chore(deps): update terraform google to ~> 5.45.0

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	~> 5.40.0 -> ~> 5.45.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.45.0

Compare Source

v5.44.2

Compare Source

Notes:

• 5.44.2 is a backport release, responding to a GKE rollout that created permadiffs for many users. The changes in this release will be available in 6.7.0 and users upgrading to 6.X should upgrade to that version or higher.

IMPROVEMENTS:

• container: google_container_cluster will now accept server-specified values for node_pool_auto_config.0.node_kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​19817)

BUG FIXES:

• container: fixed a diff triggered by a new API-side default value for node_config.0.kubelet_config.0.insecure_kubelet_readonly_port_enabled. Terraform will now accept server-specified values for node_config.0.kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​19817)

v5.44.1

Compare Source

NOTES:

• 5.44.1 is a backport release, intended to pull in critical container improvements and fixes for issues introduced in 5.44.0

IMPROVEMENTS:

• container: added in-place update support for gcfs_config in in google_container_cluster and google_container_node_pool (#​19365) (#​19512)

BUG FIXES:

• container: fixed a permadiff on gcfs_config in google_container_cluster and google_container_node_pool (#​19512)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure. (#​19543)

v5.44.0

Compare Source

NOTES:

• 5.44.0 is a backport release, intended to pull in critical container improvements from 6.2.0

IMPROVEMENTS:

• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​19312)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​19312)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​19320)

v5.43.1

Compare Source

NOTES:

• 5.43.1 is a backport release, and some changes will not appear in 6.X series releases until 6.1.0

BUG FIXES:

• pubsub: fixed a validation bug that didn't allow empty filter definitions for google_pubsub_subscription resources (#​19284)

v5.43.0

Compare Source

DEPRECATIONS:

• storage: deprecated lifecycle_rule.condition.no_age field in google_storage_bucket. Use the new lifecycle_rule.condition.send_age_if_zero field instead. (#​19172)

FEATURES:

• New Resource: google_kms_ekm_connection_iam_binding (#​19132)
• New Resource: google_kms_ekm_connection_iam_member (#​19132)
• New Resource: google_kms_ekm_connection_iam_policy (#​19132)
• New Resource: google_scc_v2_organization_scc_big_query_exports (#​19184)

IMPROVEMENTS:

• compute: added label_fingerprint field to google_compute_global_address resource (#​19204)
• compute: exposed service side id as new output field forwarding_rule_id on resource google_compute_forwarding_rule (#​19139)
• container: added EXTENDED as a valid option for release_channel field in google_container_cluster resource (#​19141)
• logging: changed enable_analytics parsing to "no preference" in analytics if omitted, instead of explicitly disabling analytics in google_logging_project_bucket_config (#​19126)
• pusbub: added validation to filter field in resource google_pubsub_subscription (#​19131)
• resourcemanager: added default_labels field to google_client_config data source (#​19170)
• vmwareengine: added PC undelete support in google_vmwareengine_private_cloud (#​19192)

BUG FIXES:

• alloydb: fixed a permadiff on psc_instance_config in google_alloydb_instance resource (#​19143)
• compute: fixed a malformed URL that affected updating the server_tls_policy property on google_compute_target_https_proxy resources (#​19164)
• compute: fixed bug where the labels field could not be updated on google_compute_global_address (#​19204)
• compute: fixed force diff replacement logic for network_ip on resource google_compute_instance (#​19135)

v5.42.0

Compare Source

DEPRECATIONS:

• compute: setting google_compute_subnetwork.secondary_ip_range = [] to explicitly set a list of empty objects is deprecated and will produce an error in the upcoming major release. Use send_secondary_ip_range_if_empty while removing secondary_ip_range from config instead. (#​19122)

FEATURES:

• New Data Source: google_artifact_registry_locations (#​19047)
• New Data Source: google_cloud_identity_transitive_group_memberships (#​19038)
• New Resource: google_discovery_engine_schema (#​19124)
• New Resource: google_scc_folder_notification_config (#​19057)
• New Resource: google_scc_v2_folder_notification_config (#​19055)
• New Resource: google_vertex_ai_index_endpoint_deployed_index (#​19061)

IMPROVEMENTS:

• clouddeploy: added serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.pod_selector_label and serial_pipeline.stages.strategy.canary.runtime_config.kubernetes.service_networking.pod_selector_label fields to google_clouddeploy_delivery_pipeline resource (#​19100)
• compute: added send_secondary_ip_range_if_empty to google_compute_subnetwork (#​19122)
• discoveryengine: added skip_default_schema_creation field to google_data_store resource (#​19017)
• dns: changed load_balancer_type field from required to optional in google_dns_record_set (#​19050)
• firestore: added cmek_config field to google_firestore_database resource (#​19107)
• servicenetworking: added update_on_creation_fail field to google_service_networking_connection resource. When it is set to true, enforce an update of the reserved peering ranges on the existing service networking connection in case of a new connection creation failure. (#​19035)
• sql: added server_ca_mode field to google_sql_database_instance resource (#​18998)

BUG FIXES:

• bigquery: made google_bigquery_dataset_iam_member non-authoritative. To remove a bigquery dataset iam member, use an authoritative resource like google_bigquery_dataset_iam_policy (#​19121)
• cloudfunctions2: fixed a "Provider produced inconsistent final plan" bug affecting the service_config.environment_variables field in google_cloudfunctions2_function resource (#​19024)
• cloudfunctions2: fixed a permadiff on storage_source.generation in google_cloudfunctions2_function resource (#​19031)
• compute: fixed issue where sub-resources managed by google_compute_forwarding_rule prevented resource deletion (#​19117)
• logging: changed google_logging_project_bucket_config.enable_analytics behavior to set "no preference" in analytics if omitted, instead of explicitly disabling analytics. (#​19126)
• workbench: fixed a bug with google_workbench_instance metadata drifting when using custom containers. (#​19119)

v5.41.0

Compare Source

DEPRECATIONS:

• resourcemanager: deprecated skip_delete field in the google_project resource. Use deletion_policy instead. (#​18867)

FEATURES:

• New Data Source: google_logging_log_view_iam_policy (#​18990)
• New Data Source: google_scc_v2_organization_source_iam_policy (#​19004)
• New Resource: google_access_context_manager_service_perimeter_dry_run_egress_policy (#​18994)
• New Resource: google_access_context_manager_service_perimeter_dry_run_ingress_policy (#​18994)
• New Resource: google_scc_v2_folder_mute_config (#​18924)
• New Resource: google_scc_v2_project_mute_config (#​18993)
• New Resource: google_scc_v2_project_notification_config (#​19008)
• New Resource: google_scc_v2_organization_source (#​19004)
• New Resource: google_scc_v2_organization_source_iam_binding (#​19004)
• New Resource: google_scc_v2_organization_source_iam_member (#​19004)
• New Resource: google_scc_v2_organization_source_iam_policy (#​19004)
• New Resource: google_logging_log_view_iam_binding (#​18990)
• New Resource: google_logging_log_view_iam_member (#​18990)
• New Resource: google_logging_log_view_iam_policy (#​18990)

IMPROVEMENTS:

• clouddeploy: added gke.proxy_url field to google_clouddeploy_target (#​19016)
• cloudrunv2: added field binary_authorization.policy to resource google_cloud_run_v2_job and resource google_cloud_run_v2_service to support named binary authorization policy. (#​18995)
• compute: added source_regions field to google_compute_healthcheck resource (#​19006)
• compute: added update-in-place support for the google_compute_target_https_proxy.server_tls_policy field (#​18996)
• compute: added update-in-place support for the google_compute_region_target_https_proxy.server_tls_policy field (#​19007)
• container: added auto_provisioning_locations field to google_container_cluster (#​18928)
• dataform: added kms_key_name field to google_dataform_repository resource (#​18947)
• discoveryengine: added skip_default_schema_creation field to google_discovery_engine_data_store resource (#​19017)
• gkehub: added configmanagement.management and configmanagement.config_sync.enabled fields to google_gkehub_feature_membership (#​19016)
• gkehub: added management field to google_gke_hub_feature.fleet_default_member_config.configmanagement (#​18963)
• resourcemanager: added deletion_policy field to the google_project resource. Setting deletion_policy to PREVENT will protect the project against any destroy actions caused by a terraform apply or terraform destroy. Setting deletion_policy to ABANDON allows the resource to be abandoned rather than deleted and it behaves the same with skip_delete = true. Default value is DELETE. skip_delete = true takes precedence over deletion_policy = "DELETE".
• storage: added force_destroy field to google_storage_managed_folder resource (#​18973)
• storage: added generation field to google_storage_bucket_object resource (#​18971)

BUG FIXES:

• compute: fixed google_compute_instance.alias_ip_range update behavior to avoid temporarily deleting unchanged alias IP ranges (#​19015)
• compute: fixed the bug that creation of PSC forwarding rules fails in google_compute_forwarding_rule resource when provider default labels are set (#​18984)
• sql: fixed a perma-diff in settings.insights_config in google_sql_database_instance (#​18962)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun