1.113.0

• Initial support for status.observedState in ContainerCluster,
  ContainerNodePool and RedisInstance; we are trying to encourage use of
  cnrm.cloud.google.com/state-into-spec: absent and eventually
  make it the default. Some important resource information (such as the
  certificate for connecting to a GKE cluster) is only currently available
  in spec, and we recommend instead reading it from observedState
  where this is available. We expect to add more fields to observedState
  in the future.

• Isolate terraform provider into a git subtree so we can more directly fix
  problems.

• Special shout-outs to svwijk@, katrielt@, sofam@, higef@ for their
  contributions to this release.

New Resources:

• Added support for ComputeNetworkFirewallPolicy (v1beta1) resource.
• Added support for TagsLocationTagBinding (v1alpha1) resource.

New Fields:

• RunJob (CloudRun Job)
  • Added spec.template.vpcAccess.connectorRef field.

1.112.0

• Added support for AlloyDBUser (v1beta1) resource.
• Added support for EdgeContainerCluster (v1beta1) and EdgeContainerNodePool (v1beta1) resources.
• Added support for EdgeNetworkNetwork (v1beta1) and EdgeNetworkSubnet (v1beta1) resources.
• Resource BigtableAppProfile(v1beta1):
  • Added spec.standardIsolation field.
• Fixed the SecretKeyRef in the Go client. (#598)

1.111.0

• Added support for ContainerAttachedCluster (v1beta1) resource.
• Added support for AlloyDBCluster (v1beta1) resource.
• Added support for AlloyDBInstance (v1beta1) resource.
• Added support for AlloyDBBackup (v1beta1) resource.
• Added name validation for ValidatingWebhookConfigurationCustomization and MutatingWebhookConfigurationCustomization CRDs.
• Added validation for duplicate webhooks in spec.webhooks list of the customizable ControllerResource and NamespacedControllerResource CRDs.
• Added errors on invalid webhook names into status of ValidatingWebhookConfigurationCustomization and MutatingWebhookConfigurationCustomization custom resources.
• Fixed an reconciliation issue in ComputeManagedSSLCert resource. #107
• Fixed issue of the retrieved maxWorkers in DataflowFlexTemplateJob resource
• Graduated ValidatingWebhookConfigurationCustomization, MutatingWebhookConfigurationCustomization, ControllerResource and NamespacedControllerResource CRDs to v1beta1.
• Fixed an issue in ComputeForwardingRule resource when used with PSC. #763
• Resource AlloyDBCluster(v1beta1):
  • Added spec.networkConfig field.
• Resource ComputeSubnetwork(v1beta1):
  • Added status.internalIpv6Prefix field.
• Resource ComputeTargetHTTPSProxy(v1beta1):
  • Added spec.serverTlsPolicyRef field.
• Resource ContainerCluster(v1beta1):
  • Added spec.nodeConfig.fastSocket field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.nodeConfig.fastSocket field.
• Resource NetworkConnectivitySpoke(v1beta1):
  • Added spec.linkedVPCNetwork field.
• Resource RunJob(v1beta1):
  • Added spec.template.template.vpcAccess.networkInterfaces field.
• Resource RunService(v1beta1):
  • Added spec.template.vpcAccess.networkInterfaces field.
• Resource SecretManagerSecretVersion(v1beta1):
  • Added spec.isSecretDataBase64 field.

1.110.0

• Added MutatingWebhookConfigurationCustomization and ValidatingWebhookConfigurationCustomization to support the customization on webhook timeouts.
• Added value validation for resource requests and limits in the customizable ControllerResource and NamespacedControllerResource CRDs.
• Promoted CertificateManagerCertificate, CertificateManagerCertificateMap, CertificateManagerCertificateMapEntry and CertificateManagerDNSAuthorization from v1alpha1 to v1beta1.
• Promoted RunService from alpha stability to stable stability.
• Renamed field spec.template.containerConcurrency to spec.template.maxInstanceRequestConcurrency.
• Fixed the IAM support by removing the support of "IAM conditions" on this resource.
• Removed field status.resourceGeneration.
• Resource BigQueryTable(v1beta1):
  • Added spec.tableConstraints field.
  • Added spec.materializedView.allowNonIncrementalDefinition field.
• Resource ComputeInstance(v1beta1):
  • Added spec.networkInterface.items.internalIpv6PrefixLength field.
  • Added spec.networkInterface.items.ipv6Address field.
• Resource ComputeInstanceTemplate(v1beta1):
  • Added spec.networkInterface.items.internalIpv6PrefixLength field.
  • Added spec.networkInterface.items.ipv6Address field.
• Resource ContainerCluster(v1beta1):
  • Added spec.enableFqdnNetworkPolicy field.
  • Added spec.nodeConfig.confidentialNodes field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.nodeConfig.confidentialNodes field.
• Resource DialogflowCXFlow(v1alpha1):
  • Added spec.eventHandlers.items.triggerFulfillment.conditionalCases field.
  • Added spec.eventHandlers.items.triggerFulfillment.setParameterActions field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.channel field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.payload field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.transitionRoutes.items.triggerFulfillment.conditionalCases field.
  • Added spec.transitionRoutes.items.triggerFulfillment.setParameterActions field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.channel field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.payload field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.telephonyTransferCall field.
• Resource DialogflowCXPage(v1alpha1):
  • Added spec.entryFulfillment.conditionalCases field.
  • Added spec.entryFulfillment.setParameterActions field.
  • Added spec.entryFulfillment.messages.items.channel field.
  • Added spec.entryFulfillment.messages.items.conversationSuccess field.
  • Added spec.entryFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.entryFulfillment.messages.items.outputAudioText field.
  • Added spec.entryFulfillment.messages.items.payload field.
  • Added spec.entryFulfillment.messages.items.playAudio field.
  • Added spec.entryFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.eventHandlers.items.triggerFulfillment.conditionalCases field.
  • Added spec.eventHandlers.items.triggerFulfillment.setParameterActions field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.channel field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.payload field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.form.parameters.items.defaultValue field.
  • Added spec.form.parameters.items.fillBehavior.repromptEventHandlers field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.conditionalCases field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.setParameterActions field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.channel field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.conversationSuccess field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.outputAudioText field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.payload field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.playAudio field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.transitionRoutes.items.triggerFulfillment.conditionalCases field.
  • Added spec.transitionRoutes.items.triggerFulfillment.setParameterActions field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.channel field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.payload field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.telephonyTransferCall field.
• Resource RunJob(v1beta1):
  • spec.template.template.volumes[].secret.items[].mode is now optional.
• Resource SecretManagerSecret(v1beta1):
  • Added spec.replication.auto field.
• Resource SecretManagerSecretVersion(v1beta1):
  • Added spec.deletionPolicy field.
• Resource StorageBucket(v1beta1):
  • spec.autoclass.enabled is now mutable.
• Resource VertexAIIndexEndpoint(v1alpha1):
  • Added spec.publicEndpointEnabled field.
  • Added status.publicEndpointDomainName field.

1.109.0

• Added name validation for the customizable ControllerResource CRDs.
• Field spec.containers is no longer required in the customizable ControllerResource CRDs.
• Added support for CloudIOTDeviceRegistry (v1alpha1) resource.
• Added support for ComputeRegionSSLPolicy (v1alpha1) resource.
• Added support for VertexAIIndexEndpoint (v1alpha1) resource.
• Resource BigtableGCPolicy(v1beta1):
  • Fixed a bug that generates unexpected diff when mode and gcRules
    are both specified.
  • Fixed a bug that generates unexpected diff when maxAge in
    gcRules is specified with units larger than hours.
• Resource AlloyDBCluster(v1alpha1):
  • Added spec.continuousBackupConfig field.
  • Added spec.restoreBackupSource field.
  • Added spec.restoreContinuousBackupSource field.
  • Added status.continuousBackupInfo field.
• Resource ArtifactRegistryRepository(v1beta1):
  • Added spec.cleanupPolicies field.
  • Added spec.cleanupPolicyDryRun field.
• Resource BigQueryTable(v1beta1):
  • Added spec.maxStaleness field.
  • Added spec.externalDataConfiguration.fileSetSpecType field.
• Resource CloudBuildTrigger(v1beta1):
  • Added spec.gitFileSource.bitbucketServerConfigRef field.
  • Added spec.sourceToBuild.bitbucketServerConfigRef field.
• Resource CloudFunctions2Function(v1alpha1):
  • Added spec.kmsKeyName field.
• Resource ComputeAddress(v1beta1):
  • Added spec.ipv6EndpointType field.
• Resource ComputeBackendService(v1beta1):
  • Added spec.securityPolicy field.
  • Added spec.connectionTrackingPolicy.enableStrongAffinity field.
• Resource ComputeInstance(v1beta1):
  • Added spec.networkInterface.items.ipv6AccessConfig.items.name field.
  • Added spec.scheduling.localSsdRecoveryTimeout field.
• Resource ComputeInstanceTemplate(v1beta1):
  • Added spec.disk.items.provisionedIops field.
  • Added spec.networkInterface.items.ipv6AccessConfig.items.name field.
  • Added spec.scheduling.localSsdRecoveryTimeout field.
• Resource ComputeSecurityPolicy(v1beta1):
  • Added spec.advancedOptionsConfig.userIpRequestHeaders field.
• Resource ComputeTargetInstance(v1beta1):
  • Added spec.securityPolicyRef field.
• Resource ComputeTargetPool(v1beta1):
  • Added spec.securityPolicyRef field.
• Resource ContainerCluster(v1beta1):
  • Added spec.allowNetAdmin field.
  • Added spec.enableK8sBetaApis field.
  • Added spec.enableMultiNetworking field.
  • Added spec.ipAllocationPolicy.additionalPodRangesConfig field.
  • Added spec.monitoringConfig.advancedDatapathObservabilityConfig field.
  • Added spec.nodeConfig.hostMaintenancePolicy field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.networkConfig.additionalNodeNetworkConfigs field.
  • Added spec.networkConfig.additionalPodNetworkConfigs field.
  • Added spec.nodeConfig.hostMaintenancePolicy field.
  • Added spec.placementPolicy.policyNameRef field.
• Resource DNSManagedZone(v1beta1):
  • Removed spec.privateVisibilityConfig.required field.
• Resource EventarcTrigger(v1beta1):
  • Added spec.eventDataContentType field.
• Resource FirebaseAndroidApp(v1alpha1):
  • Added spec.apiKeyId field.
• Resource FirebaseWebApp(v1alpha1):
  • Added spec.apiKeyId field.
• Resource HealthcareFHIRStore(v1alpha1):
  • Added spec.defaultSearchHandlingStrict field.
  • Added spec.notificationConfigs.items.sendPreviousResourceOnDelete field.
  • Added spec.streamConfigs.items.bigqueryDestination.schemaConfig.lastUpdatedPartitionConfig field.
• Resource IAMWorkforcePoolProvider(v1beta1):
  • Added spec.oidc.clientSecret field.
  • Added spec.oidc.jwksJson field.
  • Added spec.oidc.webSsoConfig.additionalScopes field.
  • Added status.oidc field.
• Resource MonitoringAlertPolicy(v1beta1):
  • Added spec.conditions.items.conditionPrometheusQueryLanguage field.
• Resource PubSubSubscription(v1beta1):
  • Added spec.cloudStorageConfig field.
  • Added spec.pushConfig.noWrapper field.
• Resource RunJob(v1beta1):
  • Added status.createTime field.
  • Added status.creator field.
  • Added status.deleteTime field.
  • Added status.expireTime field.
  • Added status.lastModifier field.
  • Added status.updateTime field.
• Resource SecretManagerSecret(v1beta1):
  • Added spec.annotations field.
  • Added spec.versionAliases field.
• Resource SpannerDatabase(v1beta1):
  • Added spec.enableDropProtection field.
• Resource SQLInstance(v1beta1):
  • Added spec.settings.ipConfiguration.pscConfig field.
  • Added status.dnsName field.
  • Added status.pscServiceAttachmentLink field.
• Resource WorkstationsWorkstationCluster(v1alpha1):
  • Added spec.privateClusterConfig.allowedProjects field.
• Fixed spec.webhookConfig.secretRef field in CloudBuildTrigger.

