Terraform Google Provider v7.41.0: New Resources and Enhancements
HashiCorp has released version 7.41.0 of the Terraform Google Provider, introducing several new resources, including those for Chronicle environments and Compute Engine network firewall policies. The update also brings significant improvements to existing services like Access Context Manager, Certificate Manager, and Cloud SQL, enhancing their manageability through Terraform. These changes benefit platform engineers and architects managing GCP infrastructure, offering expanded capabilities for security, networking, and AI services, with some AI-related resources now generally available.
- →New Resource: google_chronicle_environment_group
- →New Resource: google_compute_router_named_set
- →New List Resource: google_compute_backend_bucket_signed_url_key
- →New List Resource: google_compute_backend_service_signed_url_key
- →New List Resource: google_compute_network_firewall_policy
Features (11) ›
- google_chronicle_environment_group New Resource: google_chronicle_environment_group
- google_compute_router_named_set New Resource: google_compute_router_named_set
- google_compute_backend_bucket_signed_url_key New List Resource: google_compute_backend_bucket_signed_url_key
- google_compute_backend_service_signed_url_key New List Resource: google_compute_backend_service_signed_url_key
- google_compute_network_firewall_policy New List Resource: google_compute_network_firewall_policy
- google_compute_network_firewall_policy_association New List Resource: google_compute_network_firewall_policy_association
- google_compute_network_firewall_policy_packet_mirroring_rule New List Resource: google_compute_network_firewall_policy_packet_mirroring_rule
- google_compute_preview_feature New List Resource: google_compute_preview_feature
- google_compute_public_advertised_prefix New List Resource: google_compute_public_advertised_prefix
- google_compute_region_backend_bucket New List Resource: google_compute_region_backend_bucket
- google_compute_region_network_firewall_policy New List Resource: google_compute_region_network_firewall_policy
Enhancements (22) ›
- accesscontextmanager
added allowed_service_patterns and service_patterns_enforcement_scopes fields to google_access_context_manager_service_perimeter to support VPC Service Controls for non-GCP APIs
- accesscontextmanager added pscEndpoint to sources in ingress_from and egress_from under resources google_access_context_manager_service_perimeter and variants
- backupdr added backup_blocked_by_vault_access_restriction to data.google_backup_dr_data_source resource
- backupdr added force_update_access_restriction to google_backup_dr_backup_vault resource
- backupdr added update support for access_restriction to google_backup_dr_backup_vault resource
- certificatemanager
added in-place update support for the self_managed certificate data (pem_certificate / pem_private_key) on google_certificate_manager_certificate; changing the certificate data is now applied via update instead of forcing recreation
- cloudrunv2
added tags field to google_cloud_run_v2_service and google_cloud_run_v2_job resources to allow setting tags for services and jobs at creation time
- cloudsql added max_custom_on_demand_retention_days to create backup_plan example for sqladmin
- compute added 3500GB and 7000GB SSD partition size to google_compute_instance_template resource
- compute
added FLEX_START and RESERVATION_BOUND support to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources
- container added the support for updating node_image_config and image_type fields at the same time
- dataproc added confidential_instance_type to google_dataproc_cluster resource
- dataproc added instance_selection.disk_config field to google_dataproc_cluster resource
- discoveryengine added enable_llm_layout_parsing and enable_get_processed_document fields to google_discovery_engine_data_store resource
- sql
added instance_auto_dns_status and write_endpoint_auto_dns_status output fields to psc_auto_connections block in google_sql_database_instance resource
- sql added include_replicas_for_major_version_upgrade field to google_sql_database_instance resource
- sql added switch_transaction_logs_to_cloud_storage_enabled field to google_sql_database_instance resource
- vertexai promoted google_vertex_ai_semantic_governance_policy_engine resource to GA
- workbench added enable_deletion_protection field to google_workbench_instance resource
- workbench added resource_policies field to google_workbench_instance resource
- workbench added support for min_cpu_platform in google_workbench_instance resource
- workstations added instance_metadata field to google_workstations_workstation_config resource
Fixes (5) ›
- compute fixed bug where a permadiff on google_compute_reservation_region_commitment.existing_reservations would persist after upgrading
- compute fixed permadiff on keepalive_interval for google_compute_router bgp block when set to default value
- resourcemanager
fixed validation of target_service_account and delegates in the google_service_account_access_token, google_service_account_id_token, and google_service_account_jwt data sources, and of name in the google_service_account_key data source, to reject identifiers that contain path separators
- securityposture fixed a bug where the enforce field in google_securityposture_posture was always set, causing failures for list constraints
- vmwareengine added correct update_mask value to google_vmwareengine_private_cloud updates
https://github.com/hashicorp/terraform-provider-google/releases/tag/v7.41.0
Related releases
- Terraform Google Provider v7.42.0: New resources, BigQuery, Colab enhancements Terraform Google Provider Releases ·
- Managed Service for Apache Spark GA with Version 3.0 Google Cloud release notes ·
- Agent Platform Workbench updates package dependencies and fixes kernel issue Google Cloud release notes ·
- Cloud Data Fusion 6.11.1.4 GA released with bug fixes Google Cloud release notes ·
- Managed Service for Apache Spark: Confidential Compute, Executor Adjustments Google Cloud release notes ·
- Cloud SDK 576.0.0: BigLake, GKE, Compute Engine updates Google Cloud release notes ·