Bump GCP provider version to 7.33.0 (#4004)

* Bump provider version * Fix inventories * Ignore certificates in inventories * Add header to cloud run recipe * Optimize file copy for example-based tests * Remove local references
2026-05-31 23:04:01 +02:00
parent 5d1f5a0431
commit d8d66583f8
254 changed files with 2081 additions and 1042 deletions
--- a/tests/modules/cloud_function_v2/examples/custom-bundle.yaml
+++ b/tests/modules/cloud_function_v2/examples/custom-bundle.yaml
@@ -1,10 +1,10 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
-#      http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
@@ -45,6 +45,7 @@ values:
        storage_source:
        - bucket: bucket
      worker_pool: null
+    deletion_policy: DELETE
    description: Terraform managed.
    effective_labels:
      goog-terraform-provisioned: 'true'
@@ -59,6 +60,7 @@ values:
      available_cpu: '0.166'
      available_memory: 256M
      binary_authorization_policy: null
+      direct_vpc_network_interface: []
      environment_variables:
        LOG_EXECUTION_ID: 'true'
      ingress_settings: ALLOW_ALL
@@ -86,6 +88,7 @@ values:
  module.cf-http.google_service_account.service_account[0]:
    account_id: test-cf-http
    create_ignore_already_exists: null
+    deletion_policy: DELETE
    description: null
    disabled: false
    display_name: test-cf-http
@@ -99,8 +102,9 @@ values:
    content_disposition: null
    content_encoding: null
    content_language: null
+    contexts: []
    customer_encryption: []
-    deletion_policy: null
+    deletion_policy: DELETE
    detect_md5hash: null
    event_based_hold: null
    force_empty_content_type: null
@@ -116,3 +120,7 @@ counts:
  google_project_iam_member: 4
  google_service_account: 1
  google_storage_bucket_object: 1
+  modules: 1
+  resources: 8
+
+outputs: {}
--- a/tests/modules/cloud_function_v2/examples/http-trigger.yaml
+++ b/tests/modules/cloud_function_v2/examples/http-trigger.yaml
@@ -1,10 +1,10 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
-#      http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
@@ -44,6 +44,7 @@ values:
        storage_source:
        - bucket: bucket
      worker_pool: null
+    deletion_policy: DELETE
    description: Terraform managed.
    effective_labels:
      goog-terraform-provisioned: 'true'
@@ -58,6 +59,7 @@ values:
      available_cpu: '0.166'
      available_memory: 256M
      binary_authorization_policy: null
+      direct_vpc_network_interface: []
      environment_variables:
        LOG_EXECUTION_ID: 'true'
      ingress_settings: ALLOW_ALL
@@ -85,6 +87,7 @@ values:
  module.cf-http.google_service_account.service_account[0]:
    account_id: test-cf-http
    create_ignore_already_exists: null
+    deletion_policy: DELETE
    description: null
    disabled: false
    display_name: test-cf-http
@@ -98,8 +101,9 @@ values:
    content_disposition: null
    content_encoding: null
    content_language: null
+    contexts: []
    customer_encryption: []
-    deletion_policy: null
+    deletion_policy: DELETE
    detect_md5hash: null
    event_based_hold: null
    force_empty_content_type: null
@@ -115,6 +119,7 @@ counts:
  google_project_iam_member: 4
  google_service_account: 1
  google_storage_bucket_object: 1
-
+  modules: 1
+  resources: 8

 outputs: {}
--- a/tests/modules/cloud_function_v2/examples/private-build-pool.yaml
+++ b/tests/modules/cloud_function_v2/examples/private-build-pool.yaml
@@ -1,10 +1,10 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
-#      http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
@@ -15,6 +15,7 @@
 values:
  google_cloudbuild_worker_pool.pool:
    annotations: null
+    deletion_policy: DELETE
    display_name: null
    location: europe-west9
    name: custom-pool
@@ -24,6 +25,7 @@ values:
    timeouts: null
    worker_config:
    - disk_size_gb: 100
+      enable_nested_virtualization: null
      machine_type: e2-standard-4
      no_external_ip: false
  google_project_iam_member.artifact_writer:
@@ -56,6 +58,7 @@ values:
      - repo_source: []
        storage_source:
        - bucket: bucket
+    deletion_policy: DELETE
    description: Terraform managed.
    effective_labels:
      goog-terraform-provisioned: 'true'
@@ -70,6 +73,7 @@ values:
      available_cpu: '0.166'
      available_memory: 256M
      binary_authorization_policy: null
+      direct_vpc_network_interface: []
      environment_variables:
        LOG_EXECUTION_ID: 'true'
      ingress_settings: ALLOW_ALL
@@ -97,6 +101,7 @@ values:
  module.cf-http.google_service_account.service_account[0]:
    account_id: test-cf-http
    create_ignore_already_exists: null
+    deletion_policy: DELETE
    description: null
    disabled: false
    display_name: test-cf-http
@@ -110,8 +115,9 @@ values:
    content_disposition: null
    content_encoding: null
    content_language: null
+    contexts: []
    customer_encryption: []
-    deletion_policy: null
+    deletion_policy: DELETE
    detect_md5hash: null
    event_based_hold: null
    force_empty_content_type: null
@@ -128,3 +134,7 @@ counts:
  google_project_iam_member: 4
  google_service_account: 1
  google_storage_bucket_object: 1
+  modules: 1
+  resources: 9
+
+outputs: {}
--- a/tests/modules/cloud_function_v2/examples/secrets.yaml
+++ b/tests/modules/cloud_function_v2/examples/secrets.yaml
@@ -1,10 +1,10 @@
-# Copyright 2025 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
-#      http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
@@ -12,26 +12,89 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.

