github.com/hashicorp/terraform-provider-google

FEATURES:

• New Resource: google_folder_organization_policy (#747)
• New Resource: google_kms_key_ring_iam_binding (#781)
• New Resource: google_kms_key_ring_iam_member (#781)
• New Resource: google_kms_crypto_key_iam_binding (#781)
• New Resource: google_kms_crypto_key_iam_member (#781)
• New Resource: google_project_custom_iam_role (#709)
• New Resource: google_organization_custom_iam_role (#735)
• New Resource: google_organization_iam_binding (#775)
• New Resource: google_organization_iam_member (#775)
• New Resource: google_dataproc_job (#253)
• New Data Source: google_active_folder (#738)
• New Data Source: google_compute_address (#748)
• New Data Source: google_compute_global_address (#759)

IMPROVEMENTS:

• compute: Add import support for google_compute_ssl_certificates (#678)
• compute: Add import support for google_compute_target_http_proxy (#678)
• compute: Add import support for google_compute_target_https_proxy (#678)
• compute: Add partial import support for google_compute_url_map (#678)
• compute: Add import support for google_compute_backend_bucket (#736)
• compute: Add configurable timeouts for disks (#717)
• compute: Use v1 API now that all beta features are in GA for google_compute_firewall [#768]
• compute: Add Alias IP and Guest Accelerator support to Instance Templates (#639)
• container: Relax diff on daily_maintenance_window.start_time for google_container_cluster (#726)
• container: Allow node pools with size 0 (#752)
• container: Add support for google_container_node_pool management (#669)
• container: Add container cluster network policy (#630)
• container: add support for ip aliasing in google_container_cluster (#654)
• kms: Adds support for creating KMS CryptoKeys resources (#692)
• project: Add validation for account_id in google_service_account (#793)
• storage: Detect file changes in google_storage_bucket_object when using source field (#789)
• all: Consistently store the project and region fields value in state. (#784)

BUG FIXES:

• bigquery: Set UseLegacySql to true for compatibility with the BigQuery API (#724)
• compute: Fix perpetual diff with next_hop_instance field in google_compute_route (#716)
• compute: Restore the ipv4_range field to google_compute_network to support legacy VPCs (#805)
• project: Fix timeout issue with project services (#737)
• sql: Fix perpetual diff with authorized_networks field in google_sql_database_instance (#733)
• sql: give disk_autoresize a default in google_sql_database_instance (#806)

FEATURES:

• New Resource: google_service_account_key (#472)
• New Resource: google_kms_key_ring (#518)
• New Resource: google_dataproc_cluster (#252)
• New Resource: google_project_service (#668)

IMPROVEMENTS:

• compute: Add import support for google_compute_global_forwarding_rule (#653)
• compute: Add IAP support for backend services (#471)
• compute: Allow attaching and detaching disks from instances (#636)
• compute: Add support for source/target service accounts to google_compute_firewall (#681)
• compute: Add secondary_ip_range support to google_compute_subnetwork data source (#687)
• compute: Add support for internal address (beta feature) in google_compute_address (#594)
• compute: Add support to google_compute_target_pool for health checks self_link (#702)
• container: Add support for CPU Platform in google_container_node_pool and google_container_cluster (#622)
• container: Add support for Kubernetes alpha features (#646)
• container: Add support for master authorized networks in google_container_cluster (#626)
• container: Add support for maintenance window on google_container_cluster (#670)
• logging: Make google_logging_project_sink resource importable (#688)
• project: Make google_service_account resource importable (#606)
• project: Project is optional and default to the provider value in google_project_iam_policy (#691)
• pubsub: Create a google_pubsub_subscription for a topic in a different project (#640)
• storage: Add labels to google_storage_bucket (#652)

BUG FIXES:

• compute: Increase timeout for deleting networks (#662)
• compute: Fix disk migration bug with empty initialize_params block (#664)
• compute: Update google_compute_target_pool to no longer have a plan/apply loop with instance URLs (#666)
• container: google_container_cluster.node_config.oauth_scopes no longer need to be set alphabetically (#506)
• dns: google_dns_record_set can now manage NS records (#359)
• project: Set valid default public_key_type for google_service_account_key (#686)

FEATURES:

• New Resource: google_compute_target_ssl_proxy (#569)
• New Data Source: google_compute_lb_ip_ranges (#567)

IMPROVEMENTS:

• compute: Make boot_disk required; remove checks around expected number of disks (#600)
• compute: Allow setting boot and attached disk sources by name or self link (#605)
• container: Allow updating google_container_cluster.monitoring_service (#598)
• container: Allow updating google_container_cluster.addons_config (#597)
• project: Make google_project_services resource importable (#601)

BUG FIXES:

• compute: Fix import functionality in google_compute_route (#565)
• compute: Migrate boot disk initialize params (#592)

FEATURES:

• New Resource: google_logging_folder_sink (#470)
• New Resource: google_organization_policy (#523)
• New Resource: google_compute_target_tcp_proxy (#528)
• New Resource: google_compute_region_autoscaler (#544)
• New Resources: google_compute_shared_vpc_host_project and google_compute_shared_vpc_service_project (#544)

IMPROVEMENTS:

• compute: Generate network link without calling network API in google_compute_subnetwork (#527)
• compute: Generate network link without calling network API in google_compute_vpn_gateway and google_compute_router (#527)
• compute: Add import support to google_compute_target_tcp_proxy (#534)
• compute: Add labels support to google_compute_instance_template (#17)
• compute: google_vpn_tunnel - Mark 'shared_secret' as sensitive (#561)
• container: Allow disabling of Kubernetes Dashboard via kubernetes_dashboard addon (#433)
• container: Merge the schemas and logic for the node pool resource and the node pool field in the cluster to aid in maintainability (#489)
• container: Add master_version to container cluster (#538)
• sql: Add new retry wrapper fn, retry sql database instance operations that commonly 503 (#417)
• pubsub: push_config field for a google_pubsub_subscription is not updateable (#512)

BUG FIXES:

• compute: Fix bug in google_compute_instance preventing the assigned_nat_ip field from ever getting assigned (#536)
• compute: Fix bug in google_compute_firewall causing the beta APIs even if no beta features are used (#500)
• compute: Fix bug in google_network_peering preventing creating a peering for a network outside the provider default project (#496)
• compute: Fix BackendService group hash when instance groups use beta features (#522)
• compute: Make disk.device_name computed in google_compute_instance_template (#566)
• dns: Error out if DNS zone is not found (#560)
• container: Fix crash when creating node pools with name_prefix or no name (#531)
• container: Fix cluster version upgrades (#577)

BUG FIXES:

• compute: Fix bug that prevented the state migration for google_compute_instance from updating to use attached_disk, boot_disk, and scratch_disk. (#511)
• compute: Fix bug causing a crash if the API returns an error on google_compute_instance creation (#556)

BACKWARDS INCOMPATIBILITIES / NOTES:

• compute: A state migration was added to convert google_compute_instance.disk fields into the correct one of attached_disk, boot_disk, or scratch_disk. This will lead to plan-time diffs for anyone still using the disk field. Please verify its results carefully and update configs appropriately.
• container: google_container_cluster.node_pool.initial_node_count is now deprecated. Please replace with google_container_cluster.node_pool.node_count instead. (#331)
• storage: google_storage_bucket_acl now sets the bucket ACL to whatever is in the config, correcting any drift. This means any permissions set automatically by GCP (e.g., project-viewers-* policies, etc.) will be removed unless they're added to your config. Also, the OWNER:project-owners-{project-id} will never be deleted, as the API won't allow it. This is now correctly handled, and it is removed from state without being deleted in the API. (#358] [#439)

FEATURES:

• New Data Source: google_client_config (#385)
• New Resource: google_compute_region_instance_group_manager (#394)
• New Resource: google_folder (#416)
• New Resource: google_folder_iam_policy (#447)
• New Resource: google_logging_project_sink (#432)
• New Resource: google_logging_billing_account_sink (#457)

IMPROVEMENTS:

• bigquery: Support Bigquery Views (#230)
• container: Add import support for google_container_cluster (#391)
• container: Add support for resizing a node pool defined in google_container_cluster (#331)
• container: Allow updating google_container_cluster.logging_service (#343)
• container: Add support for 'node_config.preemptible' field on google_container_cluster (#341)
• container: Allow min node counts of 0 for node pool autoscaling (#468)
• compute: Add support for 'labels' field on google_compute_image (#339)
• compute: Add support for 'labels' field on google_compute_disk (#344)
• compute: Add support for labels field on google_compute_global_forwarding_rule (#354)
• compute: Add support for 'guest_accelerators' (GPU) on google_compute_instance (#330)
• compute: Add support for 'priority' field on google_compute_firewall (#342)
• compute: google_compute_firewall network field now supports self_link in addition of name (#477)
• compute: Add support for 'min_cpu_platform' in google_compute_instance (#349)
• compute: Add support for 'alias_ip_range' in google_compute_instance (#375)
• compute: Add support for computed field 'instance_id' in google_compute_instance (#427)
• compute: Improve import for google_compute_address to support multiple id formats. (#378)
• compute: Add state migration from disk to boot_disk/scratch_disk/attached_disk (#329)
• compute: Mark certificate as sensitive within google_compute_ssl_certificate (#490)
• project: Add support for 'labels' field on google_project (#383)
• project: Move a google_project in and out of a folder (#438)
• pubsub: Add import support for google_pubsub_topic. (#392)
• pubsub: Add import support for google_pubsub_subscription. (#456)
• sql: Add support for connection_name in google_sql_database_instance (#387)
• storage: Add support for versioning in google_storage_bucket (#381)

BUG FIXES:

• compute/sql: Fix a few instances where we read the project from the provider config and not using the helper function (#469)
• compute: Fix bug with CSEK where the key stored in state might be associated with the wrong disk (#327)
• compute: Fix bug where 'session_affinity' would get reset on google_compute_backend_service resource (#348)
• sql: Fixed bug where ip_address elements were offset incorrectly (#352)
• sql: Fixed bug where default user on replica would cause an incorrect delete api call (#347)
• project: Fixed bug where deleting a project outside Terraform would cause google_project to fail. (#466)
• pubsub: Fixed bug where google_pubsub_subscription did not read its state from the API. (#456)

BACKWARDS INCOMPATIBILITIES / NOTES:

• bigtable: num_nodes in google_bigtable_instance no longer defaults to 3; if you used that default, it will need to be explicitly set. (#313)
• compute: automatic_restart and on_host_maintenance have been removed from google_compute_instance_template. Use scheduling.automatic_restart or scheduling.on_host_maintenance instead. (#224)

FEATURES:

• New Data Source: google_compute_instance_group (#267)
• New Data Source: google_dns_managed_zone (#268)
• New Resource: google_compute_project_metadata_item - allows management of single key/value pairs within the project metadata map (#176)
• New Resource: google_project_iam_binding - allows fine-grained control of a project's IAM policy, controlling only a single binding. (#171)
• New Resource: google_project_iam_member - allows fine-grained control of a project's IAM policy, controlling only a single member in a binding. (#171)
• New Resource: google_compute_network_peering (#259)
• New Resource: google_runtimeconfig_config - allows creating, updating and deleting Google RuntimeConfig resources (#315)
• New Resource: google_runtimeconfig_variable - allows creating, updating, and deleting Google RuntimeConfig variables (#315)
• New Resource: google_sourcerepo_repository - allows creating and deleting Google Source Repositories (#256)
• New Resource: google_spanner_instance - allows creating, updating and deleting Google Spanner Instance (#270)
• New Resource: google_spanner_database - allows creating, updating and deleting Google Spanner Database (#271)

IMPROVEMENTS:

• bigtable: Add support for instance_type to google_bigtable_instance. (#313)
• compute: Add import support for google_compute_subnetwork (#227)
• compute: Add import support for google_container_node_pool (#284)
• compute: Change google_container_node_pool ID format to zone/cluster/name to remove artificial restriction on node pool name across clusters (#304)
• compute: Add support for auto_healing_policies to google_compute_instance_group_manager (#249)
• compute: Add support for ip_version to google_compute_global_forwarding_rule (#265)
• compute: Add support for ip_version to google_compute_global_address (#250)
• compute: Add support for subnetwork as a self_link to google_compute_instance. (#290)
• compute: Add support for secondary_ip_range to google_compute_subnetwork. (#310)
• compute: Add support for multiple network_interface's to google_compute_instance. (#289)
• compute: Add support for denied to google_compute_firewall (#282)
• compute: Add support for egress traffic using direction to google_compute_firewall (#306)
• compute: When disks are created from snapshots, both snapshot names and URLs may be used (#238)
• container: Add support for node pool autoscaling (#157)
• container: Add NodeConfig support on google_container_node_pool (#184)
• container: Add support for legacyAbac to google_container_cluster (#261)
• container: Allow configuring node_config of node_pools specified in google_container_cluster (#299)
• sql: Persist state from the API for google_sql_database_instance regardless of what attributes the user has set (#208)
• storage: Buckets now can have lifecycle properties (#6)

BUG FIXES:

• bigquery: Fix type panic on expiration_time (#209)
• compute: Marked 'private_key' as sensitive (#220)
• compute: Fix disk type "Malformed URL" error on google_compute_instance boot disks (#275)
• compute: Refresh google_compute_autoscaler using the zone set in state instead of scanning for the first one with a matching name in the provider region. (#193)
• compute: google_compute_instance reads scheduling fields from GCP (#237)
• compute: Fix bug where scheduling.automatic_restart set to false on google_compute_instance_template would force recreate (#224)
• container: Fix error if google_container_node_pool deleted out of band (#293)
• container: Fail when both name and name_prefix are set for node_pool in google_container_cluster (#296)
• container: Allow upgrading GKE versions and provide better error message handling (#291)

BACKWARDS INCOMPATIBILITIES / NOTES:

• google_sql_database_instance: a limited number of fields will be read during import because of (#114)
• google_sql_database_instance: name, region, database_version, and master_instance_name fields are now updated during a refresh and may display diffs

FEATURES:

• New Resource: google_bigtable_instance (#177)
• New Resource: google_bigtable_table (#177)

IMPROVEMENTS:

• compute: Add boot_disk property to google_compute_instance (#122)
• compute: Add scratch_disk property to google_compute_instance and deprecate disk (#123)
• compute: Add labels property to google_compute_instance (#150)
• compute: Add import support for google_compute_image (#194)
• compute: Add import support for google_compute_https_health_check (#213)
• compute: Add import support for google_compute_instance_group (#201)
• container: Add timeout support (#13203)
• container: Allow adding/removing zones to/from GKE clusters without recreating them (#152)
• project: Allow unlinking of billing account (#138)
• sql: Add support for importing google_sql_database (#12)
• sql: Add support for importing google_sql_database_instance (#11)
• sql: Add charset and collation properties to google_sql_database (#183)

BUG FIXES:

• compute: compute_firewall will no longer display a perpetual diff if source_ranges isn't set (#147)
• compute: Fix read method + test/document import for google_compute_health_check (#155)
• compute: Read named ports changes properly in google_compute_instance_group (#188)
• compute: google_compute_image description property can now be set [#199]
• compute: google_compute_target_https_proxy will no longer display a diff if ssl certificates are referenced using only the path (#210)

BUG FIXES:

• compute: Restrict the number of health_checks in Backend Service resources to 1. (#145)

BACKWARDS INCOMPATIBILITIES / NOTES:

• compute_disk.image: shorthand for disk images is no longer supported, and will display a diff if used (#1)

IMPROVEMENTS:

• compute: Add support for importing compute_backend_service (#40)
• compute: Wait for disk resizes to complete (#1)
• compute: Support connection_draining_timeout_sec in google_compute_region_backend_service (#101)
• compute: Made path_rule optional in google_compute_url_map's path_matcher block (#118)
• container: Add support for labels and tags on GKE node_config (#7)
• sql: Add an additional delay when checking for sql operations (#15170)

BUG FIXES:

• compute: Changed google_compute_instance_group_manager target_size default to 0 (#65)
• storage: Represent GCS Bucket locations as uppercase in state. (#117)