fix(deps): update terraform

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	6.10.0 -> 6.14.1
kubernetes (source)	required_provider	minor	2.33.0 -> 2.35.1

---

Release Notes

hashicorp/terraform-provider-google (google)

v6.14.1

Compare Source

BUG FIXES:

• compute: fixed an issue where google_compute_firewall_policy_rule was incorrectly removed from the Terraform state (#​20733)

v6.14.0

Compare Source

v6.13.0

Compare Source

NOTES:

• New ephemeral resources google_service_account_access_token, google_service_account_id_token, google_service_account_jwt, google_service_account_key now support ephemeral values.
• iam3: promoted resources google_iam_principal_access_boundary_policy, google_iam_organizations_policy_binding, google_iam_folders_policy_binding and google_iam_projects_policy_binding to GA (#​20475)
  DEPRECATIONS:
• gkehub: deprecated configmanagement.config_sync.metrics_gcp_service_account_email in google_gke_hub_feature_membership resource (#​20561)

FEATURES:

• New Ephemeral Resource: google_service_account_access_token (#​20542)
• New Ephemeral Resource: google_service_account_id_token (#​20542)
• New Ephemeral Resource: google_service_account_jwt (#​20542)
• New Ephemeral Resource: google_service_account_key (#​20542)
• New Data Source: google_backup_dr_backup_vault (#​20468)
• New Data Source: google_composer_user_workloads_config_map (GA) (#​20478)
• New Data Source: google_composer_user_workloads_secret (GA) (#​20478)
• New Resource: google_composer_user_workloads_config_map (GA) (#​20478)
• New Resource: google_composer_user_workloads_secret (GA) (#​20478)
• New Resource: google_gemini_code_repository_index (#​20474)
• New Resource: google_network_security_mirroring_deployment (#​20489)
• New Resource: google_network_security_mirroring_deployment_group (#​20489)
• New Resource: google_network_security_mirroring_endpoint_group_association (#​20489)
• New Resource: google_network_security_mirroring_endpoint_group (#​20489)

IMPROVEMENTS:

• accesscontextmanager: added etag to google_access_context_manager_service_perimeter and google_access_context_manager_service_perimeters (#​20455)
• alloydb: increased default timeout on google_alloydb_cluster to 120m from 30m (#​20547)
• bigtable: added row_affinity field to google_bigtable_app_profile resource (#​20435)
• cloudbuild: added private_service_connect field to google_cloudbuild_worker_pool resource (#​20561)
• clouddeploy: added associated_entities field to google_clouddeploy_target resource (#​20561)
• clouddeploy: added serial_pipeline.strategy.canary.runtime_config.kubernetes.gateway_service_mesh.route_destinations field to google_clouddeploy_delivery_pipeline resource (#​20561)
• composer: added multiple composer 3 related fields to google_composer_environment (GA) (#​20478)
• compute: google_compute_instance, google_compute_instance_template, google_compute_region_instance_template now supports advanced_machine_features.enable_uefi_networking field (#​20531)
• compute: added support for specifying storage pool with name or partial url (#​20502)
• compute: added numeric_id to the google_compute_network data source (#​20548)
• compute: added threshold_configs field to google_compute_security_policy resource (#​20545)
• compute: added server generated id as forwarding_rule_id to google_compute_global_forwarding_rule (#​20404)
• compute: added server generated id as health_check_id to google_region_health_check (#​20404)
• compute: added server generated id as instance_group_manager_id to google_instance_group_manager (#​20404)
• compute: added server generated id as instance_group_manager_id to google_region_instance_group_manager (#​20404)
• compute: added server generated id as network_endpoint_id to google_region_network_endpoint (#​20404)
• compute: added server generated id as subnetwork_id to google_subnetwork (#​20404)
• compute: added the psc_data field to the google_compute_region_network_endpoint_group resource (#​20454)
• container: added enterprise_config field to google_container_cluster resource (#​20534)
• container: added node_pool_autoconfig.linux_node_config.cgroup_mode field to google_container_cluster resource (#​20460)
• dataproc: added autotuning_config and cohort fields to google_dataproc_batch (#​20410)
• dataproc: added cluster_config.preemptible_worker_config.instance_flexibility_policy.provisioning_model_mix field to google_dataproc_cluster resource (#​20396)
• dataproc: added confidential_instance_config field to google_dataproc_cluster resource (#​20488)
• discoveryengine: added HEALTHCARE_FHIR to industry_vertical field in google_discovery_engine_search_engine (#​20471)
• gkehub: added configmanagement.config_sync.stop_syncing field to google_gke_hub_feature_membership resource (#​20561)
• monitoring: added disable_metric_validation field to google_monitoring_alert_policy resource (#​20544)
• oracledatabase: added deletion_protection field to google_oracle_database_autonomous_database (#​20484)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_exadata_infrastructure (#​20485)
• oracledatabase: added deletion_protection field to google_oracle_database_cloud_vm_cluster (#​20392)
• parallelstore: added deployment_type to google_parallelstore_instance (#​20457)
• resourcemanager: made google_service_account email and member fields available during plan (#​20510)

BUG FIXES:

• apigee: made google_apigee_organization wait for deletion operation to complete. (#​20504)
• cloudfunctions: fixed issue when updating vpc_connector_egress_settings field for google_cloudfunctions_function resource. (#​20437)
• dataproc: ensured oneOf condition is honored when expanding the job configuration for Hive, Pig, Spark-sql, and Presto in google_dataproc_job. (#​20453)
• gkehub: fixed allowable value INSTALLATION_UNSPECIFIED in template_library.installation (#​20567)
• sql: fixed edition downgrade failure for an ENTERPRISE_PLUS instance with data cache enabled. (#​20393)

v6.12.0

Compare Source

FEATURES:

• New Data Source: google_access_context_manager_access_policy (#​20295)
• New Resource: google_dataproc_gdc_spark_application (#​20242)
• New Resource: google_managed_kafka_cluster and google_managed_kafka_topic (#​20237)

IMPROVEMENTS:

• artifactregistry: added common_repository field to google_artifact_registry_repository resource (#​20305)
• cloudrunv2: added urls output field to google_cloud_run_v2_service resource (#​20313)
• compute: added IDPF as a possible value for the network_interface.nic_type field in google_compute_instance resource (#​20250)
• compute: added IDPF as a possible value for the guest_os_features.type field in google_compute_image resource (#​20250)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• filestore: added performance_config field to google_filestore_instance (#​20218)
• redis: added persistence_config to google_redis_cluster. (#​20212)
• securesourcemanager: added workforce_identity_federation_config field to google_secure_source_manager_instance resource (#​20290)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• sql: added psc_auto_connections fields to google_sql_database_instance resource (#​20307)

BUG FIXES:

• accesscontextmanager: fixed permadiff in perimeter google_access_context_manager_service_perimeter_ingress_policy and google_access_context_manager_service_perimeter_egress_policy resources when there are duplicate resources in the rules (#​20294)
• • accesscontextmanager: fixed comparison of identity_type in ingress_from and egress_from when the IDENTITY_TYPE_UNSPECIFIED is set (#​20221)
• compute: fixed permadiff on attempted type field updates in google_computer_security_policy, updating this field will now force recreation of the resource (#​20316)
• identityplatform: fixed perma-diff originating from the sign_in.anonymous.enabled field in google_identity_platform_config (#​20244)

v6.11.2

Compare Source

BUG FIXES:

• vertexai: fixed issue with google_vertex_ai_endpoint where upgrading to 6.11.0 would delete all traffic splits that were set outside Terraform (which was previously a required step for all meaningful use of this resource). (#​20350)

v6.11.1

Compare Source

BUG FIXES:

• container: fixed diff on google_container_cluster.user_managed_keys_config field for resources that had not set it. (#​20314)
• container: marked google_container_cluster.user_managed_keys_config as immutable because it can't be updated in place. (#​20314)

v6.11.0

Compare Source

NOTES:

• compute: migrated google_compute_firewall_policy_rule from DCL engine to MMv1 engine. (#​20160)

BREAKING CHANGES:

• looker: made oauth_config a required field in google_looker_instance, as creating this resource without that field always triggers an API error (#​20196)

FEATURES:

• New Data Source: google_spanner_database (#​20114)
• New Resource: google_apigee_api (#​20113)
• New Resource: google_dataproc_gdc_application_environment (#​20165)
• New Resource: google_dataproc_gdc_service_instance (#​20147)
• New Resource: google_memorystore_instance (#​20108)

IMPROVEMENTS:

• apigee: added in-place update support for google_apigee_env_references (#​20182)
• apigee: added in-place update support for google_apigee_environment resource (#​20189)
• cloudrun: added empty_dir field to google_cloud_run_service (#​20185)
• cloudrunv2: added empty_dir field to google_cloud_run_v2_service and google_cloud_run_v2_job (#​20185)
• compute: added disks field to google_compute_node_template resource (#​20180)
• compute: added preconfigured_waf_config field to google_compute_security_policy resource (#​20183)
• compute: added replica_names field to sql_database_instance resource (#​20202)
• compute: added instance_flexibility_policy field to google_compute_region_instance_group_manager resource (#​20132)
• compute: increased google_compute_security_policy timeouts from 20 minutes to 30 minutes (#​20145)
• container: added control_plane_endpoints_config field to google_container_cluster resource. (#​20193)
• container: added parallelstore_csi_driver_config field to google_container_cluster resource. (#​20163)
• container: added user_managed_keys_config field to google_container_cluster resource. (#​20105)
• firestore: allowed single field indexes to support __name__ DESC indexes in google_firestore_index resources (#​20124)
• privateca: added support for google_privateca_certificate_authority with type = "SUBORDINATE" to be activated into "STAGED" state (#​20103)
• spanner: added default_backup_schedule_type field to google_spanner_instance (#​20213)
• vertexai: added traffic_split, private_service_connect_config, predict_request_response_logging_config, dedicated_endpoint_enabled, and dedicated_endpoint_dns fields to google_vertex_ai_endpoint resource (#​20179)
• workflows: added deletion_protection field to google_workflows_workflow resource (#​20106)

BUG FIXES:

• compute: fixed a diff based on server-side reordering of match.src_address_groups and match.dest_address_groups in google_compute_network_firewall_policy_rule (#​20148)
• compute: fixed permadiff on the preconfigured_waf_config field for google_compute_security_policy resource (#​20183)
• container: fixed in-place updates for node_config.containerd_config in google_container_cluster and google_container_node_pool (#​20112)

hashicorp/terraform-provider-kubernetes (kubernetes)

v2.35.1

Compare Source

BUG FIXES:

• resource/kubernetes_job_v1: revert the changes introduced in v2.34.0, where ttl_seconds_after_finished was set to 0. [GH-2650]
• resource/kubernetes_daemon_set_v1: fix issue where fields spec.strategy.rolling_update.max_surge and spec.strategy.rolling_update.max_unavailable were not being validated correctly. [GH-2653]

v2.35.0

Compare Source

FEATURES:

• resources_kubernetes_daemon_set_v1 : Added max_surge argument for to rolling_update block. [GH-2630]

v2.34.0

Compare Source

ENHANCEMENTS:

• Added conditions attribute to kubernetes_nodes data source, which will provide detailed node health and status information [GH-2612]
• Adding the kubernetes_secret_v1_data resource to the kubernetes provider. This resource will allow users to manage kubernetes secrets [GH-2604]
• Properly handle Kubernetes Jobs with ttl_seconds_after_finished = 0 to prevent unnecessary recreation. [GH-2596]

FEATURES:

• New ephemeral resource: kubernetes_certificate_signing_request_v1 [GH-2628]
• New ephemeral resource: kubernetes_token_request_v1 [GH-2628]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[nielm]

/gcbrun

[henrybell]

/gcbrun