chore(deps): update terraform google to v8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	7.46.1 → 8.1.0	8.2.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v8.1.0

Compare Source

NOTES:

• compute: migrated google_compute_global_address data source to use direct HTTP rather than a client library (#​29038)
• compute: migrated google_compute_interconnect_locations data source to use direct HTTP rather than a client library (#​29055)
• compute: migrated google_compute_shared_vpc_host_project to use direct HTTP rather than a client library (#​29071)
• container: migrated google_container_node_pool to use direct HTTP rather than a client library (#​29070)
• resourcemanager: migrated google_project to use direct HTTP rather than a client library (#​29054)

DEPRECATIONS:

• workstations: deprecated details in google_workstations_workstation_config (no longer populated by the API; will be removed in a future major release) (#​29075)

FEATURES:

• New List Resource: google_apigee_addons_config (#​29039)
• New List Resource: google_apigee_api_product (#​29067)
• New List Resource: google_apigee_data_collector (#​29067)
• New List Resource: google_apigee_datastore (#​29067)
• New List Resource: google_apigee_endpoint_attachment (#​29067)
• New List Resource: google_apigee_envgroup (#​29067)
• New List Resource: google_apigee_environment_keyvaluemaps (#​29065)
• New List Resource: google_apigee_organization (#​29065)
• New List Resource: google_apigee_target_server (#​29065)
• New List Resource: google_colab_notebook_execution (#​29064)
• New List Resource: google_colab_runtime (#​29064)
• New List Resource: google_colab_runtime_template (#​29064)
• New List Resource: google_colab_schedule (#​29064)
• New Resource: google_eventarc_pipeline_iam_binding (#​29080)
• New Resource: google_eventarc_pipeline_iam_member (#​29080)
• New Resource: google_eventarc_pipeline_iam_policy (#​29080)
• New Resource: google_monitoring_snooze (#​29037)
• New Resource: google_network_management_network_monitoring_provider (#​29056)
• New Resource: google_observability_bucket (#​29076)
• New Resource: google_scc_notification_service_account (#​29043)

IMPROVEMENTS:

• bigqueryanalyticshub: added destination_pubsub_subscription to google_bigquery_analytics_hub_listing_subscription (#​29062)
• ces: added api_authentication field to google_ces_tool.remote_agent_tool (#​29059)
• ces: added error_handling_settings field to google_ces_app (#​29045)
• ces: added instagram_credentials and whatsapp_credentials fields to google_ces_deployment resource (#​29040)
• ces: added language_code_variable field to google_ces_agent resource (#​29063)
• ces: added retention_window field to google_ces_app resource (#​29028)
• ces: added vpc_sc_settings field to google_ces_app resource (#​29027)
• ces: added whatsapp_config field to google_ces_app resource (#​29030)
• cloudrunv2: added template.containers.sandbox_launcher field to google_cloud_run_v2_worker_pool resource (#​29061)
• cloudrunv2: supported explicitly disabling cpu_utilization and concurrency_utilization autoscaling thresholds with 0.0 in google_cloud_run_v2_service (#​29081)
• discoveryengine: added last_user_update_time field to google_discovery_engine_license_config resource (#​29058)
• networkservices: added forward_attributes field to google_network_services_authz_extension (#​29025)
• servicenetworking: added REMOVE_PEERING value to deletion_policy on google_service_networking_connection, which removes the VPC peering when the connection cannot be deleted because service producer resources still use it (#​29036)
• vertexai: added gateway_configs field to google_vertex_ai_semantic_governance_policy_engine (#​29031)
• vertexai: added spec.build_spec.service_account field to google_vertex_ai_reasoning_engine (#​29034)
• vertexai: added spec.deployment_spec.agent_gateway_config field to google_vertex_ai_reasoning_engine (#​29029)
• vertexai: added spec.source_code_spec.agent_config_source field to google_vertex_ai_reasoning_engine (#​29046)
• vertexai: promoted build_spec to GA in google_vertex_ai_reasoning_engine (#​29077)

BUG FIXES:

• clouddeploy: fixed tasks field being silently dropped from predeploy and postdeploy blocks across all strategy variants (#​29035)
• composer: fixed google_composer_user_workloads_secret writing the secret data values into provider debug logs (#​29042)
• container: switched to server side request validation to allow for concurrent Cluster Upgrades. google_container_cluster and google_container_node_pool resources will proceed while not in a resting state for updates (but will continue to wait for one after creates). (#​29068)
• iam: fixed validation of google_iam_workload_identity_pool IDs ending in .svc.id.goog where the base name ends in one of the suffix's characters (#​29072)
• provider: fixed an issue where an invalid credentials value could be echoed back in the error message when it failed to parse (#​29057)
• workstations: fixed unconvertible type error when reading conditions in google_workstations_workstation_config and google_workstations_workstation_cluster (#​29075)

v8.0.0

Compare Source

Terraform Google Provider 8.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

