v1.118.1

• This release introduces our new direct-reconciliation mechanism to reconcile KCC resources (without relying on terraform). Currently it only applies to LoggingLogMetric.

• Special shout-outs to @199201shubhamsahu, @acpana, @anhdle-sso, @barney-s, @cheftako, @gemmahou, @jingyih, @justinsb, @katrielt, @vmiglani, @xiaoweim and @yuwenma for their
  contributions to this release.

Direct Cloud Reconciler:

• LoggingLogMetric
  • This resource no longer depends on Terraform. Its reconciliation is moved to a KCC direct controller.
  • This is our very first KCC directly-reconciled resource. We will announce more in the upcoming releases. 🎉🎉🎉

New Resource:

• ComputeNetworkFirewallPolicyRule (alpha)

New Fields:

• LoggingLogMetric
  • Add the spec.loggingLogBucketRef field to support bucket reference.

Fixes:

• SQLInstance
  • Fix the permanent diff bug in spec.settings.edition update.

v1.117.0

v1.117.0

• This release improves our support for VertexAI.

• Special shout-outs to @199201shubhamsahu, @acpana, @anhdle-sso, @barney-s,
  @cheftako, @gemmahou, @jingyih, @justinsb, @katrielt, @maqiuyujoyce,
  @nicslatts, @xiaoweim, @yuwenma, @zicongmei and @ziyue-101
  for their contributions to this release.

Resources promoted from alpha to beta:

• VertexAIDataSet

  • Output fields are now in status.observedState.
  • The KMS key is now specified using a reference: spec.encryptionSpec.kmsKeyNameRef

• VertexAIIndex

  • Output fields are now in status.observedState.
  • Note that isCompleteOverwrite is currently not supported: it is not
    obviously compatible with declarative operation.

• VertexAIEndpoints

  • Output fields are now in status.observedState.
  • The KMS key is now specified using a reference: spec.encryptionSpec.kmsKeyNameRef
  • The network is now specified using a reference: spec.networkRef

New Fields:

• ComputeNetwork
  • The spec.enableUlaInternalIpv6 field is no longer immutable - it can now
    be changed without recreating the network.

v1.116.0

• This release includes enhanced support for DNSRecordSet,
  enabling advanced configurations such as geo-routing, primary/backup,
  and weighted round-robin load-balancing.

New Fields:

• ContainerCluster

  • Added spec.nodeConfig.linuxNodeConfig.cgroupMode field.

• ContainerNodePool

  • Added spec.nodeConfig.linuxNodeConfig.cgroupMode field.

• DNSRecordSet

  • Added spec.routingPolicy.geo.healthCheckedTargets field.
  • Added spec.routingPolicy.primaryBackup field.
  • Added spec.routingPolicy.wrr field.

• EventArcTrigger

  • Added spec.destination.httpEndpoint field.
  • Added spec.destination.networkConfig field.

• LoggingLogBucket

  • Added spec.enableAnalytics field.

v1.115.0

v1.115.0

• Better support for AlloyDB secondary clusters and instances.

• Special shout-out to @199201shubhamsahu for their contributions to this release.

New Fields:

• AlloyDBCluster

  • Added spec.clusterType field.
  • Added spec.deletionPolicy field.
  • Added spec.secondaryConfig field.

• AlloyDBInstance

  • Added spec.instanceTypeRef field.

1.114.1

(Version 1.114.0 contained a minor regression discovered after tagging, and was not published; we recommend 1.114.1 instead)

• Stop merging sensitive fields in SQLInstance and ComputeBackendService

• Fix resource deletion of AlloyDBInstance and EdgeContainerNodePool when their "parent objects" no longer exist.

• Initial support (alpha stability) for pausing reconciliation, by setting spec.actuationMode: Paused in the ConfigConnectorContext.

• Initial support (alpha stability) for defaulting state-into-spec to absent (the recommended setting),
  by setting spec.stateIntoSpec: Absent in the ConfigConnectorContext.

• Experimental "powertools" area of the CLI, containing experimental/dangerous functionality that should not be
  part of normal operation, but can sometimes nonetheless be useful.

• Special shout-outs to @Hamzawy63, @hkundag, @katrielt for their
  contributions to this release.

Resources promoted from alpha to beta:

When resources are promoted from alpha to beta, we (generally) ensure they follow our best practices: use of refs on fields where appropriate,
output fields from GCP APIs are in status.observedState.

