Terraform Google Provider v7.37.0: New Resources & Deprecations
Terraform Google Provider version 7.37.0 introduces several new data sources and resources for managing Google Cloud services, including Chronicle, Migration Center, and Vertex AI. It also includes numerous improvements and bug fixes across various GCP services. Notably, this release deprecates certain fields in Cloud Run v2 and Cloud Security Compliance resources, signaling upcoming API changes and prompting users to adopt new fields like 'parent' instead of 'organization'.
- →deprecated protocols on google_network_services_agent_gateway
- →New Data Source: google_oracle_database_goldengate_deployment_versions
- →New Data Source: google_storage_control_project_intelligence_finding
- →New Data Source: google_storage_control_project_intelligence_findings
- →New Resource: google_chronicle_parser
Deprecations (3) ›
- cloudrunv2
deprecated http_get.http_headers.port field in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource because it is not supported in Cloud Run API. This field will be removed in a future major release
- cloudsecuritycompliance
deprecated the organization field on google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment. Use parent instead
- networkservices deprecated protocols on google_network_services_agent_gateway
Features (12) ›
- google_oracle_database_goldengate_deployment_versions New Data Source: google_oracle_database_goldengate_deployment_versions
- google_storage_control_project_intelligence_finding New Data Source: google_storage_control_project_intelligence_finding
- google_storage_control_project_intelligence_findings New Data Source: google_storage_control_project_intelligence_findings
- google_chronicle_parser New Resource: google_chronicle_parser
- google_migration_center_import_data_file New Resource: google_migration_center_import_data_file
- google_network_services_agent_gateway New Resource: google_network_services_agent_gateway
- google_vertex_ai_tensorboard_experiment New Resource: google_vertex_ai_tensorboard_experiment
- google_bigquery_dataset_access New List Resource: google_bigquery_dataset_access
- google_cloud_scheduler_job New List Resource: google_cloud_scheduler_job
- google_dns_record_set New List Resource: google_dns_record_set
- google_monitoring_alert_policy New List Resource: google_monitoring_alert_policy
- google_pubsub_subscription New List Resource: google_pubsub_subscription
Enhancements (14) ›
- apigee added new resource google_apigee_environment_debugmask for managing Apigee environment debug masks
- backupdr added support for use_project_service_account flag in google_backup_dr_restore_workload disk and compute restores
- cloudrunv2 added http_get.http_headers.name field to container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource
- cloudrunv2 added template.client and template.client_version fields to google_cloud_run_v2_worker_pool resource
- cloudsecuritycompliance
added support for project parent to google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment via the new parent field. The organization field has been deprecated
- compute added params.resource_manager_tags field to google_compute_reservation resource
- compute
added data sources for google_compute_target_http_proxy, google_compute_target_https_proxy, google_compute_region_target_http_proxy, and google_compute_region_target_https_proxy
- container added addons_config.slurm_operator_config field to google_container_cluster resource
- container added node_image_config field to google_container_node_pool and google_container_cluster resources
- databasemigrationservice added state and stop_on_warnings fields to google_database_migration_service_migration_job resource
- dns added resource identity support for google_dns_record_set resource
- networksecurity added network_rules field on google_network_security_authz_policy resource
- pubsub added first_revision_id and last_revision_id fields to google_pubsub_topic resource
- sql
added settings.ip_configuration.psc_config.psc_auto_dns_enabled and settings.ip_configuration.psc_config.psc_write_endpoint_dns_enabled fields to google_sql_database_instance resource
Fixes (12) ›
- apigee fixed google_apigee_api not detecting local bundle changes due to a missing default on detect_md5hash, and fixed the test sweeper's list URL
- apigee
fixed google_apigee_security_action update failure by enabling PATCH-based updates now that the Apigee Security Actions API supports mutations
- apigee fixed a perma-diff for api_products and scopes fields in google_apigee_developer_app resource when updating them with multiple items
- apigee fixed an issue where the resource would attempt recreation if the key_expires_in field was set in google_apigee_developer_app resource
- ces fixed persistent diff in google_ces_guardrail when llm_prompt_security is configured with default_settings
- cloudrun fixed a permadiff for the run.googleapis.com/gpu-zonal-redundancy-disabled annotation in google_cloud_run_service
- cloudrunv2
fixed bug where only one http_get.http_headers block could be specified in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource
- compute
fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts
- compute fixed diff when using existing_reservations field in google_region_commitment
- compute fixed rules in google_compute_security_policy being unnecessarily recreated due to TypeSet hash instability
- sql fixed inconsistent result after apply error when adding users of type CLOUD_IAM_GROUP with capitalized domain names for MySQL
- storage fixed OOM issue for google_storage_bucket force_destroy by limiting the number of outstanding tasks to 2000
Notes (4) ›
- compute migrated EnableDisplay fields in google_compute_instance resources to use direct HTTP rather than a client library
- compute
migrated desired_status block and startInstanceOperation in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library
- compute
migrated getInstance, getDisk, Delete and the setMetadata update block in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library
- compute migrated part of google_compute_instance to use direct HTTP rather than a client library
https://github.com/hashicorp/terraform-provider-google/releases/tag/v7.37.0