Update Terraform google to 6.13.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	6.8.0 -> 6.13.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.13.0

Compare Source

NOTES:

• New ephemeral resources google_service_account_access_token, google_service_account_id_token, google_service_account_jwt, google_service_account_key now support ephemeral values.
• iam3: promoted resources google_iam_principal_access_boundary_policy, google_iam_organizations_policy_binding, google_iam_folders_policy_binding and google_iam_projects_policy_binding to GA (#​20475)
  DEPRECATIONS:
• gkehub: deprecated configmanagement.config_sync.metrics_gcp_service_account_email in google_gke_hub_feature_membership resource (#​20561)

FEATURES:

• New Ephemeral Resource: google_service_account_access_token (#​20542)
• New Ephemeral Resource: google_service_account_id_token (#​20542)
• New Ephemeral Resource: google_service_account_jwt (#​20542)
• New Ephemeral Resource: google_service_account_key (#​20542)
• New Data Source: google_backup_dr_backup_vault (#​20468)
• New Data Source: google_composer_user_workloads_config_map (GA) (#​20478)
• New Data Source: google_composer_user_workloads_secret (GA) (#​20478)
• New Resource: google_composer_user_workloads_config_map (GA) (#​20478)
• New Resource: google_composer_user_workloads_secret (GA) (#​20478)
• New Resource: google_gemini_code_repository_index (#​20474)
• New Resource: google_network_security_mirroring_deployment (#​20489)
• New Resource: google_network_security_mirroring_deployment_group (#​20489)
• New Resource: google_network_security_mirroring_endpoint_group_association (#​20489)
• New Resource: google_network_security_mirroring_endpoint_group (#​20489)

IMPROVEMENTS:

• accesscontextmanager: added etag to google_access_context_manager_service_perimeter and google_access_context_manager_service_perimeters (#​20455)
• alloydb: increased default timeout on google_alloydb_cluster to 120m from 30m (#​20547)
• bigtable: added row_affinity field to google_bigtable_app_profile resource (#​20435)
• cloudbuild: added private_service_connect field to google_cloudbuild_worker_pool resource (#​20561)
• clouddeploy: added associated_entities field to google_clouddeploy_target resource (#​20561)
• clouddeploy: added serial_pipeline.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.route_destinations field to google_clouddeploy_delivery_pipeline resource (#​20561)
• composer: added multiple composer 3 related fields to google_composer_environment (GA) (#​20478)
• compute: google_compute_instance, google_compute_instance_template, google_compute_region_instance_template now supports advanced_machine_features.enable_uefi_networking field (#​20531)
• compute: added support for specifying storage pool with name or partial url (#​20502)
• compute: added numeric_id to the google_compute_network data source (#​20548)
• compute: added threshold_configs field to google_compute_security_policy resource (#​20545)
• compute: added server generated id as forwarding_rule_id to google_compute_global_forwarding_rule (#​20404)
• compute: added server generated id as health_check_id to google_region_health_check (#​20404)
• compute: added server generated id as instance_group_manager_id to google_instance_group_manager (#​20404)
• compute: added server generated id as instance_group_manager_id to google_region_instance_group_manager (#​20404)
• compute: added server generated id as network_endpoint_id to google_region_network_endpoint (#​20404)
• compute: added server generated id as subnetwork_id to google_subnetwork (#​20404)
• compute: added the psc_data field to the google_compute_region_network_endpoint_group resource (#​20454)
• container: added enterprise_config field to google_container_cluster resource (#​20534)
• container: added node_pool_autoconfig.linux_node_config.cgroup_mode field to google_container_cluster resource (#​20460)
• dataproc: added autotuning_config and cohort fields to google_dataproc_batch (#​20410)
• dataproc: added cluster_config.preemptible_worker_config.instance_flexibility_policy.provisioning_model_mix field to google_dataproc_cluster resource (#​20396)
• dataproc: added confidential_instance_config field to google_dataproc_cluster resource (#​20488)
• discoveryengine: added HEALTHCARE_FHIR to industry_vertical field in google_discovery_engine_search_engine (#​20471)
• gkehub: added configmanagement.config_sync.stop_syncing field to google_gke_hub_feature_membership resource (#​20561)
• monitoring: added disable_metric_validation field to google_monitoring_alert_policy resource (#​20544)
• oracledatabase: added deletion_protection field to google_oracle_database_autonomous_database (#​20484)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_exadata_infrastructure (#​20485)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_vm_cluster (#​20392)
• parallelstore: added deployment_type to google_parallelstore_instance (#​20457)
• resourcemanager: made google_service_account email and member fields available during plan (#​20510)

BUG FIXES:

• apigee: made google_apigee_organization wait for deletion operation to complete. (#​20504)
• cloudfunctions: fixed issue when updating vpc_connector_egress_settings field for google_cloudfunctions_function resource. (#​20437)
• dataproc: ensured oneOf condition is honored when expanding the job configuration for Hive, Pig, Spark-sql, and Presto in google_dataproc_job. (#​20453)
• gkehub: fixed allowable value INSTALLATION_UNSPECIFIED in template_library.installation (#​20567)
• sql: fixed edition downgrade failure for an ENTERPRISE_PLUS instance with data cache enabled. (#​20393)

v6.12.0

Compare Source

FEATURES:

• New Data Source: google_access_context_manager_access_policy (#​20295)
• New Resource: google_dataproc_gdc_spark_application (#​20242)
• New Resource: google_managed_kafka_cluster and google_managed_kafka_topic (#​20237)

IMPROVEMENTS:

• artifactregistry: added common_repository field to google_artifact_registry_repository resource (#​20305)
• cloudrunv2: added urls output field to google_cloud_run_v2_service resource (#​20313)
• compute: added IDPF as a possible value for the network_interface.nic_type field in google_compute_instance resource (#​20250)
• compute: added IDPF as a possible value for the guest_os_features.type field in google_compute_image resource (#​20250)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• filestore: added performance_config field to google_filestore_instance (#​20218)
• redis: added persistence_config to google_redis_cluster. (#​20212)
• securesourcemanager: added workforce_identity_federation_config field to google_secure_source_manager_instance resource (#​20290)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• sql: added psc_auto_connections fields to google_sql_database_instance resource (#​20307)

BUG FIXES:

• accesscontextmanager: fixed permadiff in perimeter google_access_context_manager_service_perimeter_ingress_policy and google_access_context_manager_service_perimeter_egress_policy resources when there are duplicate resources in the rules (#​20294)
• • accesscontextmanager: fixed comparison of identity_type in ingress_from and egress_from when the IDENTITY_TYPE_UNSPECIFIED is set (#​20221)
• compute: fixed permadiff on attempted type field updates in google_computer_security_policy, updating this field will now force recreation of the resource (#​20316)
• identityplatform: fixed perma-diff originating from the sign_in.anonymous.enabled field in google_identity_platform_config (#​20244)

v6.11.2

Compare Source

BUG FIXES:

• vertexai: fixed issue with google_vertex_ai_endpoint where upgrading to 6.11.0 would delete all traffic splits that were set outside Terraform (which was previously a required step for all meaningful use of this resource). (#​20350)

v6.11.1

Compare Source

BUG FIXES:

• container: fixed diff on google_container_cluster.user_managed_keys_config field for resources that had not set it. (#​20314)
• container: marked google_container_cluster.user_managed_keys_config as immutable because it can't be updated in place. (#​20314)

v6.11.0

Compare Source

NOTES:

• compute: migrated google_compute_firewall_policy_rule from DCL engine to MMv1 engine. (#​20160)

BREAKING CHANGES:

• looker: made oauth_config a required field in google_looker_instance, as creating this resource without that field always triggers an API error (#​20196)

FEATURES:

• New Data Source: google_spanner_database (#​20114)
• New Resource: google_apigee_api (#​20113)
• New Resource: google_dataproc_gdc_application_environment (#​20165)
• New Resource: google_dataproc_gdc_service_instance (#​20147)
• New Resource: google_memorystore_instance (#​20108)

IMPROVEMENTS:

• apigee: added in-place update support for google_apigee_env_references (#​20182)
• apigee: added in-place update support for google_apigee_environment resource (#​20189)
• cloudrun: added empty_dir field to google_cloud_run_service (#​20185)
• cloudrunv2: added empty_dir field to google_cloud_run_v2_service and google_cloud_run_v2_job (#​20185)
• compute: added disks field to google_compute_node_template resource (#​20180)
• compute: added preconfigured_waf_config field to google_compute_security_policy resource (#​20183)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• compute: added instance_flexibility_policy field to google_compute_region_instance_group_manager resource (#​20132)
• compute: increased google_compute_security_policy timeouts from 20 minutes to 30 minutes (#​20145)
• container: added control_plane_endpoints_config field to google_container_cluster resource. (#​20193)
• container: added parallelstore_csi_driver_config field to google_container_cluster resource. (#​20163)
• container: added user_managed_keys_config field to google_container_cluster resource. (#​20105)
• firestore: allowed single field indexes to support __name__ DESC indexes in google_firestore_index resources (#​20124)
• privateca: added support for google_privateca_certificate_authority with type = "SUBORDINATE" to be activated into "STAGED" state (#​20103)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• vertexai: added traffic_split, private_service_connect_config, predict_request_response_logging_config, dedicated_endpoint_enabled, and dedicated_endpoint_dns fields to google_vertex_ai_endpoint resource (#​20179)
• workflows: added deletion_protection field to google_workflows_workflow resource (#​20106)

BUG FIXES:

• compute: fixed a diff based on server-side reordering of match.src_address_groups and match.dest_address_groups in google_compute_network_firewall_policy_rule (#​20148)
• compute: fixed permadiff on the preconfigured_waf_config field for google_compute_security_policy resource (#​20183)
• container: fixed in-place updates for node_config.containerd_config in google_container_cluster and google_container_node_pool (#​20112)

v6.10.0

Compare Source

FEATURES:

• New Data Source: google_compute_instance_guest_attributes (#​20095)
• New Data Source: google_service_accounts (#​20062)
• New Resource: google_iap_settings (#​20085)

