Config Connector release notes

Config Connector version 1.155.1 is now available.

New Beta Resources (Direct Reconciler):

• DiscoveryEngineLicenseConfig

  • Manage Discovery Engine license configurations to manage application licenses.

• StorageManagedFolder

  • Manage Google Cloud Storage managed folders to apply granular access control policies to subsets of storage objects.

• VertexAITensorboardExperiment

  • Manage Vertex AI Tensorboard experiments to organize and track runs.

New Fields:

• BigtableTable

  • Added spec.automatedBackupPolicy field.

• CertificateManagerDNSAuthorization

  • Added spec.type field.

• ComputeForwardingRule

  • Added spec.target.redisClusterServiceAttachment field.

• ComputeURLMap

  • Added spec.tests[].expectedOutputURL field.
  • Added spec.tests[].expectedRedirectResponseCode field.

• ContainerCluster

  • Added spec.nodeConfig.kubeletConfig.imageGcLowThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageGcHighThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageMinimumGcAge field.
  • Added spec.nodeConfig.kubeletConfig.imageMaximumGcAge field.
  • Added spec.nodeConfig.containerdConfig field.
  • Added spec.inTransitEncryptionConfig field.
  • Added spec.disableL4LbFirewallReconciliation field.
  • Added spec.nodeConfig.resourceManagerTags field.
  • Added spec.nodePoolAutoConfig.resourceManagerTags field.

• ContainerNodePool

  • Added spec.nodeConfig.kubeletConfig.imageGcLowThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageGcHighThresholdPercent field.
  • Added spec.nodeConfig.kubeletConfig.imageMinimumGcAge field.
  • Added spec.nodeConfig.kubeletConfig.imageMaximumGcAge field.
  • Added spec.nodeConfig.containerdConfig field.
  • Added spec.nodeConfig.resourceManagerTags field.

• StorageBucket

  • Added spec.autoclass.terminalStorageClass field.
  • Added status.observedState.storageClass field.

New Features:

• Configurable metrics server address: Made the manager's built-in metrics server bind address configurable.
• Brownfield state comparison: Added a generic helper function to compare desired and actual states in brownfield resources, improving reconciliation reliability.
• Irregular shortname pluralization: Added support for irregular shortname pluralization of "corpus" to "corpora".

Reconciliation Improvements:

We have added support for direct reconciliation to more resources, with opt-in behavior. The API is unchanged. To use the direct reconciler, add the cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object.

• NetworkServicesHTTPRoute
  • Support direct reconciliation (opt-in).

Bug Fixes:

• ComposerEnvironment

  • Improved reconciliation, diffing, and update logic for ComposerEnvironment in the direct reconciler. (GitHub PR #12364)
  • Skip the update of a ComposerEnvironment when the state of the underlying Google Cloud Composer environment is not RUNNING. (GitHub PR #12365)

• ComputeReservation

  • Ignore diff for specificReservation.inUseCount to prevent infinite/unwanted reconciliations.

• RedisInstance

  • Marked MaintenanceSchedule field as output only to align with GCP's behavior.

• SQLInstance

  • Fixed legacy fuzzer roundtrip mismatch for PscAutoConnectionPolicyEnabled.

• CloudFunctions2Function

  • Declared source fields mutable-but-unreadable to avoid spurious diffs.

Config Connector version 1.154.1 is now available.

New Alpha Resources (Direct Reconciler):