• beyondcorp: removed google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources, and the google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#​18675)
• iap: removed google_iap_brand and google_iap_client resources, and the google_iap_client data source. (#​18679)
• mlengine: removed google_ml_engine_model resource. Migrate machine learning deployments to google_vertex_ai_endpoint or Vertex AI Model Garden resources. (#​18681)
• notebooks: removed google_notebooks_environment, google_notebooks_instance (and associated IAM resources), and google_notebooks_runtime (and associated IAM resources). Migrate to google_workbench_instance. (#​18583)
• vertexai: removed google_vertex_ai_schedule resource. Use google_colab_schedule instead. (#​18673)

BREAKING FIELD REMOVALS:

• backupdr: removed resource_type argument from google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references data sources. (#​18688)
• cloudrunv2: removed custom_audiences field from google_cloud_run_v2_worker_pool resource. (#​18193)
• cloudrunv2: removed http_get.http_headers.port probe field from google_cloud_run_v2_worker_pool resource. (#​18290)
• compute: removed attachment attribute within logical_structure.*.zones from google_compute_interconnect_attachment_group resource in favor of attachments. (#​18676)
• compute: removed reservation_block_count field from google_compute_reservation resource in favor of resource_status[0].reservation_block_count. (#​18611)
• datalossprevention: removed actions.publish_findings_to_cloud_data_catalog field from google_data_loss_prevention_job_trigger resource in favor of actions.publish_findings_to_dataplex_catalog. (#​18530)
• integrations: removed run_as_service_account argument from google_integrations_client resource. (#​18680)

BREAKING INCREASED VALIDATION:

• bigquerydatatransfer: changed constraint between sensitive_params.0.secret_access_key and sensitive_params.0.secret_access_key_wo from AtLeastOneOf to ExactlyOneOf in google_bigquery_data_transfer_config resource. (#​18325)
• cloudrunv2: made http_get.http_headers.name required when http_get.http_headers is set in google_cloud_run_v2_worker_pool resource. (#​18290)
• iamworkforcepool: made claim_mapping a required field on create in google_iam_workforce_pool_provider_scim_tenant resource. (#​18348)
• monitoring: changed constraint between http_check.0.auth_info.0.password and http_check.0.auth_info.0.password_wo to ExactlyOneOf in google_monitoring_uptime_check_config resource. (#​18325)
• secretmanager: made secret_data_wo_version required when secret_data_wo is set (RequiredWith) in google_secret_manager_secret_version resource. (#​18325)
• workflows: made source_contents a required argument in google_workflows_workflow resource. (#​18411)

OTHER BREAKING CHANGES:

• bigquerydatatransfer: converted sensitive_params.0.secret_access_key_wo_version from Integer to String data type with state migration in google_bigquery_data_transfer_config resource. (#​18731)
• bigquery: removed default_from_api for default_collation in google_bigquery_dataset resource; setting default_collation = "" now explicitly clears collation. (#​18585)
• cloudsecuritycompliance: converted cloud_control_details from list to set in google_cloud_security_compliance_framework resource. (#​18596)
• compute: added default empty strings ("") to project_id_or_num, network_url, and endpoint_url within consumer_accept_lists in google_compute_service_attachment resource to resolve permadiffs. (#​18276)
• compute: changed default value of load_balancing_scheme from EXTERNAL to EXTERNAL_MANAGED in google_compute_backend_service and google_compute_global_forwarding_rule resources. (#​18557)
• compute: updated guest_accelerator in google_compute_instance to plan and apply removal/replacement when count is explicitly set to 0 (or guest_accelerator = []). (#​18426)
• compute: converted nat_subnets and consumer_reject_lists from list to set in google_compute_service_attachment resource. (#​18694)
• container: extended name_prefix max length from 14 to 31 characters in google_container_node_pool and google_container_cluster resources. (#​18477)
• container: converted enable_components in logging_config and monitoring_config from list to set in google_container_cluster resource. (#​18262)
• secretmanager: converted secret_data_wo_version from Integer to String data type with state migration in google_secret_manager_secret_version resource. (#​18325)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.