• AccessContextManagerServicePerimeterResource

New Resources:

• Added support for ComputeNetworkFirewallPolicyAssociation (v1beta1) resource.

• Added support for APIKeysKey (v1alpha1) resource.

New Fields:

• BigQueryDataSet

  • Added access[].iamMember field.

• ComputeAddress

  • Added status.observedState.address field.

• ComputeTargetHttpsProxy

  • Added spec.certificateManagerCertificates field.

• DNSRecordSet

  • Added spec.routingPolicy field.

• GKEHubFeatureMembership

  • Added spec.policycontroller field.

1.113.0

• Initial support for status.observedState in ContainerCluster,
  ContainerNodePool and RedisInstance; we are trying to encourage use of
  cnrm.cloud.google.com/state-into-spec: absent and eventually
  make it the default. Some important resource information (such as the
  certificate for connecting to a GKE cluster) is only currently available
  in spec, and we recommend instead reading it from observedState
  where this is available. We expect to add more fields to observedState
  in the future.

• Isolate terraform provider into a git subtree so we can more directly fix
  problems.

• Special shout-outs to svwijk@, katrielt@, sofam@, higef@ for their
  contributions to this release.

New Resources:

• Added support for ComputeNetworkFirewallPolicy (v1beta1) resource.
• Added support for TagsLocationTagBinding (v1alpha1) resource.

New Fields:

• RunJob (CloudRun Job)
  • Added spec.template.vpcAccess.connectorRef field.

1.112.0

• Added support for AlloyDBUser (v1beta1) resource.
• Added support for EdgeContainerCluster (v1beta1) and EdgeContainerNodePool (v1beta1) resources.
• Added support for EdgeNetworkNetwork (v1beta1) and EdgeNetworkSubnet (v1beta1) resources.
• Resource BigtableAppProfile(v1beta1):
  • Added spec.standardIsolation field.
• Fixed the SecretKeyRef in the Go client. (#598)

1.111.0

• Added support for ContainerAttachedCluster (v1beta1) resource.
• Added support for AlloyDBCluster (v1beta1) resource.
• Added support for AlloyDBInstance (v1beta1) resource.
• Added support for AlloyDBBackup (v1beta1) resource.
• Added name validation for ValidatingWebhookConfigurationCustomization and MutatingWebhookConfigurationCustomization CRDs.
• Added validation for duplicate webhooks in spec.webhooks list of the customizable ControllerResource and NamespacedControllerResource CRDs.
• Added errors on invalid webhook names into status of ValidatingWebhookConfigurationCustomization and MutatingWebhookConfigurationCustomization custom resources.
• Fixed an reconciliation issue in ComputeManagedSSLCert resource. #107
• Fixed issue of the retrieved maxWorkers in DataflowFlexTemplateJob resource
• Graduated ValidatingWebhookConfigurationCustomization, MutatingWebhookConfigurationCustomization, ControllerResource and NamespacedControllerResource CRDs to v1beta1.
• Fixed an issue in ComputeForwardingRule resource when used with PSC. #763
• Resource AlloyDBCluster(v1beta1):
  • Added spec.networkConfig field.
• Resource ComputeSubnetwork(v1beta1):
  • Added status.internalIpv6Prefix field.
• Resource ComputeTargetHTTPSProxy(v1beta1):
  • Added spec.serverTlsPolicyRef field.
• Resource ContainerCluster(v1beta1):
  • Added spec.nodeConfig.fastSocket field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.nodeConfig.fastSocket field.
• Resource NetworkConnectivitySpoke(v1beta1):
  • Added spec.linkedVPCNetwork field.
• Resource RunJob(v1beta1):
  • Added spec.template.template.vpcAccess.networkInterfaces field.
• Resource RunService(v1beta1):
  • Added spec.template.vpcAccess.networkInterfaces field.
• Resource SecretManagerSecretVersion(v1beta1):
  • Added spec.isSecretDataBase64 field.

1.110.0

• Added MutatingWebhookConfigurationCustomization and ValidatingWebhookConfigurationCustomization to support the customization on webhook timeouts.
• Added value validation for resource requests and limits in the customizable ControllerResource and NamespacedControllerResource CRDs.
• Promoted CertificateManagerCertificate, CertificateManagerCertificateMap, CertificateManagerCertificateMapEntry and CertificateManagerDNSAuthorization from v1alpha1 to v1beta1.
• Promoted RunService from alpha stability to stable stability.
• Renamed field spec.template.containerConcurrency to spec.template.maxInstanceRequestConcurrency.
• Fixed the IAM support by removing the support of "IAM conditions" on this resource.
• Removed field status.resourceGeneration.
• Resource BigQueryTable(v1beta1):
  • Added spec.tableConstraints field.
  • Added spec.materializedView.allowNonIncrementalDefinition field.
• Resource ComputeInstance(v1beta1):
  • Added spec.networkInterface.items.internalIpv6PrefixLength field.
  • Added spec.networkInterface.items.ipv6Address field.
• Resource ComputeInstanceTemplate(v1beta1):
  • Added spec.networkInterface.items.internalIpv6PrefixLength field.
  • Added spec.networkInterface.items.ipv6Address field.
• Resource ContainerCluster(v1beta1):
  • Added spec.enableFqdnNetworkPolicy field.
  • Added spec.nodeConfig.confidentialNodes field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.nodeConfig.confidentialNodes field.
• Resource DialogflowCXFlow(v1alpha1):
  • Added spec.eventHandlers.items.triggerFulfillment.conditionalCases field.
  • Added spec.eventHandlers.items.triggerFulfillment.setParameterActions field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.channel field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.payload field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.transitionRoutes.items.triggerFulfillment.conditionalCases field.
  • Added spec.transitionRoutes.items.triggerFulfillment.setParameterActions field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.channel field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.payload field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.telephonyTransferCall field.
• Resource DialogflowCXPage(v1alpha1):
  • Added spec.entryFulfillment.conditionalCases field.
  • Added spec.entryFulfillment.setParameterActions field.
  • Added spec.entryFulfillment.messages.items.channel field.
  • Added spec.entryFulfillment.messages.items.conversationSuccess field.
  • Added spec.entryFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.entryFulfillment.messages.items.outputAudioText field.
  • Added spec.entryFulfillment.messages.items.payload field.
  • Added spec.entryFulfillment.messages.items.playAudio field.
  • Added spec.entryFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.eventHandlers.items.triggerFulfillment.conditionalCases field.
  • Added spec.eventHandlers.items.triggerFulfillment.setParameterActions field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.channel field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.payload field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.eventHandlers.items.triggerFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.form.parameters.items.defaultValue field.
  • Added spec.form.parameters.items.fillBehavior.repromptEventHandlers field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.conditionalCases field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.setParameterActions field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.channel field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.conversationSuccess field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.outputAudioText field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.payload field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.playAudio field.
  • Added spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.telephonyTransferCall field.
  • Added spec.transitionRoutes.items.triggerFulfillment.conditionalCases field.
  • Added spec.transitionRoutes.items.triggerFulfillment.setParameterActions field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.channel field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.conversationSuccess field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.liveAgentHandoff field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.outputAudioText field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.payload field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.playAudio field.
  • Added spec.transitionRoutes.items.triggerFulfillment.messages.items.telephonyTransferCall field.
• Resource RunJob(v1beta1):
  • spec.template.template.volumes[].secret.items[].mode is now optional.
• Resource SecretManagerSecret(v1beta1):
  • Added spec.replication.auto field.
• Resource SecretManagerSecretVersion(v1beta1):
  • Added spec.deletionPolicy field.
• Resource StorageBucket(v1beta1):
  • spec.autoclass.enabled is now mutable.
• Resource VertexAIIndexEndpoint(v1alpha1):
  • Added spec.publicEndpointEnabled field.
  • Added status.publicEndpointDomainName field.

