Bump the terraform group across 31 directories with 1 update

[dependabot]

Bumps the terraform group with 1 update in the /gcp/modules/audit directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/bastion directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/ca directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/ctlog directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/dex directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/external_secrets directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/fulcio directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/gke_cluster directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/dex directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/fulcio directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/infra directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/prober directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekor directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekorv2/active_shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekorv2/lb directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/slo directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tesseract/active_shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tesseract/lb directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/timestamp directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tuf directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/mysql directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/mysql-shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/network directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/oslogin directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/project_roles directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/rekor directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/sigstore directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/tiles_tlog directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/timestamp directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/tuf directory: hashicorp/google.

Updates hashicorp/google from 7.21.0 to 7.30.0

Release notes

Sourced from hashicorp/google's releases.

v7.30.0

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#27006)

FEATURES:

• New Data Source: google_data_lineage_config (#27098)
• New Resource: google_artifact_registry_rule (#27049)
• New Resource: google_data_lineage_config (#27098)
• New Resource: google_document_ai_schema (#27102)
• New Resource: google_firebase_remote_config_remote_config (#27050)

IMPROVEMENTS:

• provider: added support for prefer_global_endpoints and prefer_regional_endpoints to the provider configuration. Support for regional endpoints will be rolled out on a per-product level (#27014)
• artifactregistry: added support for regionalized endpoints (#27014)
• assuredworkloads: added SPAIN_DATA_BOUNDARY_BY_TELEFONICA value to partner field on google_assured_workloads_workload resource (#27027)
• bigqueryconnection: added configuration block to google_bigquery_connection resource to support AlloyDB and other connector types via the BigQuery Connector framework (#27029)
• bigtable: added support for tags to google_bigtable_instance (#27060)
• cloudrunv2: added DISK fields to google_cloud_run_v2_job resource (#27052)
• cloudrunv2: added DISK fields to google_cloud_run_v2_worker_pool resource (#27048)
• compute: add params.resourceManagerTags field to the google_compute_storage_pool (#27051)
• compute: added cache_policy field to google_compute_url_map (ga) (#27011)
• compute: added params.resource_manager_tags field to google_compute_instant_snapshot resource (#27087)
• compute: added resource_manager_tags field to google_compute_machine_image resource (#27075)
• container: added node_config.linux_node_config.accurate_time_config field to google_container_node_pool resource (#27064)
• container: added node_pool.node_config.linux_node_config.accurate_time_config and node_config.linux_node_config.accurate_time_config fields to google_container_cluster resource (#27064)
• container: added node_pool.node_config.linux_node_config.swap_config field to google_container_node_pool resource (#26982)
• container: increased default timeout for google_container_cluster to 90 minutes (from 40/60 depending on operation) and google_container_node_pool to 60 minutes (from 30) (#27101)
• discoveryengine: added destionation_configs.destionations.port and destionation_configs.params fields to google_discovery_engine_data_connector resource (#27058)
• dns: added support for IAM conditions to google_dns_managed_zone resource (#27010)
• datastream: added deletion_policy field to control whether child routes are force-deleted to google_datastream_private_connection (#27033)
• networkconnectivity: added support for IAM conditions to google_network_connectivity_hub resource (#27005)
• networksecurity: added parent field to google_network_security_address_groups data source (#27082)
• workbench: added support for new disk types and accelerators to google_workbench_instance (#27061)

BUG FIXES:

• alloydb: fixed google_alloydb_cluster so that maintenance_update_policy.maintenance_windows.start_time.hours can be set to 0 (midnight) (#26981)
• ces: fixed type mismatch in google_ces_app variable default value (#27084)
• compute: fixed an issue where an erroneous error could occur for having an unset zone field in google_compute_instance_template (#27076)
• compute: fixed permadiff for iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a permadiff in google_container_cluster where database_encryption.state returning ALL_OBJECTS_ENCRYPTION_ENABLED instead of the configured ENCRYPTED caused unintended reapplies (#27040)
• dataplex: fixed acceptance test failure for one time scans (#27095)
• dialogflowcx: fixed a perma-diff in google_dialogflow_cx_test_case when session_parameters was omitted from the configuration (#26985)
• hypercomputecluster: fixed a permadiff in google_hypercomputecluster_cluster when count, static_node_count, or max_dynamic_node_count were explicitly set to 0. (#27073)
• identityplatform: fixed a premadiff on multi_tenant in google_identity_platform_config resource. Removing the value from config will now preserve the existing settings instead of removing them. (#26986)
• memorystore: fixed an issue preventing updating multiple properties at once for google_redis_cluster (#27077)

NOTES:

• compute: Migrate resource_compute_instance_group.go.tmpl resource to use direct HTTP rather then a client library (#27080)
• compute: migrated compute-operation resource to use direct HTTP rather then a client library (#27053)
• compute: migrated compute_backend_bucket_security_policy resource to use direct HTTP rather than a client library (#27012)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.30.0 (Unreleased)

7.29.0 (Apr 21, 2026)

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#26938)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#26901)
• New Resource: google_chronicle_datatable_row (#26960)
• New Resource: google_chronicle_datatable (#26895)
• New Resource: google_dataform_folder (#26881)
• New Resource: google_dataform_team_folder (#26881)
• New Resource: google_firebase_storage_default_bucket (#26965)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#26964)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#26941)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#26942)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#26924)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#26962)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#26974)
• netapp: added large_capacity_config field to google_netapp_volume resource(#26927)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#26939)
• resourcemanager: add resource-identity support to google_service_account resource (#26938)
• sql: added entraid_config field to google_sql_database_instance resource (#26921)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#26972)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#26878)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#26925)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#26968)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#26971)

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#26787)
• New Resource: google_apigee_space (#26857)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#26785)
• New Resource: google_workload_identity_service_agent (#26780)

... (truncated)

Commits

• 34e90e3 Add changelog for 7.30.0 (#27112)
• 08bb9ee Migrated Compute instance network interface to use transport_tpg.SendRequest ...
• 879d344 Converted handwritten-only products to be "generated" (#17291) (#27103)
• 05a8cd8 Add DocumentAI Schema resource (#17293) (#27102)
• 8b1d15a Increase timeouts for GKE resources (#17295) (#27101)
• 372b39f Fix PRs reverted in the GitHub incident (#17290) (#27100)
• 6ccb0a9 Fixed docstring for registry.GetProduct (#17277) (#27099)
• 2256ac3 Feature: Create datalineage config provider (#17073) (#27098)
• 6ea0ee2 Refactor TestAccAccessApprovalSettings loop to use a slice. (#17287) (#27097)
• 5dc059a fix: (storage) TestAccStorageObjectAcl_noOwner test case fix (#17284) (#27096)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.21.0 to 7.30.0

Release notes

Sourced from hashicorp/google's releases.

v7.30.0

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#27006)

FEATURES:

• New Data Source: google_data_lineage_config (#27098)
• New Resource: google_artifact_registry_rule (#27049)
• New Resource: google_data_lineage_config (#27098)
• New Resource: google_document_ai_schema (#27102)
• New Resource: google_firebase_remote_config_remote_config (#27050)

IMPROVEMENTS:

• provider: added support for prefer_global_endpoints and prefer_regional_endpoints to the provider configuration. Support for regional endpoints will be rolled out on a per-product level (#27014)
• artifactregistry: added support for regionalized endpoints (#27014)
• assuredworkloads: added SPAIN_DATA_BOUNDARY_BY_TELEFONICA value to partner field on google_assured_workloads_workload resource (#27027)
• bigqueryconnection: added configuration block to google_bigquery_connection resource to support AlloyDB and other connector types via the BigQuery Connector framework (#27029)
• bigtable: added support for tags to google_bigtable_instance (#27060)
• cloudrunv2: added DISK fields to google_cloud_run_v2_job resource (#27052)
• cloudrunv2: added DISK fields to google_cloud_run_v2_worker_pool resource (#27048)
• compute: add params.resourceManagerTags field to the google_compute_storage_pool (#27051)
• compute: added cache_policy field to google_compute_url_map (ga) (#27011)
• compute: added params.resource_manager_tags field to google_compute_instant_snapshot resource (#27087)
• compute: added resource_manager_tags field to google_compute_machine_image resource (#27075)
• container: added node_config.linux_node_config.accurate_time_config field to google_container_node_pool resource (#27064)
• container: added node_pool.node_config.linux_node_config.accurate_time_config and node_config.linux_node_config.accurate_time_config fields to google_container_cluster resource (#27064)
• container: added node_pool.node_config.linux_node_config.swap_config field to google_container_node_pool resource (#26982)
• container: increased default timeout for google_container_cluster to 90 minutes (from 40/60 depending on operation) and google_container_node_pool to 60 minutes (from 30) (#27101)
• discoveryengine: added destionation_configs.destionations.port and destionation_configs.params fields to google_discovery_engine_data_connector resource (#27058)
• dns: added support for IAM conditions to google_dns_managed_zone resource (#27010)
• datastream: added deletion_policy field to control whether child routes are force-deleted to google_datastream_private_connection (#27033)
• networkconnectivity: added support for IAM conditions to google_network_connectivity_hub resource (#27005)
• networksecurity: added parent field to google_network_security_address_groups data source (#27082)
• workbench: added support for new disk types and accelerators to google_workbench_instance (#27061)

