chore(deps): update terraform-gcp to ~> 6.14.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	~> 6.11.0 -> ~> 6.14.0
google (source)	required_provider	minor	6.11.2 -> 6.14.1
google-beta (source)	required_provider	minor	~> 6.11.0 -> ~> 6.14.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.14.1

Compare Source

BUG FIXES:

• compute: fixed an issue where google_compute_firewall_policy_rule was incorrectly removed from the Terraform state (#​20733)

v6.14.0

Compare Source

FEATURES:

• New Resource: google_network_security_intercept_deployment_group (#​20615)
• New Resource: google_network_security_intercept_deployment (#​20634)
• New Resource: google_network_security_authz_policy (#​20595)
• New Resource: google_network_services_authz_extension (#​20595)

IMPROVEMENTS:

• compute: google_compute_instance is no longer recreated when changing boot_disk.auto_delete (#​20580)
• compute: added CA_ENTERPRISE_ANNUAL option for field cloud_armor_tier in google_compute_project_cloud_armor_tier resource (#​20596)
• compute: added network_tier field to google_compute_global_forwarding_rule resource (#​20582)
• compute: added rule.rate_limit_options.enforce_on_key_configs field to google_compute_security_policy resource (#​20597)
• compute: made metadata_startup_script able to be updated via graceful switch in google_compute_instance (#​20655)
• container: added field enable_fqdn_network_policy to resource google_container_cluster (#​20609)
• identityplatform: marked quota.0.sign_up_quota_config subfields conditionally required in google_identity_platform_config to move errors from apply time up to plan time, and clarified the rule in documentation (#​20627)
• networkconnectivity: added support for updating linked_vpn_tunnels.include_import_ranges, linked_interconnect_attachments.include_import_ranges, linked_router_appliance_instances. instances and linked_router_appliance_instances.include_import_ranges in google_network_connectivity_spoke (#​20650)
• storage: added hdfs_data_source field to google_storage_transfer_job resource (#​20583)
• tpuv2: added network_configs and network_config.queue_count fields to google_tpu_v2_vm resource (#​20621)

BUG FIXES:

• accesscontextmanager: fixed an update bug in google_access_context_manager_perimeter by removing the broken output-only etag field in google_access_context_manager_perimeter and google_access_context_manager_perimeters (#​20691)
• compute: fixed permadiff on the recaptcha_options field for google_compute_security_policy resource (#​20617)
• compute: fixed issue where updating labels on resource_google_compute_resource_policy would fail because of a patch error with guest_flush (#​20632)
• networkconnectivity: fixed linked_router_appliance_instances.instances.virtual_machine and linked_router_appliance_instances.instances.ip_address attributes in google_network_connectivity_spoke to be correctly marked as required. Otherwise the request to create the resource will fail. (#​20650)
• privateca: fixed an issue which causes error when updating labels for activated sub-CA (#​20630)
• sql: fixed permadiff when 'settings.data_cache_config' is set to false for 'google_sql_database_instance' resource (#​20656)

v6.13.0

Compare Source

NOTES:

• New ephemeral resources google_service_account_access_token, google_service_account_id_token, google_service_account_jwt, google_service_account_key now support ephemeral values.
• iam3: promoted resources google_iam_principal_access_boundary_policy, google_iam_organizations_policy_binding, google_iam_folders_policy_binding and google_iam_projects_policy_binding to GA (#​20475)
  DEPRECATIONS:
• gkehub: deprecated configmanagement.config_sync.metrics_gcp_service_account_email in google_gke_hub_feature_membership resource (#​20561)

FEATURES:

• New Ephemeral Resource: google_service_account_access_token (#​20542)
• New Ephemeral Resource: google_service_account_id_token (#​20542)
• New Ephemeral Resource: google_service_account_jwt (#​20542)
• New Ephemeral Resource: google_service_account_key (#​20542)
• New Data Source: google_backup_dr_backup_vault (#​20468)
• New Data Source: google_composer_user_workloads_config_map (GA) (#​20478)
• New Data Source: google_composer_user_workloads_secret (GA) (#​20478)
• New Resource: google_composer_user_workloads_config_map (GA) (#​20478)
• New Resource: google_composer_user_workloads_secret (GA) (#​20478)
• New Resource: google_gemini_code_repository_index (#​20474)
• New Resource: google_network_security_mirroring_deployment (#​20489)
• New Resource: google_network_security_mirroring_deployment_group (#​20489)
• New Resource: google_network_security_mirroring_endpoint_group_association (#​20489)
• New Resource: google_network_security_mirroring_endpoint_group (#​20489)

IMPROVEMENTS:

• accesscontextmanager: added etag to google_access_context_manager_service_perimeter and google_access_context_manager_service_perimeters (#​20455)
• alloydb: increased default timeout on google_alloydb_cluster to 120m from 30m (#​20547)
• bigtable: added row_affinity field to google_bigtable_app_profile resource (#​20435)
• cloudbuild: added private_service_connect field to google_cloudbuild_worker_pool resource (#​20561)
• clouddeploy: added associated_entities field to google_clouddeploy_target resource (#​20561)
• clouddeploy: added serial_pipeline.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.route_destinations field to google_clouddeploy_delivery_pipeline resource (#​20561)
• composer: added multiple composer 3 related fields to google_composer_environment (GA) (#​20478)
• compute: google_compute_instance, google_compute_instance_template, google_compute_region_instance_template now supports advanced_machine_features.enable_uefi_networking field (#​20531)
• compute: added support for specifying storage pool with name or partial url (#​20502)
• compute: added numeric_id to the google_compute_network data source (#​20548)
• compute: added threshold_configs field to google_compute_security_policy resource (#​20545)
• compute: added server generated id as forwarding_rule_id to google_compute_global_forwarding_rule (#​20404)
• compute: added server generated id as health_check_id to google_region_health_check (#​20404)
• compute: added server generated id as instance_group_manager_id to google_instance_group_manager (#​20404)
• compute: added server generated id as instance_group_manager_id to google_region_instance_group_manager (#​20404)
• compute: added server generated id as network_endpoint_id to google_region_network_endpoint (#​20404)
• compute: added server generated id as subnetwork_id to google_subnetwork (#​20404)
• compute: added the psc_data field to the google_compute_region_network_endpoint_group resource (#​20454)
• container: added enterprise_config field to google_container_cluster resource (#​20534)
• container: added node_pool_autoconfig.linux_node_config.cgroup_mode field to google_container_cluster resource (#​20460)
• dataproc: added autotuning_config and cohort fields to google_dataproc_batch (#​20410)
• dataproc: added cluster_config.preemptible_worker_config.instance_flexibility_policy.provisioning_model_mix field to google_dataproc_cluster resource (#​20396)
• dataproc: added confidential_instance_config field to google_dataproc_cluster resource (#​20488)
• discoveryengine: added HEALTHCARE_FHIR to industry_vertical field in google_discovery_engine_search_engine (#​20471)
• gkehub: added configmanagement.config_sync.stop_syncing field to google_gke_hub_feature_membership resource (#​20561)
• monitoring: added disable_metric_validation field to google_monitoring_alert_policy resource (#​20544)
• oracledatabase: added deletion_protection field to google_oracle_database_autonomous_database (#​20484)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_exadata_infrastructure (#​20485)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_vm_cluster (#​20392)
• parallelstore: added deployment_type to google_parallelstore_instance (#​20457)
• resourcemanager: made google_service_account email and member fields available during plan (#​20510)

BUG FIXES:

• apigee: made google_apigee_organization wait for deletion operation to complete. (#​20504)
• cloudfunctions: fixed issue when updating vpc_connector_egress_settings field for google_cloudfunctions_function resource. (#​20437)
• dataproc: ensured oneOf condition is honored when expanding the job configuration for Hive, Pig, Spark-sql, and Presto in google_dataproc_job. (#​20453)
• gkehub: fixed allowable value INSTALLATION_UNSPECIFIED in template_library.installation (#​20567)
• sql: fixed edition downgrade failure for an ENTERPRISE_PLUS instance with data cache enabled. (#​20393)

v6.12.0

Compare Source

FEATURES:

• New Data Source: google_access_context_manager_access_policy (#​20295)
• New Resource: google_dataproc_gdc_spark_application (#​20242)
• New Resource: google_managed_kafka_cluster and google_managed_kafka_topic (#​20237)

IMPROVEMENTS:

• artifactregistry: added common_repository field to google_artifact_registry_repository resource (#​20305)
• cloudrunv2: added urls output field to google_cloud_run_v2_service resource (#​20313)
• compute: added IDPF as a possible value for the network_interface.nic_type field in google_compute_instance resource (#​20250)
• compute: added IDPF as a possible value for the guest_os_features.type field in google_compute_image resource (#​20250)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• filestore: added performance_config field to google_filestore_instance (#​20218)
• redis: added persistence_config to google_redis_cluster. (#​20212)
• securesourcemanager: added workforce_identity_federation_config field to google_secure_source_manager_instance resource (#​20290)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• sql: added psc_auto_connections fields to google_sql_database_instance resource (#​20307)

BUG FIXES:

• accesscontextmanager: fixed permadiff in perimeter google_access_context_manager_service_perimeter_ingress_policy and google_access_context_manager_service_perimeter_egress_policy resources when there are duplicate resources in the rules (#​20294)
• • accesscontextmanager: fixed comparison of identity_type in ingress_from and egress_from when the IDENTITY_TYPE_UNSPECIFIED is set (#​20221)
• compute: fixed permadiff on attempted type field updates in google_computer_security_policy, updating this field will now force recreation of the resource (#​20316)
• identityplatform: fixed perma-diff originating from the sign_in.anonymous.enabled field in google_identity_platform_config (#​20244)

hashicorp/terraform-provider-google-beta (google-beta)

v6.14.1

Compare Source

BUG FIXES:

• compute: fixed an issue where google_compute_firewall_policy_rule was incorrectly removed from the Terraform state (#​8940)

v6.14.0

Compare Source

FEATURES:

• New Resource: google_network_security_intercept_deployment_group (#​8859)
• New Resource: google_network_security_intercept_deployment (#​8876)
• New Resource: google_network_security_authz_policy (#​8847)
• New Resource: google_network_services_authz_extension (#​8847)

IMPROVEMENTS:

• compute: google_compute_instance is no longer recreated when changing boot_disk.auto_delete (#​8837)
• compute: added CA_ENTERPRISE_ANNUAL option for field cloud_armor_tier in google_compute_project_cloud_armor_tier resource (#​8848)
• compute: added network_tier field to google_compute_global_forwarding_rule resource (#​8838)
• compute: made metadata_startup_script able to be updated via graceful switch in google_compute_instance (#​8888)
• firebasehosting: added headers field in google_firebase_hosting_version resource (#​8887)
• identityplatform: marked quota.0.sign_up_quota_config subfields conditionally required in google_identity_platform_config to move errors from apply time up to plan time, and clarified the rule in documentation (#​8869)
• networkconnectivity: added support for updating linked_vpn_tunnels.include_import_ranges, linked_interconnect_attachments.include_import_ranges, linked_router_appliance_instances. instances and linked_router_appliance_instances.include_import_ranges in google_network_connectivity_spoke (#​8883)
• orgpolicy: added parameters fields to google_org_policy_policy resource (#​8881)
• storage: added hdfs_data_source field to google_storage_transfer_job resource (#​8839)
• tpuv2: added network_configs and network_config.queue_count fields to google_tpu_v2_vm resource (#​8865)

BUG FIXES:

• accesscontextmanager: fixed an update bug in google_access_context_manager_perimeter by removing the broken output-only etag field in google_access_context_manager_perimeter and google_access_context_manager_perimeters (#​8891)
• compute: fixed permadiff on the recaptcha_options field for google_compute_security_policy resource (#​8861)
• compute: fixed issue where updating labels on resource_google_compute_resource_policy would fail because of a patch error with guest_flush (#​8874)
• networkconnectivity: fixed linked_router_appliance_instances.instances.virtual_machine and linked_router_appliance_instances.instances.ip_address attributes in google_network_connectivity_spoke to be correctly marked as required. Otherwise the request to create the resource will fail. (#​8883)
• privateca: fixed an issue which causes error when updating labels for activated sub-CA (#​8872)
• sql: fixed permadiff when 'settings.data_cache_config' is set to false for 'google_sql_database_instance' resource (#​8889)

v6.13.0

Compare Source

NOTES:

• New ephemeral resources google_service_account_access_token, google_service_account_id_token, google_service_account_jwt, google_service_account_key now support ephemeral values.
  DEPRECATIONS:
• gkehub: deprecated configmanagement.config_sync.metrics_gcp_service_account_email in google_gke_hub_feature_membership resource (#​8827)

FEATURES:

• New Ephemeral Resource: google_service_account_access_token (#​20542)
• New Ephemeral Resource: google_service_account_id_token (#​20542)
• New Ephemeral Resource: google_service_account_jwt (#​20542)
• New Ephemeral Resource: google_service_account_key (#​20542)
• New Data Source: google_backup_dr_backup_vault (#​8775)
• New Data Source: google_backup_dr_backup (beta) (#​8762)
• New Resource: google_gemini_code_repository_index (#​8781)
• New Resource: google_gemini_repository_group_iam_binding (beta only) (#​8824)
• New Resource: google_gemini_repository_group_iam_member (beta only) (#​8824)
• New Resource: google_gemini_repository_group_iam_policy (beta only) (#​8824)
• New Resource: google_gemini_repository_group (beta only) (#​8824)
• New Resource: google_iam_projects_policy_binding (beta) (#​8756)
• New Resource: google_network_security_mirroring_deployment (#​8791)
• New Resource: google_network_security_mirroring_deployment_group (#​8791)
• New Resource: google_network_security_mirroring_endpoint_group_association (#​8791)
• New Resource: google_network_security_mirroring_endpoint_group (#​8791)
• New Resource: google_tpu_v2_queued_resource (beta) (#​8760)

IMPROVEMENTS:

• accesscontextmanager: added etag to google_access_context_manager_service_perimeter and google_access_context_manager_service_perimeters (#​8767)
• alloydb: increased default timeout on google_alloydb_cluster to 120m from 30m (#​8820)
• bigtable: added row_affinity field to google_bigtable_app_profile resource (#​8753)
• cloudbuild: added private_service_connect field to google_cloudbuild_worker_pool resource (#​8827)
• clouddeploy: added associated_entities field to google_clouddeploy_target resource (#​8827)
• clouddeploy: added serial_pipeline.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.route_destinations field to google_clouddeploy_delivery_pipeline resource (#​8827)
• composer: added multiple composer 3 related fields to google_composer_environment (GA) (#​8784)
• compute: google_compute_instance, google_compute_instance_template, google_compute_region_instance_template now supports advanced_machine_features.enable_uefi_networking field (#​8805)
• compute: added support for specifying storage pool with name or partial url (#​8794)
• compute: added numeric_id to the google_compute_network data source (#​8821)
• compute: added threshold_configs field to google_compute_security_policy resource (#​8818)
• compute: added server generated id as forwarding_rule_id to google_compute_global_forwarding_rule (#​8736)
• compute: added server generated id as health_check_id to google_region_health_check (#​8736)
• compute: added server generated id as instance_group_manager_id to google_instance_group_manager (#​8736)
• compute: added server generated id as instance_group_manager_id to google_region_instance_group_manager (#​8736)
• compute: added server generated id as network_endpoint_id to google_region_network_endpoint (#​8736)
• compute: added server generated id as subnetwork_id to google_subnetwork (#​8736)
• compute: added the psc_data field to the google_compute_region_network_endpoint_group resource (#​8766)
• container: added enterprise_config field to google_container_cluster resource (#​8808)
• container: added node_pool_autoconfig.linux_node_config.cgroup_mode field to google_container_cluster resource (#​8771)
• dataproc: added autotuning_config and cohort fields to google_dataproc_batch (#​8740)
• dataproc: added cluster_config.preemptible_worker_config.instance_flexibility_policy.provisioning_model_mix field to google_dataproc_cluster resource (#​8732)
• dataproc: added confidential_instance_config field to google_dataproc_cluster resource (#​8790)
• discoveryengine: added HEALTHCARE_FHIR to industry_vertical field in google_discovery_engine_search_engine (#​8778)
• gkehub: added configmanagement.config_sync.stop_syncing field to google_gke_hub_feature_membership resource (#​8827)
• monitoring: added disable_metric_validation field to google_monitoring_alert_policy resource (#​8817)
• oracledatabase: added deletion_protection field to google_oracle_database_autonomous_database (#​8787)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_exadata_infrastructure (#​8788)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_vm_cluster (#​8730)
• parallelstore: added deployment_type to google_parallelstore_instance (#​8769)
• resourcemanager: made google_service_account email and member fields available during plan (#​8799)

BUG FIXES:

• apigee: fixed error of update in google_apigee_developer resource (#​8728)
• apigee: made google_apigee_organization wait for deletion operation to complete. (#​8795)
• cloudfunctions: fixed issue when updating vpc_connector_egress_settings field for google_cloudfunctions_function resource. (#​8755)
• dataproc: ensured oneOf condition is honored when expanding the job configuration for Hive, Pig, Spark-sql, and Presto in google_dataproc_job. (#​8765)
• gkehub: fixed allowable value INSTALLATION_UNSPECIFIED in template_library.installation (#​8831)
• sql: fixed edition downgrade failure for an ENTERPRISE_PLUS instance with data cache enabled. (#​8731)

v6.12.0

Compare Source

FEATURES:

• New Data Source: google_access_context_manager_access_policy (#​8676)
• New Data Source: google_backup_dr_data_source (#​8641)
• New Resource: google_dataproc_gdc_spark_application (#​8662)
• New Resource: google_iam_folders_policy_binding (#​8677)
• New Resource: google_iam_organizations_policy_binding (#​8679)

IMPROVEMENTS:

• artifactregistry: added common_repository field to google_artifact_registry_repository resource (#​8681)
• backupdr: added access_restriction field togoogle_backup_dr_backup_vault resource (beta) (#​8656)
• cloudrunv2: added urls output field to google_cloud_run_v2_service resource (#​8686)
• compute: added IDPF as a possible value for the network_interface.nic_type field in google_compute_instance resource (#​8664)
• compute: added IDPF as a possible value for the guest_os_features.type field in google_compute_image resource (#​8664)
• compute: added replica_names field to sql_database_instance resource (#​8637)
• filestore: added performance_config field to google_filestore_instance resource (#​8647)
• redis: added persistence_config to google_redis_cluster. (#​8643)
• securesourcemanager: added workforce_identity_federation_config field to google_secure_source_manager_instance resource (#​8670)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​8644)
• sql: added psc_auto_connections fields to google_sql_database_instance resource (#​8682)

BUG FIXES:

• accesscontextmanager: fixed permadiff in perimeter google_access_context_manager_service_perimeter_ingress_policy and google_access_context_manager_service_perimeter_egress_policy resources when there are duplicate resources in the rules (#​8675)
• accesscontextmanager: fixed comparison of identity_type in ingress_from and egress_from when the IDENTITY_TYPE_UNSPECIFIED is set (#​8648)
• compute: fixed permadiff on attempted type field updates in google_computer_security_policy, updating this field will now force recreation of the resource (#​8689)
• identityplatform: fixed perma-diff in google_identity_platform_config (#​8663)

---

Configuration

📅 Schedule: Branch creation - "* * 1,15 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.