1.109.0

• Added name validation for the customizable ControllerResource CRDs.
• Field spec.containers is no longer required in the customizable ControllerResource CRDs.
• Added support for CloudIOTDeviceRegistry (v1alpha1) resource.
• Added support for ComputeRegionSSLPolicy (v1alpha1) resource.
• Added support for VertexAIIndexEndpoint (v1alpha1) resource.
• Resource BigtableGCPolicy(v1beta1):
  • Fixed a bug that generates unexpected diff when mode and gcRules
    are both specified.
  • Fixed a bug that generates unexpected diff when maxAge in
    gcRules is specified with units larger than hours.
• Resource AlloyDBCluster(v1alpha1):
  • Added spec.continuousBackupConfig field.
  • Added spec.restoreBackupSource field.
  • Added spec.restoreContinuousBackupSource field.
  • Added status.continuousBackupInfo field.
• Resource ArtifactRegistryRepository(v1beta1):
  • Added spec.cleanupPolicies field.
  • Added spec.cleanupPolicyDryRun field.
• Resource BigQueryTable(v1beta1):
  • Added spec.maxStaleness field.
  • Added spec.externalDataConfiguration.fileSetSpecType field.
• Resource CloudBuildTrigger(v1beta1):
  • Added spec.gitFileSource.bitbucketServerConfigRef field.
  • Added spec.sourceToBuild.bitbucketServerConfigRef field.
• Resource CloudFunctions2Function(v1alpha1):
  • Added spec.kmsKeyName field.
• Resource ComputeAddress(v1beta1):
  • Added spec.ipv6EndpointType field.
• Resource ComputeBackendService(v1beta1):
  • Added spec.securityPolicy field.
  • Added spec.connectionTrackingPolicy.enableStrongAffinity field.
• Resource ComputeInstance(v1beta1):
  • Added spec.networkInterface.items.ipv6AccessConfig.items.name field.
  • Added spec.scheduling.localSsdRecoveryTimeout field.
• Resource ComputeInstanceTemplate(v1beta1):
  • Added spec.disk.items.provisionedIops field.
  • Added spec.networkInterface.items.ipv6AccessConfig.items.name field.
  • Added spec.scheduling.localSsdRecoveryTimeout field.
• Resource ComputeSecurityPolicy(v1beta1):
  • Added spec.advancedOptionsConfig.userIpRequestHeaders field.
• Resource ComputeTargetInstance(v1beta1):
  • Added spec.securityPolicyRef field.
• Resource ComputeTargetPool(v1beta1):
  • Added spec.securityPolicyRef field.
• Resource ContainerCluster(v1beta1):
  • Added spec.allowNetAdmin field.
  • Added spec.enableK8sBetaApis field.
  • Added spec.enableMultiNetworking field.
  • Added spec.ipAllocationPolicy.additionalPodRangesConfig field.
  • Added spec.monitoringConfig.advancedDatapathObservabilityConfig field.
  • Added spec.nodeConfig.hostMaintenancePolicy field.
• Resource ContainerNodePool(v1beta1):
  • Added spec.networkConfig.additionalNodeNetworkConfigs field.
  • Added spec.networkConfig.additionalPodNetworkConfigs field.
  • Added spec.nodeConfig.hostMaintenancePolicy field.
  • Added spec.placementPolicy.policyNameRef field.
• Resource DNSManagedZone(v1beta1):
  • Removed spec.privateVisibilityConfig.required field.
• Resource EventarcTrigger(v1beta1):
  • Added spec.eventDataContentType field.
• Resource FirebaseAndroidApp(v1alpha1):
  • Added spec.apiKeyId field.
• Resource FirebaseWebApp(v1alpha1):
  • Added spec.apiKeyId field.
• Resource HealthcareFHIRStore(v1alpha1):
  • Added spec.defaultSearchHandlingStrict field.
  • Added spec.notificationConfigs.items.sendPreviousResourceOnDelete field.
  • Added spec.streamConfigs.items.bigqueryDestination.schemaConfig.lastUpdatedPartitionConfig field.
• Resource IAMWorkforcePoolProvider(v1beta1):
  • Added spec.oidc.clientSecret field.
  • Added spec.oidc.jwksJson field.
  • Added spec.oidc.webSsoConfig.additionalScopes field.
  • Added status.oidc field.
• Resource MonitoringAlertPolicy(v1beta1):
  • Added spec.conditions.items.conditionPrometheusQueryLanguage field.
• Resource PubSubSubscription(v1beta1):
  • Added spec.cloudStorageConfig field.
  • Added spec.pushConfig.noWrapper field.
• Resource RunJob(v1beta1):
  • Added status.createTime field.
  • Added status.creator field.
  • Added status.deleteTime field.
  • Added status.expireTime field.
  • Added status.lastModifier field.
  • Added status.updateTime field.
• Resource SecretManagerSecret(v1beta1):
  • Added spec.annotations field.
  • Added spec.versionAliases field.
• Resource SpannerDatabase(v1beta1):
  • Added spec.enableDropProtection field.
• Resource SQLInstance(v1beta1):
  • Added spec.settings.ipConfiguration.pscConfig field.
  • Added status.dnsName field.
  • Added status.pscServiceAttachmentLink field.
• Resource WorkstationsWorkstationCluster(v1alpha1):
  • Added spec.privateClusterConfig.allowedProjects field.
• Fixed spec.webhookConfig.secretRef field in CloudBuildTrigger.