BUG FIXES:

• alloydb: fixed google_alloydb_cluster so that maintenance_update_policy.maintenance_windows.start_time.hours can be set to 0 (midnight) (#26981)
• ces: fixed type mismatch in google_ces_app variable default value (#27084)
• compute: fixed an issue where an erroneous error could occur for having an unset zone field in google_compute_instance_template (#27076)
• compute: fixed permadiff for iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a permadiff in google_container_cluster where database_encryption.state returning ALL_OBJECTS_ENCRYPTION_ENABLED instead of the configured ENCRYPTED caused unintended reapplies (#27040)
• dataplex: fixed acceptance test failure for one time scans (#27095)
• dialogflowcx: fixed a perma-diff in google_dialogflow_cx_test_case when session_parameters was omitted from the configuration (#26985)
• hypercomputecluster: fixed a permadiff in google_hypercomputecluster_cluster when count, static_node_count, or max_dynamic_node_count were explicitly set to 0. (#27073)
• identityplatform: fixed a premadiff on multi_tenant in google_identity_platform_config resource. Removing the value from config will now preserve the existing settings instead of removing them. (#26986)
• memorystore: fixed an issue preventing updating multiple properties at once for google_redis_cluster (#27077)

NOTES:

• compute: Migrate resource_compute_instance_group.go.tmpl resource to use direct HTTP rather then a client library (#27080)
• compute: migrated compute-operation resource to use direct HTTP rather then a client library (#27053)
• compute: migrated compute_backend_bucket_security_policy resource to use direct HTTP rather than a client library (#27012)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.30.0 (Unreleased)

7.29.0 (Apr 21, 2026)

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#26938)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#26901)
• New Resource: google_chronicle_datatable_row (#26960)
• New Resource: google_chronicle_datatable (#26895)
• New Resource: google_dataform_folder (#26881)
• New Resource: google_dataform_team_folder (#26881)
• New Resource: google_firebase_storage_default_bucket (#26965)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#26964)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#26941)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#26942)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#26924)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#26962)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#26974)
• netapp: added large_capacity_config field to google_netapp_volume resource(#26927)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#26939)
• resourcemanager: add resource-identity support to google_service_account resource (#26938)
• sql: added entraid_config field to google_sql_database_instance resource (#26921)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#26972)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#26878)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#26925)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#26968)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#26971)

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#26787)
• New Resource: google_apigee_space (#26857)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#26785)
• New Resource: google_workload_identity_service_agent (#26780)

... (truncated)

Commits

• 34e90e3 Add changelog for 7.30.0 (#27112)
• 08bb9ee Migrated Compute instance network interface to use transport_tpg.SendRequest ...
• 879d344 Converted handwritten-only products to be "generated" (#17291) (#27103)
• 05a8cd8 Add DocumentAI Schema resource (#17293) (#27102)
• 8b1d15a Increase timeouts for GKE resources (#17295) (#27101)
• 372b39f Fix PRs reverted in the GitHub incident (#17290) (#27100)
• 6ccb0a9 Fixed docstring for registry.GetProduct (#17277) (#27099)
• 2256ac3 Feature: Create datalineage config provider (#17073) (#27098)
• 6ea0ee2 Refactor TestAccAccessApprovalSettings loop to use a slice. (#17287) (#27097)
• 5dc059a fix: (storage) TestAccStorageObjectAcl_noOwner test case fix (#17284) (#27096)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.21.0 to 7.30.0

Release notes

Sourced from hashicorp/google's releases.

v7.30.0

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#27006)

FEATURES:

• New Data Source: google_data_lineage_config (#27098)
• New Resource: google_artifact_registry_rule (#27049)
• New Resource: google_data_lineage_config (#27098)
• New Resource: google_document_ai_schema (#27102)
• New Resource: google_firebase_remote_config_remote_config (#27050)

IMPROVEMENTS:

• provider: added support for prefer_global_endpoints and prefer_regional_endpoints to the provider configuration. Support for regional endpoints will be rolled out on a per-product level (#27014)
• artifactregistry: added support for regionalized endpoints (#27014)
• assuredworkloads: added SPAIN_DATA_BOUNDARY_BY_TELEFONICA value to partner field on google_assured_workloads_workload resource (#27027)
• bigqueryconnection: added configuration block to google_bigquery_connection resource to support AlloyDB and other connector types via the BigQuery Connector framework (#27029)
• bigtable: added support for tags to google_bigtable_instance (#27060)
• cloudrunv2: added DISK fields to google_cloud_run_v2_job resource (#27052)
• cloudrunv2: added DISK fields to google_cloud_run_v2_worker_pool resource (#27048)
• compute: add params.resourceManagerTags field to the google_compute_storage_pool (#27051)
• compute: added cache_policy field to google_compute_url_map (ga) (#27011)
• compute: added params.resource_manager_tags field to google_compute_instant_snapshot resource (#27087)
• compute: added resource_manager_tags field to google_compute_machine_image resource (#27075)
• container: added node_config.linux_node_config.accurate_time_config field to google_container_node_pool resource (#27064)
• container: added node_pool.node_config.linux_node_config.accurate_time_config and node_config.linux_node_config.accurate_time_config fields to google_container_cluster resource (#27064)
• container: added node_pool.node_config.linux_node_config.swap_config field to google_container_node_pool resource (#26982)
• container: increased default timeout for google_container_cluster to 90 minutes (from 40/60 depending on operation) and google_container_node_pool to 60 minutes (from 30) (#27101)
• discoveryengine: added destionation_configs.destionations.port and destionation_configs.params fields to google_discovery_engine_data_connector resource (#27058)
• dns: added support for IAM conditions to google_dns_managed_zone resource (#27010)
• datastream: added deletion_policy field to control whether child routes are force-deleted to google_datastream_private_connection (#27033)
• networkconnectivity: added support for IAM conditions to google_network_connectivity_hub resource (#27005)
• networksecurity: added parent field to google_network_security_address_groups data source (#27082)
• workbench: added support for new disk types and accelerators to google_workbench_instance (#27061)

BUG FIXES:

• alloydb: fixed google_alloydb_cluster so that maintenance_update_policy.maintenance_windows.start_time.hours can be set to 0 (midnight) (#26981)
• ces: fixed type mismatch in google_ces_app variable default value (#27084)
• compute: fixed an issue where an erroneous error could occur for having an unset zone field in google_compute_instance_template (#27076)
• compute: fixed permadiff for iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a permadiff in google_container_cluster where database_encryption.state returning ALL_OBJECTS_ENCRYPTION_ENABLED instead of the configured ENCRYPTED caused unintended reapplies (#27040)
• dataplex: fixed acceptance test failure for one time scans (#27095)
• dialogflowcx: fixed a perma-diff in google_dialogflow_cx_test_case when session_parameters was omitted from the configuration (#26985)
• hypercomputecluster: fixed a permadiff in google_hypercomputecluster_cluster when count, static_node_count, or max_dynamic_node_count were explicitly set to 0. (#27073)
• identityplatform: fixed a premadiff on multi_tenant in google_identity_platform_config resource. Removing the value from config will now preserve the existing settings instead of removing them. (#26986)
• memorystore: fixed an issue preventing updating multiple properties at once for google_redis_cluster (#27077)

NOTES:

• compute: Migrate resource_compute_instance_group.go.tmpl resource to use direct HTTP rather then a client library (#27080)
• compute: migrated compute-operation resource to use direct HTTP rather then a client library (#27053)
• compute: migrated compute_backend_bucket_security_policy resource to use direct HTTP rather than a client library (#27012)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.30.0 (Unreleased)

7.29.0 (Apr 21, 2026)

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#26938)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#26901)
• New Resource: google_chronicle_datatable_row (#26960)
• New Resource: google_chronicle_datatable (#26895)
• New Resource: google_dataform_folder (#26881)
• New Resource: google_dataform_team_folder (#26881)
• New Resource: google_firebase_storage_default_bucket (#26965)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#26964)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#26941)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#26942)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#26924)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#26962)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#26974)
• netapp: added large_capacity_config field to google_netapp_volume resource(#26927)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#26939)
• resourcemanager: add resource-identity support to google_service_account resource (#26938)
• sql: added entraid_config field to google_sql_database_instance resource (#26921)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#26972)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#26878)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#26925)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#26968)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#26971)

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (Description has been truncated