-# yamllint disable rule:indentation
 values:
+  google_project_iam_member.artifact_writer:
+    condition: []
+    member: serviceAccount:123-compute@developer.gserviceaccount.com
+    project: project-id
+    role: roles/artifactregistry.createOnPushWriter
+  google_project_iam_member.bucket_default_compute_account_grant:
+    condition: []
+    member: serviceAccount:123-compute@developer.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.cf-http.data.archive_file.bundle[0]:
+    exclude_symlink_directories: null
+    excludes: null
+    output_file_mode: '0644'
+    output_path: /tmp/bundle-project-id-test-cf-http.zip
+    source: []
+    source_content: null
+    source_content_filename: null
+    source_dir: assets/sample-function/
+    source_file: null
+    type: zip
  module.cf-http.google_cloudfunctions2_function.function:
+    build_config:
+    - entry_point: main
+      on_deploy_update_policy: []
+      runtime: python310
+      source:
+      - repo_source: []
+        storage_source:
+        - bucket: bucket
+      worker_pool: null
+    deletion_policy: DELETE
+    description: Terraform managed.
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    event_trigger: []
+    kms_key_name: null
+    labels: null
+    location: europe-west8
    name: test-cf-http
+    project: project-id
    service_config:
-      - secret_environment_variables:
-          - key: VARIABLE_SECRET
-            project_id: project-id
-            # secret: var_secret # known after apply
-            version: latest
-        secret_volumes:
-          - mount_path: /app/secret
-            project_id: project-id
-            # secret: var_secret # known after apply
-            versions:
-              - {}
-        service_account_email: test-cf-http@project-id.iam.gserviceaccount.com
+    - all_traffic_on_latest_revision: true
+      available_cpu: '0.166'
+      available_memory: 256M
+      binary_authorization_policy: null
+      direct_vpc_network_interface: []
+      environment_variables:
+        LOG_EXECUTION_ID: 'true'
+      ingress_settings: ALLOW_ALL
+      max_instance_count: 1
+      min_instance_count: 0
+      secret_environment_variables:
+      - key: VARIABLE_SECRET
+        project_id: project-id
+        version: latest
+      secret_volumes:
+      - mount_path: /app/secret
+        project_id: project-id
+        versions:
+        - {}
+      service_account_email: test-cf-http@project-id.iam.gserviceaccount.com
+      timeout_seconds: 180
+      vpc_connector: null
+      vpc_connector_egress_settings: null
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+  module.cf-http.google_project_iam_member.default["roles/logging.logWriter"]:
+    condition: []
+    member: serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/logging.logWriter
+  module.cf-http.google_project_iam_member.default["roles/monitoring.metricWriter"]:
+    condition: []
+    member: serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/monitoring.metricWriter
  module.cf-http.google_service_account.service_account[0]:
    account_id: test-cf-http
    create_ignore_already_exists: null
+    deletion_policy: DELETE
    description: null
    disabled: false
    display_name: test-cf-http
@@ -39,17 +102,35 @@ values:
    member: serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com
    project: project-id
    timeouts: null
+  module.cf-http.google_storage_bucket_object.bundle[0]:
+    bucket: bucket
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    contexts: []
+    customer_encryption: []
+    deletion_policy: DELETE
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    retention: []
+    source: /tmp/bundle-project-id-test-cf-http.zip
+    temporary_hold: null
+    timeouts: null
  module.secret-manager.google_secret_manager_secret.default["credentials"]:
    annotations: null
+    deletion_policy: DELETE
    deletion_protection: false
    effective_labels:
      goog-terraform-provisioned: 'true'
    labels: null
    project: project-id
    replication:
-      - auto:
-        - customer_managed_encryption: []
-        user_managed: []
+    - auto:
+      - customer_managed_encryption: []
+      user_managed: []
    rotation: []
    secret_id: credentials
    tags: null
@@ -60,13 +141,12 @@ values:
    ttl: null
    version_aliases: null
    version_destroy_ttl: null
-  module.secret-manager.google_secret_manager_secret_iam_binding.authoritative["credentials.roles/secretmanager.secretAccessor"]:
-    condition: []
+  ? module.secret-manager.google_secret_manager_secret_iam_binding.authoritative["credentials.roles/secretmanager.secretAccessor"]
+  : condition: []
    members:
-      - serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com
+    - serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com
    role: roles/secretmanager.secretAccessor
  module.secret-manager.google_secret_manager_secret_version.default["credentials/v1"]:
-    deletion_policy: DELETE
    enabled: true
    is_secret_data_base64: false
    secret_data: manual foo bar spam
@@ -75,8 +155,15 @@ values:
    timeouts: null

 counts:
+  archive_file: 1
  google_cloudfunctions2_function: 1
+  google_project_iam_member: 4
  google_secret_manager_secret: 1
  google_secret_manager_secret_iam_binding: 1
  google_secret_manager_secret_version: 1
  google_service_account: 1
+  google_storage_bucket_object: 1
+  modules: 2
+  resources: 11
+
+outputs: {}