• ApigeeApiProduct
  • Manage Apigee API products to bundle APIs and make them available to developers.
• ApigeeRegistryApi
  • Manage Apigee Registry APIs to catalog and manage APIs.
• ApigeeRegistryArtifact
  • Manage Apigee Registry artifacts associated with APIs, versions, or specs.
• APIHubExternalAPI
  • Manage API Hub external APIs to track APIs hosted outside of Google Cloud.
• APIHubInstance
  • Manage API Hub instances to enable enterprise API management.
• AppOptimizeReport
  • Manage App Hub Optimize reports.
• ArtifactRegistryVPCSCConfig
  • Manage Artifact Registry VPC Service Controls configurations to secure repository access.
• BigQueryMigrationMigrationWorkflow
  • Manage BigQuery Migration workflows to orchestrate data migration to BigQuery.
• BlockchainNodeEngineBlockchainNode
  • Manage Blockchain Node Engine blockchain nodes to deploy and manage dedicated blockchain nodes.
• CCInsightsConversation
  • Manage Contact Center Insights conversations to analyze customer interactions.
• CCInsightsIssueModel
  • Manage Contact Center Insights issue models to categorize conversation topics.
• CCInsightsPhraseMatcher
  • Manage Contact Center Insights phrase matchers to detect specific phrases in conversations.
• CESApp
  • Manage Consumer Experience Suite (CES) applications.
• CloudBuildConnection
  • Manage Cloud Build 2nd gen connections to integrate external source repositories.
• CloudSecurityComplianceFramework
  • Manage Cloud Security Compliance frameworks.
• ConnectorsConnection
  • Manage Integration Connectors connections to connect to SaaS, databases, and enterprise systems.
• ContentWarehouseDocument
  • Manage Document AI Warehouse documents.
• ContentWarehouseRuleSet
  • Manage Document AI Warehouse rule sets to enforce document policies.
• ContentWarehouseSynonymSet
  • Manage Document AI Warehouse synonym sets to expand search queries.
• DatabaseMigrationPrivateConnection
  • Manage Database Migration Service private connections to securely connect source databases to Google Cloud.
• DataformFolder
  • Manage Dataform folders in Dataform repositories.
• DataformTeamFolder
  • Manage Dataform team folders to organize repository assets.
• DataLabelingDataset
  • Manage AI Platform Data Labeling datasets for annotating training data.
• DataLabelingEvaluationJob
  • Manage AI Platform Data Labeling evaluation jobs to assess model quality.
• DataLineageProcess
  • Manage Dataplex Data Lineage processes to track data origin and movement.
• DataplexAspectType
  • Manage Dataplex aspect types to define metadata schemas.
• DataplexDataAttributeBinding
  • Manage Dataplex data attribute bindings to map security and governance attributes to assets.
• DataplexDataScan
  • Manage Dataplex data scans for data profiling and quality.
• DataplexDataTaxonomy
  • Manage Dataplex data taxonomies to organize business metadata.
• DataplexGlossary
  • Manage Dataplex business glossaries for consistent vocabulary.
• DataplexMetadataJob
  • Manage Dataplex metadata jobs for metadata extraction.
• DevConnectConnection
  • Manage Developer Connect connections to securely link third-party Git hosts.
• DialogflowConversationDataset
  • Manage Dialogflow conversation datasets for agent training.
• DialogflowSecuritySettings
  • Manage Dialogflow security settings for data redaction and access control.
• DialogflowSipTrunk
  • Manage Dialogflow SIP trunks for telecom integration.
• DiscoveryEngineControl
  • Manage Discovery Engine controls to boost or filter search results.
• DiscoveryEngineSampleQuerySet
  • Manage Discovery Engine sample query sets to evaluate search performance.
• DLPConnection
  • Manage Sensitive Data Protection (DLP) connections.
• DLPDiscoveryConfig
  • Manage Sensitive Data Protection (DLP) discovery configurations for profiling data assets.
• EventarcGoogleApiSource
  • Manage Eventarc Google API sources to configure event routing.
• GeminiDataAnalyticsConversation
  • Manage Gemini Data Analytics conversations.
• GKEBackupBackupChannel
  • Manage Backup for GKE backup channels.