1.108.0

• Added support for customization on cnrm-unmanaged-detector pods resource requests/limits.
• Added support for customization on cnrm-controller-manager pods resource requests/limits in namespaced mode.
• Added support for BigQueryReservationCapacityCommitment resource(v1alpha1).
• Resource BigQueryDataset(v1beta1):
  • Added spec.storageBillingModel field.
• Resource BigQueryTable(v1beta1):
  • Added spec.externalDataConfiguration.jsonOptions field.
  • Added spec.externalDataConfiguration.metadataCacheMode field.
  • Added spec.externalDataConfiguration.objectMetadata field.
  • Added spec.externalDataConfiguration.parquetOptions field.
• Resource BigtableTable(v1beta1):
  • Added spec.changeStreamRetention field.
• Resource CertificateManagerCertificate(v1alpha1):
  • Added spec.managed.issuanceConfig field.
• Resource CloudFunctions2Function(v1alpha1):
  • Added status.url field.
• Resource ComputeDisk(v1beta1):
  • Added spec.enableConfidentialCompute field.
  • Added spec.provisionedThroughput field.
• Resource ComputeExternalVPNGateway(v1beta1):
  • Added status.labelFingerprint field.
• Resource ComputeForwardingRule(v1beta1):
  • Added spec.noAutomateDnsZone field.
• Resource ComputeInstance(v1beta1):
  • Added spec.params field.
  • Added spec.bootDisk.initializeParams.resourceManagerTags field.
• Resource ComputeInstanceTemplate(v1beta1):
  • Added spec.networkInterface.items.networkAttachment field.
• Resource ComputeTargetHTTPProxy(v1beta1):
  • Added spec.httpKeepAliveTimeoutSec field.
• Resource ComputeTargetHTTPSProxy(v1beta1):
  • Added spec.httpKeepAliveTimeoutSec field.
• Resource ComputeURLMap(v1beta1):
  • Added spec.pathMatcher.items.routeRules.items.matchRules.items.pathTemplateMatch field.
  • Added spec.pathMatcher.items.routeRules.items.routeAction.urlRewrite.pathTemplateRewrite field.
• Resource ContainerCluster(v1beta1):
  • Added spec.nodeConfig.guestAccelerator.items.gpuDriverInstallationConfig field.
  • Added spec.nodeConfig.soleTenantConfig field.
  • Added spec.securityPostureConfig field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.nodeConfig.guestAccelerator.items.gpuDriverInstallationConfig field.
  • Added spec.nodeConfig.soleTenantConfig field.
  • Added spec.placementPolicy.tpuTopology field.
• Resource DataformRepository(v1alpha1):
  • Added spec.workspaceCompilationOverrides field.
• Resource GKEBackupBackupPlan(v1alpha1):
  • Added status.state field.
  • Added status.stateReason field.
• Resource HealthcareFHIRStore(v1alpha1):
  • Added spec.complexDataTypeReferenceParsing field.
• Resource RedisInstance(v1beta1):
  • Added status.maintenanceSchedule field.
• Resource RunJob(v1beta1):
  • Added spec.annotations field.
  • Added spec.template.annotations field.
• Resource SQLInstance(v1beta1):
  • Added spec.settings.dataCacheConfig field.
  • Added spec.settings.edition field.
• Resource VertexAIFeaturestoreEntityTypeFeature(v1alpha1):
  • Added status.region field.
• Resource VertexAIIndex(v1alpha1):
  • Added spec.metadata.config.shardSize field.

1.107.0

• Added support for customization on cnrm-webhook-manager pod replicas.
• Optimized HPA rule for cnrm-webhook-manager with targetCPUUtilizationPercentage adjusted from 90 to 70.
• Added GOMEMLIMIT environment variable (default value is set to 110MiB) to the webhook container in cnrm-webhook-manager.
  • It sets a runtime memory limit for the webhook container, which helps in GC-related out-of-memory ("OOM") situations.
• Resource DataflowFlexTemplateJob(v1beta1):
  • Added spec.additionalExperiments field.
  • Added spec.autoscalingAlgorithm field.
  • Added spec.enableStreamingEngine field.
  • Added spec.ipConfiguration field.
  • Added spec.kmsKeyNameRef field.
  • Added spec.launcherMachineType field.
  • Added spec.machineType field.
  • Added spec.maxWorkers field.
  • Added spec.networkRef field.
  • Added spec.numWorkers field.
  • Added spec.sdkContainerImage field.
  • Added spec.serviceAccountEmailRef field.
  • Added spec.stagingLocation field.
  • Added spec.subnetworkRef field.
  • Added spec.tempLocation field.
  • Added spec.transformNameMapping field.
• Resource BigQueryDataset(v1beta1):
  • Added spec.access.routine field.

