Config Connector release notes

Config Connector version 1.154.1 is now available.

New Alpha Resources (Direct Reconciler):

• ApigeeApiProduct
  • Manage Apigee API products to bundle APIs and make them available to developers.
• ApigeeRegistryApi
  • Manage Apigee Registry APIs to catalog and manage APIs.
• ApigeeRegistryArtifact
  • Manage Apigee Registry artifacts associated with APIs, versions, or specs.
• APIHubExternalAPI
  • Manage API Hub external APIs to track APIs hosted outside of Google Cloud.
• APIHubInstance
  • Manage API Hub instances to enable enterprise API management.
• AppOptimizeReport
  • Manage App Hub Optimize reports.
• ArtifactRegistryVPCSCConfig
  • Manage Artifact Registry VPC Service Controls configurations to secure repository access.
• BigQueryMigrationMigrationWorkflow
  • Manage BigQuery Migration workflows to orchestrate data migration to BigQuery.
• BlockchainNodeEngineBlockchainNode
  • Manage Blockchain Node Engine blockchain nodes to deploy and manage dedicated blockchain nodes.
• CCInsightsConversation
  • Manage Contact Center Insights conversations to analyze customer interactions.
• CCInsightsIssueModel
  • Manage Contact Center Insights issue models to categorize conversation topics.
• CCInsightsPhraseMatcher
  • Manage Contact Center Insights phrase matchers to detect specific phrases in conversations.
• CESApp
  • Manage Consumer Experience Suite (CES) applications.
• CloudBuildConnection
  • Manage Cloud Build 2nd gen connections to integrate external source repositories.
• CloudSecurityComplianceFramework
  • Manage Cloud Security Compliance frameworks.
• ConnectorsConnection
  • Manage Integration Connectors connections to connect to SaaS, databases, and enterprise systems.
• ContentWarehouseDocument
  • Manage Document AI Warehouse documents.
• ContentWarehouseRuleSet
  • Manage Document AI Warehouse rule sets to enforce document policies.
• ContentWarehouseSynonymSet
  • Manage Document AI Warehouse synonym sets to expand search queries.
• DatabaseMigrationPrivateConnection
  • Manage Database Migration Service private connections to securely connect source databases to Google Cloud.
• DataformFolder
  • Manage Dataform folders in Dataform repositories.
• DataformTeamFolder
  • Manage Dataform team folders to organize repository assets.
• DataLabelingDataset
  • Manage AI Platform Data Labeling datasets for annotating training data.
• DataLabelingEvaluationJob
  • Manage AI Platform Data Labeling evaluation jobs to assess model quality.
• DataLineageProcess
  • Manage Dataplex Data Lineage processes to track data origin and movement.
• DataplexAspectType
  • Manage Dataplex aspect types to define metadata schemas.
• DataplexDataAttributeBinding
  • Manage Dataplex data attribute bindings to map security and governance attributes to assets.
• DataplexDataScan
  • Manage Dataplex data scans for data profiling and quality.
• DataplexDataTaxonomy
  • Manage Dataplex data taxonomies to organize business metadata.
• DataplexGlossary
  • Manage Dataplex business glossaries for consistent vocabulary.
• DataplexMetadataJob
  • Manage Dataplex metadata jobs for metadata extraction.
• DevConnectConnection
  • Manage Developer Connect connections to securely link third-party Git hosts.
• DialogflowConversationDataset
  • Manage Dialogflow conversation datasets for agent training.
• DialogflowSecuritySettings
  • Manage Dialogflow security settings for data redaction and access control.
• DialogflowSipTrunk
  • Manage Dialogflow SIP trunks for telecom integration.
• DiscoveryEngineControl
  • Manage Discovery Engine controls to boost or filter search results.
• DiscoveryEngineSampleQuerySet
  • Manage Discovery Engine sample query sets to evaluate search performance.
• DLPConnection
  • Manage Sensitive Data Protection (DLP) connections.
• DLPDiscoveryConfig
  • Manage Sensitive Data Protection (DLP) discovery configurations for profiling data assets.
• EventarcGoogleApiSource
  • Manage Eventarc Google API sources to configure event routing.
• GeminiDataAnalyticsConversation
  • Manage Gemini Data Analytics conversations.
• GKEBackupBackupChannel
  • Manage Backup for GKE backup channels.
• LiveStreamAsset
  • Manage Live Stream assets for processing live video.
• ManagedKafkaConnectCluster
  • Manage Apache Kafka for BigQuery connections.
• MigrationCenterGroup
  • Manage Migration Center groups to organize assets for migration assessment.
• NetworkSecurityAddressGroup
  • Manage Network Security address groups to define reusable network criteria.
• NetworkSecurityAuthzPolicy
  • Manage Network Security authorization policies to secure network paths.
• NetworkSecurityFirewallEndpoint
  • Manage Network Security firewall endpoints for Cloud Firewall Plus threat inspection.
• NetworkSecurityFirewallEndpointAssociation
  • Manage Network Security firewall endpoint associations to apply threat inspection to networks.
• NetworkSecurityGatewaySecurityPolicy
  • Manage Network Security gateway security policies for Secure Web Proxy configurations.
• NetworkSecurityPartnerSSEGateway
  • Manage Network Security partner Secure Service Edge (SSE) gateways.
• NetworkSecurityPartnerSSERealm
  • Manage Network Security partner Secure Service Edge (SSE) realms.
• NetworkSecuritySecurityProfile
  • Manage Network Security security profiles to group threat prevention policies.
• NetworkSecurityTLSInspectionPolicy
  • Manage Network Security TLS inspection policies to inspect encrypted traffic.
• NetworkServicesAuthzExtension
  • Manage Network Services authorization extensions to integrate third-party callouts.
• NotebooksSchedule
  • Manage Vertex AI Workbench schedules to run automated notebooks.
• RedisClusterEndpoint
  • Manage Google Cloud Memorystore for Redis Cluster endpoints.
• RunWorkerPool
  • Manage Cloud Run worker pools for long-running non-HTTP workloads.
• SaasServiceMgmtRelease
  • Manage SaaS Service Management releases.
• SQLAdminBackup
  • Manage Cloud SQL backups (read-only/reference representation).
• StorageInsightsDatasetConfig
  • Manage Storage Insights dataset configurations to generate storage inventories.
• TestingDeviceSession
  • Manage Firebase Test Lab device sessions.
• TranslateAdaptiveMtDataset
  • Manage Cloud Translation adaptive machine translation datasets.
• VectorSearchCollection
  • Manage Vertex AI Vector Search collections.
• VertexAIFeatureGroup
  • Manage Vertex AI Feature Store feature groups to organize features.
• VertexAIFeatureOnlineStore
  • Manage Vertex AI Feature Store feature online stores for low-latency serving.
• VertexAIPipelineJob
  • Manage Vertex AI pipeline jobs to run machine learning pipelines.
• VertexAISpecialistPool
  • Manage Vertex AI specialist pools for human labeling.
• VertexAIStudy
  • Manage Vertex AI Vizier studies for hyperparameter tuning.
• VertexAITuningJob
  • Manage Vertex AI model tuning jobs for model customization.
• VideoStitcherCDNKey
  • Manage Video Stitcher CDN keys to authenticate to external CDNs.
• VisionProduct
  • Manage Cloud Vision products for product search cataloging.
• VMwareEnginePrivateConnection
  • Manage VMware Engine private connections to connect private clouds to other services.

New Fields:

• ComputeSubnetwork
  • Added spec.reservedInternalRange field.
• NetworkConnectivityInternalRange
  • Added spec.allocationOptions field.
• ComputeNetwork
  • Added spec.networkProfile field.
• ComputeSecurityPolicy
  • Added spec.region field.
• DNSRecordSet
  • Added support for routing policy healthCheckRef and rrdatasRefs fields.
• ComputeAddress
  • Added spec.ipCollection field.
• ComputeURLMap
  • Added spec.defaultCustomErrorResponsePolicy field.
  • Added spec.test[].expectedOutputUrl and spec.test[].expectedRedirectResponseCode fields.
• RedisCluster
  • Added spec.crossClusterReplicationConfig field.
• MonitoringAlertPolicy
  • Added spec.conditions[].conditionSql field (SQL Condition).
• StorageBucket
  • Added spec.ipFilter field.
• PubSubTopic
  • Added spec.messageStoragePolicy.enforceInTransit field.
• ComputeRouterNAT
  • Added Private NAT feature support.

Reconciliation Improvements:

We have added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object.

• BigQueryReservationCapacityCommitment
• BigtableGCPolicy
• BillingBudgetsBudget
• CertificateManagerCertificateMap
• CertificateManagerCertificateMapEntry
• ComputeAddress
• ComputeAutoscaler
• ComputeBackendServiceSignedURLKey
• ComputeDisk
• ComputeDiskResourcePolicyAttachment
• ComputeExternalVPNGateway
• ComputeFirewall
• ComputeFirewallPolicy
• ComputeHTTPHealthCheck
• ComputeHTTPSHealthCheck
• ComputeImage
• ComputeInstance
• ComputeInstanceGroup
• ComputeInstanceGroupManager
• ComputeNetwork
• ComputeNodeTemplate
• ComputeRoute
• ComputeRouter
• ComputeRouterInterface
• ComputeRouterNAT
• ComputeSSLPolicy
• ComputeSecurityPolicy
• ComputeTargetHTTPSProxy
• ComputeURLMap
• DataflowJob
• DataprocAutoscalingPolicy
• DataprocCluster
• DNSResponsePolicy
• KMSCryptoKey
• KMSKeyRing
• LoggingLogExclusion
• MonitoringAlertPolicy
• NetworkServicesGateway
• PrivateCACertificateAuthority
• PrivateCACertificateTemplate
• PubSubSubscription
• RecaptchaEnterpriseKey
• RedisInstance
• ServiceDirectoryEndpoint
• ServiceDirectoryNamespace
• Service
• ServiceIdentity

Bug Fixes:

• ComposerEnvironment: Fix storageConfig.bucketRef mapping.
• MemorystoreInstance: Prevent infinite reconciliation drift loop by aligning connections list length.
• MemorystoreInstance: Prevent false drift and update attempts on unspecified immutable fields.
• ComputeBackendService: Fix config-connector export tool to export backend field.
• KMSAutokeyConfig: Clean up and improve autokey config identity and deletion resolution.
• BigQuery: Fix perpetual diff on tables inheriting dataset encryption.
• NotebooksInstance: Fix direct controller for NotebookInstance to resolve references.

Config Connector version 1.153.0 is now available.

New Beta Resources (Direct Reconciler):

• OrgPolicyPolicy
  • Manage Organization Policies to configure constraints across your Google Cloud resources.

New Alpha Resources (Direct Reconciler):

• AIStreamsCluster
  • Manage AI Streams clusters to ingest and process real-time video streams.
• AutoMLDataset
  • Manage AutoML datasets in Vertex AI.
• CloudBatchResourceAllowance
  • Manage Batch resource allowances to control resource usage and limits for batch jobs.
• BeyondCorpClientGateway
  • Manage BeyondCorp client gateways to secure access to private applications.
• BigLakeDatabase
  • Manage BigLake databases for unified analytics over data lakes.
• BigtableAuthorizedView
  • Manage Bigtable authorized views to control access to specific subsets of data in a table.
• BigtableBackup
  • Manage Bigtable backups to preserve table data.
• BillingAccount
  • Manage Billing accounts (read-only/reference representation).
• CertificateManagerCertificateIssuanceConfig
  • Manage Certificate Manager certificate issuance configurations for automated certificate provisioning.
• CloudDeployDeployPolicy
  • Manage Cloud Deploy deploy policies to define deployment constraints and approvals.
• FirestoreBackupSchedule
  • Manage Firestore backup schedules for automated database backups.
• IAMDenyPolicy
  • Manage IAM deny policies to explicitly deny permissions.
• NetworkSecurityMirroringDeployment
  • Manage Network Security mirroring deployments to mirror network traffic for inspection.
• NetworkSecurityMirroringEndpointGroup
  • Manage Network Security mirroring endpoint groups to associate mirroring endpoints.
• SecurityCenterBigQueryExport
  • Manage Security Command Center BigQuery exports to automatically export findings to BigQuery.
• SecurityCenterMuteConfig
  • Manage Security Command Center mute configs to control finding visibility.
• VertexAIExampleStore
  • Manage Vertex AI example stores for managing example data.

New Fields:

• ContainerCluster
  • Added spec.confidentialNodes.confidentialInstanceType and spec.nodeConfig.confidentialNodes.confidentialInstanceType fields.
• ContainerNodePool
  • Added spec.nodeConfig.confidentialNodes.confidentialInstanceType field.
  • Added spec.nodeConfig.windowsNodeConfig field.
• RedisCluster
  • Added spec.automatedBackupConfig field.
  • Added spec.crossClusterReplicationConfig field.
  • Added spec.kmsKeyRef field.
  • Added spec.maintenancePolicy and status.observedState.maintenancePolicy fields.
  • Added status.observedState.pscServiceAttachments field.
• MemorystoreInstance
  • Added spec.maintenancePolicy and status.observedState.maintenancePolicy fields.
  • Added spec.kmsKeyRef field.
  • Added status.observedState.encryptionInfo field.

Reconciliation Improvements:

Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support:

• ArtifactRegistryRepository
• CertificateManagerCertificate
• DNSManagedZone
• DNSPolicy
• LoggingLogBucket
• LoggingLogSink
• LoggingLogView
• PubSubSchema
• PubSubTopic
• ServiceDirectoryService

Bug Fixes:

• #9114: ComposerEnvironment: Support resource reference resolution and fix drift on private environment config.
• #10414: ComputeBackendService: Prevent the automatic injection of subsetting: { policy: "NONE" } for regional backend services with INTERNAL_SELF_MANAGED load balancing scheme.
• #7222: DataprocCluster: userServiceAccountMapping field in DataprocCluster resources is now mutable.
• #9594: DNSPolicy: Fixes to DNSPolicy for real GCP integration.
• #10417: MemorystoreInstance: Fix crossInstanceReplicationConfig field, allowing replication roles to be synced and updated correctly.
• #8828: NetworkSecurity: Fix UpdateAuthorizationPolicy panic with empty updateMask.
• #7567: PrivilegedAccessManager: Fix mock drift in PrivilegedAccessManager by correcting Delete LRO and array element retention.
• #9602: RedisCluster: Fix permanent diff caused by automated backup configuration default value.

Config Connector version 1.152.0 is now available.

New Fields:

• ComputeReservation
  • Added spec.shareSettings field.
• ComputeForwardingRule
  • Added status.target field.

Reconciliation Improvements:

Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support:

• ComputeReservation
• FirestoreIndex

Bug Fixes:

• #8025: SQLInstance: Fixed case sensitivity in