• LiveStreamAsset
  • Manage Live Stream assets for processing live video.
• ManagedKafkaConnectCluster
  • Manage Apache Kafka for BigQuery connections.
• MigrationCenterGroup
  • Manage Migration Center groups to organize assets for migration assessment.
• NetworkSecurityAddressGroup
  • Manage Network Security address groups to define reusable network criteria.
• NetworkSecurityAuthzPolicy
  • Manage Network Security authorization policies to secure network paths.
• NetworkSecurityFirewallEndpoint
  • Manage Network Security firewall endpoints for Cloud Firewall Plus threat inspection.
• NetworkSecurityFirewallEndpointAssociation
  • Manage Network Security firewall endpoint associations to apply threat inspection to networks.
• NetworkSecurityGatewaySecurityPolicy
  • Manage Network Security gateway security policies for Secure Web Proxy configurations.
• NetworkSecurityPartnerSSEGateway
  • Manage Network Security partner Secure Service Edge (SSE) gateways.
• NetworkSecurityPartnerSSERealm
  • Manage Network Security partner Secure Service Edge (SSE) realms.
• NetworkSecuritySecurityProfile
  • Manage Network Security security profiles to group threat prevention policies.
• NetworkSecurityTLSInspectionPolicy
  • Manage Network Security TLS inspection policies to inspect encrypted traffic.
• NetworkServicesAuthzExtension
  • Manage Network Services authorization extensions to integrate third-party callouts.
• NotebooksSchedule
  • Manage Vertex AI Workbench schedules to run automated notebooks.
• RedisClusterEndpoint
  • Manage Google Cloud Memorystore for Redis Cluster endpoints.
• RunWorkerPool
  • Manage Cloud Run worker pools for long-running non-HTTP workloads.
• SaasServiceMgmtRelease
  • Manage SaaS Service Management releases.
• SQLAdminBackup
  • Manage Cloud SQL backups (read-only/reference representation).
• StorageInsightsDatasetConfig
  • Manage Storage Insights dataset configurations to generate storage inventories.
• TestingDeviceSession
  • Manage Firebase Test Lab device sessions.
• TranslateAdaptiveMtDataset
  • Manage Cloud Translation adaptive machine translation datasets.
• VectorSearchCollection
  • Manage Vertex AI Vector Search collections.
• VertexAIFeatureGroup
  • Manage Vertex AI Feature Store feature groups to organize features.
• VertexAIFeatureOnlineStore
  • Manage Vertex AI Feature Store feature online stores for low-latency serving.
• VertexAIPipelineJob
  • Manage Vertex AI pipeline jobs to run machine learning pipelines.
• VertexAISpecialistPool
  • Manage Vertex AI specialist pools for human labeling.
• VertexAIStudy
  • Manage Vertex AI Vizier studies for hyperparameter tuning.
• VertexAITuningJob
  • Manage Vertex AI model tuning jobs for model customization.
• VideoStitcherCDNKey
  • Manage Video Stitcher CDN keys to authenticate to external CDNs.
• VisionProduct
  • Manage Cloud Vision products for product search cataloging.
• VMwareEnginePrivateConnection
  • Manage VMware Engine private connections to connect private clouds to other services.

New Fields:

• ComputeSubnetwork
  • Added spec.reservedInternalRange field.
• NetworkConnectivityInternalRange
  • Added spec.allocationOptions field.
• ComputeNetwork
  • Added spec.networkProfile field.
• ComputeSecurityPolicy
  • Added spec.region field.
• DNSRecordSet
  • Added support for routing policy healthCheckRef and rrdatasRefs fields.
• ComputeAddress
  • Added spec.ipCollection field.
• ComputeURLMap
  • Added spec.defaultCustomErrorResponsePolicy field.
  • Added spec.test[].expectedOutputUrl and spec.test[].expectedRedirectResponseCode fields.
• RedisCluster
  • Added spec.crossClusterReplicationConfig field.
• MonitoringAlertPolicy
  • Added spec.conditions[].conditionSql field (SQL Condition).
• StorageBucket
  • Added spec.ipFilter field.
• PubSubTopic
  • Added spec.messageStoragePolicy.enforceInTransit field.
• ComputeRouterNAT
  • Added Private NAT feature support.

Reconciliation Improvements:

We have added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object.