FEATURES:
- New Resources:
google_bigtable_instance_iam_binding,google_bigtable_instance_iam_member, andgoogle_bigtable_instance_iam_policyare now available. [GH-3939]
ENHANCEMENTS:
- bigquery: Added support for
external_data_configurationtogoogle_bigquery_table. [GH-3602] - firestore:
google_firestore_indexquery_scopecan haveCOLLECTION_GROUPspecified. [GH-3972]
DEPRECATIONS:
- monitoring: Deprecated non-existent fields
is_internalandinternal_checkersfromgoogle_monitoring_uptime_check_config. (#3919)
FEATURES:
- New Resource:
google_compute_project_default_network_tier(#3907)
ENHANCEMENTS:
- compute: Added fields for managing network endpoint group backends in
google_compute_backend_service, includingmax_connections_per_endpointandmax_rate_per_endpoint(#3863) - compute: Support custom timeouts in
google_compute_instance_group_managerandgoogle_compute_region_instance_group_manager(#3955) - container:
logging.googleapis.com/kubernetesandmonitoring.googleapis.com/kubernetesare now GA for cluster logging/monitoring service - folder:
google_folderimprove error message on delete (#3902) - iam: sort bindings in
google_*_iam_policyresources to get simpler diffs (#3855) - kms:
google_kms_crypto_keynow supports labels. (#3910) - pubsub:
google_pubsub_topicsupports KMS keys withkms_key_name. (#3925)
BUG FIXES:
- iam: the member field in iam_* resources is now case-insensitive (#3900)
- servicenetworking:
google_service_networking_connectionfix update (#3887)
BUG FIXES:
- kms: fix regression when reading existing
google_kms_crypto_keyresources (#3893) - storage:
google_storage_bucketfix for crash that occurs when running plan on old buckets (#3886) - storage:
google_storage_bucketallow updatingbucket_policy_onlyto false (#3886)
FEATURES:
- Custom Endpoint Support: The Google provider supports custom endpoints, allowing you to use GCP-like APIs such as emulators. See the Provider Reference for details. (#3787)
- New Resource Network endpoint groups (
google_compute_network_endpoint_group) and fine-grained resource endpoints (google_compute_network_endpoint) are now available. (#3832) - New Resource
google_service_networking_connectionis now available (previously beta-only)
ENHANCEMENTS:
- increased default timeouts for
google_compute_instance,google_container_cluster,google_dataproc_cluster, andgoogle_sql_database_instance(#3872) - compute:
google_compute_global_addresssupportsprefix_length,purpose, andnetwork(#3877) - dns:
google_dns_record_set: allow importing dns record sets in any project (#3862) - kms:
kms_crypto_keysupportspurpose(#3843) - storage:
google_storage_bucketnow supports enablingbucket_policy_onlyaccess control. (#1878 - storage: IAM resources for storage buckets (
google_storage_bucket_iam_*) now all support import (#3830) - pubsub:
google_pubsub_topicUpdates for labels are now supported (#3828)
BUG FIXES:
- bigquery:
google_bigquery_datasetRelax IAM role restrictions on BQ datasets (#3451) - compute:
google_project_iamWhen importing resourcesprojectno longer needs to be set in the config post import (#3777) - compute:
google_compute_instance_templateFixed issue so project can now be specified by interpolated varibles. (#3798) - compute:
google_compute_instance_templateThrow error when using incompatible disk fields instead of continual plan diff (#3789) - compute:
google_compute_instance_from_templateMake sure disk type is expanded to a URL (#3717) - compute:
google_compute_instance_templateAttempt to put disks in state in the same order they were specified (#3717) - container:
google_container_clusterStop guest_accelerator from having a permadiff for accelerators withcount=0(#3860) - container:
google_container_clusterandgoogle_node_poolnow retry correctly when polling for status of an operation. (#3801) - dns:
google_dns_record_setoverrides all existing record types on create, not just NS (#3859) - monitoring:
google_monitoring_notification_channelAllow setting enabled to false (#3874) - pubsub:
google_pubsub_subscriptionandgoogle_pubsub_topicresources can be created inside VPC service controls. (#3818) - redis:
google_redis_instanceFall back to region fromlocation_idwhen region isn't specified (#3846) - sql:
google_sql_userUser's can now be updated to change their password (#3785) - sql: Providing an non-empty host for a Postgres
google_sql_usernow correctly actually registers that the user was created and gives a slightly more understandable error/diff, instead of returning a generic "provider error" (#3857)
DEPRECATIONS:
- compute: The
auto_create_routesfield ongoogle_compute_network_peeringhas been deprecated because it is not user configurable. (#3394)
FEATURES:
- New Datasource:
google_compute_ssl_certificate(#3683) - New Datasource:
google_composer_image_versions(#3694)
ENHANCEMENTS:
- app_engine: Update allowed
app_engine_applicationlocations. (#3674) - composer: Make
google_composer_environmentimage version updateable. (#3681) - compute:
google_compute_router_interfacenow supports specifying aninterconnect_attachment. (#3715) - compute:
google_compute_router_natnow supports specifying alog_configblock (#3684) - compute:
google_compute_router_natnow supports more import formats. (#3744) - compute:
google_compute_network_peeringnow supports importing/exporting custom routes (#3699) - compute: Add support for INTERNAL_SELF_MANAGED backend services. Changed Resources:
google_compute_backend_service,google_compute_global_forwarding_rule. (#3719) - container: Expose the
services_ipv4_cidrforcontainer_cluster. (#3776) - dns:
google_dns_managed_zonenow supports DNSSec. (#3677) - dataflow:
google_dataflow_jobnow supports setting machine type (#1862) - kms:
google_kms_key_ringis now autogenerated using Magic Modules (#3689) - pubsub:
google_pubsub_subscriptionsupports setting anexpiration_policywith nottl. (#3742)
BUG FIXES:
- compute: Allow setting firewall priority to 0. (#3700)
- compute: Resolved an issue where
google_compute_region_backend_servicewas unable to perform a state migration. (#3731) - compute: Allow empty metadata.startup-script on instances. (#3732)
- compute: Fix expanding of routing config in
google_compute_network. (#3741) - container: Allow going from no ip_allocation_policy to a blank-equivalent one. (#3723)
- container:
google_container_clusterwill no longer diff unnecessarily onissue_client_certificate. (#3751) - container:
google_container_clustercan enable client certificates on GKE1.12+series releases. (#3751) - container:
google_container_clusternow retries the call to remove default node pools during cluster creation (#3769) - storage: Fix occasional crash when updating storage buckets (#3686)
NOTE:
- Several resources were previously undocumented on the site or changelog; they should be added to both with this release.
google_compute_backend_bucket_signed_url_keyandgoogle_compute_backend_service_signed_url_keywere introduced in2.4.0.
BACKWARDS INCOMPATIBILITIES:
- cloudfunctions:
google_cloudfunctions_function.runtimenow has an explicit default value ofnodejs6. Users who have a different value set in the API but the value undefined in their config will see a diff. (#3605)
FEATURES:
- New Resources:
google_compute_instance_iam_binding,google_compute_instance_iam_member, andgoogle_compute_instance_iam_policyare now available. (#3551) - New Resources: IAM resources for Dataproc jobs and clusters (
google_dataproc_job_iam_policy,google_dataproc_job_iam_member,google_dataproc_job_iam_binding,google_dataproc_cluster_iam_policy,google_dataproc_cluster_iam_member,google_dataproc_cluster_iam_binding) are now available. #3632
ENHANCEMENTS:
- provider: Add GCP zone to
google_client_configdatasource (#3262) - compute:
google_compute_backend_servicenow supportsHTTP2protocol (beta-only feature, use with GA provider at own risk)#3631 - compute:
interconnect_attachmentMake vlanTag8021q computed for using PARTNER attachments (#3600) - compute: Add support for creating instances with CMEK (#3481)
- compute: Can now specify project when importing instance groups (#2504)
- compute:
google_compute_organization_policies*Allow all organization policies to be removed/unset from a constraint. (#3611) - compute:
google_compute_instancenow supportsshielded_instance_configfor verifiable integrity of your VM instances. (#3531) - compute:
google_compute_instance_templatenow supportsshielded_instance_configfor verifiable integrity of your VM instances. (#3531) - container: use the cluster subnet to look up the node cidr block (#3654)
BUG FIXES:
- cloudfunctions:
google_cloudfunctions_function.runtimenow has an explicit default value ofnodejs6. (#3605) - compute: Fix panic in
compute_backend_servicehash function (#3610) - monitoring: updating
google_monitoring_alert_policyis more likely to succeed (#3587) - kms:
google_kms_crypto_keynow (in addition to marking all crypto key versions for destruction) correctly disables auto-rotation for destroyed keys [#3624](hashicorp#3624) - iam: Increase IAM custom role length validation to match API. (#3660)
KNOWN ISSUES:
- cloudfunctions:
google_cloudfunctions_functions without aruntimeset will fail to create due to an upstream API change. You can work around this by setting an explicitruntimein2.Xseries releases.