IMPROVEMENTS:

• apphub: added GLOBAL enum value to scope.type field in google_apphub_application resource (#​20015)
• assuredworkloads: added workload_options field to google_assured_workloads_workload resource (#​19985)
• bigquery: added external_catalog_dataset_options fields to google_bigquery_dataset resource (beta) (#​20097)
• bigquery: added descriptive validation errors for missing required fields in google_bigquery_job destination table configuration (#​20077)
• compute: desired_status on google_compute_instance can now be set to TERMINATED or SUSPENDED on instance creation (#​20031)
• compute: added header_action and redirect_options fields to google_compute_security_policy_rule resource (#​20079)
• compute: added interface.ipv6-address field in google_compute_external_vpn_gateway resource (#​20091)
• compute: added propagated_connection_limit and connected_endpoints.propagated_connection_count fields to google_compute_service_attachment resource (#​20016)
• compute: added plan-time validation to name on google_compute_instance (#​20036)
• compute: added support for advanced_machine_features.turbo_mode to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template (#​20090)
• container: added in-place update support for labels, resource_manager_tags and workload_metadata_config in google_container_cluster.node_config (#​20038)
• filestore: added protocol property to resource google_filestore_instance (#​19982)
• memorystore: added mode flag to google_memorystore_instance (#​19988)
• netapp: added zone and replica_zone fields to google_netapp_storage_pool resource (#​19980)
• netapp: added zone and replica_zone fields to google_netapp_volume resource (#​19980)
• networksecurity: added tls_inspection_policy field to google_network_security_gateway_security_policy (#​19986)
• resourcemanager: added disabled to google_service_account datasource (#​20034)
• spanner: added asymmetric_autoscaling_options field to google_spanner_instance (#​20014)
• sql: removed the client-side default of ENTERPRISE for edition in google_sql_database_instance so that edition is determined by the API when unset. This will cause new instances to use ENTERPRISE_PLUS as the default for POSTGRES_16. (#​19977)
• vmwareengine: added autoscaling_settings to google_vmwareengine_private_cloud resource (#​20057)

BUG FIXES:

• accesscontextmanager: fixed permadiff for perimeter ingress / egress rule resources (#​20046)
• compute: fixed an error in google_compute_security_policy_rule that prevented updating the default rule (#​20066)
• container: fixed missing in-place updates for some google_container_cluster.node_config subfields (#​20038)

v6.9.0

Compare Source

DEPRECATIONS:

• containerattached: deprecated security_posture_config field in google_container_attached_cluster resource (#​19912)

FEATURES:

• New Data Source: google_oracle_database_autonomous_database (#​19903)
• New Data Source: google_oracle_database_autonomous_databases (#​19901)
• New Data Source: google_oracle_database_cloud_exadata_infrastructures (#​19884)
• New Data Source: google_oracle_database_cloud_vm_clusters (#​19900)
• New Resource: google_apigee_app_group (#​19921)
• New Resource: google_apigee_developer (#​19911)
• New Resource: google_network_connectivity_group (#​19902)

IMPROVEMENTS:

• compute: google_compute_network_firewall_policy_association now uses MMv1 engine instead of DCL. (#​19976)
• compute: google_compute_region_network_firewall_policy_association now uses MMv1 engine instead of DCL. (#​19976)
• compute: added creation_timestamp field to google_compute_instance, google_compute_instance_template, google_compute_region_instance_template (#​19906)
• compute: added key_revocation_action_type to google_compute_instance and related resources (#​19952)
• looker: added deletion_policy to google_looker_instance to allow force-destroying instances with nested resources by setting deletion_policy = FORCE (#​19924)
• monitoring: added alert_strategy.notification_prompts field to google_monitoring_alert_policy (#​19928)
• storage: added hierarchical_namespace to google_storage_bucket resource (#​19882)
• sql: removed the client-side default of ENTERPRISE for edition in google_sql_database_instance so that edition is determined by the API when unset. This will cause new instances to use ENTERPRISE_PLUS as the default for POSTGRES_16. (#​19977)
• vmwareengine: added autoscaling_settings to google_vmwareengine_cluster resource (#​19962)
• workstations: added max_usable_workstations field to google_workstations_workstation_config resource. (#​19872)

BUG FIXES:

• compute: fixed an issue where immutable distribution_zones was incorrectly sent to the API when updating distribution_policy_target_shape in google_compute_region_instance_group_manager resource (#​19949)
• container: fixed a crash in google_container_node_pool caused by an occasional nil pointer (#​19922)
• essentialcontacts: fixed google_essential_contacts_contact import to include required parent field. (#​19877)
• sql: made google_sql_database_instance.0.settings.0.data_cache_config accept server-side changes when unset. When unset, no diffs will be created when instances change in edition and the feature is enabled or disabled as a result. (#​19972)
• storage: removed retry on 404s during refresh for google_storage_bucket, preventing hanging when refreshing deleted buckets (#​19964)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bloopy-boi]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	0.92s
✅ TERRAFORM	terraform-fmt	1	0	0	0.15s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by