Update terraform-gcp to ~> 7.44.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	~> 7.41.0 → ~> 7.44.0
google (source)	required_provider	minor	7.41.0 → 7.44.0
google-beta (source)	required_provider	minor	~> 7.41.0 → ~> 7.44.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-google (google)

v7.44.0

Compare Source

FEATURES:

• New List Resource: google_bigquery_dataset_iam_member (#​28578)
• New List Resource: google_bigquery_table (#​28576)
• New Resource: google_chronicle_custom_list (#​28618)
• New Resource: google_chronicle_soar_network (#​28649)
• New Resource: google_dataform_repository (#​28642)
• New Resource: google_dataform_repository_iam_binding (#​28642)
• New Resource: google_dataform_repository_iam_member (#​28642)
• New Resource: google_dataform_repository_iam_policy (#​28642)
• New Resource: google_iam_folder_access_policy (#​28664)
• New Resource: google_iam_organization_access_policy (#​28664)
• New Resource: google_iam_project_access_policy (#​28664)
• New Resource: google_vertex_ai_evaluation_metric (#​28665)

IMPROVEMENTS:

• bigquery: added resource identity support to google_bigquery_table (#​28574)
• compute: promoted host_error_timeout_seconds field in google_compute_instance, google_compute_instance_template and google_compute_region_instance_template to GA (#​28671)
• container: added high_scale_checkpointing_config block to addons_config in google_container_cluster (#​28669)
• dataproc: added attached_disk_config to disk_config to support attached disks in the google_dataproc_cluster resource (#​28590)
• memorystore: documented TOKEN_AUTH as a google-beta-only value for authorization_mode field on google_memorystore_instance resource (#​28584)
• networkservices: added allow_global_access field to google_network_services_gateway (#​28589)
• oracledatabase: added identity_connector to google_oracle_database_exadb_vm_cluster for CMEK support (#​28615)
• securesourcemanager: added service_account and scan_config fields to google_secure_source_manager_repository (#​28662)
• sql: added password_secret_version and user fields into google_sql_provision_script resource (#​28619)
• sql: removed ForceNew config from disk_type field in google_sql_database_instance, allowing it to change in future without requiring the database instance to be destroyed and recreated (#​28616)

BUG FIXES:

• backupdr: fixed issue where google_backup_dr_restore_workload dropped resource_manager_tags during restore requests, causing tags shown in plan to not be applied to restored resources (#​28586)
• biglakeiceberg: fixed a permadiff in google_biglake_iceberg_table by suppressing diffs on location when the API-returned path contains a suffix folder (#​28577)
• biglakeiceberg: fixed permadiff on write.parquet.compression-codec in google_biglake_iceberg_table (#​28650)
• bigquery: fixed a provider panic when reading incomplete IAM conditions on google_bigquery_dataset_iam_member (#​28617)
• cloudrunv2: fixed permadiff by setting template.scaling.max_instance_count to computed in google_cloud_run_v2_service (#​28644)
• cloudrunv2: fixed permadiff in template.containers.resources.limits block in google_cloud_run_v2_service resource (#​28670)
• cloudsecuritycompliance: fixed state drift on supported_enforcement_modes in google_cloud_security_compliance_framework resource (#​28676)
• container: fixed a permadiff where ignore_node_count_changes was not persisted in google_container_cluster.node_pool (#​28573)
• container: fixed an issue where google_container_node_pool and google_container_cluster failed to invalidate their Instance Group Manager cache when a resize occurred or when ignore_node_count_changes was active (#​28585)
• networkconnectivity: made network field in google_network_connectivity_transport optional (#​28639)
• recaptchaenterprise: fixed updates to google_recaptcha_enterprise_key so existing challenge_settings.action_settings entries are preserved when the action map changes (#​28673)
• servicenetworking: fixed google_service_networking_connection ignoring the configured delete timeout, which used the create timeout instead (#​28641)

v7.43.0

Compare Source

v7.42.0

Compare Source

NOTES:

• compute: migrated google_compute_region_instance_template resource to use direct HTTP rather than a client library (#​28431)

DEPRECATIONS:

• vertexai: deprecated google_vertex_ai_schedule, an accidentally-added duplicate resource; use google_colab_schedule instead. (#​28406)

FEATURES:

• New Data Source: google_cloud_quotas_quota_adjuster_settings (#​28383)
• New List Resource: google_service_account_key (#​28430)
• New Resource: google_agent_identity_auth_provider (#​28447)
• New Resource: google_apihub_runtime_project_attachment (#​28449)
• New Resource: google_chronicle_big_query_export (#​28403)
• New Resource: google_compute_global_vm_extension_policy (#​28445)
• New Resource: google_compute_rollout_plan (#​28445)
• New Resource: google_vector_search_data_object (#​28434)
• New Resource: google_vertex_ai_persistent_resource (#​28435)

IMPROVEMENTS:

• bigquery: added table_type field to google_bigquery_routine resource (#​28446)
• cloudrunv2: added start_execution_token and run_execution_token fields to google_cloud_run_v2_jobresource (#​28384)
• colab: added catch_up, create_pipeline_job_request, create_time, last_pause_time, last_resume_time, last_scheduled_run_response, max_concurrent_active_run_count, next_run_time, started_run_count, and update_time fields, and sub-fields under create_notebook_execution_job_request.notebook_execution_job (create_time, custom_environment_spec, encryption_spec, job_state, kernel_name, labels, name, schedule_resource_name, workbench_runtime) and under create_notebook_execution_job_request (notebook_execution_job_id, parent) to google_colab_schedule resource (#​28406)
• compute: added effective_location field to google_compute_interconnect resource (#​28416)
• compute: added request_headers and response_headers fields to log_config on google_compute_backend_service and google_compute_region_backend_service resources (#​28421)
• compute: added identity support to google_compute_instance, allowing resource import using an identity block (#​28433)
• compute: changed location field to mutable for google_compute_interconnect resource (#​28416)
• container: added addons_config.node_readiness_config field to google_container_cluster resource (#​28417)
• container: added rollback_safe_upgrade, desired_emulated_version, and emulated_version fields to google_container_cluster resource (#​28442)
• container: increased default timeout to 2 hours for google_container_node_poolresource (#​28382)
• dataproc: added confidential_instance_type field to google_dataproc_cluster resource (#​28371)
• gkehub: added min_control_plane_version, min_node_version, target_control_plane_version, target_node_version, and operational_state fields to google_gke_hub_rollout_sequence resource (#​28429)
• hypercomputecluster: increased default timeouts for google_hypercomputecluster_cluster to 120 minutes (#​28448)
• modelarmor: added field template_metadata.filter_version_selector to google_model_armor_template resource (#​28402)
• sql: added identity support to google_sql_user for terraform query support (#​28428)

BUG FIXES:

• bigtable: fixed an issue where bigtable_custom_endpoint and universe_domain were ignored when creating Bigtable resources (#​28404)
• compute: fixed an issue where diffs in google_compute_security_policy were not detected (#​28420)
• gkehub: fixed rollout_creation_scope and upgrade_types fields in google_gke_hub_rollout_sequence resource (#​28429)
• osconfig: added client-side validation to ensure resource_hierarchy_selector and location_selector are not set at the same time in google_os_config_v2_policy_orchestrator, google_os_config_v2_policy_orchestrator_for_folder, and google_os_config_v2_policy_orchestrator_for_organization (#​28407)
• secretmanager: fixed an issue where google_secret_manager_secret_version would fail at apply time if neither secret_data nor secret_data_wo was set (#​28419)
• sql: fixed issue where updates to settings.ip_configuration.psc_config.allowed_consumer_projects in google_sql_database_instance were silently ignored on in-place updates (#​28444)
• vertexai: fixed google_vertex_ai_endpoint_with_model_garden_deployment destroying and recreating the endpoint when min_replica_count, max_replica_count, required_replica_count, or autoscaling_metric_specs changed (#​28401)

hashicorp/terraform-provider-google-beta (google-beta)

v7.44.0

Compare Source

FEATURES:

• New List Resource: google_bigquery_dataset_iam_member (#​12809)
• New List Resource: google_bigquery_table (#​12807)
• New Resource: google_vertex_ai_evaluation_metric (#​12840)

IMPROVEMENTS:

• bigquery: added resource identity support to google_bigquery_table (#​12806)
• cloudrunv2: added cpu_utilization and concurrency_utilization fields to google_cloud_run_v2_service revision scaling configuration (#​12814)
• container: added high_scale_checkpointing_config block to addons_config in google_container_cluster (#​12844)
• dataproc: added attached_disk_config to disk_config to support attached disks in the google_dataproc_cluster resource (#​12816)
• memorystore: documented TOKEN_AUTH as a google-beta-only value for authorization_mode field on google_memorystore_instance resource (#​12810)
• networkservices: added allow_global_access field to google_network_services_gateway (#​12815)
• oracledatabase: added identity_connector to google_oracle_database_exadb_vm_cluster for CMEK support (#​12817)
• securesourcemanager: added service_account and scan_config fields to google_secure_source_manager_repository (#​12837)
• sql: added password_secret_version and user fields into google_sql_provision_script resource (#​12821)
• sql: removed ForceNew config from disk_type field in google_sql_database_instance, allowing it to change in future without requiring the database instance to be destroyed and recreated (#​12818)
• vertexai: added generation_trigger_config block to google_vertex_ai_reasoning_engine (#​12831)
• workstations: added idle_action field to google_workstations_workstation_config (#​12804)

BUG FIXES:

• backupdr: fixed issue where google_backup_dr_restore_workload dropped resource_manager_tags during restore requests, causing tags shown in plan to not be applied to restored resources (#​12812)
• biglakeiceberg: fixed a permadiff in google_biglake_iceberg_table by suppressing diffs on location when the API-returned path contains a suffix folder (#​12808)
• biglakeiceberg: fixed permadiff on write.parquet.compression-codec in google_biglake_iceberg_table (#​12836)
• bigquery: fixed a provider panic when reading incomplete IAM conditions on google_bigquery_dataset_iam_member (#​12819)
• cloudrunv2: fixed permadiff by setting template.scaling.max_instance_count to computed in google_cloud_run_v2_service (#​12829)
• cloudrunv2: fixed permadiff in template.containers.resources.limits block in google_cloud_run_v2_service resource (#​12845)
• cloudsecuritycompliance: fixed state drift on supported_enforcement_modes in google_cloud_security_compliance_framework resource (#​12851)
• container: fixed a permadiff where ignore_node_count_changes was not persisted in google_container_cluster.node_pool (#​12805)
• container: fixed an issue where google_container_node_pool and google_container_cluster failed to invalidate their Instance Group Manager cache when a resize occurred or when ignore_node_count_changes was active (#​12811)
• networkconnectivity: made network field in google_network_connectivity_transport optional (#​12823)
• recaptchaenterprise: fixed updates to google_recaptcha_enterprise_key so existing challenge_settings.action_settings entries are preserved when the action map changes (#​12848)
• servicenetworking: fixed google_service_networking_connection ignoring the configured delete timeout, which used the create timeout instead (#​12824)

v7.43.0

Compare Source

v7.42.0

Compare Source

NOTES:

• compute: migrated google_compute_region_instance_template resource to use direct HTTP rather than a client library (#​12752)

DEPRECATIONS:

• vertexai: deprecated google_vertex_ai_schedule, an accidentally-added duplicate resource; use google_colab_schedule instead. (#​12739)

FEATURES:

• New List Resource: google_service_account_key (#​12750)
• New Resource: google_agent_identity_auth_provider (#​12762)
• New Resource: google_apihub_runtime_project_attachment (#​12764)
• New Resource: google_chronicle_big_query_export (#​12737)
• New Resource: google_vector_search_data_object (#​12755)
• New Resource: google_vertex_ai_persistent_resource (#​12756)

IMPROVEMENTS:

• bigquery: added table_type field to google_bigquery_routine resource (#​12761)
• colab: added catch_up, create_pipeline_job_request, create_time, last_pause_time, last_resume_time, last_scheduled_run_response, max_concurrent_active_run_count, next_run_time, started_run_count, update_time fields, and sub-fields under create_notebook_execution_job_request.notebook_execution_job (create_time, custom_environment_spec, encryption_spec, job_state, kernel_name, labels, name, schedule_resource_name, workbench_runtime) and under create_notebook_execution_job_request (notebook_execution_job_id, parent) to google_colab_schedule resource (#​12739)
• composer: added config.node_config.traffic_routing_config field to google_composer_environment resource (#​12733)
• compute: added effective_location field to google_compute_interconnect resource (#​12742)
• compute: added request_headers and response_headers fields to log_config on google_compute_backend_service and google_compute_region_backend_service resources (#​12746)
• compute: added identity support to google_compute_instance, allowing resource import using an identity block (#​12754)
• compute: changed location field to mutable for google_compute_interconnect resource (#​12742)
• container: added addons_config.node_readiness_config field to google_container_cluster resource (#​12743)
• container: added rollback_safe_upgrade, desired_emulated_version, and emulated_version fields to google_container_cluster resource (#​12757)
• container: increased default timeout to 2 hours for google_container_node_pool resource (#​12727)
• dataproc: added confidential_instance_type field to google_dataproc_cluster resource (#​12725)
• gkehub: added min_control_plane_version, min_node_version, target_control_plane_version, target_node_version, and operational_state fields to google_gke_hub_rollout_sequence resource (#​12749)
• hypercomputecluster: increased default timeouts for google_hypercomputecluster_cluster to 120 minutes (#​12763)
• modelarmor: added template_metadata.filter_version_selector field to google_model_armor_template resource (#​12736)
• sql: added identity support to google_sql_user for terraform query support (#​12748)

BUG FIXES:

• bigtable: fixed an issue where bigtable_custom_endpoint and universe_domain were ignored when creating Bigtable resources (#​12738)
• compute: fixed an issue where diffs in google_compute_security_policy were not detected (#​12745)
• gkehub: fixed rollout_creation_scope and upgrade_types fields in google_gke_hub_rollout_sequence resource (#​12749)
• osconfig: added client-side validation to ensure resource_hierarchy_selector and location_selector are not set at the same time in google_os_config_v2_policy_orchestrator, google_os_config_v2_policy_orchestrator_for_folder, and google_os_config_v2_policy_orchestrator_for_organization (#​12740)
• secretmanager: fixed an issue where google_secret_manager_secret_version would fail at apply time if neither secret_data nor secret_data_wo was set (#​12744)
• sql: fixed issue where updates to settings.ip_configuration.psc_config.allowed_consumer_projects in google_sql_database_instance were silently ignored on in-place updates (#​12759)
• vertexai: fixed google_vertex_ai_endpoint_with_model_garden_deployment destroying and recreating the endpoint when min_replica_count, max_replica_count, required_replica_count, or autoscaling_metric_specs changed (#​12735)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 and 15 of the month (* * 1,15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🚀 Preview Deployment Ready!

Your pull request has been built and is ready for preview deployment.
Here's how to test your changes:

Container Images Built

• Balancer: ghcr.io/OWASP/wrongsecrets-balancer:pr-1304
• Cleaner: ghcr.io/OWASP/cleaner:pr-1304

Quick Deploy with Helm

# Add the wrongsecrets helm repository
helm repo add wrongsecrets https://owasp.org/wrongsecrets-ctf-party
helm repo update

# Deploy with preview images
helm install my-preview wrongsecrets/wrongsecrets-ctf-party \
  --set balancer.repository=ghcr.io/OWASP/wrongsecrets-balancer \
  --set balancer.tag=pr-1304 \
  --set wrongsecretsCleanup.repository=ghcr.io/OWASP/cleaner \
  --set wrongsecretsCleanup.tag=pr-1304 \
  --set imagePullPolicy=Always

# Port forward to access locally
kubectl port-forward service/wrongsecrets-balancer 3000:3000

Deploy with Custom Values

Click to see preview-values.yaml

balancer:
  repository: ghcr.io/OWASP/wrongsecrets-balancer
  tag: pr-1304

wrongsecretsCleanup:
  repository: ghcr.io/OWASP/cleaner
  tag: pr-1304

# Preview configuration
ingress:
  enabled: true
  hosts:
    - host: >-
        preview-pr-1304.wrongsecrets.local
      paths:
        - "/"

# Save the above values to preview-values.yaml, then:
helm install my-preview wrongsecrets/wrongsecrets-ctf-party \
  -f preview-values.yaml

Deploy with Local Build Scripts

# Clone this PR
git fetch origin pull/1304/head:pr-1304
git checkout pr-1304

# Use the existing deployment script with custom images
./build-and-deploy.sh

Test the Changes

1. Access the application at http://localhost:3000
2. Create a team and verify functionality
3. Test any new features or bug fixes

Container Registry

The preview images are available at:

• https://github.com/OWASP/wrongsecrets-ctf-party/pkgs/container/wrongsecrets-balancer
• https://github.com/OWASP/wrongsecrets-ctf-party/pkgs/container/cleaner

---

This preview was automatically generated for PR #1304