DEPRECATIONS:
- monitoring:
google_monitoring_alert_policylabelswas deprecated, as the field was never used and it was typed incorrectly. (#3494)
FEATURES:
- New Datasource:
google_compute_node_typesfor sole-tenant node types is now available. (#3446) - New Resource:
google_compute_node_groupfor sole-tenant nodes is now available. (#3514) - New Resource:
google_compute_node_templatefor sole-tenant nodes is now available. (#3446) - New Resource:
google_filestore_instanceis now available at GA. (#3522) - New Resource:
google_firestore_indexis now available to configure composite indexes on Firestore. (#3484) - New Resource:
google_logging_metricis now available to configure Stackdriver logs-based metrics. (#1702) - New Resources:
google_compute_subnetwork_iam_binding,google_compute_subnetwork_iam_member, andgoogle_compute_subnetwork_iam_policyare now available at GA. (#3541)
ENHANCEMENTS:
- dataflow:
google_dataflow_job'snetworkandsubnetworkcan be configured. (#3476) - monitoring:
google_monitoring_alert_policyuser_labelssupport was added. (#3494) - compute:
google_compute_instanceandgoogle_compute_instance_templatenow support node affinities for scheduling on sole tenant nodes #3553 - compute:
google_compute_region_backend_serviceis now generated with Magic Modules, adding configurable timeouts, multiple import formats,creation_timestampoutput. (#3521) - pubsub:
google_pubsub_subscriptionnow supports setting anexpiration_policy. (#1703)
BUG FIXES:
- bigquery:
google_bigquery_tablewill work with a larger range of projects id formats. (#3486) - cloudfunctions:
google_cloudfunctions_fucntionno longer restricts an outdated list ofregions (#3530) - compute:
google_compute_instancenow retries updating metadata when fingerprints are mismatched. (#3372) - compute:
google_compute_subnetwork.secondary_ip_rangesdoesn't cause a diff on out of band changes, allows updating to empty list of ranges. (#3496) - container:
google_container_clustersetting networks / subnetworks by name works withlocation. (#3492) - container:
google_container_clusterremoved an overly restrictive validation restrictingnode_poolandremove_default_node_poolbeing specified at the same time. (#3497) - storage:
data.google_storage_bucket_objectnow correctly URL encodes the slashes in a file name (#1613)
BUG FIXES:
- compute:
google_compute_backend_servicehandles empty/niliapblock created by previous providers properly. (#3459) - compute:
google_compute_backend_serviceallows multiple instance types inbackends.groupagain. (#3463) - dns:
google_dns_managed_zonedoes not permadiff when visiblity is set to default and returned as empty from API (#3459) - google_projects: Datasource
google_projectsnow handles paginated results from listing projects (#3464) - google_project_iam:
google_project_iam_policy/member/bindingnow attempts to retry for read-only operations as well as retrying read-write operations (#3455) - kms:
google_kms_crypto_key.rotation_periodnow can be an empty string to allow for unset behavior in modules (#3468)
KNOWN ISSUES:
- compute:
google_compute_subnetworkwill fail to reordersecondary_ip_rangevalues at apply time - compute:
google_compute_subnetworks used with a VPC-native GKE cluster will have a diff if that cluster creates secondary ranges automatically.
BACKWARDS INCOMPATIBILITIES:
- all: This is the first release to use the 0.12 SDK required for Terraform 0.12 support. Some provider behaviour may have changed as a result of changes made by the new SDK version.
- compute:
google_compute_instance_groupwill not reconcile instances recreated within the sameterraform applydue to underlying0.12SDK changes in the provider. (#616) - compute:
google_compute_subnetworkwill have a diff ifsecondary_ip_rangevalues defined in config don't exactly match real state; if so, they will need to be reconciled. (#3432) - container:
google_container_clusterwill have a diff ifmaster_authorized_networks.cidr_blocksdefined in config doesn't exactly match the real state; if so, it will need to be reconciled. (#3427)
BUG FIXES:
- container:
google_container_clustercatch out of band changes tomaster_authorized_networks.cidr_blocks. (#3427)
NOTES: This 2.4.1 release is a bugfix release for 2.4.0. It backports the fixes applied in the 2.5.1 release to the 2.4.0 series.
BUG FIXES:
- compute:
google_compute_backend_servicehandles empty/niliapblock created by previous providers properly. (#3459) - compute:
google_compute_backend_serviceallows multiple instance types inbackends.groupagain. (#3463) - dns:
google_dns_managed_zonedoes not permadiff when visiblity is set to default and returned as empty from API (#3459)
KNOWN ISSUES:
- compute:
google_compute_backend_serviceresources created with past provider versions won't work with2.4.0. You can pin your provider version or manually delete them and recreate them until this is resolved. (hashicorp#3441) - dns:
google_dns_managed_zone.visibilitywill cause a diff if set topublic. Setting it to""(defaulting to public) will work around this. (hashicorp#3435)
FEATURES:
- New Resource:
google_access_context_manager_access_policyis now available at GA. (#3358) - New Resource:
google_access_context_manager_access_levelis now available at GA. (#3358) - New Resource:
google_access_context_manager_service_perimeteris now available at GA. (#3358) - New Resource:
google_compute_backend_bucket_signed_url_keyis now available. [GH-3229] - New Resource:
google_compute_backend_service_signed_url_keyis now available. [GH-3359] - New Datasource:
google_service_account_access_tokenis now available. (#3357)
ENHANCEMENTS:
- compute:
google_compute_backend_serviceis now generated with Magic Modules, adding configurable timeouts, multiple import formats,creation_timestampoutput. (#3345) - compute:
google_compute_backend_servicenow supportsload_balancing_schemeandcdn_policy.signed_url_cache_max_age_sec. (#3375) - compute:
google_compute_networknow supportsdelete_default_routes_on_createto delete pre-created routes at network creation time. (#3391) - dns:
google_dns_managed_zone.private_visibility_config, part of private DNS, is now generally available. (#3352)
BUG FIXES:
- container:
google_container_clusterwill ignore out of band changes onnode_ipv4_cidr_block. (#3319) - container:
google_container_clusterwill now reject config with bothnode_poolandremove_default_node_pooldefined (#3422) - container:
google_container_clusterwill allow >20cidr_blocksinmaster_authorized_networks_config. (#3397) - netblock:
data.google_netblock_ip_ranges.cidr_blockswill better handle ipv6 input. (#3390) - sql:
google_sql_database_instancewill retry reads during Terraform refreshes if it hits a rate limit. (#3366)
DEPRECATIONS:
- container:
google_container_clusterzoneandregionfields are deprecated in favour oflocation,additional_zonesin favour ofnode_locations. (#3114) - container:
google_container_node_poolzoneandregionfields are deprecated in favour oflocation. (#3114) - container:
data.google_container_clusterzoneandregionfields are deprecated in favour oflocation. (#3114) - container:
google_container_engine_versionszoneandregionfields are deprecated in favour oflocation. (#3114)
FEATURES:
- New Datasource:
google_*_organization_policyAdding datasources for folder and project org policy (#3137)
ENHANCEMENTS:
- compute:
google_compute_disk,google_compute_region_disknow supportphysical_block_size_bytes(#526) - compute:
google_compute_forwarding_rulesupports specifyingall_portsfor internal load balancing. (#3309) - compute:
google_compute_vpn_tunnelwill properly apply labels. (#3277) - container:
google_container_clusteradds a unifiedlocationfield for regions and zones,node_locationsto manage extra zones for multi-zonal clusters and specific zones for regional clusters. (#3114) - container:
google_container_node_pooladds a unifiedlocationfield for regions and zones. (#3114) - container:
data.google_container_clusteradds a unifiedlocationfield for regions and zones. (#3114) - container:
google_container_engine_versionsadds a unifiedlocationfield for regions and zones. (#3114) - dataflow:
google_dataflow_jobhas support for custom service accounts withservice_account_email. (#3238) - monitoring:
google_monitoring_uptime_check_configAdd a computed field for uptime check id (#3138) - resourcemanager:
google_*_organization_policyAdd import support for folder and project organization_policies (#3218) - sql:
google_sql_ssl_certAllow project to be specified at resource level (#3235) - storage:
google_storage_bucketChange storage bucket import logic to avoid calls to compute api (#3244) - storage:
google_storage_bucket.storage_classsupports updating. (#3297) - various: Some import formats that previously failed will now work as documented. (#3283)
BUG FIXES:
- compute:
google_compute_diskwill properly detach instances again. (#3269) - container:
google_container_cluster,google_container_node_poolproperly suppress new GKE1.12metadatavalues. (#3233) - container:
google_container_clusterproperly collects service-level errors from the API (#2941) - monitoring:
google_monitoring_uptime_check_configChange all fields for monitored resource to force recreation (#3132) - various: Retry only 409 concurrent operation errors and not naming conflicts (#3285)
KNOWN ISSUES:
- compute:
google_compute_diskis unable to detach instances at deletion time.
FEATURES:
- New Datasource:
data.google_projectsfor retrieving a list of projects based on a filter. (#3178) - New Resource:
google_tpu_nodefor Cloud TPU Nodes (#3179)
ENHANCEMENTS:
- compute:
google_compute_diskandgoogle_compute_region_diskwill now detach themselves from a more up to date set of users at delete time. (#3154) - compute:
google_compute_networkis now generated by Magic Modules, supporting configurable timeouts and more import formats. (#3203) - compute:
google_compute_firewallwill validate the maximum size of service account lists at plan time. (#3201) - container:
google_container_clustercan now disable VPC Native clusters withip_allocation_policy.use_ip_aliases(#3174) - container:
data.google_container_engine_versionssupportsversion_prefixto allow fuzzy version matching. Using this field, Terraform can match the latest version of a major, minor, or patch release. (#3199) - pubsub:
google_pubsub_subscriptionnow supports configuringmessage_retention_durationandretain_acked_messages. (#3193)
BUG FIXES:
- app_engine:
google_app_engine_applicationcorrectly outputsgcr_domain. (#3149) - compute:
data.google_compute_subnetworkoutputs theself_linkfield again. (#3156) - compute:
google_compute_attached_diskis now removed from state if the instance was removed. (#3183) - container:
google_container_clusterprivate_cluster_config now has a diff suppress to prevent a permadiff for and allows for emptymaster_ipv4_cidr_block(#460) - container:
google_container_clusterimport behavior fixed/documented for TF-state-only fields (remove_default_node_pool,min_master_version) (#3146][#3169][#3180) - storagetransfer:
google_storage_transfer_jobwill no longer crash when accessing nil dates. (#3185)
FEATURES:
- New Datasource:
google_client_openid_userinfofor retrieving theemailused to authenticate with GCP. (#3103)
ENHANCEMENTS:
- compute:
data.google_compute_subnetworkcan now be addressed byself_linkas an alternative to the existingname/region/projectfields. (#3040) - pubsub:
google_pubsub_topicis now generated using Magic Modules, adding Open in Cloud Shell examples, configurable timeouts, and thelabelsfield. (#3043) - pubsub:
google_pubsub_subscriptionis now generated using Magic Modules, adding Open in Cloud Shell examples, configurable timeouts, update support, and thelabelsfield. (#3043) - sql:
google_sql_database_instancenow providespublic_ip_addressandprivate_ip_addressoutputs of the first public and private IP of the instance respectively. (#3091)
BUG FIXES:
- sql:
google_sql_database_instanceallows the empty string to be set forprivate_network. (#3091)
BACKWARDS INCOMPATIBILITIES:
- bigtable:
google_bigtable_instance.cluster.num_nodeswill fail at plan time ifDEVELOPMENTinstances havenum_nodes = "0"set explicitly. If it has been set, unset the field. (#2401) - cloudbuild:
google_cloudbuild_trigger.build.step.argsis now a list instead of space separated strings. (#2790) - cloudfunctions:
google_cloudfunctions_function.retry_on_failurehas been removed. Useevent_trigger.failure_policy.retryinstead. (#2392) - composer:
google_composer_environment.node_config.zoneis nowRequired. (#2967) - compute:
google_compute_instance,google_compute_instance_from_templatemetadatafield is now authoritative and will remove values not explicitly set in config. (#2208) - compute:
google_compute_project_metadataresource is now authoritative and will remove values not explicitly set in config. (#2205) - compute:
google_compute_url_mapresource is now authoritative and will remove values not explicitly set in config. (#2245) - compute:
google_compute_global_forwarding_rule.labelsis removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2399) - compute:
google_compute_subnetwork_iam_binding,google_compute_subnetwork_iam_member,google_compute_subnetwork_iam_policyare removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2398) - compute:
google_compute_backend_service.custom_request_headersis removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2405) - compute:
google_compute_snapshot.snapshot_encryption_key_raw,google_compute_snapshot.snapshot_encryption_key_sha256,google_compute_snapshot.source_disk_encryption_key_raw,google_compute_snapshot.source_disk_encryption_key_sha256fields are now removed. Usegoogle_compute_snapshot.snapshot_encryption_key.0.raw_key,google_compute_snapshot.snapshot_encryption_key.0.sha256,google_compute_snapshot.source_disk_encryption_key.0.raw_key,google_compute_snapshot.source_disk_encryption_key.0.sha256instead. (#2572][#2624) - container:
google_container_node_pool.max_pods_per_nodeis removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2391) - compute:
google_compute_instance_group_managerandgoogle_compute_region_instance_group_managerhave had theirversion,auto_healing_policies, androlling_update_policyfields removed from thegoogleprovider. They must be used in thegoogle-betaprovider.rolling_update_policywas renamedupdate_policyin that provider. (#2392) - compute:
google_compute_instance_group_manageris no longer imported by the provider-level region. Set the appropriate provider-level zone instead. (#2693) - compute:
google_compute_region_instance_group_manager.update_strategyin thegoogle-betaprovider has been removed. (#2594) - compute:
google_compute_instance,google_compute_instance_template,google_compute_instance_from_templatehave had thenetwork_interface.addressfield removed. (#2595) - compute:
google_compute_diskis no longer imported by the provider-level region. Set the appropriate provider-level zone instead. (#2694) - compute:
google_compute_router_nat.subnetwork.source_ip_ranges_to_natis now Required insidesubnetworkblocks. (#2749) - compute:
google_compute_ssl_certificate'sprivate_keyfield is no longer stored in state in cleartext; it is now SHA256 encoded. (#2976) - container:
google_container_clusterfields (private_cluster,master_ipv4_cidr_block) are removed. Useprivate_cluster_configandprivate_cluster_config.master_ipv4_cidr_blockinstead. (#2395) - container:
google_container_clusterfields (enable_binary_authorization,enable_tpu,pod_security_policy_config) are removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2395) - container:
google_container_cluster.node_configfields (taints,workload_metadata_config) are removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2601) - container:
google_container_node_pool.node_configfields (taints,workload_metadata_config) are removed from thegoogleprovider and must be used in thegoogle-betaprovider. (#2601) - container:
google_container_node_pool'sname_prefixfield has been restored and is no longer deprecated. (#2975) - sql:
google_sql_database_instanceresource is now authoritative and will remove values not explicitly set in config. (#2203) - bigtable:
google_bigtable_instancezonefield is no longer inferred from the provider. - endpoints:
google_endpoints_service.protoc_outputwas removed. Usegoogle_endpoints_service.protoc_output_base64instead. (#2396) - resourcemanager:
google_project_iam_policyis now authoritative and will remove values not explicitly set in config. Several fields were removed that made it authoritative:authoritative,restore_policy, anddisable_project. This resource is very dangerous! Ensure you are not using the removed fields (authoritative,restore_policy,disable_project). (#2315) - resourcemanager: Datasource
google_service_account_key.service_account_idhas been removed. Use thenamefield instead. (#2397) - resourcemanager:
google_project.app_enginehas been removed. Use thegoogle_app_engine_applicationresource instead. (#2386) - resourcemanager:
google_organization_custom_role.deletedis now an output-only attribute. Useterraform destroy, or remove the resource from your config instead. (#2596) - resourcemanager:
google_project_custom_role.deletedis now an output-only attribute. Useterraform destroy, or remove the resource from your config instead. (#2619) - serviceusage:
google_project_servicewill now error instead of silently disabling dependent services ifdisable_dependent_servicesis unset. (#2938) - storage:
google_storage_object_acl.role_entityis now authoritative and will remove values not explicitly set in config. Usegoogle_storage_object_access_controlfor fine-grained management. (#2316) - storage:
google_storage_default_object_acl.role_entityis now authoritative and will remove values not explicitly set in config. (#2345) - iam:
google_*_iam_bindingChange all IAM bindings to be authoritative (#2764)
FEATURES:
- New Resource:
google_access_context_manager_access_policyfor managing the container for an organization's access levels. (google-beta#96) - New Resource:
google_access_context_manager_access_levelfor managing an organization's access levels. (google-beta#149) - New Resource:
google_access_context_manager_service_perimeterfor managing service perimeters in an access policy. (google-beta#246) - New Resource:
google_storage_transfer_jobfor managing recurring storage transfers with Google Cloud Storage. (#2707) - New Datasource:
google_storage_transfer_project_service_accountdata source for retrieving the Storage Transfer service account for a project (#2692) - New Resource:
google_app_engine_firewall_rule(#2738][#2849) - New Resource:
google_project_iam_audit_config(#2731) - New Datasource:
google_kms_crypto_keydata source for an externally managed KMS crypto key (#2891) - New Datasource:
google_kms_key_ring(#2891)
ENHANCEMENTS:
- provider: Add
access_tokenconfig option to allow Terraform to authenticate using short-lived Google OAuth 2.0 access token (#2838) - bigquery: Add
default_partition_expiration_msfield togoogle_bigquery_datasetresource. (#2287) - bigquery: Add
delete_contents_on_destroyfield togoogle_bigquery_datasetresource. (#2986) - bigquery: Add
time_partitioning.require_partition_filtertogoogle_bigquery_tableresource. (#2815) - bigquery: Allow more BigQuery regions (#2566)
- bigtable: Add
column_familyat create time togoogle_bigtable_table. (#2228) - bigtable: Add multi-zone (inside one region) replication to
google_bigtable_instance. (#2313] [#2289) - cloudbuild:
google_cloudbuild_triggeris now autogenerated, adding more configurable timeouts, import support, and thedisabledfield.ignored_files,included_filesare now updatable. (#2790] [#2871) - cloudfunctions:
google_cloudfunctions_functionnow has souce repo support (#2650) - cloudfunctions:
google_cloudfunctions_functionnow supportsservice_account_emailfor self-provided service accounts. (#2947) - compute:
google_compute_forwarding_rulesupports specifyingall_portsfor internal load balancing. (google-beta#297) - compute:
google_compute_imageis now autogenerated and supports multiple import formats, andsize_gbattribute. (#2769) - compute:
google_compute_url_mapresource is now autogenerated and supports multiple import formats. (#2245) - compute: Add
name,unique_id, anddisplay_nameproperties todata.google_compute_default_service_account(#2778) - compute:
google_compute_diskAdd support for KMS encryption to compute disk (#2884) - compute: Add support for PARTNER interconnects. (#2959)
- dataproc: Add
acceleratorssupport togoogle_dataproc_clusterto allow using GPU accelerators. (#2411) - dataproc:
google_dataproc_clusterAdd support for KMS encryption to dataproc cluster (#2840) - project: The google_iam_policy data source now supports Audit Configs (#2687)
- kms: Add support for
protection_leveltogoogle_kms_crypto_key(#2751) - resourcemanager: add
inherit_from_parentto all org policy resources (#2653) - serviceusage:
google_project_servicenow supportsdisable_dependent_servicesto control whether services can disable services that depend on them at disable-time. (#2938) - sourcerepo:
google_sourcerepo_repositoryis now autogenerated, adding configurable timeouts. (#2797) - storage:
google_storage_object_aclcan more easily swap betweenrole_entityandpredefined_aclACL definitions. (#2316) - storage:
google_storage_buckethas support forrequester_pays(#2580) - storage:
google_storage_bucket_objectexportsoutput_namefor interpolations onname, allowing you to trigger reapplication ofgoogle_storage_object_aclon recreated objects. (#2914) - storage: During a force destroy,
google_storage_bucketwill delete objects in parallel instead of serially. (#2944) - spanner:
google_spanner_databaseis autogenerated and supports timeouts. (#2812) - spanner:
google_spanner_instanceis autogenerated and supports timeouts. (#2892)
BUG FIXES:
- cloudbuild: allow
google_cloudbuild_trigger.trigger_template.projectto not be set (#2655) - cloudbuild: fix update so it doesn't error every time (#2743)
- cloudfunctions: No longer over-validate project ids in
google_cloudfunctions_function(#2780) - compute: attached_disk now supports region disks (#2441)
- compute: extract vpn tunnel region/project from vpn gateway (#2640)
- compute: send instance scheduling block with automaticrestart true if there is none in cfg (#2638)
- compute: fix disk behaivor in compute_instance_from_template (#2695)
- compute: add diffsuppress for region_autoscaler.target so it can be used with both versions of the provider (#2770)
- compute: fix ID for inferring project for old compute_project_metadata states (#2844)
- compute:
google_compute_backend_servicewill send the correctiapblock values during updates (#2978) - container: fix failure when updating node versions (#2872)
- dataproc: convert dataproc_cluster.cluster_config.gce_cluster_config.tags into a set (#2633)
- iam: fix permadiff when stage is ALPHA (#2370)
- iam: add another retry if iam read returns nil (#2629)
- monitoring:
uptime_check_configcan now be updated and won't error when changing duration. (#2786) - runtimeconfig: allow more characters in runtimeconfig name (#2643)
- sql: send maintenance_window.hour even if it's zero, since that's a valid value (#2630)
- sql: allow cross-project imports for sql user (#2632)
- sql: mark region as computed in sql db instance since we use getregion (#2635)
- sql:
google_sql_database_instanceStop SQL instances from reporting failing to destroy (#2811)
DEPRECATIONS:
- Deprecated
google_compute_snapshot's top-level encryption fields. (#2572)
FEATURES:
- New Resource:
google_storage_object_access_controlfor fine-grained management of ACLs on Google Cloud Storage objects (#2256) - New Resource:
google_storage_default_object_access_controlfor fine-grained management of default object ACLs on Google Cloud Storage buckets (#2358) - New Resource:
google_sql_ssl_certfor Google Cloud SQL client SSL certificates. (#2290) - New Resource:
google_monitoring_notification_channel(#2452) - New Resource:
google_compute_router_nat(#2576) - New Resource:
google_monitoring_group(#2451) - New Resource:
google_billing_account_iam_binding,google_billing_account_iam_member,google_billing_account_iam_policyfor managing Billing Account IAM policies, including managing Billing Account users. (#2143) - New Datasource:
google_iam_roledatasource to be able to read an IAM role's permissions. (#2482)
ENHANCEMENTS:
- cloudbuild: Added Update support for
google_cloudbuild_trigger. (#2121) - cloudfunctions: Add
runtimesupport togoogle_cloudfunctions_function(#2340) - cloudfunctions: Add new-style Storage and Pub/Sub trigger support to
google_cloudfunctions_function(#2412) - compute:
google_compute_health_checksupports for content-based load balancing (responsefield) in HTTP(S) checks. (#2550) - container: regional and private clusters are in GA now (#2364)
- iam:
google_service_accountsnow supports multiple import formats. (#2261) - sql: add support for private IP for SQL instances. (#2662)
BUG FIXES:
- bigquery: added australia and europe regions to the validate function (#2333)
- compute:
google_compute_disk.snapshot,google_compute_region_disk.snapshotproperly allow partial URIs. (#2450) - compute: The
google_compute_instancedatasource can now be addressed byself_link. (#2874) - compute:
google_compute_image.licenseselements properly allow partial URIs / versioned self links. (#3018) - compute:
google_compute_project_metadatacan now be imported from a project other than the one specified in your config. (#3018) - pubsub: fix issue where not all attributes were saved in state (#2469)
BUG FIXES:
- all: fix deprecation links in resources (#2197] [#2196)
- all: fix panics caused by including empty blocks with lists (#2229] [#2233] [#2239)
- compute: allow instance templates to have disks with no source image set (#2218)
- project: fix plan output when app engine api is not enabled (#2204)
BACKWARDS INCOMPATIBILITIES:
- all: beta fields have been deprecated in favor of the new
google-betaprovider. See https://terraform.io/docs/providers/google/provider_versions.html for more info. (#2152] [#2142) - bigtable:
google_bigtable_instancedeprecated thecluster_id,zone,num_nodes, andstorage_typefields, creating aclusterblock containing those fields instead. (#2161) - cloudfunctions:
google_cloudfunctions_functionanddatasource_google_cloudfunctions_functiondeprecatedtrigger_bucketandtrigger_topicin favor of the newevent_triggerfield, and deprecatedretry_on_failurein favor of theevent_trigger.failure_policy.retryfield. (#2158) - compute:
google_compute_instance,google_compute_instance_template,google_compute_instance_from_templatehave had thenetwork_interface.addressfield deprecated and thenetwork_interface.network_ipfield undeprecated to better match the API. Terraform configurations should migrate fromnetwork_interface.addresstonetwork_interface.network_ip. (#2096) - compute:
google_compute_instance,google_compute_instance_from_templatehave had thenetwork_interface.0.access_config.0.assigned_nat_ipfield deprecated. Please usenetwork_interface.0.access_config.0.nat_ipinstead. - compute:
google_compute_instance_group_managerandgoogle_compute_region_instance_group_managerhave had theirversion,auto_healing_policies, androlling_update_policyfields deprecated.google_compute_instance_group_manageralso now acceptsREPLACEforupdate_strategy, which is an alias forRESTART, and is preferred. (#2156) - project:
google_project'sapp_enginesub-block has been deprecated. Please use thegoogle_app_engine_appresource instead. Changing between the two should not force project re-creation. (#2147) - project:
google_project_iam_policy'srestore_policyfield is now deprecated (#2186)
FEATURES:
- New Datasource:
google_compute_instance(#1906) - New Resource:
google_compute_interconnect_attachment(#1140) - New Resource:
google_filestore_instance(#2088) - New Resource:
google_app_engine_application(#2147)
ENHANCEMENTS:
- container: Add
enable_tpuflag to google_container_cluster (#1974) - dns:
google_dns_managed_zoneis now importable (#1944) - dns:
google_dns_managed_zoneis now entirely GA (#2154) - runtimeconfig:
google_runtimeconfig_configandgoogle_runtimeconfig_variableare now importable. (#2054) - services: containeranalysis.googleapis.com can now be enabled (#2095)
BUG FIXES:
- compute: fix instance template interaction with regional disk self links (#2138)
- compute: fix diff when using image shorthands for instance templates (#1995)
- compute: fix error when reading instance templates created from disks and referenced by name instead of self_link (#2153)
- container: Make max_pods_per_node ForceNew (#2139)
- services: make google_project_service more resilient to projects being deleted (#2090)
- sql: retry failed sql calls (#2174)
BACKWARDS INCOMPATIBILITIES:
- compute: instance templates used to not set any disks in the template in state unless they were in the config, as well. It also only stored the image name in state. Both of these were bugs, and have been fixed. They should not cause any disruption. If you were interpolating an image name from a disk in an instance template, you'll need to update your config to strip out everything before the last
/. If you imported an instance template, and did not add all the disks in the template to your config, you'll see a diff; add those disks to your config, and it will go away. Those are the only two instances where this change should effect you. We apologise for the inconvenience. (#1916) - iam:
google_*_custom_rolesnow treatsdeleteas deprecated - to actually delete roles, remove from config. - provider: This is the first release tested against and built with Go 1.11, which required go fmt changes to the code. If you are building a custom version of this provider or running tests using the repository Make targets (e.g. make build) when using a previous version of Go, you will receive errors. You can use the underlying go commands (e.g. go build) to workaround the go fmt check in the Make targets until you are able to upgrade Go.
