance resource (#​10896)
• memorystore: added available_maintenance_versions field to google_memorystore_instance resource (#​10899)
• networkconnectivity: added HYBRID_INSPECTION enum value to preset_topology field in google_network_connectivity_hub resource (#​10894)
• networkconnectivity: added gateway field to google_network_connectivity_spoke resource (beta) (#​10894)
• networkservices: added isolationConfig on google_network_services_service_lb_policies resource (#​10858)
• redis: added deletion_protection field to redis_instance to make deleting them require an explicit intent. redis_instance resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#​10860)
• redis: added maintenance_version field to google_redis_cluster resource (#​10896)
• redis: added available_maintenance_versions field to google_redis_cluster resource (#​10899)
• saas_runtime: added default_release field to google_saas_runtime_unit_kind resource (#​10887)
• sql: added read_pool_auto_scale_config support to sql_database_instance resource (#​10884)

BUG FIXES:

• bigquery: fixed the issue where google_bigquery_table detected an incorrect schema diff on tables with row access policies when the schema was unchanged. (#​10876)
• compute: allow requested_link_count to be updated in-place in google_compute_interconnect resource (#​10870)

v7.7.0

Compare Source

BREAKING CHANGES:

• discoveryengine: changed type of google_discovery_engine_data_connector.entities.params. Previously, it was a map of string keys to string values; now, it must be a JSON-encoded string containing an object. This change is being made in a minor release because the field wasn't usable as intended – specifically, all current valid uses require mapping strings to lists of strings. (#​10863)

FEATURES:

• New Data Source: google_network_management_connectivity_tests (#​10856)
• New Resource: google_apigee_developer_app (#​10851)
• New Resource: google_discovery_engine_license_config (#​10848)
• New Resource: google_iam_workforce_pool_provider_scim_tenant (#​10834)
• New Resource: google_kms_project_kaj_policy_config (#​10850)
• New Resource: google_saas_runtime_tenant (#​10841)

IMPROVEMENTS:

• apigee: updated the scopes argument in google_apigee_api_product resource to be order-insensitive. (#​10851)
• beyondcorp: added proxy_protocol_config and service_discovery fields to google_beyondcorp_security_gateway resource (#​10842)
• cloudrunv2: added health_check_disabled field to google_cloud_run_v2_service resource. (#​10839)
• compute: added params field to google_compute_router resource (GA) (#​10844)
• discoveryengine: added connector_modes, sync_mode, incremental_refresh_interval, auto_run_disabled, and incremental_sync_disabled fields to google_discovery_engine_data_connector resource (#​10863)
• discoveryengine: added kms_key_name field to google_discovery_engine_search_engine resource (#​10863)
• dlp: added publish_to_dataplex_catalog field to discovery_config resource (#​10849)
• gkeonprem: made it possible to set the on_prem_version field on google_gkeonprem_vmware_node_pool (previously output-only) (#​10847)
• memcache: added deletion_protection field to memcache_instance to make deleting them require an explicit intent. memcache_instance resources now cannot be destroyed unless deletion_protection = false is set for the resource. (#​10846)
• metastore: added tags field to google_dataproc_metastore_service and 'google_dataproc_metastore_federation' resources to allow setting tags for services and federation at creation time (#​10854)
• networksecurity: added URL_FILTERING option to enum field type for google_network_security_security_profile resource (#​10829)
• networksecurity: added url_filtering_profile field to google_network_security_security_profile_group resource (#​10829)
• networksecurity: added url_filtering_profile field to google_network_security_security_profile resource (#​10829)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#​10827)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#​10827)

BUG FIXES:

• bigqueryanalyticshub: fixed google_bigquery_analytics_hub_listing_subscription import (#​10855)
• discoveryengine: fixed bug where it wasn't possible to specify values for knowledgeBaseSysId or catalogSysId in google_discovery_engine_data_connector.entities.params. (#​10863)

v7.6.0

Compare Source

DEPRECATIONS:

• networksecurity: deprecated ignore_case, exact, prefix, suffix and contains fields in http_rules.from.not_sources.principals and http_rules.from.sources.principals blocks in google_network_security_authz_policy resource. Use the equivalent fields in http_rules.from.not_sources.principals.principal or http_rules.from.sources.principals.principal instead. (#​10809)

BREAKING CHANGES:

• container: node_config blocks that had set kubelet_config without explicitly setting cpu_cfs_quota implicitly set cfu_cfs_quota to false when unset. From this version onwards, an unset cpu_cfs_quota will instead match the API default of true true. Resources that are recreated will receive the new value; old resources are unaffected, and may change values by explicitly setting the intended one. (#​10823)
• storageinsights: removed activity_data_retention_period_days field from google_storage_insights_dataset_config resource due to a delayed launch. It will be readded when the feature launches. (#​10824)

FEATURES:

• New Resource: google_kms_folder_kaj_policy_config (#​10798)
• New Resource: google_vertex_ai_cache_config (#​10807)
• New Resource: google_vertex_ai_reasoning_engine (#​10797)

IMPROVEMENTS:

• backupdr: added data_source and `rules_config

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.