1.106.0

• Added support for customization on cnrm-webhook-manager, cnrm-controller-manager, cnrm-resource-stats-recorder and cnrm-deletiondefender pods resource requests/limits.
• Added support for RunJob resource.
• Optimized HPA rule for cnrm-webhook-manager with new memory targetAverageUtilization.
• Added support for KMS key deletion when being orphaned.
• Disabled abandon-on-uninstall webhook.
• Resource VPCAccessConnector(v1beta1):
  • Added status.selfLink field.
• Resource ComputeDisk(v1beta1):
  • Added spec.guestOsFeatures field.
  • Added spec.licenses field.
• Resource ComputeImage(v1beta1):
  • Added spec.storageLocations field.
• Resource DataflowFlexTemplateJob(v1beta1):
  • Added status.type field.
• Resource DatastreamStream(v1alpha1):
  • Added spec.sourceConfig.mysqlSourceConfig.maxConcurrentBackfillTasks field.
• Resource GKEHubFeature(v1beta1):
  • Added spec.spec.fleetobservability field.
• Resource MonitoringAlertPolicy(v1beta1):
  • Added spec.alertStrategy.notificationChannelStrategy field.
  • Added spec.conditions.items.conditionThreshold.forecastOptions field.
• Resource SQLInstance(v1beta1):
  • Added spec.settings.advancedMachineFeatures field.
• Resource StorageTransferJob(v1beta1):
  • Added spec.transferSpec.awsS3DataSource.path field.

1.105.0

• Resource AlloyDBBackup(v1alpha1):
  • Added spec.encryptionConfig field.
  • Added status.encryptionInfo field.
• Resource AlloyDBCluster(v1alpha1):
  • Added spec.encryptionConfig field.
  • Added spec.automatedBackupPolicy.encryptionConfig field.
  • Added status.encryptionInfo field.
• Resource BigQueryJob(v1beta1):
  • Added spec.load.parquetOptions field.
• Resource CertificateManagerCertificate(v1alpha1):
  • Added spec.location field.
• Resource CloudBuildTrigger(v1beta1):
  • Added spec.build.step.items.allowExitCodes field.
  • Added spec.build.step.items.allowFailure field.
  • Added spec.gitFileSource.repositoryRef field.
  • Added spec.sourceToBuild.repositoryRef field.
• Resource ComputeBackendService(v1beta1):
  • Added spec.cdnPolicy.bypassCacheOnRequestHeaders field.
• Resource ComputeDisk(v1beta1):
  • Added spec.asyncPrimaryDisk.diskRef field.
• Resource ComputeForwardingRule(v1beta1):
  • Added spec.allowPscGlobalAccess field.
  • Added spec.sourceIpRanges field.
  • Added status.baseForwardingRule field.
• Resource ComputeNetworkPeering(v1beta1):
  • Added spec.stackType field.
• Resource ComputeResourcePolicy(v1beta1):
  • Added spec.diskConsistencyGroupPolicy field.
• Resource ComputeRouterPeer(v1beta1):
  • Added spec.enableIpv6 field.
  • Added spec.ipv6NexthopAddress field.
  • Added spec.peerIpv6NexthopAddress field.
• Resource ContainerCluster(v1beta1):
  • Added spec.addonsConfig.gcsFuseCsiDriverConfig field.
• Resource VertexAIEndpoint(v1alpha1):
  • Added spec.region field.
• Resource WorkflowsWorkflow(v1alpha1):
  • Added spec.cryptoKeyName field.
• Resource WorkstationsWorkstationCluster(v1alpha1):
  • Added status.resourceConditions field.
  • Restructured status.conditions field to be consistent with status.conditions field of any Config Connector kind.
• Fixed the issue that the SecretManagerSecretVersion resource stuck in DeleteFailed state when it's deleted after the referenced SecretManagerSecret is deleted.

1.104.0

• Resource ComputeFirewallPolicyRule(v1beta1):
  • Added spec.match.destAddressGroups field.
  • Added spec.match.destFqdns field.
  • Added spec.match.destRegionCodes field.
  • Added spec.match.destThreatIntelligences field.
  • Added spec.match.srcAddressGroups field.
  • Added spec.match.srcFqdns field.
  • Added spec.match.srcRegionCodes field.
  • Added spec.match.srcThreatIntelligences field.
• Resource IAMWorkforcePoolProvider(v1beta1):
  • Added spec.oidc.webSsoConfig field.
• Config Connector CLI tool will now export cluster information for BigTableInstance.
• Resources with a reconcile period of 0 will no longer attempt to reconcile when pods are recreated (#795).