FEATURES:
- New Resource:
google_compute_attached_disk(#1585) - New Resource:
google_composer_environment(#2001)
IMPROVEMENTS:
- bigquery: Add Support For BigQuery Access Control (#1931)
- compute:
google_compute_health_checkis autogenerated, exposing thetypeattribute and accepting more import formats. (#1941) - compute:
google_compute_ssl_certificateis autogenerated, exposing thecreation_timestampattribute and accepting more import formats. Note:certificate_idwas changed to an int from a string. This should have no effect on backwards compatibility, but please report a bug if you have any issues! (#2015) - container: Addition of create_subnetwork and other fields relevant for Alias IPs (#1921)
- dataflow: Add region choice to dataflow jobs (#1979)
- logging: Add import support for
google_logging_organization_sink,google_logging_folder_sink,google_logging_billing_account_sink(#1860) - logging: Sending a default update mask for all logging sinks to prevent future breakages (#1991)
- dns: Adding support for labels to managed DNS (#1803)
- container: Add support for
max_pods_per_nodefor private clusters. (#2038)
BUG FIXES:
- compute: Store google_compute_vpn_tunnel.router as a self_link to avoid permadiffs. (#2003)
- iam: Prevent error when attempting to recreate recently soft-deleted
google_(project|organization)_iam_custom_role. Instead, roles that are able to be undeleted will be undeleted-updated, as long as they were deleted within 7 days. (#1681) - project: make validation for project id less restrictive (#1878)
BUG FIXES:
- container: fix panic on gke binauth (#1924)
FEATURES:
- New Datasource:
google_project_services(#1822) - New Resource:
google_compute_region_disk(#1755) - New Resource:
google_binary_authorization_attestor(#1885) - New Resource:
google_binary_authorization_policy(#1885) - New Resource:
google_container_analysis_note(#1885)
IMPROVEMENTS:
- cloudfunctions: Add support for updating function code in place (#1781)
- cloudbuild: Add support for substitutions in triggers (#1810)
- compute: Bring regional instance groups up to par with zonal instance groups. (#1809)
- compute: Add labels to Address and GlobalAddress. (#1811)
- container: allow updating node image types (#1843)
- container: Add support for binary authorization in GKE (#1884)
- compute: Allow update of master auth on GKE container cluster. (#1873)
- compute: Add support for
boot_disk_typetogoogle_dataproc_cluster. (#1855) - compute: Generate resource_compute_firewall in magic-modules. Make more fields updatable by using PATCH instead of PUT. (#1907)
- storage: Add user_project support to
google_storage_project_service_accountdata source (#1913)
BUG FIXES:
- project: Fix bug where app engine wasn't getting enabled on projects that had billing enabled (#1795)
- redis: Allow authorized network to be a name or self link (#1782)
- sql: lock on master name when creating replicas (#1798)
- storage: allow all role-entity pairs to be unordered (#1787)
- compute: allow switching from a daily
ubuntu-minimalbuild toubuntu-minimal-ltsinstead of onlyubuntu. (#1870) - kms: allow project ids with colons (#1865)
- compute: allow project iam policy import with a resource that doesn't match provider project. (#1875)
- compute: Ensure regional container clusters update correctly. (#1887)
BUG FIXES:
- compute: use patch instead of put to update router (#1780)
- compute: allow a lot more fields in
google_compute_firewallto be updated to their empty value (#1784) - compute: allow setting instance scheduling booleans on
google_compute_instanceto false (#1779) - compute: ensure router peers and interfaces are always removed. (#1877)
BUG FIXES:
- container: Fix crash when updating resource labels on a cluster (#1769)
FEATURES:
- New Resource:
compute_instance_from_template(#1652)
IMPROVEMENTS:
- compute: Autogenerate
google_compute_forwarding_rule, adding labels, service labels, and service name attribute. - compute: add
quic_overridetogoogle_compute_target_https_proxy(#1718) - compute: add support for licenses to
compute_image(#1717) - compute: Autogenerate router resource. Also adds update support and a few new fields (advertise_mode, advertised_groups, advertised_ip_ranges). (#1723)
- container: add ability to configure resource labels on
google_container_cluster(#1663) - container: increase max number of
master_authorized_networksto 20 (#1733) - container: support specifying
disk_typefornode_config(#1665) - project: correctly paginate when more than 50 services are enabled (#1737)
- redis: Support Redis Configuration (#1706)
BUG FIXES:
- all: Fix retries for wrapped errors (#1760)
- iot: Retry creation of Cloud IoT registry (#1713)
- project: ignore stackdriverprovisioning service, so it doesn't permadiff (#1763)
FEATURES:
IMPROVEMENTS:
- compute: Autogenerate
compute_subnetwork(#1661) - container: Allow specifying project when importing container_node_pool (#1653)
- dns: Add update support for
dns_managed_zone(#1617) - project: App Engine application fields can now be updated in-place where possible (#1621)
- storage: Add
projectfield for GCS service account data source (#1677) - sql: Attempting to shrink an
sql_database_instance's disk size will now force recreation of the resource (#1684)
BUG FIXES:
- all: Check for done operations before waiting on them. This fixes a 403 we were getting when trying to enable already-enabled services. (#1632)
- bigquery: add error checking for bigquery dataset id (#1638)
- compute: Store v1
self_linkfor(sub)?networkingoogle_compute_instance(#1629) - compute:
zonefield ingoogle_compute_diskshould be optional (#1631) - compute: name_prefix is no longer deprecated for SSL certificates (#1622)
- compute: for global address ip_version, IPV4 and empty are equivalent. (#1639)
- compute: fix default service account data source to actually set the email and project (#1690)
- container: fix permadiff on
container_cluster'spod_security_policy_config(#1670) - container: removing sub-blocks of
container_clusterlike maintenance windows will now delete them from the API (#1685) - container: retry node pool writes on failed precondition (#1660)
- iam: Fixes issue with consecutive whitespace (#1625)
- iam: use same mutex for project_iam_policy as the other project_iam resources (#1645)
- iam: don't error if service account key is already gone on delete (#1659)
- iam: Fix bug in v1.14 where service_account_key needed project set (#1664)
- iot: fix updatemask so updates actually work (#1640)
- storage: fix a permadiff in bucket ACL role entities (#1692)
FEATURES:
- New Datasource:
google_service_account(#1535) - New Datasource:
google_service_account_key(#1535) - New Datasource:
google_netblock_ip_ranges(#1580) - New Datasource:
google_compute_regions(#1603)
IMPROVEMENTS:
- compute: As part of migrating
google_compute_diskto be autogenerated, enabled encrypted source snapshot & images. [#1521]. - compute: Accept subnetwork name only in
google_forwarding_rule(#1552) - compute: Add disabled property to
google_compute_firewall(#1536) - compute: Add support for custom request headers in
google_compute_backend_service(#1537) - compute: Add support for
ssl_policytogoogle_compute_target_ssl_proxy(#1568) - compute: Add support for
versions in instance group manager (#1499) - compute: Add support for
network_tierto address, instance and instance_template (#1530) - cloudbuild: Use the project defined in
trigger_templatewhen creating agoogle_cloudbuild_trigger(#1556) - cloudbuild: Support configuration file in repository for
google_cloudbuild_trigger(#1557) - kms: Add basic update for
google_kms_crypto_keyresource (#1511) - project: Use default provider project for
google_project_servicesif project field is empty (#1553) - project: Added support for restoring default organization policies (#1477)
- project: Handle spurious Cloud API errors and performance issues for
google_project_service(s)(#1565) - redis: Add update support for Redis Instances (#1590)
- sql: Add labels support in
sql_database_instance(#1567)
BUG FIXES:
- dns: Suppress diff for ipv6 address in
google_dns_record_set(#1551) - storage: Support removing a label in
google_storage_bucket(#1550) - compute: Fix perpetual diff caused by the
google_instance_groupself_link ingoogle_regional_instance_group_manager(#1549) - project: Retry while listing enabled services (#1573)
- redis: Allow self links for redis authorized network (#1599)
BACKWARDS INCOMPATIBILITIES / NOTES:
google_project_service/google_project_servicesnow use the Service Usage API. Users of those resources will need to enable the API at https://console.cloud.google.com/apis/api/serviceusage.googleapis.com.- If you have a
google_projectresource where App Engine is enabled in the project, add anapp_engineblock to your resource before running Terraform after upgrading to this version, or hold off on upgrading for now. See #1561, which has more details and an ongoing investigation of other potential fixes.
FEATURES:
- New Resource:
google_cloudbuild_trigger. (#1357) - New Resource:
google_storage_bucket_iam_policy(#1190) - New Resource:
google_resource_manager_lien(#1484) - New Resource:
google_logging_billing_account_exclusion(#990) - New Resource:
google_logging_folder_exclusion(#990) - New Resource:
google_logging_organization_exclusion(#990) - New Resource:
google_logging_project_exclusion(#990) - New Resource:
google_redis_instance(#1485) - App Engine applications can now be managed using the
app_enginefield ingoogle_project(#1503)
IMPROVEMENTS:
- cloudfunctions: add ability to retry cloud functions on failure (#1452)
- container: Add support for regional cluster in
google_containerdatasource (#1441) - container: Add GKE Shared VPC support (#1528)
- compute: autogenerate
google_compute_ssl_policy(#1478) - compute: add support for
ssl_policytogoogle_target_https_proxy(#1466) - project: Added name and project_id plan-time validations (#1519)
BUG FIXES:
- compute: Compare region_backend_service.backend[].group as a relative path (#1487)
- compute: Fixed
region_backend_serviceto calc hash using relative path (#1491) - sql: Fix panic on empty maintenance window (#1507)
FEATURES:
- spanner: New resources to manage IAM for Spanner Databases: google_spanner_database_iam_binding, google_spanner_database_iam_member, and google_spanner_database_iam_policy (#1386)
- spanner: New resources to manage IAM for Spanner Instances: google_spanner_instance_iam_binding, google_spanner_instance_iam_member, and google_spanner_instance_iam_policy (#1387)
IMPROVEMENTS:
- compute: Autogenerate
google_vpn_gateway(#1409) - compute: add
enable_flow_logsfield to subnetwork (#1385) - project: Don't fail if
folder_idandorg_idare set but one is empty forgoogle_project(#1425)
BUG FIXES:
- compute: Always parse fixed64 string to int64 even on 32 bits platform to prevent out-of-range crash. (#1429)
IMPROVEMENTS:
- compute: Add
public_ptr_domain_nametogoogle_compute_instance. (#1349) - compute: Autogenerate
google_compute_global_address. (#1379) - compute: Autogenerate
google_compute_target_http_proxy. (#1391) - compute: Autogenerate
google_compute_target_http_proxy. (#1373) - compute: Simplify autogenerated code for
google_compute_target_http_proxyandgoogle_compute_target_ssl_proxy. (#1395) - compute: Use partial state setting in
google_compute_target_http_proxyandgoogle_compute_target_ssl_proxyto better handle mid-update errors. (#1392) - compute: Use the v1 API for
google_compute_address(#1384) - compute: Properly detect when
public_ptr_domain_nameisn't set. (#1383) - compute: Use the v1 API for
google_compute_ssl_policy(#1368) - container: Add
issue_client_certificatetogoogle_container_cluster. (#1396) - container: Support regional clusters for node pools. (#1320)
- all: List of resources is now partially auto-generated (#1397] [#1402)
BUG FIXES:
- iam: expand the validation for service accounts to include App Engine and compute default service accounts (#1390)
- sql: Increase timeouts (#1381)
- website: fix broken layouts (#1405)
FEATURES:
- New Data Source
google_folder(#1280) - New Resource
google_compute_subnetwork_iam_binding(#1305) - New Resource
google_compute_subnetwork_iam_member(#1305) - New Resource
google_compute_subnetwork_iam_policy(#1305)
IMPROVEMENTS:
- compute: Add timeouts to
google_compute_snapshot(#1309) - compute: un-deprecate name_prefix for instance templates (#1328)
- compute: Add
default_cluster_versionfield todata_source_google_container_engine_versions. (#1355) - compute: Add
max_connectionsandmax_connections_per_instancetoresource_compute_backend_service(#1353) - all: Maintain parity with GCP Console UI by allowing removal of default project networks. (#1316)
- all: Use standard user-agent header (#1332)
BUG FIXES:
- compute: fix error introduced when attached disks are deleted out of band (#1301)
- container: Use correct project id regex in
google_container_cluster(#1311) - folder: Escape the display name in active folder data source (in case of spaces, etc) (#1261)
- project: Fix auto-delete default network in google_project (#1336)
BACKWARDS INCOMPATIBILITIES / NOTES:
name_prefixis now deprecated in all resources that support it (#1035)
FEATURES:
- New Data Source
google_compute_ssl_policy(#1247) - New Resource
google_compute_security_policy(#1242) - New Resource
google_compute_ssl_policy(#1247) - New Resource
google_project_organization_policy(#1226)
IMPROVEMENTS:
- all: Read
GOOGLE_CLOUD_PROJECTenvironment variable also (#1271) - bigquery: Add time partitioning field to
google_bigquery_tableresource (#1240) - config: Add OAuth access token to
google_client_configdata source [#1277] - compute: Add
wait_for_instancesfield togoogle_compute_instance_group_managerand self_link option to thegoogle_compute_instance_groupdata source (#1222) - compute: add support for security policies in backend services (#1243)
- compute: regional instance group managers now support rolling updates (#1260)
- container: add ability to delete the default node pool (#1245)
- container: Add update support for pod security policy (#1195)
- container: Add gke node taints (#1264)
- container: Add support for node pool versions (#1266)
- container: Add support for private clusters (#1250)
- container: Updates container_cluster to set
enable_legacy_abacto false by default (#1281) - container: Add support for regional GKE clusters in
google_container_cluster(#1181) - iam: allow setting service account email as id for service account keys (#1256)
- sql: add custom timeouts support for sql database instance (#1288)
- sql: Retry on 429 and 503 errors on sql admin operation (#1212)
- project: Add disable_on_destroy flag to
google_project_services(#1293)
BUG FIXES:
- compute: fix panic when setting empty iap block (#1232)
- compute: protect against an instance getting deleted by an igm while the disk is being detached (#1241)
- compute: Add DiffSuppress for URL maps on Target HTTP(S) Proxies (#1263)
- storage: Set force_destroy when importing storage buckets (#1223)
- storage: Delete all object version when deleting all objects in a bucket (#1285)
BACKWARDS INCOMPATIBILITIES / NOTES:
google_dataproc_cluster.delete_autogen_bucketis now deprecated (#1171)
FEATURES:
- New Resource
google_organization_iam_policy(see docs for caveats) (#1196)
IMPROVEMENTS:
- container: un-deprecate
google_container_node_pool.initial_node_count(#1176) - container: Add support for pod security policy (#1192)
- container: Add support for GKE metadata concealment (#1199)
- container: Add support for GKE network policy config addon. (#1200)
- container: Add support for
instance_group_urlsingoogle_container_node_pool(#1207) - compute: Rolling update support for instance group manager (#1137)
- compute: Add
cdn_policyfield to backend service (#1208) - compute: Add support for deletion protection. (#1205)
- all: IAM resources now wait for propagation before reporting created. (#1197)
BUG FIXES:
- compute: Properly set
image_idfield ondata_google_compute_imagein state (#1217) - compute: Properly set
projectfield ongoogle_compute_project_metadatain state (#1217) - dataproc: Properly set
cluster_config.0.initialization_actionongoogle_dataproc_clusterin state (#1217)
Features:
- New Data Source
google_compute_forwarding_rule(#1078) - New Data Source
google_compute_vpn_gateway(#1071) - New Data Source
google_project(#1111) - New Data Source
google_compute_backend_service(#1150) - New Data Source
google_storage_project_service_account(#1110) - New Data Source
google_compute_default_service_account(#1119) - New Resource
google_folder_iam_binding(#1076) - New Resource
google_folder_iam_member(#1076) - New Resource
google_project_usage_export_bucket(#1080)
IMPROVEMENTS:
- compute: add support for updating alias ips in instances (#1084)
- compute: allow setting a route resource's
descriptionattribute (#1088) - compute: allow lowercase ip protocols in forwarding rules (#1118)
- compute:
google_compute_zonesdatasource accepts aprojectparameter (#1122) - compute: Support
distributionPolicywhen creating regional instance group managers. (#1092) - compute: Timeout customization for
google_compute_backend_bucket,google_compute_http_health_check, andgoogle_compute_https_health_check(#1177) - container: Fail if the ip_allocation_policy doesn't specify secondary range names (#1065)
- container: Allow specifying accelerators in cluster node_config. (#1115)
- pubsub: Add project field to iam pubsub topic resources (#1154)
- sql: Support multiple users with the same name for different host for 1st gen SQL instances. (#1066)
- sql: Add SQL DB Instance attribute
first_ip_address(#1050)
BUG FIXES:
- compute: Don't store disk in state if it didn't create (#1129)
- compute: Check set equality for service account scope changes (#1130)
- compute: Disk now accepts project id with '.' and ':' (#1145)
- dataproc: fix typos in pyspark dataproc job resource that led to args not working (#1120)
- dns: fix perpetual diffs when names aren't all uppercase or if TXT records aren't quoted (#1141)
- spanner: Accepts project id with '.' and ':' (#1151)
Features:
- New Resource
google_cloudiot_registry(#970) - New Resource
google_endpoints_service(#933) - New Resource
google_storage_default_object_acl(#992) - New Resource
google_storage_notification(#1033)
IMPROVEMENTS:
- compute: Suppress diff if
guest_acceleratorscount is 0 ingoogle_compute_instanceandgoogle_compute_instance_template(#866) - compute: Add update support for machine type, min cpu platform, and service accounts (#1005)
- compute: Add import support for google_compute_shared_vpc_host_project/google_compute_shared_vpc_service_project resources (#1004)
- compute: Make route priority optional since Compute has a default value. (#1009)
- container: Suppress diff for empty/default provider in
google_container_clusternetwork policy #1031 - container: Return an error if name and name prefix are specified in node pool (#1062)
- sql: Support for PostgreSQL high availability (#1001)
- sql: Support for ServerCaCert in Cloud SQL instance. (Related to #635)
- storage: Add support for setting bucket's logging config (#946)
BUG FIXES:
- project: Fix crash when errors are encountered updating a
google_project(#1016) - logging: Set project during import for
google_logging_project_sinkto avoid recreation (#1018) - compute: Suppress diff on image field when referring to unconventional public image family naming pattern (#1024)
- compute: Backend service backed by a group couldn't be created or updated because both max_rate and max_rate_per_instance would always be set to zero and they can't be both set. (#1051)
- container: Fix perpetual diff in
google_container_clusterif the subnetwork field is not specified (#1061)
FEATURES:
- New Resource:
google_cloudfunctions_function(#899) - New Resource:
google_logging_organization_sink(#923) - New Resource:
google_service_account_iam_binding(#840) - New Resource:
google_service_account_iam_member(#840) - New Resource:
google_service_account_iam_policy(#840) - New Resource:
google_pubsub_topic_iam_binding(#875) - New Resource:
google_pubsub_topic_iam_member(#875) - New Resource:
google_pubsub_topic_iam_policy(#875) - New Resource:
google_dataflow_job(#855) - New Data Source:
google_compute_region_instance_group(#851) - New Data Source:
google_container_cluster(#740) - New Data Source:
google_kms_secret(#741) - New Data Source:
google_billing_account(#889) - New Data Source:
google_organization(#887) - New Data Source:
google_container_registry_repository(#954) - New Data Source:
google_container_registry_image(#954)
IMPROVEMENTS:
- iam: Add support for import of IAM resources (project, folder, organizations, crypto keys, and key rings). (#835)
- compute: Add support for routing mode in compute network. (#838)
- compute: Add configurable create/update/delete timeouts to
google_compute_instance(#856) - compute: Add configurable create/update/delete timeouts to
google_compute_subnetwork(#871) - compute: Add update support for
routing_modeingoogle_compute_network(#857) - compute: Add import support for
google_compute_instance(#873) - compute: More descriptive error message for health check not found in
google_compute_target_pool(#883) - compute: Add
disable_on_destroy(default true) forgoogle_project_service. (#965) - compute: Add update support for subnetwork IP CIDR range expansion (#945)
- compute: Read boot disk initialization params from API in
google_compute_instance(#948) - container: Ensure operations on a cluster are applied serially (#937)
- container: Don't recreate container_cluster when maintenance_window changes (#893)
- dataproc: Add "internal IP only" support for Dataproc clusters (#837)
- dataproc: Support
self_linkfrom a different project in dataproc network and subnetwork fields (#935) - sourcerepo: Export new
urlfield forgoogle_sourcerepo_repository(#943) - folder: Support more format for
folderfield ingoogle_folder_organization_policy(#963) - dns: Add import support to
google_dns_record_set(#895) - all: Make provider-wide region optional (#916)
- all: Infers region from zone schema before using the provider-level region (#938)
- all: Upgrade terraform core to v0.11.2 (#940)
BUG FIXES:
- compute: Suppress diff for equivalent value in
google_compute_diskimage field (#884) - compute: Read IAP settings properly in
google_compute_backend_service(#907) - compute: Fix bug causing a crash when specifying unknown network in
google_compute_network_peering(#918) - compute: Fix failing update when changing
google_compute_health_checktype (#944) - compute: Fix bug blocking
google_compute_autoscalerfrom containing multiple metrics. (#966) - container: Set default scopes when creating GKE clusters/node pools (#924)
- storage: Fix bug blocking the update of a storage object if its content is dynamic/interpolated (#848)
- storage: Fix bug preventing the removal of lifecycle rules for a
google_storage_bucket(#850) - all: Fix bug causing a perpetual diff when using provider-default zone (#914)
FEATURES:
- New Data Source:
google_compute_image(#128) - New Resource:
google_storage_bucket_iam_binding(#822) - New Resource:
google_storage_bucket_iam_member(#822)
IMPROVEMENTS:
- all: Add support for
zoneat the provider level, as a default for all zonal resources. (#816) - compute: Add support for
min_cpu_platformtogoogle_compute_instance_template(#808) - compute: Add example for Shared VPC (aka cross-project networking, or XPN). (#810)
BUG FIXES:
- all: Fix bug that disallowed using file paths for credentials (#832)
- dns: Fix bug that broke NS records on subdomains (#807)
- bigquery: Fix bug causing a crash if the import id was invalid (#828)
FEATURES:
- New Resource:
google_folder_organization_policy(#747) - New Resource:
google_kms_key_ring_iam_binding(#781) - New Resource:
google_kms_key_ring_iam_member(#781) - New Resource:
google_kms_crypto_key_iam_binding(#781) - New Resource:
google_kms_crypto_key_iam_member(#781) - New Resource:
google_project_custom_iam_role(#709) - New Resource:
google_organization_custom_iam_role(#735) - New Resource:
google_organization_iam_binding(#775) - New Resource:
google_organization_iam_member(#775) - New Resource:
google_dataproc_job(#253) - New Data Source:
google_active_folder(#738) - New Data Source:
google_compute_address(#748) - New Data Source:
google_compute_global_address(#759)
IMPROVEMENTS:
- compute: Add import support for
google_compute_ssl_certificates(#678) - compute: Add import support for
google_compute_target_http_proxy(#678) - compute: Add import support for
google_compute_target_https_proxy(#678) - compute: Add partial import support for
google_compute_url_map(#678) - compute: Add import support for
google_compute_backend_bucket(#736) - compute: Add configurable timeouts for disks (#717)
- compute: Use v1 API now that all beta features are in GA for
google_compute_firewall[#768] - compute: Add Alias IP and Guest Accelerator support to Instance Templates (#639)
- container: Relax diff on
daily_maintenance_window.start_timeforgoogle_container_cluster(#726) - container: Allow node pools with size 0 (#752)
- container: Add support for
google_container_node_poolmanagement (#669) - container: Add container cluster network policy (#630)
- container: add support for ip aliasing in
google_container_cluster(#654) - kms: Adds support for creating KMS CryptoKeys resources (#692)
- project: Add validation for
account_idingoogle_service_account(#793) - storage: Detect file changes in
google_storage_bucket_objectwhen using source field (#789) - all: Consistently store the project and region fields value in state. (#784)
BUG FIXES:
- bigquery: Set UseLegacySql to true for compatibility with the BigQuery API (#724)
- compute: Fix perpetual diff with
next_hop_instancefield ingoogle_compute_route(#716) - compute: Restore the
ipv4_rangefield togoogle_compute_networkto support legacy VPCs (#805) - project: Fix timeout issue with project services (#737)
- sql: Fix perpetual diff with
authorized_networksfield ingoogle_sql_database_instance(#733) - sql: give disk_autoresize a default in
google_sql_database_instance(#806)
FEATURES:
- New Resource:
google_service_account_key(#472) - New Resource:
google_kms_key_ring(#518) - New Resource:
google_dataproc_cluster(#252) - New Resource:
google_project_service(#668)
IMPROVEMENTS:
- compute: Add import support for
google_compute_global_forwarding_rule(#653) - compute: Add IAP support for backend services (#471)
- compute: Allow attaching and detaching disks from instances (#636)
- compute: Add support for source/target service accounts to
google_compute_firewall(#681) - compute: Add
secondary_ip_rangesupport togoogle_compute_subnetworkdata source (#687) - compute: Add support for internal address (beta feature) in
google_compute_address(#594) - compute: Add support to
google_compute_target_poolfor health checks self_link (#702) - container: Add support for CPU Platform in
google_container_node_poolandgoogle_container_cluster(#622) - container: Add support for Kubernetes alpha features (#646)
- container: Add support for master authorized networks in
google_container_cluster(#626) - container: Add support for maintenance window on
google_container_cluster(#670) - logging: Make
google_logging_project_sinkresource importable (#688) - project: Make
google_service_accountresource importable (#606) - project: Project is optional and default to the provider value in
google_project_iam_policy(#691) - pubsub: Create a
google_pubsub_subscriptionfor a topic in a different project (#640) - storage: Add labels to
google_storage_bucket(#652)
BUG FIXES:
- compute: Increase timeout for deleting networks (#662)
- compute: Fix disk migration bug with empty
initialize_paramsblock (#664) - compute: Update
google_compute_target_poolto no longer have a plan/apply loop with instance URLs (#666) - container:
google_container_cluster.node_config.oauth_scopesno longer need to be set alphabetically (#506) - dns:
google_dns_record_setcan now manage NS records (#359) - project: Set valid default
public_key_typeforgoogle_service_account_key(#686)
FEATURES:
- New Resource:
google_compute_target_ssl_proxy(#569) - New Data Source:
google_compute_lb_ip_ranges(#567)
IMPROVEMENTS:
- compute: Make
boot_diskrequired; remove checks around expected number of disks (#600) - compute: Allow setting boot and attached disk sources by name or self link (#605)
- container: Allow updating
google_container_cluster.monitoring_service(#598) - container: Allow updating
google_container_cluster.addons_config(#597) - project: Make
google_project_servicesresource importable (#601)
BUG FIXES:
- compute: Fix import functionality in
google_compute_route(#565) - compute: Migrate boot disk initialize params (#592)
FEATURES:
- New Resource:
google_logging_folder_sink(#470) - New Resource:
google_organization_policy(#523) - New Resource:
google_compute_target_tcp_proxy(#528) - New Resource:
google_compute_region_autoscaler(#544) - New Resources:
google_compute_shared_vpc_host_projectandgoogle_compute_shared_vpc_service_project(#544)
IMPROVEMENTS:
- compute: Generate network link without calling network API in
google_compute_subnetwork(#527) - compute: Generate network link without calling network API in
google_compute_vpn_gatewayandgoogle_compute_router(#527) - compute: Add import support to
google_compute_target_tcp_proxy(#534) - compute: Add labels support to
google_compute_instance_template(#17) - compute:
google_vpn_tunnel- Mark 'shared_secret' as sensitive (#561) - container: Allow disabling of Kubernetes Dashboard via
kubernetes_dashboardaddon (#433) - container: Merge the schemas and logic for the node pool resource and the node pool field in the cluster to aid in maintainability (#489)
- container: Add master_version to container cluster (#538)
- sql: Add new retry wrapper fn, retry sql database instance operations that commonly 503 (#417)
- pubsub:
push_configfield for agoogle_pubsub_subscriptionis not updateable (#512)
BUG FIXES:
- compute: Fix bug in
google_compute_instancepreventing theassigned_nat_ipfield from ever getting assigned (#536) - compute: Fix bug in
google_compute_firewallcausing the beta APIs even if no beta features are used (#500) - compute: Fix bug in
google_network_peeringpreventing creating a peering for a network outside the provider default project (#496) - compute: Fix BackendService group hash when instance groups use beta features (#522)
- compute: Make
disk.device_namecomputed ingoogle_compute_instance_template(#566) - dns: Error out if DNS zone is not found (#560)
- container: Fix crash when creating node pools with
name_prefixor no name (#531) - container: Fix cluster version upgrades (#577)
BUG FIXES:
- compute: Fix bug that prevented the state migration for
google_compute_instancefrom updating to use attached_disk, boot_disk, and scratch_disk. (#511) - compute: Fix bug causing a crash if the API returns an error on
google_compute_instancecreation (#556)
BACKWARDS INCOMPATIBILITIES / NOTES:
- compute: A state migration was added to convert
google_compute_instance.diskfields into the correct one ofattached_disk,boot_disk, orscratch_disk. This will lead to plan-time diffs for anyone still using thediskfield. Please verify its results carefully and update configs appropriately. - container:
google_container_cluster.node_pool.initial_node_countis now deprecated. Please replace withgoogle_container_cluster.node_pool.node_countinstead. (#331) - storage:
google_storage_bucket_aclnow sets the bucket ACL to whatever is in the config, correcting any drift. This means any permissions set automatically by GCP (e.g., project-viewers-* policies, etc.) will be removed unless they're added to your config. Also, theOWNER:project-owners-{project-id}will never be deleted, as the API won't allow it. This is now correctly handled, and it is removed from state without being deleted in the API. (#358] [#439)
FEATURES:
- New Data Source:
google_client_config(#385) - New Resource:
google_compute_region_instance_group_manager(#394) - New Resource:
google_folder(#416) - New Resource:
google_folder_iam_policy(#447) - New Resource:
google_logging_project_sink(#432) - New Resource:
google_logging_billing_account_sink(#457)
IMPROVEMENTS:
- bigquery: Support Bigquery Views (#230)
- container: Add import support for
google_container_cluster(#391) - container: Add support for resizing a node pool defined in
google_container_cluster(#331) - container: Allow updating
google_container_cluster.logging_service(#343) - container: Add support for 'node_config.preemptible' field on
google_container_cluster(#341) - container: Allow min node counts of 0 for node pool autoscaling (#468)
- compute: Add support for 'labels' field on
google_compute_image(#339) - compute: Add support for 'labels' field on
google_compute_disk(#344) - compute: Add support for
labelsfield ongoogle_compute_global_forwarding_rule(#354) - compute: Add support for 'guest_accelerators' (GPU) on
google_compute_instance(#330) - compute: Add support for 'priority' field on
google_compute_firewall(#342) - compute:
google_compute_firewallnetwork field now supports self_link in addition of name (#477) - compute: Add support for 'min_cpu_platform' in
google_compute_instance(#349) - compute: Add support for 'alias_ip_range' in
google_compute_instance(#375) - compute: Add support for computed field 'instance_id' in
google_compute_instance(#427) - compute: Improve import for
google_compute_addressto support multiple id formats. (#378) - compute: Add state migration from
diskto boot_disk/scratch_disk/attached_disk (#329) - compute: Mark certificate as sensitive within
google_compute_ssl_certificate(#490) - project: Add support for 'labels' field on
google_project(#383) - project: Move a
google_projectin and out of a folder (#438) - pubsub: Add import support for
google_pubsub_topic. (#392) - pubsub: Add import support for
google_pubsub_subscription. (#456) - sql: Add support for
connection_nameingoogle_sql_database_instance(#387) - storage: Add support for versioning in
google_storage_bucket(#381)
BUG FIXES:
- compute/sql: Fix a few instances where we read the project from the provider config and not using the helper function (#469)
- compute: Fix bug with CSEK where the key stored in state might be associated with the wrong disk (#327)
- compute: Fix bug where 'session_affinity' would get reset on
google_compute_backend_serviceresource (#348) - sql: Fixed bug where ip_address elements were offset incorrectly (#352)
- sql: Fixed bug where default user on replica would cause an incorrect delete api call (#347)
- project: Fixed bug where deleting a project outside Terraform would cause
google_projectto fail. (#466) - pubsub: Fixed bug where
google_pubsub_subscriptiondid not read its state from the API. (#456)
BACKWARDS INCOMPATIBILITIES / NOTES:
- bigtable:
num_nodesingoogle_bigtable_instanceno longer defaults to3; if you used that default, it will need to be explicitly set. (#313) - compute:
automatic_restartandon_host_maintenancehave been removed fromgoogle_compute_instance_template. Usescheduling.automatic_restartorscheduling.on_host_maintenanceinstead. (#224)
FEATURES:
- New Data Source:
google_compute_instance_group(#267) - New Data Source:
google_dns_managed_zone(#268) - New Resource:
google_compute_project_metadata_item- allows management of single key/value pairs within the project metadata map (#176) - New Resource:
google_project_iam_binding- allows fine-grained control of a project's IAM policy, controlling only a single binding. (#171) - New Resource:
google_project_iam_member- allows fine-grained control of a project's IAM policy, controlling only a single member in a binding. (#171) - New Resource:
google_compute_network_peering(#259) - New Resource:
google_runtimeconfig_config- allows creating, updating and deleting Google RuntimeConfig resources (#315) - New Resource:
google_runtimeconfig_variable- allows creating, updating, and deleting Google RuntimeConfig variables (#315) - New Resource:
google_sourcerepo_repository- allows creating and deleting Google Source Repositories (#256) - New Resource:
google_spanner_instance- allows creating, updating and deleting Google Spanner Instance (#270) - New Resource:
google_spanner_database- allows creating, updating and deleting Google Spanner Database (#271)
IMPROVEMENTS:
- bigtable: Add support for
instance_typetogoogle_bigtable_instance. (#313) - compute: Add import support for
google_compute_subnetwork(#227) - compute: Add import support for
google_container_node_pool(#284) - compute: Change google_container_node_pool ID format to zone/cluster/name to remove artificial restriction on node pool name across clusters (#304)
- compute: Add support for
auto_healing_policiestogoogle_compute_instance_group_manager(#249) - compute: Add support for
ip_versiontogoogle_compute_global_forwarding_rule(#265) - compute: Add support for
ip_versiontogoogle_compute_global_address(#250) - compute: Add support for
subnetworkas a self_link togoogle_compute_instance. (#290) - compute: Add support for
secondary_ip_rangetogoogle_compute_subnetwork. (#310) - compute: Add support for multiple
network_interface's togoogle_compute_instance. (#289) - compute: Add support for
deniedtogoogle_compute_firewall(#282) - compute: Add support for egress traffic using
directiontogoogle_compute_firewall(#306) - compute: When disks are created from snapshots, both snapshot names and URLs may be used (#238)
- container: Add support for node pool autoscaling (#157)
- container: Add NodeConfig support on
google_container_node_pool(#184) - container: Add support for legacyAbac to
google_container_cluster(#261) - container: Allow configuring node_config of node_pools specified in
google_container_cluster(#299) - sql: Persist state from the API for
google_sql_database_instanceregardless of what attributes the user has set (#208) - storage: Buckets now can have lifecycle properties (#6)
BUG FIXES:
- bigquery: Fix type panic on expiration_time (#209)
- compute: Marked 'private_key' as sensitive (#220)
- compute: Fix disk type "Malformed URL" error on
google_compute_instanceboot disks (#275) - compute: Refresh
google_compute_autoscalerusing thezoneset in state instead of scanning for the first one with a matching name in the provider region. (#193) - compute:
google_compute_instancereadsschedulingfields from GCP (#237) - compute: Fix bug where
scheduling.automatic_restartset to false ongoogle_compute_instance_templatewould force recreate (#224) - container: Fix error if
google_container_node_pooldeleted out of band (#293) - container: Fail when both name and name_prefix are set for node_pool in
google_container_cluster(#296) - container: Allow upgrading GKE versions and provide better error message handling (#291)
BACKWARDS INCOMPATIBILITIES / NOTES:
google_sql_database_instance: a limited number of fields will be read during import because of (#114)google_sql_database_instance:name,region,database_version, andmaster_instance_namefields are now updated during a refresh and may display diffs
FEATURES:
IMPROVEMENTS:
- compute: Add
boot_diskproperty togoogle_compute_instance(#122) - compute: Add
scratch_diskproperty togoogle_compute_instanceand deprecatedisk(#123) - compute: Add
labelsproperty togoogle_compute_instance(#150) - compute: Add import support for
google_compute_image(#194) - compute: Add import support for
google_compute_https_health_check(#213) - compute: Add import support for
google_compute_instance_group(#201) - container: Add timeout support (#13203)
- container: Allow adding/removing zones to/from GKE clusters without recreating them (#152)
- project: Allow unlinking of billing account (#138)
- sql: Add support for importing
google_sql_database(#12) - sql: Add support for importing
google_sql_database_instance(#11) - sql: Add
charsetandcollationproperties togoogle_sql_database(#183)
BUG FIXES:
- compute:
compute_firewallwill no longer display a perpetual diff ifsource_rangesisn't set (#147) - compute: Fix read method + test/document import for
google_compute_health_check(#155) - compute: Read named ports changes properly in
google_compute_instance_group(#188) - compute:
google_compute_imagedescriptionproperty can now be set [#199] - compute:
google_compute_target_https_proxywill no longer display a diff if ssl certificates are referenced using only the path (#210)
BUG FIXES:
- compute: Restrict the number of health_checks in Backend Service resources to 1. (#145)
BACKWARDS INCOMPATIBILITIES / NOTES:
compute_disk.image: shorthand for disk images is no longer supported, and will display a diff if used (#1)
IMPROVEMENTS:
- compute: Add support for importing
compute_backend_service(#40) - compute: Wait for disk resizes to complete (#1)
- compute: Support
connection_draining_timeout_secingoogle_compute_region_backend_service(#101) - compute: Made
path_ruleoptional ingoogle_compute_url_map'spath_matcherblock (#118) - container: Add support for labels and tags on GKE node_config (#7)
- sql: Add an additional delay when checking for sql operations (#15170)
BUG FIXES: